[Tue Nov 11 00:44:44.328027 2025] [:error] [pid 41825:tid 41892] [client 113.141.91.58:43244] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRIWfIr5hkwmQG_pQgD-ZAAAAEU"]
[Tue Nov 11 16:31:26.637335 2025] [:error] [pid 36580:tid 36662] [client 43.156.168.214:57242] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRL0XpaaFQZGE3H9yOGf7AAAAFg"]
[Tue Nov 11 18:47:33.742438 2025] [:error] [pid 36579:tid 36628] [client 223.25.63.33:50908] [client 223.25.63.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.25.63.33, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aRMURemuedRSntjwLw51vwAAABE"]
[Tue Nov 11 18:47:33.749469 2025] [proxy_fcgi:error] [pid 36579:tid 36628] [client 223.25.63.33:50908] AH01071: Got error 'Primary script unknown'
[Tue Nov 11 19:21:27.357445 2025] [autoindex:error] [pid 36578:tid 36587] [client 159.203.172.143:54922] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 19:36:38.878584 2025] [:error] [pid 36673:tid 36682] [client 203.2.64.59:36643] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRMfxivASiSDHs9bkfcKCQAAAIc"]
[Tue Nov 11 21:39:08.358180 2025] [:error] [pid 36580:tid 36655] [client 138.197.42.17:44074] [client 138.197.42.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRM8fJaaFQZGE3H9yOHucQAAAFE"]
[Wed Nov 12 00:11:51.869156 2025] [:error] [pid 47859:tid 47869] [client 138.197.42.17:54302] [client 138.197.42.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRNgR6RzLR7egYHK_4ekGgAAAAU"]
[Wed Nov 12 14:01:19.122917 2025] [:error] [pid 60096:tid 60131] [client 45.153.34.41:55938] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRQirzmzkhCvvk8DXOxW0wAAAIU"]
[Wed Nov 12 14:31:39.748109 2025] [:error] [pid 12744:tid 12763] [client 45.153.34.41:60870] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRQpy51cp_ouUvkFj0X1eAAAAQ8"]
[Wed Nov 12 15:42:33.260849 2025] [proxy_fcgi:error] [pid 12744:tid 12752] [client 14.231.145.230:59232] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 07:35:19.483895 2025] [:error] [pid 22223:tid 22267] [client 45.89.242.97:61317] [client 45.89.242.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aRUZt96it_tNBGH9EAE3wAAAAE4"]
[Thu Nov 13 08:18:29.704058 2025] [:error] [pid 22566:tid 22589] [client 112.211.80.187:59501] [client 112.211.80.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.211.80.187, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aRUj1TfdqWaUbu3e06-_qQAAARU"]
[Thu Nov 13 08:18:29.717413 2025] [proxy_fcgi:error] [pid 22566:tid 22589] [client 112.211.80.187:59501] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 10:04:51.831456 2025] [:error] [pid 32742:tid 32764] [client 106.227.49.113:55672] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRU8w4q0YAqHEz6MsZHzDgAAANQ"]
[Thu Nov 13 10:29:24.647047 2025] [:error] [pid 62303:tid 62320] [client 49.51.72.236:46822] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRVChL-hlFTtVrZw8jA3FwAAAI0"]
[Thu Nov 13 10:36:10.654978 2025] [:error] [pid 62215:tid 62230] [client 170.106.82.209:60378] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRVEGkvClof1c6XaOBUPdQAAAMs"]
[Thu Nov 13 11:46:03.349500 2025] [:error] [pid 6086:tid 6099] [client 49.51.203.164:52862] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRVUe39_6CRZzjZnAe2HLwAAAQo"]
[Thu Nov 13 16:30:33.243131 2025] [:error] [pid 6086:tid 6093] [client 180.110.203.108:35744] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRWXKX9_6CRZzjZnAe0ePwAAAQQ"]
[Thu Nov 13 18:42:09.700801 2025] [:error] [pid 44245:tid 44255] [client 43.131.36.84:57206] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRW2AYk7r-HKZdqw-dXafgAAAUQ"]
[Thu Nov 13 20:37:12.335204 2025] [:error] [pid 6086:tid 6107] [client 165.232.112.208:56555] [client 165.232.112.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.232.112.208, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aRXQ-H9_6CRZzjZnAe1WrwAAARI"]
[Thu Nov 13 20:37:12.347314 2025] [proxy_fcgi:error] [pid 6086:tid 6107] [client 165.232.112.208:56555] AH01071: Got error 'Primary script unknown'
[Thu Nov 13 21:57:36.249176 2025] [:error] [pid 4992:tid 5000] [client 54.254.207.95:48780] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aRXj0CmsutP7nusdj-CEOAAAAMQ"], referer: https://www.google.com/
[Thu Nov 13 21:57:36.445005 2025] [:error] [pid 4992:tid 5017] [client 54.254.207.95:48796] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aRXj0CmsutP7nusdj-CEOQAAANU"], referer: https://www.google.com/
[Thu Nov 13 21:57:36.641376 2025] [:error] [pid 4993:tid 5045] [client 54.254.207.95:48808] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "aRXj0Ml_cC0Js5xNCU1HDwAAABM"], referer: https://www.google.com/
[Thu Nov 13 21:57:36.842340 2025] [:error] [pid 4993:tid 5046] [client 54.254.207.95:48822] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "aRXj0Ml_cC0Js5xNCU1HEAAAABQ"], referer: https://www.google.com/
[Thu Nov 13 21:57:37.038302 2025] [:error] [pid 4992:tid 5013] [client 54.254.207.95:48838] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aRXj0SmsutP7nusdj-CEOwAAANE"], referer: https://www.google.com/
[Thu Nov 13 21:57:37.234673 2025] [:error] [pid 4992:tid 5004] [client 54.254.207.95:48860] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "aRXj0SmsutP7nusdj-CEPAAAAMg"], referer: https://www.google.com/
[Thu Nov 13 21:57:37.431731 2025] [:error] [pid 4993:tid 5035] [client 54.254.207.95:48886] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "aRXj0cl_cC0Js5xNCU1HEgAAAAk"], referer: https://www.google.com/
[Thu Nov 13 21:57:37.627261 2025] [:error] [pid 4993:tid 5034] [client 54.254.207.95:48898] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "aRXj0cl_cC0Js5xNCU1HFgAAAAg"], referer: https://www.google.com/
[Thu Nov 13 21:57:37.822423 2025] [:error] [pid 5086:tid 5105] [client 54.254.207.95:48930] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "aRXj0R_dsYLFCHw574iq8gAAARA"], referer: https://www.google.com/
[Thu Nov 13 21:57:38.021768 2025] [:error] [pid 4994:tid 5063] [client 54.254.207.95:48950] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "aRXj0gVaYoYtjfBbabUO_AAAAIo"], referer: https://www.google.com/
[Thu Nov 13 21:57:38.216965 2025] [:error] [pid 4994:tid 5076] [client 54.254.207.95:48958] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.sample"] [unique_id "aRXj0gVaYoYtjfBbabUO_gAAAJc"], referer: https://www.google.com/
[Thu Nov 13 21:57:38.413728 2025] [:error] [pid 4994:tid 5064] [client 54.254.207.95:48980] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "aRXj0gVaYoYtjfBbabUO_wAAAIs"], referer: https://www.google.com/
[Thu Nov 13 21:57:38.636786 2025] [:error] [pid 5086:tid 5101] [client 54.254.207.95:48992] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "aRXj0h_dsYLFCHw574iq9AAAAQw"], referer: https://www.google.com/
[Thu Nov 13 21:57:38.834809 2025] [:error] [pid 5086:tid 5099] [client 54.254.207.95:49016] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "aRXj0h_dsYLFCHw574iq9QAAAQo"], referer: https://www.google.com/
[Thu Nov 13 21:57:39.030528 2025] [:error] [pid 5086:tid 5113] [client 54.254.207.95:49038] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.orig"] [unique_id "aRXj0x_dsYLFCHw574iq-QAAARg"], referer: https://www.google.com/
[Thu Nov 13 21:57:39.693280 2025] [:error] [pid 4994:tid 5068] [client 54.254.207.95:49048] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.swp"] [unique_id "aRXj0wVaYoYtjfBbabUPBQAAAI8"], referer: https://www.google.com/
[Thu Nov 13 21:57:39.896429 2025] [:error] [pid 4993:tid 5043] [client 54.254.207.95:49076] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "aRXj08l_cC0Js5xNCU1HGgAAABE"], referer: https://www.google.com/
[Thu Nov 13 21:57:40.093429 2025] [:error] [pid 4993:tid 5050] [client 54.254.207.95:49086] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.tmp"] [unique_id "aRXj1Ml_cC0Js5xNCU1HGwAAABg"], referer: https://www.google.com/
[Thu Nov 13 21:57:40.288430 2025] [:error] [pid 4993:tid 5033] [client 54.254.207.95:49108] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "aRXj1Ml_cC0Js5xNCU1HHgAAAAc"], referer: https://www.google.com/
[Thu Nov 13 21:57:40.484746 2025] [:error] [pid 5086:tid 5093] [client 54.254.207.95:49122] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "aRXj1B_dsYLFCHw574iq_QAAAQQ"], referer: https://www.google.com/
[Thu Nov 13 21:57:40.681776 2025] [:error] [pid 4994:tid 5069] [client 54.254.207.95:49138] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env.save"] [unique_id "aRXj1AVaYoYtjfBbabUPBwAAAJA"], referer: https://www.google.com/
[Thu Nov 13 21:57:40.876662 2025] [:error] [pid 4992:tid 4997] [client 54.254.207.95:49152] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env.bak"] [unique_id "aRXj1CmsutP7nusdj-CEPgAAAME"], referer: https://www.google.com/
[Thu Nov 13 21:57:41.071894 2025] [:error] [pid 4992:tid 5018] [client 54.254.207.95:49178] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env.old"] [unique_id "aRXj1SmsutP7nusdj-CEPwAAANY"], referer: https://www.google.com/
[Thu Nov 13 21:57:41.267626 2025] [:error] [pid 4992:tid 5009] [client 54.254.207.95:49188] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "aRXj1SmsutP7nusdj-CEQAAAAM0"], referer: https://www.google.com/
[Thu Nov 13 21:57:41.584020 2025] [:error] [pid 4994:tid 5076] [client 54.254.207.95:49210] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env.save"] [unique_id "aRXj1QVaYoYtjfBbabUPCAAAAJc"], referer: https://www.google.com/
[Thu Nov 13 21:57:41.778537 2025] [:error] [pid 4993:tid 5037] [client 54.254.207.95:49224] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env.bak"] [unique_id "aRXj1cl_cC0Js5xNCU1HJgAAAAs"], referer: https://www.google.com/
[Thu Nov 13 21:57:41.973686 2025] [:error] [pid 4992:tid 4996] [client 54.254.207.95:49236] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env.old"] [unique_id "aRXj1SmsutP7nusdj-CEQwAAAMA"], referer: https://www.google.com/
[Thu Nov 13 21:57:42.170596 2025] [:error] [pid 4992:tid 5010] [client 54.254.207.95:49258] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "aRXj1imsutP7nusdj-CERAAAAM4"], referer: https://www.google.com/
[Thu Nov 13 21:57:42.365333 2025] [:error] [pid 4993:tid 5045] [client 54.254.207.95:49282] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env.save"] [unique_id "aRXj1sl_cC0Js5xNCU1HLAAAABM"], referer: https://www.google.com/
[Thu Nov 13 21:57:42.771883 2025] [:error] [pid 4992:tid 5004] [client 54.254.207.95:49320] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env.bak"] [unique_id "aRXj1imsutP7nusdj-CERwAAAMg"], referer: https://www.google.com/
[Thu Nov 13 21:57:42.968022 2025] [:error] [pid 4993:tid 5032] [client 54.254.207.95:49344] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env.old"] [unique_id "aRXj1sl_cC0Js5xNCU1HMAAAAAY"], referer: https://www.google.com/
[Thu Nov 13 21:57:43.164130 2025] [:error] [pid 4992:tid 5001] [client 54.254.207.95:49368] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env"] [unique_id "aRXj1ymsutP7nusdj-CESAAAAMU"], referer: https://www.google.com/
[Thu Nov 13 21:57:43.360128 2025] [:error] [pid 4993:tid 5034] [client 54.254.207.95:49388] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env.save"] [unique_id "aRXj18l_cC0Js5xNCU1HNAAAAAg"], referer: https://www.google.com/
[Thu Nov 13 21:57:43.563402 2025] [:error] [pid 4993:tid 5037] [client 54.254.207.95:49406] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env.bak"] [unique_id "aRXj18l_cC0Js5xNCU1HNgAAAAs"], referer: https://www.google.com/
[Thu Nov 13 21:57:43.888862 2025] [:error] [pid 4992:tid 5000] [client 54.254.207.95:49420] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env.old"] [unique_id "aRXj1ymsutP7nusdj-CESQAAAMQ"], referer: https://www.google.com/
[Thu Nov 13 21:57:44.091792 2025] [:error] [pid 4993:tid 5028] [client 54.254.207.95:49454] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/src/.env"] [unique_id "aRXj2Ml_cC0Js5xNCU1HOgAAAAI"], referer: https://www.google.com/
[Thu Nov 13 21:57:44.287885 2025] [:error] [pid 4994:tid 5062] [client 54.254.207.95:49464] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/src/.env.save"] [unique_id "aRXj2AVaYoYtjfBbabUPCQAAAIk"], referer: https://www.google.com/
[Thu Nov 13 21:57:44.483761 2025] [:error] [pid 4992:tid 5002] [client 54.254.207.95:49488] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/src/.env.bak"] [unique_id "aRXj2CmsutP7nusdj-CETAAAAMY"], referer: https://www.google.com/
[Thu Nov 13 21:57:44.679319 2025] [:error] [pid 4993:tid 5027] [client 54.254.207.95:49500] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/src/.env.old"] [unique_id "aRXj2Ml_cC0Js5xNCU1HPgAAAAE"], referer: https://www.google.com/
[Thu Nov 13 21:57:44.888960 2025] [:error] [pid 4993:tid 5049] [client 54.254.207.95:49536] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "aRXj2Ml_cC0Js5xNCU1HQQAAABc"], referer: https://www.google.com/
[Thu Nov 13 21:57:45.083440 2025] [:error] [pid 4992:tid 5015] [client 54.254.207.95:49544] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env.save"] [unique_id "aRXj2SmsutP7nusdj-CETQAAANM"], referer: https://www.google.com/
[Thu Nov 13 21:57:45.469816 2025] [:error] [pid 4994:tid 5072] [client 54.254.207.95:49564] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env.bak"] [unique_id "aRXj2QVaYoYtjfBbabUPCgAAAJM"], referer: https://www.google.com/
[Thu Nov 13 21:57:45.664242 2025] [:error] [pid 4994:tid 5077] [client 54.254.207.95:49594] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env.old"] [unique_id "aRXj2QVaYoYtjfBbabUPCwAAAJg"], referer: https://www.google.com/
[Thu Nov 13 21:57:45.860320 2025] [:error] [pid 4992:tid 5006] [client 54.254.207.95:49598] [client 54.254.207.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/assets/.env"] [unique_id "aRXj2SmsutP7nusdj-CETwAAAMo"], referer: https://www.google.com/
[Thu Nov 13 23:12:06.201503 2025] [:error] [pid 19872:tid 19891] [client 3.96.205.69:39540] [client 3.96.205.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRX1RsusrN1b6ZJ_vbswaAAAAE4"]
[Thu Nov 13 23:25:37.920891 2025] [:error] [pid 28868:tid 28893] [client 13.49.77.138:35230] [client 13.49.77.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRX4cYq9fgBJ6LAEEDzlDQAAAVc"]
[Fri Nov 14 08:08:47.830712 2025] [:error] [pid 47630:tid 47652] [client 2.57.122.173:60264] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRZzD8xXXNBfWgpfVJ5m8AAAARQ"]
[Fri Nov 14 11:11:47.405712 2025] [proxy_fcgi:error] [pid 47154:tid 47164] [client 145.239.10.137:41963] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/13k.php
[Fri Nov 14 11:34:22.817077 2025] [:error] [pid 59105:tid 59115] [client 182.42.105.144:44424] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRajPrd-anP1JpNfuSL9OQAAAUg"]
[Fri Nov 14 12:52:04.157668 2025] [:error] [pid 16671:tid 16677] [client 101.32.52.164:56380] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRa1dDsoHwEAmeIzZXDakAAAAQA"]
[Fri Nov 14 15:46:05.325091 2025] [proxy_fcgi:error] [pid 16671:tid 16695] [client 145.239.10.137:35850] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/ava.php
[Fri Nov 14 15:46:05.326628 2025] [proxy_fcgi:error] [pid 16671:tid 16678] [client 145.239.10.137:57840] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/a.php
[Fri Nov 14 19:19:20.314757 2025] [:error] [pid 16671:tid 16685] [client 43.130.34.74:57432] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRcQODsoHwEAmeIzZXBrsQAAAQg"]
[Fri Nov 14 20:50:40.230459 2025] [:error] [pid 1170:tid 1177] [client 49.51.253.26:48398] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRcloA5pkvzCDzzjItSAHAAAAAU"]
[Fri Nov 14 23:05:36.095817 2025] [:error] [pid 16573:tid 16581] [client 103.97.104.150:61494] [client 103.97.104.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.97.104.150, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aRdFQCPGexfUk9FDoELongAAAEM"]
[Fri Nov 14 23:05:36.101345 2025] [proxy_fcgi:error] [pid 16573:tid 16581] [client 103.97.104.150:61494] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 01:26:50.371074 2025] [:error] [pid 45909:tid 45968] [client 43.130.111.40:41550] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRdmWsZqItrYybG86kiXBwAAAcM"]
[Sat Nov 15 09:30:39.514942 2025] [:error] [pid 22613:tid 22625] [client 43.130.60.195:50298] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRfXvyoyR3cDsIRGPRlcnAAAAgo"]
[Sat Nov 15 12:09:26.214631 2025] [:error] [pid 20313:tid 20327] [client 138.197.23.42:64566] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRf89hI9DXIgPadBLUZSJQAAAss"]
[Sat Nov 15 12:09:26.638438 2025] [:error] [pid 19959:tid 19982] [client 138.197.23.42:64723] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOAMwAAAZA"]
[Sat Nov 15 12:09:27.059259 2025] [:error] [pid 27997:tid 27999] [client 138.197.23.42:64877] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRf899pja_6cDxKbxFmOHwAAAMA"]
[Sat Nov 15 12:09:27.526771 2025] [:error] [pid 20654:tid 20661] [client 138.197.23.42:65033] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRf893cS7eC8vO76_ydtswAAA4Q"]
[Sat Nov 15 12:09:27.952598 2025] [:error] [pid 22613:tid 22620] [client 138.197.23.42:65224] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRf89yoyR3cDsIRGPRl8hgAAAgU"]
[Sat Nov 15 12:54:28.358600 2025] [proxy_fcgi:error] [pid 20313:tid 20321] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:28.601410 2025] [proxy_fcgi:error] [pid 20313:tid 20333] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:28.805157 2025] [proxy_fcgi:error] [pid 20313:tid 20328] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:29.122203 2025] [proxy_fcgi:error] [pid 20313:tid 20337] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:29.334375 2025] [proxy_fcgi:error] [pid 20313:tid 20318] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:29.580264 2025] [proxy_fcgi:error] [pid 20313:tid 20329] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:29.831933 2025] [proxy_fcgi:error] [pid 20313:tid 20324] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:30.038582 2025] [proxy_fcgi:error] [pid 20313:tid 20338] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:30.280403 2025] [proxy_fcgi:error] [pid 20313:tid 20320] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:30.700393 2025] [proxy_fcgi:error] [pid 20313:tid 20322] [client 52.167.167.52:11193] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:54:30.902175 2025] [:error] [pid 20313:tid 20319] [client 52.167.167.52:11193] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filei.php"] [unique_id "aRgHhhI9DXIgPadBLUZZOQAAAsM"]
[Sat Nov 15 12:54:31.401517 2025] [:error] [pid 27997:tid 28004] [client 52.167.167.52:11137] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filei.php"] [unique_id "aRgHh9pja_6cDxKbxFmXMgAAAMU"]
[Sat Nov 15 12:54:31.934682 2025] [:error] [pid 22613:tid 22625] [client 52.167.167.52:10382] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filei.php"] [unique_id "aRgHhyoyR3cDsIRGPRmEeAAAAgo"]
[Sat Nov 15 12:54:32.637112 2025] [:error] [pid 20654:tid 20679] [client 52.167.167.52:7845] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filei.php"] [unique_id "aRgHiHcS7eC8vO76_yd8PAAAA5Y"]
[Sat Nov 15 12:54:33.206369 2025] [:error] [pid 20313:tid 20317] [client 52.167.167.52:10397] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aRgHiRI9DXIgPadBLUZZPwAAAsE"]
[Sat Nov 15 12:54:33.796499 2025] [:error] [pid 19959:tid 19988] [client 52.167.167.52:4374] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aRgHicjejiTUP1-IawOK1gAAAZY"]
[Sat Nov 15 12:54:34.294537 2025] [:error] [pid 27909:tid 27916] [client 52.167.167.52:10423] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aRgHiiTfZ6B57n8HepX0YAAAAAM"]
[Sat Nov 15 12:54:34.862054 2025] [:error] [pid 27911:tid 27976] [client 52.167.167.52:4383] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aRgHisGzUdrhGBIfiKQtXgAAAIg"]
[Sat Nov 15 12:54:35.380867 2025] [:error] [pid 19961:tid 20010] [client 52.167.167.52:3295] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aRgHizar7Si-84EApVQ9ggAAAdE"]
[Sat Nov 15 12:54:36.074417 2025] [:error] [pid 19959:tid 19975] [client 52.167.167.52:4373] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aRgHjMjejiTUP1-IawOK1wAAAYk"]
[Sat Nov 15 12:54:36.624985 2025] [:error] [pid 22613:tid 22639] [client 52.167.167.52:11147] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aRgHjCoyR3cDsIRGPRmEfAAAAhg"]
[Sat Nov 15 12:54:37.249711 2025] [:error] [pid 19961:tid 20016] [client 52.167.167.52:4382] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aRgHjTar7Si-84EApVQ9hAAAAdc"]
[Sat Nov 15 12:54:37.788339 2025] [:error] [pid 27997:tid 28006] [client 52.167.167.52:3308] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aRgHjdpja_6cDxKbxFmXOgAAAMc"]
[Sat Nov 15 12:54:38.386037 2025] [:error] [pid 27909:tid 27918] [client 52.167.167.52:7070] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aRgHjiTfZ6B57n8HepX0ZAAAAAU"]
[Sat Nov 15 12:54:38.926636 2025] [:error] [pid 22613:tid 22635] [client 52.167.167.52:4360] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aRgHjioyR3cDsIRGPRmEfgAAAhQ"]
[Sat Nov 15 12:54:39.369196 2025] [:error] [pid 20313:tid 20328] [client 52.167.167.52:11165] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aRgHjxI9DXIgPadBLUZZQgAAAsw"]
[Sat Nov 15 12:54:39.876153 2025] [:error] [pid 27909:tid 27922] [client 52.167.167.52:11170] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/info.php"] [unique_id "aRgHjyTfZ6B57n8HepX0ZgAAAAk"]
[Sat Nov 15 12:54:40.348871 2025] [:error] [pid 22613:tid 22626] [client 52.167.167.52:4403] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/info.php"] [unique_id "aRgHkCoyR3cDsIRGPRmEgQAAAgs"]
[Sat Nov 15 12:54:40.837208 2025] [:error] [pid 20654:tid 20680] [client 52.167.167.52:7827] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/info.php"] [unique_id "aRgHkHcS7eC8vO76_yd8QQAAA5c"]
[Sat Nov 15 12:54:41.348628 2025] [:error] [pid 19959:tid 19967] [client 52.167.167.52:3320] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/info.php"] [unique_id "aRgHkcjejiTUP1-IawOK2gAAAYE"]
[Sat Nov 15 12:54:41.889235 2025] [:error] [pid 20654:tid 20670] [client 52.167.167.52:11154] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aRgHkXcS7eC8vO76_yd8QwAAA40"]
[Sat Nov 15 12:54:42.428609 2025] [:error] [pid 19959:tid 19972] [client 52.167.167.52:4386] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aRgHksjejiTUP1-IawOK2wAAAYY"]
[Sat Nov 15 12:54:43.036664 2025] [:error] [pid 20346:tid 20365] [client 52.167.167.52:10412] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aRgHk57hsydZdIoVTlvZYQAAAxA"]
[Sat Nov 15 12:54:43.526709 2025] [:error] [pid 20654:tid 20669] [client 52.167.167.52:9847] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aRgHk3cS7eC8vO76_yd8RAAAA4w"]
[Sat Nov 15 12:54:44.108112 2025] [:error] [pid 19959:tid 19979] [client 52.167.167.52:3300] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsnu.php"] [unique_id "aRgHlMjejiTUP1-IawOK3AAAAY0"]
[Sat Nov 15 12:54:44.631919 2025] [:error] [pid 20654:tid 20664] [client 52.167.167.52:1407] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsnu.php"] [unique_id "aRgHlHcS7eC8vO76_yd8RQAAA4c"]
[Sat Nov 15 12:54:45.103973 2025] [:error] [pid 27911:tid 27991] [client 52.167.167.52:9807] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsnu.php"] [unique_id "aRgHlcGzUdrhGBIfiKQtZwAAAJc"]
[Sat Nov 15 12:54:45.600921 2025] [:error] [pid 27997:tid 28001] [client 52.167.167.52:3294] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsnu.php"] [unique_id "aRgHldpja_6cDxKbxFmXRAAAAMI"]
[Sat Nov 15 12:54:46.111363 2025] [:error] [pid 27909:tid 27932] [client 52.167.167.52:3298] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x4.php"] [unique_id "aRgHliTfZ6B57n8HepX0bAAAABM"]
[Sat Nov 15 12:54:46.703650 2025] [:error] [pid 22765:tid 22780] [client 52.167.167.52:7822] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x4.php"] [unique_id "aRgHlqbrQzjuZmPIWDan_AAAAoo"]
[Sat Nov 15 12:54:47.278274 2025] [:error] [pid 20654:tid 20665] [client 52.167.167.52:6591] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x4.php"] [unique_id "aRgHl3cS7eC8vO76_yd8TAAAA4g"]
[Sat Nov 15 12:54:47.890134 2025] [:error] [pid 27997:tid 28014] [client 52.167.167.52:9137] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x4.php"] [unique_id "aRgHl9pja_6cDxKbxFmXSQAAAM8"]
[Sat Nov 15 12:54:48.445511 2025] [:error] [pid 27997:tid 28013] [client 52.167.167.52:10388] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kk.php"] [unique_id "aRgHmNpja_6cDxKbxFmXTQAAAM4"]
[Sat Nov 15 12:54:49.058981 2025] [:error] [pid 22765:tid 22794] [client 52.167.167.52:6590] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kk.php"] [unique_id "aRgHmabrQzjuZmPIWDan_QAAApg"]
[Sat Nov 15 12:54:49.497713 2025] [:error] [pid 20654:tid 20680] [client 52.167.167.52:6121] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kk.php"] [unique_id "aRgHmXcS7eC8vO76_yd8TgAAA5c"]
[Sat Nov 15 12:54:50.221009 2025] [:error] [pid 20654:tid 20670] [client 52.167.167.52:9802] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kk.php"] [unique_id "aRgHmncS7eC8vO76_yd8UQAAA40"]
[Sat Nov 15 12:54:50.719982 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:10846] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless3.php"] [unique_id "aRgHmsjejiTUP1-IawOK4QAAAYU"]
[Sat Nov 15 12:54:51.369052 2025] [:error] [pid 27997:tid 28004] [client 52.167.167.52:9156] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless3.php"] [unique_id "aRgHm9pja_6cDxKbxFmXUwAAAMU"]
[Sat Nov 15 12:54:51.857038 2025] [:error] [pid 19959:tid 19969] [client 52.167.167.52:10847] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless3.php"] [unique_id "aRgHm8jejiTUP1-IawOK4gAAAYM"]
[Sat Nov 15 12:54:52.369722 2025] [:error] [pid 20654:tid 20669] [client 52.167.167.52:4329] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless3.php"] [unique_id "aRgHnHcS7eC8vO76_yd8UwAAA4w"]
[Sat Nov 15 12:54:52.862470 2025] [:error] [pid 27997:tid 28009] [client 52.167.167.52:6126] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/456.php"] [unique_id "aRgHnNpja_6cDxKbxFmXVwAAAMo"]
[Sat Nov 15 12:54:53.391810 2025] [:error] [pid 20346:tid 20355] [client 52.167.167.52:10858] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/456.php"] [unique_id "aRgHnZ7hsydZdIoVTlvZaQAAAwY"]
[Sat Nov 15 12:54:53.958873 2025] [:error] [pid 20313:tid 20327] [client 52.167.167.52:3309] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/456.php"] [unique_id "aRgHnRI9DXIgPadBLUZZSAAAAss"]
[Sat Nov 15 12:54:54.492182 2025] [:error] [pid 20654:tid 20674] [client 52.167.167.52:3327] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/456.php"] [unique_id "aRgHnncS7eC8vO76_yd8VwAAA5E"]
[Sat Nov 15 12:54:55.096029 2025] [:error] [pid 19959:tid 19987] [client 52.167.167.52:6098] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aRgHn8jejiTUP1-IawOK5QAAAZU"]
[Sat Nov 15 12:54:55.556849 2025] [:error] [pid 22613:tid 22622] [client 52.167.167.52:10838] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aRgHnyoyR3cDsIRGPRmEiAAAAgc"]
[Sat Nov 15 12:54:56.046933 2025] [:error] [pid 27909:tid 27921] [client 52.167.167.52:6101] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aRgHoCTfZ6B57n8HepX0cgAAAAg"]
[Sat Nov 15 12:54:56.537678 2025] [:error] [pid 19959:tid 19983] [client 52.167.167.52:8074] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aRgHoMjejiTUP1-IawOK5gAAAZE"]
[Sat Nov 15 12:54:57.002892 2025] [:error] [pid 19959:tid 19967] [client 52.167.167.52:6109] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aRgHocjejiTUP1-IawOK5wAAAYE"]
[Sat Nov 15 12:54:57.649658 2025] [:error] [pid 27911:tid 27971] [client 52.167.167.52:9801] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aRgHocGzUdrhGBIfiKQtagAAAIM"]
[Sat Nov 15 12:54:58.351161 2025] [:error] [pid 22765:tid 22782] [client 52.167.167.52:10855] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aRgHoqbrQzjuZmPIWDaoBAAAAow"]
[Sat Nov 15 12:54:58.833705 2025] [:error] [pid 27909:tid 27915] [client 52.167.167.52:10840] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aRgHoiTfZ6B57n8HepX0dAAAAAI"]
[Sat Nov 15 12:54:59.427726 2025] [:error] [pid 22765:tid 22785] [client 52.167.167.52:4331] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aRgHo6brQzjuZmPIWDaoBgAAAo8"]
[Sat Nov 15 12:54:59.996678 2025] [:error] [pid 19959:tid 19985] [client 52.167.167.52:9196] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aRgHo8jejiTUP1-IawOK6AAAAZM"]
[Sat Nov 15 12:55:00.472193 2025] [:error] [pid 20346:tid 20359] [client 52.167.167.52:6540] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aRgHpJ7hsydZdIoVTlvZcQAAAwo"]
[Sat Nov 15 12:55:01.039777 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:1618] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aRgHpZ7hsydZdIoVTlvZcwAAAw8"]
[Sat Nov 15 12:55:01.528981 2025] [:error] [pid 19959:tid 19990] [client 52.167.167.52:2285] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aRgHpcjejiTUP1-IawOK6wAAAZg"]
[Sat Nov 15 12:55:02.169107 2025] [:error] [pid 27997:tid 28008] [client 52.167.167.52:8069] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aRgHptpja_6cDxKbxFmXYAAAAMk"]
[Sat Nov 15 12:55:02.645691 2025] [:error] [pid 27911:tid 27986] [client 52.167.167.52:4309] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aRgHpsGzUdrhGBIfiKQtbQAAAJI"]
[Sat Nov 15 12:55:03.254668 2025] [:error] [pid 20654:tid 20675] [client 52.167.167.52:6573] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aRgHp3cS7eC8vO76_yd8YQAAA5I"]
[Sat Nov 15 12:55:03.826522 2025] [:error] [pid 27997:tid 28016] [client 52.167.167.52:8096] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aRgHp9pja_6cDxKbxFmXYQAAANE"]
[Sat Nov 15 12:55:04.351458 2025] [:error] [pid 27909:tid 27936] [client 52.167.167.52:10836] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aRgHqCTfZ6B57n8HepX0eQAAABc"]
[Sat Nov 15 12:55:04.915055 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:2268] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aRgHqMjejiTUP1-IawOK7QAAAYU"]
[Sat Nov 15 12:55:05.376512 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:9178] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aRgHqXcS7eC8vO76_yd8ZgAAA5U"]
[Sat Nov 15 12:55:05.890846 2025] [:error] [pid 27909:tid 27933] [client 52.167.167.52:1645] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mo.php"] [unique_id "aRgHqSTfZ6B57n8HepX0egAAABQ"]
[Sat Nov 15 12:55:06.436746 2025] [:error] [pid 19961:tid 20005] [client 52.167.167.52:4312] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mo.php"] [unique_id "aRgHqjar7Si-84EApVQ9mgAAAcw"]
[Sat Nov 15 12:55:06.949950 2025] [:error] [pid 19961:tid 20000] [client 52.167.167.52:8112] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mo.php"] [unique_id "aRgHqjar7Si-84EApVQ9nwAAAcc"]
[Sat Nov 15 12:55:07.503683 2025] [:error] [pid 27997:tid 28021] [client 52.167.167.52:8091] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mo.php"] [unique_id "aRgHq9pja_6cDxKbxFmXcQAAANY"]
[Sat Nov 15 12:55:07.988856 2025] [:error] [pid 19959:tid 19980] [client 52.167.167.52:9203] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nij.php"] [unique_id "aRgHq8jejiTUP1-IawOK9wAAAY4"]
[Sat Nov 15 12:55:08.512350 2025] [:error] [pid 20654:tid 20673] [client 52.167.167.52:1640] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nij.php"] [unique_id "aRgHrHcS7eC8vO76_yd8dgAAA5A"]
[Sat Nov 15 12:55:09.080510 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:10867] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nij.php"] [unique_id "aRgHrXcS7eC8vO76_yd8eAAAA5U"]
[Sat Nov 15 12:55:09.603061 2025] [:error] [pid 27909:tid 27916] [client 52.167.167.52:9191] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nij.php"] [unique_id "aRgHrSTfZ6B57n8HepX0sQAAAAM"]
[Sat Nov 15 12:55:10.094857 2025] [:error] [pid 20654:tid 20657] [client 52.167.167.52:8079] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfile.php"] [unique_id "aRgHrncS7eC8vO76_yd8egAAA4A"]
[Sat Nov 15 12:55:10.615864 2025] [:error] [pid 20654:tid 20659] [client 52.167.167.52:1643] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfile.php"] [unique_id "aRgHrncS7eC8vO76_yd8fQAAA4I"]
[Sat Nov 15 12:55:11.111417 2025] [:error] [pid 20346:tid 20370] [client 52.167.167.52:6533] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfile.php"] [unique_id "aRgHr57hsydZdIoVTlvZkQAAAxU"]
[Sat Nov 15 12:55:11.632735 2025] [:error] [pid 19959:tid 19966] [client 52.167.167.52:8089] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfile.php"] [unique_id "aRgHr8jejiTUP1-IawOK_wAAAYA"]
[Sat Nov 15 12:55:12.178768 2025] [:error] [pid 20654:tid 20671] [client 52.167.167.52:2242] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas2.php"] [unique_id "aRgHsHcS7eC8vO76_yd8gAAAA44"]
[Sat Nov 15 12:55:12.703349 2025] [:error] [pid 27911:tid 27979] [client 52.167.167.52:6080] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas2.php"] [unique_id "aRgHsMGzUdrhGBIfiKQtgAAAAIs"]
[Sat Nov 15 12:55:13.306997 2025] [:error] [pid 20654:tid 20679] [client 52.167.167.52:10874] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas2.php"] [unique_id "aRgHsXcS7eC8vO76_yd8ggAAA5Y"]
[Sat Nov 15 12:55:13.749266 2025] [:error] [pid 20654:tid 20675] [client 52.167.167.52:8080] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas2.php"] [unique_id "aRgHsXcS7eC8vO76_yd8hAAAA5I"]
[Sat Nov 15 12:55:14.286129 2025] [:error] [pid 22613:tid 22632] [client 52.167.167.52:9161] [client 52.167.167.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aRgHsioyR3cDsIRGPRmEpgAAAhE"]
[Sat Nov 15 12:55:14.743779 2025] [:error] [pid 20346:tid 20355] [client 52.167.167.52:1614] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aRgHsp7hsydZdIoVTlvZlAAAAwY"]
[Sat Nov 15 12:55:15.254916 2025] [:error] [pid 20654:tid 20665] [client 52.167.167.52:4317] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aRgHs3cS7eC8vO76_yd8iQAAA4g"]
[Sat Nov 15 12:55:15.703697 2025] [:error] [pid 20313:tid 20333] [client 52.167.167.52:3273] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aRgHsxI9DXIgPadBLUZZVAAAAtE"]
[Sat Nov 15 12:55:16.166562 2025] [:error] [pid 22765:tid 22792] [client 52.167.167.52:6579] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aRgHtKbrQzjuZmPIWDaoIAAAApY"]
[Sat Nov 15 12:55:16.609688 2025] [:error] [pid 19959:tid 19988] [client 52.167.167.52:4348] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aRgHtMjejiTUP1-IawOLAgAAAZY"]
[Sat Nov 15 12:55:17.264903 2025] [:error] [pid 20346:tid 20362] [client 52.167.167.52:1637] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aRgHtZ7hsydZdIoVTlvZlwAAAw0"]
[Sat Nov 15 12:55:17.739600 2025] [:error] [pid 19959:tid 19987] [client 52.167.167.52:2252] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aRgHtcjejiTUP1-IawOLAwAAAZU"]
[Sat Nov 15 12:55:18.309053 2025] [:error] [pid 19961:tid 19997] [client 52.167.167.52:4295] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aRgHtjar7Si-84EApVQ9pgAAAcQ"]
[Sat Nov 15 12:55:18.957154 2025] [:error] [pid 22765:tid 22782] [client 52.167.167.52:10866] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alam.php"] [unique_id "aRgHtqbrQzjuZmPIWDaoIQAAAow"]
[Sat Nov 15 12:55:19.505235 2025] [:error] [pid 20346:tid 20351] [client 52.167.167.52:8097] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alam.php"] [unique_id "aRgHt57hsydZdIoVTlvZnAAAAwI"]
[Sat Nov 15 12:55:20.107029 2025] [:error] [pid 22765:tid 22788] [client 52.167.167.52:6569] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alam.php"] [unique_id "aRgHuKbrQzjuZmPIWDaoJwAAApI"]
[Sat Nov 15 12:55:20.664986 2025] [:error] [pid 27911:tid 27989] [client 52.167.167.52:1626] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alam.php"] [unique_id "aRgHuMGzUdrhGBIfiKQthQAAAJU"]
[Sat Nov 15 12:55:21.237271 2025] [:error] [pid 27909:tid 27927] [client 52.167.167.52:6568] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/700.php"] [unique_id "aRgHuSTfZ6B57n8HepX0tAAAAA4"]
[Sat Nov 15 12:55:21.823924 2025] [:error] [pid 22765:tid 22781] [client 52.167.167.52:4334] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/700.php"] [unique_id "aRgHuabrQzjuZmPIWDaoKgAAAos"]
[Sat Nov 15 12:55:22.402853 2025] [:error] [pid 20654:tid 20660] [client 52.167.167.52:9179] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/700.php"] [unique_id "aRgHuncS7eC8vO76_yd8mgAAA4M"]
[Sat Nov 15 12:55:22.833321 2025] [:error] [pid 27997:tid 28016] [client 52.167.167.52:4294] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/700.php"] [unique_id "aRgHutpja_6cDxKbxFmXfAAAANE"]
[Sat Nov 15 12:55:23.283460 2025] [:error] [pid 22765:tid 22772] [client 52.167.167.52:8098] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fifi.php"] [unique_id "aRgHu6brQzjuZmPIWDaoLAAAAoQ"]
[Sat Nov 15 12:55:23.998670 2025] [:error] [pid 22765:tid 22779] [client 52.167.167.52:9194] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fifi.php"] [unique_id "aRgHu6brQzjuZmPIWDaoLgAAAok"]
[Sat Nov 15 12:55:24.577637 2025] [:error] [pid 27911:tid 27971] [client 52.167.167.52:6103] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fifi.php"] [unique_id "aRgHvMGzUdrhGBIfiKQtiAAAAIM"]
[Sat Nov 15 12:55:25.154647 2025] [:error] [pid 22613:tid 22627] [client 52.167.167.52:9151] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fifi.php"] [unique_id "aRgHvSoyR3cDsIRGPRmEqgAAAgw"]
[Sat Nov 15 12:55:25.791527 2025] [:error] [pid 22613:tid 22622] [client 52.167.167.52:2300] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "aRgHvSoyR3cDsIRGPRmEqwAAAgc"]
[Sat Nov 15 12:55:26.347197 2025] [:error] [pid 20313:tid 20327] [client 52.167.167.52:8094] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "aRgHvhI9DXIgPadBLUZZWgAAAss"]
[Sat Nov 15 12:55:26.864728 2025] [:error] [pid 22765:tid 22780] [client 52.167.167.52:10844] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "aRgHvqbrQzjuZmPIWDaoNgAAAoo"]
[Sat Nov 15 12:55:27.336883 2025] [:error] [pid 27909:tid 27933] [client 52.167.167.52:9816] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "aRgHvyTfZ6B57n8HepX0uQAAABQ"]
[Sat Nov 15 12:55:27.873176 2025] [:error] [pid 20346:tid 20361] [client 52.167.167.52:4302] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gold.php"] [unique_id "aRgHv57hsydZdIoVTlvZowAAAww"]
[Sat Nov 15 12:55:28.348111 2025] [:error] [pid 22765:tid 22789] [client 52.167.167.52:4330] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gold.php"] [unique_id "aRgHwKbrQzjuZmPIWDaoOgAAApM"]
[Sat Nov 15 12:55:28.874919 2025] [:error] [pid 20654:tid 20663] [client 52.167.167.52:8070] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gold.php"] [unique_id "aRgHwHcS7eC8vO76_yd8oQAAA4Y"]
[Sat Nov 15 12:55:29.481924 2025] [:error] [pid 19959:tid 19972] [client 52.167.167.52:1631] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gold.php"] [unique_id "aRgHwcjejiTUP1-IawOLEAAAAYY"]
[Sat Nov 15 12:55:30.024273 2025] [proxy_fcgi:error] [pid 20654:tid 20680] [client 52.167.167.52:4290] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:30.236205 2025] [proxy_fcgi:error] [pid 20654:tid 20673] [client 52.167.167.52:4290] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:30.444508 2025] [:error] [pid 20654:tid 20674] [client 52.167.167.52:4290] [client 52.167.167.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aRgHwncS7eC8vO76_yd8pwAAA5E"]
[Sat Nov 15 12:55:30.872806 2025] [proxy_fcgi:error] [pid 20654:tid 20667] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:31.304467 2025] [proxy_fcgi:error] [pid 20654:tid 20671] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:31.515731 2025] [proxy_fcgi:error] [pid 20654:tid 20678] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:31.724429 2025] [proxy_fcgi:error] [pid 20654:tid 20676] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:31.965415 2025] [proxy_fcgi:error] [pid 20654:tid 20677] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:32.191406 2025] [proxy_fcgi:error] [pid 20654:tid 20666] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:32.443768 2025] [proxy_fcgi:error] [pid 20654:tid 20660] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:32.651763 2025] [proxy_fcgi:error] [pid 20654:tid 20673] [client 52.167.167.52:1609] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:55:32.858279 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:1609] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aRgHxHcS7eC8vO76_yd8tgAAA5g"]
[Sat Nov 15 12:55:33.303344 2025] [:error] [pid 20313:tid 20328] [client 52.167.167.52:1660] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aRgHxRI9DXIgPadBLUZZYgAAAsw"]
[Sat Nov 15 12:55:33.773262 2025] [:error] [pid 20313:tid 20329] [client 52.167.167.52:8071] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aRgHxRI9DXIgPadBLUZZZAAAAs0"]
[Sat Nov 15 12:55:34.289745 2025] [:error] [pid 19961:tid 20017] [client 52.167.167.52:8123] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aRgHxjar7Si-84EApVQ9sAAAAdg"]
[Sat Nov 15 12:55:34.829139 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:9184] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aRgHxsjejiTUP1-IawOLFAAAAYU"]
[Sat Nov 15 12:55:35.403218 2025] [:error] [pid 20346:tid 20368] [client 52.167.167.52:6562] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aRgHx57hsydZdIoVTlvZqQAAAxM"]
[Sat Nov 15 12:55:35.883921 2025] [:error] [pid 27909:tid 27916] [client 52.167.167.52:2295] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aRgHxyTfZ6B57n8HepX0vwAAAAM"]
[Sat Nov 15 12:55:36.330583 2025] [:error] [pid 19961:tid 20014] [client 52.167.167.52:4351] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aRgHyDar7Si-84EApVQ9sQAAAdU"]
[Sat Nov 15 12:55:36.777889 2025] [:error] [pid 27911:tid 27981] [client 52.167.167.52:9176] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7h.php"] [unique_id "aRgHyMGzUdrhGBIfiKQtkwAAAI0"]
[Sat Nov 15 12:55:37.226725 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:3283] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7h.php"] [unique_id "aRgHyZ7hsydZdIoVTlvZrAAAAw8"]
[Sat Nov 15 12:55:37.726660 2025] [:error] [pid 27997:tid 28007] [client 52.167.167.52:10870] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7h.php"] [unique_id "aRgHydpja_6cDxKbxFmXkgAAAMg"]
[Sat Nov 15 12:55:38.350797 2025] [:error] [pid 27909:tid 27933] [client 52.167.167.52:6095] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7h.php"] [unique_id "aRgHyiTfZ6B57n8HepX0wwAAABQ"]
[Sat Nov 15 12:55:38.811173 2025] [:error] [pid 27909:tid 27921] [client 52.167.167.52:4306] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aRgHyiTfZ6B57n8HepX0xQAAAAg"]
[Sat Nov 15 12:55:39.318212 2025] [:error] [pid 20654:tid 20669] [client 52.167.167.52:10832] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aRgHy3cS7eC8vO76_yd8xAAAA4w"]
[Sat Nov 15 12:55:39.809812 2025] [:error] [pid 22765:tid 22768] [client 52.167.167.52:2246] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aRgHy6brQzjuZmPIWDaoUAAAAoA"]
[Sat Nov 15 12:55:40.328421 2025] [:error] [pid 27911:tid 27969] [client 52.167.167.52:9169] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aRgHzMGzUdrhGBIfiKQtlAAAAIE"]
[Sat Nov 15 12:55:40.790969 2025] [:error] [pid 20654:tid 20664] [client 52.167.167.52:8066] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aRgHzHcS7eC8vO76_yd8ygAAA4c"]
[Sat Nov 15 12:55:41.297881 2025] [:error] [pid 20654:tid 20666] [client 52.167.167.52:4349] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aRgHzXcS7eC8vO76_yd8ywAAA4k"]
[Sat Nov 15 12:55:41.797586 2025] [:error] [pid 22613:tid 22626] [client 52.167.167.52:4326] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aRgHzSoyR3cDsIRGPRmEvQAAAgs"]
[Sat Nov 15 12:55:42.234702 2025] [:error] [pid 20346:tid 20368] [client 52.167.167.52:8116] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aRgHzp7hsydZdIoVTlvZtwAAAxM"]
[Sat Nov 15 12:55:42.759424 2025] [:error] [pid 27911:tid 27975] [client 52.167.167.52:2286] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aRgHzsGzUdrhGBIfiKQtlgAAAIc"]
[Sat Nov 15 12:55:43.170905 2025] [:error] [pid 27911:tid 27992] [client 52.167.167.52:9211] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aRgHz8GzUdrhGBIfiKQtmAAAAJg"]
[Sat Nov 15 12:55:43.629959 2025] [:error] [pid 20313:tid 20324] [client 52.167.167.52:6554] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aRgHzxI9DXIgPadBLUZZcQAAAsg"]
[Sat Nov 15 12:55:44.125162 2025] [:error] [pid 22765:tid 22769] [client 52.167.167.52:2301] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aRgH0KbrQzjuZmPIWDaoVAAAAoE"]
[Sat Nov 15 12:55:44.643687 2025] [:error] [pid 27911:tid 27983] [client 52.167.167.52:4296] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rdfe.php"] [unique_id "aRgH0MGzUdrhGBIfiKQtmgAAAI8"]
[Sat Nov 15 12:55:45.121207 2025] [:error] [pid 27911:tid 27974] [client 52.167.167.52:11157] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rdfe.php"] [unique_id "aRgH0cGzUdrhGBIfiKQtnAAAAIY"]
[Sat Nov 15 12:55:45.642720 2025] [:error] [pid 22613:tid 22630] [client 52.167.167.52:7851] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rdfe.php"] [unique_id "aRgH0SoyR3cDsIRGPRmEwwAAAg8"]
[Sat Nov 15 12:55:46.204049 2025] [:error] [pid 19961:tid 20017] [client 52.167.167.52:8081] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rdfe.php"] [unique_id "aRgH0jar7Si-84EApVQ9uQAAAdg"]
[Sat Nov 15 12:55:46.704521 2025] [:error] [pid 19959:tid 19986] [client 52.167.167.52:8124] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xojryvch.php"] [unique_id "aRgH0sjejiTUP1-IawOLIgAAAZQ"]
[Sat Nov 15 12:55:47.150409 2025] [:error] [pid 27997:tid 28016] [client 52.167.167.52:9163] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xojryvch.php"] [unique_id "aRgH09pja_6cDxKbxFmXmgAAANE"]
[Sat Nov 15 12:55:47.647869 2025] [:error] [pid 20346:tid 20358] [client 52.167.167.52:10829] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xojryvch.php"] [unique_id "aRgH057hsydZdIoVTlvZwgAAAwk"]
[Sat Nov 15 12:55:48.081822 2025] [:error] [pid 20346:tid 20355] [client 52.167.167.52:9836] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xojryvch.php"] [unique_id "aRgH1J7hsydZdIoVTlvZxQAAAwY"]
[Sat Nov 15 12:55:48.588599 2025] [:error] [pid 20654:tid 20674] [client 52.167.167.52:1635] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reyna.php"] [unique_id "aRgH1HcS7eC8vO76_yd81AAAA5E"]
[Sat Nov 15 12:55:49.037190 2025] [:error] [pid 27909:tid 27924] [client 52.167.167.52:9215] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reyna.php"] [unique_id "aRgH1STfZ6B57n8HepX0ywAAAAs"]
[Sat Nov 15 12:55:49.528146 2025] [:error] [pid 27997:tid 28022] [client 52.167.167.52:8090] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reyna.php"] [unique_id "aRgH1dpja_6cDxKbxFmXmwAAANc"]
[Sat Nov 15 12:55:49.978111 2025] [:error] [pid 20654:tid 20667] [client 52.167.167.52:6138] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reyna.php"] [unique_id "aRgH1XcS7eC8vO76_yd82AAAA4o"]
[Sat Nov 15 12:55:50.477375 2025] [:error] [pid 22613:tid 22626] [client 52.167.167.52:1659] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aRgH1ioyR3cDsIRGPRmExgAAAgs"]
[Sat Nov 15 12:55:51.084782 2025] [:error] [pid 19961:tid 20002] [client 52.167.167.52:10817] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aRgH1zar7Si-84EApVQ9vQAAAck"]
[Sat Nov 15 12:55:51.631532 2025] [:error] [pid 20654:tid 20663] [client 52.167.167.52:9182] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aRgH13cS7eC8vO76_yd83gAAA4Y"]
[Sat Nov 15 12:55:52.100203 2025] [:error] [pid 20346:tid 20352] [client 52.167.167.52:10872] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aRgH2J7hsydZdIoVTlvZzAAAAwM"]
[Sat Nov 15 12:55:52.581642 2025] [:error] [pid 22765:tid 22772] [client 52.167.167.52:6544] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unzip.php"] [unique_id "aRgH2KbrQzjuZmPIWDaoWAAAAoQ"]
[Sat Nov 15 12:55:53.084338 2025] [:error] [pid 19961:tid 20016] [client 52.167.167.52:8110] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unzip.php"] [unique_id "aRgH2Tar7Si-84EApVQ9vgAAAdc"]
[Sat Nov 15 12:55:53.627710 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:1650] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unzip.php"] [unique_id "aRgH2cjejiTUP1-IawOLKQAAAYU"]
[Sat Nov 15 12:55:54.174996 2025] [:error] [pid 20654:tid 20667] [client 52.167.167.52:4332] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unzip.php"] [unique_id "aRgH2ncS7eC8vO76_yd84wAAA4o"]
[Sat Nov 15 12:55:54.669154 2025] [:error] [pid 27911:tid 27968] [client 52.167.167.52:10848] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aRgH2sGzUdrhGBIfiKQtnwAAAIA"]
[Sat Nov 15 12:55:55.233772 2025] [:error] [pid 20654:tid 20663] [client 52.167.167.52:6577] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aRgH23cS7eC8vO76_yd86AAAA4Y"]
[Sat Nov 15 12:55:55.728370 2025] [:error] [pid 20654:tid 20666] [client 52.167.167.52:9157] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aRgH23cS7eC8vO76_yd87AAAA4k"]
[Sat Nov 15 12:55:56.173019 2025] [:error] [pid 20313:tid 20324] [client 52.167.167.52:2254] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aRgH3BI9DXIgPadBLUZZfAAAAsg"]
[Sat Nov 15 12:55:56.650947 2025] [:error] [pid 22765:tid 22781] [client 52.167.167.52:8121] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/xin1.php"] [unique_id "aRgH3KbrQzjuZmPIWDaoWwAAAos"]
[Sat Nov 15 12:55:57.120891 2025] [:error] [pid 19959:tid 19984] [client 52.167.167.52:8075] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/xin1.php"] [unique_id "aRgH3cjejiTUP1-IawOLLwAAAZI"]
[Sat Nov 15 12:55:57.567014 2025] [:error] [pid 20346:tid 20371] [client 52.167.167.52:6127] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/xin1.php"] [unique_id "aRgH3Z7hsydZdIoVTlvZzwAAAxY"]
[Sat Nov 15 12:55:58.042665 2025] [:error] [pid 20654:tid 20680] [client 52.167.167.52:10413] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/xin1.php"] [unique_id "aRgH3ncS7eC8vO76_yd87gAAA5c"]
[Sat Nov 15 12:55:58.534090 2025] [:error] [pid 19961:tid 20005] [client 52.167.167.52:4316] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aRgH3jar7Si-84EApVQ9wAAAAcw"]
[Sat Nov 15 12:55:59.077225 2025] [:error] [pid 20654:tid 20663] [client 52.167.167.52:8109] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aRgH33cS7eC8vO76_yd88wAAA4Y"]
[Sat Nov 15 12:55:59.598016 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:9117] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aRgH33cS7eC8vO76_yd89gAAA5U"]
[Sat Nov 15 12:56:00.085999 2025] [:error] [pid 27909:tid 27920] [client 52.167.167.52:9174] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aRgH4CTfZ6B57n8HepX00wAAAAc"]
[Sat Nov 15 12:56:00.553073 2025] [:error] [pid 20654:tid 20660] [client 52.167.167.52:4292] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w3llstore.php"] [unique_id "aRgH4HcS7eC8vO76_yd8-AAAA4M"]
[Sat Nov 15 12:56:01.106094 2025] [:error] [pid 27911:tid 27986] [client 52.167.167.52:9190] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w3llstore.php"] [unique_id "aRgH4cGzUdrhGBIfiKQtoAAAAJI"]
[Sat Nov 15 12:56:01.558359 2025] [:error] [pid 20654:tid 20673] [client 52.167.167.52:1622] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w3llstore.php"] [unique_id "aRgH4XcS7eC8vO76_yd8-QAAA5A"]
[Sat Nov 15 12:56:02.106366 2025] [:error] [pid 22765:tid 22783] [client 52.167.167.52:10841] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w3llstore.php"] [unique_id "aRgH4qbrQzjuZmPIWDaoYQAAAo0"]
[Sat Nov 15 12:56:02.608974 2025] [:error] [pid 22765:tid 22788] [client 52.167.167.52:2279] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aua.php"] [unique_id "aRgH4qbrQzjuZmPIWDaoYgAAApI"]
[Sat Nov 15 12:56:03.086837 2025] [:error] [pid 20654:tid 20665] [client 52.167.167.52:1600] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aua.php"] [unique_id "aRgH43cS7eC8vO76_yd8-gAAA4g"]
[Sat Nov 15 12:56:03.338177 2025] [:error] [pid 27911:tid 27986] [client 52.167.167.52:9190] [client 52.167.167.52] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.70.33_8ba7ee7baf185439b4532ff6d673cb715a8d8932"): Internal error (specific information not available) [hostname "measureyourbrand.com"] [uri "/w3llstore.php"] [unique_id "aRgH4cGzUdrhGBIfiKQtoAAAAJI"]
[Sat Nov 15 12:56:03.528077 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:9185] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aua.php"] [unique_id "aRgH43cS7eC8vO76_yd8_AAAA5g"]
[Sat Nov 15 12:56:04.006235 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:6098] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aua.php"] [unique_id "aRgH5HcS7eC8vO76_yd8_gAAA5U"]
[Sat Nov 15 12:56:04.467106 2025] [:error] [pid 22765:tid 22780] [client 52.167.167.52:6536] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c4.php"] [unique_id "aRgH5KbrQzjuZmPIWDaoagAAAoo"]
[Sat Nov 15 12:56:04.982334 2025] [:error] [pid 19961:tid 20017] [client 52.167.167.52:6529] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c4.php"] [unique_id "aRgH5Dar7Si-84EApVQ9xQAAAdg"]
[Sat Nov 15 12:56:05.459518 2025] [:error] [pid 22613:tid 22639] [client 52.167.167.52:10856] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c4.php"] [unique_id "aRgH5SoyR3cDsIRGPRmE1AAAAhg"]
[Sat Nov 15 12:56:05.940683 2025] [:error] [pid 27911:tid 27974] [client 52.167.167.52:2240] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c4.php"] [unique_id "aRgH5cGzUdrhGBIfiKQtpQAAAIY"]
[Sat Nov 15 12:56:06.522696 2025] [:error] [pid 22613:tid 22625] [client 52.167.167.52:3317] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bu5.php"] [unique_id "aRgH5ioyR3cDsIRGPRmE1gAAAgo"]
[Sat Nov 15 12:56:07.028374 2025] [:error] [pid 27997:tid 28017] [client 52.167.167.52:6543] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bu5.php"] [unique_id "aRgH59pja_6cDxKbxFmXogAAANI"]
[Sat Nov 15 12:56:07.514039 2025] [:error] [pid 27911:tid 27985] [client 52.167.167.52:1630] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bu5.php"] [unique_id "aRgH58GzUdrhGBIfiKQtpwAAAJE"]
[Sat Nov 15 12:56:08.198414 2025] [:error] [pid 27997:tid 28010] [client 52.167.167.52:6087] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bu5.php"] [unique_id "aRgH6Npja_6cDxKbxFmXowAAAMs"]
[Sat Nov 15 12:56:08.678815 2025] [:error] [pid 27997:tid 28022] [client 52.167.167.52:1652] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lhh2.php"] [unique_id "aRgH6Npja_6cDxKbxFmXpAAAANc"]
[Sat Nov 15 12:56:09.207061 2025] [:error] [pid 22613:tid 22621] [client 52.167.167.52:4335] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lhh2.php"] [unique_id "aRgH6SoyR3cDsIRGPRmE3AAAAgY"]
[Sat Nov 15 12:56:09.720740 2025] [:error] [pid 20313:tid 20328] [client 52.167.167.52:9158] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lhh2.php"] [unique_id "aRgH6RI9DXIgPadBLUZZhgAAAsw"]
[Sat Nov 15 12:56:10.257097 2025] [:error] [pid 27909:tid 27934] [client 52.167.167.52:1624] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lhh2.php"] [unique_id "aRgH6iTfZ6B57n8HepX02AAAABU"]
[Sat Nov 15 12:56:10.738375 2025] [:error] [pid 19959:tid 19977] [client 52.167.167.52:4338] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aRgH6sjejiTUP1-IawOLNgAAAYs"]
[Sat Nov 15 12:56:11.271869 2025] [:error] [pid 20313:tid 20322] [client 52.167.167.52:8072] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aRgH6xI9DXIgPadBLUZZiAAAAsY"]
[Sat Nov 15 12:56:11.690530 2025] [:error] [pid 20346:tid 20356] [client 52.167.167.52:6552] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aRgH657hsydZdIoVTlvZ2gAAAwc"]
[Sat Nov 15 12:56:12.171991 2025] [:error] [pid 22765:tid 22779] [client 52.167.167.52:3317] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aRgH7KbrQzjuZmPIWDaocgAAAok"]
[Sat Nov 15 12:56:12.693511 2025] [:error] [pid 22765:tid 22772] [client 52.167.167.52:4323] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aRgH7KbrQzjuZmPIWDaodgAAAoQ"]
[Sat Nov 15 12:56:13.242966 2025] [:error] [pid 19959:tid 19982] [client 52.167.167.52:6128] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aRgH7cjejiTUP1-IawOLOAAAAZA"]
[Sat Nov 15 12:56:13.714473 2025] [:error] [pid 27911:tid 27968] [client 52.167.167.52:4321] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aRgH7cGzUdrhGBIfiKQtrgAAAIA"]
[Sat Nov 15 12:56:14.233148 2025] [:error] [pid 19959:tid 19990] [client 52.167.167.52:8102] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aRgH7sjejiTUP1-IawOLOwAAAZg"]
[Sat Nov 15 12:56:15.029131 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:9183] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aRgH757hsydZdIoVTlvZ2wAAAw8"]
[Sat Nov 15 12:56:15.527325 2025] [:error] [pid 20654:tid 20680] [client 52.167.167.52:9824] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aRgH73cS7eC8vO76_yd9CgAAA5c"]
[Sat Nov 15 12:56:16.007893 2025] [:error] [pid 20313:tid 20339] [client 52.167.167.52:1658] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aRgH8BI9DXIgPadBLUZZjAAAAtc"]
[Sat Nov 15 12:56:16.560066 2025] [:error] [pid 20346:tid 20366] [client 52.167.167.52:4320] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aRgH8J7hsydZdIoVTlvZ3wAAAxE"]
[Sat Nov 15 12:56:17.046913 2025] [:error] [pid 27911:tid 27982] [client 52.167.167.52:2276] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aRgH8cGzUdrhGBIfiKQtsAAAAI4"]
[Sat Nov 15 12:56:17.503021 2025] [:error] [pid 20654:tid 20676] [client 52.167.167.52:8104] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aRgH8XcS7eC8vO76_yd9DQAAA5M"]
[Sat Nov 15 12:56:17.941842 2025] [:error] [pid 20346:tid 20359] [client 52.167.167.52:2271] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aRgH8Z7hsydZdIoVTlvZ4QAAAwo"]
[Sat Nov 15 12:56:18.436259 2025] [:error] [pid 22613:tid 22636] [client 52.167.167.52:4346] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aRgH8ioyR3cDsIRGPRmE5QAAAhU"]
[Sat Nov 15 12:56:19.036872 2025] [:error] [pid 20654:tid 20665] [client 52.167.167.52:6083] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aRgH83cS7eC8vO76_yd9DwAAA4g"]
[Sat Nov 15 12:56:19.659792 2025] [:error] [pid 22613:tid 22634] [client 52.167.167.52:9153] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aRgH8yoyR3cDsIRGPRmE5gAAAhM"]
[Sat Nov 15 12:56:20.249842 2025] [:error] [pid 22613:tid 22617] [client 52.167.167.52:6550] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aRgH9CoyR3cDsIRGPRmE6AAAAgI"]
[Sat Nov 15 12:56:20.712860 2025] [:error] [pid 22613:tid 22619] [client 52.167.167.52:1641] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aRgH9CoyR3cDsIRGPRmE6wAAAgQ"]
[Sat Nov 15 12:56:21.206034 2025] [:error] [pid 19959:tid 19978] [client 52.167.167.52:9121] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aRgH9cjejiTUP1-IawOLQAAAAYw"]
[Sat Nov 15 12:56:21.733197 2025] [:error] [pid 27997:tid 28008] [client 52.167.167.52:10825] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aRgH9dpja_6cDxKbxFmXsAAAAMk"]
[Sat Nov 15 12:56:22.212964 2025] [:error] [pid 27911:tid 27990] [client 52.167.167.52:1656] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aRgH9sGzUdrhGBIfiKQttgAAAJY"]
[Sat Nov 15 12:56:22.671544 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:2277] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aRgH9ncS7eC8vO76_yd9EQAAA5g"]
[Sat Nov 15 12:56:23.132477 2025] [:error] [pid 19961:tid 20013] [client 52.167.167.52:10839] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aRgH9zar7Si-84EApVQ92AAAAdQ"]
[Sat Nov 15 12:56:23.642530 2025] [:error] [pid 19959:tid 19975] [client 52.167.167.52:6530] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aRgH98jejiTUP1-IawOLRQAAAYk"]
[Sat Nov 15 12:56:24.105111 2025] [:error] [pid 27911:tid 27975] [client 52.167.167.52:2275] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aRgH-MGzUdrhGBIfiKQtuQAAAIc"]
[Sat Nov 15 12:56:24.622739 2025] [:error] [pid 22765:tid 22782] [client 52.167.167.52:6586] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aRgH-KbrQzjuZmPIWDaofQAAAow"]
[Sat Nov 15 12:56:25.071316 2025] [:error] [pid 20346:tid 20355] [client 52.167.167.52:4324] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "aRgH-Z7hsydZdIoVTlvZ5wAAAwY"]
[Sat Nov 15 12:56:25.543733 2025] [:error] [pid 27911:tid 27991] [client 52.167.167.52:3269] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "aRgH-cGzUdrhGBIfiKQtvQAAAJc"]
[Sat Nov 15 12:56:26.103234 2025] [:error] [pid 19961:tid 20000] [client 52.167.167.52:6567] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "aRgH-jar7Si-84EApVQ93AAAAcc"]
[Sat Nov 15 12:56:26.688946 2025] [:error] [pid 20654:tid 20662] [client 52.167.167.52:8068] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "aRgH-ncS7eC8vO76_yd9FAAAA4U"]
[Sat Nov 15 12:56:27.189695 2025] [:error] [pid 19959:tid 19974] [client 52.167.167.52:10824] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxac.php"] [unique_id "aRgH-8jejiTUP1-IawOLSwAAAYg"]
[Sat Nov 15 12:56:27.679108 2025] [:error] [pid 27911:tid 27980] [client 52.167.167.52:3301] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxac.php"] [unique_id "aRgH-8GzUdrhGBIfiKQtwAAAAIw"]
[Sat Nov 15 12:56:28.177161 2025] [:error] [pid 27997:tid 28003] [client 52.167.167.52:9821] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxac.php"] [unique_id "aRgH_Npja_6cDxKbxFmXtwAAAMQ"]
[Sat Nov 15 12:56:28.687665 2025] [:error] [pid 22765:tid 22790] [client 52.167.167.52:3289] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxac.php"] [unique_id "aRgH_KbrQzjuZmPIWDaogwAAApQ"]
[Sat Nov 15 12:56:29.133039 2025] [:error] [pid 19961:tid 20014] [client 52.167.167.52:8119] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thh.php"] [unique_id "aRgH_Tar7Si-84EApVQ93gAAAdU"]
[Sat Nov 15 12:56:29.692104 2025] [:error] [pid 22765:tid 22792] [client 52.167.167.52:9116] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thh.php"] [unique_id "aRgH_abrQzjuZmPIWDaohgAAApY"]
[Sat Nov 15 12:56:30.184459 2025] [:error] [pid 27997:tid 28013] [client 52.167.167.52:10822] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thh.php"] [unique_id "aRgH_tpja_6cDxKbxFmXuQAAAM4"]
[Sat Nov 15 12:56:30.682282 2025] [:error] [pid 20313:tid 20330] [client 52.167.167.52:4328] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thh.php"] [unique_id "aRgH_hI9DXIgPadBLUZZlwAAAs4"]
[Sat Nov 15 12:56:31.218639 2025] [:error] [pid 27909:tid 27925] [client 52.167.167.52:6565] [client 52.167.167.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/buy.php"] [unique_id "aRgH_yTfZ6B57n8HepX06gAAAAw"]
[Sat Nov 15 12:56:33.294724 2025] [proxy_fcgi:error] [pid 20346:tid 20368] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:33.507264 2025] [proxy_fcgi:error] [pid 20346:tid 20369] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:33.720715 2025] [proxy_fcgi:error] [pid 20346:tid 20362] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:33.938118 2025] [proxy_fcgi:error] [pid 20346:tid 20367] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:34.156442 2025] [proxy_fcgi:error] [pid 20346:tid 20365] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:34.369944 2025] [proxy_fcgi:error] [pid 20346:tid 20353] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:34.798868 2025] [proxy_fcgi:error] [pid 20346:tid 20364] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:35.015732 2025] [proxy_fcgi:error] [pid 20346:tid 20363] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:35.237287 2025] [proxy_fcgi:error] [pid 20346:tid 20349] [client 52.167.167.52:9103] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:56:35.445573 2025] [:error] [pid 20346:tid 20352] [client 52.167.167.52:9103] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bv3.php"] [unique_id "aRgIA57hsydZdIoVTlvZ9wAAAwM"]
[Sat Nov 15 12:56:36.020268 2025] [:error] [pid 27997:tid 28008] [client 52.167.167.52:9114] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bv3.php"] [unique_id "aRgIBNpja_6cDxKbxFmXvgAAAMk"]
[Sat Nov 15 12:56:36.454002 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:6132] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bv3.php"] [unique_id "aRgIBHcS7eC8vO76_yd9HgAAA5U"]
[Sat Nov 15 12:56:36.949978 2025] [:error] [pid 27997:tid 28007] [client 52.167.167.52:6130] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bv3.php"] [unique_id "aRgIBNpja_6cDxKbxFmXwAAAAMg"]
[Sat Nov 15 12:56:37.402226 2025] [:error] [pid 19961:tid 20007] [client 52.167.167.52:3275] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aRgIBTar7Si-84EApVQ95AAAAc4"]
[Sat Nov 15 12:56:37.844312 2025] [:error] [pid 27909:tid 27927] [client 52.167.167.52:6537] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aRgIBSTfZ6B57n8HepX08gAAAA4"]
[Sat Nov 15 12:56:38.357886 2025] [:error] [pid 20313:tid 20320] [client 52.167.167.52:11171] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aRgIBhI9DXIgPadBLUZZnQAAAsQ"]
[Sat Nov 15 12:56:38.854807 2025] [:error] [pid 19961:tid 20004] [client 52.167.167.52:6081] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aRgIBjar7Si-84EApVQ95wAAAcs"]
[Sat Nov 15 12:56:39.329704 2025] [:error] [pid 27909:tid 27929] [client 52.167.167.52:3297] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/racs3.php"] [unique_id "aRgIByTfZ6B57n8HepX08wAAABA"]
[Sat Nov 15 12:56:39.811465 2025] [:error] [pid 20313:tid 20338] [client 52.167.167.52:9124] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/racs3.php"] [unique_id "aRgIBxI9DXIgPadBLUZZogAAAtY"]
[Sat Nov 15 12:56:40.461458 2025] [:error] [pid 20313:tid 20335] [client 52.167.167.52:9800] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/racs3.php"] [unique_id "aRgICBI9DXIgPadBLUZZpAAAAtM"]
[Sat Nov 15 12:56:40.947817 2025] [:error] [pid 20313:tid 20316] [client 52.167.167.52:9832] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/racs3.php"] [unique_id "aRgICBI9DXIgPadBLUZZpQAAAsA"]
[Sat Nov 15 12:56:41.423558 2025] [:error] [pid 19959:tid 19976] [client 52.167.167.52:9854] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aRgICcjejiTUP1-IawOLWQAAAYo"]
[Sat Nov 15 12:56:41.882128 2025] [:error] [pid 19959:tid 19989] [client 52.167.167.52:7854] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aRgICcjejiTUP1-IawOLWgAAAZc"]
[Sat Nov 15 12:56:42.335831 2025] [:error] [pid 19961:tid 20012] [client 52.167.167.52:10115] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aRgICjar7Si-84EApVQ97AAAAdM"]
[Sat Nov 15 12:56:42.835526 2025] [:error] [pid 22765:tid 22781] [client 52.167.167.52:11158] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aRgICqbrQzjuZmPIWDaolAAAAos"]
[Sat Nov 15 12:56:43.343962 2025] [:error] [pid 20346:tid 20367] [client 52.167.167.52:9118] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aRgIC57hsydZdIoVTlvZ_gAAAxI"]
[Sat Nov 15 12:56:43.951115 2025] [:error] [pid 19961:tid 20010] [client 52.167.167.52:4407] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aRgICzar7Si-84EApVQ98AAAAdE"]
[Sat Nov 15 12:56:44.397870 2025] [:error] [pid 20346:tid 20351] [client 52.167.167.52:10400] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aRgIDJ7hsydZdIoVTlvaAQAAAwI"]
[Sat Nov 15 12:56:44.921128 2025] [:error] [pid 22765:tid 22771] [client 52.167.167.52:4406] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aRgIDKbrQzjuZmPIWDaolQAAAoM"]
[Sat Nov 15 12:56:45.444618 2025] [:error] [pid 22613:tid 22619] [client 52.167.167.52:11166] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bluejackets.php"] [unique_id "aRgIDSoyR3cDsIRGPRmE_AAAAgQ"]
[Sat Nov 15 12:56:45.974827 2025] [:error] [pid 27911:tid 27982] [client 52.167.167.52:1403] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bluejackets.php"] [unique_id "aRgIDcGzUdrhGBIfiKQt0gAAAI4"]
[Sat Nov 15 12:56:46.438162 2025] [:error] [pid 20346:tid 20373] [client 52.167.167.52:7061] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bluejackets.php"] [unique_id "aRgIDp7hsydZdIoVTlvaBgAAAxg"]
[Sat Nov 15 12:56:46.909310 2025] [:error] [pid 27911:tid 27989] [client 52.167.167.52:6037] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bluejackets.php"] [unique_id "aRgIDsGzUdrhGBIfiKQt1gAAAJU"]
[Sat Nov 15 12:56:47.425393 2025] [:error] [pid 22613:tid 22628] [client 52.167.167.52:5745] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zt2.php"] [unique_id "aRgIDyoyR3cDsIRGPRmFAQAAAg0"]
[Sat Nov 15 12:56:47.872063 2025] [:error] [pid 22613:tid 22620] [client 52.167.167.52:8544] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zt2.php"] [unique_id "aRgIDyoyR3cDsIRGPRmFAwAAAgU"]
[Sat Nov 15 12:56:48.304161 2025] [:error] [pid 27909:tid 27923] [client 52.167.167.52:3376] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zt2.php"] [unique_id "aRgIECTfZ6B57n8HepX0_gAAAAo"]
[Sat Nov 15 12:56:48.777681 2025] [:error] [pid 20313:tid 20331] [client 52.167.167.52:3363] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zt2.php"] [unique_id "aRgIEBI9DXIgPadBLUZZswAAAs8"]
[Sat Nov 15 12:56:49.344668 2025] [:error] [pid 20313:tid 20328] [client 52.167.167.52:6863] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aRgIERI9DXIgPadBLUZZtQAAAsw"]
[Sat Nov 15 12:56:49.825302 2025] [:error] [pid 22765:tid 22783] [client 52.167.167.52:6033] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aRgIEabrQzjuZmPIWDaolwAAAo0"]
[Sat Nov 15 12:56:50.282606 2025] [:error] [pid 20313:tid 20322] [client 52.167.167.52:6031] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aRgIEhI9DXIgPadBLUZZuAAAAsY"]
[Sat Nov 15 12:56:50.728524 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:2861] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aRgIEncS7eC8vO76_yd9JAAAA5U"]
[Sat Nov 15 12:56:51.209540 2025] [:error] [pid 19961:tid 19996] [client 52.167.167.52:6887] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aRgIEzar7Si-84EApVQ9_wAAAcM"]
[Sat Nov 15 12:56:51.720435 2025] [:error] [pid 19959:tid 19984] [client 52.167.167.52:2465] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aRgIE8jejiTUP1-IawOLXAAAAZI"]
[Sat Nov 15 12:56:52.146224 2025] [:error] [pid 27997:tid 28001] [client 52.167.167.52:2870] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aRgIFNpja_6cDxKbxFmXxwAAAMI"]
[Sat Nov 15 12:56:52.659399 2025] [:error] [pid 27997:tid 28002] [client 52.167.167.52:3377] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aRgIFNpja_6cDxKbxFmXyQAAAMM"]
[Sat Nov 15 12:56:53.122667 2025] [:error] [pid 27997:tid 28007] [client 52.167.167.52:2475] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRgIFdpja_6cDxKbxFmXywAAAMg"]
[Sat Nov 15 12:56:53.576110 2025] [:error] [pid 27997:tid 28009] [client 52.167.167.52:2483] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRgIFdpja_6cDxKbxFmXzQAAAMo"]
[Sat Nov 15 12:56:54.065647 2025] [:error] [pid 20654:tid 20661] [client 52.167.167.52:8570] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRgIFncS7eC8vO76_yd9JQAAA4Q"]
[Sat Nov 15 12:56:54.580613 2025] [:error] [pid 20346:tid 20370] [client 52.167.167.52:2865] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/wpxadmin.php"] [unique_id "aRgIFp7hsydZdIoVTlvaEAAAAxU"]
[Sat Nov 15 12:56:55.172352 2025] [:error] [pid 20346:tid 20367] [client 52.167.167.52:8233] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa8.php"] [unique_id "aRgIF57hsydZdIoVTlvaEgAAAxI"]
[Sat Nov 15 12:56:55.706761 2025] [:error] [pid 22765:tid 22794] [client 52.167.167.52:1534] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa8.php"] [unique_id "aRgIF6brQzjuZmPIWDaonAAAApg"]
[Sat Nov 15 12:56:56.256116 2025] [:error] [pid 20346:tid 20351] [client 52.167.167.52:2770] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa8.php"] [unique_id "aRgIGJ7hsydZdIoVTlvaFwAAAwI"]
[Sat Nov 15 12:56:56.699867 2025] [:error] [pid 20346:tid 20371] [client 52.167.167.52:1494] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa8.php"] [unique_id "aRgIGJ7hsydZdIoVTlvaGAAAAxY"]
[Sat Nov 15 12:56:57.235223 2025] [:error] [pid 27997:tid 28016] [client 52.167.167.52:1495] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl.php"] [unique_id "aRgIGdpja_6cDxKbxFmX0wAAANE"]
[Sat Nov 15 12:56:57.717235 2025] [:error] [pid 19961:tid 19999] [client 52.167.167.52:5315] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl.php"] [unique_id "aRgIGTar7Si-84EApVQ-AwAAAcY"]
[Sat Nov 15 12:56:58.196889 2025] [:error] [pid 20346:tid 20358] [client 52.167.167.52:5359] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl.php"] [unique_id "aRgIGp7hsydZdIoVTlvaHgAAAwk"]
[Sat Nov 15 12:56:58.641207 2025] [:error] [pid 19961:tid 19998] [client 52.167.167.52:8255] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl.php"] [unique_id "aRgIGjar7Si-84EApVQ-BgAAAcU"]
[Sat Nov 15 12:56:59.132497 2025] [:error] [pid 27997:tid 28017] [client 52.167.167.52:1524] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r4f_1.php"] [unique_id "aRgIG9pja_6cDxKbxFmX2AAAANI"]
[Sat Nov 15 12:56:59.612019 2025] [:error] [pid 27909:tid 27933] [client 52.167.167.52:5342] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r4f_1.php"] [unique_id "aRgIGyTfZ6B57n8HepX1BAAAABQ"]
[Sat Nov 15 12:57:00.142598 2025] [:error] [pid 20313:tid 20329] [client 52.167.167.52:7358] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r4f_1.php"] [unique_id "aRgIHBI9DXIgPadBLUZZuwAAAs0"]
[Sat Nov 15 12:57:00.681930 2025] [:error] [pid 27909:tid 27921] [client 52.167.167.52:2792] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r4f_1.php"] [unique_id "aRgIHCTfZ6B57n8HepX1BgAAAAg"]
[Sat Nov 15 12:57:01.146960 2025] [:error] [pid 20654:tid 20664] [client 52.167.167.52:2788] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sarang.php"] [unique_id "aRgIHXcS7eC8vO76_yd9KgAAA4c"]
[Sat Nov 15 12:57:01.641058 2025] [:error] [pid 22613:tid 22627] [client 52.167.167.52:7311] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sarang.php"] [unique_id "aRgIHSoyR3cDsIRGPRmFEQAAAgw"]
[Sat Nov 15 12:57:02.158612 2025] [:error] [pid 20654:tid 20675] [client 52.167.167.52:7352] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sarang.php"] [unique_id "aRgIHncS7eC8vO76_yd9LAAAA5I"]
[Sat Nov 15 12:57:02.684839 2025] [:error] [pid 27911:tid 27989] [client 52.167.167.52:1505] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sarang.php"] [unique_id "aRgIHsGzUdrhGBIfiKQt3AAAAJU"]
[Sat Nov 15 12:57:03.160839 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:7938] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aRgIH8jejiTUP1-IawOLYQAAAYU"]
[Sat Nov 15 12:57:03.631684 2025] [:error] [pid 19959:tid 19987] [client 52.167.167.52:2754] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aRgIH8jejiTUP1-IawOLYwAAAZU"]
[Sat Nov 15 12:57:04.109693 2025] [:error] [pid 27909:tid 27926] [client 52.167.167.52:8206] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aRgIICTfZ6B57n8HepX1CwAAAA0"]
[Sat Nov 15 12:57:04.641245 2025] [:error] [pid 27909:tid 27922] [client 52.167.167.52:8238] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aRgIICTfZ6B57n8HepX1DAAAAAk"]
[Sat Nov 15 12:57:05.091386 2025] [:error] [pid 22613:tid 22623] [client 52.167.167.52:1502] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aRgIISoyR3cDsIRGPRmFFAAAAgg"]
[Sat Nov 15 12:57:05.674646 2025] [:error] [pid 22613:tid 22628] [client 52.167.167.52:8247] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aRgIISoyR3cDsIRGPRmFGAAAAg0"]
[Sat Nov 15 12:57:06.119678 2025] [:error] [pid 19959:tid 19983] [client 52.167.167.52:4689] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aRgIIsjejiTUP1-IawOLZwAAAZE"]
[Sat Nov 15 12:57:06.684662 2025] [:error] [pid 19959:tid 19985] [client 52.167.167.52:9230] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aRgIIsjejiTUP1-IawOLaQAAAZM"]
[Sat Nov 15 12:57:07.147965 2025] [:error] [pid 20346:tid 20356] [client 52.167.167.52:7997] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xo.php"] [unique_id "aRgII57hsydZdIoVTlvaJgAAAwc"]
[Sat Nov 15 12:57:07.616806 2025] [:error] [pid 22613:tid 22625] [client 52.167.167.52:2763] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xo.php"] [unique_id "aRgIIyoyR3cDsIRGPRmFGQAAAgo"]
[Sat Nov 15 12:57:08.101514 2025] [:error] [pid 27909:tid 27936] [client 52.167.167.52:2766] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xo.php"] [unique_id "aRgIJCTfZ6B57n8HepX1DQAAABc"]
[Sat Nov 15 12:57:08.587039 2025] [:error] [pid 20313:tid 20326] [client 52.167.167.52:10465] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xo.php"] [unique_id "aRgIJBI9DXIgPadBLUZZyQAAAso"]
[Sat Nov 15 12:57:09.022051 2025] [:error] [pid 27911:tid 27972] [client 52.167.167.52:9726] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggs.php"] [unique_id "aRgIJcGzUdrhGBIfiKQt4QAAAIQ"]
[Sat Nov 15 12:57:09.512275 2025] [:error] [pid 27911:tid 27970] [client 52.167.167.52:9279] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggs.php"] [unique_id "aRgIJcGzUdrhGBIfiKQt5AAAAII"]
[Sat Nov 15 12:57:10.029469 2025] [:error] [pid 20313:tid 20340] [client 52.167.167.52:4733] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggs.php"] [unique_id "aRgIJhI9DXIgPadBLUZZzAAAAtg"]
[Sat Nov 15 12:57:10.565872 2025] [:error] [pid 22765:tid 22775] [client 52.167.167.52:3236] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggs.php"] [unique_id "aRgIJqbrQzjuZmPIWDaooAAAAoU"]
[Sat Nov 15 12:57:11.103687 2025] [:error] [pid 27997:tid 28004] [client 52.167.167.52:8511] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIJ9pja_6cDxKbxFmX3wAAAMU"]
[Sat Nov 15 12:57:11.573281 2025] [:error] [pid 27997:tid 28002] [client 52.167.167.52:4712] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIJ9pja_6cDxKbxFmX4AAAAMM"]
[Sat Nov 15 12:57:12.008987 2025] [:error] [pid 20346:tid 20371] [client 52.167.167.52:7569] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIKJ7hsydZdIoVTlvaKwAAAxY"]
[Sat Nov 15 12:57:12.575266 2025] [:error] [pid 20346:tid 20357] [client 52.167.167.52:7872] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIKJ7hsydZdIoVTlvaLQAAAwg"]
[Sat Nov 15 12:57:13.067996 2025] [:error] [pid 19959:tid 19990] [client 52.167.167.52:4713] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aRgIKcjejiTUP1-IawOLcwAAAZg"]
[Sat Nov 15 12:57:13.532139 2025] [:error] [pid 20346:tid 20352] [client 52.167.167.52:9707] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aRgIKZ7hsydZdIoVTlvaMgAAAwM"]
[Sat Nov 15 12:57:14.061427 2025] [:error] [pid 20346:tid 20361] [client 52.167.167.52:9720] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aRgIKp7hsydZdIoVTlvaNAAAAww"]
[Sat Nov 15 12:57:14.510112 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:7574] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aRgIKncS7eC8vO76_yd9OQAAA5g"]
[Sat Nov 15 12:57:15.035395 2025] [:error] [pid 19959:tid 19982] [client 52.167.167.52:10450] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wsr2.php"] [unique_id "aRgIK8jejiTUP1-IawOLdwAAAZA"]
[Sat Nov 15 12:57:15.528202 2025] [:error] [pid 19959:tid 19976] [client 52.167.167.52:7578] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wsr2.php"] [unique_id "aRgIK8jejiTUP1-IawOLeAAAAYo"]
[Sat Nov 15 12:57:16.002507 2025] [:error] [pid 20654:tid 20661] [client 52.167.167.52:8453] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wsr2.php"] [unique_id "aRgILHcS7eC8vO76_yd9PQAAA4Q"]
[Sat Nov 15 12:57:16.423207 2025] [:error] [pid 22765:tid 22772] [client 52.167.167.52:10458] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wsr2.php"] [unique_id "aRgILKbrQzjuZmPIWDaoowAAAoQ"]
[Sat Nov 15 12:57:16.866219 2025] [:error] [pid 27911:tid 27975] [client 52.167.167.52:9721] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aRgILMGzUdrhGBIfiKQt7AAAAIc"]
[Sat Nov 15 12:57:17.323634 2025] [:error] [pid 20346:tid 20363] [client 52.167.167.52:7562] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aRgILZ7hsydZdIoVTlvaOgAAAw4"]
[Sat Nov 15 12:57:17.932366 2025] [:error] [pid 20654:tid 20675] [client 52.167.167.52:8501] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aRgILXcS7eC8vO76_yd9QwAAA5I"]
[Sat Nov 15 12:57:18.374726 2025] [:error] [pid 20654:tid 20672] [client 52.167.167.52:9679] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aRgILncS7eC8vO76_yd9RAAAA48"]
[Sat Nov 15 12:57:18.879290 2025] [:error] [pid 20346:tid 20356] [client 52.167.167.52:7890] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aRgILp7hsydZdIoVTlvaPgAAAwc"]
[Sat Nov 15 12:57:19.310138 2025] [:error] [pid 20346:tid 20361] [client 52.167.167.52:7589] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aRgIL57hsydZdIoVTlvaPwAAAww"]
[Sat Nov 15 12:57:19.774826 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:7160] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aRgIL3cS7eC8vO76_yd9RwAAA5g"]
[Sat Nov 15 12:57:20.224226 2025] [:error] [pid 20313:tid 20319] [client 52.167.167.52:7166] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aRgIMBI9DXIgPadBLUZZ0QAAAsM"]
[Sat Nov 15 12:57:20.812950 2025] [:error] [pid 19959:tid 19980] [client 52.167.167.52:7113] [client 52.167.167.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aRgIMMjejiTUP1-IawOLegAAAY4"]
[Sat Nov 15 12:57:21.334704 2025] [:error] [pid 27911:tid 27973] [client 52.167.167.52:9574] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aRgIMcGzUdrhGBIfiKQt8QAAAIU"]
[Sat Nov 15 12:57:21.920750 2025] [:error] [pid 27909:tid 27926] [client 52.167.167.52:7707] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aRgIMSTfZ6B57n8HepX1FQAAAA0"]
[Sat Nov 15 12:57:22.370927 2025] [:error] [pid 22765:tid 22793] [client 52.167.167.52:7125] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aRgIMqbrQzjuZmPIWDaopAAAApc"]
[Sat Nov 15 12:57:22.871000 2025] [:error] [pid 20313:tid 20316] [client 52.167.167.52:7690] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxx.php"] [unique_id "aRgIMhI9DXIgPadBLUZZ1wAAAsA"]
[Sat Nov 15 12:57:23.284787 2025] [:error] [pid 19961:tid 19999] [client 52.167.167.52:9891] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxx.php"] [unique_id "aRgIMzar7Si-84EApVQ-GAAAAcY"]
[Sat Nov 15 12:57:23.740948 2025] [:error] [pid 27911:tid 27992] [client 52.167.167.52:7165] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxx.php"] [unique_id "aRgIM8GzUdrhGBIfiKQt9gAAAJg"]
[Sat Nov 15 12:57:24.210728 2025] [:error] [pid 27997:tid 28008] [client 52.167.167.52:7571] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nxx.php"] [unique_id "aRgINNpja_6cDxKbxFmX6gAAAMk"]
[Sat Nov 15 12:57:24.741163 2025] [:error] [pid 19961:tid 20007] [client 52.167.167.52:8743] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aRgINDar7Si-84EApVQ-GwAAAc4"]
[Sat Nov 15 12:57:25.230160 2025] [:error] [pid 27909:tid 27929] [client 52.167.167.52:7891] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aRgINSTfZ6B57n8HepX1GQAAABA"]
[Sat Nov 15 12:57:25.677139 2025] [:error] [pid 22765:tid 22770] [client 52.167.167.52:9880] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aRgINabrQzjuZmPIWDaopgAAAoI"]
[Sat Nov 15 12:57:26.136875 2025] [:error] [pid 20313:tid 20328] [client 52.167.167.52:7116] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aRgINhI9DXIgPadBLUZZ2QAAAsw"]
[Sat Nov 15 12:57:26.550336 2025] [:error] [pid 20313:tid 20320] [client 52.167.167.52:7716] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aRgINhI9DXIgPadBLUZZ2wAAAsQ"]
[Sat Nov 15 12:57:26.998582 2025] [:error] [pid 20313:tid 20336] [client 52.167.167.52:9588] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aRgINhI9DXIgPadBLUZZ3QAAAtQ"]
[Sat Nov 15 12:57:27.505715 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:7710] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aRgIN57hsydZdIoVTlvaRAAAAw8"]
[Sat Nov 15 12:57:28.023242 2025] [:error] [pid 27909:tid 27935] [client 52.167.167.52:7594] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aRgIOCTfZ6B57n8HepX1HAAAABY"]
[Sat Nov 15 12:57:28.546107 2025] [:error] [pid 20654:tid 20669] [client 52.167.167.52:7728] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aRgIOHcS7eC8vO76_yd9VwAAA4w"]
[Sat Nov 15 12:57:28.983707 2025] [:error] [pid 20346:tid 20369] [client 52.167.167.52:9560] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aRgIOJ7hsydZdIoVTlvaRwAAAxQ"]
[Sat Nov 15 12:57:29.508255 2025] [:error] [pid 20654:tid 20677] [client 52.167.167.52:7570] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aRgIOXcS7eC8vO76_yd9WAAAA5Q"]
[Sat Nov 15 12:57:29.989716 2025] [:error] [pid 20654:tid 20670] [client 52.167.167.52:7935] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aRgIOXcS7eC8vO76_yd9WQAAA40"]
[Sat Nov 15 12:57:30.468782 2025] [:error] [pid 19959:tid 19981] [client 52.167.167.52:8710] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aRgIOsjejiTUP1-IawOLgAAAAY8"]
[Sat Nov 15 12:57:30.952359 2025] [:error] [pid 19961:tid 20017] [client 52.167.167.52:6916] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aRgIOjar7Si-84EApVQ-IAAAAdg"]
[Sat Nov 15 12:57:31.523650 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:9573] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aRgIO8jejiTUP1-IawOLggAAAYU"]
[Sat Nov 15 12:57:32.037342 2025] [:error] [pid 19959:tid 19989] [client 52.167.167.52:7719] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aRgIPMjejiTUP1-IawOLgwAAAZc"]
[Sat Nov 15 12:57:32.470646 2025] [:error] [pid 27997:tid 28015] [client 52.167.167.52:8744] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dex.php"] [unique_id "aRgIPNpja_6cDxKbxFmX7wAAANA"]
[Sat Nov 15 12:57:32.921040 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:5865] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dex.php"] [unique_id "aRgIPHcS7eC8vO76_yd9XgAAA5U"]
[Sat Nov 15 12:57:33.402019 2025] [:error] [pid 22613:tid 22626] [client 52.167.167.52:8709] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dex.php"] [unique_id "aRgIPSoyR3cDsIRGPRmFJgAAAgs"]
[Sat Nov 15 12:57:33.992901 2025] [:error] [pid 27909:tid 27936] [client 52.167.167.52:7157] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dex.php"] [unique_id "aRgIPSTfZ6B57n8HepX1IQAAABc"]
[Sat Nov 15 12:57:34.509201 2025] [:error] [pid 20313:tid 20331] [client 52.167.167.52:7717] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sad.php"] [unique_id "aRgIPhI9DXIgPadBLUZZ5AAAAs8"]
[Sat Nov 15 12:57:34.953350 2025] [:error] [pid 20313:tid 20330] [client 52.167.167.52:8578] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sad.php"] [unique_id "aRgIPhI9DXIgPadBLUZZ5QAAAs4"]
[Sat Nov 15 12:57:35.490757 2025] [proxy_fcgi:error] [pid 27997:tid 28004] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:35.727066 2025] [proxy_fcgi:error] [pid 27997:tid 27999] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:35.933817 2025] [proxy_fcgi:error] [pid 27997:tid 28009] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:36.140242 2025] [proxy_fcgi:error] [pid 27997:tid 28017] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:36.347404 2025] [proxy_fcgi:error] [pid 27997:tid 28011] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:36.568991 2025] [proxy_fcgi:error] [pid 27997:tid 28001] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:36.799799 2025] [proxy_fcgi:error] [pid 27997:tid 28008] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:37.004336 2025] [proxy_fcgi:error] [pid 27997:tid 28007] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:37.211400 2025] [proxy_fcgi:error] [pid 27997:tid 28010] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:37.422091 2025] [proxy_fcgi:error] [pid 27997:tid 28018] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:37.629311 2025] [proxy_fcgi:error] [pid 27997:tid 28003] [client 52.167.167.52:8749] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:57:37.836322 2025] [:error] [pid 27997:tid 28005] [client 52.167.167.52:8749] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aRgIQdpja_6cDxKbxFmX_wAAAMY"]
[Sat Nov 15 12:57:38.331176 2025] [:error] [pid 20654:tid 20670] [client 52.167.167.52:9554] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aRgIQncS7eC8vO76_yd9ZAAAA40"]
[Sat Nov 15 12:57:38.759694 2025] [:error] [pid 20313:tid 20323] [client 52.167.167.52:8724] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aRgIQhI9DXIgPadBLUZZ6AAAAsc"]
[Sat Nov 15 12:57:39.284976 2025] [:error] [pid 20346:tid 20361] [client 52.167.167.52:10423] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aRgIQ57hsydZdIoVTlvaUgAAAww"]
[Sat Nov 15 12:57:39.753960 2025] [:error] [pid 19961:tid 20014] [client 52.167.167.52:7704] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bin.php"] [unique_id "aRgIQzar7Si-84EApVQ-JgAAAdU"]
[Sat Nov 15 12:57:40.226504 2025] [:error] [pid 27911:tid 27992] [client 52.167.167.52:7121] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bin.php"] [unique_id "aRgIRMGzUdrhGBIfiKQuAgAAAJg"]
[Sat Nov 15 12:57:40.774543 2025] [:error] [pid 19959:tid 19977] [client 52.167.167.52:7732] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bin.php"] [unique_id "aRgIRMjejiTUP1-IawOLiwAAAYs"]
[Sat Nov 15 12:57:41.328818 2025] [:error] [pid 20654:tid 20665] [client 52.167.167.52:8747] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bin.php"] [unique_id "aRgIRXcS7eC8vO76_yd9agAAA4g"]
[Sat Nov 15 12:57:41.862625 2025] [:error] [pid 20313:tid 20340] [client 52.167.167.52:7122] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yee.php"] [unique_id "aRgIRRI9DXIgPadBLUZZ7gAAAtg"]
[Sat Nov 15 12:57:42.381677 2025] [:error] [pid 20654:tid 20671] [client 52.167.167.52:8605] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yee.php"] [unique_id "aRgIRncS7eC8vO76_yd9bgAAA44"]
[Sat Nov 15 12:57:42.900348 2025] [:error] [pid 20313:tid 20332] [client 52.167.167.52:8734] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yee.php"] [unique_id "aRgIRhI9DXIgPadBLUZZ7wAAAtA"]
[Sat Nov 15 12:57:43.358172 2025] [:error] [pid 19961:tid 20004] [client 52.167.167.52:8607] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yee.php"] [unique_id "aRgIRzar7Si-84EApVQ-KgAAAcs"]
[Sat Nov 15 12:57:43.840251 2025] [:error] [pid 20346:tid 20354] [client 52.167.167.52:7739] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/epinyins.php"] [unique_id "aRgIR57hsydZdIoVTlvaWAAAAwU"]
[Sat Nov 15 12:57:44.355601 2025] [:error] [pid 20313:tid 20337] [client 52.167.167.52:6954] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/epinyins.php"] [unique_id "aRgISBI9DXIgPadBLUZZ8QAAAtU"]
[Sat Nov 15 12:57:44.847505 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:7689] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/epinyins.php"] [unique_id "aRgISJ7hsydZdIoVTlvaXAAAAw8"]
[Sat Nov 15 12:57:45.315000 2025] [:error] [pid 22613:tid 22636] [client 52.167.167.52:9561] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/epinyins.php"] [unique_id "aRgISSoyR3cDsIRGPRmFNQAAAhU"]
[Sat Nov 15 12:57:45.819202 2025] [:error] [pid 22613:tid 22620] [client 52.167.167.52:10423] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa17.php"] [unique_id "aRgISSoyR3cDsIRGPRmFNwAAAgU"]
[Sat Nov 15 12:57:46.359345 2025] [:error] [pid 20346:tid 20372] [client 52.167.167.52:6956] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa17.php"] [unique_id "aRgISp7hsydZdIoVTlvaXwAAAxc"]
[Sat Nov 15 12:57:46.906058 2025] [:error] [pid 19959:tid 19979] [client 52.167.167.52:3853] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa17.php"] [unique_id "aRgISsjejiTUP1-IawOLjgAAAY0"]
[Sat Nov 15 12:57:47.469217 2025] [:error] [pid 27909:tid 27930] [client 52.167.167.52:8615] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa17.php"] [unique_id "aRgISyTfZ6B57n8HepX1KAAAABE"]
[Sat Nov 15 12:57:47.964837 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:6937] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/winkel.php"] [unique_id "aRgIS3cS7eC8vO76_yd9dAAAA5g"]
[Sat Nov 15 12:57:48.426293 2025] [:error] [pid 20654:tid 20667] [client 52.167.167.52:7693] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/winkel.php"] [unique_id "aRgITHcS7eC8vO76_yd9dwAAA4o"]
[Sat Nov 15 12:57:48.997169 2025] [:error] [pid 19961:tid 19996] [client 52.167.167.52:10952] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/winkel.php"] [unique_id "aRgITDar7Si-84EApVQ-MgAAAcM"]
[Sat Nov 15 12:57:49.535817 2025] [:error] [pid 22765:tid 22779] [client 52.167.167.52:9586] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/winkel.php"] [unique_id "aRgITabrQzjuZmPIWDaouQAAAok"]
[Sat Nov 15 12:57:50.034960 2025] [:error] [pid 19961:tid 20005] [client 52.167.167.52:9548] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ef.php"] [unique_id "aRgITjar7Si-84EApVQ-NwAAAcw"]
[Sat Nov 15 12:57:50.489371 2025] [:error] [pid 20654:tid 20660] [client 52.167.167.52:7358] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ef.php"] [unique_id "aRgITncS7eC8vO76_yd9fAAAA4M"]
[Sat Nov 15 12:57:51.011616 2025] [:error] [pid 27909:tid 27917] [client 52.167.167.52:5863] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ef.php"] [unique_id "aRgITyTfZ6B57n8HepX1KwAAAAQ"]
[Sat Nov 15 12:57:51.495872 2025] [:error] [pid 22765:tid 22781] [client 52.167.167.52:9590] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ef.php"] [unique_id "aRgIT6brQzjuZmPIWDaovgAAAos"]
[Sat Nov 15 12:57:52.010847 2025] [:error] [pid 20654:tid 20667] [client 52.167.167.52:6917] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass4.php"] [unique_id "aRgIUHcS7eC8vO76_yd9hQAAA4o"]
[Sat Nov 15 12:57:52.545810 2025] [:error] [pid 27909:tid 27913] [client 52.167.167.52:5659] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass4.php"] [unique_id "aRgIUCTfZ6B57n8HepX1MwAAAAA"]
[Sat Nov 15 12:57:53.194362 2025] [:error] [pid 20654:tid 20658] [client 52.167.167.52:8601] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass4.php"] [unique_id "aRgIUXcS7eC8vO76_yd9jQAAA4E"]
[Sat Nov 15 12:57:53.660333 2025] [:error] [pid 19961:tid 20001] [client 52.167.167.52:6930] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass4.php"] [unique_id "aRgIUTar7Si-84EApVQ-QQAAAcg"]
[Sat Nov 15 12:57:54.185994 2025] [:error] [pid 19961:tid 19995] [client 52.167.167.52:8606] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aRgIUjar7Si-84EApVQ-RAAAAcI"]
[Sat Nov 15 12:57:54.649578 2025] [:error] [pid 27911:tid 27975] [client 52.167.167.52:6946] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aRgIUsGzUdrhGBIfiKQuDQAAAIc"]
[Sat Nov 15 12:57:55.103877 2025] [:error] [pid 27997:tid 27999] [client 52.167.167.52:8595] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aRgIU9pja_6cDxKbxFmYGQAAAMA"]
[Sat Nov 15 12:57:55.609078 2025] [:error] [pid 20313:tid 20333] [client 52.167.167.52:8581] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aRgIUxI9DXIgPadBLUZZ_wAAAtE"]
[Sat Nov 15 12:57:56.161934 2025] [:error] [pid 19961:tid 20007] [client 52.167.167.52:8583] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aRgIVDar7Si-84EApVQ-RgAAAc4"]
[Sat Nov 15 12:57:56.736703 2025] [:error] [pid 22765:tid 22781] [client 52.167.167.52:6974] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aRgIVKbrQzjuZmPIWDaoygAAAos"]
[Sat Nov 15 12:57:57.257816 2025] [:error] [pid 20654:tid 20676] [client 52.167.167.52:8620] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aRgIVXcS7eC8vO76_yd9lwAAA5M"]
[Sat Nov 15 12:57:57.711225 2025] [:error] [pid 22765:tid 22792] [client 52.167.167.52:8746] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aRgIVabrQzjuZmPIWDaozgAAApY"]
[Sat Nov 15 12:57:58.240883 2025] [:error] [pid 22613:tid 22624] [client 52.167.167.52:8638] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-su.php"] [unique_id "aRgIVioyR3cDsIRGPRmFTwAAAgk"]
[Sat Nov 15 12:57:58.747628 2025] [:error] [pid 22765:tid 22777] [client 52.167.167.52:8719] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-su.php"] [unique_id "aRgIVqbrQzjuZmPIWDaozwAAAoc"]
[Sat Nov 15 12:57:59.233288 2025] [:error] [pid 19961:tid 20015] [client 52.167.167.52:10966] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-su.php"] [unique_id "aRgIVzar7Si-84EApVQ-RwAAAdY"]
[Sat Nov 15 12:57:59.724873 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:5843] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-su.php"] [unique_id "aRgIV57hsydZdIoVTlvacgAAAw8"]
[Sat Nov 15 12:58:00.315875 2025] [:error] [pid 22765:tid 22779] [client 52.167.167.52:5830] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t3x.php"] [unique_id "aRgIWKbrQzjuZmPIWDao0AAAAok"]
[Sat Nov 15 12:58:00.962053 2025] [:error] [pid 27911:tid 27981] [client 52.167.167.52:4639] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t3x.php"] [unique_id "aRgIWMGzUdrhGBIfiKQuFgAAAI0"]
[Sat Nov 15 12:58:01.458821 2025] [:error] [pid 27909:tid 27934] [client 52.167.167.52:5871] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t3x.php"] [unique_id "aRgIWSTfZ6B57n8HepX1QAAAABU"]
[Sat Nov 15 12:58:02.006464 2025] [:error] [pid 20654:tid 20669] [client 52.167.167.52:8722] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t3x.php"] [unique_id "aRgIWncS7eC8vO76_yd9mgAAA4w"]
[Sat Nov 15 12:58:02.466938 2025] [:error] [pid 22765:tid 22768] [client 52.167.167.52:10957] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aRgIWqbrQzjuZmPIWDao0gAAAoA"]
[Sat Nov 15 12:58:03.046202 2025] [:error] [pid 27997:tid 28005] [client 52.167.167.52:10959] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aRgIW9pja_6cDxKbxFmYHQAAAMY"]
[Sat Nov 15 12:58:03.515027 2025] [:error] [pid 27997:tid 28019] [client 52.167.167.52:7730] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aRgIW9pja_6cDxKbxFmYHgAAANQ"]
[Sat Nov 15 12:58:03.940046 2025] [:error] [pid 20346:tid 20357] [client 52.167.167.52:4653] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aRgIW57hsydZdIoVTlvaeQAAAwg"]
[Sat Nov 15 12:58:04.389181 2025] [:error] [pid 27997:tid 28015] [client 52.167.167.52:4659] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasnu.php"] [unique_id "aRgIXNpja_6cDxKbxFmYHwAAANA"]
[Sat Nov 15 12:58:04.876537 2025] [:error] [pid 27909:tid 27920] [client 52.167.167.52:8580] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasnu.php"] [unique_id "aRgIXCTfZ6B57n8HepX1QgAAAAc"]
[Sat Nov 15 12:58:05.392862 2025] [:error] [pid 22765:tid 22785] [client 52.167.167.52:6947] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasnu.php"] [unique_id "aRgIXabrQzjuZmPIWDao1gAAAo8"]
[Sat Nov 15 12:58:05.878861 2025] [:error] [pid 27997:tid 28016] [client 52.167.167.52:10423] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasnu.php"] [unique_id "aRgIXdpja_6cDxKbxFmYIwAAANE"]
[Sat Nov 15 12:58:06.384627 2025] [:error] [pid 27997:tid 28020] [client 52.167.167.52:5669] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trd.php"] [unique_id "aRgIXtpja_6cDxKbxFmYJAAAANU"]
[Sat Nov 15 12:58:06.944870 2025] [:error] [pid 20346:tid 20350] [client 52.167.167.52:5658] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trd.php"] [unique_id "aRgIXp7hsydZdIoVTlvafAAAAwE"]
[Sat Nov 15 12:58:07.431191 2025] [:error] [pid 27909:tid 27918] [client 52.167.167.52:5638] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trd.php"] [unique_id "aRgIXyTfZ6B57n8HepX1RQAAAAU"]
[Sat Nov 15 12:58:07.971902 2025] [:error] [pid 19961:tid 20011] [client 52.167.167.52:6921] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trd.php"] [unique_id "aRgIXzar7Si-84EApVQ-TAAAAdI"]
[Sat Nov 15 12:58:08.614606 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:3901] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oiepfuav.php"] [unique_id "aRgIYHcS7eC8vO76_yd9ogAAA5g"]
[Sat Nov 15 12:58:09.192231 2025] [:error] [pid 27997:tid 27999] [client 52.167.167.52:5649] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oiepfuav.php"] [unique_id "aRgIYdpja_6cDxKbxFmYJwAAAMA"]
[Sat Nov 15 12:58:09.617203 2025] [:error] [pid 27911:tid 27968] [client 52.167.167.52:3874] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oiepfuav.php"] [unique_id "aRgIYcGzUdrhGBIfiKQuGgAAAIA"]
[Sat Nov 15 12:58:10.157279 2025] [:error] [pid 20313:tid 20319] [client 52.167.167.52:5684] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oiepfuav.php"] [unique_id "aRgIYhI9DXIgPadBLUZaCAAAAsM"]
[Sat Nov 15 12:58:10.643039 2025] [:error] [pid 27911:tid 27980] [client 52.167.167.52:6970] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/02.php"] [unique_id "aRgIYsGzUdrhGBIfiKQuGwAAAIw"]
[Sat Nov 15 12:58:11.127010 2025] [:error] [pid 27997:tid 28007] [client 52.167.167.52:4669] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/02.php"] [unique_id "aRgIY9pja_6cDxKbxFmYKgAAAMg"]
[Sat Nov 15 12:58:11.664183 2025] [:error] [pid 19959:tid 19990] [client 52.167.167.52:3863] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/02.php"] [unique_id "aRgIY8jejiTUP1-IawOLtgAAAZg"]
[Sat Nov 15 12:58:12.220634 2025] [:error] [pid 27997:tid 28003] [client 52.167.167.52:4665] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/02.php"] [unique_id "aRgIZNpja_6cDxKbxFmYLQAAAMQ"]
[Sat Nov 15 12:58:12.684364 2025] [:error] [pid 27997:tid 28004] [client 52.167.167.52:6949] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aRgIZNpja_6cDxKbxFmYLgAAAMU"]
[Sat Nov 15 12:58:13.210523 2025] [:error] [pid 20346:tid 20349] [client 52.167.167.52:5828] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aRgIZZ7hsydZdIoVTlvagwAAAwA"]
[Sat Nov 15 12:58:13.686809 2025] [:error] [pid 22765:tid 22771] [client 52.167.167.52:6922] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aRgIZabrQzjuZmPIWDao4gAAAoM"]
[Sat Nov 15 12:58:14.240100 2025] [:error] [pid 20346:tid 20369] [client 52.167.167.52:6963] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aRgIZp7hsydZdIoVTlvahQAAAxQ"]
[Sat Nov 15 12:58:14.808418 2025] [:error] [pid 20654:tid 20666] [client 52.167.167.52:10963] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aRgIZncS7eC8vO76_yd9pgAAA4k"]
[Sat Nov 15 12:58:15.311760 2025] [:error] [pid 22613:tid 22637] [client 52.167.167.52:5660] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aRgIZyoyR3cDsIRGPRmFUgAAAhY"]
[Sat Nov 15 12:58:15.799187 2025] [:error] [pid 20654:tid 20681] [client 52.167.167.52:5862] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aRgIZ3cS7eC8vO76_yd9rAAAA5g"]
[Sat Nov 15 12:58:16.252971 2025] [:error] [pid 22765:tid 22778] [client 52.167.167.52:4640] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aRgIaKbrQzjuZmPIWDao6QAAAog"]
[Sat Nov 15 12:58:16.839970 2025] [:error] [pid 20346:tid 20366] [client 52.167.167.52:3173] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aRgIaJ7hsydZdIoVTlvaiAAAAxE"]
[Sat Nov 15 12:58:17.355081 2025] [:error] [pid 22613:tid 22638] [client 52.167.167.52:4652] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aRgIaSoyR3cDsIRGPRmFUwAAAhc"]
[Sat Nov 15 12:58:17.806121 2025] [:error] [pid 22613:tid 22635] [client 52.167.167.52:4668] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aRgIaSoyR3cDsIRGPRmFVAAAAhQ"]
[Sat Nov 15 12:58:18.288574 2025] [:error] [pid 27909:tid 27930] [client 52.167.167.52:1701] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aRgIaiTfZ6B57n8HepX1TwAAABE"]
[Sat Nov 15 12:58:18.838150 2025] [:error] [pid 20346:tid 20349] [client 52.167.167.52:5824] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btufulhs.php"] [unique_id "aRgIap7hsydZdIoVTlvajQAAAwA"]
[Sat Nov 15 12:58:19.323307 2025] [:error] [pid 20313:tid 20329] [client 52.167.167.52:10949] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btufulhs.php"] [unique_id "aRgIaxI9DXIgPadBLUZaDQAAAs0"]
[Sat Nov 15 12:58:19.769291 2025] [:error] [pid 22765:tid 22772] [client 52.167.167.52:5860] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btufulhs.php"] [unique_id "aRgIa6brQzjuZmPIWDao7AAAAoQ"]
[Sat Nov 15 12:58:20.197077 2025] [:error] [pid 19959:tid 19972] [client 52.167.167.52:10992] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btufulhs.php"] [unique_id "aRgIbMjejiTUP1-IawOLvwAAAYY"]
[Sat Nov 15 12:58:20.719676 2025] [:error] [pid 27909:tid 27914] [client 52.167.167.52:3882] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "aRgIbCTfZ6B57n8HepX1UwAAAAE"]
[Sat Nov 15 12:58:21.280563 2025] [:error] [pid 22765:tid 22787] [client 52.167.167.52:3887] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "aRgIbabrQzjuZmPIWDao7gAAApE"]
[Sat Nov 15 12:58:21.836911 2025] [:error] [pid 22765:tid 22785] [client 52.167.167.52:4655] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "aRgIbabrQzjuZmPIWDao7wAAAo8"]
[Sat Nov 15 12:58:22.321622 2025] [:error] [pid 20346:tid 20373] [client 52.167.167.52:1667] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "aRgIbp7hsydZdIoVTlvajwAAAxg"]
[Sat Nov 15 12:58:22.804709 2025] [:error] [pid 20346:tid 20359] [client 52.167.167.52:1668] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb5.php"] [unique_id "aRgIbp7hsydZdIoVTlvakAAAAwo"]
[Sat Nov 15 12:58:23.328733 2025] [:error] [pid 19959:tid 19966] [client 52.167.167.52:1669] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb5.php"] [unique_id "aRgIb8jejiTUP1-IawOLxQAAAYA"]
[Sat Nov 15 12:58:23.861473 2025] [:error] [pid 20346:tid 20366] [client 52.167.167.52:1688] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb5.php"] [unique_id "aRgIb57hsydZdIoVTlvalAAAAxE"]
[Sat Nov 15 12:58:24.326441 2025] [:error] [pid 19961:tid 20010] [client 52.167.167.52:5873] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb5.php"] [unique_id "aRgIcDar7Si-84EApVQ-UwAAAdE"]
[Sat Nov 15 12:58:24.812539 2025] [:error] [pid 22765:tid 22771] [client 52.167.167.52:6459] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "aRgIcKbrQzjuZmPIWDao9QAAAoM"]
[Sat Nov 15 12:58:25.282855 2025] [:error] [pid 22765:tid 22781] [client 52.167.167.52:10582] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "aRgIcabrQzjuZmPIWDao9gAAAos"]
[Sat Nov 15 12:58:25.736778 2025] [:error] [pid 20313:tid 20336] [client 52.167.167.52:10961] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "aRgIcRI9DXIgPadBLUZaEAAAAtQ"]
[Sat Nov 15 12:58:26.183474 2025] [:error] [pid 27997:tid 28001] [client 52.167.167.52:4563] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "aRgIctpja_6cDxKbxFmYOwAAAMI"]
[Sat Nov 15 12:58:26.890866 2025] [:error] [pid 27997:tid 28007] [client 52.167.167.52:4581] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aRgIctpja_6cDxKbxFmYPAAAAMg"]
[Sat Nov 15 12:58:27.357752 2025] [:error] [pid 27997:tid 28003] [client 52.167.167.52:5651] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aRgIc9pja_6cDxKbxFmYPQAAAMQ"]
[Sat Nov 15 12:58:27.865365 2025] [:error] [pid 27997:tid 28000] [client 52.167.167.52:5642] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aRgIc9pja_6cDxKbxFmYQAAAAME"]
[Sat Nov 15 12:58:28.313836 2025] [:error] [pid 22765:tid 22770] [client 52.167.167.52:4661] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aRgIdKbrQzjuZmPIWDao-gAAAoI"]
[Sat Nov 15 12:58:28.783053 2025] [:error] [pid 27997:tid 28015] [client 52.167.167.52:4637] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yzkvrell.php"] [unique_id "aRgIdNpja_6cDxKbxFmYRQAAANA"]
[Sat Nov 15 12:58:29.227067 2025] [:error] [pid 27909:tid 27923] [client 52.167.167.52:10995] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yzkvrell.php"] [unique_id "aRgIdSTfZ6B57n8HepX1YAAAAAo"]
[Sat Nov 15 12:58:29.717812 2025] [:error] [pid 27909:tid 27935] [client 52.167.167.52:3875] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yzkvrell.php"] [unique_id "aRgIdSTfZ6B57n8HepX1YwAAABY"]
[Sat Nov 15 12:58:30.154293 2025] [:error] [pid 27909:tid 27925] [client 52.167.167.52:10977] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yzkvrell.php"] [unique_id "aRgIdiTfZ6B57n8HepX1ZgAAAAw"]
[Sat Nov 15 12:58:30.575699 2025] [:error] [pid 20654:tid 20675] [client 52.167.167.52:7125] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aRgIdncS7eC8vO76_yd9wQAAA5I"]
[Sat Nov 15 12:58:31.049713 2025] [:error] [pid 27911:tid 27990] [client 52.167.167.52:6179] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aRgId8GzUdrhGBIfiKQuJwAAAJY"]
[Sat Nov 15 12:58:31.590762 2025] [:error] [pid 27911:tid 27973] [client 52.167.167.52:4649] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aRgId8GzUdrhGBIfiKQuKQAAAIU"]
[Sat Nov 15 12:58:32.140788 2025] [:error] [pid 20313:tid 20330] [client 52.167.167.52:3862] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aRgIeBI9DXIgPadBLUZaGQAAAs4"]
[Sat Nov 15 12:58:32.609316 2025] [:error] [pid 20654:tid 20674] [client 52.167.167.52:10960] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-749.php"] [unique_id "aRgIeHcS7eC8vO76_yd9xQAAA5E"]
[Sat Nov 15 12:58:33.110158 2025] [:error] [pid 20313:tid 20331] [client 52.167.167.52:1690] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-749.php"] [unique_id "aRgIeRI9DXIgPadBLUZaGgAAAs8"]
[Sat Nov 15 12:58:33.595621 2025] [:error] [pid 20346:tid 20350] [client 52.167.167.52:1711] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-749.php"] [unique_id "aRgIeZ7hsydZdIoVTlvamgAAAwE"]
[Sat Nov 15 12:58:34.046944 2025] [:error] [pid 20346:tid 20369] [client 52.167.167.52:3881] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-749.php"] [unique_id "aRgIep7hsydZdIoVTlvanQAAAxQ"]
[Sat Nov 15 12:58:34.610420 2025] [:error] [pid 20346:tid 20367] [client 52.167.167.52:1687] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/fm.php"] [unique_id "aRgIep7hsydZdIoVTlvangAAAxI"]
[Sat Nov 15 12:58:35.174362 2025] [:error] [pid 20346:tid 20366] [client 52.167.167.52:3898] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/fm.php"] [unique_id "aRgIe57hsydZdIoVTlvanwAAAxE"]
[Sat Nov 15 12:58:35.683643 2025] [:error] [pid 20654:tid 20657] [client 52.167.167.52:4632] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/fm.php"] [unique_id "aRgIe3cS7eC8vO76_yd9zAAAA4A"]
[Sat Nov 15 12:58:36.200429 2025] [:error] [pid 22765:tid 22776] [client 52.167.167.52:10951] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/fm.php"] [unique_id "aRgIfKbrQzjuZmPIWDapAQAAAoY"]
[Sat Nov 15 12:58:36.714815 2025] [:error] [pid 19961:tid 20002] [client 52.167.167.52:10572] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "aRgIfDar7Si-84EApVQ-XwAAAck"]
[Sat Nov 15 12:58:37.269847 2025] [proxy_fcgi:error] [pid 22613:tid 22637] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:37.477434 2025] [proxy_fcgi:error] [pid 22613:tid 22621] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:37.687311 2025] [proxy_fcgi:error] [pid 22613:tid 22622] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:37.895846 2025] [proxy_fcgi:error] [pid 22613:tid 22616] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:38.103990 2025] [proxy_fcgi:error] [pid 22613:tid 22638] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:38.314639 2025] [proxy_fcgi:error] [pid 22613:tid 22624] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:38.523520 2025] [proxy_fcgi:error] [pid 22613:tid 22623] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:38.733307 2025] [proxy_fcgi:error] [pid 22613:tid 22619] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:38.945698 2025] [proxy_fcgi:error] [pid 22613:tid 22628] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:39.162397 2025] [proxy_fcgi:error] [pid 22613:tid 22615] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:39.379168 2025] [proxy_fcgi:error] [pid 22613:tid 22631] [client 52.167.167.52:5647] AH01071: Got error 'Primary script unknown'
[Sat Nov 15 12:58:39.586742 2025] [:error] [pid 22613:tid 22633] [client 52.167.167.52:5647] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "aRgIfyoyR3cDsIRGPRmFdQAAAhI"]
[Sat Nov 15 12:58:40.051287 2025] [:error] [pid 19961:tid 20006] [client 52.167.167.52:10604] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "aRgIgDar7Si-84EApVQ-YQAAAc0"]
[Sat Nov 15 12:58:40.546745 2025] [:error] [pid 20313:tid 20333] [client 52.167.167.52:4636] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "aRgIgBI9DXIgPadBLUZaHgAAAtE"]
[Sat Nov 15 12:58:41.072887 2025] [:error] [pid 20654:tid 20670] [client 52.167.167.52:1716] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "aRgIgXcS7eC8vO76_yd91AAAA40"]
[Sat Nov 15 12:58:41.515316 2025] [:error] [pid 22765:tid 22784] [client 52.167.167.52:5666] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aRgIgabrQzjuZmPIWDapDAAAAo4"]
[Sat Nov 15 12:58:42.083172 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:4887] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aRgIgncS7eC8vO76_yd91wAAA5U"]
[Sat Nov 15 12:58:42.673459 2025] [:error] [pid 27997:tid 28002] [client 52.167.167.52:3850] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aRgIgtpja_6cDxKbxFmYVgAAAMM"]
[Sat Nov 15 12:58:43.142789 2025] [:error] [pid 20346:tid 20354] [client 52.167.167.52:1707] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aRgIg57hsydZdIoVTlvargAAAwU"]
[Sat Nov 15 12:58:43.735457 2025] [:error] [pid 20654:tid 20659] [client 52.167.167.52:1737] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aRgIg3cS7eC8vO76_yd92gAAA4I"]
[Sat Nov 15 12:58:44.234660 2025] [:error] [pid 27909:tid 27916] [client 52.167.167.52:6435] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aRgIhCTfZ6B57n8HepX1agAAAAM"]
[Sat Nov 15 12:58:44.692356 2025] [:error] [pid 20346:tid 20369] [client 52.167.167.52:5667] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aRgIhJ7hsydZdIoVTlvarwAAAxQ"]
[Sat Nov 15 12:58:45.123068 2025] [:error] [pid 27909:tid 27923] [client 52.167.167.52:3865] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aRgIhSTfZ6B57n8HepX1awAAAAo"]
[Sat Nov 15 12:58:45.666535 2025] [:error] [pid 27997:tid 28001] [client 52.167.167.52:1694] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4563.php"] [unique_id "aRgIhdpja_6cDxKbxFmYWQAAAMI"]
[Sat Nov 15 12:58:46.115802 2025] [:error] [pid 20313:tid 20328] [client 52.167.167.52:10825] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4563.php"] [unique_id "aRgIhhI9DXIgPadBLUZaIwAAAsw"]
[Sat Nov 15 12:58:46.589645 2025] [:error] [pid 19959:tid 19984] [client 52.167.167.52:3878] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4563.php"] [unique_id "aRgIhsjejiTUP1-IawOL2AAAAZI"]
[Sat Nov 15 12:58:47.195602 2025] [:error] [pid 22765:tid 22780] [client 52.167.167.52:1665] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4563.php"] [unique_id "aRgIh6brQzjuZmPIWDapFAAAAoo"]
[Sat Nov 15 12:58:47.689350 2025] [:error] [pid 19961:tid 19998] [client 52.167.167.52:4323] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aRgIhzar7Si-84EApVQ-ZgAAAcU"]
[Sat Nov 15 12:58:48.140748 2025] [:error] [pid 20346:tid 20370] [client 52.167.167.52:1788] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aRgIiJ7hsydZdIoVTlvatAAAAxU"]
[Sat Nov 15 12:58:48.583122 2025] [:error] [pid 20346:tid 20361] [client 52.167.167.52:4891] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aRgIiJ7hsydZdIoVTlvatgAAAww"]
[Sat Nov 15 12:58:49.049830 2025] [:error] [pid 27911:tid 27974] [client 52.167.167.52:5677] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aRgIicGzUdrhGBIfiKQuOQAAAIY"]
[Sat Nov 15 12:58:49.574230 2025] [:error] [pid 20654:tid 20668] [client 52.167.167.52:10594] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aRgIiXcS7eC8vO76_yd94wAAA4s"]
[Sat Nov 15 12:58:50.087804 2025] [:error] [pid 19959:tid 19983] [client 52.167.167.52:6275] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aRgIisjejiTUP1-IawOL3QAAAZE"]
[Sat Nov 15 12:58:50.696842 2025] [:error] [pid 20313:tid 20340] [client 52.167.167.52:1698] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aRgIihI9DXIgPadBLUZaJwAAAtg"]
[Sat Nov 15 12:58:51.176850 2025] [:error] [pid 19961:tid 20016] [client 52.167.167.52:6297] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aRgIizar7Si-84EApVQ-bQAAAdc"]
[Sat Nov 15 12:58:51.732118 2025] [:error] [pid 27997:tid 28005] [client 52.167.167.52:4918] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/35.php"] [unique_id "aRgIi9pja_6cDxKbxFmYXwAAAMY"]
[Sat Nov 15 12:58:52.188041 2025] [:error] [pid 20313:tid 20327] [client 52.167.167.52:1697] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/35.php"] [unique_id "aRgIjBI9DXIgPadBLUZaKwAAAss"]
[Sat Nov 15 12:58:52.646816 2025] [:error] [pid 27911:tid 27984] [client 52.167.167.52:4866] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/35.php"] [unique_id "aRgIjMGzUdrhGBIfiKQuOwAAAJA"]
[Sat Nov 15 12:58:53.108776 2025] [:error] [pid 20313:tid 20329] [client 52.167.167.52:1231] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/35.php"] [unique_id "aRgIjRI9DXIgPadBLUZaLgAAAs0"]
[Sat Nov 15 12:58:53.578235 2025] [:error] [pid 27911:tid 27990] [client 52.167.167.52:1718] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witm.php"] [unique_id "aRgIjcGzUdrhGBIfiKQuPgAAAJY"]
[Sat Nov 15 12:58:54.162632 2025] [:error] [pid 27911:tid 27969] [client 52.167.167.52:4912] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witm.php"] [unique_id "aRgIjsGzUdrhGBIfiKQuPwAAAIE"]
[Sat Nov 15 12:58:54.670404 2025] [:error] [pid 19961:tid 19996] [client 52.167.167.52:1705] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witm.php"] [unique_id "aRgIjjar7Si-84EApVQ-bgAAAcM"]
[Sat Nov 15 12:58:55.151112 2025] [:error] [pid 19959:tid 19987] [client 52.167.167.52:11254] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witm.php"] [unique_id "aRgIj8jejiTUP1-IawOL4QAAAZU"]
[Sat Nov 15 12:58:55.665328 2025] [:error] [pid 20313:tid 20324] [client 52.167.167.52:11231] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aRgIjxI9DXIgPadBLUZaMgAAAsg"]
[Sat Nov 15 12:58:56.135324 2025] [:error] [pid 20346:tid 20370] [client 52.167.167.52:11219] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aRgIkJ7hsydZdIoVTlvavwAAAxU"]
[Sat Nov 15 12:58:56.652641 2025] [:error] [pid 19959:tid 19971] [client 52.167.167.52:2336] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aRgIkMjejiTUP1-IawOL5QAAAYU"]
[Sat Nov 15 12:58:57.164252 2025] [:error] [pid 19959:tid 19976] [client 52.167.167.52:4889] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aRgIkcjejiTUP1-IawOL6AAAAYo"]
[Sat Nov 15 12:58:57.903073 2025] [:error] [pid 27911:tid 27992] [client 52.167.167.52:6231] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless2.php"] [unique_id "aRgIkcGzUdrhGBIfiKQuRAAAAJg"]
[Sat Nov 15 12:58:58.365402 2025] [:error] [pid 27997:tid 28011] [client 52.167.167.52:1224] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless2.php"] [unique_id "aRgIktpja_6cDxKbxFmYYwAAAMw"]
[Sat Nov 15 12:58:58.816693 2025] [:error] [pid 22765:tid 22782] [client 52.167.167.52:11232] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless2.php"] [unique_id "aRgIkqbrQzjuZmPIWDapHAAAAow"]
[Sat Nov 15 12:58:59.314609 2025] [:error] [pid 27911:tid 27979] [client 52.167.167.52:11211] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless2.php"] [unique_id "aRgIk8GzUdrhGBIfiKQuRgAAAIs"]
[Sat Nov 15 12:58:59.790083 2025] [:error] [pid 20654:tid 20674] [client 52.167.167.52:3825] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aRgIk3cS7eC8vO76_yd97QAAA5E"]
[Sat Nov 15 12:59:00.274933 2025] [:error] [pid 20346:tid 20356] [client 52.167.167.52:8838] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aRgIlJ7hsydZdIoVTlvaxQAAAwc"]
[Sat Nov 15 12:59:00.823307 2025] [:error] [pid 22613:tid 22616] [client 52.167.167.52:1413] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aRgIlCoyR3cDsIRGPRmFhQAAAgE"]
[Sat Nov 15 12:59:01.331880 2025] [:error] [pid 27909:tid 27926] [client 52.167.167.52:8850] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aRgIlSTfZ6B57n8HepX1hwAAAA0"]
[Sat Nov 15 12:59:01.834941 2025] [:error] [pid 20313:tid 20316] [client 52.167.167.52:11229] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIlRI9DXIgPadBLUZaNwAAAsA"]
[Sat Nov 15 12:59:02.333064 2025] [:error] [pid 27997:tid 28001] [client 52.167.167.52:8840] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIltpja_6cDxKbxFmYZQAAAMI"]
[Sat Nov 15 12:59:02.847070 2025] [:error] [pid 22613:tid 22638] [client 52.167.167.52:4661] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIlioyR3cDsIRGPRmFhgAAAhc"]
[Sat Nov 15 12:59:03.296249 2025] [:error] [pid 22613:tid 22630] [client 52.167.167.52:1270] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsr2.php"] [unique_id "aRgIlyoyR3cDsIRGPRmFhwAAAg8"]
[Sat Nov 15 12:59:03.732198 2025] [:error] [pid 20346:tid 20353] [client 52.167.167.52:3786] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shlo.php"] [unique_id "aRgIl57hsydZdIoVTlvaygAAAwQ"]
[Sat Nov 15 12:59:04.217105 2025] [:error] [pid 20654:tid 20673] [client 52.167.167.52:6217] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shlo.php"] [unique_id "aRgImHcS7eC8vO76_yd99gAAA5A"]
[Sat Nov 15 12:59:04.726695 2025] [:error] [pid 19961:tid 20001] [client 52.167.167.52:3796] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shlo.php"] [unique_id "aRgImDar7Si-84EApVQ-eQAAAcg"]
[Sat Nov 15 12:59:05.203813 2025] [:error] [pid 27997:tid 28008] [client 52.167.167.52:3828] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shlo.php"] [unique_id "aRgImdpja_6cDxKbxFmYaAAAAMk"]
[Sat Nov 15 12:59:05.696950 2025] [:error] [pid 22765:tid 22783] [client 52.167.167.52:3835] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aRgImabrQzjuZmPIWDapHwAAAo0"]
[Sat Nov 15 12:59:06.173946 2025] [:error] [pid 19959:tid 19973] [client 52.167.167.52:1920] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aRgImsjejiTUP1-IawOL7QAAAYc"]
[Sat Nov 15 12:59:06.659619 2025] [:error] [pid 20654:tid 20677] [client 52.167.167.52:1272] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aRgImncS7eC8vO76_yd9_AAAA5Q"]
[Sat Nov 15 12:59:07.183849 2025] [:error] [pid 20654:tid 20658] [client 52.167.167.52:3785] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aRgIm3cS7eC8vO76_yd9_gAAA4E"]
[Sat Nov 15 12:59:07.682481 2025] [:error] [pid 20654:tid 20678] [client 52.167.167.52:8839] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kill-9-1.php"] [unique_id "aRgIm3cS7eC8vO76_yd-AgAAA5U"]
[Sat Nov 15 12:59:08.157028 2025] [:error] [pid 20346:tid 20364] [client 52.167.167.52:1435] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kill-9-1.php"] [unique_id "aRgInJ7hsydZdIoVTlva0AAAAw8"]
[Sat Nov 15 12:59:08.662791 2025] [:error] [pid 20654:tid 20679] [client 52.167.167.52:1461] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kill-9-1.php"] [unique_id "aRgInHcS7eC8vO76_yd-BQAAA5Y"]
[Sat Nov 15 12:59:09.272200 2025] [:error] [pid 20654:tid 20659] [client 52.167.167.52:3964] [client 52.167.167.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kill-9-1.php"] [unique_id "aRgInXcS7eC8vO76_yd-BwAAA4I"]
[Sat Nov 15 18:07:52.115587 2025] [:error] [pid 19959:tid 19985] [client 152.42.200.79:64711] [client 152.42.200.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aRhQ-MjejiTUP1-IawPTXwAAAZM"]
[Sat Nov 15 20:05:54.720936 2025] [:error] [pid 19959:tid 19966] [client 182.44.9.147:50599] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRhsosjejiTUP1-IawPqkQAAAYA"]
[Sat Nov 15 20:26:26.903931 2025] [:error] [pid 27997:tid 28000] [client 45.134.79.103:63635] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRhxctpja_6cDxKbxFnq4gAAAME"]
[Sat Nov 15 20:26:27.561512 2025] [:error] [pid 20654:tid 20666] [client 45.134.79.103:63909] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRhxc3cS7eC8vO76_ycI5gAAA4k"]
[Sat Nov 15 20:26:28.220877 2025] [:error] [pid 20346:tid 20373] [client 45.134.79.103:64138] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdJ7hsydZdIoVTltM1gAAAxg"]
[Sat Nov 15 23:56:55.136753 2025] [:error] [pid 19959:tid 19987] [client 34.26.203.176:40814] [client 34.26.203.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aRiix8jejiTUP1-IawMMQwAAAZU"]
[Sun Nov 16 12:28:14.873050 2025] [:error] [pid 52563:tid 52582] [client 57.128.216.125:49184] [client 57.128.216.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.128.216.125, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aRlS3s-l3ey-hVJ5AutnWwAAANA"]
[Sun Nov 16 12:28:14.879906 2025] [proxy_fcgi:error] [pid 52563:tid 52582] [client 57.128.216.125:49184] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 12:28:22.413973 2025] [:error] [pid 20556:tid 20573] [client 37.18.14.192:52670] [client 37.18.14.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.18.14.192, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aRlS5kkbyEckbWtBcCIqZAAAAQ8"]
[Sun Nov 16 12:28:22.423203 2025] [proxy_fcgi:error] [pid 20556:tid 20573] [client 37.18.14.192:52670] AH01071: Got error 'Primary script unknown'
[Sun Nov 16 18:41:12.562648 2025] [autoindex:error] [pid 34227:tid 34240] [client 155.94.163.116:58512] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 18:42:53.395139 2025] [:error] [pid 34164:tid 34189] [client 43.131.32.36:55156] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRmqre93ccBCLD8-Q4ZTdwAAAZU"]
[Sun Nov 16 19:57:38.454407 2025] [:error] [pid 52469:tid 52501] [client 54.153.232.162:55350] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aRm8Mk6HaXpHeEZ98Z34RwAAABg"]
[Sun Nov 16 19:57:51.731332 2025] [:error] [pid 52471:tid 52545] [client 54.153.232.162:47466] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aRm8P9mWsFzjR5CEgDVqJQAAAI0"]
[Sun Nov 16 19:57:51.731797 2025] [:error] [pid 52469:tid 52500] [client 54.153.232.162:47462] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "aRm8P06HaXpHeEZ98Z34VQAAABc"]
[Sun Nov 16 19:57:52.055476 2025] [:error] [pid 52471:tid 52541] [client 54.153.232.162:47476] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "aRm8QNmWsFzjR5CEgDVqJgAAAIk"]
[Sun Nov 16 19:57:53.358869 2025] [:error] [pid 34301:tid 34310] [client 54.153.232.162:47480] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aRm8QbGPoZwUGuFNREvcMAAAAoY"]
[Sun Nov 16 19:57:53.425014 2025] [:error] [pid 52563:tid 52587] [client 54.153.232.162:47496] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "aRm8Qc-l3ey-hVJ5Auu81AAAANU"]
[Sun Nov 16 19:57:53.551865 2025] [:error] [pid 34271:tid 34295] [client 54.153.232.162:47484] [client 54.153.232.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "aRm8QUNmlZhoZZV1BUDL8wAAAlY"]
[Sun Nov 16 23:10:06.154997 2025] [:error] [pid 52469:tid 52484] [client 36.41.75.167:35975] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRnpTk6HaXpHeEZ98Z00fgAAAAc"]
[Mon Nov 17 01:49:56.044394 2025] [:error] [pid 55656:tid 55689] [client 45.139.104.183:34834] [client 45.139.104.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aRoOxKZDObyEN97tsHBh3AAAAIM"]
[Mon Nov 17 07:54:16.983969 2025] [:error] [pid 39450:tid 39505] [client 43.157.179.227:59068] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRpkKOoZqPB4_7vNEDS_rgAAAFg"]
[Mon Nov 17 10:56:12.843389 2025] [:error] [pid 65302:tid 65304] [client 43.164.197.209:33562] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRqOzAPMSx2v85r8y7yc6QAAAUA"]
[Mon Nov 17 12:17:33.086168 2025] [:error] [pid 39451:tid 39521] [client 36.111.67.189:45311] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRqh3efgkqXTS0SO3fDlKAAAAI0"]
[Mon Nov 17 18:58:43.760844 2025] [:error] [pid 39537:tid 39555] [client 182.42.105.85:48332] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRr_44ZRrh1pcrdcLB-zigAAAM8"]
[Tue Nov 18 01:46:09.756782 2025] [:error] [pid 40561:tid 40618] [client 111.172.249.49:39288] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRtfYZdU597fIdQPRD_HTwAAANY"]
[Tue Nov 18 03:14:03.241949 2025] [proxy_fcgi:error] [pid 24898:tid 24904] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:03.409304 2025] [proxy_fcgi:error] [pid 24898:tid 24903] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 03:14:03.571430 2025] [proxy_fcgi:error] [pid 24898:tid 24917] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 03:14:03.983805 2025] [proxy_fcgi:error] [pid 24898:tid 24916] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 03:14:04.146426 2025] [proxy_fcgi:error] [pid 24898:tid 24923] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 03:14:04.477419 2025] [proxy_fcgi:error] [pid 24898:tid 24910] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Nov 18 03:14:05.013890 2025] [proxy_fcgi:error] [pid 24898:tid 24912] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:05.202816 2025] [:error] [pid 24898:tid 24920] [client 20.172.5.103:38924] [client 20.172.5.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.172.5.103, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aRtz_WQbwxb61buaxA9vaQAAAlM"], referer: https://www.bing.com/
[Tue Nov 18 03:14:05.207096 2025] [proxy_fcgi:error] [pid 24898:tid 24920] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 03:14:05.542001 2025] [proxy_fcgi:error] [pid 24898:tid 24915] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:06.033797 2025] [proxy_fcgi:error] [pid 24898:tid 24918] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 03:14:06.460867 2025] [proxy_fcgi:error] [pid 24898:tid 24901] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 03:14:07.108885 2025] [proxy_fcgi:error] [pid 24898:tid 24914] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:07.293822 2025] [proxy_fcgi:error] [pid 24898:tid 24908] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:07.472318 2025] [proxy_fcgi:error] [pid 24898:tid 24905] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 03:14:07.638946 2025] [proxy_fcgi:error] [pid 24898:tid 24909] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:07.825694 2025] [proxy_fcgi:error] [pid 24898:tid 24902] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:08.650008 2025] [proxy_fcgi:error] [pid 24898:tid 24907] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:08.834408 2025] [proxy_fcgi:error] [pid 24898:tid 24913] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:08.998496 2025] [proxy_fcgi:error] [pid 24898:tid 24922] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 03:14:09.165174 2025] [proxy_fcgi:error] [pid 24898:tid 24924] [client 20.172.5.103:38924] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 03:14:09.338894 2025] [:error] [pid 24898:tid 24904] [client 20.172.5.103:38924] [client 20.172.5.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aRt0AWQbwxb61buaxA9veQAAAkM"], referer: https://www.google.com/
[Tue Nov 18 03:14:10.583390 2025] [proxy_fcgi:error] [pid 39189:tid 39206] [client 20.172.5.103:8216] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:11.307766 2025] [proxy_fcgi:error] [pid 39189:tid 39217] [client 20.172.5.103:8216] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 03:14:12.199058 2025] [proxy_fcgi:error] [pid 39189:tid 39213] [client 20.172.5.103:8216] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 03:14:12.362417 2025] [proxy_fcgi:error] [pid 39189:tid 39207] [client 20.172.5.103:8216] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:12.526014 2025] [proxy_fcgi:error] [pid 39189:tid 39205] [client 20.172.5.103:8216] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Nov 18 03:14:12.689083 2025] [proxy_fcgi:error] [pid 39189:tid 39216] [client 20.172.5.103:8216] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:13.431106 2025] [:error] [pid 39189:tid 39200] [client 20.172.5.103:8216] [client 20.172.5.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRt0BZJJLi753QwyqGwD3QAAAIc"], referer: https://www.google.de/
[Tue Nov 18 03:14:21.230496 2025] [proxy_fcgi:error] [pid 24777:tid 24795] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Nov 18 03:14:21.758851 2025] [proxy_fcgi:error] [pid 24777:tid 24794] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Tue Nov 18 03:14:22.370993 2025] [proxy_fcgi:error] [pid 24777:tid 24780] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Nov 18 03:14:22.788636 2025] [proxy_fcgi:error] [pid 24777:tid 24797] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Nov 18 03:14:23.429566 2025] [proxy_fcgi:error] [pid 24777:tid 24786] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Tue Nov 18 03:14:23.592887 2025] [proxy_fcgi:error] [pid 24777:tid 24799] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Nov 18 03:14:23.754311 2025] [proxy_fcgi:error] [pid 24777:tid 24802] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Tue Nov 18 03:14:24.633833 2025] [proxy_fcgi:error] [pid 24777:tid 24790] [client 20.172.5.103:64929] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Tue Nov 18 03:14:26.743318 2025] [:error] [pid 24777:tid 24801] [client 20.172.5.103:64929] [client 20.172.5.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRt0EvYMFHMtkgWmmlKZxAAAARY"], referer: https://www.yahoo.com/
[Tue Nov 18 07:56:13.730775 2025] [:error] [pid 9935:tid 9956] [client 113.141.91.58:49013] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aRu2HQWOMXsrZFRF6sjspQAAAZM"]
[Tue Nov 18 12:04:40.372547 2025] [:error] [pid 44471:tid 44505] [client 103.164.211.83:65050] [client 103.164.211.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.164.211.83, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aRvwWO_6m0bQO14XwtPdTAAAAQE"]
[Tue Nov 18 12:04:40.377162 2025] [proxy_fcgi:error] [pid 44471:tid 44505] [client 103.164.211.83:65050] AH01071: Got error 'Primary script unknown'
[Tue Nov 18 19:54:36.965712 2025] [:error] [pid 57578:tid 57602] [client 84.247.191.22:64533] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aRxefD9_jVUQm7Io75Pv_QAAAJY"], referer: binance.com
[Tue Nov 18 21:37:30.459237 2025] [:error] [pid 3500:tid 3513] [client 45.134.79.103:56561] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRx2mvCbRC7k2D7mjbSTpAAAAcs"]
[Tue Nov 18 21:37:31.125595 2025] [:error] [pid 44470:tid 44496] [client 45.134.79.103:51377] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRx2mzv-RLYfULjlgDb_TwAAAFU"]
[Tue Nov 18 21:37:31.783267 2025] [:error] [pid 44471:tid 44528] [client 45.134.79.103:59289] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2m-_6m0bQO14XwtOC5gAAARg"]
[Wed Nov 19 00:43:23.051282 2025] [:error] [pid 43882:tid 43954] [client 43.130.60.195:52444] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRyiK95CQQLff3maRMLR1QAAAA4"]
[Wed Nov 19 03:25:15.098028 2025] [:error] [pid 3052:tid 3131] [client 58.49.233.126:34501] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aRzIG1NM6bOMTTuJnz3GzgAAAMI"]
[Wed Nov 19 06:40:36.873087 2025] [:error] [pid 6554:tid 6571] [client 194.165.16.8:46226] [client 194.165.16.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.measureyourbrand.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRz15N8rvPWLafJFqmVFLwAAAAs"]
[Wed Nov 19 06:40:37.721871 2025] [:error] [pid 6554:tid 6563] [client 194.165.16.8:46226] [client 194.165.16.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.measureyourbrand.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aRz15d8rvPWLafJFqmVFMwAAAAQ"]
[Wed Nov 19 06:40:37.994758 2025] [:error] [pid 6554:tid 6572] [client 194.165.16.8:46226] [client 194.165.16.8] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.measureyourbrand.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRz15d8rvPWLafJFqmVFNAAAAAw"]
[Wed Nov 19 07:30:38.139185 2025] [:error] [pid 6644:tid 6657] [client 18.191.165.250:56380] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZjQAAAMs"]
[Wed Nov 19 07:30:38.528333 2025] [:error] [pid 6919:tid 6931] [client 18.191.165.250:56464] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR0BnkYFdN1s_9xJVUmq-wAAAQk"]
[Wed Nov 19 07:30:38.925465 2025] [:error] [pid 26664:tid 26680] [client 18.191.165.250:56578] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR0BnopWc1yoj2P7MeAR1AAAAU0"]
[Wed Nov 19 07:30:39.320286 2025] [:error] [pid 6556:tid 6628] [client 18.191.165.250:56715] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR0Bn5uL7hhgrmdM1mt7MwAAAIo"]
[Wed Nov 19 07:30:39.714602 2025] [:error] [pid 6554:tid 6575] [client 18.191.165.250:56792] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR0Bn98rvPWLafJFqmVW7QAAAA8"]
[Wed Nov 19 17:43:42.071015 2025] [autoindex:error] [pid 6644:tid 6662] [client 212.34.132.22:57236] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Wed Nov 19 20:35:57.825607 2025] [:error] [pid 6644:tid 6654] [client 104.196.176.201:58178] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "aR25rU0i6Rf788MB6sbRCQAAAMg"]
[Wed Nov 19 22:22:46.941673 2025] [:error] [pid 6554:tid 6579] [client 125.75.66.97:37032] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aR3Stt8rvPWLafJFqmUJawAAABM"]
[Wed Nov 19 23:41:48.596264 2025] [:error] [pid 6556:tid 6630] [client 43.166.244.251:39024] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR3lPJuL7hhgrmdM1ms_zQAAAIw"]
[Thu Nov 20 02:09:18.404924 2025] [:error] [pid 50236:tid 50368] [client 172.64.223.47:11182] [client 172.64.223.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aR4HzmT-l-atWVKihhsqEQAAAIY"]
[Thu Nov 20 09:39:43.936510 2025] [proxy_fcgi:error] [pid 55340:tid 55369] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:39:44.768395 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:39:44.960692 2025] [proxy_fcgi:error] [pid 55340:tid 55349] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:45.828278 2025] [proxy_fcgi:error] [pid 55340:tid 55368] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:39:46.368024 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:39:47.923954 2025] [proxy_fcgi:error] [pid 55340:tid 55355] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:48.117469 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:39:48.325196 2025] [proxy_fcgi:error] [pid 55340:tid 55365] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:48.520596 2025] [proxy_fcgi:error] [pid 55340:tid 55346] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:39:48.712491 2025] [proxy_fcgi:error] [pid 55340:tid 55360] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:48.910964 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:39:49.115980 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:39:49.513313 2025] [proxy_fcgi:error] [pid 55340:tid 55351] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:39:49.762015 2025] [proxy_fcgi:error] [pid 55340:tid 55363] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:50.150687 2025] [proxy_fcgi:error] [pid 55340:tid 55369] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:39:50.362684 2025] [proxy_fcgi:error] [pid 55340:tid 55349] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:50.554267 2025] [proxy_fcgi:error] [pid 55340:tid 55350] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:39:50.784567 2025] [proxy_fcgi:error] [pid 55340:tid 55352] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:39:50.991395 2025] [proxy_fcgi:error] [pid 55340:tid 55355] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:39:51.226347 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:39:54.184858 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:39:54.380425 2025] [proxy_fcgi:error] [pid 55340:tid 55349] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:54.576902 2025] [proxy_fcgi:error] [pid 55340:tid 55352] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:39:54.814687 2025] [proxy_fcgi:error] [pid 55340:tid 55368] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:55.572613 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:39:55.823257 2025] [proxy_fcgi:error] [pid 55340:tid 55346] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:56.015139 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:56.207431 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:56.577111 2025] [proxy_fcgi:error] [pid 55340:tid 55363] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:39:56.977697 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:57.240673 2025] [proxy_fcgi:error] [pid 55340:tid 55368] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:57.435436 2025] [proxy_fcgi:error] [pid 55340:tid 55353] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:57.835073 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:39:58.625926 2025] [proxy_fcgi:error] [pid 55340:tid 55362] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:58.819061 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:39:59.012560 2025] [proxy_fcgi:error] [pid 55340:tid 55366] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:39:59.203533 2025] [proxy_fcgi:error] [pid 55340:tid 55363] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:39:59.398848 2025] [proxy_fcgi:error] [pid 55340:tid 55369] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:00.200872 2025] [proxy_fcgi:error] [pid 55340:tid 55357] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:01.331650 2025] [proxy_fcgi:error] [pid 55340:tid 55355] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:02.926622 2025] [proxy_fcgi:error] [pid 55340:tid 55366] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:03.122355 2025] [proxy_fcgi:error] [pid 55340:tid 55356] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:03.315449 2025] [proxy_fcgi:error] [pid 55340:tid 55369] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:03.506961 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 13.67.239.212:5597] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:13.410504 2025] [:error] [pid 34444:tid 34451] [client 13.67.239.212:5488] [client 13.67.239.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.67.239.212, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aR5xfVNEol4jlmmA_GPOAAAAAUU"], referer: https://duckduckgo.com/
[Thu Nov 20 09:40:13.415836 2025] [proxy_fcgi:error] [pid 34444:tid 34451] [client 13.67.239.212:5488] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:13.808719 2025] [proxy_fcgi:error] [pid 34444:tid 34455] [client 13.67.239.212:5488] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:14.245366 2025] [proxy_fcgi:error] [pid 34444:tid 34456] [client 13.67.239.212:5488] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:14.443402 2025] [proxy_fcgi:error] [pid 34444:tid 34467] [client 13.67.239.212:5488] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:14.759829 2025] [proxy_fcgi:error] [pid 34444:tid 34452] [client 13.67.239.212:5488] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:15.016668 2025] [:error] [pid 34444:tid 34449] [client 13.67.239.212:5488] [client 13.67.239.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aR5xf1NEol4jlmmA_GPOCwAAAUM"], referer: https://www.google.de/
[Thu Nov 20 09:40:16.459294 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 13.67.239.212:1567] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:17.505876 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 13.67.239.212:1567] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:17.702041 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 13.67.239.212:1567] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:18.133692 2025] [:error] [pid 55340:tid 55350] [client 13.67.239.212:1567] [client 13.67.239.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR5xgvOxD-NeMydTybAQhQAAAAU"], referer: https://www.yahoo.com/
[Thu Nov 20 09:40:20.094735 2025] [proxy_fcgi:error] [pid 55340:tid 55365] [client 13.67.239.212:5085] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:21.127796 2025] [proxy_fcgi:error] [pid 55340:tid 55348] [client 13.67.239.212:5085] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:21.733413 2025] [proxy_fcgi:error] [pid 55340:tid 55356] [client 13.67.239.212:5085] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:22.330212 2025] [proxy_fcgi:error] [pid 55340:tid 55347] [client 13.67.239.212:5085] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:24.640383 2025] [:error] [pid 55340:tid 55361] [client 13.67.239.212:5085] [client 13.67.239.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR5xiPOxD-NeMydTybAQowAAABA"], referer: https://www.yahoo.com/
[Thu Nov 20 09:40:27.163052 2025] [proxy_fcgi:error] [pid 55343:tid 55402] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:27.397471 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:27.882449 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:28.088298 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:28.283067 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:28.489501 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:28.743798 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:28.937841 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:29.146474 2025] [proxy_fcgi:error] [pid 55343:tid 55422] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:29.358769 2025] [proxy_fcgi:error] [pid 55343:tid 55407] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:29.578475 2025] [proxy_fcgi:error] [pid 55343:tid 55414] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:29.765932 2025] [:error] [pid 55343:tid 55416] [client 13.67.239.212:2308] [client 13.67.239.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.67.239.212, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aR5xjVWlO3EnyVMV7w46SwAAAJE"], referer: https://www.google.co.uk/
[Thu Nov 20 09:40:29.771036 2025] [proxy_fcgi:error] [pid 55343:tid 55416] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:29.964050 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:30.155840 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:30.431210 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:30.622742 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:30.883716 2025] [proxy_fcgi:error] [pid 55343:tid 55413] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:31.082785 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:31.277196 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:31.470765 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:31.665122 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:31.857226 2025] [proxy_fcgi:error] [pid 55343:tid 55414] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:32.054724 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:32.251676 2025] [proxy_fcgi:error] [pid 55343:tid 55402] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:32.493247 2025] [proxy_fcgi:error] [pid 55343:tid 55419] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:32.685178 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:32.876739 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:33.112716 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:33.889093 2025] [proxy_fcgi:error] [pid 55343:tid 55413] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:34.080410 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:34.275110 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:34.468270 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:34.660683 2025] [proxy_fcgi:error] [pid 55343:tid 55414] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:34.882372 2025] [proxy_fcgi:error] [pid 55343:tid 55420] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:35.672807 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:35.863652 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:36.059856 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:36.272180 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:36.465125 2025] [proxy_fcgi:error] [pid 55343:tid 55413] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:36.656536 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:36.851729 2025] [proxy_fcgi:error] [pid 55343:tid 55408] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:37.049660 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:37.245721 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:37.445846 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Thu Nov 20 09:40:37.946653 2025] [proxy_fcgi:error] [pid 55343:tid 55421] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:38.827590 2025] [proxy_fcgi:error] [pid 55343:tid 55407] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:39.363142 2025] [proxy_fcgi:error] [pid 55343:tid 55414] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:39.557716 2025] [proxy_fcgi:error] [pid 55343:tid 55416] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:39.772518 2025] [proxy_fcgi:error] [pid 55343:tid 55410] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Nov 20 09:40:39.963772 2025] [proxy_fcgi:error] [pid 55343:tid 55420] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:40.175125 2025] [proxy_fcgi:error] [pid 55343:tid 55399] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Nov 20 09:40:40.424750 2025] [proxy_fcgi:error] [pid 55343:tid 55419] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:41.804841 2025] [proxy_fcgi:error] [pid 55343:tid 55417] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:41.998017 2025] [proxy_fcgi:error] [pid 55343:tid 55411] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:42.699021 2025] [proxy_fcgi:error] [pid 55343:tid 55404] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:43.414621 2025] [proxy_fcgi:error] [pid 55343:tid 55418] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Nov 20 09:40:43.606060 2025] [proxy_fcgi:error] [pid 55343:tid 55408] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Thu Nov 20 09:40:43.886731 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.yahoo.com/
[Thu Nov 20 09:40:44.117606 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 09:40:44.581343 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 13.67.239.212:2308] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Nov 20 10:49:17.817847 2025] [:error] [pid 34405:tid 34430] [client 223.244.35.77:47207] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aR6BrTFpvu8oRK7ATfu5ZgAAARc"]
[Thu Nov 20 12:10:21.692392 2025] [:error] [pid 55342:tid 55396] [client 98.81.111.26:65270] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6Urbg6x32Tvk7fIG-L1QAAAFg"]
[Thu Nov 20 12:10:22.100829 2025] [:error] [pid 34405:tid 34430] [client 98.81.111.26:49960] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6UrjFpvu8oRK7ATfvJNwAAARc"]
[Thu Nov 20 12:10:22.513837 2025] [:error] [pid 55340:tid 55364] [client 98.81.111.26:59949] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6UrvOxD-NeMydTybBJ6gAAABM"]
[Thu Nov 20 12:10:22.919716 2025] [:error] [pid 55343:tid 55411] [client 98.81.111.26:60787] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6UrlWlO3EnyVMV7w5lNgAAAIw"]
[Thu Nov 20 12:10:23.325821 2025] [:error] [pid 55343:tid 55421] [client 98.81.111.26:64829] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6Ur1WlO3EnyVMV7w5lUgAAAJY"]
[Thu Nov 20 12:15:50.865769 2025] [:error] [pid 55342:tid 55395] [client 98.81.111.26:50665] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6V9rg6x32Tvk7fIG-PEwAAAFc"]
[Thu Nov 20 12:15:51.274114 2025] [:error] [pid 34405:tid 34408] [client 98.81.111.26:53053] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvM8AAAAQE"]
[Thu Nov 20 12:15:51.686775 2025] [:error] [pid 34405:tid 34418] [client 98.81.111.26:56567] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvNCgAAAQs"]
[Thu Nov 20 12:15:52.092889 2025] [:error] [pid 34405:tid 34419] [client 98.81.111.26:60145] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6V-DFpvu8oRK7ATfvNGAAAAQw"]
[Thu Nov 20 12:15:52.498793 2025] [:error] [pid 34405:tid 34423] [client 98.81.111.26:62700] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR6V-DFpvu8oRK7ATfvNIwAAARA"]
[Thu Nov 20 19:42:35.616396 2025] [proxy_fcgi:error] [pid 55340:tid 55367] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:37.044470 2025] [proxy_fcgi:error] [pid 55340:tid 55363] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:37.205254 2025] [proxy_fcgi:error] [pid 55340:tid 55359] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:37.547520 2025] [proxy_fcgi:error] [pid 55340:tid 55364] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:37.732116 2025] [proxy_fcgi:error] [pid 55340:tid 55349] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:37.883605 2025] [proxy_fcgi:error] [pid 55340:tid 55366] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:38.176203 2025] [proxy_fcgi:error] [pid 55340:tid 55351] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:38.332140 2025] [proxy_fcgi:error] [pid 55340:tid 55350] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:38.503742 2025] [proxy_fcgi:error] [pid 55340:tid 55361] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:38.654905 2025] [proxy_fcgi:error] [pid 55340:tid 55346] [client 20.243.53.228:58506] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:42:38.804273 2025] [:error] [pid 55340:tid 55345] [client 20.243.53.228:58506] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kki.php"] [unique_id "aR7-rvOxD-NeMydTybComAAAAAA"]
[Thu Nov 20 19:42:39.553053 2025] [:error] [pid 55343:tid 55407] [client 20.243.53.228:58525] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kki.php"] [unique_id "aR7-r1WlO3EnyVMV7w67OgAAAIg"]
[Thu Nov 20 19:42:40.707594 2025] [:error] [pid 55430:tid 55436] [client 20.243.53.228:58539] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kki.php"] [unique_id "aR7-sPPZXaIMEU4pE7sKKwAAAMM"]
[Thu Nov 20 19:42:42.303617 2025] [:error] [pid 40415:tid 40419] [client 20.243.53.228:58509] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kki.php"] [unique_id "aR7-sqhjIyLSv09svwO0ogAAAcE"]
[Thu Nov 20 19:42:42.869634 2025] [:error] [pid 40537:tid 40552] [client 20.243.53.228:58513] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js.php"] [unique_id "aR7-sqKlsL5kxTa3c1zsRAAAAss"]
[Thu Nov 20 19:42:44.385871 2025] [:error] [pid 40537:tid 40551] [client 20.243.53.228:58508] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js.php"] [unique_id "aR7-tKKlsL5kxTa3c1zsRgAAAso"]
[Thu Nov 20 19:42:45.436950 2025] [:error] [pid 55343:tid 55412] [client 20.243.53.228:58555] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js.php"] [unique_id "aR7-tVWlO3EnyVMV7w67PwAAAI0"]
[Thu Nov 20 19:42:46.792010 2025] [:error] [pid 34405:tid 34421] [client 20.243.53.228:58542] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js.php"] [unique_id "aR7-tjFpvu8oRK7ATfskwgAAAQ4"]
[Thu Nov 20 19:42:47.345291 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58450] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "aR7-t1H-MuFcoWRjXpZomQAAAk8"]
[Thu Nov 20 19:42:48.006466 2025] [:error] [pid 55342:tid 55388] [client 20.243.53.228:58514] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "aR7-uLg6x32Tvk7fIG_pEQAAAFA"]
[Thu Nov 20 19:42:49.247782 2025] [:error] [pid 34405:tid 34422] [client 20.243.53.228:58432] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "aR7-uTFpvu8oRK7ATfskxAAAAQ8"]
[Thu Nov 20 19:42:50.810728 2025] [:error] [pid 55343:tid 55420] [client 20.243.53.228:58466] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "aR7-ulWlO3EnyVMV7w67QgAAAJU"]
[Thu Nov 20 19:42:51.450164 2025] [:error] [pid 40445:tid 40475] [client 20.243.53.228:58439] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aR7-u1H-MuFcoWRjXpZopQAAAkA"]
[Thu Nov 20 19:42:52.564355 2025] [:error] [pid 55342:tid 55385] [client 20.243.53.228:58497] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aR7-vLg6x32Tvk7fIG_pFAAAAE0"]
[Thu Nov 20 19:42:53.361630 2025] [:error] [pid 40508:tid 40516] [client 20.243.53.228:58548] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aR7-vaxXNVCMW_ksxPu9fgAAAoY"]
[Thu Nov 20 19:42:54.123663 2025] [:error] [pid 40415:tid 40426] [client 20.243.53.228:58443] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aR7-vqhjIyLSv09svwO0pwAAAcg"]
[Thu Nov 20 19:42:54.724328 2025] [:error] [pid 40415:tid 40427] [client 20.243.53.228:58549] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aR7-vqhjIyLSv09svwO0qAAAAck"]
[Thu Nov 20 19:42:55.747847 2025] [:error] [pid 40636:tid 40655] [client 20.243.53.228:58458] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aR7-vwK8BWUoW3xq0HAXLAAAA48"]
[Thu Nov 20 19:42:57.259181 2025] [:error] [pid 34405:tid 34408] [client 20.243.53.228:58505] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aR7-wTFpvu8oRK7ATfsk1gAAAQE"]
[Thu Nov 20 19:42:58.119849 2025] [:error] [pid 55342:tid 55381] [client 20.243.53.228:58451] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aR7-wrg6x32Tvk7fIG_pGgAAAEk"]
[Thu Nov 20 19:42:58.915894 2025] [:error] [pid 55343:tid 55413] [client 20.243.53.228:58434] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aR7-wlWlO3EnyVMV7w67TQAAAI4"]
[Thu Nov 20 19:42:59.568025 2025] [:error] [pid 34405:tid 34412] [client 20.243.53.228:58530] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aR7-wzFpvu8oRK7ATfsk3QAAAQU"]
[Thu Nov 20 19:42:59.892372 2025] [:error] [pid 55343:tid 55411] [client 20.243.53.228:58551] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aR7-w1WlO3EnyVMV7w67UAAAAIw"]
[Thu Nov 20 19:43:00.359052 2025] [:error] [pid 55343:tid 55421] [client 20.243.53.228:58537] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aR7-xFWlO3EnyVMV7w67VgAAAJY"]
[Thu Nov 20 19:43:01.292750 2025] [:error] [pid 55342:tid 55395] [client 20.243.53.228:58521] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aR7-xbg6x32Tvk7fIG_pGwAAAFc"]
[Thu Nov 20 19:43:02.089990 2025] [:error] [pid 40445:tid 40484] [client 20.243.53.228:58503] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aR7-xlH-MuFcoWRjXpZoqgAAAkk"]
[Thu Nov 20 19:43:03.350918 2025] [:error] [pid 55342:tid 55377] [client 20.243.53.228:58534] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aR7-x7g6x32Tvk7fIG_pJAAAAEU"]
[Thu Nov 20 19:43:04.746295 2025] [:error] [pid 40537:tid 40560] [client 20.243.53.228:58535] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aR7-yKKlsL5kxTa3c1zsXAAAAtM"]
[Thu Nov 20 19:43:05.689442 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58545] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aR7-yVH-MuFcoWRjXpZosQAAAk8"]
[Thu Nov 20 19:43:06.852631 2025] [:error] [pid 55430:tid 55451] [client 20.243.53.228:58461] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aR7-yvPZXaIMEU4pE7sKSwAAANI"]
[Thu Nov 20 19:43:07.211585 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:58448] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aR7-y1H-MuFcoWRjXpZotwAAAks"]
[Thu Nov 20 19:43:08.107019 2025] [:error] [pid 34405:tid 34410] [client 20.243.53.228:58377] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aR7-zDFpvu8oRK7ATfsk7QAAAQM"]
[Thu Nov 20 19:43:10.247107 2025] [:error] [pid 40508:tid 40517] [client 20.243.53.228:58531] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4yps5d.php"] [unique_id "aR7-zqxXNVCMW_ksxPu9kgAAAoc"]
[Thu Nov 20 19:43:11.428533 2025] [:error] [pid 40415:tid 40439] [client 20.243.53.228:58520] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4yps5d.php"] [unique_id "aR7-z6hjIyLSv09svwO0tgAAAdU"]
[Thu Nov 20 19:43:11.874520 2025] [:error] [pid 55343:tid 55407] [client 20.243.53.228:58540] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4yps5d.php"] [unique_id "aR7-z1WlO3EnyVMV7w67aAAAAIg"]
[Thu Nov 20 19:43:13.858086 2025] [:error] [pid 55343:tid 55413] [client 20.243.53.228:58440] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4yps5d.php"] [unique_id "aR7-0VWlO3EnyVMV7w67awAAAI4"]
[Thu Nov 20 19:43:15.020007 2025] [:error] [pid 40508:tid 40526] [client 20.243.53.228:58527] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs6.php"] [unique_id "aR7-06xXNVCMW_ksxPu9lAAAApA"]
[Thu Nov 20 19:43:15.850664 2025] [:error] [pid 40445:tid 40488] [client 20.243.53.228:58558] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs6.php"] [unique_id "aR7-01H-MuFcoWRjXpZoyQAAAk0"]
[Thu Nov 20 19:43:17.909824 2025] [:error] [pid 40508:tid 40534] [client 20.243.53.228:58474] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs6.php"] [unique_id "aR7-1axXNVCMW_ksxPu9ngAAApg"]
[Thu Nov 20 19:43:18.940813 2025] [:error] [pid 34405:tid 34427] [client 20.243.53.228:58447] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs6.php"] [unique_id "aR7-1jFpvu8oRK7ATfsk-AAAARQ"]
[Thu Nov 20 19:43:19.692095 2025] [:error] [pid 34405:tid 34430] [client 20.243.53.228:58518] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aR7-1zFpvu8oRK7ATfsk-gAAARc"]
[Thu Nov 20 19:43:20.269403 2025] [:error] [pid 55430:tid 55442] [client 20.243.53.228:58454] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aR7-2PPZXaIMEU4pE7sKVAAAAMk"]
[Thu Nov 20 19:43:21.088794 2025] [:error] [pid 40508:tid 40529] [client 20.243.53.228:58449] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aR7-2axXNVCMW_ksxPu9pwAAApM"]
[Thu Nov 20 19:43:21.768481 2025] [:error] [pid 55430:tid 55440] [client 20.243.53.228:58468] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aR7-2fPZXaIMEU4pE7sKVwAAAMc"]
[Thu Nov 20 19:43:23.158110 2025] [:error] [pid 40445:tid 40479] [client 20.243.53.228:58368] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/habhan.php"] [unique_id "aR7-21H-MuFcoWRjXpZozQAAAkQ"]
[Thu Nov 20 19:43:24.075805 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:58502] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/habhan.php"] [unique_id "aR7-3FH-MuFcoWRjXpZozwAAAkg"]
[Thu Nov 20 19:43:25.165126 2025] [:error] [pid 34405:tid 34418] [client 20.243.53.228:58446] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/habhan.php"] [unique_id "aR7-3TFpvu8oRK7ATfsk_QAAAQs"]
[Thu Nov 20 19:43:25.973379 2025] [:error] [pid 40508:tid 40532] [client 20.243.53.228:58504] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/habhan.php"] [unique_id "aR7-3axXNVCMW_ksxPu9rQAAApY"]
[Thu Nov 20 19:43:26.856614 2025] [:error] [pid 34405:tid 34422] [client 20.243.53.228:58433] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aR7-3jFpvu8oRK7ATfslAQAAAQ8"]
[Thu Nov 20 19:43:28.457211 2025] [:error] [pid 34405:tid 34426] [client 20.243.53.228:58532] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aR7-4DFpvu8oRK7ATfslAwAAARM"]
[Thu Nov 20 19:43:29.510114 2025] [:error] [pid 34405:tid 34412] [client 20.243.53.228:58436] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aR7-4TFpvu8oRK7ATfslBQAAAQU"]
[Thu Nov 20 19:43:30.244887 2025] [:error] [pid 34405:tid 34414] [client 20.243.53.228:58438] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aR7-4jFpvu8oRK7ATfslBgAAAQc"]
[Thu Nov 20 19:43:31.582248 2025] [:error] [pid 40415:tid 40431] [client 20.243.53.228:58500] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bi1f.php"] [unique_id "aR7-46hjIyLSv09svwO0wQAAAc0"]
[Thu Nov 20 19:43:32.261675 2025] [:error] [pid 40415:tid 40427] [client 20.243.53.228:58550] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bi1f.php"] [unique_id "aR7-5KhjIyLSv09svwO0xAAAAck"]
[Thu Nov 20 19:43:33.351768 2025] [:error] [pid 40636:tid 40664] [client 20.243.53.228:58516] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bi1f.php"] [unique_id "aR7-5QK8BWUoW3xq0HAXQgAAA5g"]
[Thu Nov 20 19:43:34.871116 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:58533] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bi1f.php"] [unique_id "aR7-5lH-MuFcoWRjXpZo1wAAAkM"]
[Thu Nov 20 19:43:36.183819 2025] [:error] [pid 55342:tid 55391] [client 20.243.53.228:58553] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aR7-6Lg6x32Tvk7fIG_pagAAAFM"]
[Thu Nov 20 19:43:37.433481 2025] [:error] [pid 34405:tid 34429] [client 20.243.53.228:58543] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aR7-6TFpvu8oRK7ATfslEAAAARY"]
[Thu Nov 20 19:43:39.138235 2025] [proxy_fcgi:error] [pid 40537:tid 40562] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:39.274866 2025] [proxy_fcgi:error] [pid 40537:tid 40565] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:39.412053 2025] [proxy_fcgi:error] [pid 40537:tid 40553] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:39.549444 2025] [proxy_fcgi:error] [pid 40537:tid 40542] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:39.685896 2025] [proxy_fcgi:error] [pid 40537:tid 40558] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:39.803122 2025] [proxy_fcgi:error] [pid 40537:tid 40547] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:39.937796 2025] [proxy_fcgi:error] [pid 40537:tid 40557] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:40.066471 2025] [proxy_fcgi:error] [pid 40537:tid 40544] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:40.185515 2025] [proxy_fcgi:error] [pid 40537:tid 40555] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:40.323740 2025] [proxy_fcgi:error] [pid 40537:tid 40561] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:40.469586 2025] [proxy_fcgi:error] [pid 40537:tid 40552] [client 20.243.53.228:58457] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:43:40.611107 2025] [:error] [pid 40537:tid 40551] [client 20.243.53.228:58457] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aR7-7KKlsL5kxTa3c1zskgAAAso"]
[Thu Nov 20 19:43:43.009445 2025] [:error] [pid 40445:tid 40488] [client 20.243.53.228:58455] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aR7-71H-MuFcoWRjXpZo5wAAAk0"]
[Thu Nov 20 19:43:43.698739 2025] [:error] [pid 40415:tid 40422] [client 20.243.53.228:58546] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aR7-76hjIyLSv09svwO01gAAAcQ"]
[Thu Nov 20 19:43:44.137087 2025] [:error] [pid 55430:tid 55445] [client 20.243.53.228:58373] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aR7-8PPZXaIMEU4pE7sKbwAAAMw"]
[Thu Nov 20 19:43:44.886834 2025] [:error] [pid 40636:tid 40646] [client 20.243.53.228:58453] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moie.php"] [unique_id "aR7-8AK8BWUoW3xq0HAXRwAAA4Y"]
[Thu Nov 20 19:43:46.652269 2025] [:error] [pid 40636:tid 40656] [client 20.243.53.228:58396] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moie.php"] [unique_id "aR7-8gK8BWUoW3xq0HAXSQAAA5A"]
[Thu Nov 20 19:43:48.013679 2025] [:error] [pid 55343:tid 55423] [client 20.243.53.228:58387] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moie.php"] [unique_id "aR7-9FWlO3EnyVMV7w67dgAAAJg"]
[Thu Nov 20 19:43:48.870958 2025] [:error] [pid 34405:tid 34407] [client 20.243.53.228:58445] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moie.php"] [unique_id "aR7-9DFpvu8oRK7ATfslHAAAAQA"]
[Thu Nov 20 19:43:49.363872 2025] [:error] [pid 55430:tid 55453] [client 20.243.53.228:58522] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shelp.php"] [unique_id "aR7-9fPZXaIMEU4pE7sKcgAAANQ"]
[Thu Nov 20 19:43:50.432290 2025] [:error] [pid 40537:tid 40552] [client 20.243.53.228:58528] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shelp.php"] [unique_id "aR7-9qKlsL5kxTa3c1zsnQAAAss"]
[Thu Nov 20 19:43:51.066203 2025] [:error] [pid 40415:tid 40429] [client 20.243.53.228:58519] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shelp.php"] [unique_id "aR7-96hjIyLSv09svwO02AAAAcs"]
[Thu Nov 20 19:43:51.586744 2025] [:error] [pid 40537:tid 40550] [client 20.243.53.228:58411] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shelp.php"] [unique_id "aR7-96KlsL5kxTa3c1zsoAAAAsk"]
[Thu Nov 20 19:43:52.444399 2025] [:error] [pid 40537:tid 40546] [client 20.243.53.228:58469] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/siln.php"] [unique_id "aR7--KKlsL5kxTa3c1zsowAAAsU"]
[Thu Nov 20 19:43:53.558436 2025] [:error] [pid 34405:tid 34409] [client 20.243.53.228:58547] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/siln.php"] [unique_id "aR7--TFpvu8oRK7ATfslIgAAAQI"]
[Thu Nov 20 19:43:54.694394 2025] [:error] [pid 40415:tid 40424] [client 20.243.53.228:58374] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/siln.php"] [unique_id "aR7--qhjIyLSv09svwO02gAAAcY"]
[Thu Nov 20 19:43:55.391610 2025] [:error] [pid 55430:tid 55439] [client 20.243.53.228:58526] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/siln.php"] [unique_id "aR7--_PZXaIMEU4pE7sKegAAAMY"]
[Thu Nov 20 19:43:56.191989 2025] [:error] [pid 55343:tid 55401] [client 20.243.53.228:58490] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "aR7-_FWlO3EnyVMV7w67gQAAAII"]
[Thu Nov 20 19:43:57.807809 2025] [:error] [pid 55342:tid 55393] [client 20.243.53.228:58400] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "aR7-_bg6x32Tvk7fIG_pgAAAAFU"]
[Thu Nov 20 19:43:58.973879 2025] [:error] [pid 55343:tid 55412] [client 20.243.53.228:58369] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "aR7-_lWlO3EnyVMV7w67ggAAAI0"]
[Thu Nov 20 19:43:59.915522 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58370] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "aR7-_1H-MuFcoWRjXpZo-AAAAk8"]
[Thu Nov 20 19:44:01.154887 2025] [:error] [pid 55342:tid 55381] [client 20.243.53.228:58372] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aR7_Abg6x32Tvk7fIG_pgwAAAEk"]
[Thu Nov 20 19:44:01.898239 2025] [:error] [pid 40508:tid 40515] [client 20.243.53.228:58441] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aR7_AaxXNVCMW_ksxPu91QAAAoU"]
[Thu Nov 20 19:44:03.225114 2025] [:error] [pid 40415:tid 40441] [client 20.243.53.228:58501] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aR7_A6hjIyLSv09svwO03AAAAdc"]
[Thu Nov 20 19:44:03.872234 2025] [:error] [pid 40508:tid 40532] [client 20.243.53.228:58442] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aR7_A6xXNVCMW_ksxPu91wAAApY"]
[Thu Nov 20 19:44:04.409691 2025] [:error] [pid 34405:tid 34414] [client 20.243.53.228:58381] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-gif.php"] [unique_id "aR7_BDFpvu8oRK7ATfslLwAAAQc"]
[Thu Nov 20 19:44:05.009302 2025] [:error] [pid 40445:tid 40479] [client 20.243.53.228:58375] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-gif.php"] [unique_id "aR7_BVH-MuFcoWRjXpZpTQAAAkQ"]
[Thu Nov 20 19:44:05.889734 2025] [:error] [pid 34405:tid 34410] [client 20.243.53.228:58491] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-gif.php"] [unique_id "aR7_BTFpvu8oRK7ATfslMAAAAQM"]
[Thu Nov 20 19:44:07.663949 2025] [:error] [pid 40445:tid 40487] [client 20.243.53.228:58494] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-gif.php"] [unique_id "aR7_B1H-MuFcoWRjXpZpoAAAAkw"]
[Thu Nov 20 19:44:08.353810 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:58385] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aR7_CFH-MuFcoWRjXpZppAAAAlE"]
[Thu Nov 20 19:44:09.871786 2025] [:error] [pid 55342:tid 55396] [client 20.243.53.228:58390] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aR7_Cbg6x32Tvk7fIG_pkQAAAFg"]
[Thu Nov 20 19:44:10.833151 2025] [:error] [pid 40537:tid 40557] [client 20.243.53.228:58492] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aR7_CqKlsL5kxTa3c1zswAAAAtA"]
[Thu Nov 20 19:44:13.557061 2025] [:error] [pid 40415:tid 40436] [client 20.243.53.228:58544] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aR7_DahjIyLSv09svwO1HwAAAdI"]
[Thu Nov 20 19:44:14.588297 2025] [:error] [pid 55342:tid 55382] [client 20.243.53.228:58499] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aR7_Drg6x32Tvk7fIG_plwAAAEo"]
[Thu Nov 20 19:44:16.269724 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:58495] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aR7_EFH-MuFcoWRjXpZprwAAAks"]
[Thu Nov 20 19:44:17.521825 2025] [:error] [pid 40415:tid 40425] [client 20.243.53.228:58498] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aR7_EahjIyLSv09svwO1KQAAAcc"]
[Thu Nov 20 19:44:18.254473 2025] [:error] [pid 40508:tid 40515] [client 20.243.53.228:58348] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aR7_EqxXNVCMW_ksxPu93wAAAoU"]
[Thu Nov 20 19:44:19.019880 2025] [:error] [pid 40537:tid 40554] [client 20.243.53.228:58477] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tj.php"] [unique_id "aR7_E6KlsL5kxTa3c1zsxAAAAs0"]
[Thu Nov 20 19:44:19.756653 2025] [:error] [pid 40445:tid 40489] [client 20.243.53.228:58471] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tj.php"] [unique_id "aR7_E1H-MuFcoWRjXpZpsQAAAk4"]
[Thu Nov 20 19:44:20.216768 2025] [:error] [pid 40537:tid 40543] [client 20.243.53.228:58510] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tj.php"] [unique_id "aR7_FKKlsL5kxTa3c1zsxwAAAsI"]
[Thu Nov 20 19:44:20.674953 2025] [:error] [pid 40445:tid 40487] [client 20.243.53.228:58414] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tj.php"] [unique_id "aR7_FFH-MuFcoWRjXpZpsgAAAkw"]
[Thu Nov 20 19:44:21.648256 2025] [:error] [pid 40415:tid 40430] [client 20.243.53.228:58556] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vansec.php"] [unique_id "aR7_FahjIyLSv09svwO1LQAAAcw"]
[Thu Nov 20 19:44:21.946244 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58380] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vansec.php"] [unique_id "aR7_FVH-MuFcoWRjXpZptwAAAk8"]
[Thu Nov 20 19:44:22.564673 2025] [:error] [pid 34405:tid 34408] [client 20.243.53.228:58326] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vansec.php"] [unique_id "aR7_FjFpvu8oRK7ATfslOQAAAQE"]
[Thu Nov 20 19:44:23.366135 2025] [:error] [pid 40445:tid 40480] [client 20.243.53.228:58425] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vansec.php"] [unique_id "aR7_F1H-MuFcoWRjXpZpxQAAAkU"]
[Thu Nov 20 19:44:24.479016 2025] [:error] [pid 40415:tid 40423] [client 20.243.53.228:58416] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aR7_GKhjIyLSv09svwO1LgAAAcU"]
[Thu Nov 20 19:44:27.554612 2025] [:error] [pid 55343:tid 55414] [client 20.243.53.228:58557] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aR7_G1WlO3EnyVMV7w67lgAAAI8"]
[Thu Nov 20 19:44:28.582683 2025] [:error] [pid 34405:tid 34419] [client 20.243.53.228:58496] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aR7_HDFpvu8oRK7ATfslPgAAAQw"]
[Thu Nov 20 19:44:29.895818 2025] [:error] [pid 55340:tid 55350] [client 20.243.53.228:58515] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aR7_HfOxD-NeMydTybCo4wAAAAU"]
[Thu Nov 20 19:44:31.159769 2025] [:error] [pid 40445:tid 40479] [client 20.243.53.228:58386] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aR7_H1H-MuFcoWRjXpZp2wAAAkQ"]
[Thu Nov 20 19:44:32.057519 2025] [:error] [pid 40537:tid 40551] [client 20.243.53.228:58460] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aR7_IKKlsL5kxTa3c1zszAAAAso"]
[Thu Nov 20 19:44:33.009015 2025] [:error] [pid 40636:tid 40643] [client 20.243.53.228:58412] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aR7_IQK8BWUoW3xq0HAXZQAAA4M"]
[Thu Nov 20 19:44:34.176617 2025] [:error] [pid 55343:tid 55413] [client 20.243.53.228:58462] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aR7_IlWlO3EnyVMV7w67mQAAAI4"]
[Thu Nov 20 19:44:35.044752 2025] [:error] [pid 40445:tid 40498] [client 20.243.53.228:58489] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aR7_I1H-MuFcoWRjXpZp4QAAAlc"]
[Thu Nov 20 19:44:36.378098 2025] [:error] [pid 40508:tid 40524] [client 20.243.53.228:58424] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aR7_JKxXNVCMW_ksxPu96AAAAo4"]
[Thu Nov 20 19:44:37.510821 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:58435] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aR7_JTFpvu8oRK7ATfslRwAAARE"]
[Thu Nov 20 19:44:39.606768 2025] [:error] [pid 40415:tid 40434] [client 20.243.53.228:58473] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aR7_J6hjIyLSv09svwO1NwAAAdA"]
[Thu Nov 20 19:44:42.091952 2025] [proxy_fcgi:error] [pid 40445:tid 40488] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:42.680902 2025] [proxy_fcgi:error] [pid 40445:tid 40492] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:42.809317 2025] [proxy_fcgi:error] [pid 40445:tid 40487] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:42.940776 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.059458 2025] [proxy_fcgi:error] [pid 40445:tid 40483] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.196325 2025] [proxy_fcgi:error] [pid 40445:tid 40476] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.313982 2025] [proxy_fcgi:error] [pid 40445:tid 40485] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.576054 2025] [proxy_fcgi:error] [pid 40445:tid 40494] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.708142 2025] [proxy_fcgi:error] [pid 40445:tid 40479] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.827676 2025] [proxy_fcgi:error] [pid 40445:tid 40497] [client 20.243.53.228:58486] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:44:43.941267 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58486] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aR7_K1H-MuFcoWRjXpZp-AAAAk8"]
[Thu Nov 20 19:44:45.189755 2025] [:error] [pid 55343:tid 55421] [client 20.243.53.228:58456] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aR7_LVWlO3EnyVMV7w67qAAAAJY"]
[Thu Nov 20 19:44:46.057010 2025] [:error] [pid 40636:tid 40652] [client 20.243.53.228:58465] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aR7_LgK8BWUoW3xq0HAXcwAAA4w"]
[Thu Nov 20 19:44:47.488453 2025] [:error] [pid 40415:tid 40429] [client 20.243.53.228:58395] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aR7_L6hjIyLSv09svwO1QAAAAcs"]
[Thu Nov 20 19:44:49.332153 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:58459] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aR7_MaxXNVCMW_ksxPu-CgAAApU"]
[Thu Nov 20 19:44:49.817749 2025] [:error] [pid 55343:tid 55403] [client 20.243.53.228:58417] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aR7_MVWlO3EnyVMV7w67rwAAAIQ"]
[Thu Nov 20 19:44:51.303111 2025] [:error] [pid 55343:tid 55417] [client 20.243.53.228:58394] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aR7_M1WlO3EnyVMV7w67sAAAAJI"]
[Thu Nov 20 19:44:52.766016 2025] [:error] [pid 40636:tid 40658] [client 20.243.53.228:58405] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aR7_NAK8BWUoW3xq0HAXggAAA5I"]
[Thu Nov 20 19:44:55.051857 2025] [:error] [pid 55342:tid 55383] [client 20.243.53.228:58313] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas22.php"] [unique_id "aR7_N7g6x32Tvk7fIG_pwgAAAEs"]
[Thu Nov 20 19:44:56.346399 2025] [:error] [pid 40537:tid 40564] [client 20.243.53.228:58371] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas22.php"] [unique_id "aR7_OKKlsL5kxTa3c1zs3QAAAtc"]
[Thu Nov 20 19:44:57.200401 2025] [:error] [pid 40445:tid 40482] [client 20.243.53.228:58391] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas22.php"] [unique_id "aR7_OVH-MuFcoWRjXpZqCQAAAkc"]
[Thu Nov 20 19:44:58.410998 2025] [:error] [pid 40445:tid 40491] [client 20.243.53.228:58524] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpas22.php"] [unique_id "aR7_OlH-MuFcoWRjXpZqDwAAAlA"]
[Thu Nov 20 19:44:59.466527 2025] [:error] [pid 55343:tid 55406] [client 20.243.53.228:58408] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aR7_O1WlO3EnyVMV7w67twAAAIc"]
[Thu Nov 20 19:45:00.629634 2025] [:error] [pid 40445:tid 40487] [client 20.243.53.228:58315] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aR7_PFH-MuFcoWRjXpZqEgAAAkw"]
[Thu Nov 20 19:45:02.674103 2025] [:error] [pid 34405:tid 34427] [client 20.243.53.228:58407] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aR7_PjFpvu8oRK7ATfslWAAAARQ"]
[Thu Nov 20 19:45:04.921671 2025] [:error] [pid 40508:tid 40514] [client 20.243.53.228:58306] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aR7_QKxXNVCMW_ksxPu-IwAAAoQ"]
[Thu Nov 20 19:45:06.438337 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:58538] [client 20.243.53.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aR7_QlH-MuFcoWRjXpZqGAAAAkM"]
[Thu Nov 20 19:45:07.276029 2025] [:error] [pid 40636:tid 40643] [client 20.243.53.228:58559] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eauu.php"] [unique_id "aR7_QwK8BWUoW3xq0HAXjgAAA4M"]
[Thu Nov 20 19:45:07.962128 2025] [:error] [pid 34405:tid 34423] [client 20.243.53.228:58541] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eauu.php"] [unique_id "aR7_QzFpvu8oRK7ATfslWgAAARA"]
[Thu Nov 20 19:45:09.423979 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:58389] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eauu.php"] [unique_id "aR7_RVH-MuFcoWRjXpZqKAAAAkg"]
[Thu Nov 20 19:45:10.983794 2025] [:error] [pid 40537:tid 40547] [client 20.243.53.228:58345] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eauu.php"] [unique_id "aR7_RqKlsL5kxTa3c1zs4wAAAsY"]
[Thu Nov 20 19:45:12.318805 2025] [:error] [pid 40508:tid 40526] [client 20.243.53.228:58304] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aR7_SKxXNVCMW_ksxPu-NwAAApA"]
[Thu Nov 20 19:45:14.423705 2025] [:error] [pid 40537:tid 40565] [client 20.243.53.228:58429] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aR7_SqKlsL5kxTa3c1zs5gAAAtg"]
[Thu Nov 20 19:45:16.329353 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:58488] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aR7_TFH-MuFcoWRjXpZqPQAAAlE"]
[Thu Nov 20 19:45:17.773221 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:58388] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aR7_TTFpvu8oRK7ATfslaQAAARE"]
[Thu Nov 20 19:45:19.217782 2025] [:error] [pid 40636:tid 40647] [client 20.243.53.228:58428] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru.php"] [unique_id "aR7_TwK8BWUoW3xq0HAXlgAAA4c"]
[Thu Nov 20 19:45:21.762621 2025] [:error] [pid 40636:tid 40659] [client 20.243.53.228:58554] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru.php"] [unique_id "aR7_UQK8BWUoW3xq0HAXnAAAA5M"]
[Thu Nov 20 19:45:25.519265 2025] [:error] [pid 55340:tid 55361] [client 20.243.53.228:58402] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru.php"] [unique_id "aR7_VfOxD-NeMydTybCpDwAAABA"]
[Thu Nov 20 19:45:27.575273 2025] [:error] [pid 40508:tid 40511] [client 20.243.53.228:58463] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru.php"] [unique_id "aR7_V6xXNVCMW_ksxPu-QgAAAoE"]
[Thu Nov 20 19:45:29.242173 2025] [:error] [pid 34405:tid 34430] [client 20.243.53.228:58507] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aR7_WTFpvu8oRK7ATfsldQAAARc"]
[Thu Nov 20 19:45:32.165765 2025] [:error] [pid 55430:tid 55441] [client 20.243.53.228:58493] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aR7_XPPZXaIMEU4pE7sK5AAAAMg"]
[Thu Nov 20 19:45:33.256018 2025] [:error] [pid 34405:tid 34408] [client 20.243.53.228:58452] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aR7_XTFpvu8oRK7ATfslegAAAQE"]
[Thu Nov 20 19:45:34.216213 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:58467] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aR7_XlH-MuFcoWRjXpZqVwAAAkM"]
[Thu Nov 20 19:45:36.104982 2025] [:error] [pid 40415:tid 40441] [client 20.243.53.228:58403] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aR7_YKhjIyLSv09svwO1iAAAAdc"]
[Thu Nov 20 19:45:36.980736 2025] [:error] [pid 55343:tid 55401] [client 20.243.53.228:58413] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aR7_YFWlO3EnyVMV7w678QAAAII"]
[Thu Nov 20 19:45:38.714689 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58401] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aR7_YlH-MuFcoWRjXpZqXwAAAk8"]
[Thu Nov 20 19:45:40.767982 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:58464] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aR7_ZFH-MuFcoWRjXpZqYQAAAks"]
[Thu Nov 20 19:45:43.295362 2025] [proxy_fcgi:error] [pid 55343:tid 55406] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:43.416199 2025] [proxy_fcgi:error] [pid 55343:tid 55415] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:43.538103 2025] [proxy_fcgi:error] [pid 55343:tid 55409] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:43.774630 2025] [proxy_fcgi:error] [pid 55343:tid 55423] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:43.894953 2025] [proxy_fcgi:error] [pid 55343:tid 55408] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:44.012767 2025] [proxy_fcgi:error] [pid 55343:tid 55400] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:45.325019 2025] [proxy_fcgi:error] [pid 55343:tid 55407] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:45.445894 2025] [proxy_fcgi:error] [pid 55343:tid 55419] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:45.565980 2025] [proxy_fcgi:error] [pid 55343:tid 55405] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:45.683439 2025] [proxy_fcgi:error] [pid 55343:tid 55422] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:45.806858 2025] [proxy_fcgi:error] [pid 55343:tid 55401] [client 20.243.53.228:58444] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:45:45.923750 2025] [:error] [pid 55343:tid 55414] [client 20.243.53.228:58444] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oswkk.php"] [unique_id "aR7_aVWlO3EnyVMV7w68AgAAAI8"]
[Thu Nov 20 19:45:46.416747 2025] [:error] [pid 55342:tid 55377] [client 20.243.53.228:58332] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oswkk.php"] [unique_id "aR7_arg6x32Tvk7fIG_p_gAAAEU"]
[Thu Nov 20 19:45:48.322696 2025] [:error] [pid 34405:tid 34407] [client 20.243.53.228:58362] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oswkk.php"] [unique_id "aR7_bDFpvu8oRK7ATfsliAAAAQA"]
[Thu Nov 20 19:45:50.749507 2025] [:error] [pid 40415:tid 40442] [client 20.243.53.228:58437] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oswkk.php"] [unique_id "aR7_bqhjIyLSv09svwO1kAAAAdg"]
[Thu Nov 20 19:45:53.261915 2025] [:error] [pid 34405:tid 34409] [client 20.243.53.228:58388] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rex.php"] [unique_id "aR7_cTFpvu8oRK7ATfsljAAAAQI"]
[Thu Nov 20 19:45:53.924127 2025] [:error] [pid 40636:tid 40649] [client 20.243.53.228:58482] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rex.php"] [unique_id "aR7_cQK8BWUoW3xq0HAXvwAAA4k"]
[Thu Nov 20 19:45:54.746120 2025] [:error] [pid 40636:tid 40656] [client 20.243.53.228:58383] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rex.php"] [unique_id "aR7_cgK8BWUoW3xq0HAXwAAAA5A"]
[Thu Nov 20 19:45:55.602910 2025] [:error] [pid 55430:tid 55442] [client 20.243.53.228:58409] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rex.php"] [unique_id "aR7_c_PZXaIMEU4pE7sK6AAAAMk"]
[Thu Nov 20 19:45:56.399332 2025] [:error] [pid 40537:tid 40562] [client 20.243.53.228:58397] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aR7_dKKlsL5kxTa3c1ztCgAAAtU"]
[Thu Nov 20 19:45:58.082457 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:58376] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aR7_dlH-MuFcoWRjXpZqcQAAAks"]
[Thu Nov 20 19:46:00.420596 2025] [:error] [pid 34405:tid 34411] [client 20.243.53.228:58485] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aR7_eDFpvu8oRK7ATfslkQAAAQQ"]
[Thu Nov 20 19:46:01.076500 2025] [:error] [pid 34405:tid 34425] [client 20.243.53.228:58475] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aR7_eTFpvu8oRK7ATfslkwAAARI"]
[Thu Nov 20 19:46:02.012252 2025] [:error] [pid 40636:tid 40641] [client 20.243.53.228:58523] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "aR7_egK8BWUoW3xq0HAXxAAAA4E"]
[Thu Nov 20 19:46:02.481329 2025] [:error] [pid 40636:tid 40642] [client 20.243.53.228:58359] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "aR7_egK8BWUoW3xq0HAXxQAAA4I"]
[Thu Nov 20 19:46:03.405728 2025] [:error] [pid 34405:tid 34419] [client 20.243.53.228:58487] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "aR7_ezFpvu8oRK7ATfsllQAAAQw"]
[Thu Nov 20 19:46:05.206639 2025] [:error] [pid 55430:tid 55452] [client 20.243.53.228:58421] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "aR7_ffPZXaIMEU4pE7sK8QAAANM"]
[Thu Nov 20 19:46:06.374060 2025] [:error] [pid 55430:tid 55438] [client 20.243.53.228:58364] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aR7_fvPZXaIMEU4pE7sK9wAAAMU"]
[Thu Nov 20 19:46:07.714494 2025] [:error] [pid 40537:tid 40542] [client 20.243.53.228:58478] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aR7_f6KlsL5kxTa3c1ztGwAAAsE"]
[Thu Nov 20 19:46:08.369320 2025] [:error] [pid 55340:tid 55347] [client 20.243.53.228:58399] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aR7_gPOxD-NeMydTybCpNgAAAAI"]
[Thu Nov 20 19:46:09.596946 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:58331] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aR7_gVH-MuFcoWRjXpZqdQAAAlQ"]
[Thu Nov 20 19:46:12.677477 2025] [:error] [pid 40445:tid 40484] [client 20.243.53.228:58410] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "aR7_hFH-MuFcoWRjXpZqfAAAAkk"]
[Thu Nov 20 19:46:15.741051 2025] [:error] [pid 55343:tid 55418] [client 20.243.53.228:58418] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "aR7_h1WlO3EnyVMV7w68HwAAAJM"]
[Thu Nov 20 19:46:16.302455 2025] [:error] [pid 40537:tid 40565] [client 20.243.53.228:58481] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "aR7_iKKlsL5kxTa3c1ztJAAAAtg"]
[Thu Nov 20 19:46:16.745013 2025] [:error] [pid 40415:tid 40441] [client 20.243.53.228:58343] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "aR7_iKhjIyLSv09svwO1ngAAAdc"]
[Thu Nov 20 19:46:17.708063 2025] [:error] [pid 55343:tid 55417] [client 20.243.53.228:58470] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aR7_iVWlO3EnyVMV7w68JgAAAJI"]
[Thu Nov 20 19:46:18.719149 2025] [:error] [pid 40537:tid 40557] [client 20.243.53.228:58536] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aR7_iqKlsL5kxTa3c1ztJgAAAtA"]
[Thu Nov 20 19:46:19.083504 2025] [:error] [pid 55340:tid 55356] [client 20.243.53.228:58472] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aR7_i_OxD-NeMydTybCpOAAAAAs"]
[Thu Nov 20 19:46:20.242584 2025] [:error] [pid 55430:tid 55435] [client 20.243.53.228:58324] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aR7_jPPZXaIMEU4pE7sLAAAAAMI"]
[Thu Nov 20 19:46:21.370367 2025] [:error] [pid 55340:tid 55346] [client 20.243.53.228:58329] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api137.php"] [unique_id "aR7_jfOxD-NeMydTybCpPQAAAAE"]
[Thu Nov 20 19:46:22.585621 2025] [:error] [pid 40415:tid 40435] [client 20.243.53.228:58393] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api137.php"] [unique_id "aR7_jqhjIyLSv09svwO1owAAAdE"]
[Thu Nov 20 19:46:23.367716 2025] [:error] [pid 40537:tid 40554] [client 20.243.53.228:58316] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api137.php"] [unique_id "aR7_j6KlsL5kxTa3c1ztKQAAAs0"]
[Thu Nov 20 19:46:24.125891 2025] [:error] [pid 40415:tid 40426] [client 20.243.53.228:58420] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api137.php"] [unique_id "aR7_kKhjIyLSv09svwO1pAAAAcg"]
[Thu Nov 20 19:46:25.056676 2025] [:error] [pid 40636:tid 40649] [client 20.243.53.228:58322] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class629.php"] [unique_id "aR7_kQK8BWUoW3xq0HAX3QAAA4k"]
[Thu Nov 20 19:46:27.498190 2025] [:error] [pid 40508:tid 40526] [client 20.243.53.228:58517] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class629.php"] [unique_id "aR7_k6xXNVCMW_ksxPu-cAAAApA"]
[Thu Nov 20 19:46:28.230910 2025] [:error] [pid 40415:tid 40429] [client 20.243.53.228:58392] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class629.php"] [unique_id "aR7_lKhjIyLSv09svwO1qwAAAcs"]
[Thu Nov 20 19:46:29.015223 2025] [:error] [pid 40508:tid 40532] [client 20.243.53.228:58349] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class629.php"] [unique_id "aR7_laxXNVCMW_ksxPu-cgAAApY"]
[Thu Nov 20 19:46:29.867173 2025] [:error] [pid 40445:tid 40485] [client 20.243.53.228:58379] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-x7.php"] [unique_id "aR7_lVH-MuFcoWRjXpZqkgAAAko"]
[Thu Nov 20 19:46:30.658359 2025] [:error] [pid 40508:tid 40533] [client 20.243.53.228:58419] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-x7.php"] [unique_id "aR7_lqxXNVCMW_ksxPu-dQAAApc"]
[Thu Nov 20 19:46:31.585927 2025] [:error] [pid 40445:tid 40479] [client 20.243.53.228:58426] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-x7.php"] [unique_id "aR7_l1H-MuFcoWRjXpZqlgAAAkQ"]
[Thu Nov 20 19:46:32.532357 2025] [:error] [pid 40445:tid 40494] [client 20.243.53.228:58320] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-x7.php"] [unique_id "aR7_mFH-MuFcoWRjXpZqmgAAAlM"]
[Thu Nov 20 19:46:33.107250 2025] [:error] [pid 55342:tid 55378] [client 20.243.53.228:58422] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp670.php"] [unique_id "aR7_mbg6x32Tvk7fIG_qJAAAAEY"]
[Thu Nov 20 19:46:34.485649 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:58340] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp670.php"] [unique_id "aR7_mlH-MuFcoWRjXpZqoAAAAlE"]
[Thu Nov 20 19:46:35.072122 2025] [:error] [pid 40537:tid 40555] [client 20.243.53.228:58415] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp670.php"] [unique_id "aR7_m6KlsL5kxTa3c1ztPQAAAs4"]
[Thu Nov 20 19:46:36.310844 2025] [:error] [pid 40537:tid 40548] [client 20.243.53.228:58430] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp670.php"] [unique_id "aR7_nKKlsL5kxTa3c1ztPwAAAsc"]
[Thu Nov 20 19:46:37.374006 2025] [:error] [pid 40508:tid 40526] [client 20.243.53.228:58406] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aR7_naxXNVCMW_ksxPu-ggAAApA"]
[Thu Nov 20 19:46:37.928791 2025] [:error] [pid 55343:tid 55412] [client 20.243.53.228:58312] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aR7_nVWlO3EnyVMV7w68MgAAAI0"]
[Thu Nov 20 19:46:38.771147 2025] [:error] [pid 40537:tid 40561] [client 20.243.53.228:58249] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aR7_nqKlsL5kxTa3c1ztQwAAAtQ"]
[Thu Nov 20 19:46:40.071484 2025] [:error] [pid 55343:tid 55416] [client 20.243.53.228:58335] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aR7_oFWlO3EnyVMV7w68MwAAAJE"]
[Thu Nov 20 19:46:41.332041 2025] [:error] [pid 55342:tid 55373] [client 20.243.53.228:58280] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aR7_obg6x32Tvk7fIG_qKwAAAEE"]
[Thu Nov 20 19:46:42.493304 2025] [:error] [pid 40445:tid 40477] [client 20.243.53.228:58260] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aR7_olH-MuFcoWRjXpZqzwAAAkI"]
[Thu Nov 20 19:46:43.568460 2025] [:error] [pid 40508:tid 40510] [client 20.243.53.228:58344] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aR7_o6xXNVCMW_ksxPu-sQAAAoA"]
[Thu Nov 20 19:46:44.128054 2025] [:error] [pid 55343:tid 55406] [client 20.243.53.228:58314] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aR7_pFWlO3EnyVMV7w68OgAAAIc"]
[Thu Nov 20 19:46:46.102167 2025] [proxy_fcgi:error] [pid 40445:tid 40475] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:46.239021 2025] [proxy_fcgi:error] [pid 40445:tid 40486] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:46.357846 2025] [proxy_fcgi:error] [pid 40445:tid 40479] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:46.481454 2025] [proxy_fcgi:error] [pid 40445:tid 40491] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:46.616407 2025] [proxy_fcgi:error] [pid 40445:tid 40476] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:46.738125 2025] [proxy_fcgi:error] [pid 40445:tid 40494] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:46.857364 2025] [proxy_fcgi:error] [pid 40445:tid 40477] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:47.016637 2025] [proxy_fcgi:error] [pid 40445:tid 40496] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:47.135389 2025] [proxy_fcgi:error] [pid 40445:tid 40497] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:47.490131 2025] [proxy_fcgi:error] [pid 40445:tid 40482] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:47.608371 2025] [proxy_fcgi:error] [pid 40445:tid 40495] [client 20.243.53.228:58427] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:46:47.739110 2025] [:error] [pid 40445:tid 40499] [client 20.243.53.228:58427] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aR7_p1H-MuFcoWRjXpZq-AAAAlg"]
[Thu Nov 20 19:46:48.649771 2025] [:error] [pid 40537:tid 40548] [client 20.243.53.228:58480] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aR7_qKKlsL5kxTa3c1ztZgAAAsc"]
[Thu Nov 20 19:46:49.515187 2025] [:error] [pid 40537:tid 40549] [client 20.243.53.228:58479] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aR7_qaKlsL5kxTa3c1ztZwAAAsg"]
[Thu Nov 20 19:46:51.943839 2025] [:error] [pid 40445:tid 40489] [client 20.243.53.228:58325] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aR7_q1H-MuFcoWRjXpZrBwAAAk4"]
[Thu Nov 20 19:46:52.771809 2025] [:error] [pid 55340:tid 55352] [client 20.243.53.228:58431] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aR7_rPOxD-NeMydTybCpTQAAAAc"]
[Thu Nov 20 19:46:56.118850 2025] [:error] [pid 40445:tid 40486] [client 20.243.53.228:58356] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aR7_sFH-MuFcoWRjXpZrDQAAAks"]
[Thu Nov 20 19:46:57.040735 2025] [:error] [pid 40636:tid 40655] [client 20.243.53.228:58423] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aR7_sQK8BWUoW3xq0HAYGwAAA48"]
[Thu Nov 20 19:46:59.656897 2025] [:error] [pid 55430:tid 55436] [client 20.243.53.228:58555] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aR7_s_PZXaIMEU4pE7sLFwAAAMM"]
[Thu Nov 20 19:47:01.855197 2025] [:error] [pid 40415:tid 40438] [client 20.243.53.228:58245] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aR7_tahjIyLSv09svwO13AAAAdQ"]
[Thu Nov 20 19:47:03.240730 2025] [:error] [pid 40636:tid 40641] [client 20.243.53.228:58512] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aR7_twK8BWUoW3xq0HAYNgAAA4E"]
[Thu Nov 20 19:47:04.112835 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:58317] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aR7_uFH-MuFcoWRjXpZrFAAAAkM"]
[Thu Nov 20 19:47:05.997623 2025] [:error] [pid 55343:tid 55419] [client 20.243.53.228:58269] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aR7_uVWlO3EnyVMV7w68WAAAAJQ"]
[Thu Nov 20 19:47:06.928271 2025] [:error] [pid 40415:tid 40419] [client 20.243.53.228:58279] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aR7_uqhjIyLSv09svwO16QAAAcE"]
[Thu Nov 20 19:47:08.294849 2025] [:error] [pid 40415:tid 40432] [client 20.243.53.228:58450] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aR7_vKhjIyLSv09svwO16gAAAc4"]
[Thu Nov 20 19:47:10.910628 2025] [:error] [pid 40537:tid 40545] [client 20.243.53.228:58509] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aR7_vqKlsL5kxTa3c1zthgAAAsQ"]
[Thu Nov 20 19:47:11.933100 2025] [:error] [pid 55340:tid 55345] [client 20.243.53.228:58273] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aR7_v_OxD-NeMydTybCpYwAAAAA"]
[Thu Nov 20 19:47:14.058121 2025] [:error] [pid 40415:tid 40430] [client 20.243.53.228:58338] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock1.php"] [unique_id "aR7_wqhjIyLSv09svwO1_QAAAcw"]
[Thu Nov 20 19:47:15.181762 2025] [:error] [pid 55340:tid 55359] [client 20.243.53.228:58361] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock1.php"] [unique_id "aR7_w_OxD-NeMydTybCpZwAAAA4"]
[Thu Nov 20 19:47:15.798408 2025] [:error] [pid 55430:tid 55447] [client 20.243.53.228:58503] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock1.php"] [unique_id "aR7_w_PZXaIMEU4pE7sLRgAAAM4"]
[Thu Nov 20 19:47:16.244335 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:58256] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock1.php"] [unique_id "aR7_xKxXNVCMW_ksxPu-4wAAApU"]
[Thu Nov 20 19:47:17.128035 2025] [:error] [pid 40508:tid 40517] [client 20.243.53.228:58342] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aR7_xaxXNVCMW_ksxPu-5QAAAoc"]
[Thu Nov 20 19:47:17.708204 2025] [:error] [pid 40445:tid 40483] [client 20.243.53.228:58307] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aR7_xVH-MuFcoWRjXpZrHwAAAkg"]
[Thu Nov 20 19:47:18.758024 2025] [:error] [pid 40508:tid 40532] [client 20.243.53.228:58549] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aR7_xqxXNVCMW_ksxPu-6QAAApY"]
[Thu Nov 20 19:47:19.386676 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:58363] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aR7_x1H-MuFcoWRjXpZrJQAAAkM"]
[Thu Nov 20 19:47:20.384227 2025] [:error] [pid 40445:tid 40480] [client 20.243.53.228:58484] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "aR7_yFH-MuFcoWRjXpZrKAAAAkU"]
[Thu Nov 20 19:47:20.982874 2025] [:error] [pid 55343:tid 55417] [client 20.243.53.228:58308] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "aR7_yFWlO3EnyVMV7w68ZgAAAJI"]
[Thu Nov 20 19:47:22.049840 2025] [:error] [pid 40537:tid 40542] [client 20.243.53.228:58451] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "aR7_yqKlsL5kxTa3c1ztngAAAsE"]
[Thu Nov 20 19:47:23.716134 2025] [:error] [pid 55340:tid 55365] [client 20.243.53.228:58196] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "aR7_y_OxD-NeMydTybCpbgAAABQ"]
[Thu Nov 20 19:47:24.570921 2025] [:error] [pid 40445:tid 40491] [client 20.243.53.228:58525] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aR7_zFH-MuFcoWRjXpZrLAAAAlA"]
[Thu Nov 20 19:47:25.393773 2025] [:error] [pid 34405:tid 34417] [client 20.243.53.228:58360] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aR7_zTFpvu8oRK7ATfsl9gAAAQo"]
[Thu Nov 20 19:47:26.995302 2025] [:error] [pid 34405:tid 34423] [client 20.243.53.228:58529] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aR7_zjFpvu8oRK7ATfsl-gAAARA"]
[Thu Nov 20 19:47:27.579856 2025] [:error] [pid 55343:tid 55418] [client 20.243.53.228:58195] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aR7_z1WlO3EnyVMV7w68bgAAAJM"]
[Thu Nov 20 19:47:28.476752 2025] [:error] [pid 40415:tid 40420] [client 20.243.53.228:58505] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-swa.php"] [unique_id "aR7_0KhjIyLSv09svwO2EAAAAcI"]
[Thu Nov 20 19:47:29.344991 2025] [:error] [pid 55343:tid 55403] [client 20.243.53.228:58506] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-swa.php"] [unique_id "aR7_0VWlO3EnyVMV7w68cAAAAIQ"]
[Thu Nov 20 19:47:29.776372 2025] [:error] [pid 55342:tid 55391] [client 20.243.53.228:58513] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-swa.php"] [unique_id "aR7_0bg6x32Tvk7fIG_qVQAAAFM"]
[Thu Nov 20 19:47:31.071311 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:58527] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-swa.php"] [unique_id "aR7_0zFpvu8oRK7ATfsmAQAAARE"]
[Thu Nov 20 19:47:31.831449 2025] [:error] [pid 55430:tid 55439] [client 20.243.53.228:58291] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/42u.php"] [unique_id "aR7_0_PZXaIMEU4pE7sLTwAAAMY"]
[Thu Nov 20 19:47:32.410281 2025] [:error] [pid 55343:tid 55419] [client 20.243.53.228:58434] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/42u.php"] [unique_id "aR7_1FWlO3EnyVMV7w68cwAAAJQ"]
[Thu Nov 20 19:47:33.736822 2025] [:error] [pid 55430:tid 55453] [client 20.243.53.228:58448] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/42u.php"] [unique_id "aR7_1fPZXaIMEU4pE7sLUQAAANQ"]
[Thu Nov 20 19:47:34.517135 2025] [:error] [pid 40508:tid 40525] [client 20.243.53.228:58328] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/42u.php"] [unique_id "aR7_1qxXNVCMW_ksxPu--QAAAo8"]
[Thu Nov 20 19:47:35.353418 2025] [:error] [pid 40537:tid 40545] [client 20.243.53.228:58368] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aR7_16KlsL5kxTa3c1ztqQAAAsQ"]
[Thu Nov 20 19:47:36.221428 2025] [:error] [pid 34405:tid 34424] [client 20.243.53.228:58339] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aR7_2DFpvu8oRK7ATfsmEgAAARE"]
[Thu Nov 20 19:47:37.723768 2025] [:error] [pid 40636:tid 40654] [client 20.243.53.228:58518] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aR7_2QK8BWUoW3xq0HAYTQAAA44"]
[Thu Nov 20 19:47:38.340078 2025] [:error] [pid 55342:tid 55394] [client 20.243.53.228:58535] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aR7_2rg6x32Tvk7fIG_qYwAAAFY"]
[Thu Nov 20 19:47:39.214170 2025] [:error] [pid 55430:tid 55437] [client 20.243.53.228:58540] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aR7_2_PZXaIMEU4pE7sLUwAAAMQ"]
[Thu Nov 20 19:47:39.910384 2025] [:error] [pid 55343:tid 55410] [client 20.243.53.228:58327] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aR7_21WlO3EnyVMV7w68egAAAIs"]
[Thu Nov 20 19:47:40.367654 2025] [:error] [pid 55343:tid 55414] [client 20.243.53.228:58350] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aR7_3FWlO3EnyVMV7w68fgAAAI8"]
[Thu Nov 20 19:47:41.092023 2025] [:error] [pid 55343:tid 55413] [client 20.243.53.228:58244] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aR7_3VWlO3EnyVMV7w68fwAAAI4"]
[Thu Nov 20 19:47:41.872580 2025] [:error] [pid 40537:tid 40542] [client 20.243.53.228:58351] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aR7_3aKlsL5kxTa3c1ztxAAAAsE"]
[Thu Nov 20 19:47:43.261146 2025] [:error] [pid 34405:tid 34413] [client 20.243.53.228:58539] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aR7_3zFpvu8oRK7ATfsmJAAAAQY"]
[Thu Nov 20 19:47:44.730089 2025] [:error] [pid 55342:tid 55377] [client 20.243.53.228:58545] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aR7_4Lg6x32Tvk7fIG_qbAAAAEU"]
[Thu Nov 20 19:47:46.706120 2025] [:error] [pid 34405:tid 34421] [client 20.243.53.228:58241] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aR7_4jFpvu8oRK7ATfsmKQAAAQ4"]
[Thu Nov 20 19:47:48.002690 2025] [proxy_fcgi:error] [pid 55342:tid 55394] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.176642 2025] [proxy_fcgi:error] [pid 55342:tid 55392] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.312442 2025] [proxy_fcgi:error] [pid 55342:tid 55378] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.447014 2025] [proxy_fcgi:error] [pid 55342:tid 55374] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.564297 2025] [proxy_fcgi:error] [pid 55342:tid 55380] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.712646 2025] [proxy_fcgi:error] [pid 55342:tid 55390] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.849311 2025] [proxy_fcgi:error] [pid 55342:tid 55383] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:48.970309 2025] [proxy_fcgi:error] [pid 55342:tid 55388] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:49.103258 2025] [proxy_fcgi:error] [pid 55342:tid 55382] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:49.221594 2025] [proxy_fcgi:error] [pid 55342:tid 55387] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:49.383262 2025] [proxy_fcgi:error] [pid 55342:tid 55384] [client 20.243.53.228:58433] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:47:49.502070 2025] [:error] [pid 55342:tid 55373] [client 20.243.53.228:58433] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aR7_5bg6x32Tvk7fIG_qfwAAAEE"]
[Thu Nov 20 19:47:50.369286 2025] [:error] [pid 40508:tid 40522] [client 20.243.53.228:58336] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aR7_5qxXNVCMW_ksxPu_CQAAAow"]
[Thu Nov 20 19:47:51.494828 2025] [:error] [pid 34405:tid 34414] [client 20.243.53.228:58357] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aR7_5zFpvu8oRK7ATfsmLAAAAQc"]
[Thu Nov 20 19:47:52.687345 2025] [:error] [pid 55430:tid 55453] [client 20.243.53.228:58305] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aR7_6PPZXaIMEU4pE7sLYQAAANQ"]
[Thu Nov 20 19:47:53.401402 2025] [:error] [pid 40508:tid 40523] [client 20.243.53.228:58177] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aR7_6axXNVCMW_ksxPu_DgAAAo0"]
[Thu Nov 20 19:47:54.383448 2025] [:error] [pid 40636:tid 40648] [client 20.243.53.228:58438] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aR7_6gK8BWUoW3xq0HAYaQAAA4g"]
[Thu Nov 20 19:47:54.996042 2025] [:error] [pid 55343:tid 55404] [client 20.243.53.228:58404] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aR7_6lWlO3EnyVMV7w68mAAAAIU"]
[Thu Nov 20 19:47:55.586210 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58504] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aR7_61H-MuFcoWRjXpZrXQAAAk8"]
[Thu Nov 20 19:47:56.556833 2025] [:error] [pid 40508:tid 40522] [client 20.243.53.228:58257] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aR7_7KxXNVCMW_ksxPu_GwAAAow"]
[Thu Nov 20 19:47:57.662392 2025] [:error] [pid 40508:tid 40524] [client 20.243.53.228:58466] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aR7_7axXNVCMW_ksxPu_HgAAAo4"]
[Thu Nov 20 19:48:01.665518 2025] [:error] [pid 55430:tid 55456] [client 20.243.53.228:58274] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aR7_8fPZXaIMEU4pE7sLdAAAANc"]
[Thu Nov 20 19:48:02.567278 2025] [:error] [pid 55340:tid 55357] [client 20.243.53.228:58321] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "aR7_8vOxD-NeMydTybCpoAAAAAw"]
[Thu Nov 20 19:48:03.219639 2025] [:error] [pid 55342:tid 55376] [client 20.243.53.228:58445] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lo.php"] [unique_id "aR7_87g6x32Tvk7fIG_qiQAAAEQ"]
[Thu Nov 20 19:48:04.354773 2025] [:error] [pid 55342:tid 55396] [client 20.243.53.228:58396] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lo.php"] [unique_id "aR7_9Lg6x32Tvk7fIG_qjAAAAFg"]
[Thu Nov 20 19:48:06.181670 2025] [:error] [pid 55340:tid 55360] [client 20.243.53.228:58447] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lo.php"] [unique_id "aR7_9vOxD-NeMydTybCptAAAAA8"]
[Thu Nov 20 19:48:07.026396 2025] [:error] [pid 40445:tid 40495] [client 20.243.53.228:58543] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lo.php"] [unique_id "aR7_91H-MuFcoWRjXpZrZQAAAlQ"]
[Thu Nov 20 19:48:07.696214 2025] [:error] [pid 55430:tid 55440] [client 20.243.53.228:58337] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aR7_9_PZXaIMEU4pE7sLeAAAAMc"]
[Thu Nov 20 19:48:08.609791 2025] [:error] [pid 40508:tid 40529] [client 20.243.53.228:58548] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aR7_-KxXNVCMW_ksxPu_KgAAApM"]
[Thu Nov 20 19:48:11.749743 2025] [:error] [pid 34405:tid 34429] [client 20.243.53.228:58457] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aR7_-zFpvu8oRK7ATfsmSAAAARY"]
[Thu Nov 20 19:48:14.572259 2025] [:error] [pid 40445:tid 40478] [client 20.243.53.228:58374] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aR7__lH-MuFcoWRjXpZrhwAAAkM"]
[Thu Nov 20 19:48:16.062879 2025] [:error] [pid 55340:tid 55349] [client 20.243.53.228:58516] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxonb.php"] [unique_id "aR8AAPOxD-NeMydTybCpxQAAAAQ"]
[Thu Nov 20 19:48:16.951263 2025] [:error] [pid 55343:tid 55408] [client 20.243.53.228:58468] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxonb.php"] [unique_id "aR8AAFWlO3EnyVMV7w68vQAAAIk"]
[Thu Nov 20 19:48:18.605161 2025] [:error] [pid 40415:tid 40434] [client 20.243.53.228:58453] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxonb.php"] [unique_id "aR8AAqhjIyLSv09svwO2dgAAAdA"]
[Thu Nov 20 19:48:19.258625 2025] [:error] [pid 34405:tid 34427] [client 20.243.53.228:58514] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxonb.php"] [unique_id "aR8AAzFpvu8oRK7ATfsmUAAAARQ"]
[Thu Nov 20 19:48:20.552698 2025] [:error] [pid 55342:tid 55381] [client 20.243.53.228:58440] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wozxsh.php"] [unique_id "aR8ABLg6x32Tvk7fIG_qqgAAAEk"]
[Thu Nov 20 19:48:23.115620 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:58353] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wozxsh.php"] [unique_id "aR8AB6xXNVCMW_ksxPu_RAAAApU"]
[Thu Nov 20 19:48:24.855200 2025] [:error] [pid 40508:tid 40517] [client 20.243.53.228:58469] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wozxsh.php"] [unique_id "aR8ACKxXNVCMW_ksxPu_SgAAAoc"]
[Thu Nov 20 19:48:26.251064 2025] [:error] [pid 40415:tid 40441] [client 20.243.53.228:58501] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wozxsh.php"] [unique_id "aR8ACqhjIyLSv09svwO2gQAAAdc"]
[Thu Nov 20 19:48:27.318348 2025] [:error] [pid 55430:tid 55435] [client 20.243.53.228:58526] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/whf.php"] [unique_id "aR8AC_PZXaIMEU4pE7sLjgAAAMI"]
[Thu Nov 20 19:48:27.880876 2025] [:error] [pid 40508:tid 40528] [client 20.243.53.228:58446] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/whf.php"] [unique_id "aR8AC6xXNVCMW_ksxPu_VgAAApI"]
[Thu Nov 20 19:48:29.261624 2025] [:error] [pid 40636:tid 40653] [client 20.243.53.228:58282] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/whf.php"] [unique_id "aR8ADQK8BWUoW3xq0HAYiwAAA40"]
[Thu Nov 20 19:48:30.559680 2025] [:error] [pid 55342:tid 55384] [client 20.243.53.228:58519] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/whf.php"] [unique_id "aR8ADrg6x32Tvk7fIG_qswAAAEw"]
[Thu Nov 20 19:48:31.438659 2025] [:error] [pid 55342:tid 55381] [client 20.243.53.228:58534] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkxzo.php"] [unique_id "aR8AD7g6x32Tvk7fIG_qugAAAEk"]
[Thu Nov 20 19:48:35.108325 2025] [:error] [pid 40636:tid 40661] [client 20.243.53.228:58441] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkxzo.php"] [unique_id "aR8AEwK8BWUoW3xq0HAYjwAAA5U"]
[Thu Nov 20 19:48:36.741169 2025] [:error] [pid 40415:tid 40418] [client 20.243.53.228:58547] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkxzo.php"] [unique_id "aR8AFKhjIyLSv09svwO2jwAAAcA"]
[Thu Nov 20 19:48:38.605951 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58556] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkxzo.php"] [unique_id "aR8AFlH-MuFcoWRjXpZrqAAAAk8"]
[Thu Nov 20 19:48:40.094105 2025] [:error] [pid 55342:tid 55378] [client 20.243.53.228:58537] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxoby.php"] [unique_id "aR8AGLg6x32Tvk7fIG_qyQAAAEY"]
[Thu Nov 20 19:48:40.682814 2025] [:error] [pid 55430:tid 55445] [client 20.243.53.228:58458] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxoby.php"] [unique_id "aR8AGPPZXaIMEU4pE7sLngAAAMw"]
[Thu Nov 20 19:48:41.666769 2025] [:error] [pid 55430:tid 55434] [client 20.243.53.228:58502] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxoby.php"] [unique_id "aR8AGfPZXaIMEU4pE7sLqgAAAME"]
[Thu Nov 20 19:48:42.034930 2025] [:error] [pid 40445:tid 40475] [client 20.243.53.228:58380] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxoby.php"] [unique_id "aR8AGlH-MuFcoWRjXpZrtwAAAkA"]
[Thu Nov 20 19:48:42.833565 2025] [:error] [pid 40415:tid 40430] [client 20.243.53.228:58530] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aR8AGqhjIyLSv09svwO2lQAAAcw"]
[Thu Nov 20 19:48:44.729756 2025] [:error] [pid 55342:tid 55388] [client 20.243.53.228:58253] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aR8AHLg6x32Tvk7fIG_qzAAAAFA"]
[Thu Nov 20 19:48:46.034414 2025] [:error] [pid 40636:tid 40653] [client 20.243.53.228:58443] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aR8AHgK8BWUoW3xq0HAYnAAAA40"]
[Thu Nov 20 19:48:47.070705 2025] [:error] [pid 34405:tid 34429] [client 20.243.53.228:58544] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aR8AHzFpvu8oRK7ATfsmewAAARY"]
[Thu Nov 20 19:48:49.538717 2025] [proxy_fcgi:error] [pid 55430:tid 55437] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:49.660336 2025] [proxy_fcgi:error] [pid 55430:tid 55456] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:49.795466 2025] [proxy_fcgi:error] [pid 55430:tid 55436] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:49.913795 2025] [proxy_fcgi:error] [pid 55430:tid 55439] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:50.124425 2025] [proxy_fcgi:error] [pid 55430:tid 55452] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:50.242716 2025] [proxy_fcgi:error] [pid 55430:tid 55434] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:50.481856 2025] [proxy_fcgi:error] [pid 55430:tid 55440] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:50.615682 2025] [proxy_fcgi:error] [pid 55430:tid 55441] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:50.753945 2025] [proxy_fcgi:error] [pid 55430:tid 55450] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:50.890583 2025] [proxy_fcgi:error] [pid 55430:tid 55449] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:51.007767 2025] [proxy_fcgi:error] [pid 55430:tid 55442] [client 20.243.53.228:58455] AH01071: Got error 'Primary script unknown'
[Thu Nov 20 19:48:51.142659 2025] [:error] [pid 55430:tid 55451] [client 20.243.53.228:58455] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "aR8AI_PZXaIMEU4pE7sLwwAAANI"]
[Thu Nov 20 19:48:52.218488 2025] [:error] [pid 55343:tid 55420] [client 20.243.53.228:58242] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "aR8AJFWlO3EnyVMV7w681gAAAJU"]
[Thu Nov 20 19:48:53.277388 2025] [:error] [pid 40445:tid 40492] [client 20.243.53.228:58497] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "aR8AJVH-MuFcoWRjXpZsCQAAAlE"]
[Thu Nov 20 19:48:55.422458 2025] [:error] [pid 40415:tid 40430] [client 20.243.53.228:58533] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "aR8AJ6hjIyLSv09svwO2pAAAAcw"]
[Thu Nov 20 19:48:57.308664 2025] [:error] [pid 40415:tid 40437] [client 20.243.53.228:58508] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhitrgp.php"] [unique_id "aR8AKahjIyLSv09svwO2qQAAAdM"]
[Thu Nov 20 19:48:58.496791 2025] [:error] [pid 40445:tid 40490] [client 20.243.53.228:58476] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhitrgp.php"] [unique_id "aR8AKlH-MuFcoWRjXpZsHgAAAk8"]
[Thu Nov 20 19:48:59.927623 2025] [:error] [pid 55342:tid 55378] [client 20.243.53.228:58473] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhitrgp.php"] [unique_id "aR8AK7g6x32Tvk7fIG_q5wAAAEY"]
[Thu Nov 20 19:49:01.464432 2025] [:error] [pid 55430:tid 55439] [client 20.243.53.228:58387] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhitrgp.php"] [unique_id "aR8ALfPZXaIMEU4pE7sLzAAAAMY"]
[Thu Nov 20 19:49:02.563085 2025] [:error] [pid 40508:tid 40531] [client 20.243.53.228:58412] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aR8ALqxXNVCMW_ksxPu_vgAAApU"]
[Thu Nov 20 19:49:06.197697 2025] [:error] [pid 40445:tid 40477] [client 20.243.53.228:58462] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aR8AMlH-MuFcoWRjXpZsRAAAAkI"]
[Thu Nov 20 19:49:07.571047 2025] [:error] [pid 55340:tid 55353] [client 20.243.53.228:58436] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aR8AM_OxD-NeMydTybCp3wAAAAg"]
[Thu Nov 20 19:49:09.116747 2025] [:error] [pid 40636:tid 40657] [client 20.243.53.228:58411] [client 20.243.53.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aR8ANQK8BWUoW3xq0HAYsAAAA5E"]
[Thu Nov 20 19:54:00.912561 2025] [:error] [pid 40508:tid 40526] [client 43.153.10.83:38586] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aR8BWKxXNVCMW_ksxPvBHgAAApA"]
[Fri Nov 21 01:11:49.312350 2025] [:error] [pid 13536:tid 13738] [client 66.249.64.110:43485] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/news/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.html"] [unique_id "aR9L1awnCU8z6PX3-ZmuagAAAIs"]
[Fri Nov 21 01:12:03.152476 2025] [:error] [pid 13506:tid 13693] [client 66.249.64.110:62342] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dabong/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A1%E0%B9%88%E0%B8%A1%E0%B8%B5%E0%B8%82%E0%B8%B1%E0%B9%89%E0%B8%99%E0%B8%95%E0%B9%88%E0%B9%8D%E0%B8%B2.html"] [unique_id "aR9L46TbGYpGB-467xZH4AAAABc"]
[Fri Nov 21 01:12:24.625497 2025] [:error] [pid 13522:tid 13712] [client 66.249.64.110:59072] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fishing/%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%82%E0%B8%9B%E0%B8%A3%20%E0%B8%9D%E0%B8%B2%E0%B8%81%201%20%E0%B8%9A%E0%B8%B2%E0%B8%97%20%E0%B8%A3%E0%B8%B1%E0%B8%9A%20100%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.html"] [unique_id "aR9L-KOM9BReD2C3mbLZWAAAAEw"]
[Fri Nov 21 04:45:32.834969 2025] [:error] [pid 51434:tid 51448] [client 43.157.95.131:52482] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aR997PU96liplEDkw_TVHQAAAQw"]
[Fri Nov 21 18:45:34.056755 2025] [:error] [pid 25431:tid 25506] [client 104.28.240.82:12646] [client 104.28.240.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.82, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aSBCzsklhXxmoIExII1y_QAAAJM"]
[Fri Nov 21 18:45:34.071618 2025] [proxy_fcgi:error] [pid 25431:tid 25506] [client 104.28.240.82:12646] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 18:48:34.798864 2025] [:error] [pid 25521:tid 25523] [client 121.229.185.160:33674] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSBDgvhXnBMilDddn3UfVQAAAMA"]
[Fri Nov 21 22:42:23.562402 2025] [:error] [pid 46939:tid 46961] [client 66.249.64.110:46264] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/video/Login%20%E0%B8%A7%E0%B8%B1%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%95%E0%B8%B0%E0%B8%81%E0%B8%B5%E0%B9%88%E0%B9%82%E0%B8%A1%E0%B8%87.html"] [unique_id "aSB6T-0OmVoxD4VZ_ZkO_gAAAVM"]
[Fri Nov 21 22:42:31.844274 2025] [:error] [pid 25431:tid 25504] [client 66.249.64.110:62961] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cash/Login%20%E0%B8%9A%E0%B8%AD%E0%B8%A5%2024.html"] [unique_id "aSB6V8klhXxmoIExII2zGQAAAJE"]
[Sat Nov 22 00:05:10.045093 2025] [:error] [pid 25429:tid 25448] [client 66.249.64.110:50221] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gambling/pg888th%20download.html"] [unique_id "aSCNtj4rZbRSr7vu-NMpQwAAAA8"]
[Sat Nov 22 00:05:14.390746 2025] [:error] [pid 39979:tid 39998] [client 66.249.64.110:59808] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/video/%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aSCNusBTn4w4bKlE6arNnwAAAZA"]
[Sat Nov 22 00:05:20.125092 2025] [:error] [pid 25429:tid 25451] [client 66.249.64.110:63723] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nohu/%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94888%20%20%E0%B8%97%E0%B8%B5%E0%B8%A1%E0%B8%94%E0%B8%B1%E0%B8%87.html"] [unique_id "aSCNwD4rZbRSr7vu-NMpTwAAABI"]
[Sat Nov 22 00:05:25.933389 2025] [:error] [pid 25429:tid 25438] [client 66.249.64.110:58611] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bonus/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.html"] [unique_id "aSCNxT4rZbRSr7vu-NMpVgAAAAU"]
[Sat Nov 22 00:05:30.994794 2025] [:error] [pid 46939:tid 46965] [client 66.249.64.110:58148] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dabong/Daftar%20%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B8%9F%E0%B8%A3%E0%B8%B5.html"] [unique_id "aSCNyu0OmVoxD4VZ_Zki8QAAAVc"]
[Sat Nov 22 00:05:37.079147 2025] [:error] [pid 25554:tid 25566] [client 66.249.64.110:53320] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app/Daftar%20168galaxy%20pg.html"] [unique_id "aSCN0R-NtB-9AzFZrk7hMQAAAQg"]
[Sat Nov 22 00:05:42.545002 2025] [:error] [pid 25429:tid 25456] [client 66.249.64.110:42362] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/games/Login%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B224.html"] [unique_id "aSCN1j4rZbRSr7vu-NMpcAAAABc"]
[Sat Nov 22 00:05:47.546201 2025] [:error] [pid 25554:tid 25559] [client 66.249.64.110:55814] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/games/%E0%B8%AA%E0%B8%A5%E0%B8%B2%E0%B8%81%E0%B8%81%E0%B8%B4%E0%B8%99%E0%B9%81%E0%B8%9A%E0%B9%88%E0%B8%87%20%E0%B8%84%E0%B8%B2%E0%B8%AA%E0%B8%B4%E0%B9%82%E0%B8%99%20%E0%B9%82%E0%B8%AD%E0%B9%80%E0%B8%84.html"] [unique_id "aSCN2x-NtB-9AzFZrk7hPQAAAQE"]
[Sat Nov 22 00:05:51.929888 2025] [:error] [pid 46939:tid 46950] [client 66.249.64.110:44218] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/betting/Slot%20%E0%B8%9B%E0%B8%B1%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%8B%E0%B8%B7%E0%B9%89%E0%B8%AD%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B8%AA%E0%B8%9B%E0%B8%B4%E0%B8%99%E0%B9%84%E0%B8%94%E0%B9%89.html"] [unique_id "aSCN3-0OmVoxD4VZ_ZkjBQAAAUg"]
[Sat Nov 22 00:06:56.667837 2025] [:error] [pid 39979:tid 39993] [client 66.249.64.110:54916] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gambling/Login%20%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%9F%E0%B8%A3%E0%B8%B5%E0%B9%84%E0%B8%94%E0%B9%89%E0%B9%80%E0%B8%87%E0%B8%B4%E0%B8%99%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.html"] [unique_id "aSCOIMBTn4w4bKlE6arODAAAAYs"]
[Sat Nov 22 00:07:07.753725 2025] [:error] [pid 25431:tid 25497] [client 66.249.64.110:61386] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ios/Daftar%20%E0%B8%97%E0%B8%B5%E0%B8%AA%E0%B8%81%E0%B8%AD%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aSCOK8klhXxmoIExII3HkQAAAIo"]
[Sat Nov 22 00:07:12.477960 2025] [:error] [pid 25521:tid 25531] [client 66.249.64.110:37630] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sitemap/Daftar%20%E0%B8%9C%E0%B8%A5%E0%B8%AA%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C.html"] [unique_id "aSCOMPhXnBMilDddn3WecwAAAMg"]
[Sat Nov 22 00:07:18.469107 2025] [:error] [pid 39979:tid 39996] [client 66.249.64.110:38868] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/games/Login%20%E0%B8%AA%E0%B8%A1%E0%B8%B1%E0%B8%84%E0%B8%A3%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aSCONsBTn4w4bKlE6arOMgAAAY4"]
[Sat Nov 22 00:07:22.757790 2025] [:error] [pid 25430:tid 25483] [client 66.249.64.110:44810] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/betting/Daftar%20%E0%B8%82%E0%B9%88%E0%B8%B2%E0%B8%A7%E0%B8%A7%E0%B8%87%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%9F%E0%B8%B8%E0%B8%95%E0%B8%9A%E0%B8%AD%E0%B8%A5.html"] [unique_id "aSCOOqpnWJcWt_4foXnCpgAAAFc"]
[Sat Nov 22 00:07:28.277431 2025] [:error] [pid 25430:tid 25471] [client 66.249.64.110:53020] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/news/Daftar%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%20%E0%B9%80%E0%B8%A7%E0%B8%A5%E0%B8%B2%E0%B9%81%E0%B8%95%E0%B8%81.html"] [unique_id "aSCOQKpnWJcWt_4foXnCqwAAAEs"]
[Sat Nov 22 00:07:33.900785 2025] [:error] [pid 25429:tid 25442] [client 66.249.64.110:58026] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bonus/slot%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95.html"] [unique_id "aSCORT4rZbRSr7vu-NMp6wAAAAk"]
[Sat Nov 22 00:07:46.491536 2025] [:error] [pid 25429:tid 25455] [client 66.249.64.110:41569] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fishing/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%20%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%20pg%20%E0%B9%84%E0%B8%A1%E0%B9%88%20%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94%20%E0%B8%9F%E0%B8%A3%E0%B8%B5%202022.html"] [unique_id "aSCOUj4rZbRSr7vu-NMp8QAAABY"]
[Sat Nov 22 01:21:47.779247 2025] [:error] [pid 9180:tid 9192] [client 159.65.177.126:55020] [client 159.65.177.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSCfq7rk9msixUFV2i-RcQAAAEo"]
[Sat Nov 22 01:31:11.902351 2025] [:error] [pid 49643:tid 49940] [client 182.44.9.147:56317] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSCh35wUojIRHhF_fj-QWgAAANQ"]
[Sat Nov 22 02:55:10.081311 2025] [proxy_fcgi:error] [pid 9180:tid 9193] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.201069 2025] [proxy_fcgi:error] [pid 9180:tid 9182] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.318187 2025] [proxy_fcgi:error] [pid 9180:tid 9190] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.435259 2025] [proxy_fcgi:error] [pid 9180:tid 9201] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.565189 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.707773 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.829374 2025] [proxy_fcgi:error] [pid 9180:tid 9206] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:10.946706 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:11.085789 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:11.203423 2025] [proxy_fcgi:error] [pid 9180:tid 9192] [client 74.176.50.101:40896] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:55:11.324655 2025] [:error] [pid 9180:tid 9204] [client 74.176.50.101:40896] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aSC1j7rk9msixUFV2i-7GwAAAFY"]
[Sat Nov 22 02:55:13.539977 2025] [:error] [pid 49642:tid 49892] [client 74.176.50.101:40911] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aSC1kYOXTPSuQfgUUtWqqgAAAIE"]
[Sat Nov 22 02:55:17.904593 2025] [:error] [pid 14291:tid 14300] [client 74.176.50.101:40926] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aSC1lUEjlvzqoJBTM9gaBAAAAUc"]
[Sat Nov 22 02:55:22.454748 2025] [:error] [pid 49641:tid 49828] [client 74.176.50.101:40936] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aSC1mlnhuiDak938N_bUigAAAAU"]
[Sat Nov 22 02:55:26.267134 2025] [:error] [pid 14291:tid 14313] [client 74.176.50.101:40930] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSC1nkEjlvzqoJBTM9gaDwAAAVQ"]
[Sat Nov 22 02:55:27.003001 2025] [:error] [pid 49642:tid 49897] [client 74.176.50.101:40834] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSC1n4OXTPSuQfgUUtWqswAAAIY"]
[Sat Nov 22 02:55:32.809238 2025] [:error] [pid 49641:tid 49833] [client 74.176.50.101:40870] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSC1pFnhuiDak938N_bUlQAAAAo"]
[Sat Nov 22 02:55:35.159718 2025] [:error] [pid 49643:tid 49934] [client 74.176.50.101:40940] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSC1p5wUojIRHhF_fj-ngwAAAM4"]
[Sat Nov 22 02:55:41.803967 2025] [:error] [pid 9180:tid 9203] [client 74.176.50.101:40847] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aSC1rbrk9msixUFV2i-7TgAAAFU"]
[Sat Nov 22 02:55:45.402080 2025] [:error] [pid 49643:tid 49940] [client 74.176.50.101:40935] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aSC1sZwUojIRHhF_fj-njgAAANQ"]
[Sat Nov 22 02:55:56.135455 2025] [:error] [pid 14291:tid 14309] [client 74.176.50.101:40881] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unwattled.php"] [unique_id "aSC1vEEjlvzqoJBTM9gaXQAAAVA"]
[Sat Nov 22 02:55:57.192288 2025] [:error] [pid 49642:tid 49892] [client 74.176.50.101:40844] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unwattled.php"] [unique_id "aSC1vYOXTPSuQfgUUtWq4AAAAIE"]
[Sat Nov 22 02:55:59.987011 2025] [:error] [pid 49643:tid 49927] [client 74.176.50.101:40845] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unwattled.php"] [unique_id "aSC1v5wUojIRHhF_fj-npQAAAMg"]
[Sat Nov 22 02:56:06.285366 2025] [:error] [pid 9180:tid 9205] [client 74.176.50.101:40897] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unwattled.php"] [unique_id "aSC1xrrk9msixUFV2i-7agAAAFc"]
[Sat Nov 22 02:56:07.195381 2025] [:error] [pid 9180:tid 9185] [client 74.176.50.101:40950] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aSC1x7rk9msixUFV2i-7awAAAEM"]
[Sat Nov 22 02:56:12.287052 2025] [proxy_fcgi:error] [pid 49642:tid 49914] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:12.415853 2025] [proxy_fcgi:error] [pid 49642:tid 49910] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:12.533222 2025] [proxy_fcgi:error] [pid 49642:tid 49899] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:12.655069 2025] [proxy_fcgi:error] [pid 49642:tid 49892] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:12.782439 2025] [proxy_fcgi:error] [pid 49642:tid 49893] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:12.899498 2025] [proxy_fcgi:error] [pid 49642:tid 49900] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:13.036886 2025] [proxy_fcgi:error] [pid 49642:tid 49902] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:13.154243 2025] [proxy_fcgi:error] [pid 49642:tid 49896] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:13.272435 2025] [proxy_fcgi:error] [pid 49642:tid 49907] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:13.391706 2025] [proxy_fcgi:error] [pid 49642:tid 49898] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:13.510186 2025] [proxy_fcgi:error] [pid 49642:tid 49908] [client 74.176.50.101:40840] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:56:13.629077 2025] [:error] [pid 49642:tid 49891] [client 74.176.50.101:40840] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpc2.php"] [unique_id "aSC1zYOXTPSuQfgUUtWq-gAAAIA"]
[Sat Nov 22 02:56:19.857977 2025] [:error] [pid 49643:tid 49932] [client 74.176.50.101:40878] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpc2.php"] [unique_id "aSC105wUojIRHhF_fj-nugAAAMw"]
[Sat Nov 22 02:56:24.800766 2025] [:error] [pid 49643:tid 49927] [client 74.176.50.101:40839] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpc2.php"] [unique_id "aSC12JwUojIRHhF_fj-nuwAAAMg"]
[Sat Nov 22 02:56:26.325916 2025] [:error] [pid 49642:tid 49905] [client 74.176.50.101:40918] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpc2.php"] [unique_id "aSC12oOXTPSuQfgUUtWrBQAAAI4"]
[Sat Nov 22 02:56:30.391169 2025] [:error] [pid 49643:tid 49924] [client 74.176.50.101:40925] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2co_ipn.php"] [unique_id "aSC13pwUojIRHhF_fj-nwgAAAMU"]
[Sat Nov 22 02:56:31.873221 2025] [:error] [pid 9180:tid 9191] [client 74.176.50.101:40857] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2co_ipn.php"] [unique_id "aSC137rk9msixUFV2i-7gwAAAEk"]
[Sat Nov 22 02:56:33.713037 2025] [:error] [pid 49641:tid 49834] [client 74.176.50.101:40874] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2co_ipn.php"] [unique_id "aSC14VnhuiDak938N_bUzAAAAAs"]
[Sat Nov 22 02:56:39.767206 2025] [:error] [pid 49642:tid 49897] [client 74.176.50.101:40920] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2co_ipn.php"] [unique_id "aSC154OXTPSuQfgUUtWrDgAAAIY"]
[Sat Nov 22 02:56:43.349431 2025] [:error] [pid 49643:tid 49938] [client 74.176.50.101:40912] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/speculative.php"] [unique_id "aSC165wUojIRHhF_fj-nzQAAANI"]
[Sat Nov 22 02:56:44.254991 2025] [:error] [pid 50057:tid 50071] [client 74.176.50.101:40938] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/speculative.php"] [unique_id "aSC17Fb9j9fTBoI0sRVomAAAAQw"]
[Sat Nov 22 02:56:45.624656 2025] [:error] [pid 9180:tid 9195] [client 74.176.50.101:40958] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/speculative.php"] [unique_id "aSC17brk9msixUFV2i-7lQAAAE0"]
[Sat Nov 22 02:56:47.412889 2025] [:error] [pid 14291:tid 14308] [client 74.176.50.101:40943] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/speculative.php"] [unique_id "aSC170EjlvzqoJBTM9gaigAAAU8"]
[Sat Nov 22 02:56:49.544341 2025] [:error] [pid 9180:tid 9198] [client 74.176.50.101:40903] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hans.php"] [unique_id "aSC18brk9msixUFV2i-7nAAAAFA"]
[Sat Nov 22 02:56:51.630510 2025] [:error] [pid 49641:tid 49842] [client 74.176.50.101:40932] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hans.php"] [unique_id "aSC181nhuiDak938N_bU3AAAABM"]
[Sat Nov 22 02:56:53.501087 2025] [:error] [pid 49642:tid 49897] [client 74.176.50.101:40955] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hans.php"] [unique_id "aSC19YOXTPSuQfgUUtWrHgAAAIY"]
[Sat Nov 22 02:56:55.149079 2025] [:error] [pid 9180:tid 9202] [client 74.176.50.101:40906] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hans.php"] [unique_id "aSC197rk9msixUFV2i-7pwAAAFQ"]
[Sat Nov 22 02:56:56.846198 2025] [:error] [pid 50057:tid 50070] [client 74.176.50.101:40946] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/krypton.php"] [unique_id "aSC1-Fb9j9fTBoI0sRVoqQAAAQs"]
[Sat Nov 22 02:57:00.366406 2025] [:error] [pid 49643:tid 49927] [client 74.176.50.101:40859] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/krypton.php"] [unique_id "aSC1_JwUojIRHhF_fj-n4QAAAMg"]
[Sat Nov 22 02:57:02.181737 2025] [:error] [pid 14291:tid 14308] [client 74.176.50.101:40866] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/krypton.php"] [unique_id "aSC1_kEjlvzqoJBTM9gakwAAAU8"]
[Sat Nov 22 02:57:06.336217 2025] [:error] [pid 14291:tid 14296] [client 74.176.50.101:40931] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/krypton.php"] [unique_id "aSC2AkEjlvzqoJBTM9gamgAAAUM"]
[Sat Nov 22 02:57:09.557436 2025] [:error] [pid 49642:tid 49899] [client 74.176.50.101:40947] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acholuria.php"] [unique_id "aSC2BYOXTPSuQfgUUtWrPAAAAIg"]
[Sat Nov 22 02:57:10.825113 2025] [:error] [pid 49643:tid 49934] [client 74.176.50.101:40869] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acholuria.php"] [unique_id "aSC2BpwUojIRHhF_fj-n7wAAAM4"]
[Sat Nov 22 02:57:13.705880 2025] [proxy_fcgi:error] [pid 14291:tid 14303] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:13.895499 2025] [proxy_fcgi:error] [pid 14291:tid 14311] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:14.012888 2025] [proxy_fcgi:error] [pid 14291:tid 14295] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:14.146816 2025] [proxy_fcgi:error] [pid 14291:tid 14316] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:14.794253 2025] [proxy_fcgi:error] [pid 14291:tid 14307] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:14.919716 2025] [proxy_fcgi:error] [pid 14291:tid 14310] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:15.038722 2025] [proxy_fcgi:error] [pid 14291:tid 14315] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:15.305729 2025] [proxy_fcgi:error] [pid 14291:tid 14296] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:15.423262 2025] [proxy_fcgi:error] [pid 14291:tid 14293] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:15.566428 2025] [proxy_fcgi:error] [pid 14291:tid 14306] [client 74.176.50.101:40945] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:57:15.680708 2025] [:error] [pid 14291:tid 14299] [client 74.176.50.101:40945] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aSC2C0EjlvzqoJBTM9garwAAAUY"]
[Sat Nov 22 02:57:20.318614 2025] [:error] [pid 50057:tid 50059] [client 74.176.50.101:40919] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aSC2EFb9j9fTBoI0sRVovgAAAQA"]
[Sat Nov 22 02:57:26.209019 2025] [:error] [pid 49643:tid 49933] [client 74.176.50.101:40953] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aSC2FpwUojIRHhF_fj-n-wAAAM0"]
[Sat Nov 22 02:57:27.589693 2025] [:error] [pid 49642:tid 49905] [client 74.176.50.101:40904] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aSC2F4OXTPSuQfgUUtWrTQAAAI4"]
[Sat Nov 22 02:57:30.484178 2025] [:error] [pid 50057:tid 50074] [client 74.176.50.101:40915] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aSC2Glb9j9fTBoI0sRVoyAAAAQ8"]
[Sat Nov 22 02:57:32.205811 2025] [:error] [pid 14291:tid 14309] [client 74.176.50.101:40890] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aSC2HEEjlvzqoJBTM9gawgAAAVA"]
[Sat Nov 22 02:57:34.398668 2025] [:error] [pid 50057:tid 50073] [client 74.176.50.101:40937] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aSC2Hlb9j9fTBoI0sRVozAAAAQ4"]
[Sat Nov 22 02:57:35.917722 2025] [:error] [pid 50057:tid 50063] [client 74.176.50.101:40851] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aSC2H1b9j9fTBoI0sRVozwAAAQQ"]
[Sat Nov 22 02:57:38.942257 2025] [:error] [pid 49643:tid 49933] [client 74.176.50.101:40949] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aSC2IpwUojIRHhF_fj-oCAAAAM0"]
[Sat Nov 22 02:57:41.189844 2025] [:error] [pid 50057:tid 50074] [client 74.176.50.101:40941] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aSC2JVb9j9fTBoI0sRVo1gAAAQ8"]
[Sat Nov 22 02:57:57.334181 2025] [:error] [pid 49641:tid 49832] [client 74.176.50.101:40842] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "aSC2NVnhuiDak938N_bVFAAAAAk"]
[Sat Nov 22 02:58:00.744783 2025] [:error] [pid 49642:tid 49896] [client 74.176.50.101:40855] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "aSC2OIOXTPSuQfgUUtWrYwAAAIU"]
[Sat Nov 22 02:58:02.561111 2025] [:error] [pid 49641:tid 49841] [client 74.176.50.101:40773] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "aSC2OlnhuiDak938N_bVHgAAABI"]
[Sat Nov 22 02:58:03.673421 2025] [:error] [pid 49642:tid 49905] [client 74.176.50.101:40959] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "aSC2O4OXTPSuQfgUUtWrZgAAAI4"]
[Sat Nov 22 02:58:11.328019 2025] [:error] [pid 49641:tid 49823] [client 74.176.50.101:40905] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boyfile.php"] [unique_id "aSC2Q1nhuiDak938N_bVKgAAAAA"]
[Sat Nov 22 02:58:13.370279 2025] [:error] [pid 9180:tid 9186] [client 74.176.50.101:40856] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boyfile.php"] [unique_id "aSC2Rbrk9msixUFV2i-8AAAAAEQ"]
[Sat Nov 22 02:58:14.929646 2025] [:error] [pid 14291:tid 14294] [client 74.176.50.101:40888] [client 74.176.50.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boyfile.php"] [unique_id "aSC2RkEjlvzqoJBTM9ga8wAAAUE"]
[Sat Nov 22 02:58:18.234665 2025] [proxy_fcgi:error] [pid 9180:tid 9196] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:18.354609 2025] [proxy_fcgi:error] [pid 9180:tid 9197] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:18.502285 2025] [proxy_fcgi:error] [pid 9180:tid 9199] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:18.631038 2025] [proxy_fcgi:error] [pid 9180:tid 9190] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:18.765034 2025] [proxy_fcgi:error] [pid 9180:tid 9194] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:18.909882 2025] [proxy_fcgi:error] [pid 9180:tid 9205] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:19.044608 2025] [proxy_fcgi:error] [pid 9180:tid 9182] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:19.164146 2025] [proxy_fcgi:error] [pid 9180:tid 9186] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:19.282335 2025] [proxy_fcgi:error] [pid 9180:tid 9187] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:19.411002 2025] [proxy_fcgi:error] [pid 9180:tid 9203] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 02:58:19.538349 2025] [proxy_fcgi:error] [pid 9180:tid 9189] [client 74.176.50.101:40876] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 04:25:49.627483 2025] [:error] [pid 53478:tid 53517] [client 159.65.177.126:59382] [client 159.65.177.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSDKzQhUYdXBbQswAdTgBAAAAEg"]
[Sat Nov 22 07:39:36.683260 2025] [:error] [pid 9547:tid 9567] [client 182.44.12.37:53056] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSD4ONClOR5qk7DoMeG1egAAAU4"]
[Sat Nov 22 09:23:53.128644 2025] [:error] [pid 25856:tid 25878] [client 159.203.89.146:60964] [client 159.203.89.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSEQqRsTP0wy94zKUvEeGQAAARQ"]
[Sat Nov 22 12:27:56.767062 2025] [:error] [pid 53566:tid 53571] [client 159.203.89.146:54948] [client 159.203.89.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSE7zMbSHDBkRbwMbd7QVwAAAMM"]
[Sat Nov 22 13:55:33.882725 2025] [:error] [pid 53566:tid 53577] [client 182.42.104.32:33870] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSFQVcbSHDBkRbwMbd7ldAAAAMk"]
[Sat Nov 22 15:14:05.605343 2025] [:error] [pid 25856:tid 25878] [client 85.131.192.23:46384] [client 85.131.192.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.192.23, incrementing brute counter"] [hostname "www.measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aSFivRsTP0wy94zKUvGAWgAAARQ"], referer: https://www.google.com
[Sat Nov 22 15:14:05.610721 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 85.131.192.23:46384] AH01071: Got error 'Primary script unknown', referer: https://www.google.com
[Sat Nov 22 15:55:55.542135 2025] [:error] [pid 53477:tid 53495] [client 139.135.241.64:53652] [client 139.135.241.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.241.64, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aSFsi37Lu30Ku9O40aKM6gAAAA4"]
[Sat Nov 22 15:55:55.549165 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 139.135.241.64:53652] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 18:46:20.929164 2025] [:error] [pid 53478:tid 53523] [client 66.249.64.110:59138] [client 66.249.64.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dabong/demo%20pg%20soft%20prosperity%20fortune%20tree.html"] [unique_id "aSGUfAhUYdXBbQswAdT4IAAAAE4"]
[Sat Nov 22 20:17:07.429498 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:07.775396 2025] [proxy_fcgi:error] [pid 25856:tid 25859] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:08.117424 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:08.468095 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:09.909724 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:10.262269 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:10.676104 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:11.020384 2025] [proxy_fcgi:error] [pid 25856:tid 25874] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:12.141166 2025] [proxy_fcgi:error] [pid 25856:tid 25881] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:12.497856 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:14.182116 2025] [proxy_fcgi:error] [pid 25856:tid 25870] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:14.618607 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:14.979928 2025] [proxy_fcgi:error] [pid 25856:tid 25868] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:15.348702 2025] [proxy_fcgi:error] [pid 25856:tid 25866] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:15.727812 2025] [proxy_fcgi:error] [pid 25856:tid 25861] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:16.108383 2025] [proxy_fcgi:error] [pid 25856:tid 25872] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:16.472793 2025] [proxy_fcgi:error] [pid 25856:tid 25878] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:17.267662 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:17.650685 2025] [proxy_fcgi:error] [pid 25856:tid 25879] [client 216.73.163.154:30633] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:22.859379 2025] [:error] [pid 25856:tid 25870] [client 216.73.163.154:30633] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSGp0hsTP0wy94zKUvHZuAAAAQw"]
[Sat Nov 22 20:17:24.719257 2025] [:error] [pid 44259:tid 44278] [client 216.73.163.138:30401] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSGp1HXe1xL-_YOdRmSj4AAAAZA"]
[Sat Nov 22 20:17:27.329865 2025] [proxy_fcgi:error] [pid 53478:tid 53520] [client 45.146.54.134:42581] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:28.497957 2025] [:error] [pid 53478:tid 53526] [client 45.146.54.134:42581] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aSGp2AhUYdXBbQswAdQTyAAAAFE"]
[Sat Nov 22 20:17:30.481039 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 216.73.163.133:44047] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:30.863776 2025] [:error] [pid 25856:tid 25874] [client 216.73.163.133:44047] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSGp2hsTP0wy94zKUvHZ0wAAARA"]
[Sat Nov 22 20:17:31.948452 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 216.73.163.158:26335] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:33.755613 2025] [:error] [pid 53479:tid 53543] [client 216.73.163.158:26335] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSGp3W6cicFF3Aas-oSx9gAAAIc"]
[Sat Nov 22 20:17:34.833036 2025] [:error] [pid 53477:tid 53489] [client 216.73.163.145:57449] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSGp3n7Lu30Ku9O40aLYTgAAAAg"]
[Sat Nov 22 20:17:35.612432 2025] [:error] [pid 9547:tid 9562] [client 216.73.163.130:46289] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSGp39ClOR5qk7DoMeHbUAAAAUk"]
[Sat Nov 22 20:17:36.393049 2025] [:error] [pid 44259:tid 44274] [client 216.73.163.147:24217] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSGp4HXe1xL-_YOdRmSkDQAAAYw"]
[Sat Nov 22 20:17:37.171701 2025] [:error] [pid 44259:tid 44262] [client 216.73.163.146:33651] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSGp4XXe1xL-_YOdRmSkEAAAAYA"]
[Sat Nov 22 20:17:37.861990 2025] [:error] [pid 53477:tid 53487] [client 45.131.194.123:62791] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSGp4X7Lu30Ku9O40aLYUwAAAAY"]
[Sat Nov 22 20:17:38.948415 2025] [:error] [pid 53477:tid 53491] [client 216.73.163.130:42917] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSGp4n7Lu30Ku9O40aLYWwAAAAo"]
[Sat Nov 22 20:17:39.719314 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 45.146.54.131:52233] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:40.457876 2025] [:error] [pid 53479:tid 53556] [client 45.146.54.131:52233] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aSGp5G6cicFF3Aas-oSx_wAAAJQ"]
[Sat Nov 22 20:17:41.177336 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 45.146.54.134:46159] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:41.899560 2025] [:error] [pid 9547:tid 9564] [client 45.146.54.134:46159] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSGp5dClOR5qk7DoMeHbWgAAAUs"]
[Sat Nov 22 20:17:44.042354 2025] [:error] [pid 53477:tid 53495] [client 45.146.54.134:61733] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSGp6H7Lu30Ku9O40aLYZAAAAA4"]
[Sat Nov 22 20:17:45.721287 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 45.146.54.138:20387] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:46.141783 2025] [:error] [pid 53477:tid 53489] [client 45.146.54.138:20387] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSGp6n7Lu30Ku9O40aLYaAAAAAg"]
[Sat Nov 22 20:17:47.863951 2025] [proxy_fcgi:error] [pid 53478:tid 53516] [client 45.146.54.133:20671] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:49.007982 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 45.146.54.133:20671] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:50.168367 2025] [:error] [pid 53478:tid 53524] [client 45.146.54.133:20671] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSGp7ghUYdXBbQswAdQT8gAAAE8"]
[Sat Nov 22 20:17:50.885608 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 45.146.54.132:53713] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:51.223374 2025] [:error] [pid 9547:tid 9573] [client 45.146.54.132:53713] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSGp79ClOR5qk7DoMeHbfAAAAVQ"]
[Sat Nov 22 20:17:52.039571 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 216.73.163.155:41669] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:52.755518 2025] [:error] [pid 53479:tid 53559] [client 216.73.163.155:41669] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSGp8G6cicFF3Aas-oSyHgAAAJc"]
[Sat Nov 22 20:17:53.896575 2025] [:error] [pid 44259:tid 44262] [client 216.73.163.156:34913] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSGp8XXe1xL-_YOdRmSkTQAAAYA"]
[Sat Nov 22 20:17:54.934655 2025] [proxy_fcgi:error] [pid 53479:tid 53545] [client 45.146.54.137:38017] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:55.316075 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 45.146.54.137:38017] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:17:56.030003 2025] [:error] [pid 53479:tid 53546] [client 45.146.54.137:38017] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSGp9G6cicFF3Aas-oSyKQAAAIo"]
[Sat Nov 22 20:17:57.154387 2025] [:error] [pid 53479:tid 53538] [client 216.73.163.160:39595] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSGp9W6cicFF3Aas-oSyKwAAAII"]
[Sat Nov 22 20:17:58.196143 2025] [:error] [pid 53478:tid 53517] [client 216.73.163.147:29749] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSGp9ghUYdXBbQswAdQUAQAAAEg"]
[Sat Nov 22 20:17:58.956389 2025] [:error] [pid 53566:tid 53579] [client 216.73.163.117:26247] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSGp9sbSHDBkRbwMbd5ImAAAAMs"]
[Sat Nov 22 20:17:59.645243 2025] [:error] [pid 53479:tid 53558] [client 216.73.163.148:26879] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSGp926cicFF3Aas-oSyMAAAAJY"]
[Sat Nov 22 20:18:01.152100 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 216.73.163.147:39091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:01.498734 2025] [:error] [pid 53478:tid 53510] [client 216.73.163.147:39091] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aSGp-QhUYdXBbQswAdQUCQAAAEE"]
[Sat Nov 22 20:18:02.268385 2025] [:error] [pid 53566:tid 53584] [client 216.73.163.129:23493] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aSGp-sbSHDBkRbwMbd5InQAAANA"]
[Sat Nov 22 20:18:02.949823 2025] [:error] [pid 9547:tid 9567] [client 216.73.163.159:33917] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSGp-tClOR5qk7DoMeHbpAAAAU4"]
[Sat Nov 22 20:18:04.340475 2025] [proxy_fcgi:error] [pid 44259:tid 44284] [client 216.73.163.159:39833] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:05.114468 2025] [proxy_fcgi:error] [pid 44259:tid 44262] [client 216.73.163.159:39833] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:06.538042 2025] [:error] [pid 44259:tid 44272] [client 216.73.163.159:39833] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aSGp_nXe1xL-_YOdRmSkbgAAAYo"]
[Sat Nov 22 20:18:08.461120 2025] [:error] [pid 9547:tid 9565] [client 216.73.163.146:40743] [client 216.73.163.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.146, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSGqANClOR5qk7DoMeHbuwAAAUw"]
[Sat Nov 22 20:18:08.887229 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 216.73.163.146:40743] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:10.788322 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 216.73.163.146:40743] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:11.154248 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 216.73.163.146:40743] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:13.029598 2025] [:error] [pid 9547:tid 9562] [client 216.73.163.146:40743] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSGqBdClOR5qk7DoMeHbzwAAAUk"]
[Sat Nov 22 20:18:14.154248 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 216.73.163.119:57767] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:14.492744 2025] [:error] [pid 53479:tid 53552] [client 216.73.163.119:57767] [client 216.73.163.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.119, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSGqBm6cicFF3Aas-oSyRAAAAJA"]
[Sat Nov 22 20:18:15.208153 2025] [:error] [pid 53479:tid 53560] [client 216.73.163.119:57767] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aSGqB26cicFF3Aas-oSySAAAAJg"]
[Sat Nov 22 20:18:17.415726 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 45.146.54.136:56941] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:19.324654 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 45.146.54.136:56941] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:20.077641 2025] [:error] [pid 53479:tid 53555] [client 45.146.54.136:56941] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSGqDG6cicFF3Aas-oSyWgAAAJM"]
[Sat Nov 22 20:18:20.761886 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 216.73.163.137:29071] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:21.882288 2025] [proxy_fcgi:error] [pid 53477:tid 53489] [client 216.73.163.137:29071] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:22.573852 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 216.73.163.137:29071] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:23.378282 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 216.73.163.137:29071] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:23.721096 2025] [:error] [pid 53477:tid 53498] [client 216.73.163.137:29071] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSGqD37Lu30Ku9O40aLYvwAAABE"]
[Sat Nov 22 20:18:24.472744 2025] [proxy_fcgi:error] [pid 53477:tid 53482] [client 216.73.163.121:45991] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:24.839387 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 216.73.163.121:45991] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:25.819129 2025] [:error] [pid 53477:tid 53494] [client 216.73.163.121:45991] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSGqEX7Lu30Ku9O40aLYxwAAAA0"]
[Sat Nov 22 20:18:26.981109 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 216.73.163.136:33399] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:27.729837 2025] [:error] [pid 53477:tid 53504] [client 216.73.163.136:33399] [client 216.73.163.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.136, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSGqE37Lu30Ku9O40aLYzQAAABc"]
[Sat Nov 22 20:18:28.092618 2025] [:error] [pid 53477:tid 53486] [client 216.73.163.136:33399] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSGqFH7Lu30Ku9O40aLYzgAAAAU"]
[Sat Nov 22 20:18:32.568082 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 45.146.54.137:61421] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:34.032376 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 45.146.54.137:61421] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:34.787360 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 45.146.54.137:61421] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:35.198947 2025] [:error] [pid 53477:tid 53493] [client 45.146.54.137:61421] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSGqG37Lu30Ku9O40aLY7QAAAAw"]
[Sat Nov 22 20:18:36.082509 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 45.146.54.137:63855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:38.261120 2025] [:error] [pid 53477:tid 53489] [client 45.146.54.137:63855] [client 45.146.54.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.137, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSGqHn7Lu30Ku9O40aLY8gAAAAg"]
[Sat Nov 22 20:18:38.651826 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 45.146.54.137:63855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:39.017096 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 45.146.54.137:63855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:39.367855 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 45.146.54.137:63855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:39.714094 2025] [:error] [pid 53477:tid 53499] [client 45.146.54.137:63855] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSGqH37Lu30Ku9O40aLY9wAAABI"]
[Sat Nov 22 20:18:40.470047 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 216.73.163.160:47965] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:40.814883 2025] [:error] [pid 53479:tid 53559] [client 216.73.163.160:47965] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aSGqIG6cicFF3Aas-oSyhwAAAJc"]
[Sat Nov 22 20:18:41.848922 2025] [proxy_fcgi:error] [pid 9547:tid 9571] [client 216.73.163.137:24649] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:42.189985 2025] [:error] [pid 9547:tid 9566] [client 216.73.163.137:24649] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSGqItClOR5qk7DoMeHcRQAAAU0"]
[Sat Nov 22 20:18:43.751774 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 216.73.163.133:50119] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:44.147652 2025] [:error] [pid 53479:tid 53545] [client 216.73.163.133:50119] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSGqJG6cicFF3Aas-oSyjQAAAIk"]
[Sat Nov 22 20:18:44.884187 2025] [:error] [pid 53566:tid 53575] [client 216.73.163.155:28287] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSGqJMbSHDBkRbwMbd5I6gAAAMc"]
[Sat Nov 22 20:18:45.573016 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 216.73.163.141:48969] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:46.982233 2025] [proxy_fcgi:error] [pid 53479:tid 53555] [client 216.73.163.141:48969] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:48.470985 2025] [:error] [pid 53479:tid 53539] [client 216.73.163.141:48969] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSGqKG6cicFF3Aas-oSymAAAAIM"]
[Sat Nov 22 20:18:50.670968 2025] [:error] [pid 25856:tid 25867] [client 45.131.194.123:55601] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSGqKhsTP0wy94zKUvHaUQAAAQk"]
[Sat Nov 22 20:18:51.453610 2025] [proxy_fcgi:error] [pid 25856:tid 25877] [client 216.73.163.139:64009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:52.565757 2025] [:error] [pid 25856:tid 25875] [client 216.73.163.139:64009] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aSGqLBsTP0wy94zKUvHaWAAAARE"]
[Sat Nov 22 20:18:53.294683 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 216.73.163.129:53235] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:54.456499 2025] [proxy_fcgi:error] [pid 53477:tid 53497] [client 216.73.163.129:53235] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:54.794658 2025] [:error] [pid 53477:tid 53491] [client 216.73.163.129:53235] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSGqLn7Lu30Ku9O40aLZDwAAAAo"]
[Sat Nov 22 20:18:55.574487 2025] [proxy_fcgi:error] [pid 53479:tid 53554] [client 216.73.163.121:48155] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:56.347743 2025] [:error] [pid 53479:tid 53550] [client 216.73.163.121:48155] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aSGqMG6cicFF3Aas-oSyoQAAAI4"]
[Sat Nov 22 20:18:57.090856 2025] [proxy_fcgi:error] [pid 53566:tid 53572] [client 216.73.163.138:42245] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:18:59.297663 2025] [:error] [pid 53566:tid 53584] [client 216.73.163.138:42245] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSGqM8bSHDBkRbwMbd5JIQAAANA"]
[Sat Nov 22 20:19:00.324832 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 216.73.163.145:40281] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:01.136854 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 216.73.163.145:40281] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:01.481338 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 216.73.163.145:40281] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:02.259047 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 216.73.163.145:40281] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:02.604806 2025] [:error] [pid 53477:tid 53489] [client 216.73.163.145:40281] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSGqNn7Lu30Ku9O40aLZJgAAAAg"]
[Sat Nov 22 20:19:03.302428 2025] [:error] [pid 53478:tid 53511] [client 216.73.163.146:49495] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aSGqNwhUYdXBbQswAdQUgAAAAEI"]
[Sat Nov 22 20:19:04.000663 2025] [:error] [pid 53478:tid 53516] [client 216.73.163.145:24577] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSGqNwhUYdXBbQswAdQUgQAAAEc"]
[Sat Nov 22 20:19:04.807018 2025] [:error] [pid 53478:tid 53530] [client 45.146.54.132:63611] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSGqOAhUYdXBbQswAdQUggAAAFU"]
[Sat Nov 22 20:19:05.503946 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 216.73.163.133:31113] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:05.893524 2025] [:error] [pid 25856:tid 25858] [client 216.73.163.133:31113] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSGqORsTP0wy94zKUvHacQAAAQA"]
[Sat Nov 22 20:19:06.575229 2025] [:error] [pid 9547:tid 9577] [client 216.73.163.121:51913] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSGqOtClOR5qk7DoMeHcaQAAAVg"]
[Sat Nov 22 20:19:08.392877 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 216.73.163.134:41551] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:09.085361 2025] [:error] [pid 53477:tid 53503] [client 216.73.163.134:41551] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSGqPX7Lu30Ku9O40aLZPAAAABY"]
[Sat Nov 22 20:19:09.818599 2025] [:error] [pid 44259:tid 44282] [client 216.73.163.153:40243] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSGqPXXe1xL-_YOdRmSlCAAAAZQ"]
[Sat Nov 22 20:19:10.531334 2025] [:error] [pid 25856:tid 25861] [client 45.146.54.136:20769] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSGqPhsTP0wy94zKUvHahQAAAQM"]
[Sat Nov 22 20:19:11.215248 2025] [:error] [pid 53479:tid 53545] [client 216.73.163.150:55675] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSGqP26cicFF3Aas-oSywAAAAIk"]
[Sat Nov 22 20:19:12.247047 2025] [:error] [pid 53477:tid 53504] [client 45.146.54.136:20897] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSGqQH7Lu30Ku9O40aLZSwAAABc"]
[Sat Nov 22 20:19:13.632845 2025] [:error] [pid 53566:tid 53575] [client 216.73.163.139:46015] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSGqQcbSHDBkRbwMbd5JQAAAAMc"]
[Sat Nov 22 20:19:14.363832 2025] [proxy_fcgi:error] [pid 53479:tid 53556] [client 216.73.163.134:38211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:15.429564 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 216.73.163.134:38211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:16.382936 2025] [:error] [pid 53479:tid 53550] [client 216.73.163.134:38211] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSGqRG6cicFF3Aas-oSy0AAAAI4"]
[Sat Nov 22 20:19:17.426637 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 216.73.163.129:63289] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:17.808268 2025] [proxy_fcgi:error] [pid 25856:tid 25865] [client 216.73.163.129:63289] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:19.308839 2025] [proxy_fcgi:error] [pid 25856:tid 25871] [client 216.73.163.129:63289] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:19.672533 2025] [:error] [pid 25856:tid 25881] [client 216.73.163.129:63289] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aSGqRxsTP0wy94zKUvHanwAAARc"]
[Sat Nov 22 20:19:20.501307 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 216.73.163.138:63955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:22.729762 2025] [:error] [pid 53477:tid 53498] [client 216.73.163.138:63955] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSGqSn7Lu30Ku9O40aLZdgAAABE"]
[Sat Nov 22 20:19:23.468994 2025] [:error] [pid 53478:tid 53511] [client 216.73.163.118:26771] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSGqSwhUYdXBbQswAdQUoAAAAEI"]
[Sat Nov 22 20:19:25.823828 2025] [:error] [pid 53479:tid 53547] [client 216.73.163.149:49685] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSGqTW6cicFF3Aas-oSy3AAAAIs"]
[Sat Nov 22 20:19:27.941485 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 216.73.163.121:55571] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:28.291374 2025] [proxy_fcgi:error] [pid 53566:tid 53578] [client 216.73.163.121:55571] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:28.666606 2025] [proxy_fcgi:error] [pid 53566:tid 53583] [client 216.73.163.121:55571] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:29.022771 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 216.73.163.121:55571] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:30.887273 2025] [:error] [pid 53566:tid 53585] [client 216.73.163.121:55571] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGqUsbSHDBkRbwMbd5JeQAAANE"]
[Sat Nov 22 20:19:31.649308 2025] [:error] [pid 53477:tid 53489] [client 45.146.54.131:26899] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSGqU37Lu30Ku9O40aLZrAAAAAg"]
[Sat Nov 22 20:19:32.430345 2025] [:error] [pid 53478:tid 53513] [client 216.73.163.139:59375] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSGqVAhUYdXBbQswAdQUsgAAAEQ"]
[Sat Nov 22 20:19:33.172380 2025] [:error] [pid 53566:tid 53570] [client 45.146.54.134:53965] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSGqVcbSHDBkRbwMbd5JfAAAAMI"]
[Sat Nov 22 20:19:33.887682 2025] [:error] [pid 53479:tid 53550] [client 216.73.163.122:31987] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSGqVW6cicFF3Aas-oSy8AAAAI4"]
[Sat Nov 22 20:19:34.687304 2025] [:error] [pid 53566:tid 53575] [client 216.73.163.146:42635] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSGqVsbSHDBkRbwMbd5JgwAAAMc"]
[Sat Nov 22 20:19:35.802842 2025] [:error] [pid 9547:tid 9571] [client 216.73.163.142:25677] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSGqV9ClOR5qk7DoMeHcugAAAVI"]
[Sat Nov 22 20:19:36.510998 2025] [:error] [pid 44259:tid 44264] [client 45.146.54.134:44373] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSGqWHXe1xL-_YOdRmSlRQAAAYI"]
[Sat Nov 22 20:19:37.306286 2025] [:error] [pid 44259:tid 44270] [client 216.73.163.154:38401] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSGqWXXe1xL-_YOdRmSlRgAAAYg"]
[Sat Nov 22 20:19:38.067893 2025] [:error] [pid 25856:tid 25862] [client 216.73.163.131:51301] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSGqWhsTP0wy94zKUvHasAAAAQQ"]
[Sat Nov 22 20:19:39.429377 2025] [:error] [pid 44259:tid 44279] [client 216.73.163.142:29341] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSGqW3Xe1xL-_YOdRmSlWAAAAZE"]
[Sat Nov 22 20:19:40.535631 2025] [:error] [pid 53479:tid 53549] [client 216.73.163.117:54269] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSGqXG6cicFF3Aas-oSzAQAAAI0"]
[Sat Nov 22 20:19:41.220003 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 216.73.163.137:65531] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:42.002048 2025] [:error] [pid 53478:tid 53527] [client 216.73.163.137:65531] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSGqXghUYdXBbQswAdQUxQAAAFI"]
[Sat Nov 22 20:19:43.476645 2025] [:error] [pid 9547:tid 9564] [client 216.73.163.134:27273] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSGqX9ClOR5qk7DoMeHczgAAAUs"]
[Sat Nov 22 20:19:44.206611 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 216.73.163.147:50557] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:44.932566 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 216.73.163.147:50557] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:45.307516 2025] [:error] [pid 53477:tid 53486] [client 216.73.163.147:50557] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSGqYX7Lu30Ku9O40aLZ4AAAAAU"]
[Sat Nov 22 20:19:46.374063 2025] [proxy_fcgi:error] [pid 53477:tid 53499] [client 216.73.163.131:35841] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:46.717965 2025] [proxy_fcgi:error] [pid 53477:tid 53483] [client 216.73.163.131:35841] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:47.100675 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 216.73.163.131:35841] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:47.463767 2025] [:error] [pid 53477:tid 53482] [client 216.73.163.131:35841] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSGqY37Lu30Ku9O40aLZ5QAAAAE"]
[Sat Nov 22 20:19:48.171080 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 216.73.163.117:46799] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:48.512632 2025] [:error] [pid 9547:tid 9558] [client 216.73.163.117:46799] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSGqZNClOR5qk7DoMeHc1QAAAUU"]
[Sat Nov 22 20:19:50.000648 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:50.377036 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:50.723032 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:51.475682 2025] [proxy_fcgi:error] [pid 9547:tid 9561] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:53.062855 2025] [proxy_fcgi:error] [pid 9547:tid 9566] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:53.408126 2025] [proxy_fcgi:error] [pid 9547:tid 9557] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:54.233441 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:54.632174 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:55.722066 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 216.73.163.117:48705] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:56.061521 2025] [:error] [pid 9547:tid 9556] [client 216.73.163.117:48705] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSGqbNClOR5qk7DoMeHdAAAAAUM"]
[Sat Nov 22 20:19:56.817330 2025] [:error] [pid 25856:tid 25863] [client 216.73.163.151:25855] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSGqbBsTP0wy94zKUvHa2gAAAQU"]
[Sat Nov 22 20:19:57.600767 2025] [:error] [pid 53566:tid 53575] [client 216.73.163.142:37429] [client 216.73.163.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.142, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aSGqbcbSHDBkRbwMbd5JzAAAAMc"]
[Sat Nov 22 20:19:57.605202 2025] [proxy_fcgi:error] [pid 53566:tid 53575] [client 216.73.163.142:37429] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:57.947068 2025] [proxy_fcgi:error] [pid 53566:tid 53584] [client 216.73.163.142:37429] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:19:58.992653 2025] [:error] [pid 53566:tid 53577] [client 216.73.163.142:37429] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSGqbsbSHDBkRbwMbd5J0AAAAMk"]
[Sat Nov 22 20:20:01.151750 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 216.73.163.120:22735] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:01.493437 2025] [:error] [pid 53477:tid 53494] [client 216.73.163.120:22735] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSGqcX7Lu30Ku9O40aLaBAAAAA0"]
[Sat Nov 22 20:20:02.175333 2025] [:error] [pid 44259:tid 44283] [client 216.73.163.160:23557] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSGqcnXe1xL-_YOdRmSlwAAAAZU"]
[Sat Nov 22 20:20:04.276924 2025] [:error] [pid 44259:tid 44278] [client 216.73.163.139:64041] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSGqdHXe1xL-_YOdRmSlzwAAAZA"]
[Sat Nov 22 20:20:04.974304 2025] [:error] [pid 9547:tid 9574] [client 45.146.54.132:42541] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aSGqdNClOR5qk7DoMeHdHQAAAVU"]
[Sat Nov 22 20:20:06.814925 2025] [proxy_fcgi:error] [pid 44259:tid 44270] [client 216.73.163.138:47739] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:07.549499 2025] [:error] [pid 44259:tid 44271] [client 216.73.163.138:47739] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSGqd3Xe1xL-_YOdRmSl6QAAAYk"]
[Sat Nov 22 20:20:09.128693 2025] [proxy_fcgi:error] [pid 53477:tid 53490] [client 216.73.163.153:38797] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:09.882759 2025] [:error] [pid 53477:tid 53485] [client 216.73.163.153:38797] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "aSGqeX7Lu30Ku9O40aLaGgAAAAQ"]
[Sat Nov 22 20:20:10.577496 2025] [:error] [pid 44259:tid 44278] [client 216.73.163.145:36281] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugins.php"] [unique_id "aSGqenXe1xL-_YOdRmSl8wAAAZA"]
[Sat Nov 22 20:20:11.616447 2025] [proxy_fcgi:error] [pid 9547:tid 9567] [client 216.73.163.144:40813] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:11.996107 2025] [:error] [pid 9547:tid 9577] [client 216.73.163.144:40813] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSGqe9ClOR5qk7DoMeHdPAAAAVg"]
[Sat Nov 22 20:20:12.701274 2025] [:error] [pid 53478:tid 53517] [client 216.73.163.149:59077] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSGqfAhUYdXBbQswAdQVCAAAAEg"]
[Sat Nov 22 20:20:14.196351 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 45.146.54.133:52079] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:14.541521 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 45.146.54.133:52079] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:15.262362 2025] [proxy_fcgi:error] [pid 9547:tid 9577] [client 45.146.54.133:52079] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:15.985701 2025] [:error] [pid 9547:tid 9574] [client 45.146.54.133:52079] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aSGqf9ClOR5qk7DoMeHdVwAAAVU"]
[Sat Nov 22 20:20:16.693219 2025] [:error] [pid 9547:tid 9576] [client 216.73.163.118:27865] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSGqgNClOR5qk7DoMeHdWAAAAVc"]
[Sat Nov 22 20:20:17.429120 2025] [proxy_fcgi:error] [pid 44259:tid 44276] [client 216.73.163.141:32259] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:17.830445 2025] [proxy_fcgi:error] [pid 44259:tid 44267] [client 216.73.163.141:32259] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:18.575519 2025] [proxy_fcgi:error] [pid 44259:tid 44262] [client 216.73.163.141:32259] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:18.919287 2025] [:error] [pid 44259:tid 44279] [client 216.73.163.141:32259] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "aSGqgnXe1xL-_YOdRmSmGgAAAZE"]
[Sat Nov 22 20:20:19.712234 2025] [:error] [pid 9547:tid 9553] [client 45.146.54.137:59987] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSGqg9ClOR5qk7DoMeHdWgAAAUA"]
[Sat Nov 22 20:20:20.518501 2025] [:error] [pid 53478:tid 53518] [client 216.73.163.157:62721] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSGqhAhUYdXBbQswAdQVHgAAAEk"]
[Sat Nov 22 20:20:22.813387 2025] [proxy_fcgi:error] [pid 44259:tid 44281] [client 216.73.163.141:36821] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:24.111222 2025] [:error] [pid 44259:tid 44264] [client 216.73.163.141:36821] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSGqiHXe1xL-_YOdRmSmLgAAAYI"]
[Sat Nov 22 20:20:25.171747 2025] [:error] [pid 44259:tid 44280] [client 45.146.54.139:57993] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSGqiXXe1xL-_YOdRmSmMQAAAZI"]
[Sat Nov 22 20:20:27.344818 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 45.146.54.134:37013] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:27.789455 2025] [proxy_fcgi:error] [pid 53566:tid 53589] [client 45.146.54.134:37013] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:28.501707 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 45.146.54.134:37013] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:30.972618 2025] [:error] [pid 53566:tid 53585] [client 45.146.54.134:37013] [client 45.146.54.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.54.134, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/js/wp-login.php"] [unique_id "aSGqjsbSHDBkRbwMbd5KFwAAANE"]
[Sat Nov 22 20:20:31.659848 2025] [:error] [pid 53566:tid 53570] [client 45.146.54.134:37013] File does not exist: /home/measureyourbrand/public_html/measureyourbrand.com/worm.PhP
[Sat Nov 22 20:20:32.049618 2025] [proxy_fcgi:error] [pid 53566:tid 53592] [client 45.146.54.134:37013] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:32.426055 2025] [proxy_fcgi:error] [pid 53566:tid 53590] [client 45.146.54.134:37013] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:33.140718 2025] [:error] [pid 53566:tid 53589] [client 45.146.54.134:37013] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSGqkcbSHDBkRbwMbd5KIQAAANU"]
[Sat Nov 22 20:20:33.886604 2025] [:error] [pid 53477:tid 53482] [client 216.73.163.158:26009] [client 216.73.163.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.158, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSGqkX7Lu30Ku9O40aLaTwAAAAE"]
[Sat Nov 22 20:20:35.024021 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:35.367133 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:36.107170 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:36.798167 2025] [proxy_fcgi:error] [pid 53477:tid 53495] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:37.976361 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:40.565449 2025] [proxy_fcgi:error] [pid 53477:tid 53484] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:40.935302 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:43.184726 2025] [proxy_fcgi:error] [pid 53477:tid 53504] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:43.573636 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 216.73.163.158:26009] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:43.911583 2025] [:error] [pid 53477:tid 53500] [client 216.73.163.158:26009] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSGqm37Lu30Ku9O40aLadQAAABM"]
[Sat Nov 22 20:20:45.064270 2025] [proxy_fcgi:error] [pid 25856:tid 25858] [client 216.73.163.118:30681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:45.428448 2025] [proxy_fcgi:error] [pid 25856:tid 25867] [client 216.73.163.118:30681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:45.806523 2025] [:error] [pid 25856:tid 25882] [client 216.73.163.118:30681] [client 216.73.163.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSGqnRsTP0wy94zKUvHbKgAAARg"]
[Sat Nov 22 20:20:46.882120 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 45.146.54.131:21533] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:47.224695 2025] [:error] [pid 53478:tid 53512] [client 45.146.54.131:21533] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSGqnwhUYdXBbQswAdQVZQAAAEM"]
[Sat Nov 22 20:20:48.690811 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 216.73.163.157:38485] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:49.374670 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 216.73.163.157:38485] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:51.239345 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 216.73.163.157:38485] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:51.604928 2025] [proxy_fcgi:error] [pid 53566:tid 53568] [client 216.73.163.157:38485] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:52.304518 2025] [:error] [pid 53566:tid 53574] [client 216.73.163.157:38485] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSGqpMbSHDBkRbwMbd5KQAAAAMY"]
[Sat Nov 22 20:20:53.146765 2025] [proxy_fcgi:error] [pid 53566:tid 53579] [client 45.146.54.133:53183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:53.518990 2025] [proxy_fcgi:error] [pid 53566:tid 53576] [client 45.146.54.133:53183] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:53.857927 2025] [:error] [pid 53566:tid 53585] [client 45.146.54.133:53183] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSGqpcbSHDBkRbwMbd5KQwAAANE"]
[Sat Nov 22 20:20:54.906307 2025] [:error] [pid 53566:tid 53588] [client 216.73.163.142:47529] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSGqpsbSHDBkRbwMbd5KRQAAANQ"]
[Sat Nov 22 20:20:55.969787 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 216.73.163.143:25321] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:57.055041 2025] [proxy_fcgi:error] [pid 44259:tid 44275] [client 216.73.163.143:25321] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:57.396564 2025] [proxy_fcgi:error] [pid 44259:tid 44274] [client 216.73.163.143:25321] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:57.734301 2025] [:error] [pid 44259:tid 44267] [client 216.73.163.143:25321] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSGqqXXe1xL-_YOdRmSmigAAAYU"]
[Sat Nov 22 20:20:58.432189 2025] [:error] [pid 53479:tid 53548] [client 216.73.163.146:35761] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSGqqm6cicFF3Aas-oSzhwAAAIw"]
[Sat Nov 22 20:21:00.952712 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 45.146.54.139:52991] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:01.680284 2025] [:error] [pid 53566:tid 53574] [client 45.146.54.139:52991] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSGqrcbSHDBkRbwMbd5KUQAAAMY"]
[Sat Nov 22 20:21:02.745370 2025] [:error] [pid 44259:tid 44270] [client 45.146.54.138:53807] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aSGqrnXe1xL-_YOdRmSmmgAAAYg"]
[Sat Nov 22 20:21:03.793926 2025] [proxy_fcgi:error] [pid 53477:tid 53494] [client 216.73.163.150:44269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:04.225422 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 216.73.163.150:44269] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:04.692876 2025] [:error] [pid 53477:tid 53493] [client 216.73.163.150:44269] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSGqsH7Lu30Ku9O40aLakAAAAAw"]
[Sat Nov 22 20:21:06.293672 2025] [proxy_fcgi:error] [pid 44259:tid 44280] [client 216.73.163.143:32569] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:07.542212 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 216.73.163.143:32569] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:08.272973 2025] [proxy_fcgi:error] [pid 44259:tid 44278] [client 216.73.163.143:32569] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:09.308033 2025] [:error] [pid 44259:tid 44269] [client 216.73.163.143:32569] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSGqtXXe1xL-_YOdRmSmuwAAAYc"]
[Sat Nov 22 20:21:10.070980 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 216.73.163.144:37505] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:11.189856 2025] [:error] [pid 9547:tid 9564] [client 216.73.163.144:37505] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSGqt9ClOR5qk7DoMeHdxQAAAUs"]
[Sat Nov 22 20:21:12.872101 2025] [proxy_fcgi:error] [pid 53478:tid 53512] [client 216.73.163.121:40955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:14.294895 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 216.73.163.121:40955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:14.646239 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 216.73.163.121:40955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:15.363392 2025] [:error] [pid 53478:tid 53523] [client 216.73.163.121:40955] [client 216.73.163.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.121, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSGquwhUYdXBbQswAdQVlwAAAE4"]
[Sat Nov 22 20:21:16.182276 2025] [proxy_fcgi:error] [pid 53478:tid 53529] [client 216.73.163.121:40955] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:17.343418 2025] [:error] [pid 53478:tid 53514] [client 216.73.163.121:40955] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSGqvQhUYdXBbQswAdQVnQAAAEU"]
[Sat Nov 22 20:21:18.047221 2025] [proxy_fcgi:error] [pid 53478:tid 53522] [client 216.73.163.153:60511] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:18.750378 2025] [:error] [pid 53478:tid 53519] [client 216.73.163.153:60511] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSGqvghUYdXBbQswAdQVpQAAAEo"]
[Sat Nov 22 20:21:19.564611 2025] [proxy_fcgi:error] [pid 9547:tid 9553] [client 45.146.54.133:39217] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:20.370621 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 45.146.54.133:39217] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:21.083139 2025] [:error] [pid 9547:tid 9573] [client 45.146.54.133:39217] [client 45.146.54.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSGqwdClOR5qk7DoMeHd3QAAAVQ"]
[Sat Nov 22 20:21:22.249217 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 216.73.163.145:47381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:22.679746 2025] [proxy_fcgi:error] [pid 9547:tid 9564] [client 216.73.163.145:47381] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:23.405088 2025] [:error] [pid 9547:tid 9562] [client 216.73.163.145:47381] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSGqw9ClOR5qk7DoMeHd6AAAAUk"]
[Sat Nov 22 20:21:24.658158 2025] [:error] [pid 44259:tid 44285] [client 216.73.163.159:33227] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSGqxHXe1xL-_YOdRmSnKQAAAZc"]
[Sat Nov 22 20:21:25.393881 2025] [proxy_fcgi:error] [pid 9547:tid 9576] [client 216.73.163.135:26091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:25.835212 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 216.73.163.135:26091] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:26.577302 2025] [:error] [pid 9547:tid 9564] [client 216.73.163.135:26091] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSGqxtClOR5qk7DoMeHd9AAAAUs"]
[Sat Nov 22 20:21:27.289248 2025] [proxy_fcgi:error] [pid 44259:tid 44277] [client 216.73.163.157:59803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:28.074155 2025] [proxy_fcgi:error] [pid 44259:tid 44281] [client 216.73.163.157:59803] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:28.436368 2025] [:error] [pid 44259:tid 44283] [client 216.73.163.157:59803] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSGqyHXe1xL-_YOdRmSnUgAAAZU"]
[Sat Nov 22 20:21:29.466586 2025] [:error] [pid 53566:tid 53588] [client 216.73.163.136:64847] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/db.php"] [unique_id "aSGqycbSHDBkRbwMbd5KlwAAANQ"]
[Sat Nov 22 20:21:30.226873 2025] [:error] [pid 53478:tid 53532] [client 216.73.163.151:48419] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSGqyghUYdXBbQswAdQVwAAAAFc"]
[Sat Nov 22 20:21:30.958694 2025] [:error] [pid 9547:tid 9576] [client 216.73.163.134:57565] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSGqytClOR5qk7DoMeHd_gAAAVc"]
[Sat Nov 22 20:21:31.651266 2025] [:error] [pid 53479:tid 53545] [client 216.73.163.155:32959] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSGqy26cicFF3Aas-oSz3wAAAIk"]
[Sat Nov 22 20:21:32.354895 2025] [:error] [pid 53479:tid 53548] [client 216.73.163.146:22743] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSGqzG6cicFF3Aas-oSz4AAAAIw"]
[Sat Nov 22 20:21:33.147778 2025] [:error] [pid 53478:tid 53528] [client 216.73.163.133:44321] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSGqzQhUYdXBbQswAdQVwQAAAFM"]
[Sat Nov 22 20:21:35.613103 2025] [:error] [pid 44259:tid 44269] [client 216.73.163.134:49575] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSGqz3Xe1xL-_YOdRmSnaAAAAYc"]
[Sat Nov 22 20:21:36.428845 2025] [:error] [pid 53566:tid 53579] [client 216.73.163.150:39359] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSGq0MbSHDBkRbwMbd5KqAAAAMs"]
[Sat Nov 22 20:21:37.109142 2025] [:error] [pid 9547:tid 9554] [client 45.131.194.122:62949] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSGq0dClOR5qk7DoMeHeDgAAAUE"]
[Sat Nov 22 20:21:38.202105 2025] [:error] [pid 44259:tid 44263] [client 216.73.163.150:52297] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSGq0nXe1xL-_YOdRmSndAAAAYE"]
[Sat Nov 22 20:21:39.655621 2025] [:error] [pid 53478:tid 53517] [client 45.146.54.139:44097] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aSGq0whUYdXBbQswAdQVzgAAAEg"]
[Sat Nov 22 20:21:41.274174 2025] [proxy_fcgi:error] [pid 25856:tid 25864] [client 216.73.163.122:47699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:42.674999 2025] [:error] [pid 25856:tid 25858] [client 216.73.163.122:47699] [client 216.73.163.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.122, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSGq1hsTP0wy94zKUvHbrAAAAQA"]
[Sat Nov 22 20:21:44.486190 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 216.73.163.122:47699] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:44.930647 2025] [:error] [pid 25856:tid 25874] [client 216.73.163.122:47699] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSGq2BsTP0wy94zKUvHbtgAAARA"]
[Sat Nov 22 20:21:45.610772 2025] [:error] [pid 44259:tid 44275] [client 216.73.163.143:22219] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSGq2XXe1xL-_YOdRmSnlAAAAY0"]
[Sat Nov 22 20:21:47.395537 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:47.745090 2025] [proxy_fcgi:error] [pid 53479:tid 53550] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:49.292011 2025] [proxy_fcgi:error] [pid 53479:tid 53548] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:49.634563 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:51.116527 2025] [proxy_fcgi:error] [pid 53479:tid 53552] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:51.468630 2025] [proxy_fcgi:error] [pid 53479:tid 53539] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:51.906710 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:52.249647 2025] [proxy_fcgi:error] [pid 53479:tid 53538] [client 216.73.163.122:53919] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:52.614487 2025] [:error] [pid 53479:tid 53540] [client 216.73.163.122:53919] [client 216.73.163.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSGq4G6cicFF3Aas-oSz_wAAAIQ"]
[Sat Nov 22 20:21:53.399106 2025] [:error] [pid 44259:tid 44267] [client 45.146.54.131:41205] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSGq4XXe1xL-_YOdRmSnsgAAAYU"]
[Sat Nov 22 20:21:54.131508 2025] [:error] [pid 53566:tid 53579] [client 45.146.54.131:20237] [client 45.146.54.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSGq4sbSHDBkRbwMbd5KtAAAAMs"]
[Sat Nov 22 20:21:55.231711 2025] [proxy_fcgi:error] [pid 53478:tid 53531] [client 216.73.163.150:39767] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:55.583986 2025] [proxy_fcgi:error] [pid 53478:tid 53513] [client 216.73.163.150:39767] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:56.790540 2025] [proxy_fcgi:error] [pid 53478:tid 53510] [client 216.73.163.150:39767] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:21:57.561811 2025] [:error] [pid 53478:tid 53512] [client 216.73.163.150:39767] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSGq5QhUYdXBbQswAdQV-AAAAEM"]
[Sat Nov 22 20:21:58.302769 2025] [:error] [pid 53566:tid 53571] [client 45.146.54.134:46045] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSGq5sbSHDBkRbwMbd5KuAAAAMM"]
[Sat Nov 22 20:21:58.991232 2025] [:error] [pid 53478:tid 53519] [client 216.73.163.137:47805] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSGq5ghUYdXBbQswAdQV_gAAAEo"]
[Sat Nov 22 20:22:01.152604 2025] [:error] [pid 53566:tid 53582] [client 216.73.163.147:25017] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSGq6cbSHDBkRbwMbd5KvgAAAM4"]
[Sat Nov 22 20:22:02.193613 2025] [:error] [pid 53479:tid 53550] [client 216.73.163.150:63769] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSGq6m6cicFF3Aas-oS0DQAAAI4"]
[Sat Nov 22 20:22:03.667039 2025] [:error] [pid 44259:tid 44282] [client 216.73.163.145:49321] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSGq63Xe1xL-_YOdRmSn6wAAAZQ"]
[Sat Nov 22 20:22:05.105802 2025] [proxy_fcgi:error] [pid 53566:tid 53587] [client 45.146.54.130:40975] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:08.912040 2025] [:error] [pid 53566:tid 53581] [client 45.146.54.130:40975] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSGq8MbSHDBkRbwMbd5KzgAAAM0"]
[Sat Nov 22 20:22:09.684242 2025] [proxy_fcgi:error] [pid 9547:tid 9569] [client 216.73.163.147:30855] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:10.379660 2025] [:error] [pid 9547:tid 9576] [client 216.73.163.147:30855] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "aSGq8tClOR5qk7DoMeHeTQAAAVc"]
[Sat Nov 22 20:22:11.773495 2025] [proxy_fcgi:error] [pid 25856:tid 25860] [client 216.73.163.138:41681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:12.904133 2025] [proxy_fcgi:error] [pid 25856:tid 25869] [client 216.73.163.138:41681] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:13.289825 2025] [:error] [pid 25856:tid 25880] [client 216.73.163.138:41681] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSGq9RsTP0wy94zKUvHb0AAAARY"]
[Sat Nov 22 20:22:14.862706 2025] [:error] [pid 9547:tid 9558] [client 216.73.163.160:34811] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSGq9tClOR5qk7DoMeHeXQAAAUU"]
[Sat Nov 22 20:22:15.932987 2025] [proxy_fcgi:error] [pid 53479:tid 53557] [client 216.73.163.156:42231] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:17.019331 2025] [:error] [pid 53479:tid 53552] [client 216.73.163.156:42231] [client 216.73.163.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSGq-W6cicFF3Aas-oS0KgAAAJA"]
[Sat Nov 22 20:22:19.601377 2025] [:error] [pid 53479:tid 53558] [client 216.73.163.138:51735] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSGq-26cicFF3Aas-oS0OAAAAJY"]
[Sat Nov 22 20:22:20.682408 2025] [proxy_fcgi:error] [pid 53477:tid 53481] [client 216.73.163.139:35311] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:21.559600 2025] [:error] [pid 53477:tid 53491] [client 216.73.163.139:35311] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSGq_X7Lu30Ku9O40aLbUgAAAAo"]
[Sat Nov 22 20:22:22.273686 2025] [:error] [pid 53477:tid 53482] [client 216.73.163.136:44049] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSGq_n7Lu30Ku9O40aLbVQAAAAE"]
[Sat Nov 22 20:22:25.388492 2025] [:error] [pid 53566:tid 53587] [client 45.146.54.132:25641] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSGrAcbSHDBkRbwMbd5K5AAAANM"]
[Sat Nov 22 20:22:26.153875 2025] [proxy_fcgi:error] [pid 53478:tid 53532] [client 216.73.163.149:55145] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:27.643488 2025] [proxy_fcgi:error] [pid 53478:tid 53515] [client 216.73.163.149:55145] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:28.059101 2025] [:error] [pid 53478:tid 53533] [client 216.73.163.149:55145] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSGrBAhUYdXBbQswAdQWJwAAAFg"]
[Sat Nov 22 20:22:29.795005 2025] [proxy_fcgi:error] [pid 25856:tid 25873] [client 216.73.163.133:56369] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:30.658065 2025] [:error] [pid 25856:tid 25875] [client 216.73.163.133:56369] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSGrBhsTP0wy94zKUvHb8gAAARE"]
[Sat Nov 22 20:22:31.365872 2025] [:error] [pid 9547:tid 9554] [client 45.146.54.138:39187] [client 45.146.54.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSGrB9ClOR5qk7DoMeHecQAAAUE"]
[Sat Nov 22 20:22:32.849194 2025] [:error] [pid 44259:tid 44283] [client 216.73.163.158:40509] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSGrCHXe1xL-_YOdRmSolAAAAZU"]
[Sat Nov 22 20:22:35.218654 2025] [:error] [pid 44259:tid 44266] [client 216.73.163.133:40625] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/install.php"] [unique_id "aSGrC3Xe1xL-_YOdRmSorgAAAYQ"]
[Sat Nov 22 20:22:35.965739 2025] [:error] [pid 44259:tid 44273] [client 216.73.163.136:48307] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSGrC3Xe1xL-_YOdRmSotQAAAYs"]
[Sat Nov 22 20:22:37.041696 2025] [proxy_fcgi:error] [pid 53479:tid 53540] [client 216.73.163.159:35749] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:38.942888 2025] [:error] [pid 53479:tid 53548] [client 216.73.163.159:35749] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/category-double.php"] [unique_id "aSGrDm6cicFF3Aas-oS0WQAAAIw"]
[Sat Nov 22 20:22:40.479271 2025] [:error] [pid 44259:tid 44285] [client 45.146.54.130:56959] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aSGrEHXe1xL-_YOdRmSo1wAAAZc"]
[Sat Nov 22 20:22:41.224057 2025] [:error] [pid 53566:tid 53588] [client 216.73.163.144:55647] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSGrEcbSHDBkRbwMbd5K9gAAANQ"]
[Sat Nov 22 20:22:42.343640 2025] [proxy_fcgi:error] [pid 44259:tid 44262] [client 216.73.163.153:65483] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:42.681876 2025] [:error] [pid 44259:tid 44270] [client 216.73.163.153:65483] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSGrEnXe1xL-_YOdRmSo6wAAAYg"]
[Sat Nov 22 20:22:44.028171 2025] [:error] [pid 53477:tid 53499] [client 45.131.194.123:62339] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSGrFH7Lu30Ku9O40aLbdgAAABI"]
[Sat Nov 22 20:22:46.593193 2025] [:error] [pid 44259:tid 44284] [client 216.73.163.157:23225] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSGrFnXe1xL-_YOdRmSpDwAAAZY"]
[Sat Nov 22 20:22:47.971730 2025] [proxy_fcgi:error] [pid 44259:tid 44283] [client 216.73.163.133:45345] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:22:48.372083 2025] [:error] [pid 44259:tid 44266] [client 216.73.163.133:45345] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSGrGHXe1xL-_YOdRmSpHQAAAYQ"]
[Sat Nov 22 20:22:51.004701 2025] [:error] [pid 53478:tid 53525] [client 216.73.163.159:34289] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSGrGwhUYdXBbQswAdQWYQAAAFA"]
[Sat Nov 22 20:22:52.113983 2025] [:error] [pid 53479:tid 53547] [client 216.73.163.158:34603] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/as.php"] [unique_id "aSGrHG6cicFF3Aas-oS0gAAAAIs"]
[Sat Nov 22 20:22:54.545199 2025] [:error] [pid 25856:tid 25881] [client 216.73.163.129:36777] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSGrHhsTP0wy94zKUvHcQgAAARc"]
[Sat Nov 22 20:22:55.324497 2025] [:error] [pid 9547:tid 9553] [client 45.146.54.137:44035] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "aSGrH9ClOR5qk7DoMeHeqQAAAUA"]
[Sat Nov 22 20:22:56.108360 2025] [:error] [pid 9547:tid 9563] [client 45.146.54.134:26381] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aSGrINClOR5qk7DoMeHeqwAAAUo"]
[Sat Nov 22 20:22:59.942151 2025] [:error] [pid 44259:tid 44282] [client 216.73.163.141:27943] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSGrI3Xe1xL-_YOdRmSpVwAAAZQ"]
[Sat Nov 22 20:23:01.720704 2025] [:error] [pid 44259:tid 44272] [client 216.73.163.149:58993] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSGrJXXe1xL-_YOdRmSpXQAAAYo"]
[Sat Nov 22 20:23:02.942826 2025] [proxy_fcgi:error] [pid 53479:tid 53547] [client 216.73.163.158:49901] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:03.304442 2025] [proxy_fcgi:error] [pid 53479:tid 53546] [client 216.73.163.158:49901] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:03.724785 2025] [:error] [pid 53479:tid 53555] [client 216.73.163.158:49901] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSGrJ26cicFF3Aas-oS0mwAAAJM"]
[Sat Nov 22 20:23:06.193153 2025] [:error] [pid 44259:tid 44265] [client 216.73.163.140:54999] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSGrKnXe1xL-_YOdRmSpZAAAAYM"]
[Sat Nov 22 20:23:06.924752 2025] [proxy_fcgi:error] [pid 53566:tid 53573] [client 216.73.163.134:56351] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:09.198320 2025] [:error] [pid 53566:tid 53571] [client 216.73.163.134:56351] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSGrLcbSHDBkRbwMbd5LJwAAAMM"]
[Sat Nov 22 20:23:10.791195 2025] [:error] [pid 9547:tid 9577] [client 216.73.163.144:38591] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSGrLtClOR5qk7DoMeHewQAAAVg"]
[Sat Nov 22 20:23:11.970741 2025] [:error] [pid 53478:tid 53529] [client 45.146.54.137:55115] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSGrLwhUYdXBbQswAdQWfgAAAFQ"]
[Sat Nov 22 20:23:13.528761 2025] [:error] [pid 53477:tid 53503] [client 216.73.163.137:21645] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSGrMX7Lu30Ku9O40aLbrAAAABY"]
[Sat Nov 22 20:23:20.304222 2025] [:error] [pid 44259:tid 44263] [client 216.73.163.145:42959] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSGrOHXe1xL-_YOdRmSpkAAAAYE"]
[Sat Nov 22 20:23:21.027806 2025] [:error] [pid 9547:tid 9571] [client 216.73.163.149:22261] [client 216.73.163.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSGrOdClOR5qk7DoMeHe0gAAAVI"]
[Sat Nov 22 20:23:22.966583 2025] [:error] [pid 44259:tid 44274] [client 216.73.163.145:25721] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSGrOnXe1xL-_YOdRmSplgAAAYw"]
[Sat Nov 22 20:23:23.701133 2025] [:error] [pid 25856:tid 25878] [client 216.73.163.154:37185] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSGrOxsTP0wy94zKUvHccQAAARQ"]
[Sat Nov 22 20:23:25.180878 2025] [:error] [pid 53478:tid 53512] [client 216.73.163.150:45709] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSGrPQhUYdXBbQswAdQWigAAAEM"]
[Sat Nov 22 20:23:25.976865 2025] [:error] [pid 44259:tid 44279] [client 216.73.163.130:59787] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aSGrPXXe1xL-_YOdRmSpoAAAAZE"]
[Sat Nov 22 20:23:26.697631 2025] [:error] [pid 9547:tid 9560] [client 216.73.163.117:51687] [client 216.73.163.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.117, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSGrPtClOR5qk7DoMeHe3wAAAUc"]
[Sat Nov 22 20:23:26.707333 2025] [proxy_fcgi:error] [pid 9547:tid 9560] [client 216.73.163.117:51687] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:27.060502 2025] [:error] [pid 9547:tid 9561] [client 216.73.163.117:51687] [client 216.73.163.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSGrP9ClOR5qk7DoMeHe4AAAAUg"]
[Sat Nov 22 20:23:28.562627 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 45.146.54.130:40839] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:28.945632 2025] [:error] [pid 53479:tid 53539] [client 45.146.54.130:40839] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSGrQG6cicFF3Aas-oS03gAAAIM"]
[Sat Nov 22 20:23:29.674215 2025] [:error] [pid 53477:tid 53494] [client 216.73.163.146:44893] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/network.php"] [unique_id "aSGrQX7Lu30Ku9O40aLb5AAAAA0"]
[Sat Nov 22 20:23:30.476619 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 216.73.163.158:54525] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:34.908634 2025] [:error] [pid 53479:tid 53558] [client 216.73.163.158:54525] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSGrRm6cicFF3Aas-oS0-gAAAJY"]
[Sat Nov 22 20:23:35.591244 2025] [:error] [pid 53478:tid 53514] [client 216.73.163.130:41293] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSGrRwhUYdXBbQswAdQWkgAAAEU"]
[Sat Nov 22 20:23:36.994256 2025] [:error] [pid 53479:tid 53553] [client 216.73.163.132:44225] [client 216.73.163.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSGrSG6cicFF3Aas-oS0_wAAAJE"]
[Sat Nov 22 20:23:37.704503 2025] [:error] [pid 9547:tid 9569] [client 216.73.163.159:21319] [client 216.73.163.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aSGrSdClOR5qk7DoMeHe5wAAAVA"]
[Sat Nov 22 20:23:38.399718 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 216.73.163.145:51361] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:38.749437 2025] [:error] [pid 53477:tid 53497] [client 216.73.163.145:51361] [client 216.73.163.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.145, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSGrSn7Lu30Ku9O40aLb8QAAABA"]
[Sat Nov 22 20:23:39.449885 2025] [:error] [pid 53477:tid 53496] [client 216.73.163.145:51361] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSGrS37Lu30Ku9O40aLb8wAAAA8"]
[Sat Nov 22 20:23:41.642464 2025] [:error] [pid 9547:tid 9568] [client 216.73.163.142:32007] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSGrTdClOR5qk7DoMeHe7gAAAU8"]
[Sat Nov 22 20:23:42.336934 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 216.73.163.143:29173] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:42.698051 2025] [:error] [pid 9547:tid 9572] [client 216.73.163.143:29173] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSGrTtClOR5qk7DoMeHe8wAAAVM"]
[Sat Nov 22 20:23:43.474126 2025] [:error] [pid 53566:tid 53573] [client 216.73.163.141:53543] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSGrT8bSHDBkRbwMbd5LXQAAAMU"]
[Sat Nov 22 20:23:44.218880 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 216.73.163.151:47417] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:45.318399 2025] [:error] [pid 53477:tid 53504] [client 216.73.163.151:47417] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSGrUX7Lu30Ku9O40aLb-gAAABc"]
[Sat Nov 22 20:23:46.802295 2025] [:error] [pid 53566:tid 53581] [client 216.73.163.142:52787] [client 216.73.163.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSGrUsbSHDBkRbwMbd5LZQAAAM0"]
[Sat Nov 22 20:23:47.562444 2025] [proxy_fcgi:error] [pid 44259:tid 44273] [client 216.73.163.151:27643] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:48.254612 2025] [proxy_fcgi:error] [pid 44259:tid 44263] [client 216.73.163.151:27643] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:48.946355 2025] [:error] [pid 44259:tid 44281] [client 216.73.163.151:27643] [client 216.73.163.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSGrVHXe1xL-_YOdRmSpuwAAAZM"]
[Sat Nov 22 20:23:49.738150 2025] [:error] [pid 44259:tid 44274] [client 216.73.163.121:60933] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bypass.php"] [unique_id "aSGrVXXe1xL-_YOdRmSpvQAAAYw"]
[Sat Nov 22 20:23:50.900466 2025] [:error] [pid 53478:tid 53509] [client 45.146.54.134:20715] [client 45.146.54.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/count.php"] [unique_id "aSGrVghUYdXBbQswAdQWpQAAAEA"]
[Sat Nov 22 20:23:51.610222 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 216.73.163.157:49707] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:23:53.781457 2025] [:error] [pid 25856:tid 25875] [client 216.73.163.157:49707] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSGrWRsTP0wy94zKUvHcsQAAARE"]
[Sat Nov 22 20:23:55.310110 2025] [:error] [pid 44259:tid 44285] [client 216.73.163.131:54689] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com"] [uri "/images/stories/themes.php"] [unique_id "aSGrW3Xe1xL-_YOdRmSpygAAAZc"]
[Sat Nov 22 20:23:55.656788 2025] [:error] [pid 44259:tid 44267] [client 216.73.163.131:54689] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSGrW3Xe1xL-_YOdRmSpywAAAYU"]
[Sat Nov 22 20:23:57.118231 2025] [:error] [pid 9547:tid 9561] [client 216.73.163.136:56155] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSGrXdClOR5qk7DoMeHfCQAAAUg"]
[Sat Nov 22 20:23:58.985732 2025] [:error] [pid 53478:tid 53522] [client 216.73.163.139:52703] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSGrXghUYdXBbQswAdQWswAAAE0"]
[Sat Nov 22 20:24:00.492308 2025] [proxy_fcgi:error] [pid 53479:tid 53553] [client 216.73.163.129:65333] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:01.951633 2025] [:error] [pid 53479:tid 53543] [client 216.73.163.129:65333] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSGrYW6cicFF3Aas-oS1VwAAAIc"]
[Sat Nov 22 20:24:03.378603 2025] [:error] [pid 53566:tid 53576] [client 45.146.54.139:42989] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSGrY8bSHDBkRbwMbd5LlwAAAMg"]
[Sat Nov 22 20:24:04.586745 2025] [:error] [pid 25856:tid 25866] [client 216.73.163.148:58225] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSGrZBsTP0wy94zKUvHcuQAAAQg"]
[Sat Nov 22 20:24:05.278931 2025] [proxy_fcgi:error] [pid 53479:tid 53560] [client 45.146.54.132:38819] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:08.368128 2025] [:error] [pid 53479:tid 53548] [client 45.146.54.132:38819] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSGraG6cicFF3Aas-oS1cwAAAIw"]
[Sat Nov 22 20:24:09.479265 2025] [:error] [pid 44259:tid 44262] [client 45.146.54.139:45737] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/colour.php"] [unique_id "aSGraXXe1xL-_YOdRmSp9gAAAYA"]
[Sat Nov 22 20:24:10.194614 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 216.73.163.138:51569] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:11.088337 2025] [:error] [pid 44259:tid 44270] [client 216.73.163.138:51569] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSGra3Xe1xL-_YOdRmSp-QAAAYg"]
[Sat Nov 22 20:24:12.119837 2025] [:error] [pid 25856:tid 25860] [client 216.73.163.152:49111] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/include.php"] [unique_id "aSGrbBsTP0wy94zKUvHcwwAAAQI"]
[Sat Nov 22 20:24:13.686839 2025] [:error] [pid 53566:tid 53587] [client 45.146.54.135:54183] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSGrbcbSHDBkRbwMbd5LoAAAANM"]
[Sat Nov 22 20:24:15.466874 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 45.131.194.123:23747] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:15.805789 2025] [:error] [pid 53566:tid 53571] [client 45.131.194.123:23747] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSGrb8bSHDBkRbwMbd5LpQAAAMM"]
[Sat Nov 22 20:24:16.526993 2025] [:error] [pid 44259:tid 44263] [client 216.73.163.121:52483] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSGrcHXe1xL-_YOdRmSqCQAAAYE"]
[Sat Nov 22 20:24:18.482168 2025] [proxy_fcgi:error] [pid 53478:tid 53530] [client 216.73.163.155:55691] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:19.187978 2025] [:error] [pid 53478:tid 53512] [client 216.73.163.155:55691] [client 216.73.163.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSGrcwhUYdXBbQswAdQW1QAAAEM"]
[Sat Nov 22 20:24:21.630733 2025] [:error] [pid 53566:tid 53577] [client 45.131.194.122:55631] [client 45.131.194.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSGrdcbSHDBkRbwMbd5LuQAAAMk"]
[Sat Nov 22 20:24:22.390511 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 216.73.163.144:64211] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:23.544396 2025] [:error] [pid 53566:tid 53579] [client 216.73.163.144:64211] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSGrd8bSHDBkRbwMbd5LvwAAAMs"]
[Sat Nov 22 20:24:24.236509 2025] [:error] [pid 53479:tid 53554] [client 216.73.163.150:53573] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSGreG6cicFF3Aas-oS1owAAAJI"]
[Sat Nov 22 20:24:26.376196 2025] [:error] [pid 53566:tid 53590] [client 216.73.163.136:25231] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSGresbSHDBkRbwMbd5LyQAAANY"]
[Sat Nov 22 20:24:27.080754 2025] [proxy_fcgi:error] [pid 9547:tid 9558] [client 216.73.163.121:51123] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:27.806601 2025] [:error] [pid 9547:tid 9555] [client 216.73.163.121:51123] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSGre9ClOR5qk7DoMeHfSgAAAUI"]
[Sat Nov 22 20:24:28.620288 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 216.73.163.146:32027] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:29.378870 2025] [:error] [pid 53477:tid 53497] [client 216.73.163.146:32027] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSGrfX7Lu30Ku9O40aLcVwAAABA"]
[Sat Nov 22 20:24:30.056389 2025] [:error] [pid 53479:tid 53544] [client 216.73.163.138:54929] [client 216.73.163.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSGrfm6cicFF3Aas-oS1tgAAAIg"]
[Sat Nov 22 20:24:31.078708 2025] [:error] [pid 53566:tid 53569] [client 216.73.163.129:30213] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSGrf8bSHDBkRbwMbd5L2wAAAME"]
[Sat Nov 22 20:24:31.879620 2025] [:error] [pid 9547:tid 9555] [client 216.73.163.153:23453] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aSGrf9ClOR5qk7DoMeHfZwAAAUI"]
[Sat Nov 22 20:24:33.394813 2025] [:error] [pid 53479:tid 53551] [client 45.146.54.132:22327] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSGrgW6cicFF3Aas-oS1vAAAAI8"]
[Sat Nov 22 20:24:34.503558 2025] [:error] [pid 53478:tid 53530] [client 216.73.163.133:38063] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSGrgghUYdXBbQswAdQW9wAAAFU"]
[Sat Nov 22 20:24:35.197569 2025] [:error] [pid 53478:tid 53526] [client 216.73.163.140:31731] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSGrgwhUYdXBbQswAdQW-AAAAFE"]
[Sat Nov 22 20:24:35.902585 2025] [:error] [pid 44259:tid 44273] [client 45.146.54.137:28519] [client 45.146.54.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSGrg3Xe1xL-_YOdRmSqbgAAAYs"]
[Sat Nov 22 20:24:37.767504 2025] [:error] [pid 53478:tid 53531] [client 216.73.163.119:53379] [client 216.73.163.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSGrhQhUYdXBbQswAdQXBgAAAFY"]
[Sat Nov 22 20:24:39.194157 2025] [:error] [pid 53477:tid 53505] [client 216.73.163.154:49439] [client 216.73.163.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSGrh37Lu30Ku9O40aLcegAAABg"]
[Sat Nov 22 20:24:40.558638 2025] [:error] [pid 9547:tid 9555] [client 216.73.163.130:30755] [client 216.73.163.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSGriNClOR5qk7DoMeHflAAAAUI"]
[Sat Nov 22 20:24:41.613930 2025] [:error] [pid 53478:tid 53516] [client 216.73.163.144:62517] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSGriQhUYdXBbQswAdQXDQAAAEc"]
[Sat Nov 22 20:24:42.998446 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 216.73.163.120:23623] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:44.442559 2025] [:error] [pid 53479:tid 53537] [client 216.73.163.120:23623] [client 216.73.163.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSGrjG6cicFF3Aas-oS11QAAAIE"]
[Sat Nov 22 20:24:45.180677 2025] [:error] [pid 53478:tid 53522] [client 45.146.54.135:56371] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSGrjQhUYdXBbQswAdQXEAAAAE0"]
[Sat Nov 22 20:24:46.275305 2025] [proxy_fcgi:error] [pid 53478:tid 53521] [client 216.73.163.153:50191] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:46.622619 2025] [:error] [pid 53478:tid 53531] [client 216.73.163.153:50191] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSGrjghUYdXBbQswAdQXEwAAAFY"]
[Sat Nov 22 20:24:49.184717 2025] [:error] [pid 53478:tid 53512] [client 216.73.163.140:32381] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSGrkQhUYdXBbQswAdQXGQAAAEM"]
[Sat Nov 22 20:24:50.239399 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 216.73.163.116:34043] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:51.915453 2025] [:error] [pid 53477:tid 53493] [client 216.73.163.116:34043] [client 216.73.163.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSGrk37Lu30Ku9O40aLckQAAAAw"]
[Sat Nov 22 20:24:53.444645 2025] [:error] [pid 9547:tid 9556] [client 216.73.163.157:60025] [client 216.73.163.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSGrldClOR5qk7DoMeHfpgAAAUM"]
[Sat Nov 22 20:24:54.294707 2025] [proxy_fcgi:error] [pid 25856:tid 25880] [client 216.73.163.134:56441] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:54.704119 2025] [:error] [pid 25856:tid 25874] [client 216.73.163.134:56441] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSGrlhsTP0wy94zKUvHdJAAAARA"]
[Sat Nov 22 20:24:55.784873 2025] [:error] [pid 53566:tid 53589] [client 45.146.54.132:60153] [client 45.146.54.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSGrl8bSHDBkRbwMbd5MGAAAANU"]
[Sat Nov 22 20:24:58.185044 2025] [proxy_fcgi:error] [pid 53477:tid 53488] [client 216.73.163.137:25787] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:24:59.071072 2025] [:error] [pid 53477:tid 53484] [client 216.73.163.137:25787] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSGrm37Lu30Ku9O40aLcpQAAAAM"]
[Sat Nov 22 20:25:01.226637 2025] [:error] [pid 53566:tid 53592] [client 216.73.163.146:58241] [client 216.73.163.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSGrncbSHDBkRbwMbd5MHQAAANg"]
[Sat Nov 22 20:25:02.024940 2025] [proxy_fcgi:error] [pid 53566:tid 53571] [client 216.73.163.131:63733] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:25:02.374687 2025] [:error] [pid 53566:tid 53582] [client 216.73.163.131:63733] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSGrnsbSHDBkRbwMbd5MIQAAAM4"]
[Sat Nov 22 20:25:03.063453 2025] [:error] [pid 53566:tid 53569] [client 216.73.163.136:47669] [client 216.73.163.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSGrn8bSHDBkRbwMbd5MIgAAAME"]
[Sat Nov 22 20:25:03.828660 2025] [proxy_fcgi:error] [pid 53478:tid 53528] [client 216.73.163.134:29289] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:25:04.535204 2025] [:error] [pid 53478:tid 53520] [client 216.73.163.134:29289] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSGroAhUYdXBbQswAdQXSQAAAEs"]
[Sat Nov 22 20:25:06.742935 2025] [:error] [pid 53566:tid 53590] [client 216.73.163.139:23215] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSGrosbSHDBkRbwMbd5MJwAAANY"]
[Sat Nov 22 20:25:09.785674 2025] [:error] [pid 53477:tid 53491] [client 216.73.163.143:61325] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSGrpX7Lu30Ku9O40aLctgAAAAo"]
[Sat Nov 22 20:25:10.498344 2025] [:error] [pid 44259:tid 44282] [client 216.73.163.135:55909] [client 216.73.163.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSGrpnXe1xL-_YOdRmSrFQAAAZQ"]
[Sat Nov 22 20:25:11.608207 2025] [:error] [pid 53479:tid 53546] [client 216.73.163.143:61969] [client 216.73.163.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/log.php"] [unique_id "aSGrp26cicFF3Aas-oS1-QAAAIo"]
[Sat Nov 22 20:25:12.297917 2025] [:error] [pid 25856:tid 25868] [client 216.73.163.140:50223] [client 216.73.163.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSGrqBsTP0wy94zKUvHdOwAAAQo"]
[Sat Nov 22 20:25:13.077648 2025] [:error] [pid 9547:tid 9554] [client 45.146.54.136:28763] [client 45.146.54.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSGrqdClOR5qk7DoMeHfxAAAAUE"]
[Sat Nov 22 20:25:13.852209 2025] [:error] [pid 9547:tid 9574] [client 45.146.54.130:32765] [client 45.146.54.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/aw.php"] [unique_id "aSGrqdClOR5qk7DoMeHfyAAAAVU"]
[Sat Nov 22 20:25:16.721732 2025] [:error] [pid 44259:tid 44274] [client 216.73.163.139:31359] [client 216.73.163.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSGrrHXe1xL-_YOdRmSrMQAAAYw"]
[Sat Nov 22 20:25:17.622478 2025] [:error] [pid 44259:tid 44280] [client 216.73.163.150:45067] [client 216.73.163.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/install.php"] [unique_id "aSGrrXXe1xL-_YOdRmSrMwAAAZI"]
[Sat Nov 22 20:25:18.810605 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 45.146.54.139:45911] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:25:19.150635 2025] [:error] [pid 53566:tid 53571] [client 45.146.54.139:45911] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSGrr8bSHDBkRbwMbd5MOwAAAMM"]
[Sat Nov 22 20:25:20.910442 2025] [:error] [pid 25856:tid 25863] [client 216.73.163.148:56829] [client 216.73.163.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSGrsBsTP0wy94zKUvHdTQAAAQU"]
[Sat Nov 22 20:25:23.389647 2025] [:error] [pid 53566:tid 53576] [client 216.73.163.141:34909] [client 216.73.163.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/template-less.php"] [unique_id "aSGrs8bSHDBkRbwMbd5MSwAAAMg"]
[Sat Nov 22 20:25:24.242995 2025] [:error] [pid 9547:tid 9556] [client 45.146.54.139:29157] [client 45.146.54.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSGrtNClOR5qk7DoMeHfzwAAAUM"]
[Sat Nov 22 20:25:28.541566 2025] [:error] [pid 44259:tid 44266] [client 45.131.194.123:38179] [client 45.131.194.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aSGruHXe1xL-_YOdRmSrVwAAAYQ"]
[Sat Nov 22 20:25:29.260969 2025] [:error] [pid 53479:tid 53547] [client 216.73.163.134:55821] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSGruW6cicFF3Aas-oS2EAAAAIs"]
[Sat Nov 22 20:25:30.823656 2025] [:error] [pid 44259:tid 44284] [client 216.73.163.129:56789] [client 216.73.163.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/file.php"] [unique_id "aSGrunXe1xL-_YOdRmSrYwAAAZY"]
[Sat Nov 22 20:25:33.401239 2025] [:error] [pid 44259:tid 44277] [client 216.73.163.134:22815] [client 216.73.163.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSGrvXXe1xL-_YOdRmSrbgAAAY8"]
[Sat Nov 22 20:25:34.446504 2025] [:error] [pid 53479:tid 53559] [client 45.146.54.135:25899] [client 45.146.54.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/load.php"] [unique_id "aSGrvm6cicFF3Aas-oS2FwAAAJc"]
[Sat Nov 22 20:25:35.182438 2025] [:error] [pid 53477:tid 53484] [client 216.73.163.147:60265] [client 216.73.163.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSGrv37Lu30Ku9O40aLdAAAAAAM"]
[Sat Nov 22 20:25:35.895150 2025] [:error] [pid 53479:tid 53551] [client 216.73.163.145:26923] [client 216.73.163.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSGrv26cicFF3Aas-oS2GQAAAI8"]
[Sat Nov 22 20:25:37.768833 2025] [:error] [pid 53479:tid 53545] [client 216.73.163.152:58137] [client 216.73.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSGrwW6cicFF3Aas-oS2IAAAAIk"]
[Sat Nov 22 20:25:38.499043 2025] [proxy_fcgi:error] [pid 53477:tid 53502] [client 216.73.163.144:34989] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:25:38.940783 2025] [:error] [pid 53477:tid 53494] [client 216.73.163.144:34989] [client 216.73.163.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSGrwn7Lu30Ku9O40aLdEAAAAA0"]
[Sat Nov 22 20:25:40.316040 2025] [proxy_fcgi:error] [pid 53477:tid 53493] [client 216.73.163.131:21237] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:25:40.655218 2025] [:error] [pid 53477:tid 53490] [client 216.73.163.131:21237] [client 216.73.163.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSGrxH7Lu30Ku9O40aLdGgAAAAk"]
[Sat Nov 22 20:25:41.354853 2025] [:error] [pid 25856:tid 25861] [client 216.73.163.137:57169] [client 216.73.163.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSGrxRsTP0wy94zKUvHdeQAAAQM"]
[Sat Nov 22 20:25:42.456794 2025] [:error] [pid 53477:tid 53499] [client 216.73.163.133:38993] [client 216.73.163.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSGrxn7Lu30Ku9O40aLdIgAAABI"]
[Sat Nov 22 20:25:44.939353 2025] [proxy_fcgi:error] [pid 53479:tid 53549] [client 216.73.163.160:61893] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:25:46.392626 2025] [:error] [pid 53479:tid 53543] [client 216.73.163.160:61893] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aSGrym6cicFF3Aas-oS2QwAAAIc"]
[Sat Nov 22 20:25:47.544674 2025] [:error] [pid 53478:tid 53521] [client 216.73.163.160:52599] [client 216.73.163.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSGrywhUYdXBbQswAdQXkQAAAEw"]
[Sat Nov 22 20:25:48.930719 2025] [:error] [pid 44259:tid 44286] [client 216.73.163.153:32009] [client 216.73.163.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSGrzHXe1xL-_YOdRmSrjAAAAZg"]
[Sat Nov 22 20:25:49.723597 2025] [:error] [pid 25856:tid 25882] [client 216.73.163.121:37009] [client 216.73.163.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSGrzRsTP0wy94zKUvHdiQAAARg"]
[Sat Nov 22 20:25:50.502381 2025] [:error] [pid 44259:tid 44268] [client 216.73.163.158:31799] [client 216.73.163.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSGrznXe1xL-_YOdRmSrkQAAAYY"]
[Sun Nov 23 02:24:08.486498 2025] [:error] [pid 39718:tid 39768] [client 43.167.239.66:43460] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSH_yAQ3B_uDoeItNmN86wAAAFM"]
[Sun Nov 23 04:32:43.460523 2025] [:error] [pid 38824:tid 38841] [client 216.126.225.91:35200] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSId608WZjXLvbHTHPezCAAAAM4"]
[Sun Nov 23 07:42:26.075299 2025] [:error] [pid 38740:tid 38820] [client 84.247.191.22:64084] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aSJKYg13QPZSi6O8umXFSQAAAJg"], referer: binance.com
[Sun Nov 23 14:44:06.747069 2025] [:error] [pid 38738:tid 38742] [client 122.176.106.134:64448] [client 122.176.106.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.134, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aSKtNgytc6TL9XavPmObcAAAAAA"]
[Sun Nov 23 14:44:06.752575 2025] [proxy_fcgi:error] [pid 38738:tid 38742] [client 122.176.106.134:64448] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 15:38:07.559259 2025] [:error] [pid 44652:tid 44728] [client 111.172.249.49:49363] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSK539iQFwsyXQDhwyB0yQAAARY"]
[Sun Nov 23 15:46:11.075220 2025] [:error] [pid 44652:tid 44727] [client 176.65.132.18:49170] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSK7w9iQFwsyXQDhwyB13wAAARU"]
[Sun Nov 23 18:44:06.183617 2025] [:error] [pid 17534:tid 17558] [client 176.65.132.18:46532] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSLldnPX9nXBrhgM8sxzowAAAdY"]
[Sun Nov 23 23:58:47.551540 2025] [:error] [pid 38738:tid 38762] [client 176.65.132.18:48052] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSMvNwytc6TL9XavPmNltwAAABQ"]
[Mon Nov 24 03:01:39.220521 2025] [:error] [pid 1589:tid 1614] [client 176.65.132.18:57836] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSNaE4I2fvripjU0EauZvwAAAVc"]
[Mon Nov 24 04:40:24.478811 2025] [:error] [pid 12999:tid 13015] [client 182.43.70.143:56526] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSNxOFtj_teEYJ8vu7H73wAAAMw"]
[Mon Nov 24 05:28:45.823181 2025] [:error] [pid 12999:tid 13020] [client 43.135.133.194:58846] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSN8jVtj_teEYJ8vu7ENvgAAANE"]
[Mon Nov 24 08:20:07.888416 2025] [:error] [pid 49900:tid 49912] [client 103.65.237.124:51839] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aSOktzCyPLrvg06aorlk5gAAAAo"]
[Mon Nov 24 08:20:08.170136 2025] [:error] [pid 48600:tid 48636] [client 103.65.237.124:65183] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aSOkuPtOzSUAQvWVjBcKNQAAAcY"]
[Mon Nov 24 10:57:06.894891 2025] [:error] [pid 48599:tid 48622] [client 182.40.104.255:55478] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSPJgpzvu6PDJiRKE3Ll3AAAAZM"]
[Mon Nov 24 14:13:50.878913 2025] [:error] [pid 49900:tid 49907] [client 177.37.140.226:16662] [client 177.37.140.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.140.226, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aSP3njCyPLrvg06aornlDAAAAAU"]
[Mon Nov 24 14:13:50.891723 2025] [proxy_fcgi:error] [pid 49900:tid 49907] [client 177.37.140.226:16662] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 16:35:19.262428 2025] [:error] [pid 48599:tid 48613] [client 170.106.187.106:42760] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSQYx5zvu6PDJiRKE3IbjgAAAYo"]
[Mon Nov 24 17:30:27.444972 2025] [:error] [pid 16441:tid 16452] [client 14.215.163.132:42026] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSQls4q_bc5MOa9Hflk2WgAAAIg"]
[Mon Nov 24 17:50:51.594809 2025] [proxy_fcgi:error] [pid 48688:tid 48698] [client 4.233.64.129:42925] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:50:51.837443 2025] [proxy_fcgi:error] [pid 48688:tid 48708] [client 4.233.64.129:42925] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:50:52.105435 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 4.233.64.129:42925] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:50:52.603437 2025] [proxy_fcgi:error] [pid 48688:tid 48716] [client 4.233.64.129:42925] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:50:52.860693 2025] [proxy_fcgi:error] [pid 48688:tid 48692] [client 4.233.64.129:42925] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:50:53.100357 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:42925] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSQqfRm2q1FkzLam7A2hAQAAAk0"]
[Mon Nov 24 17:50:56.440041 2025] [:error] [pid 16593:tid 16603] [client 4.233.64.129:42898] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSQqgBVGznHBJI2LKpRDMgAAAog"]
[Mon Nov 24 17:50:59.805264 2025] [:error] [pid 9630:tid 9645] [client 4.233.64.129:42760] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSQqgyrSgUgPGkizt2r5iQAAAE0"]
[Mon Nov 24 17:51:03.290518 2025] [:error] [pid 16549:tid 16569] [client 4.233.64.129:42917] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSQqh6eWW19A99PUw_c95QAAAVE"]
[Mon Nov 24 17:51:06.590836 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:42897] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSQqioq_bc5MOa9Hflk9EgAAAJI"]
[Mon Nov 24 17:51:08.485155 2025] [:error] [pid 9630:tid 9642] [client 4.233.64.129:42921] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSQqjCrSgUgPGkizt2r5jgAAAEo"]
[Mon Nov 24 17:51:12.086419 2025] [:error] [pid 9630:tid 9632] [client 4.233.64.129:42903] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSQqkCrSgUgPGkizt2r5kwAAAEA"]
[Mon Nov 24 17:51:13.430195 2025] [:error] [pid 48599:tid 48611] [client 4.233.64.129:42927] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSQqkZzvu6PDJiRKE3In_wAAAYg"]
[Mon Nov 24 17:51:15.722319 2025] [:error] [pid 48601:tid 48681] [client 4.233.64.129:42789] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "aSQqk4MM4MaVTk74-Aa6BgAAAhg"]
[Mon Nov 24 17:51:16.851220 2025] [:error] [pid 16549:tid 16571] [client 4.233.64.129:42779] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aSQqlKeWW19A99PUw_c96gAAAVI"]
[Mon Nov 24 17:51:18.681925 2025] [:error] [pid 9630:tid 9640] [client 4.233.64.129:42772] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aSQqlirSgUgPGkizt2r5lQAAAEg"]
[Mon Nov 24 17:51:38.746201 2025] [:error] [pid 16593:tid 16616] [client 4.233.64.129:42912] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSQqqhVGznHBJI2LKpRDXwAAApU"]
[Mon Nov 24 17:51:41.931017 2025] [:error] [pid 9630:tid 9653] [client 4.233.64.129:42774] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSQqrSrSgUgPGkizt2r5owAAAFU"]
[Mon Nov 24 17:51:45.293386 2025] [:error] [pid 48599:tid 48621] [client 4.233.64.129:42911] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSQqsZzvu6PDJiRKE3IoIQAAAZI"]
[Mon Nov 24 17:51:48.021787 2025] [:error] [pid 9630:tid 9647] [client 4.233.64.129:42884] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aSQqtCrSgUgPGkizt2r5qAAAAE8"]
[Mon Nov 24 17:51:50.232699 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:42794] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aSQqtoq_bc5MOa9Hflk9NQAAAI4"]
[Mon Nov 24 17:51:55.560503 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 4.233.64.129:42767] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:51:55.812691 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 4.233.64.129:42767] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:51:56.306695 2025] [:error] [pid 48688:tid 48697] [client 4.233.64.129:42767] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aSQqvBm2q1FkzLam7A2hIwAAAkU"]
[Mon Nov 24 17:52:06.478208 2025] [:error] [pid 48600:tid 48633] [client 4.233.64.129:42801] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aSQqxvtOzSUAQvWVjBd-MgAAAcM"]
[Mon Nov 24 17:52:09.987340 2025] [:error] [pid 48599:tid 48603] [client 4.233.64.129:42766] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aSQqyZzvu6PDJiRKE3IoWAAAAYA"]
[Mon Nov 24 17:52:15.230136 2025] [:error] [pid 49900:tid 49920] [client 4.233.64.129:42902] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSQqzzCyPLrvg06aorkUNQAAABI"]
[Mon Nov 24 17:52:20.153054 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:42883] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSQq1IMM4MaVTk74-Aa6LAAAAhA"]
[Mon Nov 24 17:52:23.943620 2025] [:error] [pid 16441:tid 16453] [client 4.233.64.129:42914] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSQq14q_bc5MOa9Hflk9cQAAAIk"]
[Mon Nov 24 17:52:29.164525 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:42770] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSQq3Zzvu6PDJiRKE3IoXwAAAZA"]
[Mon Nov 24 17:52:34.724387 2025] [:error] [pid 48599:tid 48615] [client 4.233.64.129:42880] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSQq4pzvu6PDJiRKE3IoYwAAAYw"]
[Mon Nov 24 17:52:37.339209 2025] [:error] [pid 16593:tid 16603] [client 4.233.64.129:42795] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSQq5RVGznHBJI2LKpRDrAAAAog"]
[Mon Nov 24 17:52:39.257514 2025] [:error] [pid 48600:tid 48637] [client 4.233.64.129:42908] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSQq5_tOzSUAQvWVjBd-VgAAAcc"]
[Mon Nov 24 17:52:44.805280 2025] [:error] [pid 48688:tid 48714] [client 4.233.64.129:42939] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSQq7Bm2q1FkzLam7A2hUAAAAlY"]
[Mon Nov 24 17:52:48.091961 2025] [:error] [pid 16593:tid 16596] [client 4.233.64.129:42814] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/0.php"] [unique_id "aSQq8BVGznHBJI2LKpRDsQAAAoE"]
[Mon Nov 24 17:52:52.722103 2025] [:error] [pid 49900:tid 49903] [client 4.233.64.129:42885] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSQq9DCyPLrvg06aorkUQwAAAAE"]
[Mon Nov 24 17:52:55.975827 2025] [:error] [pid 16593:tid 16618] [client 4.233.64.129:42926] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSQq9xVGznHBJI2LKpRDuQAAApc"]
[Mon Nov 24 17:52:59.137238 2025] [:error] [pid 48601:tid 48676] [client 4.233.64.129:54080] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSQq-4MM4MaVTk74-Aa6PgAAAhM"]
[Mon Nov 24 17:53:02.559863 2025] [:error] [pid 16549:tid 16559] [client 4.233.64.129:42910] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSQq_qeWW19A99PUw_c-HQAAAUc"]
[Mon Nov 24 17:53:05.734997 2025] [:error] [pid 9630:tid 9639] [client 4.233.64.129:42762] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSQrASrSgUgPGkizt2r55wAAAEc"]
[Mon Nov 24 17:53:07.983263 2025] [:error] [pid 16593:tid 16603] [client 4.233.64.129:54122] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSQrAxVGznHBJI2LKpRDygAAAog"]
[Mon Nov 24 17:53:11.264674 2025] [:error] [pid 48599:tid 48621] [client 4.233.64.129:54106] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i1.php"] [unique_id "aSQrB5zvu6PDJiRKE3IoegAAAZI"]
[Mon Nov 24 17:53:14.320354 2025] [:error] [pid 48599:tid 48604] [client 4.233.64.129:42771] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i1.php"] [unique_id "aSQrCpzvu6PDJiRKE3IofgAAAYE"]
[Mon Nov 24 17:53:21.499773 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:42786] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i1.php"] [unique_id "aSQrEfqZbniwaNwL8XnncQAAAQo"]
[Mon Nov 24 17:53:27.623174 2025] [:error] [pid 16516:tid 16526] [client 4.233.64.129:42784] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aSQrF_qZbniwaNwL8XnndAAAAQc"]
[Mon Nov 24 17:53:32.518803 2025] [:error] [pid 9630:tid 9643] [client 4.233.64.129:54082] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aSQrHCrSgUgPGkizt2r5-QAAAEs"]
[Mon Nov 24 17:53:36.488253 2025] [:error] [pid 48599:tid 48607] [client 4.233.64.129:54103] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aSQrIJzvu6PDJiRKE3IohwAAAYQ"]
[Mon Nov 24 17:53:39.223768 2025] [:error] [pid 48599:tid 48617] [client 4.233.64.129:42758] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aSQrI5zvu6PDJiRKE3IoiwAAAY4"]
[Mon Nov 24 17:53:46.123698 2025] [:error] [pid 48688:tid 48706] [client 4.233.64.129:42922] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/m.php"] [unique_id "aSQrKhm2q1FkzLam7A2hfQAAAk4"]
[Mon Nov 24 17:53:49.623715 2025] [:error] [pid 16549:tid 16576] [client 4.233.64.129:42755] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/m.php"] [unique_id "aSQrLaeWW19A99PUw_c-PgAAAVc"]
[Mon Nov 24 17:53:52.361907 2025] [:error] [pid 16516:tid 16532] [client 4.233.64.129:42934] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/m.php"] [unique_id "aSQrMPqZbniwaNwL8XnnfQAAAQ0"]
[Mon Nov 24 17:54:23.034814 2025] [:error] [pid 16593:tid 16604] [client 4.233.64.129:42677] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSQrTxVGznHBJI2LKpRD_gAAAok"]
[Mon Nov 24 17:54:25.844352 2025] [:error] [pid 9630:tid 9632] [client 4.233.64.129:42696] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSQrUSrSgUgPGkizt2r6FwAAAEA"]
[Mon Nov 24 17:54:31.856202 2025] [:error] [pid 16441:tid 16447] [client 4.233.64.129:42648] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSQrV4q_bc5MOa9Hflk97wAAAIM"]
[Mon Nov 24 17:54:34.215693 2025] [:error] [pid 9630:tid 9649] [client 4.233.64.129:42834] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/themes.php"] [unique_id "aSQrWirSgUgPGkizt2r6GgAAAFE"]
[Mon Nov 24 17:54:37.452932 2025] [:error] [pid 16549:tid 16575] [client 4.233.64.129:42870] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aSQrXaeWW19A99PUw_c-cAAAAVY"]
[Mon Nov 24 17:54:40.503284 2025] [:error] [pid 9630:tid 9654] [client 4.233.64.129:42855] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aSQrYCrSgUgPGkizt2r6HQAAAFY"]
[Mon Nov 24 17:54:52.116457 2025] [:error] [pid 16441:tid 16452] [client 4.233.64.129:42843] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mail.php"] [unique_id "aSQrbIq_bc5MOa9Hflk-FQAAAIg"]
[Mon Nov 24 17:54:56.558051 2025] [:error] [pid 16549:tid 16568] [client 4.233.64.129:42653] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mail.php"] [unique_id "aSQrcKeWW19A99PUw_c-gAAAAVA"]
[Mon Nov 24 17:55:01.900006 2025] [:error] [pid 48688:tid 48696] [client 4.233.64.129:42663] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mail.php"] [unique_id "aSQrdRm2q1FkzLam7A2h0wAAAkQ"]
[Mon Nov 24 17:55:16.899304 2025] [:error] [pid 48599:tid 48617] [client 4.233.64.129:42647] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/fm.php"] [unique_id "aSQrhJzvu6PDJiRKE3IosQAAAY4"]
[Mon Nov 24 17:55:22.938148 2025] [:error] [pid 16516:tid 16530] [client 4.233.64.129:42876] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/17.php"] [unique_id "aSQrivqZbniwaNwL8XnnpwAAAQs"]
[Mon Nov 24 17:55:29.106071 2025] [:error] [pid 9630:tid 9654] [client 4.233.64.129:42650] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/17.php"] [unique_id "aSQrkSrSgUgPGkizt2r6OAAAAFY"]
[Mon Nov 24 17:55:31.963113 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:42652] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/17.php"] [unique_id "aSQrk4MM4MaVTk74-Aa6tAAAAgk"]
[Mon Nov 24 17:55:36.199349 2025] [:error] [pid 48601:tid 48670] [client 4.233.64.129:42624] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/17.php"] [unique_id "aSQrmIMM4MaVTk74-Aa6twAAAg0"]
[Mon Nov 24 17:55:38.186669 2025] [:error] [pid 48601:tid 48671] [client 4.233.64.129:42631] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aSQrmoMM4MaVTk74-Aa6uAAAAg4"]
[Mon Nov 24 17:55:42.193625 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:42693] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aSQrnhm2q1FkzLam7A2h7AAAAkE"]
[Mon Nov 24 17:55:55.410366 2025] [:error] [pid 48599:tid 48603] [client 4.233.64.129:42643] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSQrq5zvu6PDJiRKE3Io0AAAAYA"]
[Mon Nov 24 17:56:01.016936 2025] [:error] [pid 9630:tid 9641] [client 4.233.64.129:42840] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSQrsSrSgUgPGkizt2r6RQAAAEk"]
[Mon Nov 24 17:56:04.953598 2025] [:error] [pid 16593:tid 16611] [client 4.233.64.129:42684] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSQrtBVGznHBJI2LKpREVgAAApA"]
[Mon Nov 24 17:56:07.813574 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:42713] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aSQrt_qZbniwaNwL8XnntgAAAQo"]
[Mon Nov 24 17:56:11.454761 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 4.233.64.129:42633] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:11.698339 2025] [:error] [pid 16441:tid 16445] [client 4.233.64.129:42633] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSQru4q_bc5MOa9Hflk-uAAAAIE"]
[Mon Nov 24 17:56:13.363402 2025] [proxy_fcgi:error] [pid 48599:tid 48612] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:13.633970 2025] [proxy_fcgi:error] [pid 48599:tid 48611] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:13.894002 2025] [proxy_fcgi:error] [pid 48599:tid 48604] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:14.420433 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:14.683399 2025] [proxy_fcgi:error] [pid 48599:tid 48608] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:15.364927 2025] [proxy_fcgi:error] [pid 48599:tid 48610] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:15.649338 2025] [proxy_fcgi:error] [pid 48599:tid 48606] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:16.170028 2025] [proxy_fcgi:error] [pid 48599:tid 48622] [client 4.233.64.129:42827] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:56:16.442695 2025] [:error] [pid 48599:tid 48626] [client 4.233.64.129:42827] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/123.php"] [unique_id "aSQrwJzvu6PDJiRKE3Io5gAAAZc"]
[Mon Nov 24 17:56:18.823849 2025] [:error] [pid 16593:tid 16617] [client 4.233.64.129:42673] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/123.php"] [unique_id "aSQrwhVGznHBJI2LKpREXwAAApY"]
[Mon Nov 24 17:56:31.088733 2025] [:error] [pid 9630:tid 9633] [client 4.233.64.129:42694] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/123.php"] [unique_id "aSQrzyrSgUgPGkizt2r6bQAAAEE"]
[Mon Nov 24 17:56:33.565742 2025] [:error] [pid 16516:tid 16530] [client 4.233.64.129:42638] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSQr0fqZbniwaNwL8Xnn-AAAAQs"]
[Mon Nov 24 17:56:36.133585 2025] [:error] [pid 9630:tid 9647] [client 4.233.64.129:42858] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSQr1CrSgUgPGkizt2r6dAAAAE8"]
[Mon Nov 24 17:57:06.177591 2025] [:error] [pid 48600:tid 48652] [client 4.233.64.129:42742] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aSQr8vtOzSUAQvWVjBd_EgAAAdY"]
[Mon Nov 24 17:57:11.717093 2025] [:error] [pid 16441:tid 16444] [client 4.233.64.129:42702] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aSQr94q_bc5MOa9Hflk_ZwAAAIA"]
[Mon Nov 24 17:57:14.706269 2025] [:error] [pid 16549:tid 16566] [client 4.233.64.129:42664] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aSQr-qeWW19A99PUw_c-2gAAAU4"]
[Mon Nov 24 17:57:16.745967 2025] [proxy_fcgi:error] [pid 9630:tid 9632] [client 4.233.64.129:42709] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:57:17.305008 2025] [proxy_fcgi:error] [pid 9630:tid 9653] [client 4.233.64.129:42709] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:57:17.987189 2025] [proxy_fcgi:error] [pid 9630:tid 9652] [client 4.233.64.129:42709] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:57:18.240853 2025] [proxy_fcgi:error] [pid 9630:tid 9650] [client 4.233.64.129:42709] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:57:18.483187 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 4.233.64.129:42709] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:57:19.076591 2025] [:error] [pid 9630:tid 9647] [client 4.233.64.129:42709] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aSQr_yrSgUgPGkizt2r61wAAAE8"]
[Mon Nov 24 17:57:21.418584 2025] [:error] [pid 16516:tid 16543] [client 4.233.64.129:42727] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aSQsAfqZbniwaNwL8XnoKwAAARg"]
[Mon Nov 24 17:57:22.947679 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:42824] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aSQsAoq_bc5MOa9Hflk_vAAAAI4"]
[Mon Nov 24 17:57:27.342757 2025] [:error] [pid 16549:tid 16565] [client 4.233.64.129:42659] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aSQsB6eWW19A99PUw_c-4gAAAU0"]
[Mon Nov 24 17:57:32.189769 2025] [:error] [pid 16516:tid 16521] [client 4.233.64.129:42726] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/403.php"] [unique_id "aSQsDPqZbniwaNwL8XnoMAAAAQI"]
[Mon Nov 24 17:57:36.888559 2025] [:error] [pid 16516:tid 16526] [client 4.233.64.129:42697] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/403.php"] [unique_id "aSQsEPqZbniwaNwL8XnoNQAAAQc"]
[Mon Nov 24 17:57:41.863943 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:42634] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/403.php"] [unique_id "aSQsFYMM4MaVTk74-Aa7QwAAAhA"]
[Mon Nov 24 17:57:44.630959 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:42836] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/403.php"] [unique_id "aSQsGIMM4MaVTk74-Aa7RgAAAhI"]
[Mon Nov 24 17:57:47.090650 2025] [:error] [pid 16516:tid 16533] [client 4.233.64.129:42641] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSQsG_qZbniwaNwL8XnoNwAAAQ4"]
[Mon Nov 24 17:57:51.274062 2025] [:error] [pid 16441:tid 16457] [client 4.233.64.129:42856] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSQsH4q_bc5MOa9HfllAEQAAAI0"]
[Mon Nov 24 17:57:56.160017 2025] [:error] [pid 48688:tid 48704] [client 4.233.64.129:42646] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSQsJBm2q1FkzLam7A2ingAAAkw"]
[Mon Nov 24 17:57:59.759253 2025] [:error] [pid 16549:tid 16561] [client 4.233.64.129:42860] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSQsJ6eWW19A99PUw_c-7gAAAUk"]
[Mon Nov 24 17:58:00.938943 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:42741] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aSQsKIMM4MaVTk74-Aa7SAAAAgM"]
[Mon Nov 24 17:58:26.308299 2025] [proxy_fcgi:error] [pid 49900:tid 49905] [client 4.233.64.129:42704] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:58:26.555464 2025] [proxy_fcgi:error] [pid 49900:tid 49925] [client 4.233.64.129:42704] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:58:26.799844 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 4.233.64.129:42704] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:58:27.038680 2025] [:error] [pid 49900:tid 49911] [client 4.233.64.129:42704] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oo.php"] [unique_id "aSQsQzCyPLrvg06aorkVTwAAAAk"]
[Mon Nov 24 17:58:31.628386 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:42847] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oo.php"] [unique_id "aSQsR4q_bc5MOa9HfllAggAAAJE"]
[Mon Nov 24 17:58:37.187847 2025] [:error] [pid 48600:tid 48640] [client 4.233.64.129:42720] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oo.php"] [unique_id "aSQsTftOzSUAQvWVjBd_nwAAAco"]
[Mon Nov 24 17:59:17.081392 2025] [:error] [pid 9630:tid 9633] [client 4.233.64.129:42863] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSQsdSrSgUgPGkizt2r75QAAAEE"]
[Mon Nov 24 17:59:20.124204 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:42679] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSQseJzvu6PDJiRKE3IpUQAAAZA"]
[Mon Nov 24 17:59:25.560468 2025] [:error] [pid 48688:tid 48701] [client 4.233.64.129:42648] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSQsfRm2q1FkzLam7A2i6gAAAkk"]
[Mon Nov 24 17:59:28.370184 2025] [proxy_fcgi:error] [pid 48600:tid 48631] [client 4.233.64.129:42865] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:28.606824 2025] [:error] [pid 48600:tid 48651] [client 4.233.64.129:42865] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSQsgPtOzSUAQvWVjBd_0AAAAdU"]
[Mon Nov 24 17:59:30.614046 2025] [proxy_fcgi:error] [pid 48688:tid 48698] [client 4.233.64.129:42568] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:31.110165 2025] [proxy_fcgi:error] [pid 48688:tid 48712] [client 4.233.64.129:42568] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:31.351323 2025] [proxy_fcgi:error] [pid 48688:tid 48703] [client 4.233.64.129:42568] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:31.593804 2025] [:error] [pid 48688:tid 48715] [client 4.233.64.129:42568] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSQsgxm2q1FkzLam7A2i9QAAAlc"]
[Mon Nov 24 17:59:32.844456 2025] [proxy_fcgi:error] [pid 16516:tid 16540] [client 4.233.64.129:42888] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:33.096411 2025] [proxy_fcgi:error] [pid 16516:tid 16535] [client 4.233.64.129:42888] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:33.353293 2025] [proxy_fcgi:error] [pid 16516:tid 16531] [client 4.233.64.129:42888] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:33.847874 2025] [proxy_fcgi:error] [pid 16516:tid 16519] [client 4.233.64.129:42888] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 17:59:34.203827 2025] [:error] [pid 16516:tid 16541] [client 4.233.64.129:42888] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSQshvqZbniwaNwL8XnosQAAARY"]
[Mon Nov 24 17:59:38.293836 2025] [:error] [pid 16593:tid 16617] [client 4.233.64.129:42832] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/po.php"] [unique_id "aSQsihVGznHBJI2LKpRFCwAAApY"]
[Mon Nov 24 17:59:42.118222 2025] [:error] [pid 16441:tid 16449] [client 4.233.64.129:42623] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/po.php"] [unique_id "aSQsjoq_bc5MOa9HfllAywAAAIU"]
[Mon Nov 24 17:59:44.939987 2025] [:error] [pid 16516:tid 16533] [client 4.233.64.129:42822] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/po.php"] [unique_id "aSQskPqZbniwaNwL8XnovAAAAQ4"]
[Mon Nov 24 17:59:51.733059 2025] [:error] [pid 16549:tid 16555] [client 4.233.64.129:42658] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zews.php"] [unique_id "aSQsl6eWW19A99PUw_c_XAAAAUM"]
[Mon Nov 24 17:59:54.490705 2025] [:error] [pid 48600:tid 48647] [client 4.233.64.129:42553] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zews.php"] [unique_id "aSQsmvtOzSUAQvWVjBd_3gAAAdE"]
[Mon Nov 24 18:00:06.696053 2025] [:error] [pid 48601:tid 48674] [client 4.233.64.129:42533] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSQspoMM4MaVTk74-Aa7wAAAAhE"]
[Mon Nov 24 18:00:09.912374 2025] [:error] [pid 48601:tid 48664] [client 4.233.64.129:42588] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSQsqYMM4MaVTk74-Aa7wQAAAgc"]
[Mon Nov 24 18:00:13.471050 2025] [:error] [pid 16549:tid 16561] [client 4.233.64.129:42506] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSQsraeWW19A99PUw_c_YgAAAUk"]
[Mon Nov 24 18:00:19.792096 2025] [:error] [pid 9630:tid 9640] [client 4.233.64.129:42574] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSQssyrSgUgPGkizt2r8EAAAAEg"]
[Mon Nov 24 18:00:24.491136 2025] [:error] [pid 49900:tid 49906] [client 4.233.64.129:42527] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/usage-file.php"] [unique_id "aSQsuDCyPLrvg06aorkVnQAAAAQ"]
[Mon Nov 24 18:00:27.720964 2025] [:error] [pid 9630:tid 9635] [client 4.233.64.129:42825] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/usage-file.php"] [unique_id "aSQsuyrSgUgPGkizt2r8HAAAAEM"]
[Mon Nov 24 18:00:32.616563 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:42571] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/usage-file.php"] [unique_id "aSQswPqZbniwaNwL8Xno4wAAAQo"]
[Mon Nov 24 18:00:35.314728 2025] [proxy_fcgi:error] [pid 9630:tid 9646] [client 4.233.64.129:42499] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:00:38.744521 2025] [:error] [pid 9630:tid 9650] [client 4.233.64.129:42499] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/assets/js/wp-config.php"] [unique_id "aSQsxirSgUgPGkizt2r8KgAAAFI"]
[Mon Nov 24 18:00:41.899074 2025] [proxy_fcgi:error] [pid 16593:tid 16597] [client 4.233.64.129:42522] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:00:42.288036 2025] [proxy_fcgi:error] [pid 16593:tid 16606] [client 4.233.64.129:42522] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:00:42.535353 2025] [proxy_fcgi:error] [pid 16593:tid 16599] [client 4.233.64.129:42522] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:00:42.783857 2025] [proxy_fcgi:error] [pid 16593:tid 16602] [client 4.233.64.129:42522] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:00:43.024919 2025] [proxy_fcgi:error] [pid 16593:tid 16608] [client 4.233.64.129:42522] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 18:00:43.266809 2025] [proxy_fcgi:error] [pid 16593:tid 16612] [client 4.233.64.129:42522] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 20:57:25.360154 2025] [:error] [pid 16516:tid 16542] [client 4.233.64.129:51529] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSRWNfqZbniwaNwL8XkFWgAAARc"]
[Mon Nov 24 20:57:31.931379 2025] [:error] [pid 16549:tid 16561] [client 4.233.64.129:51562] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSRWO6eWW19A99PUw_dgnwAAAUk"]
[Tue Nov 25 01:35:39.760892 2025] [proxy_fcgi:error] [pid 49900:tid 49902] [client 4.233.64.129:63842] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:35:40.009175 2025] [proxy_fcgi:error] [pid 49900:tid 49912] [client 4.233.64.129:63842] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:35:40.414176 2025] [proxy_fcgi:error] [pid 49900:tid 49905] [client 4.233.64.129:63842] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:35:40.652996 2025] [proxy_fcgi:error] [pid 49900:tid 49920] [client 4.233.64.129:63842] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:35:40.908264 2025] [:error] [pid 49900:tid 49914] [client 4.233.64.129:63842] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsx.php"] [unique_id "aSSXbDCyPLrvg06aorl7AAAAAAw"]
[Tue Nov 25 01:35:42.515900 2025] [:error] [pid 48688:tid 48711] [client 4.233.64.129:63869] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsx.php"] [unique_id "aSSXbhm2q1FkzLam7A33RQAAAlM"]
[Tue Nov 25 01:35:49.955786 2025] [:error] [pid 48599:tid 48612] [client 4.233.64.129:63747] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsx.php"] [unique_id "aSSXdZzvu6PDJiRKE3J3HAAAAYk"]
[Tue Nov 25 01:35:52.340851 2025] [:error] [pid 16441:tid 16444] [client 4.233.64.129:63777] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsx.php"] [unique_id "aSSXeIq_bc5MOa9HflnhkAAAAIA"]
[Tue Nov 25 01:35:55.210782 2025] [:error] [pid 49900:tid 49925] [client 4.233.64.129:63749] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4.php"] [unique_id "aSSXezCyPLrvg06aorl7FgAAABc"]
[Tue Nov 25 01:36:14.076161 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:63837] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xenium4.php"] [unique_id "aSSXjhm2q1FkzLam7A33ZwAAAk0"]
[Tue Nov 25 01:36:26.383855 2025] [:error] [pid 48688:tid 48703] [client 4.233.64.129:63764] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpw.php"] [unique_id "aSSXmhm2q1FkzLam7A33ewAAAks"]
[Tue Nov 25 01:36:27.916738 2025] [:error] [pid 48600:tid 48641] [client 4.233.64.129:63760] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpw.php"] [unique_id "aSSXm_tOzSUAQvWVjBfApAAAAcs"]
[Tue Nov 25 01:36:35.640728 2025] [:error] [pid 16441:tid 16447] [client 4.233.64.129:63852] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpw.php"] [unique_id "aSSXo4q_bc5MOa9HflnhyAAAAIM"]
[Tue Nov 25 01:36:39.169060 2025] [:error] [pid 16593:tid 16608] [client 4.233.64.129:52046] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww2.php"] [unique_id "aSSXpxVGznHBJI2LKpSNigAAAo0"]
[Tue Nov 25 01:36:43.805261 2025] [proxy_fcgi:error] [pid 48688:tid 48701] [client 4.233.64.129:63844] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:36:44.044750 2025] [:error] [pid 48688:tid 48697] [client 4.233.64.129:63844] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSSXrBm2q1FkzLam7A33ggAAAkU"]
[Tue Nov 25 01:36:46.754024 2025] [:error] [pid 49900:tid 49913] [client 4.233.64.129:63846] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSSXrjCyPLrvg06aorl7dAAAAAs"]
[Tue Nov 25 01:36:53.095900 2025] [:error] [pid 16593:tid 16602] [client 4.233.64.129:63774] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSSXtRVGznHBJI2LKpSNjwAAAoc"]
[Tue Nov 25 01:36:55.654663 2025] [:error] [pid 9630:tid 9643] [client 4.233.64.129:63840] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSSXtyrSgUgPGkizt2pxIQAAAEs"]
[Tue Nov 25 01:36:58.382014 2025] [:error] [pid 9630:tid 9652] [client 4.233.64.129:63796] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "aSSXuirSgUgPGkizt2pxIgAAAFQ"]
[Tue Nov 25 01:37:01.348944 2025] [:error] [pid 49900:tid 49904] [client 4.233.64.129:63854] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "aSSXvTCyPLrvg06aorl7ewAAAAI"]
[Tue Nov 25 01:37:08.392391 2025] [:error] [pid 48688:tid 48698] [client 4.233.64.129:52085] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "aSSXxBm2q1FkzLam7A33nAAAAkY"]
[Tue Nov 25 01:37:11.033591 2025] [:error] [pid 16441:tid 16456] [client 4.233.64.129:63865] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "aSSXx4q_bc5MOa9Hflnh2gAAAIw"]
[Tue Nov 25 01:37:14.944908 2025] [:error] [pid 48599:tid 48606] [client 4.233.64.129:52062] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "aSSXypzvu6PDJiRKE3J3VgAAAYM"]
[Tue Nov 25 01:37:19.277678 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:63805] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "aSSXz4MM4MaVTk74-AYTlwAAAhA"]
[Tue Nov 25 01:37:22.722203 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:63834] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "aSSX0vqZbniwaNwL8XkuegAAAQo"]
[Tue Nov 25 01:37:35.919421 2025] [:error] [pid 48600:tid 48633] [client 4.233.64.129:63858] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "aSSX3_tOzSUAQvWVjBfAsgAAAcM"]
[Tue Nov 25 01:37:54.518479 2025] [proxy_fcgi:error] [pid 16441:tid 16465] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:54.757793 2025] [proxy_fcgi:error] [pid 16441:tid 16467] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:54.998231 2025] [proxy_fcgi:error] [pid 16441:tid 16464] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:55.257518 2025] [proxy_fcgi:error] [pid 16441:tid 16446] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:55.517704 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:55.759439 2025] [proxy_fcgi:error] [pid 16441:tid 16445] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:56.004228 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:56.254456 2025] [proxy_fcgi:error] [pid 16441:tid 16462] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:56.515362 2025] [proxy_fcgi:error] [pid 16441:tid 16466] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:56.774387 2025] [proxy_fcgi:error] [pid 16441:tid 16461] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:57.013991 2025] [proxy_fcgi:error] [pid 16441:tid 16444] [client 4.233.64.129:51264] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:37:57.406135 2025] [:error] [pid 16441:tid 16449] [client 4.233.64.129:51264] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "aSSX9Yq_bc5MOa9HflniJQAAAIU"]
[Tue Nov 25 01:37:59.296058 2025] [:error] [pid 49900:tid 49906] [client 4.233.64.129:52091] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "aSSX9zCyPLrvg06aorl7pgAAAAQ"]
[Tue Nov 25 01:38:01.096113 2025] [:error] [pid 16593:tid 16618] [client 4.233.64.129:63781] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "aSSX-RVGznHBJI2LKpSNqgAAApc"]
[Tue Nov 25 01:38:01.974142 2025] [:error] [pid 48688:tid 48694] [client 4.233.64.129:51278] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "aSSX-Rm2q1FkzLam7A33xQAAAkI"]
[Tue Nov 25 01:38:04.240419 2025] [:error] [pid 49900:tid 49926] [client 4.233.64.129:63868] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content-over.php"] [unique_id "aSSX_DCyPLrvg06aorl7qgAAABg"]
[Tue Nov 25 01:38:05.091731 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:63809] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content-over.php"] [unique_id "aSSX_Yq_bc5MOa9HflniJwAAAI4"]
[Tue Nov 25 01:38:07.644668 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:63859] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content-over.php"] [unique_id "aSSX__qZbniwaNwL8XkusgAAAQo"]
[Tue Nov 25 01:38:09.856756 2025] [:error] [pid 48688:tid 48705] [client 4.233.64.129:63836] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content-over.php"] [unique_id "aSSYARm2q1FkzLam7A330AAAAk0"]
[Tue Nov 25 01:38:12.471512 2025] [:error] [pid 48600:tid 48633] [client 4.233.64.129:63776] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aSSYBPtOzSUAQvWVjBfA1gAAAcM"]
[Tue Nov 25 01:38:20.938828 2025] [:error] [pid 9630:tid 9641] [client 4.233.64.129:63754] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aSSYDCrSgUgPGkizt2pxgwAAAEk"]
[Tue Nov 25 01:38:22.913838 2025] [:error] [pid 48599:tid 48617] [client 4.233.64.129:63808] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aSSYDpzvu6PDJiRKE3J3gAAAAY4"]
[Tue Nov 25 01:38:24.686734 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:52036] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aSSYEJzvu6PDJiRKE3J3gwAAAZA"]
[Tue Nov 25 01:38:26.410497 2025] [:error] [pid 48599:tid 48615] [client 4.233.64.129:52037] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aSSYEpzvu6PDJiRKE3J3hQAAAYw"]
[Tue Nov 25 01:38:29.503821 2025] [:error] [pid 16549:tid 16577] [client 4.233.64.129:46751] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/naxc.php"] [unique_id "aSSYFaeWW19A99PUw_eI5AAAAVg"]
[Tue Nov 25 01:39:18.323033 2025] [:error] [pid 49900:tid 49922] [client 4.233.64.129:63863] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsjlrria.php"] [unique_id "aSSYRjCyPLrvg06aorl79AAAABQ"]
[Tue Nov 25 01:39:20.048630 2025] [:error] [pid 48688:tid 48706] [client 4.233.64.129:63768] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsjlrria.php"] [unique_id "aSSYSBm2q1FkzLam7A34EQAAAk4"]
[Tue Nov 25 01:39:23.173821 2025] [:error] [pid 49900:tid 49919] [client 4.233.64.129:51265] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsjlrria.php"] [unique_id "aSSYSzCyPLrvg06aorl7_QAAABE"]
[Tue Nov 25 01:39:24.847340 2025] [:error] [pid 16441:tid 16448] [client 4.233.64.129:51275] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rsjlrria.php"] [unique_id "aSSYTIq_bc5MOa9HflnifwAAAIQ"]
[Tue Nov 25 01:39:30.340077 2025] [:error] [pid 48688:tid 48713] [client 4.233.64.129:63845] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSSYUhm2q1FkzLam7A34GQAAAlU"]
[Tue Nov 25 01:39:40.044932 2025] [:error] [pid 16549:tid 16563] [client 4.233.64.129:52056] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "aSSYXKeWW19A99PUw_eJSAAAAUs"]
[Tue Nov 25 01:39:42.916123 2025] [:error] [pid 48688:tid 48716] [client 4.233.64.129:63850] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "aSSYXhm2q1FkzLam7A34IQAAAlg"]
[Tue Nov 25 01:39:45.818915 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:63815] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/gec.php"] [unique_id "aSSYYYq_bc5MOa9HflnimAAAAJI"]
[Tue Nov 25 01:39:49.578930 2025] [:error] [pid 16441:tid 16450] [client 4.233.64.129:63806] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/gec.php"] [unique_id "aSSYZYq_bc5MOa9HflnisAAAAIY"]
[Tue Nov 25 01:39:53.220340 2025] [:error] [pid 49900:tid 49920] [client 4.233.64.129:63811] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/gec.php"] [unique_id "aSSYaTCyPLrvg06aorl8MQAAABI"]
[Tue Nov 25 01:39:55.815949 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:63824] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/gec.php"] [unique_id "aSSYa_qZbniwaNwL8Xku-AAAAQo"]
[Tue Nov 25 01:40:01.057756 2025] [:error] [pid 9630:tid 9645] [client 4.233.64.129:52060] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nfu.php"] [unique_id "aSSYcSrSgUgPGkizt2pyAAAAAE0"]
[Tue Nov 25 01:40:01.949681 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:52089] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nfu.php"] [unique_id "aSSYcYq_bc5MOa9HflniuAAAAI4"]
[Tue Nov 25 01:40:05.882007 2025] [proxy_fcgi:error] [pid 48688:tid 48694] [client 4.233.64.129:63851] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:40:06.374332 2025] [proxy_fcgi:error] [pid 48688:tid 48692] [client 4.233.64.129:63851] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:40:06.620057 2025] [proxy_fcgi:error] [pid 48688:tid 48714] [client 4.233.64.129:63851] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:40:06.879324 2025] [proxy_fcgi:error] [pid 48688:tid 48713] [client 4.233.64.129:63851] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:40:07.122531 2025] [proxy_fcgi:error] [pid 48688:tid 48704] [client 4.233.64.129:63851] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:40:07.359462 2025] [:error] [pid 48688:tid 48715] [client 4.233.64.129:63851] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aSSYdxm2q1FkzLam7A34OwAAAlc"]
[Tue Nov 25 01:40:08.094486 2025] [:error] [pid 48601:tid 48680] [client 4.233.64.129:63812] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aSSYeIMM4MaVTk74-AYUOQAAAhc"]
[Tue Nov 25 01:40:14.515974 2025] [:error] [pid 49900:tid 49906] [client 4.233.64.129:51277] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aSSYfjCyPLrvg06aorl8PgAAAAQ"]
[Tue Nov 25 01:40:16.598303 2025] [:error] [pid 49900:tid 49904] [client 4.233.64.129:63791] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aSSYgDCyPLrvg06aorl8QwAAAAI"]
[Tue Nov 25 01:40:21.784515 2025] [:error] [pid 48599:tid 48625] [client 4.233.64.129:63751] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSSYhZzvu6PDJiRKE3J3zQAAAZY"]
[Tue Nov 25 01:40:24.288725 2025] [:error] [pid 49900:tid 49923] [client 4.233.64.129:52033] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSSYiDCyPLrvg06aorl8SQAAABU"]
[Tue Nov 25 01:40:25.920180 2025] [:error] [pid 16549:tid 16577] [client 4.233.64.129:63870] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSSYiaeWW19A99PUw_eJZQAAAVg"]
[Tue Nov 25 01:40:26.783423 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:63855] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSSYioq_bc5MOa9Hflni6QAAAJU"]
[Tue Nov 25 01:40:29.372303 2025] [:error] [pid 48688:tid 48692] [client 4.233.64.129:63757] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/as.php"] [unique_id "aSSYjRm2q1FkzLam7A34XAAAAkA"]
[Tue Nov 25 01:40:35.544849 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:63777] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/as.php"] [unique_id "aSSYk4MM4MaVTk74-AYUXwAAAgk"]
[Tue Nov 25 01:40:36.930764 2025] [:error] [pid 16516:tid 16536] [client 4.233.64.129:51312] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/as.php"] [unique_id "aSSYlPqZbniwaNwL8XkvDQAAARE"]
[Tue Nov 25 01:40:39.475315 2025] [:error] [pid 48601:tid 48657] [client 4.233.64.129:63800] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/as.php"] [unique_id "aSSYl4MM4MaVTk74-AYUYAAAAgA"]
[Tue Nov 25 01:40:42.794519 2025] [:error] [pid 48600:tid 48632] [client 4.233.64.129:52077] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/product.php"] [unique_id "aSSYmvtOzSUAQvWVjBfBZwAAAcI"]
[Tue Nov 25 01:40:47.029825 2025] [:error] [pid 9630:tid 9643] [client 4.233.64.129:63759] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/product.php"] [unique_id "aSSYnyrSgUgPGkizt2pyKQAAAEs"]
[Tue Nov 25 01:41:46.762917 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:63796] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aSSY2oMM4MaVTk74-AYUjAAAAhI"]
[Tue Nov 25 01:41:50.128368 2025] [:error] [pid 16441:tid 16466] [client 4.233.64.129:63867] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aSSY3oq_bc5MOa9HflnjXgAAAJY"]
[Tue Nov 25 01:41:59.567720 2025] [:error] [pid 16593:tid 16601] [client 4.233.64.129:63752] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/20.php"] [unique_id "aSSY5xVGznHBJI2LKpSOXAAAAoY"]
[Tue Nov 25 01:42:09.025230 2025] [:error] [pid 16441:tid 16447] [client 4.233.64.129:63789] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/20.php"] [unique_id "aSSY8Yq_bc5MOa9HflnjaAAAAIM"]
[Tue Nov 25 01:42:10.271483 2025] [:error] [pid 16441:tid 16463] [client 4.233.64.129:63780] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/20.php"] [unique_id "aSSY8oq_bc5MOa9HflnjbQAAAJM"]
[Tue Nov 25 01:42:12.002792 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:51282] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/20.php"] [unique_id "aSSY9Iq_bc5MOa9HflnjcQAAAJE"]
[Tue Nov 25 01:42:14.901234 2025] [proxy_fcgi:error] [pid 48601:tid 48665] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:15.197001 2025] [proxy_fcgi:error] [pid 48601:tid 48667] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:15.437921 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:15.930795 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:16.171411 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:16.430169 2025] [proxy_fcgi:error] [pid 48601:tid 48670] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:16.671324 2025] [proxy_fcgi:error] [pid 48601:tid 48681] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:16.928380 2025] [proxy_fcgi:error] [pid 48601:tid 48675] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:17.169514 2025] [proxy_fcgi:error] [pid 48601:tid 48679] [client 4.233.64.129:52045] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:42:18.317761 2025] [:error] [pid 48601:tid 48665] [client 4.233.64.129:52045] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-22.php"] [unique_id "aSSY-oMM4MaVTk74-AYU2wAAAgg"]
[Tue Nov 25 01:42:20.310982 2025] [:error] [pid 9630:tid 9644] [client 4.233.64.129:63801] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-22.php"] [unique_id "aSSY_CrSgUgPGkizt2pyewAAAEw"]
[Tue Nov 25 01:42:22.387208 2025] [:error] [pid 48601:tid 48670] [client 4.233.64.129:63762] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-22.php"] [unique_id "aSSY_oMM4MaVTk74-AYU4gAAAg0"]
[Tue Nov 25 01:42:24.974031 2025] [:error] [pid 16441:tid 16446] [client 4.233.64.129:63871] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-22.php"] [unique_id "aSSZAIq_bc5MOa9HflnjiQAAAII"]
[Tue Nov 25 01:42:26.513788 2025] [:error] [pid 16593:tid 16609] [client 4.233.64.129:63764] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aSSZAhVGznHBJI2LKpSOYwAAAo4"]
[Tue Nov 25 01:42:27.603059 2025] [:error] [pid 16441:tid 16457] [client 4.233.64.129:63770] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aSSZA4q_bc5MOa9HflnjkAAAAI0"]
[Tue Nov 25 01:42:29.098337 2025] [:error] [pid 16441:tid 16455] [client 4.233.64.129:51268] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aSSZBYq_bc5MOa9HflnjkgAAAIs"]
[Tue Nov 25 01:42:51.804233 2025] [:error] [pid 16516:tid 16533] [client 4.233.64.129:63767] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system_log.php"] [unique_id "aSSZG_qZbniwaNwL8XkvPAAAAQ4"]
[Tue Nov 25 01:42:53.085269 2025] [:error] [pid 16593:tid 16611] [client 4.233.64.129:63790] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system_log.php"] [unique_id "aSSZHRVGznHBJI2LKpSOcQAAApA"]
[Tue Nov 25 01:42:58.032373 2025] [:error] [pid 16549:tid 16569] [client 4.233.64.129:52049] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aSSZIqeWW19A99PUw_eJngAAAVE"]
[Tue Nov 25 01:43:01.559355 2025] [:error] [pid 16516:tid 16532] [client 4.233.64.129:51285] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aSSZJfqZbniwaNwL8XkvQQAAAQ0"]
[Tue Nov 25 01:43:02.730478 2025] [:error] [pid 9630:tid 9650] [client 4.233.64.129:46775] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aSSZJirSgUgPGkizt2pymwAAAFI"]
[Tue Nov 25 01:43:04.243007 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:63756] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aSSZKIq_bc5MOa9HflnjvAAAAJU"]
[Tue Nov 25 01:43:05.774283 2025] [:error] [pid 9630:tid 9656] [client 4.233.64.129:63749] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aSSZKSrSgUgPGkizt2pypQAAAFg"]
[Tue Nov 25 01:43:06.527921 2025] [:error] [pid 48599:tid 48608] [client 4.233.64.129:51279] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aSSZKpzvu6PDJiRKE3J4TAAAAYU"]
[Tue Nov 25 01:43:07.891458 2025] [:error] [pid 9630:tid 9641] [client 4.233.64.129:63794] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aSSZKyrSgUgPGkizt2pytAAAAEk"]
[Tue Nov 25 01:43:10.241891 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:51283] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aSSZLoq_bc5MOa9HflnjygAAAJI"]
[Tue Nov 25 01:43:12.238815 2025] [:error] [pid 48600:tid 48650] [client 4.233.64.129:63786] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aSSZMPtOzSUAQvWVjBfByAAAAdQ"]
[Tue Nov 25 01:43:14.944107 2025] [:error] [pid 16441:tid 16450] [client 4.233.64.129:63778] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aSSZMoq_bc5MOa9Hflnj0QAAAIY"]
[Tue Nov 25 01:43:23.243780 2025] [proxy_fcgi:error] [pid 49900:tid 49920] [client 4.233.64.129:63779] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:43:23.710420 2025] [proxy_fcgi:error] [pid 49900:tid 49916] [client 4.233.64.129:63779] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:43:23.970748 2025] [:error] [pid 49900:tid 49911] [client 4.233.64.129:63779] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aSSZOzCyPLrvg06aorl8ugAAAAk"]
[Tue Nov 25 01:43:26.324156 2025] [:error] [pid 16441:tid 16450] [client 4.233.64.129:52062] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aSSZPoq_bc5MOa9Hflnj3gAAAIY"]
[Tue Nov 25 01:43:28.533769 2025] [:error] [pid 9630:tid 9653] [client 4.233.64.129:63837] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aSSZQCrSgUgPGkizt2py5AAAAFU"]
[Tue Nov 25 01:43:30.862927 2025] [:error] [pid 49900:tid 49918] [client 4.233.64.129:51300] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aSSZQjCyPLrvg06aorl8vAAAABA"]
[Tue Nov 25 01:43:33.292425 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:51264] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aSSZRZzvu6PDJiRKE3J4YAAAAZA"]
[Tue Nov 25 01:43:42.263274 2025] [:error] [pid 16593:tid 16612] [client 4.233.64.129:63863] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aSSZThVGznHBJI2LKpSOgwAAApE"]
[Tue Nov 25 01:43:43.814472 2025] [:error] [pid 48688:tid 48707] [client 4.233.64.129:63816] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aSSZTxm2q1FkzLam7A348wAAAk8"]
[Tue Nov 25 01:43:48.036510 2025] [:error] [pid 49900:tid 49914] [client 4.233.64.129:52053] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aSSZVDCyPLrvg06aorl8xAAAAAw"]
[Tue Nov 25 01:43:51.623704 2025] [:error] [pid 16549:tid 16571] [client 4.233.64.129:52036] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aSSZV6eWW19A99PUw_eJxwAAAVI"]
[Tue Nov 25 01:43:54.122314 2025] [:error] [pid 9630:tid 9633] [client 4.233.64.129:46727] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aSSZWirSgUgPGkizt2pzCgAAAEE"]
[Tue Nov 25 01:43:56.815875 2025] [:error] [pid 16441:tid 16453] [client 4.233.64.129:52079] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aSSZXIq_bc5MOa9Hflnj9gAAAIk"]
[Tue Nov 25 01:44:27.267166 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 4.233.64.129:52061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:44:27.612655 2025] [proxy_fcgi:error] [pid 16441:tid 16454] [client 4.233.64.129:52061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:44:27.863481 2025] [proxy_fcgi:error] [pid 16441:tid 16464] [client 4.233.64.129:52061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:44:28.214930 2025] [proxy_fcgi:error] [pid 16441:tid 16452] [client 4.233.64.129:52061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:44:28.461920 2025] [proxy_fcgi:error] [pid 16441:tid 16456] [client 4.233.64.129:52061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:44:28.702700 2025] [proxy_fcgi:error] [pid 16441:tid 16447] [client 4.233.64.129:52061] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:44:28.939690 2025] [:error] [pid 16441:tid 16455] [client 4.233.64.129:52061] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSSZfIq_bc5MOa9HflnkJwAAAIs"]
[Tue Nov 25 01:44:30.253786 2025] [:error] [pid 16441:tid 16467] [client 4.233.64.129:63793] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSSZfoq_bc5MOa9HflnkKQAAAJc"]
[Tue Nov 25 01:44:31.741446 2025] [:error] [pid 48600:tid 48649] [client 4.233.64.129:63808] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSSZf_tOzSUAQvWVjBfB4wAAAdM"]
[Tue Nov 25 01:44:41.247077 2025] [:error] [pid 16593:tid 16619] [client 4.233.64.129:63766] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSSZiRVGznHBJI2LKpSOrQAAApg"]
[Tue Nov 25 01:44:43.553225 2025] [:error] [pid 48688:tid 48695] [client 4.233.64.129:48831] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSSZixm2q1FkzLam7A35BwAAAkM"]
[Tue Nov 25 01:44:47.715286 2025] [:error] [pid 48688:tid 48700] [client 4.233.64.129:48808] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aSSZjxm2q1FkzLam7A35DgAAAkg"]
[Tue Nov 25 01:44:48.835878 2025] [:error] [pid 48688:tid 48706] [client 4.233.64.129:48824] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aSSZkBm2q1FkzLam7A35EgAAAk4"]
[Tue Nov 25 01:44:51.180115 2025] [:error] [pid 48601:tid 48679] [client 4.233.64.129:48828] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aSSZk4MM4MaVTk74-AYVTAAAAhY"]
[Tue Nov 25 01:44:55.662033 2025] [:error] [pid 49900:tid 49926] [client 4.233.64.129:48800] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSSZlzCyPLrvg06aorl84wAAABg"]
[Tue Nov 25 01:44:57.491802 2025] [:error] [pid 49900:tid 49923] [client 4.233.64.129:63858] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aSSZmTCyPLrvg06aorl85wAAABU"]
[Tue Nov 25 01:45:03.003323 2025] [:error] [pid 9630:tid 9638] [client 4.233.64.129:63747] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aSSZnyrSgUgPGkizt2pzQwAAAEY"]
[Tue Nov 25 01:45:09.121486 2025] [:error] [pid 16441:tid 16455] [client 4.233.64.129:63745] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aSSZpYq_bc5MOa9HflnkSwAAAIs"]
[Tue Nov 25 01:45:14.128574 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:63844] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aSSZqhm2q1FkzLam7A35JQAAAkE"]
[Tue Nov 25 01:45:16.173155 2025] [:error] [pid 16441:tid 16464] [client 4.233.64.129:63834] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aSSZrIq_bc5MOa9HflnkagAAAJQ"]
[Tue Nov 25 01:45:17.255431 2025] [:error] [pid 16549:tid 16561] [client 4.233.64.129:48807] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aSSZraeWW19A99PUw_eJ_wAAAUk"]
[Tue Nov 25 01:45:20.771049 2025] [:error] [pid 16516:tid 16542] [client 4.233.64.129:51301] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aSSZsPqZbniwaNwL8XkvhQAAARc"]
[Tue Nov 25 01:45:23.529535 2025] [:error] [pid 9630:tid 9651] [client 4.233.64.129:63838] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aSSZsyrSgUgPGkizt2pzZgAAAFM"]
[Tue Nov 25 01:45:25.194107 2025] [:error] [pid 48601:tid 48677] [client 4.233.64.129:63776] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aSSZtYMM4MaVTk74-AYVXwAAAhQ"]
[Tue Nov 25 01:45:26.186066 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:63811] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aSSZtoq_bc5MOa9HflnkbwAAAI8"]
[Tue Nov 25 01:45:30.495372 2025] [proxy_fcgi:error] [pid 48599:tid 48624] [client 4.233.64.129:63765] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:45:30.881231 2025] [proxy_fcgi:error] [pid 48599:tid 48615] [client 4.233.64.129:63765] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:45:31.133291 2025] [proxy_fcgi:error] [pid 48599:tid 48607] [client 4.233.64.129:63765] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:45:32.263435 2025] [:error] [pid 48599:tid 48620] [client 4.233.64.129:63765] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSSZvJzvu6PDJiRKE3J4pQAAAZE"]
[Tue Nov 25 01:45:40.351661 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:48810] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSSZxIMM4MaVTk74-AYVfwAAAgM"]
[Tue Nov 25 01:45:42.022884 2025] [:error] [pid 16593:tid 16595] [client 4.233.64.129:63842] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSSZxhVGznHBJI2LKpSOwAAAAoA"]
[Tue Nov 25 01:45:45.944487 2025] [:error] [pid 16516:tid 16533] [client 4.233.64.129:48802] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSSZyfqZbniwaNwL8XkvoQAAAQ4"]
[Tue Nov 25 01:45:52.858390 2025] [:error] [pid 48600:tid 48648] [client 4.233.64.129:51272] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aSSZ0PtOzSUAQvWVjBfB_QAAAdI"]
[Tue Nov 25 01:46:11.374879 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:48788] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aSSZ44q_bc5MOa9HflnkowAAAJE"]
[Tue Nov 25 01:46:23.576666 2025] [:error] [pid 16593:tid 16614] [client 4.233.64.129:48785] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSZ7xVGznHBJI2LKpSO9AAAApM"]
[Tue Nov 25 01:46:25.272935 2025] [:error] [pid 16441:tid 16451] [client 4.233.64.129:48809] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSZ8Yq_bc5MOa9HflnkuwAAAIc"]
[Tue Nov 25 01:46:27.468488 2025] [:error] [pid 16516:tid 16525] [client 4.233.64.129:48772] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSZ8_qZbniwaNwL8XkvtAAAAQY"]
[Tue Nov 25 01:46:31.291811 2025] [:error] [pid 16593:tid 16599] [client 4.233.64.129:48770] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSZ9xVGznHBJI2LKpSO9gAAAoQ"]
[Tue Nov 25 01:46:34.860361 2025] [proxy_fcgi:error] [pid 16441:tid 16455] [client 4.233.64.129:48769] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:46:35.110403 2025] [:error] [pid 16441:tid 16449] [client 4.233.64.129:48769] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSSZ-4q_bc5MOa9HflnkyQAAAIU"]
[Tue Nov 25 01:46:42.453350 2025] [:error] [pid 16549:tid 16572] [client 4.233.64.129:63862] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSSaAqeWW19A99PUw_eKMgAAAVM"]
[Tue Nov 25 01:46:44.513812 2025] [:error] [pid 49900:tid 49918] [client 4.233.64.129:48783] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSSaBDCyPLrvg06aorl9WQAAABA"]
[Tue Nov 25 01:46:45.805134 2025] [:error] [pid 9630:tid 9656] [client 4.233.64.129:48784] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSSaBSrSgUgPGkizt2pzngAAAFg"]
[Tue Nov 25 01:46:48.185418 2025] [:error] [pid 9630:tid 9633] [client 4.233.64.129:63866] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSSaCCrSgUgPGkizt2pzpAAAAEE"]
[Tue Nov 25 01:46:56.371915 2025] [:error] [pid 16593:tid 16613] [client 4.233.64.129:63859] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSSaEBVGznHBJI2LKpSPMAAAApI"]
[Tue Nov 25 01:46:57.789765 2025] [:error] [pid 49900:tid 49902] [client 4.233.64.129:63829] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSSaETCyPLrvg06aorl9ZwAAAAA"]
[Tue Nov 25 01:47:00.826286 2025] [:error] [pid 48688:tid 48692] [client 4.233.64.129:63826] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSSaFBm2q1FkzLam7A35egAAAkA"]
[Tue Nov 25 01:47:14.621745 2025] [:error] [pid 16593:tid 16616] [client 4.233.64.129:63802] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/marijuana.php"] [unique_id "aSSaIhVGznHBJI2LKpSPQAAAApU"]
[Tue Nov 25 01:47:15.922810 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:63759] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/marijuana.php"] [unique_id "aSSaI4q_bc5MOa9Hflnk6AAAAJU"]
[Tue Nov 25 01:47:17.335077 2025] [:error] [pid 48688:tid 48702] [client 4.233.64.129:52035] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/marijuana.php"] [unique_id "aSSaJRm2q1FkzLam7A35hAAAAko"]
[Tue Nov 25 01:47:18.261959 2025] [:error] [pid 48688:tid 48696] [client 4.233.64.129:51266] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/marijuana.php"] [unique_id "aSSaJhm2q1FkzLam7A35hwAAAkQ"]
[Tue Nov 25 01:47:19.075902 2025] [:error] [pid 48688:tid 48708] [client 4.233.64.129:52063] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSSaJxm2q1FkzLam7A35kgAAAlA"]
[Tue Nov 25 01:47:25.351002 2025] [:error] [pid 48599:tid 48603] [client 4.233.64.129:63871] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSSaLZzvu6PDJiRKE3J5CgAAAYA"]
[Tue Nov 25 01:47:26.791802 2025] [:error] [pid 48600:tid 48637] [client 4.233.64.129:63770] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSSaLvtOzSUAQvWVjBfCHQAAAcc"]
[Tue Nov 25 01:47:28.304631 2025] [:error] [pid 9630:tid 9637] [client 4.233.64.129:63785] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSSaMCrSgUgPGkizt2pz2wAAAEU"]
[Tue Nov 25 01:47:33.825786 2025] [:error] [pid 48601:tid 48679] [client 4.233.64.129:52050] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aSSaNYMM4MaVTk74-AYWBQAAAhY"]
[Tue Nov 25 01:47:38.400797 2025] [:error] [pid 16593:tid 16612] [client 4.233.64.129:63767] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aSSaOhVGznHBJI2LKpSPXgAAApE"]
[Tue Nov 25 01:47:40.183516 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:63868] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aSSaPIMM4MaVTk74-AYWBwAAAgk"]
[Tue Nov 25 01:47:42.437855 2025] [proxy_fcgi:error] [pid 9630:tid 9638] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:42.902167 2025] [proxy_fcgi:error] [pid 9630:tid 9651] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:43.159215 2025] [proxy_fcgi:error] [pid 9630:tid 9647] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:43.528502 2025] [proxy_fcgi:error] [pid 9630:tid 9649] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:43.787587 2025] [proxy_fcgi:error] [pid 9630:tid 9635] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:44.040240 2025] [proxy_fcgi:error] [pid 9630:tid 9643] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:44.333859 2025] [proxy_fcgi:error] [pid 9630:tid 9655] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:44.577346 2025] [proxy_fcgi:error] [pid 9630:tid 9646] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:45.011108 2025] [proxy_fcgi:error] [pid 9630:tid 9642] [client 4.233.64.129:63797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:45.271216 2025] [:error] [pid 9630:tid 9632] [client 4.233.64.129:63797] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSSaQSrSgUgPGkizt2pz8wAAAEA"]
[Tue Nov 25 01:47:47.510436 2025] [:error] [pid 48599:tid 48622] [client 4.233.64.129:63758] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSSaQ5zvu6PDJiRKE3J5IQAAAZM"]
[Tue Nov 25 01:47:49.387067 2025] [:error] [pid 48599:tid 48608] [client 4.233.64.129:63864] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aSSaRZzvu6PDJiRKE3J5IwAAAYU"]
[Tue Nov 25 01:47:51.153606 2025] [proxy_fcgi:error] [pid 48601:tid 48660] [client 4.233.64.129:48823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:51.459984 2025] [proxy_fcgi:error] [pid 48601:tid 48661] [client 4.233.64.129:48823] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:47:51.759054 2025] [:error] [pid 48601:tid 48674] [client 4.233.64.129:48823] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSSaR4MM4MaVTk74-AYWDgAAAhE"]
[Tue Nov 25 01:47:53.063806 2025] [:error] [pid 48688:tid 48700] [client 4.233.64.129:48811] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSSaSRm2q1FkzLam7A35uQAAAkg"]
[Tue Nov 25 01:47:54.042622 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:63861] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSSaShm2q1FkzLam7A35uwAAAkE"]
[Tue Nov 25 01:47:57.203051 2025] [:error] [pid 48688:tid 48707] [client 4.233.64.129:51291] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/system_log.php"] [unique_id "aSSaTRm2q1FkzLam7A35vAAAAk8"]
[Tue Nov 25 01:47:59.388364 2025] [:error] [pid 48601:tid 48665] [client 4.233.64.129:48822] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aSSaT4MM4MaVTk74-AYWDwAAAgg"]
[Tue Nov 25 01:48:00.912020 2025] [:error] [pid 16593:tid 16606] [client 4.233.64.129:48787] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aSSaUBVGznHBJI2LKpSPZwAAAos"]
[Tue Nov 25 01:48:05.732244 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:63860] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aSSaVYMM4MaVTk74-AYWEAAAAhA"]
[Tue Nov 25 01:48:06.718278 2025] [:error] [pid 49900:tid 49918] [client 4.233.64.129:63837] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aSSaVjCyPLrvg06aorl9uwAAABA"]
[Tue Nov 25 01:48:08.661335 2025] [:error] [pid 49900:tid 49915] [client 4.233.64.129:63787] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aSSaWDCyPLrvg06aorl9vQAAAA0"]
[Tue Nov 25 01:48:10.388736 2025] [:error] [pid 48601:tid 48662] [client 4.233.64.129:52062] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aSSaWoMM4MaVTk74-AYWEQAAAgU"]
[Tue Nov 25 01:48:25.019057 2025] [:error] [pid 48600:tid 48640] [client 4.233.64.129:63789] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSSaaftOzSUAQvWVjBfCNwAAAco"]
[Tue Nov 25 01:48:29.694683 2025] [:error] [pid 49900:tid 49918] [client 4.233.64.129:48791] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSSabTCyPLrvg06aorl9xgAAABA"]
[Tue Nov 25 01:48:36.163482 2025] [:error] [pid 48601:tid 48667] [client 4.233.64.129:63800] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSSadIMM4MaVTk74-AYWHgAAAgo"]
[Tue Nov 25 01:48:40.638679 2025] [:error] [pid 9630:tid 9646] [client 4.233.64.129:48830] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSaeCrSgUgPGkizt2p0RwAAAE4"]
[Tue Nov 25 01:48:42.687457 2025] [:error] [pid 48600:tid 48642] [client 4.233.64.129:63854] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSaevtOzSUAQvWVjBfCQAAAAcw"]
[Tue Nov 25 01:48:44.583750 2025] [:error] [pid 48600:tid 48634] [client 4.233.64.129:63852] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSSafPtOzSUAQvWVjBfCQwAAAcQ"]
[Tue Nov 25 01:49:01.191024 2025] [proxy_fcgi:error] [pid 16441:tid 16457] [client 4.233.64.129:63805] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:49:01.681432 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:63805] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSSajYq_bc5MOa9HflnlqgAAAJU"]
[Tue Nov 25 01:49:03.596024 2025] [proxy_fcgi:error] [pid 9630:tid 9655] [client 4.233.64.129:48797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 01:49:03.851211 2025] [proxy_fcgi:error] [pid 9630:tid 9636] [client 4.233.64.129:48797] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 06:30:56.355486 2025] [:error] [pid 14688:tid 14701] [client 182.44.10.67:54429] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSTcoG9vYrBoEsiDniz1XgAAAQs"]
[Tue Nov 25 10:05:27.196181 2025] [:error] [pid 14077:tid 14117] [client 189.37.72.79:17275] [client 189.37.72.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.72.79, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aSUO5xG9n7UHEkwDTyi0AwAAAEc"]
[Tue Nov 25 10:05:27.203818 2025] [proxy_fcgi:error] [pid 14077:tid 14117] [client 189.37.72.79:17275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 12:49:16.471716 2025] [:error] [pid 14078:tid 14153] [client 119.96.24.54:57952] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSU1TNVXYbb0ii_rVoLNIwAAAJA"]
[Tue Nov 25 15:31:14.571940 2025] [proxy_fcgi:error] [pid 28836:tid 29010] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:14.850753 2025] [proxy_fcgi:error] [pid 28836:tid 28965] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:15.386835 2025] [proxy_fcgi:error] [pid 28836:tid 28962] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:15.642823 2025] [proxy_fcgi:error] [pid 28836:tid 28955] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:15.898802 2025] [proxy_fcgi:error] [pid 28836:tid 28967] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:16.429042 2025] [proxy_fcgi:error] [pid 28836:tid 29013] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:16.686461 2025] [proxy_fcgi:error] [pid 28836:tid 29012] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:16.942257 2025] [proxy_fcgi:error] [pid 28836:tid 28962] [client 134.149.17.123:13204] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:31:17.226431 2025] [:error] [pid 28836:tid 28966] [client 134.149.17.123:13204] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aSVbRZwNRsoxcLQGkTeIRgAAAss"]
[Tue Nov 25 15:31:17.829209 2025] [:error] [pid 14078:tid 14161] [client 134.149.17.123:13271] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aSVbRdVXYbb0ii_rVoIBngAAAJg"]
[Tue Nov 25 15:31:18.354095 2025] [:error] [pid 28739:tid 28773] [client 134.149.17.123:13265] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aSVbRhxGpKmlkG4FexREFgAAAgs"]
[Tue Nov 25 15:31:19.016309 2025] [:error] [pid 28739:tid 28778] [client 134.149.17.123:13198] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aSVbRxxGpKmlkG4FexRELQAAAhA"]
[Tue Nov 25 15:31:19.553119 2025] [:error] [pid 28739:tid 28768] [client 134.149.17.123:13190] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htaccess.php"] [unique_id "aSVbRxxGpKmlkG4FexREPAAAAgY"]
[Tue Nov 25 15:31:20.136643 2025] [:error] [pid 14168:tid 14181] [client 134.149.17.123:13272] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htaccess.php"] [unique_id "aSVbSPR-ZDU0QEgAIIsxcwAAAMo"]
[Tue Nov 25 15:31:20.776241 2025] [:error] [pid 14688:tid 14694] [client 134.149.17.123:13302] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htaccess.php"] [unique_id "aSVbSG9vYrBoEsiDniyEuAAAAQQ"]
[Tue Nov 25 15:31:21.357687 2025] [:error] [pid 14077:tid 14129] [client 134.149.17.123:13270] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htaccess.php"] [unique_id "aSVbSRG9n7UHEkwDTygmBwAAAFM"]
[Tue Nov 25 15:31:21.994183 2025] [:error] [pid 28740:tid 28793] [client 134.149.17.123:13264] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/readme.php"] [unique_id "aSVbSVppQCoYxWW6V0U2BQAAAkI"]
[Tue Nov 25 15:31:22.586162 2025] [:error] [pid 28609:tid 28642] [client 134.149.17.123:13260] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/readme.php"] [unique_id "aSVbSiGGdT-nZJVs3x2OAgAAAZg"]
[Tue Nov 25 15:31:23.282819 2025] [:error] [pid 28740:tid 28801] [client 134.149.17.123:13273] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/readme.php"] [unique_id "aSVbS1ppQCoYxWW6V0U2DAAAAko"]
[Tue Nov 25 15:31:23.862764 2025] [:error] [pid 14688:tid 14710] [client 134.149.17.123:13307] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/readme.php"] [unique_id "aSVbS29vYrBoEsiDniyEyAAAARQ"]
[Tue Nov 25 15:31:24.588035 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:13292] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cok.php"] [unique_id "aSVbTNVXYbb0ii_rVoIBsQAAAJc"]
[Tue Nov 25 15:31:25.148186 2025] [:error] [pid 14076:tid 14096] [client 134.149.17.123:13209] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cok.php"] [unique_id "aSVbTXsB4Gz6Qw-pvBvZZgAAAA8"]
[Tue Nov 25 15:31:25.746987 2025] [:error] [pid 28740:tid 28795] [client 134.149.17.123:13294] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cok.php"] [unique_id "aSVbTVppQCoYxWW6V0U2DQAAAkQ"]
[Tue Nov 25 15:31:26.284207 2025] [:error] [pid 28609:tid 28632] [client 134.149.17.123:13202] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cok.php"] [unique_id "aSVbTiGGdT-nZJVs3x2OBwAAAY4"]
[Tue Nov 25 15:31:26.953932 2025] [:error] [pid 14076:tid 14087] [client 134.149.17.123:13295] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x50.php"] [unique_id "aSVbTnsB4Gz6Qw-pvBvZZwAAAAY"]
[Tue Nov 25 15:31:27.562217 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:13290] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x50.php"] [unique_id "aSVbT9NmoaPf6T4-6C0-OgAAA0Q"]
[Tue Nov 25 15:31:28.205113 2025] [:error] [pid 28739:tid 28779] [client 134.149.17.123:13197] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x50.php"] [unique_id "aSVbUBxGpKmlkG4FexREZwAAAhE"]
[Tue Nov 25 15:31:28.925304 2025] [:error] [pid 28842:tid 29017] [client 134.149.17.123:13282] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x50.php"] [unique_id "aSVbUNNmoaPf6T4-6C0-PQAAA1A"]
[Tue Nov 25 15:31:29.559105 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:13287] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aSVbUdVXYbb0ii_rVoIBtwAAAIA"]
[Tue Nov 25 15:31:30.260836 2025] [:error] [pid 28740:tid 28793] [client 134.149.17.123:13256] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aSVbUlppQCoYxWW6V0U2EAAAAkI"]
[Tue Nov 25 15:31:30.920199 2025] [:error] [pid 28740:tid 28794] [client 134.149.17.123:13291] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aSVbUlppQCoYxWW6V0U2EQAAAkM"]
[Tue Nov 25 15:31:31.498956 2025] [:error] [pid 14168:tid 14176] [client 134.149.17.123:13249] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ot.php"] [unique_id "aSVbU_R-ZDU0QEgAIIsxjgAAAMU"]
[Tue Nov 25 15:31:32.151289 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:13195] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fv.php"] [unique_id "aSVbVNVXYbb0ii_rVoIBuAAAAJQ"]
[Tue Nov 25 15:31:32.694847 2025] [:error] [pid 14077:tid 14113] [client 134.149.17.123:13217] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fv.php"] [unique_id "aSVbVBG9n7UHEkwDTygmFgAAAEM"]
[Tue Nov 25 15:31:33.390694 2025] [:error] [pid 14688:tid 14709] [client 134.149.17.123:13253] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fv.php"] [unique_id "aSVbVW9vYrBoEsiDniyE0QAAARM"]
[Tue Nov 25 15:31:34.073694 2025] [:error] [pid 28609:tid 28630] [client 134.149.17.123:13196] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fv.php"] [unique_id "aSVbViGGdT-nZJVs3x2OCQAAAYw"]
[Tue Nov 25 15:31:34.633597 2025] [:error] [pid 28739:tid 28785] [client 134.149.17.123:13186] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aSVbVhxGpKmlkG4FexREbQAAAhc"]
[Tue Nov 25 15:31:35.402189 2025] [:error] [pid 28842:tid 28998] [client 134.149.17.123:13200] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aSVbV9NmoaPf6T4-6C0-RwAAA0g"]
[Tue Nov 25 15:31:36.081798 2025] [:error] [pid 28836:tid 29007] [client 134.149.17.123:13188] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aSVbWJwNRsoxcLQGkTeItAAAAtE"]
[Tue Nov 25 15:31:36.690122 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:13143] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aSVbWNNmoaPf6T4-6C0-SQAAA0Q"]
[Tue Nov 25 15:31:37.249019 2025] [:error] [pid 14168:tid 14184] [client 134.149.17.123:13257] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1w.php"] [unique_id "aSVbWfR-ZDU0QEgAIIsxlQAAAM0"]
[Tue Nov 25 15:31:37.883252 2025] [:error] [pid 28836:tid 28955] [client 134.149.17.123:13276] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1w.php"] [unique_id "aSVbWZwNRsoxcLQGkTeItwAAAsA"]
[Tue Nov 25 15:31:38.619932 2025] [:error] [pid 28609:tid 28629] [client 134.149.17.123:13296] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1w.php"] [unique_id "aSVbWiGGdT-nZJVs3x2OCwAAAYs"]
[Tue Nov 25 15:31:39.349995 2025] [:error] [pid 14688:tid 14706] [client 134.149.17.123:13258] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1w.php"] [unique_id "aSVbW29vYrBoEsiDniyE2QAAARA"]
[Tue Nov 25 15:31:39.906191 2025] [:error] [pid 14688:tid 14696] [client 134.149.17.123:13242] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cafe.php"] [unique_id "aSVbW29vYrBoEsiDniyE2gAAAQY"]
[Tue Nov 25 15:31:40.501414 2025] [:error] [pid 28609:tid 28642] [client 134.149.17.123:13236] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cafe.php"] [unique_id "aSVbXCGGdT-nZJVs3x2ODAAAAZg"]
[Tue Nov 25 15:31:41.157465 2025] [:error] [pid 28740:tid 28800] [client 134.149.17.123:13184] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cafe.php"] [unique_id "aSVbXVppQCoYxWW6V0U2GQAAAkk"]
[Tue Nov 25 15:31:41.846419 2025] [:error] [pid 28739:tid 28765] [client 134.149.17.123:13303] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cafe.php"] [unique_id "aSVbXRxGpKmlkG4FexREewAAAgM"]
[Tue Nov 25 15:31:42.479760 2025] [:error] [pid 14076:tid 14104] [client 134.149.17.123:13241] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww2.php"] [unique_id "aSVbXnsB4Gz6Qw-pvBvZcgAAABc"]
[Tue Nov 25 15:31:43.173378 2025] [:error] [pid 28609:tid 28632] [client 134.149.17.123:13240] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww2.php"] [unique_id "aSVbXyGGdT-nZJVs3x2OEwAAAY4"]
[Tue Nov 25 15:31:43.822775 2025] [:error] [pid 28842:tid 28998] [client 134.149.17.123:13155] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww2.php"] [unique_id "aSVbX9NmoaPf6T4-6C0-WAAAA0g"]
[Tue Nov 25 15:31:44.752769 2025] [:error] [pid 28740:tid 28813] [client 134.149.17.123:13311] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww2.php"] [unique_id "aSVbYFppQCoYxWW6V0U2IgAAAlY"]
[Tue Nov 25 15:31:45.499489 2025] [:error] [pid 28740:tid 28798] [client 134.149.17.123:13246] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSVbYVppQCoYxWW6V0U2JwAAAkc"]
[Tue Nov 25 15:31:46.140159 2025] [:error] [pid 28609:tid 28625] [client 134.149.17.123:13206] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSVbYiGGdT-nZJVs3x2OLgAAAYc"]
[Tue Nov 25 15:31:46.732084 2025] [:error] [pid 14077:tid 14121] [client 134.149.17.123:13251] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSVbYhG9n7UHEkwDTygmLQAAAEs"]
[Tue Nov 25 15:31:47.347480 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:13156] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww3.php"] [unique_id "aSVbYxG9n7UHEkwDTygmMQAAAEU"]
[Tue Nov 25 15:31:47.934478 2025] [:error] [pid 14688:tid 14703] [client 134.149.17.123:13305] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww4.php"] [unique_id "aSVbY29vYrBoEsiDniyFAAAAAQ0"]
[Tue Nov 25 15:31:48.478271 2025] [:error] [pid 28842:tid 29022] [client 134.149.17.123:13221] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww4.php"] [unique_id "aSVbZNNmoaPf6T4-6C0-YwAAA1Q"]
[Tue Nov 25 15:31:49.292585 2025] [:error] [pid 14688:tid 14693] [client 134.149.17.123:13189] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww4.php"] [unique_id "aSVbZW9vYrBoEsiDniyFAgAAAQM"]
[Tue Nov 25 15:31:50.447190 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:13255] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww4.php"] [unique_id "aSVbZtNmoaPf6T4-6C0-ZgAAA0o"]
[Tue Nov 25 15:31:51.187729 2025] [:error] [pid 14688:tid 14706] [client 134.149.17.123:13194] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aSVbZ29vYrBoEsiDniyFCgAAARA"]
[Tue Nov 25 15:31:51.913089 2025] [:error] [pid 28836:tid 29010] [client 134.149.17.123:13304] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aSVbZ5wNRsoxcLQGkTeI1gAAAtQ"]
[Tue Nov 25 15:31:52.672076 2025] [:error] [pid 28609:tid 28635] [client 134.149.17.123:13192] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aSVbaCGGdT-nZJVs3x2OSQAAAZE"]
[Tue Nov 25 15:31:53.271104 2025] [:error] [pid 28836:tid 28961] [client 134.149.17.123:13309] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aSVbaZwNRsoxcLQGkTeI3AAAAsY"]
[Tue Nov 25 15:31:53.856958 2025] [:error] [pid 14078:tid 14145] [client 134.149.17.123:13191] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aSVbadVXYbb0ii_rVoIB4AAAAIg"]
[Tue Nov 25 15:31:54.380309 2025] [:error] [pid 28740:tid 28806] [client 134.149.17.123:13213] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aSVbalppQCoYxWW6V0U2NQAAAk8"]
[Tue Nov 25 15:31:54.968613 2025] [:error] [pid 14076:tid 14102] [client 134.149.17.123:13199] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aSVbansB4Gz6Qw-pvBvZgQAAABU"]
[Tue Nov 25 15:31:55.572084 2025] [:error] [pid 14078:tid 14152] [client 134.149.17.123:13193] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aSVba9VXYbb0ii_rVoIB5QAAAI8"]
[Tue Nov 25 15:31:56.147695 2025] [:error] [pid 28836:tid 28986] [client 134.149.17.123:13210] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aSVbbJwNRsoxcLQGkTeI5gAAAs8"]
[Tue Nov 25 15:31:56.848703 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:13250] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aSVbbJwNRsoxcLQGkTeI7AAAAtA"]
[Tue Nov 25 15:31:57.573750 2025] [:error] [pid 14078:tid 14154] [client 134.149.17.123:13254] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aSVbbdVXYbb0ii_rVoIB6QAAAJE"]
[Tue Nov 25 15:31:58.209126 2025] [:error] [pid 28739:tid 28774] [client 134.149.17.123:13310] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aSVbbhxGpKmlkG4FexREpQAAAgw"]
[Tue Nov 25 15:31:58.759304 2025] [:error] [pid 28739:tid 28765] [client 134.149.17.123:13279] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aSVbbhxGpKmlkG4FexREqAAAAgM"]
[Tue Nov 25 15:31:59.393158 2025] [:error] [pid 28836:tid 28960] [client 134.149.17.123:13141] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aSVbb5wNRsoxcLQGkTeI-QAAAsU"]
[Tue Nov 25 15:31:59.967910 2025] [:error] [pid 28842:tid 29023] [client 134.149.17.123:13243] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aSVbb9NmoaPf6T4-6C0-fgAAA1U"]
[Tue Nov 25 15:32:00.529843 2025] [:error] [pid 14077:tid 14120] [client 134.149.17.123:13214] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aSVbcBG9n7UHEkwDTygmZQAAAEo"]
[Tue Nov 25 15:32:01.139595 2025] [:error] [pid 14688:tid 14708] [client 134.149.17.123:13266] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aSVbcW9vYrBoEsiDniyFPAAAARI"]
[Tue Nov 25 15:32:01.770290 2025] [:error] [pid 28740:tid 28795] [client 134.149.17.123:13120] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aSVbcVppQCoYxWW6V0U2TAAAAkQ"]
[Tue Nov 25 15:32:02.308743 2025] [:error] [pid 28609:tid 28641] [client 134.149.17.123:13162] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aSVbciGGdT-nZJVs3x2OhAAAAZc"]
[Tue Nov 25 15:32:02.872640 2025] [:error] [pid 28739:tid 28782] [client 134.149.17.123:13301] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aSVbchxGpKmlkG4FexRE5wAAAhQ"]
[Tue Nov 25 15:32:03.711093 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:13227] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSVbcxxGpKmlkG4FexRE8QAAAgA"]
[Tue Nov 25 15:32:04.487203 2025] [:error] [pid 14168:tid 14177] [client 134.149.17.123:13185] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSVbdPR-ZDU0QEgAIIsx_wAAAMY"]
[Tue Nov 25 15:32:05.262094 2025] [:error] [pid 28739:tid 28763] [client 134.149.17.123:13285] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSVbdRxGpKmlkG4FexRFCgAAAgE"]
[Tue Nov 25 15:32:06.045056 2025] [:error] [pid 14168:tid 14193] [client 134.149.17.123:13132] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSVbdvR-ZDU0QEgAIIsyCgAAANY"]
[Tue Nov 25 15:32:06.747356 2025] [:error] [pid 28836:tid 28955] [client 134.149.17.123:13137] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSVbdpwNRsoxcLQGkTeJQQAAAsA"]
[Tue Nov 25 15:32:07.339561 2025] [:error] [pid 28740:tid 28815] [client 134.149.17.123:13146] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSVbd1ppQCoYxWW6V0U2hwAAAlg"]
[Tue Nov 25 15:32:08.090971 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:13239] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSVbeJwNRsoxcLQGkTeJWgAAAtY"]
[Tue Nov 25 15:32:08.667851 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:13138] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSVbeCGGdT-nZJVs3x2OzAAAAY8"]
[Tue Nov 25 15:32:09.273956 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:13208] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aSVbeRxGpKmlkG4FexRFNwAAAhU"]
[Tue Nov 25 15:32:10.066991 2025] [:error] [pid 14168:tid 14181] [client 134.149.17.123:13278] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aSVbevR-ZDU0QEgAIIsyMwAAAMo"]
[Tue Nov 25 15:32:10.729668 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:13274] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aSVbetNmoaPf6T4-6C0-yQAAA0o"]
[Tue Nov 25 15:32:11.283080 2025] [:error] [pid 28740:tid 28799] [client 134.149.17.123:13308] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aSVbe1ppQCoYxWW6V0U2owAAAkg"]
[Tue Nov 25 15:32:11.950944 2025] [:error] [pid 14076:tid 14091] [client 134.149.17.123:13300] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aSVbe3sB4Gz6Qw-pvBvZ2wAAAAo"]
[Tue Nov 25 15:32:12.584345 2025] [:error] [pid 28836:tid 28967] [client 134.149.17.123:13299] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aSVbfJwNRsoxcLQGkTeJbAAAAsw"]
[Tue Nov 25 15:32:13.206603 2025] [:error] [pid 28609:tid 28626] [client 134.149.17.123:13225] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aSVbfSGGdT-nZJVs3x2O-wAAAYg"]
[Tue Nov 25 15:32:13.779440 2025] [:error] [pid 28739:tid 28764] [client 134.149.17.123:13232] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aSVbfRxGpKmlkG4FexRFSQAAAgI"]
[Tue Nov 25 15:32:14.425358 2025] [:error] [pid 28739:tid 28770] [client 134.149.17.123:13283] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aSVbfhxGpKmlkG4FexRFTwAAAgg"]
[Tue Nov 25 15:32:15.055768 2025] [:error] [pid 14688:tid 14712] [client 134.149.17.123:13129] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aSVbf29vYrBoEsiDniyFuwAAARY"]
[Tue Nov 25 15:32:15.616215 2025] [:error] [pid 14688:tid 14691] [client 134.149.17.123:13245] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aSVbf29vYrBoEsiDniyFxAAAAQE"]
[Tue Nov 25 15:32:16.337247 2025] [proxy_fcgi:error] [pid 14076:tid 14095] [client 134.149.17.123:13275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:16.604439 2025] [proxy_fcgi:error] [pid 14076:tid 14096] [client 134.149.17.123:13275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:16.860104 2025] [proxy_fcgi:error] [pid 14076:tid 14082] [client 134.149.17.123:13275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:17.164062 2025] [proxy_fcgi:error] [pid 14076:tid 14083] [client 134.149.17.123:13275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:17.429537 2025] [proxy_fcgi:error] [pid 14076:tid 14100] [client 134.149.17.123:13275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:17.687064 2025] [proxy_fcgi:error] [pid 14076:tid 14086] [client 134.149.17.123:13275] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:17.939673 2025] [:error] [pid 14076:tid 14101] [client 134.149.17.123:13275] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSVbgXsB4Gz6Qw-pvBvZ-QAAABQ"]
[Tue Nov 25 15:32:18.585508 2025] [proxy_fcgi:error] [pid 28740:tid 28797] [client 134.149.17.123:13122] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:18.851673 2025] [proxy_fcgi:error] [pid 28740:tid 28803] [client 134.149.17.123:13122] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:19.108562 2025] [proxy_fcgi:error] [pid 28740:tid 28793] [client 134.149.17.123:13122] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:19.418939 2025] [proxy_fcgi:error] [pid 28740:tid 28791] [client 134.149.17.123:13122] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:19.675303 2025] [proxy_fcgi:error] [pid 28740:tid 28802] [client 134.149.17.123:13122] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:32:19.933775 2025] [:error] [pid 28740:tid 28814] [client 134.149.17.123:13122] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSVbg1ppQCoYxWW6V0U23QAAAlc"]
[Tue Nov 25 15:32:20.487377 2025] [:error] [pid 28609:tid 28637] [client 134.149.17.123:13297] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSVbhCGGdT-nZJVs3x2PBgAAAZM"]
[Tue Nov 25 15:32:21.077415 2025] [:error] [pid 14688:tid 14700] [client 134.149.17.123:13203] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSVbhW9vYrBoEsiDniyFxgAAAQo"]
[Tue Nov 25 15:32:21.628760 2025] [:error] [pid 28842:tid 28990] [client 134.149.17.123:13220] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aSVbhdNmoaPf6T4-6C0--wAAA0A"]
[Tue Nov 25 15:32:22.246240 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:13136] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aSVbhlppQCoYxWW6V0U24AAAAkY"]
[Tue Nov 25 15:32:22.857281 2025] [:error] [pid 28739:tid 28764] [client 134.149.17.123:13218] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aSVbhhxGpKmlkG4FexRFUwAAAgI"]
[Tue Nov 25 15:32:23.372951 2025] [:error] [pid 14168:tid 14195] [client 134.149.17.123:13286] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aSVbh_R-ZDU0QEgAIIsycwAAANg"]
[Tue Nov 25 15:32:24.047584 2025] [:error] [pid 28836:tid 28967] [client 134.149.17.123:13147] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aSVbiJwNRsoxcLQGkTeJlgAAAsw"]
[Tue Nov 25 15:32:24.722768 2025] [:error] [pid 28740:tid 28793] [client 134.149.17.123:13154] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbiFppQCoYxWW6V0U3AAAAAkI"]
[Tue Nov 25 15:32:25.250843 2025] [:error] [pid 28739:tid 28773] [client 134.149.17.123:13261] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbiRxGpKmlkG4FexRFXAAAAgs"]
[Tue Nov 25 15:32:25.821808 2025] [:error] [pid 28842:tid 29020] [client 134.149.17.123:13201] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbidNmoaPf6T4-6C0_CgAAA1I"]
[Tue Nov 25 15:32:26.382670 2025] [:error] [pid 28842:tid 28991] [client 134.149.17.123:13167] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbitNmoaPf6T4-6C0_DgAAA0E"]
[Tue Nov 25 15:32:26.978077 2025] [:error] [pid 14078:tid 14145] [client 134.149.17.123:13247] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aSVbitVXYbb0ii_rVoICYAAAAIg"]
[Tue Nov 25 15:32:27.642080 2025] [:error] [pid 14688:tid 14696] [client 134.149.17.123:13244] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aSVbi29vYrBoEsiDniyF9gAAAQY"]
[Tue Nov 25 15:32:28.335118 2025] [:error] [pid 28842:tid 29021] [client 134.149.17.123:13288] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aSVbjNNmoaPf6T4-6C0_HQAAA1M"]
[Tue Nov 25 15:32:29.017103 2025] [:error] [pid 28609:tid 28639] [client 134.149.17.123:13063] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aSVbjSGGdT-nZJVs3x2PDgAAAZU"]
[Tue Nov 25 15:32:29.596313 2025] [:error] [pid 28609:tid 28642] [client 134.149.17.123:13177] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aSVbjSGGdT-nZJVs3x2PDwAAAZg"]
[Tue Nov 25 15:32:30.166896 2025] [:error] [pid 14076:tid 14090] [client 134.149.17.123:13298] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aSVbjnsB4Gz6Qw-pvBvaGAAAAAk"]
[Tue Nov 25 15:32:30.824266 2025] [:error] [pid 28609:tid 28629] [client 134.149.17.123:13212] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aSVbjiGGdT-nZJVs3x2PFgAAAYs"]
[Tue Nov 25 15:32:31.415242 2025] [:error] [pid 28740:tid 28796] [client 134.149.17.123:13237] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aSVbj1ppQCoYxWW6V0U3MAAAAkU"]
[Tue Nov 25 15:32:32.036170 2025] [:error] [pid 14168:tid 14184] [client 134.149.17.123:13211] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aSVbkPR-ZDU0QEgAIIsylQAAAM0"]
[Tue Nov 25 15:32:32.591259 2025] [:error] [pid 28842:tid 28992] [client 134.149.17.123:13233] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aSVbkNNmoaPf6T4-6C0_MgAAA0I"]
[Tue Nov 25 15:32:33.119031 2025] [:error] [pid 28739:tid 28783] [client 134.149.17.123:13130] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aSVbkRxGpKmlkG4FexRFdgAAAhU"]
[Tue Nov 25 15:32:33.735316 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:13234] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aSVbkZwNRsoxcLQGkTeJsQAAAtY"]
[Tue Nov 25 15:32:34.386140 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:13134] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSVbktNmoaPf6T4-6C0_PAAAA0Q"]
[Tue Nov 25 15:32:35.018427 2025] [:error] [pid 14077:tid 14119] [client 134.149.17.123:13153] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSVbkxG9n7UHEkwDTygnCAAAAEk"]
[Tue Nov 25 15:32:35.580329 2025] [:error] [pid 28609:tid 28640] [client 134.149.17.123:13123] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSVbkyGGdT-nZJVs3x2PLAAAAZY"]
[Tue Nov 25 15:32:36.261776 2025] [:error] [pid 14077:tid 14112] [client 134.149.17.123:13067] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aSVblBG9n7UHEkwDTygnFQAAAEI"]
[Tue Nov 25 15:32:36.861441 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:13060] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSVblBG9n7UHEkwDTygnGgAAAEc"]
[Tue Nov 25 15:32:37.416752 2025] [:error] [pid 28842:tid 29026] [client 134.149.17.123:13252] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSVbldNmoaPf6T4-6C0_TgAAA1g"]
[Tue Nov 25 15:32:37.996761 2025] [:error] [pid 28740:tid 28814] [client 134.149.17.123:13149] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSVblVppQCoYxWW6V0U3QwAAAlc"]
[Tue Nov 25 15:32:38.523126 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:13216] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aSVbltVXYbb0ii_rVoICcQAAAIA"]
[Tue Nov 25 15:32:39.179625 2025] [:error] [pid 28740:tid 28796] [client 134.149.17.123:13207] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSVbl1ppQCoYxWW6V0U3SAAAAkU"]
[Tue Nov 25 15:32:39.761420 2025] [:error] [pid 14168:tid 14183] [client 134.149.17.123:13231] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSVbl_R-ZDU0QEgAIIsyrgAAAMw"]
[Tue Nov 25 15:32:40.343301 2025] [:error] [pid 28740:tid 28806] [client 134.149.17.123:13219] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSVbmFppQCoYxWW6V0U3SwAAAk8"]
[Tue Nov 25 15:32:40.897033 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:13263] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSVbmNVXYbb0ii_rVoICfgAAAIA"]
[Tue Nov 25 15:32:41.444350 2025] [:error] [pid 14168:tid 14175] [client 134.149.17.123:13121] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aSVbmfR-ZDU0QEgAIIsytQAAAMQ"]
[Tue Nov 25 15:32:41.995421 2025] [:error] [pid 28740:tid 28806] [client 134.149.17.123:13258] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aSVbmVppQCoYxWW6V0U3WQAAAk8"]
[Tue Nov 25 15:32:42.526229 2025] [:error] [pid 28609:tid 28618] [client 134.149.17.123:13170] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aSVbmiGGdT-nZJVs3x2PLwAAAYA"]
[Tue Nov 25 15:32:43.104392 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:13306] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aSVbm1ppQCoYxWW6V0U3XwAAAkY"]
[Tue Nov 25 15:32:43.639871 2025] [:error] [pid 14168:tid 14173] [client 134.149.17.123:13161] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aSVbm_R-ZDU0QEgAIIsyvwAAAMI"]
[Tue Nov 25 15:32:44.240187 2025] [:error] [pid 28836:tid 28957] [client 134.149.17.123:13119] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aSVbnJwNRsoxcLQGkTeJuQAAAsI"]
[Tue Nov 25 15:32:44.764723 2025] [:error] [pid 28740:tid 28802] [client 134.149.17.123:13176] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aSVbnFppQCoYxWW6V0U3YwAAAks"]
[Tue Nov 25 15:32:45.575265 2025] [:error] [pid 28836:tid 28969] [client 134.149.17.123:13222] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aSVbnZwNRsoxcLQGkTeJuwAAAs4"]
[Tue Nov 25 15:32:46.194702 2025] [:error] [pid 14168:tid 14183] [client 134.149.17.123:13224] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbnvR-ZDU0QEgAIIsywAAAAMw"]
[Tue Nov 25 15:32:46.764191 2025] [:error] [pid 14078:tid 14141] [client 134.149.17.123:12997] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbntVXYbb0ii_rVoICgQAAAIQ"]
[Tue Nov 25 15:32:47.309268 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:13235] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbn9VXYbb0ii_rVoICggAAAJQ"]
[Tue Nov 25 15:32:47.909874 2025] [:error] [pid 28836:tid 28963] [client 134.149.17.123:13172] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aSVbn5wNRsoxcLQGkTeJvQAAAsg"]
[Tue Nov 25 15:32:48.462228 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:13181] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aSVboBG9n7UHEkwDTygnOAAAAFg"]
[Tue Nov 25 15:32:49.044181 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:13160] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aSVboXsB4Gz6Qw-pvBvaTwAAAA4"]
[Tue Nov 25 15:32:49.642173 2025] [:error] [pid 14076:tid 14091] [client 134.149.17.123:13057] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aSVboXsB4Gz6Qw-pvBvaUgAAAAo"]
[Tue Nov 25 15:32:50.287852 2025] [:error] [pid 28740:tid 28813] [client 134.149.17.123:13165] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aSVbolppQCoYxWW6V0U3agAAAlY"]
[Tue Nov 25 15:32:50.988183 2025] [:error] [pid 28609:tid 28624] [client 134.149.17.123:13075] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSVboiGGdT-nZJVs3x2PMgAAAYY"]
[Tue Nov 25 15:32:51.525870 2025] [:error] [pid 14078:tid 14144] [client 134.149.17.123:13289] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSVbo9VXYbb0ii_rVoICiAAAAIc"]
[Tue Nov 25 15:32:52.102071 2025] [:error] [pid 14076:tid 14093] [client 134.149.17.123:13171] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSVbpHsB4Gz6Qw-pvBvaUwAAAAw"]
[Tue Nov 25 15:32:52.759332 2025] [:error] [pid 28740:tid 28808] [client 134.149.17.123:13139] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aSVbpFppQCoYxWW6V0U3bQAAAlE"]
[Tue Nov 25 15:32:53.325609 2025] [:error] [pid 28836:tid 29011] [client 134.149.17.123:13262] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aSVbpZwNRsoxcLQGkTeJwwAAAtU"]
[Tue Nov 25 15:32:53.838125 2025] [:error] [pid 28609:tid 28627] [client 134.149.17.123:13150] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aSVbpSGGdT-nZJVs3x2PMwAAAYk"]
[Tue Nov 25 15:32:54.401733 2025] [:error] [pid 14076:tid 14092] [client 134.149.17.123:13070] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aSVbpnsB4Gz6Qw-pvBvaVQAAAAs"]
[Tue Nov 25 15:32:54.975999 2025] [:error] [pid 14076:tid 14098] [client 134.149.17.123:13284] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aSVbpnsB4Gz6Qw-pvBvaVgAAABE"]
[Tue Nov 25 15:32:55.519377 2025] [:error] [pid 28842:tid 28992] [client 134.149.17.123:13142] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aSVbp9NmoaPf6T4-6C0_ZgAAA0I"]
[Tue Nov 25 15:32:56.065110 2025] [:error] [pid 28836:tid 28986] [client 134.149.17.123:13151] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aSVbqJwNRsoxcLQGkTeJyQAAAs8"]
[Tue Nov 25 15:32:56.616897 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:13133] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aSVbqHsB4Gz6Qw-pvBvaWgAAAA4"]
[Tue Nov 25 15:32:57.170423 2025] [:error] [pid 14076:tid 14093] [client 134.149.17.123:13062] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aSVbqXsB4Gz6Qw-pvBvaWwAAAAw"]
[Tue Nov 25 15:32:57.769733 2025] [:error] [pid 14076:tid 14094] [client 134.149.17.123:13080] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aSVbqXsB4Gz6Qw-pvBvaYQAAAA0"]
[Tue Nov 25 15:32:58.542567 2025] [:error] [pid 28740:tid 28804] [client 134.149.17.123:13100] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aSVbqlppQCoYxWW6V0U3iQAAAk0"]
[Tue Nov 25 15:32:59.148791 2025] [:error] [pid 28836:tid 28961] [client 134.149.17.123:13000] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aSVbq5wNRsoxcLQGkTeJ2wAAAsY"]
[Tue Nov 25 15:32:59.764028 2025] [:error] [pid 14168:tid 14195] [client 134.149.17.123:13152] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aSVbq_R-ZDU0QEgAIIsy1wAAANg"]
[Tue Nov 25 15:33:00.317274 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:13081] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSVbrJwNRsoxcLQGkTeJ6gAAAtY"]
[Tue Nov 25 15:33:01.089356 2025] [:error] [pid 14168:tid 14173] [client 134.149.17.123:13125] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSVbrfR-ZDU0QEgAIIsy4QAAAMI"]
[Tue Nov 25 15:33:01.698342 2025] [:error] [pid 14077:tid 14125] [client 134.149.17.123:13092] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSVbrRG9n7UHEkwDTygnWwAAAE8"]
[Tue Nov 25 15:33:02.532132 2025] [:error] [pid 28740:tid 28805] [client 134.149.17.123:13166] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSVbrlppQCoYxWW6V0U3nQAAAk4"]
[Tue Nov 25 15:33:03.106344 2025] [:error] [pid 14168:tid 14181] [client 134.149.17.123:13148] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSVbr_R-ZDU0QEgAIIsy7AAAAMo"]
[Tue Nov 25 15:33:03.665196 2025] [:error] [pid 14076:tid 14094] [client 134.149.17.123:13124] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSVbr3sB4Gz6Qw-pvBvakQAAAA0"]
[Tue Nov 25 15:33:04.314819 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:13111] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSVbsJwNRsoxcLQGkTeKDgAAAtY"]
[Tue Nov 25 15:33:04.895710 2025] [:error] [pid 14077:tid 14119] [client 134.149.17.123:13003] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSVbsBG9n7UHEkwDTygnigAAAEk"]
[Tue Nov 25 15:33:05.618623 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:13127] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSVbsZwNRsoxcLQGkTeKJQAAAsM"]
[Tue Nov 25 15:33:06.358910 2025] [:error] [pid 14076:tid 14095] [client 134.149.17.123:13090] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSVbsnsB4Gz6Qw-pvBvatAAAAA4"]
[Tue Nov 25 15:33:07.064476 2025] [:error] [pid 14168:tid 14192] [client 134.149.17.123:13215] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSVbs_R-ZDU0QEgAIIszCAAAANU"]
[Tue Nov 25 15:33:07.691071 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:13229] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSVbsxxGpKmlkG4FexRF5gAAAgA"]
[Tue Nov 25 15:33:08.324516 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:13064] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVbtBxGpKmlkG4FexRF6wAAAgQ"]
[Tue Nov 25 15:33:08.956417 2025] [:error] [pid 28740:tid 28804] [client 134.149.17.123:13280] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVbtFppQCoYxWW6V0U34QAAAk0"]
[Tue Nov 25 15:33:09.659968 2025] [:error] [pid 14168:tid 14181] [client 134.149.17.123:13228] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVbtfR-ZDU0QEgAIIszHwAAAMo"]
[Tue Nov 25 15:33:10.341903 2025] [:error] [pid 14077:tid 14121] [client 134.149.17.123:13158] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSVbthG9n7UHEkwDTygn1gAAAEs"]
[Tue Nov 25 15:33:11.072954 2025] [:error] [pid 14076:tid 14099] [client 134.149.17.123:13140] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSVbt3sB4Gz6Qw-pvBva6AAAABI"]
[Tue Nov 25 15:33:11.711239 2025] [:error] [pid 14168:tid 14190] [client 134.149.17.123:13073] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSVbt_R-ZDU0QEgAIIszNQAAANM"]
[Tue Nov 25 15:33:12.332238 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:13267] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSVbuBG9n7UHEkwDTygn7gAAAFE"]
[Tue Nov 25 15:33:12.964236 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:13084] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aSVbuNVXYbb0ii_rVoIDGwAAAJc"]
[Tue Nov 25 15:33:13.697507 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:13087] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/fm.php"] [unique_id "aSVbuRG9n7UHEkwDTygoAgAAAFg"]
[Tue Nov 25 15:33:14.438366 2025] [:error] [pid 28842:tid 29017] [client 134.149.17.123:13085] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/fm.php"] [unique_id "aSVbutNmoaPf6T4-6C1AIAAAA1A"]
[Tue Nov 25 15:33:15.017291 2025] [:error] [pid 14078:tid 14139] [client 134.149.17.123:13103] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/fm.php"] [unique_id "aSVbu9VXYbb0ii_rVoIDNQAAAII"]
[Tue Nov 25 15:33:15.653798 2025] [:error] [pid 28740:tid 28795] [client 134.149.17.123:13238] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/fm.php"] [unique_id "aSVbu1ppQCoYxWW6V0U4IQAAAkQ"]
[Tue Nov 25 15:33:16.217390 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:13144] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aSVbvNVXYbb0ii_rVoIDQAAAAIA"]
[Tue Nov 25 15:33:16.964908 2025] [:error] [pid 2987:tid 2993] [client 134.149.17.123:13205] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aSVbvM-djEt-pTzPxnxhUgAAAUQ"]
[Tue Nov 25 15:33:17.719105 2025] [:error] [pid 2987:tid 2996] [client 134.149.17.123:13131] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aSVbvc-djEt-pTzPxnxhVQAAAUc"]
[Tue Nov 25 15:33:18.405226 2025] [:error] [pid 14078:tid 14151] [client 134.149.17.123:13006] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aSVbvtVXYbb0ii_rVoIDTgAAAI4"]
[Tue Nov 25 15:33:18.991148 2025] [:error] [pid 28609:tid 28623] [client 134.149.17.123:13259] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins/Cache/footer.php"] [unique_id "aSVbviGGdT-nZJVs3x2QAgAAAYU"]
[Tue Nov 25 15:33:20.067792 2025] [proxy_fcgi:error] [pid 2987:tid 3000] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:20.374610 2025] [proxy_fcgi:error] [pid 2987:tid 2990] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:21.257455 2025] [proxy_fcgi:error] [pid 2987:tid 3011] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:21.798489 2025] [proxy_fcgi:error] [pid 2987:tid 2993] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:22.055111 2025] [proxy_fcgi:error] [pid 2987:tid 3002] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:22.310644 2025] [proxy_fcgi:error] [pid 2987:tid 3010] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:22.566170 2025] [proxy_fcgi:error] [pid 2987:tid 2996] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:22.824183 2025] [proxy_fcgi:error] [pid 2987:tid 3001] [client 134.149.17.123:13113] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:33:23.077188 2025] [:error] [pid 2987:tid 3005] [client 134.149.17.123:13113] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aSVbw8-djEt-pTzPxnxhaAAAAVA"]
[Tue Nov 25 15:33:23.853195 2025] [:error] [pid 14688:tid 14710] [client 134.149.17.123:13180] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aSVbw29vYrBoEsiDniyGtAAAARQ"]
[Tue Nov 25 15:33:24.787179 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:13079] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aSVbxNVXYbb0ii_rVoIDlAAAAJQ"]
[Tue Nov 25 15:33:25.656082 2025] [:error] [pid 14076:tid 14094] [client 134.149.17.123:13163] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aSVbxXsB4Gz6Qw-pvBvbGgAAAA0"]
[Tue Nov 25 15:33:26.889061 2025] [:error] [pid 14077:tid 14116] [client 134.149.17.123:13173] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aSVbxhG9n7UHEkwDTygoNwAAAEY"]
[Tue Nov 25 15:33:28.310780 2025] [:error] [pid 14168:tid 14193] [client 134.149.17.123:13169] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aSVbyPR-ZDU0QEgAIIszgQAAANY"]
[Tue Nov 25 15:33:29.298834 2025] [:error] [pid 14078:tid 14160] [client 134.149.17.123:13099] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aSVbydVXYbb0ii_rVoIDqAAAAJc"]
[Tue Nov 25 15:33:30.111259 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:13061] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aSVbyhxGpKmlkG4FexRGUAAAAgQ"]
[Tue Nov 25 15:33:30.947103 2025] [:error] [pid 14078:tid 14141] [client 134.149.17.123:13268] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aSVbytVXYbb0ii_rVoIDqgAAAIQ"]
[Tue Nov 25 15:33:31.703662 2025] [:error] [pid 28836:tid 28959] [client 134.149.17.123:13112] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aSVby5wNRsoxcLQGkTeKuwAAAsQ"]
[Tue Nov 25 15:33:32.392167 2025] [:error] [pid 28836:tid 29007] [client 134.149.17.123:12998] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aSVbzJwNRsoxcLQGkTeKvAAAAtE"]
[Tue Nov 25 15:33:33.054201 2025] [:error] [pid 14077:tid 14111] [client 134.149.17.123:13068] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aSVbzRG9n7UHEkwDTygoSwAAAEE"]
[Tue Nov 25 15:33:33.693928 2025] [:error] [pid 14168:tid 14180] [client 134.149.17.123:12996] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aSVbzfR-ZDU0QEgAIIszgwAAAMk"]
[Tue Nov 25 15:33:34.391435 2025] [:error] [pid 28740:tid 28801] [client 134.149.17.123:13135] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aSVbzlppQCoYxWW6V0U4UwAAAko"]
[Tue Nov 25 15:33:35.102316 2025] [:error] [pid 14688:tid 14711] [client 134.149.17.123:13164] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aSVbz29vYrBoEsiDniyGygAAARU"]
[Tue Nov 25 15:33:36.522266 2025] [:error] [pid 14168:tid 14171] [client 134.149.17.123:12994] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aSVb0PR-ZDU0QEgAIIszhgAAAMA"]
[Tue Nov 25 15:33:37.248763 2025] [:error] [pid 28609:tid 28619] [client 134.149.17.123:13226] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSVb0SGGdT-nZJVs3x2QMgAAAYE"]
[Tue Nov 25 15:33:37.888512 2025] [:error] [pid 14168:tid 14186] [client 134.149.17.123:13281] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSVb0fR-ZDU0QEgAIIszjwAAAM8"]
[Tue Nov 25 15:33:38.627283 2025] [:error] [pid 28836:tid 29006] [client 134.149.17.123:13072] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSVb0pwNRsoxcLQGkTeKygAAAtA"]
[Tue Nov 25 15:33:39.403424 2025] [:error] [pid 28739:tid 28770] [client 134.149.17.123:13050] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSVb0xxGpKmlkG4FexRGaQAAAgg"]
[Tue Nov 25 15:33:39.989940 2025] [:error] [pid 2987:tid 2991] [client 134.149.17.123:13157] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aSVb08-djEt-pTzPxnxhgwAAAUI"]
[Tue Nov 25 15:33:40.685438 2025] [:error] [pid 14168:tid 14195] [client 134.149.17.123:13179] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aSVb1PR-ZDU0QEgAIIszlQAAANg"]
[Tue Nov 25 15:33:41.419052 2025] [:error] [pid 14077:tid 14133] [client 134.149.17.123:13116] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aSVb1RG9n7UHEkwDTygoeQAAAFc"]
[Tue Nov 25 15:33:42.012982 2025] [:error] [pid 14077:tid 14118] [client 134.149.17.123:13089] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aSVb1hG9n7UHEkwDTygoegAAAEg"]
[Tue Nov 25 15:33:42.666274 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:13110] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aSVb1tVXYbb0ii_rVoIDywAAAJQ"]
[Tue Nov 25 15:33:43.240588 2025] [:error] [pid 28740:tid 28806] [client 134.149.17.123:13082] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aSVb11ppQCoYxWW6V0U4XwAAAk8"]
[Tue Nov 25 15:33:43.974960 2025] [:error] [pid 28740:tid 28794] [client 134.149.17.123:13011] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aSVb11ppQCoYxWW6V0U4YQAAAkM"]
[Tue Nov 25 15:33:44.614246 2025] [:error] [pid 2987:tid 2994] [client 134.149.17.123:13168] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aSVb2M-djEt-pTzPxnxhhgAAAUU"]
[Tue Nov 25 15:33:45.308531 2025] [:error] [pid 28740:tid 28804] [client 134.149.17.123:13023] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSVb2VppQCoYxWW6V0U4YgAAAk0"]
[Tue Nov 25 15:33:45.872408 2025] [:error] [pid 28842:tid 29022] [client 134.149.17.123:12992] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aSVb2dNmoaPf6T4-6C1AtQAAA1Q"]
[Tue Nov 25 15:33:46.495250 2025] [:error] [pid 14078:tid 14161] [client 134.149.17.123:13025] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aSVb2tVXYbb0ii_rVoID0AAAAJg"]
[Tue Nov 25 15:33:47.071382 2025] [:error] [pid 28842:tid 28993] [client 134.149.17.123:13109] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aSVb29NmoaPf6T4-6C1AuAAAA0M"]
[Tue Nov 25 15:33:48.007997 2025] [:error] [pid 28842:tid 29005] [client 134.149.17.123:13096] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aSVb3NNmoaPf6T4-6C1AvQAAA08"]
[Tue Nov 25 15:33:48.712082 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:13058] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSVb3BG9n7UHEkwDTygohwAAAEc"]
[Tue Nov 25 15:33:49.374687 2025] [:error] [pid 14078:tid 14157] [client 134.149.17.123:13091] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aSVb3dVXYbb0ii_rVoID5AAAAJQ"]
[Tue Nov 25 15:33:50.092419 2025] [:error] [pid 28842:tid 29026] [client 134.149.17.123:13053] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aSVb3tNmoaPf6T4-6C1A0gAAA1g"]
[Tue Nov 25 15:33:50.915173 2025] [:error] [pid 14078:tid 14146] [client 134.149.17.123:13029] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aSVb3tVXYbb0ii_rVoID8wAAAIk"]
[Tue Nov 25 15:33:51.528919 2025] [:error] [pid 28740:tid 28793] [client 134.149.17.123:13065] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aSVb31ppQCoYxWW6V0U4jwAAAkI"]
[Tue Nov 25 15:33:52.388629 2025] [:error] [pid 14168:tid 14185] [client 134.149.17.123:13102] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aSVb4PR-ZDU0QEgAIIsztAAAAM4"]
[Tue Nov 25 15:33:52.956431 2025] [:error] [pid 28836:tid 28968] [client 134.149.17.123:13277] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aSVb4JwNRsoxcLQGkTeK-gAAAs0"]
[Tue Nov 25 15:33:53.570980 2025] [:error] [pid 14076:tid 14093] [client 134.149.17.123:13012] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aSVb4XsB4Gz6Qw-pvBvbYQAAAAw"]
[Tue Nov 25 15:33:54.139836 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:13175] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSVb4hG9n7UHEkwDTygouAAAAFE"]
[Tue Nov 25 15:33:54.738511 2025] [:error] [pid 28740:tid 28796] [client 134.149.17.123:13033] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSVb4lppQCoYxWW6V0U4tAAAAkU"]
[Tue Nov 25 15:33:55.336093 2025] [:error] [pid 14168:tid 14194] [client 134.149.17.123:13293] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSVb4_R-ZDU0QEgAIIszwgAAANc"]
[Tue Nov 25 15:33:55.936335 2025] [:error] [pid 14076:tid 14094] [client 134.149.17.123:13078] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSVb43sB4Gz6Qw-pvBvbaQAAAA0"]
[Tue Nov 25 15:33:56.597958 2025] [:error] [pid 28740:tid 28814] [client 134.149.17.123:13115] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSVb5FppQCoYxWW6V0U4wQAAAlc"]
[Tue Nov 25 15:33:57.335819 2025] [:error] [pid 28740:tid 28795] [client 134.149.17.123:13009] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aSVb5VppQCoYxWW6V0U4xwAAAkQ"]
[Tue Nov 25 15:33:57.881733 2025] [:error] [pid 14076:tid 14083] [client 134.149.17.123:13187] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aSVb5XsB4Gz6Qw-pvBvbcgAAAAI"]
[Tue Nov 25 15:33:58.418940 2025] [:error] [pid 28740:tid 28801] [client 134.149.17.123:13217] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aSVb5lppQCoYxWW6V0U4zwAAAko"]
[Tue Nov 25 15:33:58.951003 2025] [:error] [pid 14168:tid 14193] [client 134.149.17.123:13128] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSVb5vR-ZDU0QEgAIIsz0AAAANY"]
[Tue Nov 25 15:33:59.551431 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:13101] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSVb59VXYbb0ii_rVoIEJwAAAIE"]
[Tue Nov 25 15:34:00.071728 2025] [:error] [pid 28740:tid 28804] [client 134.149.17.123:13178] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSVb6FppQCoYxWW6V0U40gAAAk0"]
[Tue Nov 25 15:34:00.595074 2025] [:error] [pid 28740:tid 28809] [client 134.149.17.123:13014] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSVb6FppQCoYxWW6V0U41AAAAlI"]
[Tue Nov 25 15:34:01.124096 2025] [:error] [pid 28609:tid 28641] [client 134.149.17.123:12940] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSVb6SGGdT-nZJVs3x2QqAAAAZc"]
[Tue Nov 25 15:34:01.668364 2025] [:error] [pid 28842:tid 28997] [client 134.149.17.123:13069] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aSVb6dNmoaPf6T4-6C1BGgAAA0c"]
[Tue Nov 25 15:34:02.239683 2025] [:error] [pid 14077:tid 14113] [client 134.149.17.123:12995] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aSVb6hG9n7UHEkwDTygo2wAAAEM"]
[Tue Nov 25 15:34:02.744895 2025] [:error] [pid 28739:tid 28764] [client 134.149.17.123:13230] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aSVb6hxGpKmlkG4FexRGxgAAAgI"]
[Tue Nov 25 15:34:03.290053 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:13159] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqq.php"] [unique_id "aSVb69NmoaPf6T4-6C1BNwAAA0o"]
[Tue Nov 25 15:34:03.807933 2025] [:error] [pid 14078:tid 14138] [client 134.149.17.123:13001] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqq.php"] [unique_id "aSVb69VXYbb0ii_rVoIETQAAAIE"]
[Tue Nov 25 15:34:04.464765 2025] [:error] [pid 28739:tid 28776] [client 134.149.17.123:13020] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqq.php"] [unique_id "aSVb7BxGpKmlkG4FexRGxwAAAg4"]
[Tue Nov 25 15:34:05.109071 2025] [:error] [pid 14077:tid 14133] [client 134.149.17.123:13038] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqq.php"] [unique_id "aSVb7RG9n7UHEkwDTygo_wAAAFc"]
[Tue Nov 25 15:34:05.656772 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:13002] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSVb7RxGpKmlkG4FexRGzQAAAgQ"]
[Tue Nov 25 15:34:06.298404 2025] [:error] [pid 28609:tid 28627] [client 134.149.17.123:12966] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSVb7iGGdT-nZJVs3x2QtwAAAYk"]
[Tue Nov 25 15:34:06.901110 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:13088] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSVb7tNmoaPf6T4-6C1BTwAAA0o"]
[Tue Nov 25 15:34:07.540578 2025] [:error] [pid 14077:tid 14124] [client 134.149.17.123:13013] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aSVb7xG9n7UHEkwDTygpBwAAAE4"]
[Tue Nov 25 15:34:08.189233 2025] [:error] [pid 28609:tid 28625] [client 134.149.17.123:13056] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aSVb8CGGdT-nZJVs3x2QugAAAYc"]
[Tue Nov 25 15:34:08.771237 2025] [:error] [pid 28842:tid 28997] [client 134.149.17.123:13086] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aSVb8NNmoaPf6T4-6C1BsQAAA0c"]
[Tue Nov 25 15:34:09.404882 2025] [:error] [pid 28836:tid 28958] [client 134.149.17.123:12933] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aSVb8ZwNRsoxcLQGkTeLeAAAAsM"]
[Tue Nov 25 15:34:10.029292 2025] [:error] [pid 28609:tid 28640] [client 134.149.17.123:13105] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aSVb8iGGdT-nZJVs3x2QxQAAAZY"]
[Tue Nov 25 15:34:10.639654 2025] [:error] [pid 2987:tid 2997] [client 134.149.17.123:13016] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSVb8s-djEt-pTzPxnxh8QAAAUg"]
[Tue Nov 25 15:34:11.241220 2025] [:error] [pid 14168:tid 14191] [client 134.149.17.123:13005] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSVb8_R-ZDU0QEgAIIsz6AAAANQ"]
[Tue Nov 25 15:34:12.145687 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:13117] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSVb9BxGpKmlkG4FexRG3gAAAgQ"]
[Tue Nov 25 15:34:12.791800 2025] [:error] [pid 28842:tid 29021] [client 134.149.17.123:13094] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSVb9NNmoaPf6T4-6C1B1gAAA1M"]
[Tue Nov 25 15:34:13.518017 2025] [:error] [pid 14168:tid 14182] [client 134.149.17.123:13037] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/index.php"] [unique_id "aSVb9fR-ZDU0QEgAIIsz7gAAAMs"]
[Tue Nov 25 15:34:14.252294 2025] [:error] [pid 2987:tid 3006] [client 134.149.17.123:12968] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/index.php"] [unique_id "aSVb9s-djEt-pTzPxnxh9gAAAVE"]
[Tue Nov 25 15:34:14.878277 2025] [:error] [pid 14077:tid 14123] [client 134.149.17.123:13007] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/index.php"] [unique_id "aSVb9hG9n7UHEkwDTygpLAAAAE0"]
[Tue Nov 25 15:34:15.459702 2025] [:error] [pid 14168:tid 14187] [client 134.149.17.123:13032] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/index.php"] [unique_id "aSVb9_R-ZDU0QEgAIIsz7wAAANA"]
[Tue Nov 25 15:34:16.012928 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:13098] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aSVb-BG9n7UHEkwDTygpMAAAAFE"]
[Tue Nov 25 15:34:16.566857 2025] [:error] [pid 14077:tid 14118] [client 134.149.17.123:13051] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aSVb-BG9n7UHEkwDTygpMgAAAEg"]
[Tue Nov 25 15:34:17.126446 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:12986] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aSVb-RG9n7UHEkwDTygpMwAAAEU"]
[Tue Nov 25 15:34:17.697971 2025] [:error] [pid 14077:tid 14111] [client 134.149.17.123:13049] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aSVb-RG9n7UHEkwDTygpNQAAAEE"]
[Tue Nov 25 15:34:18.241681 2025] [:error] [pid 14077:tid 14113] [client 134.149.17.123:13026] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSVb-hG9n7UHEkwDTygpOAAAAEM"]
[Tue Nov 25 15:34:18.895129 2025] [:error] [pid 28739:tid 28769] [client 134.149.17.123:12974] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSVb-hxGpKmlkG4FexRG3wAAAgc"]
[Tue Nov 25 15:34:19.555832 2025] [:error] [pid 14077:tid 14124] [client 134.149.17.123:13066] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSVb-xG9n7UHEkwDTygpOwAAAE4"]
[Tue Nov 25 15:34:20.155135 2025] [:error] [pid 28740:tid 28794] [client 134.149.17.123:13145] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aSVb_FppQCoYxWW6V0U5MQAAAkM"]
[Tue Nov 25 15:34:20.768322 2025] [:error] [pid 28842:tid 29000] [client 134.149.17.123:13182] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aSVb_NNmoaPf6T4-6C1B2AAAA0o"]
[Tue Nov 25 15:34:21.373923 2025] [:error] [pid 2987:tid 2994] [client 134.149.17.123:13223] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aSVb_c-djEt-pTzPxnxh-wAAAUU"]
[Tue Nov 25 15:34:22.532355 2025] [:error] [pid 14077:tid 14117] [client 134.149.17.123:12971] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSVb_hG9n7UHEkwDTygpQAAAAEc"]
[Tue Nov 25 15:34:23.625220 2025] [proxy_fcgi:error] [pid 28609:tid 28625] [client 134.149.17.123:13183] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:34:24.673277 2025] [proxy_fcgi:error] [pid 28609:tid 28633] [client 134.149.17.123:13183] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:34:24.928906 2025] [proxy_fcgi:error] [pid 28609:tid 28639] [client 134.149.17.123:13183] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:34:25.185970 2025] [proxy_fcgi:error] [pid 28609:tid 28629] [client 134.149.17.123:13183] AH01071: Got error 'Primary script unknown'
[Tue Nov 25 15:34:25.445349 2025] [:error] [pid 28609:tid 28628] [client 134.149.17.123:13183] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSVcASGGdT-nZJVs3x2Q2AAAAYo"]
[Tue Nov 25 15:34:26.154661 2025] [:error] [pid 28740:tid 28802] [client 134.149.17.123:13126] [client 134.149.17.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSVcAlppQCoYxWW6V0U5OwAAAks"]
[Tue Nov 25 15:34:26.798739 2025] [:error] [pid 28609:tid 28631] [client 134.149.17.123:13017] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aSVcAiGGdT-nZJVs3x2Q2gAAAY0"]
[Tue Nov 25 15:34:27.344813 2025] [:error] [pid 14078:tid 14159] [client 134.149.17.123:13248] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aSVcA9VXYbb0ii_rVoIEagAAAJY"]
[Tue Nov 25 15:34:27.879505 2025] [:error] [pid 28836:tid 28959] [client 134.149.17.123:12934] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aSVcA5wNRsoxcLQGkTeLkAAAAsQ"]
[Tue Nov 25 15:34:28.487480 2025] [:error] [pid 28609:tid 28623] [client 134.149.17.123:13074] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bge.php"] [unique_id "aSVcBCGGdT-nZJVs3x2Q4gAAAYU"]
[Tue Nov 25 15:34:29.047214 2025] [:error] [pid 28842:tid 29002] [client 134.149.17.123:13083] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bge.php"] [unique_id "aSVcBdNmoaPf6T4-6C1B3wAAA0w"]
[Tue Nov 25 15:34:29.669095 2025] [:error] [pid 28842:tid 29018] [client 134.149.17.123:13093] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bge.php"] [unique_id "aSVcBdNmoaPf6T4-6C1B4QAAA1E"]
[Tue Nov 25 15:34:30.219961 2025] [:error] [pid 28842:tid 28996] [client 134.149.17.123:13045] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bge.php"] [unique_id "aSVcBtNmoaPf6T4-6C1B4wAAA0Y"]
[Tue Nov 25 15:34:30.768499 2025] [:error] [pid 28842:tid 28993] [client 134.149.17.123:13077] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ifm.php"] [unique_id "aSVcBtNmoaPf6T4-6C1B5AAAA0M"]
[Tue Nov 25 15:34:31.398723 2025] [:error] [pid 14078:tid 14158] [client 134.149.17.123:12946] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ifm.php"] [unique_id "aSVcB9VXYbb0ii_rVoIEdAAAAJU"]
[Tue Nov 25 15:34:32.234002 2025] [:error] [pid 28836:tid 29014] [client 134.149.17.123:13040] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ifm.php"] [unique_id "aSVcCJwNRsoxcLQGkTeLmAAAAtg"]
[Tue Nov 25 15:34:32.859498 2025] [:error] [pid 28842:tid 29017] [client 134.149.17.123:13223] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ifm.php"] [unique_id "aSVcCNNmoaPf6T4-6C1B6AAAA1A"]
[Tue Nov 25 15:34:33.479986 2025] [:error] [pid 14078:tid 14148] [client 134.149.17.123:13022] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww5.php"] [unique_id "aSVcCdVXYbb0ii_rVoIEdwAAAIs"]
[Tue Nov 25 15:34:34.023128 2025] [:error] [pid 28609:tid 28639] [client 134.149.17.123:13028] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww5.php"] [unique_id "aSVcCiGGdT-nZJVs3x2Q5wAAAZU"]
[Tue Nov 25 15:34:34.909631 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:13031] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww5.php"] [unique_id "aSVcChG9n7UHEkwDTygpTgAAAFg"]
[Tue Nov 25 15:34:35.597058 2025] [:error] [pid 14078:tid 14145] [client 134.149.17.123:13019] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww5.php"] [unique_id "aSVcC9VXYbb0ii_rVoIEewAAAIg"]
[Tue Nov 25 15:34:36.203059 2025] [:error] [pid 28739:tid 28772] [client 134.149.17.123:12963] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aSVcDBxGpKmlkG4FexRG4QAAAgo"]
[Tue Nov 25 15:34:36.833584 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:13041] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aSVcDBG9n7UHEkwDTygpUQAAAFE"]
[Tue Nov 25 15:34:37.538624 2025] [:error] [pid 14077:tid 14133] [client 134.149.17.123:12928] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aSVcDRG9n7UHEkwDTygpUwAAAFc"]
[Tue Nov 25 15:34:38.160589 2025] [:error] [pid 28842:tid 29021] [client 134.149.17.123:13104] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aSVcDtNmoaPf6T4-6C1B7wAAA1M"]
[Tue Nov 25 15:34:38.840477 2025] [:error] [pid 28740:tid 28802] [client 134.149.17.123:12979] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aSVcDlppQCoYxWW6V0U5TAAAAks"]
[Tue Nov 25 15:34:39.503676 2025] [:error] [pid 28740:tid 28796] [client 134.149.17.123:13018] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aSVcD1ppQCoYxWW6V0U5TQAAAkU"]
[Tue Nov 25 15:34:40.192699 2025] [:error] [pid 2987:tid 2999] [client 134.149.17.123:13269] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aSVcEM-djEt-pTzPxnxh_gAAAUo"]
[Tue Nov 25 15:34:40.776439 2025] [:error] [pid 28842:tid 28996] [client 134.149.17.123:13015] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aSVcENNmoaPf6T4-6C1B9QAAA0Y"]
[Tue Nov 25 15:34:41.534192 2025] [:error] [pid 28842:tid 29003] [client 134.149.17.123:12954] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ha.php"] [unique_id "aSVcEdNmoaPf6T4-6C1B9gAAA00"]
[Tue Nov 25 15:34:42.097382 2025] [:error] [pid 14168:tid 14192] [client 134.149.17.123:13118] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ha.php"] [unique_id "aSVcEvR-ZDU0QEgAIIsz8gAAANU"]
[Tue Nov 25 15:34:42.728041 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:12981] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ha.php"] [unique_id "aSVcEtNmoaPf6T4-6C1B9wAAA0Q"]
[Tue Nov 25 15:34:43.335772 2025] [:error] [pid 28609:tid 28623] [client 134.149.17.123:13036] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ha.php"] [unique_id "aSVcEyGGdT-nZJVs3x2Q7AAAAYU"]
[Tue Nov 25 15:34:43.901878 2025] [:error] [pid 14077:tid 14132] [client 134.149.17.123:12931] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/waw.php"] [unique_id "aSVcExG9n7UHEkwDTygpWQAAAFY"]
[Tue Nov 25 15:34:44.494656 2025] [:error] [pid 28842:tid 28995] [client 134.149.17.123:13024] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/waw.php"] [unique_id "aSVcFNNmoaPf6T4-6C1B-gAAA0U"]
[Tue Nov 25 15:34:45.116057 2025] [:error] [pid 14168:tid 14179] [client 134.149.17.123:13048] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/waw.php"] [unique_id "aSVcFfR-ZDU0QEgAIIsz9QAAAMg"]
[Tue Nov 25 15:34:45.856850 2025] [:error] [pid 14168:tid 14174] [client 134.149.17.123:12959] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/waw.php"] [unique_id "aSVcFfR-ZDU0QEgAIIsz-AAAAMM"]
[Tue Nov 25 15:34:46.664644 2025] [:error] [pid 28739:tid 28771] [client 134.149.17.123:13097] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aSVcFhxGpKmlkG4FexRG5wAAAgk"]
[Tue Nov 25 15:34:47.391163 2025] [:error] [pid 28836:tid 28969] [client 134.149.17.123:12886] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aSVcF5wNRsoxcLQGkTeLmwAAAs4"]
[Tue Nov 25 15:34:48.062164 2025] [:error] [pid 28836:tid 29012] [client 134.149.17.123:13059] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aSVcGJwNRsoxcLQGkTeLnAAAAtY"]
[Tue Nov 25 15:34:48.749090 2025] [:error] [pid 28609:tid 28640] [client 134.149.17.123:13008] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gg.php"] [unique_id "aSVcGCGGdT-nZJVs3x2Q7wAAAZY"]
[Tue Nov 25 15:34:49.536655 2025] [:error] [pid 14077:tid 14113] [client 134.149.17.123:12916] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "aSVcGRG9n7UHEkwDTygpXgAAAEM"]
[Tue Nov 25 15:34:50.146256 2025] [:error] [pid 14168:tid 14187] [client 134.149.17.123:13042] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "aSVcGvR-ZDU0QEgAIIsz-wAAANA"]
[Tue Nov 25 15:34:50.706954 2025] [:error] [pid 28842:tid 28994] [client 134.149.17.123:12982] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "aSVcGtNmoaPf6T4-6C1B_wAAA0Q"]
[Tue Nov 25 15:34:51.284198 2025] [:error] [pid 28609:tid 28641] [client 134.149.17.123:12910] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "aSVcGyGGdT-nZJVs3x2Q8QAAAZc"]
[Tue Nov 25 15:34:51.880672 2025] [:error] [pid 14077:tid 14125] [client 134.149.17.123:13043] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "aSVcGxG9n7UHEkwDTygpYgAAAE8"]
[Tue Nov 25 15:34:52.636215 2025] [:error] [pid 28609:tid 28633] [client 134.149.17.123:12943] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "aSVcHCGGdT-nZJVs3x2Q9AAAAY8"]
[Tue Nov 25 15:34:53.233509 2025] [:error] [pid 28609:tid 28626] [client 134.149.17.123:12868] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "aSVcHSGGdT-nZJVs3x2Q-gAAAYg"]
[Tue Nov 25 15:34:53.880751 2025] [:error] [pid 28740:tid 28797] [client 134.149.17.123:13114] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "aSVcHVppQCoYxWW6V0U5UgAAAkY"]
[Tue Nov 25 15:34:54.484435 2025] [:error] [pid 14076:tid 14096] [client 134.149.17.123:13055] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "aSVcHnsB4Gz6Qw-pvBvbxQAAAA8"]
[Tue Nov 25 15:34:55.169868 2025] [:error] [pid 14076:tid 14088] [client 134.149.17.123:12898] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "aSVcH3sB4Gz6Qw-pvBvbxwAAAAc"]
[Tue Nov 25 15:34:55.751692 2025] [:error] [pid 14076:tid 14101] [client 134.149.17.123:12948] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "aSVcH3sB4Gz6Qw-pvBvbyQAAABQ"]
[Tue Nov 25 15:34:56.277255 2025] [:error] [pid 14076:tid 14093] [client 134.149.17.123:12983] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "aSVcIHsB4Gz6Qw-pvBvbygAAAAw"]
[Tue Nov 25 15:34:56.941386 2025] [:error] [pid 14076:tid 14104] [client 134.149.17.123:12952] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/520.php"] [unique_id "aSVcIHsB4Gz6Qw-pvBvbzwAAABc"]
[Tue Nov 25 15:34:57.589595 2025] [:error] [pid 28740:tid 28803] [client 134.149.17.123:12993] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/520.php"] [unique_id "aSVcIVppQCoYxWW6V0U5UwAAAkw"]
[Tue Nov 25 15:34:58.153655 2025] [:error] [pid 28739:tid 28762] [client 134.149.17.123:12887] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/520.php"] [unique_id "aSVcIhxGpKmlkG4FexRG7AAAAgA"]
[Tue Nov 25 15:34:58.771160 2025] [:error] [pid 28842:tid 28998] [client 134.149.17.123:13095] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/520.php"] [unique_id "aSVcItNmoaPf6T4-6C1CAQAAA0g"]
[Tue Nov 25 15:34:59.384419 2025] [:error] [pid 14076:tid 14102] [client 134.149.17.123:12900] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aSVcI3sB4Gz6Qw-pvBvb0QAAABU"]
[Tue Nov 25 15:35:00.104870 2025] [:error] [pid 14078:tid 14156] [client 134.149.17.123:13004] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aSVcJNVXYbb0ii_rVoIEiQAAAJM"]
[Tue Nov 25 15:35:00.829725 2025] [:error] [pid 28842:tid 29023] [client 134.149.17.123:12867] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aSVcJNNmoaPf6T4-6C1CAwAAA1U"]
[Tue Nov 25 15:35:01.477361 2025] [:error] [pid 28739:tid 28771] [client 134.149.17.123:13021] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aSVcJRxGpKmlkG4FexRG7wAAAgk"]
[Tue Nov 25 15:35:02.253269 2025] [:error] [pid 14077:tid 14127] [client 134.149.17.123:12949] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aSVcJhG9n7UHEkwDTygpaAAAAFE"]
[Tue Nov 25 15:35:02.907008 2025] [:error] [pid 28739:tid 28768] [client 134.149.17.123:12953] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aSVcJhxGpKmlkG4FexRG8AAAAgY"]
[Tue Nov 25 15:35:03.531790 2025] [:error] [pid 28609:tid 28619] [client 134.149.17.123:12815] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aSVcJyGGdT-nZJVs3x2RAQAAAYE"]
[Tue Nov 25 15:35:04.198181 2025] [:error] [pid 28739:tid 28766] [client 134.149.17.123:12938] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aSVcKBxGpKmlkG4FexRG8gAAAgQ"]
[Tue Nov 25 15:35:04.803039 2025] [:error] [pid 14077:tid 14112] [client 134.149.17.123:12939] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aSVcKBG9n7UHEkwDTygpagAAAEI"]
[Tue Nov 25 15:35:05.442099 2025] [:error] [pid 14078:tid 14137] [client 134.149.17.123:13039] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aSVcKdVXYbb0ii_rVoIEkQAAAIA"]
[Tue Nov 25 15:35:06.036219 2025] [:error] [pid 14077:tid 14128] [client 134.149.17.123:13027] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aSVcKhG9n7UHEkwDTygpbQAAAFI"]
[Tue Nov 25 15:35:06.643087 2025] [:error] [pid 14078:tid 14149] [client 134.149.17.123:12879] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aSVcKtVXYbb0ii_rVoIEkwAAAIw"]
[Tue Nov 25 15:35:07.291145 2025] [:error] [pid 28842:tid 28990] [client 134.149.17.123:13174] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aSVcK9NmoaPf6T4-6C1CCQAAA0A"]
[Tue Nov 25 15:35:07.868199 2025] [:error] [pid 28836:tid 28957] [client 134.149.17.123:12877] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aSVcK5wNRsoxcLQGkTeLoAAAAsI"]
[Tue Nov 25 15:35:08.713364 2025] [:error] [pid 14077:tid 14115] [client 134.149.17.123:12944] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aSVcLBG9n7UHEkwDTygpcAAAAEU"]
[Tue Nov 25 15:35:09.537624 2025] [:error] [pid 14077:tid 14134] [client 134.149.17.123:12930] [client 134.149.17.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aSVcLRG9n7UHEkwDTygpcgAAAFg"]
[Tue Nov 25 17:15:26.450255 2025] [:error] [pid 28740:tid 28812] [client 54.173.250.15:42682] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSVzrlppQCoYxWW6V0VTbAAAAlU"]
[Tue Nov 25 17:18:06.032190 2025] [:error] [pid 14078:tid 14138] [client 64.23.244.2:63081] [client 64.23.244.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.23.244.2, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aSV0TtVXYbb0ii_rVoIcdwAAAIE"]
[Tue Nov 25 17:18:06.042873 2025] [proxy_fcgi:error] [pid 14078:tid 14138] [client 64.23.244.2:63081] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 02:04:54.325846 2025] [:error] [pid 14077:tid 14118] [client 125.75.66.97:37441] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSXvxhG9n7UHEkwDTygRmgAAAEg"]
[Wed Nov 26 02:38:55.433647 2025] [:error] [pid 28836:tid 28955] [client 54.173.250.15:55800] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aSX3v5wNRsoxcLQGkTcu5QAAAsA"]
[Wed Nov 26 19:20:10.778245 2025] [:error] [pid 6471:tid 6484] [client 43.166.246.180:45866] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSbiauh3Z9TZLlRuTiON8gAAAIo"]
[Wed Nov 26 21:10:05.848113 2025] [:error] [pid 20733:tid 20747] [client 182.44.12.37:48010] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aSb8LQV9EP2HuRvnH8dssgAAAMw"]
[Wed Nov 26 21:41:34.690407 2025] [:error] [pid 45769:tid 45793] [client 216.126.239.203:43486] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aScDjldG5Eht9c3yy4NBIQAAAdU"]
[Thu Nov 27 00:53:58.093381 2025] [:error] [pid 24826:tid 25121] [client 103.77.107.57:59956] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aScwplEvPXLVl-nh-yLcqAAAAQY"]
[Thu Nov 27 01:14:31.555802 2025] [:error] [pid 25262:tid 25337] [client 131.255.20.238:6895] [client 131.255.20.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.255.20.238, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aSc1d03p81VU3bYILBVBGQAAAhA"]
[Thu Nov 27 01:14:31.568893 2025] [proxy_fcgi:error] [pid 25262:tid 25337] [client 131.255.20.238:6895] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 03:53:54.372741 2025] [:error] [pid 6201:tid 6223] [client 106.119.167.146:51000] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aSda0jkSJeRkIQGTjzwSEwAAABI"]
[Mon Jan 26 00:20:12.643848 2026] [:error] [pid 48919:tid 48972] [client 206.189.233.36:44442] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXZCvDVs1aLFg9jpyYqhUAAAANE"]
[Mon Jan 26 00:20:13.638595 2026] [:error] [pid 48918:tid 48931] [client 206.189.233.36:44470] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/graphql"] [unique_id "aXZCvbFdNV6RkULOt6EWBQAAAIM"]
[Mon Jan 26 00:20:14.270475 2026] [:error] [pid 48920:tid 48991] [client 206.189.233.36:44482] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api"] [unique_id "aXZCvpsnZS3G6U7VdJP-8gAAAQc"]
[Mon Jan 26 00:20:14.897698 2026] [:error] [pid 48918:tid 48936] [client 206.189.233.36:44486] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/graphql"] [unique_id "aXZCvrFdNV6RkULOt6EWDgAAAIg"]
[Mon Jan 26 00:20:15.521286 2026] [:error] [pid 48918:tid 48932] [client 206.189.233.36:42532] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/graphql/api"] [unique_id "aXZCv7FdNV6RkULOt6EWEwAAAIQ"]
[Mon Jan 26 00:20:16.159624 2026] [:error] [pid 48918:tid 48939] [client 206.189.233.36:42534] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/gql"] [unique_id "aXZCwLFdNV6RkULOt6EWGAAAAIs"]
[Mon Jan 26 00:20:17.797658 2026] [:error] [pid 48919:tid 48971] [client 206.189.233.36:42560] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/swagger-ui.html"] [unique_id "aXZCwTVs1aLFg9jpyYqhaAAAANA"]
[Mon Jan 26 00:20:18.783348 2026] [:error] [pid 48918:tid 48933] [client 206.189.233.36:42578] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/swagger/index.html"] [unique_id "aXZCwrFdNV6RkULOt6EWJAAAAIU"]
[Mon Jan 26 00:20:19.798828 2026] [:error] [pid 48918:tid 48929] [client 206.189.233.36:42606] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/swagger/swagger-ui.html"] [unique_id "aXZCw7FdNV6RkULOt6EWLAAAAIE"]
[Mon Jan 26 00:20:20.853520 2026] [:error] [pid 48919:tid 48957] [client 206.189.233.36:42624] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aXZCxDVs1aLFg9jpyYqhcAAAAMI"]
[Mon Jan 26 00:20:21.798087 2026] [:error] [pid 48919:tid 48958] [client 206.189.233.36:42640] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/swagger.json"] [unique_id "aXZCxTVs1aLFg9jpyYqhdgAAAMM"]
[Mon Jan 26 00:20:22.802676 2026] [:error] [pid 48919:tid 48968] [client 206.189.233.36:42652] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/swagger/v1/swagger.json"] [unique_id "aXZCxjVs1aLFg9jpyYqheQAAAM0"]
[Mon Jan 26 00:20:23.799771 2026] [:error] [pid 48918:tid 48951] [client 206.189.233.36:42682] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/v2/api-docs"] [unique_id "aXZCx7FdNV6RkULOt6EWNgAAAJc"]
[Mon Jan 26 00:20:24.786325 2026] [:error] [pid 48920:tid 48997] [client 206.189.233.36:42684] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/v3/api-docs"] [unique_id "aXZCyJsnZS3G6U7VdJP_BAAAAQ0"]
[Mon Jan 26 00:20:25.800722 2026] [:error] [pid 49084:tid 49089] [client 206.189.233.36:44010] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api-docs/swagger.json"] [unique_id "aXZCyZHUOXll3XccoO4E4gAAAUM"]
[Mon Jan 26 00:20:26.786944 2026] [:error] [pid 49084:tid 49097] [client 206.189.233.36:44040] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/swagger.json"] [unique_id "aXZCypHUOXll3XccoO4E5QAAAUs"]
[Mon Jan 26 00:20:27.799668 2026] [:error] [pid 48920:tid 49004] [client 206.189.233.36:44054] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/@vite/env"] [unique_id "aXZCy5snZS3G6U7VdJP_CgAAARQ"]
[Mon Jan 26 00:20:28.787452 2026] [:error] [pid 48918:tid 48942] [client 206.189.233.36:44072] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/actuator/env"] [unique_id "aXZCzLFdNV6RkULOt6EWQgAAAI4"]
[Mon Jan 26 00:20:29.802121 2026] [:error] [pid 48918:tid 48929] [client 206.189.233.36:44104] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server"] [unique_id "aXZCzbFdNV6RkULOt6EWRgAAAIE"]
[Mon Jan 26 00:20:30.803077 2026] [:error] [pid 49084:tid 49087] [client 206.189.233.36:44126] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aXZCzpHUOXll3XccoO4E7wAAAUE"]
[Mon Jan 26 00:20:32.862324 2026] [:error] [pid 48918:tid 48930] [client 206.189.233.36:44138] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/about"] [unique_id "aXZC0LFdNV6RkULOt6EWUQAAAII"]
[Mon Jan 26 00:20:33.818943 2026] [:error] [pid 48919:tid 48974] [client 206.189.233.36:44154] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/debug/default/view"] [unique_id "aXZC0TVs1aLFg9jpyYqhjwAAANM"]
[Mon Jan 26 00:20:34.806934 2026] [:error] [pid 49084:tid 49107] [client 206.189.233.36:44166] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/v2/_catalog"] [unique_id "aXZC0pHUOXll3XccoO4E-gAAAVU"]
[Mon Jan 26 00:20:35.815891 2026] [:error] [pid 48920:tid 48991] [client 206.189.233.36:34692] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aXZC05snZS3G6U7VdJP_HwAAAQc"]
[Mon Jan 26 00:20:36.815801 2026] [:error] [pid 48920:tid 49001] [client 206.189.233.36:34706] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server-status"] [unique_id "aXZC1JsnZS3G6U7VdJP_IQAAARE"]
[Mon Jan 26 00:20:37.842200 2026] [:error] [pid 48918:tid 48937] [client 206.189.233.36:34712] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/login.action"] [unique_id "aXZC1bFdNV6RkULOt6EWWwAAAIk"]
[Mon Jan 26 00:20:38.821290 2026] [:error] [pid 48920:tid 49007] [client 206.189.233.36:34724] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/_all_dbs"] [unique_id "aXZC1psnZS3G6U7VdJP_JAAAARc"]
[Mon Jan 26 00:20:39.852043 2026] [:error] [pid 48918:tid 48928] [client 206.189.233.36:34730] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.DS_Store"] [unique_id "aXZC17FdNV6RkULOt6EWXwAAAIA"]
[Mon Jan 26 00:20:40.851743 2026] [:error] [pid 48918:tid 48943] [client 206.189.233.36:34738] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aXZC2LFdNV6RkULOt6EWYgAAAI8"]
[Mon Jan 26 00:20:42.810491 2026] [:error] [pid 48920:tid 48988] [client 206.189.233.36:34752] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aXZC2psnZS3G6U7VdJP_LAAAAQQ"]
[Mon Jan 26 00:20:43.823768 2026] [:error] [pid 48919:tid 48964] [client 206.189.233.36:34766] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXZC2zVs1aLFg9jpyYqhnQAAAMk"]
[Mon Jan 26 00:20:44.825710 2026] [:error] [pid 49084:tid 49086] [client 206.189.233.36:34778] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/config.json"] [unique_id "aXZC3JHUOXll3XccoO4FCwAAAUA"]
[Mon Jan 26 00:20:45.826404 2026] [:error] [pid 49084:tid 49106] [client 206.189.233.36:45078] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/telescope/requests"] [unique_id "aXZC3ZHUOXll3XccoO4FDQAAAVQ"]
[Mon Jan 26 00:20:46.825464 2026] [:error] [pid 48918:tid 48934] [client 206.189.233.36:45092] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info.php"] [unique_id "aXZC3rFdNV6RkULOt6EWbwAAAIY"]
[Mon Jan 26 00:20:47.827332 2026] [:error] [pid 48918:tid 48944] [client 206.189.233.36:45106] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXZC37FdNV6RkULOt6EWcAAAAJA"]
[Mon Jan 26 04:30:16.651973 2026] [:error] [pid 61287:tid 61318] [client 159.203.3.128:65461] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXZ9WNimZOwAM64CfR5eUgAAAYE"]
[Mon Jan 26 04:30:17.088328 2026] [:error] [pid 24666:tid 24682] [client 159.203.3.128:49304] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXZ9WZmH-L0_jbK3i9EE4gAAAM4"]
[Mon Jan 26 04:30:17.522768 2026] [:error] [pid 24556:tid 24581] [client 159.203.3.128:49526] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9WUyDW1_EbgDa3XJKxgAAABA"]
[Mon Jan 26 11:04:42.303142 2026] [:error] [pid 61252:tid 61258] [client 114.96.103.33:35230] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXbZyrrGlf8FG2etxUASyQAAAQQ"]
[Mon Jan 26 11:14:37.759240 2026] [:error] [pid 61252:tid 61256] [client 138.68.103.221:65379] [client 138.68.103.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.68.103.221, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aXbcHbrGlf8FG2etxUAVEAAAAQI"]
[Mon Jan 26 11:14:37.768306 2026] [proxy_fcgi:error] [pid 61252:tid 61256] [client 138.68.103.221:65379] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 16:52:38.196921 2026] [:error] [pid 24557:tid 24599] [client 152.69.210.5:55766] [client 152.69.210.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXcrVurlG7Vm9pxV14zzFQAAAEU"]
[Mon Jan 26 16:52:38.616248 2026] [:error] [pid 24558:tid 24637] [client 152.69.210.5:60918] [client 152.69.210.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.69.210.5, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aXcrVgo1PXqeJqIMTQaIkwAAAJA"]
[Mon Jan 26 16:52:38.624595 2026] [proxy_fcgi:error] [pid 24558:tid 24637] [client 152.69.210.5:60918] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 16:57:20.563672 2026] [:error] [pid 24666:tid 24684] [client 170.106.179.68:49190] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXcscJmH-L0_jbK3i9GmPAAAANA"]
[Mon Jan 26 21:16:30.044960 2026] [proxy_fcgi:error] [pid 24556:tid 24586] [client 96.28.226.247:18633] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 21:16:30.280023 2026] [proxy_fcgi:error] [pid 24556:tid 24582] [client 96.28.226.247:18633] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 21:16:30.519014 2026] [proxy_fcgi:error] [pid 24556:tid 24565] [client 96.28.226.247:18633] AH01071: Got error 'Primary script unknown'
[Mon Jan 26 21:16:30.755716 2026] [:error] [pid 24556:tid 24583] [client 96.28.226.247:18633] [client 96.28.226.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aXdpLkyDW1_EbgDa3XJrFQAAABI"]
[Mon Jan 26 21:16:31.716409 2026] [:error] [pid 24558:tid 24641] [client 96.28.226.247:33250] [client 96.28.226.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aXdpLwo1PXqeJqIMTQaz5QAAAJQ"]
[Mon Jan 26 21:16:32.675204 2026] [:error] [pid 61252:tid 61259] [client 96.28.226.247:4136] [client 96.28.226.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/"] [unique_id "aXdpMLrGlf8FG2etxUChJwAAAQU"]
[Mon Jan 26 21:16:33.621612 2026] [:error] [pid 24666:tid 24687] [client 96.28.226.247:36577] [client 96.28.226.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-json/"] [unique_id "aXdpMZmH-L0_jbK3i9Hb1gAAANM"]
[Mon Jan 26 23:14:11.579987 2026] [:error] [pid 24558:tid 24623] [client 45.133.5.99:32091] [client 45.133.5.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.99, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aXeEwwo1PXqeJqIMTQbCPQAAAII"]
[Mon Jan 26 23:14:11.589917 2026] [proxy_fcgi:error] [pid 24558:tid 24623] [client 45.133.5.99:32091] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 06:52:37.699926 2026] [:error] [pid 7454:tid 7534] [client 43.153.204.189:34160] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXfwNZltCoZEfMmfl8CEAAAAAJI"]
[Tue Jan 27 08:22:04.484064 2026] [proxy_fcgi:error] [pid 48412:tid 48425] [client 209.38.31.31:54886] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 08:22:04.502702 2026] [proxy_fcgi:error] [pid 48412:tid 48438] [client 209.38.31.31:54886] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 08:22:04.525645 2026] [proxy_fcgi:error] [pid 48412:tid 48433] [client 209.38.31.31:54886] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 08:22:04.545245 2026] [proxy_fcgi:error] [pid 48412:tid 48419] [client 209.38.31.31:54886] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 08:38:08.227147 2026] [:error] [pid 48528:tid 48553] [client 43.130.31.17:38552] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXgI8AOGRrquT9N7CZoPnAAAAhc"]
[Tue Jan 27 11:48:36.090714 2026] [proxy_fcgi:error] [pid 48631:tid 48655] [client 194.163.158.29:52136] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 11:48:36.436720 2026] [proxy_fcgi:error] [pid 48631:tid 48641] [client 194.163.158.29:52136] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 11:48:36.780164 2026] [proxy_fcgi:error] [pid 48631:tid 48648] [client 194.163.158.29:52136] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 11:48:37.128392 2026] [proxy_fcgi:error] [pid 48631:tid 48634] [client 194.163.158.29:52136] AH01071: Got error 'Primary script unknown'
[Tue Jan 27 14:52:19.673093 2026] [:error] [pid 48446:tid 48499] [client 45.137.126.44:55859] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aXhgo8DRSaZ8F8aaLxlbogAAAdU"]
[Tue Jan 27 16:40:12.010182 2026] [:error] [pid 7453:tid 7504] [client 49.51.204.74:33802] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXh57BfsyA2ws_ADquhxOQAAAE8"]
[Wed Jan 28 01:47:39.914003 2026] [:error] [pid 41678:tid 41693] [client 120.71.59.24:54693] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXj6O6ja89ZyPVwMdigvlwAAAAA"]
[Wed Jan 28 02:14:29.112929 2026] [:error] [pid 24427:tid 24497] [client 161.49.210.68:6820] [client 161.49.210.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.49.210.68, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aXkAhU5-wqSNb5f_hOIMjQAAAYw"]
[Wed Jan 28 02:14:29.120068 2026] [proxy_fcgi:error] [pid 24427:tid 24497] [client 161.49.210.68:6820] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 03:00:19.293601 2026] [:error] [pid 41678:tid 41703] [client 84.239.41.28:21204] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aXkLQ6ja89ZyPVwMdihPcwAAAAo"]
[Wed Jan 28 03:00:22.825881 2026] [:error] [pid 24511:tid 24520] [client 84.239.41.28:42301] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLRmmoieLyDzs0ASQfWQAAAIU"]
[Wed Jan 28 03:00:23.309424 2026] [:error] [pid 41678:tid 41706] [client 84.239.41.28:18972] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aXkLR6ja89ZyPVwMdihPfQAAAA0"]
[Wed Jan 28 03:00:25.460723 2026] [:error] [pid 24426:tid 24465] [client 84.239.41.28:49886] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLSfbw8B_M5J5XrXQTIwAAAUc"]
[Wed Jan 28 03:00:27.641147 2026] [:error] [pid 41678:tid 41716] [client 84.239.41.28:25001] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLS6ja89ZyPVwMdihPhgAAABc"]
[Wed Jan 28 03:00:28.312331 2026] [:error] [pid 41678:tid 41708] [client 84.239.41.28:18972] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLTKja89ZyPVwMdihPiAAAAA8"]
[Wed Jan 28 03:00:31.214886 2026] [:error] [pid 24425:tid 24430] [client 84.239.41.28:31791] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLTx_qUCA3SusVe0ueVwAAAQA"]
[Wed Jan 28 03:00:33.840122 2026] [:error] [pid 41678:tid 41698] [client 84.239.41.28:9325] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLUaja89ZyPVwMdihPlAAAAAU"]
[Wed Jan 28 03:00:34.866162 2026] [:error] [pid 24425:tid 24437] [client 84.239.41.28:31791] [client 84.239.41.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXkLUh_qUCA3SusVe0ueXQAAAQc"]
[Wed Jan 28 03:33:40.859530 2026] [:error] [pid 7491:tid 7516] [client 130.12.182.150:47990] [client 130.12.182.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aXkTFI1dhx8rf42W1S1QqwAAANU"]
[Wed Jan 28 03:33:41.511114 2026] [:error] [pid 41678:tid 41697] [client 130.12.182.150:44138] [client 130.12.182.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aXkTFaja89ZyPVwMdihZ6AAAAAQ"]
[Wed Jan 28 06:52:01.164845 2026] [:error] [pid 17426:tid 17498] [client 93.123.109.175:49882] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aXlBkU8zvf_03BnziRc-AQAAAIk"]
[Wed Jan 28 07:09:02.127884 2026] [:error] [pid 64842:tid 64866] [client 141.98.11.239:56983] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aXlFjluAAQZ5AN_SnDY20gAAAVY"]
[Wed Jan 28 07:09:02.127983 2026] [:error] [pid 64842:tid 64866] [client 141.98.11.239:56983] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 29"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aXlFjluAAQZ5AN_SnDY20gAAAVY"]
[Wed Jan 28 07:46:54.757583 2026] [proxy_fcgi:error] [pid 64842:tid 64866] [client 51.38.225.122:39620] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 07:46:55.034262 2026] [proxy_fcgi:error] [pid 64842:tid 64851] [client 51.38.225.122:39620] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 07:46:55.311514 2026] [proxy_fcgi:error] [pid 64842:tid 64864] [client 51.38.225.122:39620] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 07:46:55.586862 2026] [proxy_fcgi:error] [pid 64842:tid 64858] [client 51.38.225.122:39620] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 07:57:41.872377 2026] [:error] [pid 17535:tid 17544] [client 49.7.227.204:51694] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXlQ9a3QiSMgVscnN5JevQAAAMY"]
[Wed Jan 28 19:40:52.989403 2026] [:error] [pid 33580:tid 33601] [client 43.153.74.75:36778] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXn1xJlb0QJtwfka8l5OgQAAAQ4"]
[Wed Jan 28 20:41:01.208665 2026] [:error] [pid 2625:tid 2641] [client 114.96.103.33:38091] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXoD3VZhY64HvuPd7w1iowAAAUo"]
[Wed Jan 28 21:12:25.804338 2026] [:error] [pid 42740:tid 42748] [client 49.51.233.46:39020] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXoLOVnjAS34srJlXgSqBgAAAIY"]
[Wed Jan 28 23:15:51.095140 2026] [:error] [pid 33636:tid 33660] [client 213.209.159.151:46120] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXooJ9IVZAudQH0BSC5b_wAAAhY"]
[Thu Jan 29 03:33:54.466893 2026] [:error] [pid 15949:tid 16001] [client 47.90.227.150:53942] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXpkoiUUtCw0-hDUhapNNgAAAEk"]
[Thu Jan 29 03:33:54.875725 2026] [:error] [pid 15950:tid 16042] [client 47.90.227.150:57914] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXpkooJOXwUqBC55abQrrAAAAJc"]
[Thu Jan 29 04:57:14.403361 2026] [:error] [pid 19071:tid 19145] [client 43.153.74.75:45064] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXp4Kpfa8Ix5wWmtmJySegAAAIw"]
[Thu Jan 29 08:04:03.170242 2026] [proxy_fcgi:error] [pid 19070:tid 19110] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.272774 2026] [proxy_fcgi:error] [pid 19070:tid 19127] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.366452 2026] [proxy_fcgi:error] [pid 19070:tid 19115] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.459928 2026] [proxy_fcgi:error] [pid 19070:tid 19128] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.552024 2026] [proxy_fcgi:error] [pid 19070:tid 19125] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.643418 2026] [proxy_fcgi:error] [pid 19070:tid 19126] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.736432 2026] [proxy_fcgi:error] [pid 19070:tid 19109] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.827147 2026] [proxy_fcgi:error] [pid 19070:tid 19130] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:03.919474 2026] [proxy_fcgi:error] [pid 19070:tid 19116] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:04.025616 2026] [proxy_fcgi:error] [pid 19070:tid 19114] [client 4.193.202.195:17879] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:04:04.112174 2026] [:error] [pid 19070:tid 19118] [client 4.193.202.195:17879] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nx1.php"] [unique_id "aXqj9Lou83lIon_aKgY3wwAAAEw"]
[Thu Jan 29 08:04:04.290690 2026] [:error] [pid 20579:tid 20661] [client 4.193.202.195:17861] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nx1.php"] [unique_id "aXqj9DVXNopcNyjJc9WEHQAAAlQ"]
[Thu Jan 29 08:04:04.503809 2026] [:error] [pid 20519:tid 20569] [client 4.193.202.195:17868] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nx1.php"] [unique_id "aXqj9Ao4s4fyROrkyRlZFwAAAZU"]
[Thu Jan 29 08:04:04.677451 2026] [:error] [pid 20578:tid 20634] [client 4.193.202.195:17864] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nx1.php"] [unique_id "aXqj9A6UX7yOMwQFiyecoAAAAhU"]
[Thu Jan 29 08:04:04.879611 2026] [:error] [pid 20579:tid 20666] [client 4.193.202.195:17801] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avtst.php"] [unique_id "aXqj9DVXNopcNyjJc9WEHgAAAlc"]
[Thu Jan 29 08:04:05.055524 2026] [:error] [pid 20519:tid 20551] [client 4.193.202.195:17872] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avtst.php"] [unique_id "aXqj9Qo4s4fyROrkyRlZGQAAAYM"]
[Thu Jan 29 08:04:05.260699 2026] [:error] [pid 20580:tid 20687] [client 4.193.202.195:17914] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avtst.php"] [unique_id "aXqj9ZCZ5HHdXPmeL59qUAAAApM"]
[Thu Jan 29 08:04:05.434738 2026] [:error] [pid 20486:tid 20507] [client 4.193.202.195:17913] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avtst.php"] [unique_id "aXqj9XgqSZb6GBx5nnMW7QAAARI"]
[Thu Jan 29 08:04:05.610130 2026] [:error] [pid 19070:tid 19123] [client 4.193.202.195:17912] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inde.php"] [unique_id "aXqj9bou83lIon_aKgY3xAAAAFE"]
[Thu Jan 29 08:04:05.847207 2026] [:error] [pid 19177:tid 19203] [client 4.193.202.195:17875] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inde.php"] [unique_id "aXqj9XipGz0PT8TrQv4HtQAAANg"]
[Thu Jan 29 08:04:06.029690 2026] [:error] [pid 20519:tid 20554] [client 4.193.202.195:17915] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inde.php"] [unique_id "aXqj9go4s4fyROrkyRlZGwAAAYY"]
[Thu Jan 29 08:04:06.221406 2026] [:error] [pid 19071:tid 19145] [client 4.193.202.195:17896] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inde.php"] [unique_id "aXqj9pfa8Ix5wWmtmJzEhQAAAIw"]
[Thu Jan 29 08:04:06.403028 2026] [:error] [pid 20579:tid 20668] [client 4.193.202.195:17902] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "aXqj9jVXNopcNyjJc9WEIQAAAlg"]
[Thu Jan 29 08:04:06.607925 2026] [:error] [pid 19070:tid 19120] [client 4.193.202.195:17878] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "aXqj9rou83lIon_aKgY3xgAAAE4"]
[Thu Jan 29 08:04:06.782917 2026] [:error] [pid 20519:tid 20561] [client 4.193.202.195:17813] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "aXqj9go4s4fyROrkyRlZHwAAAY0"]
[Thu Jan 29 08:04:06.993089 2026] [:error] [pid 20486:tid 20509] [client 4.193.202.195:17792] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "aXqj9ngqSZb6GBx5nnMW7wAAARQ"]
[Thu Jan 29 08:04:07.195669 2026] [:error] [pid 20486:tid 20492] [client 4.193.202.195:17880] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aXqj93gqSZb6GBx5nnMW8AAAAQM"]
[Thu Jan 29 08:04:07.409877 2026] [:error] [pid 19070:tid 19107] [client 4.193.202.195:17810] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aXqj97ou83lIon_aKgY3yAAAAEE"]
[Thu Jan 29 08:04:07.657037 2026] [:error] [pid 19071:tid 19157] [client 4.193.202.195:17899] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aXqj95fa8Ix5wWmtmJzEhwAAAJg"]
[Thu Jan 29 08:04:07.876733 2026] [:error] [pid 19177:tid 19189] [client 4.193.202.195:17904] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lx.php"] [unique_id "aXqj93ipGz0PT8TrQv4HuAAAAMo"]
[Thu Jan 29 08:04:08.071837 2026] [:error] [pid 19070:tid 19124] [client 4.193.202.195:17802] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/die.php"] [unique_id "aXqj-Lou83lIon_aKgY3yQAAAFI"]
[Thu Jan 29 08:04:08.312771 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17796] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/die.php"] [unique_id "aXqj-PDHsRM4BJ9a4Qt54wAAAAo"]
[Thu Jan 29 08:04:08.520918 2026] [:error] [pid 19069:tid 19085] [client 4.193.202.195:17894] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/die.php"] [unique_id "aXqj-PDHsRM4BJ9a4Qt55AAAAAc"]
[Thu Jan 29 08:04:08.696392 2026] [:error] [pid 19177:tid 19196] [client 4.193.202.195:17911] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/die.php"] [unique_id "aXqj-HipGz0PT8TrQv4HugAAANE"]
[Thu Jan 29 08:04:08.880668 2026] [:error] [pid 20486:tid 20490] [client 4.193.202.195:17909] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aXqj-HgqSZb6GBx5nnMW8QAAAQE"]
[Thu Jan 29 08:04:09.055390 2026] [:error] [pid 20578:tid 20636] [client 4.193.202.195:17804] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aXqj-Q6UX7yOMwQFiyecpAAAAhc"]
[Thu Jan 29 08:04:09.232229 2026] [:error] [pid 20578:tid 20622] [client 4.193.202.195:17916] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aXqj-Q6UX7yOMwQFiyecpQAAAgk"]
[Thu Jan 29 08:04:09.416644 2026] [:error] [pid 19070:tid 19115] [client 4.193.202.195:17807] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaaa.php"] [unique_id "aXqj-bou83lIon_aKgY3zAAAAEk"]
[Thu Jan 29 08:04:09.605335 2026] [:error] [pid 20486:tid 20513] [client 4.193.202.195:17890] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbbb.php"] [unique_id "aXqj-XgqSZb6GBx5nnMW8gAAARg"]
[Thu Jan 29 08:04:09.787399 2026] [:error] [pid 19071:tid 19146] [client 4.193.202.195:17806] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbbb.php"] [unique_id "aXqj-Zfa8Ix5wWmtmJzEjAAAAI0"]
[Thu Jan 29 08:04:09.961480 2026] [:error] [pid 20486:tid 20494] [client 4.193.202.195:17846] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbbb.php"] [unique_id "aXqj-XgqSZb6GBx5nnMW8wAAAQU"]
[Thu Jan 29 08:04:10.214812 2026] [:error] [pid 20486:tid 20495] [client 4.193.202.195:17898] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbbb.php"] [unique_id "aXqj-ngqSZb6GBx5nnMW9gAAAQY"]
[Thu Jan 29 08:04:10.393116 2026] [:error] [pid 19070:tid 19128] [client 4.193.202.195:17740] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cccc.php"] [unique_id "aXqj-rou83lIon_aKgY3zQAAAFY"]
[Thu Jan 29 08:04:10.572922 2026] [:error] [pid 19070:tid 19119] [client 4.193.202.195:17881] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cccc.php"] [unique_id "aXqj-rou83lIon_aKgY3zgAAAE0"]
[Thu Jan 29 08:04:10.747377 2026] [:error] [pid 20579:tid 20651] [client 4.193.202.195:17858] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cccc.php"] [unique_id "aXqj-jVXNopcNyjJc9WEJgAAAko"]
[Thu Jan 29 08:04:10.938330 2026] [:error] [pid 19070:tid 19126] [client 4.193.202.195:17867] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cccc.php"] [unique_id "aXqj-rou83lIon_aKgY3zwAAAFQ"]
[Thu Jan 29 08:04:11.115842 2026] [:error] [pid 19177:tid 19192] [client 4.193.202.195:17885] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aXqj-3ipGz0PT8TrQv4HvAAAAM0"]
[Thu Jan 29 08:04:11.290394 2026] [:error] [pid 20579:tid 20646] [client 4.193.202.195:17917] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aXqj-zVXNopcNyjJc9WEJwAAAkU"]
[Thu Jan 29 08:04:11.477099 2026] [:error] [pid 20580:tid 20674] [client 4.193.202.195:17918] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aXqj-5CZ5HHdXPmeL59qUgAAAoY"]
[Thu Jan 29 08:04:11.656219 2026] [:error] [pid 20519:tid 20566] [client 4.193.202.195:17854] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aXqj-wo4s4fyROrkyRlZKgAAAZI"]
[Thu Jan 29 08:04:11.837111 2026] [:error] [pid 19071:tid 19149] [client 4.193.202.195:17874] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file1.php"] [unique_id "aXqj-5fa8Ix5wWmtmJzEkgAAAJA"]
[Thu Jan 29 08:04:12.028199 2026] [:error] [pid 20486:tid 20507] [client 4.193.202.195:17800] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file1.php"] [unique_id "aXqj_HgqSZb6GBx5nnMW-gAAARI"]
[Thu Jan 29 08:04:12.207489 2026] [:error] [pid 19069:tid 19099] [client 4.193.202.195:17906] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file1.php"] [unique_id "aXqj_PDHsRM4BJ9a4Qt56QAAABU"]
[Thu Jan 29 08:04:12.407639 2026] [:error] [pid 20486:tid 20504] [client 4.193.202.195:17855] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file1.php"] [unique_id "aXqj_HgqSZb6GBx5nnMW-wAAAQ8"]
[Thu Jan 29 08:04:12.614881 2026] [:error] [pid 20578:tid 20626] [client 4.193.202.195:17838] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aXqj_A6UX7yOMwQFiyecrQAAAg0"]
[Thu Jan 29 08:04:12.818510 2026] [:error] [pid 19070:tid 19117] [client 4.193.202.195:17891] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aXqj_Lou83lIon_aKgY31AAAAEs"]
[Thu Jan 29 08:04:13.046624 2026] [:error] [pid 19070:tid 19124] [client 4.193.202.195:17901] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aXqj_bou83lIon_aKgY32QAAAFI"]
[Thu Jan 29 08:04:13.233270 2026] [:error] [pid 19071:tid 19145] [client 4.193.202.195:17907] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aXqj_Zfa8Ix5wWmtmJzElgAAAIw"]
[Thu Jan 29 08:04:13.427216 2026] [:error] [pid 20580:tid 20681] [client 4.193.202.195:17837] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aXqj_ZCZ5HHdXPmeL59qUwAAAo0"]
[Thu Jan 29 08:04:13.651931 2026] [:error] [pid 19069:tid 19083] [client 4.193.202.195:17811] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aXqj_fDHsRM4BJ9a4Qt57AAAAAU"]
[Thu Jan 29 08:04:13.838345 2026] [:error] [pid 19177:tid 19201] [client 4.193.202.195:17798] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aXqj_XipGz0PT8TrQv4HwQAAANY"]
[Thu Jan 29 08:04:14.057737 2026] [:error] [pid 20486:tid 20510] [client 4.193.202.195:17729] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aXqj_ngqSZb6GBx5nnMW_gAAARU"]
[Thu Jan 29 08:04:14.265070 2026] [:error] [pid 20580:tid 20684] [client 4.193.202.195:17910] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aXqj_pCZ5HHdXPmeL59qWAAAApA"]
[Thu Jan 29 08:04:14.464282 2026] [:error] [pid 20576:tid 20609] [client 4.193.202.195:17795] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aXqj_irDZws_FlQGi9fnHgAAAdc"]
[Thu Jan 29 08:04:14.640574 2026] [:error] [pid 19070:tid 19122] [client 4.193.202.195:17865] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aXqj_rou83lIon_aKgY33AAAAFA"]
[Thu Jan 29 08:04:14.831693 2026] [:error] [pid 19071:tid 19150] [client 4.193.202.195:17793] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aXqj_pfa8Ix5wWmtmJzEmwAAAJE"]
[Thu Jan 29 08:04:15.008379 2026] [:error] [pid 20578:tid 20618] [client 4.193.202.195:17877] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "aXqj_w6UX7yOMwQFiyecsAAAAgU"]
[Thu Jan 29 08:04:15.220260 2026] [:error] [pid 19177:tid 19203] [client 4.193.202.195:17816] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "aXqj_3ipGz0PT8TrQv4HxgAAANg"]
[Thu Jan 29 08:04:15.422985 2026] [:error] [pid 20486:tid 20513] [client 4.193.202.195:17883] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "aXqj_3gqSZb6GBx5nnMXAAAAARg"]
[Thu Jan 29 08:04:15.628809 2026] [:error] [pid 19069:tid 19082] [client 4.193.202.195:17797] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "aXqj__DHsRM4BJ9a4Qt58AAAAAQ"]
[Thu Jan 29 08:04:15.804786 2026] [:error] [pid 20578:tid 20636] [client 4.193.202.195:17840] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aXqj_w6UX7yOMwQFiyecsgAAAhc"]
[Thu Jan 29 08:04:16.004823 2026] [:error] [pid 20580:tid 20676] [client 4.193.202.195:17919] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aXqkAJCZ5HHdXPmeL59qWwAAAog"]
[Thu Jan 29 08:04:16.182656 2026] [:error] [pid 20486:tid 20497] [client 4.193.202.195:17853] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aXqkAHgqSZb6GBx5nnMXAgAAAQg"]
[Thu Jan 29 08:04:16.363955 2026] [:error] [pid 20519:tid 20548] [client 4.193.202.195:17742] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aXqkAAo4s4fyROrkyRlZMgAAAYA"]
[Thu Jan 29 08:04:16.546377 2026] [:error] [pid 20486:tid 20491] [client 4.193.202.195:17862] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aXqkAHgqSZb6GBx5nnMXAwAAAQI"]
[Thu Jan 29 08:04:16.731453 2026] [:error] [pid 19071:tid 19143] [client 4.193.202.195:17817] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aXqkAJfa8Ix5wWmtmJzEnwAAAIo"]
[Thu Jan 29 08:04:16.905320 2026] [:error] [pid 19071:tid 19145] [client 4.193.202.195:17743] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aXqkAJfa8Ix5wWmtmJzEoAAAAIw"]
[Thu Jan 29 08:04:17.116106 2026] [:error] [pid 20576:tid 20600] [client 4.193.202.195:17749] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aXqkASrDZws_FlQGi9fnIwAAAc4"]
[Thu Jan 29 08:04:17.330646 2026] [:error] [pid 20578:tid 20613] [client 4.193.202.195:17805] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file13.php"] [unique_id "aXqkAQ6UX7yOMwQFiyecswAAAgA"]
[Thu Jan 29 08:04:17.513965 2026] [:error] [pid 19070:tid 19130] [client 4.193.202.195:17822] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file13.php"] [unique_id "aXqkAbou83lIon_aKgY34wAAAFg"]
[Thu Jan 29 08:04:17.696189 2026] [:error] [pid 20578:tid 20619] [client 4.193.202.195:17870] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file13.php"] [unique_id "aXqkAQ6UX7yOMwQFiyectQAAAgY"]
[Thu Jan 29 08:04:17.882055 2026] [:error] [pid 19071:tid 19137] [client 4.193.202.195:17887] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file13.php"] [unique_id "aXqkAZfa8Ix5wWmtmJzEowAAAIQ"]
[Thu Jan 29 08:04:18.059300 2026] [:error] [pid 20576:tid 20587] [client 4.193.202.195:17832] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file3.php"] [unique_id "aXqkAirDZws_FlQGi9fnJwAAAcE"]
[Thu Jan 29 08:04:18.251307 2026] [:error] [pid 20579:tid 20653] [client 4.193.202.195:17830] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file3.php"] [unique_id "aXqkAjVXNopcNyjJc9WEMAAAAkw"]
[Thu Jan 29 08:04:18.449863 2026] [:error] [pid 19177:tid 19189] [client 4.193.202.195:17869] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file3.php"] [unique_id "aXqkAnipGz0PT8TrQv4HxwAAAMo"]
[Thu Jan 29 08:04:18.629137 2026] [:error] [pid 20519:tid 20554] [client 4.193.202.195:17851] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file3.php"] [unique_id "aXqkAgo4s4fyROrkyRlZNQAAAYY"]
[Thu Jan 29 08:04:18.842901 2026] [:error] [pid 20580:tid 20686] [client 4.193.202.195:17828] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3406.php"] [unique_id "aXqkApCZ5HHdXPmeL59qXwAAApI"]
[Thu Jan 29 08:04:19.022336 2026] [:error] [pid 20578:tid 20620] [client 4.193.202.195:17845] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3406.php"] [unique_id "aXqkAw6UX7yOMwQFiyecuQAAAgc"]
[Thu Jan 29 08:04:19.203984 2026] [:error] [pid 19071:tid 19151] [client 4.193.202.195:17897] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3406.php"] [unique_id "aXqkA5fa8Ix5wWmtmJzEpgAAAJI"]
[Thu Jan 29 08:04:19.395513 2026] [:error] [pid 20579:tid 20658] [client 4.193.202.195:17803] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3406.php"] [unique_id "aXqkAzVXNopcNyjJc9WEMQAAAlE"]
[Thu Jan 29 08:04:19.640565 2026] [:error] [pid 20579:tid 20652] [client 4.193.202.195:17826] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/963e.php"] [unique_id "aXqkAzVXNopcNyjJc9WEMgAAAks"]
[Thu Jan 29 08:04:19.818014 2026] [:error] [pid 20580:tid 20678] [client 4.193.202.195:17859] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/963e.php"] [unique_id "aXqkA5CZ5HHdXPmeL59qYwAAAoo"]
[Thu Jan 29 08:04:19.992729 2026] [:error] [pid 20486:tid 20505] [client 4.193.202.195:17900] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/963e.php"] [unique_id "aXqkA3gqSZb6GBx5nnMXCwAAARA"]
[Thu Jan 29 08:04:20.216501 2026] [:error] [pid 19177:tid 19202] [client 4.193.202.195:17884] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/963e.php"] [unique_id "aXqkBHipGz0PT8TrQv4HygAAANc"]
[Thu Jan 29 08:04:20.401856 2026] [:error] [pid 20519:tid 20560] [client 4.193.202.195:17886] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hk.php"] [unique_id "aXqkBAo4s4fyROrkyRlZOQAAAYw"]
[Thu Jan 29 08:04:20.593620 2026] [:error] [pid 20576:tid 20590] [client 4.193.202.195:17873] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hk.php"] [unique_id "aXqkBCrDZws_FlQGi9fnLAAAAcQ"]
[Thu Jan 29 08:04:20.767718 2026] [:error] [pid 19070:tid 19107] [client 4.193.202.195:17893] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hk.php"] [unique_id "aXqkBLou83lIon_aKgY35gAAAEE"]
[Thu Jan 29 08:04:20.946171 2026] [:error] [pid 20578:tid 20618] [client 4.193.202.195:17824] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hk.php"] [unique_id "aXqkBA6UX7yOMwQFiyecvgAAAgU"]
[Thu Jan 29 08:04:21.178683 2026] [:error] [pid 20519:tid 20568] [client 4.193.202.195:17821] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cjfuns.php"] [unique_id "aXqkBQo4s4fyROrkyRlZOgAAAZQ"]
[Thu Jan 29 08:04:21.373079 2026] [:error] [pid 20576:tid 20601] [client 4.193.202.195:17809] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cjfuns.php"] [unique_id "aXqkBSrDZws_FlQGi9fnLwAAAc8"]
[Thu Jan 29 08:04:21.582475 2026] [:error] [pid 20519:tid 20570] [client 4.193.202.195:17820] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cjfuns.php"] [unique_id "aXqkBQo4s4fyROrkyRlZOwAAAZY"]
[Thu Jan 29 08:04:21.761175 2026] [:error] [pid 20580:tid 20689] [client 4.193.202.195:17790] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cjfuns.php"] [unique_id "aXqkBZCZ5HHdXPmeL59qaAAAApU"]
[Thu Jan 29 08:04:21.949783 2026] [:error] [pid 20519:tid 20572] [client 4.193.202.195:17866] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akk.php"] [unique_id "aXqkBQo4s4fyROrkyRlZPQAAAZg"]
[Thu Jan 29 08:04:22.263943 2026] [:error] [pid 20580:tid 20676] [client 4.193.202.195:17819] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akk.php"] [unique_id "aXqkBpCZ5HHdXPmeL59qaQAAAog"]
[Thu Jan 29 08:04:22.470195 2026] [:error] [pid 20579:tid 20649] [client 4.193.202.195:17876] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akk.php"] [unique_id "aXqkBjVXNopcNyjJc9WENwAAAkg"]
[Thu Jan 29 08:04:22.715203 2026] [:error] [pid 20486:tid 20501] [client 4.193.202.195:17823] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akk.php"] [unique_id "aXqkBngqSZb6GBx5nnMXFQAAAQw"]
[Thu Jan 29 08:04:22.916937 2026] [:error] [pid 20578:tid 20632] [client 4.193.202.195:17664] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpa.php"] [unique_id "aXqkBg6UX7yOMwQFiyecwgAAAhM"]
[Thu Jan 29 08:04:23.107361 2026] [:error] [pid 20519:tid 20563] [client 4.193.202.195:17762] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpa.php"] [unique_id "aXqkBwo4s4fyROrkyRlZPgAAAY8"]
[Thu Jan 29 08:04:23.351693 2026] [:error] [pid 20486:tid 20505] [client 4.193.202.195:17833] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpa.php"] [unique_id "aXqkB3gqSZb6GBx5nnMXFwAAARA"]
[Thu Jan 29 08:04:23.546005 2026] [:error] [pid 19069:tid 19086] [client 4.193.202.195:17783] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpa.php"] [unique_id "aXqkB_DHsRM4BJ9a4Qt59gAAAAg"]
[Thu Jan 29 08:04:23.737627 2026] [:error] [pid 20578:tid 20630] [client 4.193.202.195:17808] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aXqkBw6UX7yOMwQFiyecxQAAAhE"]
[Thu Jan 29 08:04:23.961835 2026] [:error] [pid 19177:tid 19182] [client 4.193.202.195:17737] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aXqkB3ipGz0PT8TrQv4HzgAAAMM"]
[Thu Jan 29 08:04:24.143358 2026] [:error] [pid 20486:tid 20510] [client 4.193.202.195:17784] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aXqkCHgqSZb6GBx5nnMXGgAAARU"]
[Thu Jan 29 08:04:24.376967 2026] [:error] [pid 19177:tid 19203] [client 4.193.202.195:17778] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrr.php"] [unique_id "aXqkCHipGz0PT8TrQv4H0AAAANg"]
[Thu Jan 29 08:04:24.560029 2026] [:error] [pid 20579:tid 20648] [client 4.193.202.195:17815] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aXqkCDVXNopcNyjJc9WEOQAAAkc"]
[Thu Jan 29 08:04:24.745677 2026] [:error] [pid 19070:tid 19119] [client 4.193.202.195:17892] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aXqkCLou83lIon_aKgY37gAAAE0"]
[Thu Jan 29 08:04:24.935114 2026] [:error] [pid 20579:tid 20645] [client 4.193.202.195:17738] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aXqkCDVXNopcNyjJc9WEOgAAAkQ"]
[Thu Jan 29 08:04:25.117801 2026] [:error] [pid 19069:tid 19087] [client 4.193.202.195:17731] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aXqkCfDHsRM4BJ9a4Qt5-wAAAAk"]
[Thu Jan 29 08:04:25.313920 2026] [:error] [pid 20580:tid 20684] [client 4.193.202.195:17761] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x0x.php"] [unique_id "aXqkCZCZ5HHdXPmeL59qcgAAApA"]
[Thu Jan 29 08:04:25.540355 2026] [:error] [pid 20486:tid 20494] [client 4.193.202.195:17889] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x0x.php"] [unique_id "aXqkCXgqSZb6GBx5nnMXHgAAAQU"]
[Thu Jan 29 08:04:25.735814 2026] [:error] [pid 20486:tid 20491] [client 4.193.202.195:17779] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x0x.php"] [unique_id "aXqkCXgqSZb6GBx5nnMXHwAAAQI"]
[Thu Jan 29 08:04:25.927988 2026] [:error] [pid 19071:tid 19145] [client 4.193.202.195:17825] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x0x.php"] [unique_id "aXqkCZfa8Ix5wWmtmJzEqQAAAIw"]
[Thu Jan 29 08:04:26.147152 2026] [:error] [pid 19071:tid 19139] [client 4.193.202.195:17895] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aXqkCpfa8Ix5wWmtmJzErQAAAIY"]
[Thu Jan 29 08:04:26.373488 2026] [:error] [pid 19177:tid 19189] [client 4.193.202.195:17831] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aXqkCnipGz0PT8TrQv4H1QAAAMo"]
[Thu Jan 29 08:04:26.550659 2026] [:error] [pid 19177:tid 19196] [client 4.193.202.195:17852] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aXqkCnipGz0PT8TrQv4H1wAAANE"]
[Thu Jan 29 08:04:26.746701 2026] [:error] [pid 19071:tid 19155] [client 4.193.202.195:17773] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aXqkCpfa8Ix5wWmtmJzErgAAAJY"]
[Thu Jan 29 08:04:26.941918 2026] [:error] [pid 19071:tid 19142] [client 4.193.202.195:17771] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkCpfa8Ix5wWmtmJzEsgAAAIk"]
[Thu Jan 29 08:04:27.156009 2026] [:error] [pid 20519:tid 20560] [client 4.193.202.195:17843] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkCwo4s4fyROrkyRlZRAAAAYw"]
[Thu Jan 29 08:04:27.337057 2026] [:error] [pid 19071:tid 19149] [client 4.193.202.195:17905] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkC5fa8Ix5wWmtmJzEswAAAJA"]
[Thu Jan 29 08:04:27.520217 2026] [:error] [pid 19071:tid 19152] [client 4.193.202.195:17829] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkC5fa8Ix5wWmtmJzEuQAAAJM"]
[Thu Jan 29 08:04:27.709939 2026] [:error] [pid 20580:tid 20680] [client 4.193.202.195:17812] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aXqkC5CZ5HHdXPmeL59qdQAAAow"]
[Thu Jan 29 08:04:27.895998 2026] [:error] [pid 19071:tid 19143] [client 4.193.202.195:17748] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aXqkC5fa8Ix5wWmtmJzEvAAAAIo"]
[Thu Jan 29 08:04:28.071782 2026] [:error] [pid 20578:tid 20631] [client 4.193.202.195:17766] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aXqkDA6UX7yOMwQFiyecygAAAhI"]
[Thu Jan 29 08:04:28.260265 2026] [:error] [pid 19070:tid 19125] [client 4.193.202.195:17744] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aXqkDLou83lIon_aKgY38AAAAFM"]
[Thu Jan 29 08:04:28.495863 2026] [:error] [pid 20580:tid 20673] [client 4.193.202.195:17695] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aXqkDJCZ5HHdXPmeL59qeQAAAoU"]
[Thu Jan 29 08:04:28.704683 2026] [:error] [pid 19071:tid 19146] [client 4.193.202.195:17688] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aXqkDJfa8Ix5wWmtmJzEwgAAAI0"]
[Thu Jan 29 08:04:28.882930 2026] [:error] [pid 19071:tid 19141] [client 4.193.202.195:17756] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aXqkDJfa8Ix5wWmtmJzEwwAAAIg"]
[Thu Jan 29 08:04:29.152622 2026] [:error] [pid 19071:tid 19142] [client 4.193.202.195:17814] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aXqkDZfa8Ix5wWmtmJzExAAAAIk"]
[Thu Jan 29 08:04:29.359892 2026] [:error] [pid 19070:tid 19110] [client 4.193.202.195:17736] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aXqkDbou83lIon_aKgY38QAAAEQ"]
[Thu Jan 29 08:04:29.565664 2026] [:error] [pid 20576:tid 20606] [client 4.193.202.195:17844] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aXqkDSrDZws_FlQGi9fnNgAAAdQ"]
[Thu Jan 29 08:04:29.821167 2026] [:error] [pid 20576:tid 20603] [client 4.193.202.195:17850] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aXqkDSrDZws_FlQGi9fnOQAAAdE"]
[Thu Jan 29 08:04:30.056264 2026] [:error] [pid 20580:tid 20679] [client 4.193.202.195:17751] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aXqkDpCZ5HHdXPmeL59qfQAAAos"]
[Thu Jan 29 08:04:30.234943 2026] [:error] [pid 19070:tid 19116] [client 4.193.202.195:17818] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell1.php"] [unique_id "aXqkDrou83lIon_aKgY38gAAAEo"]
[Thu Jan 29 08:04:30.442468 2026] [:error] [pid 19071:tid 19151] [client 4.193.202.195:17667] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell1.php"] [unique_id "aXqkDpfa8Ix5wWmtmJzExgAAAJI"]
[Thu Jan 29 08:04:30.623712 2026] [:error] [pid 19070:tid 19128] [client 4.193.202.195:17702] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell1.php"] [unique_id "aXqkDrou83lIon_aKgY39AAAAFY"]
[Thu Jan 29 08:04:30.905937 2026] [:error] [pid 20576:tid 20601] [client 4.193.202.195:17839] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell1.php"] [unique_id "aXqkDirDZws_FlQGi9fnPQAAAc8"]
[Thu Jan 29 08:04:31.086275 2026] [:error] [pid 20576:tid 20604] [client 4.193.202.195:17835] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aXqkDyrDZws_FlQGi9fnPgAAAdI"]
[Thu Jan 29 08:04:31.292500 2026] [:error] [pid 20579:tid 20652] [client 4.193.202.195:17727] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aXqkDzVXNopcNyjJc9WEPwAAAks"]
[Thu Jan 29 08:04:31.469734 2026] [:error] [pid 20580:tid 20683] [client 4.193.202.195:17769] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aXqkD5CZ5HHdXPmeL59qgAAAAo8"]
[Thu Jan 29 08:04:31.661243 2026] [:error] [pid 20580:tid 20689] [client 4.193.202.195:17794] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aXqkD5CZ5HHdXPmeL59qgQAAApU"]
[Thu Jan 29 08:04:31.974631 2026] [:error] [pid 20576:tid 20610] [client 4.193.202.195:17666] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aXqkDyrDZws_FlQGi9fnQAAAAdg"]
[Thu Jan 29 08:04:32.169423 2026] [:error] [pid 19177:tid 19189] [client 4.193.202.195:17754] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aXqkEHipGz0PT8TrQv4H4gAAAMo"]
[Thu Jan 29 08:04:32.348287 2026] [:error] [pid 19071:tid 19134] [client 4.193.202.195:17827] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aXqkEJfa8Ix5wWmtmJzEzAAAAIE"]
[Thu Jan 29 08:04:32.546014 2026] [:error] [pid 20486:tid 20489] [client 4.193.202.195:17715] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aXqkEHgqSZb6GBx5nnMXJAAAAQA"]
[Thu Jan 29 08:04:32.741065 2026] [:error] [pid 20486:tid 20509] [client 4.193.202.195:17848] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aXqkEHgqSZb6GBx5nnMXJgAAARQ"]
[Thu Jan 29 08:04:32.947607 2026] [:error] [pid 19070:tid 19120] [client 4.193.202.195:17735] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aXqkELou83lIon_aKgY39wAAAE4"]
[Thu Jan 29 08:04:33.126966 2026] [:error] [pid 19070:tid 19108] [client 4.193.202.195:17765] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aXqkEbou83lIon_aKgY3-QAAAEI"]
[Thu Jan 29 08:04:33.349182 2026] [:error] [pid 20578:tid 20620] [client 4.193.202.195:17609] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aXqkEQ6UX7yOMwQFiyec0gAAAgc"]
[Thu Jan 29 08:04:33.548776 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17782] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/444.php"] [unique_id "aXqkEfDHsRM4BJ9a4Qt5_gAAAAo"]
[Thu Jan 29 08:04:33.758194 2026] [:error] [pid 20580:tid 20671] [client 4.193.202.195:17741] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/444.php"] [unique_id "aXqkEZCZ5HHdXPmeL59qhgAAAoM"]
[Thu Jan 29 08:04:33.937493 2026] [:error] [pid 20580:tid 20677] [client 4.193.202.195:17703] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/444.php"] [unique_id "aXqkEZCZ5HHdXPmeL59qhwAAAok"]
[Thu Jan 29 08:04:34.113691 2026] [:error] [pid 20580:tid 20687] [client 4.193.202.195:17911] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/444.php"] [unique_id "aXqkEpCZ5HHdXPmeL59qiAAAApM"]
[Thu Jan 29 08:04:34.303335 2026] [:error] [pid 20576:tid 20589] [client 4.193.202.195:17674] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aXqkEirDZws_FlQGi9fnQwAAAcM"]
[Thu Jan 29 08:04:34.518207 2026] [:error] [pid 19069:tid 19097] [client 4.193.202.195:17834] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aXqkEvDHsRM4BJ9a4Qt5_wAAABM"]
[Thu Jan 29 08:04:34.701016 2026] [:error] [pid 20578:tid 20616] [client 4.193.202.195:17789] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aXqkEg6UX7yOMwQFiyec1AAAAgM"]
[Thu Jan 29 08:04:34.895746 2026] [:error] [pid 19069:tid 19098] [client 4.193.202.195:17673] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aXqkEvDHsRM4BJ9a4Qt6AgAAABQ"]
[Thu Jan 29 08:04:35.073564 2026] [:error] [pid 20580:tid 20678] [client 4.193.202.195:17732] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aXqkE5CZ5HHdXPmeL59qigAAAoo"]
[Thu Jan 29 08:04:35.256689 2026] [:error] [pid 20486:tid 20490] [client 4.193.202.195:17764] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aXqkE3gqSZb6GBx5nnMXKwAAAQE"]
[Thu Jan 29 08:04:35.445836 2026] [:error] [pid 20580:tid 20679] [client 4.193.202.195:17728] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aXqkE5CZ5HHdXPmeL59qjAAAAos"]
[Thu Jan 29 08:04:35.837286 2026] [:error] [pid 19070:tid 19126] [client 4.193.202.195:17781] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aXqkE7ou83lIon_aKgY3_gAAAFQ"]
[Thu Jan 29 08:04:36.050452 2026] [:error] [pid 19071:tid 19136] [client 4.193.202.195:17691] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aXqkFJfa8Ix5wWmtmJzE1AAAAIM"]
[Thu Jan 29 08:04:36.238589 2026] [:error] [pid 20576:tid 20593] [client 4.193.202.195:17714] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aXqkFCrDZws_FlQGi9fnSQAAAcc"]
[Thu Jan 29 08:04:36.521980 2026] [:error] [pid 19071:tid 19138] [client 4.193.202.195:17776] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aXqkFJfa8Ix5wWmtmJzE1wAAAIU"]
[Thu Jan 29 08:04:36.727269 2026] [:error] [pid 20576:tid 20598] [client 4.193.202.195:17777] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aXqkFCrDZws_FlQGi9fnSgAAAcw"]
[Thu Jan 29 08:04:36.925880 2026] [:error] [pid 20578:tid 20618] [client 4.193.202.195:17734] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aXqkFA6UX7yOMwQFiyec1gAAAgU"]
[Thu Jan 29 08:04:37.186319 2026] [:error] [pid 20580:tid 20676] [client 4.193.202.195:17917] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aXqkFZCZ5HHdXPmeL59qkQAAAog"]
[Thu Jan 29 08:04:37.372920 2026] [:error] [pid 20486:tid 20500] [client 4.193.202.195:17745] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aXqkFXgqSZb6GBx5nnMXLgAAAQs"]
[Thu Jan 29 08:04:37.548981 2026] [:error] [pid 19070:tid 19117] [client 4.193.202.195:17849] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aXqkFbou83lIon_aKgY4AgAAAEs"]
[Thu Jan 29 08:04:37.828261 2026] [:error] [pid 19071:tid 19140] [client 4.193.202.195:17903] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aXqkFZfa8Ix5wWmtmJzE2gAAAIc"]
[Thu Jan 29 08:04:38.031703 2026] [:error] [pid 19069:tid 19099] [client 4.193.202.195:17730] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aXqkFvDHsRM4BJ9a4Qt6BAAAABU"]
[Thu Jan 29 08:04:38.239184 2026] [:error] [pid 19070:tid 19106] [client 4.193.202.195:17687] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aXqkFrou83lIon_aKgY4BAAAAEA"]
[Thu Jan 29 08:04:38.435701 2026] [:error] [pid 20576:tid 20601] [client 4.193.202.195:17747] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aXqkFirDZws_FlQGi9fnTQAAAc8"]
[Thu Jan 29 08:04:39.028190 2026] [:error] [pid 20486:tid 20505] [client 4.193.202.195:17768] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aXqkF3gqSZb6GBx5nnMXMAAAARA"]
[Thu Jan 29 08:04:39.703522 2026] [:error] [pid 19070:tid 19121] [client 4.193.202.195:17871] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aXqkF7ou83lIon_aKgY4CQAAAE8"]
[Thu Jan 29 08:04:40.032042 2026] [:error] [pid 20486:tid 20489] [client 4.193.202.195:17888] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aXqkGHgqSZb6GBx5nnMXNQAAAQA"]
[Thu Jan 29 08:04:40.385160 2026] [:error] [pid 20576:tid 20595] [client 4.193.202.195:17763] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aXqkGCrDZws_FlQGi9fnTwAAAck"]
[Thu Jan 29 08:04:41.164942 2026] [:error] [pid 20486:tid 20497] [client 4.193.202.195:17772] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zfile.php"] [unique_id "aXqkGXgqSZb6GBx5nnMXOwAAAQg"]
[Thu Jan 29 08:04:41.480775 2026] [:error] [pid 19069:tid 19092] [client 4.193.202.195:17694] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zfile.php"] [unique_id "aXqkGfDHsRM4BJ9a4Qt6BwAAAA4"]
[Thu Jan 29 08:04:41.945459 2026] [:error] [pid 19071:tid 19155] [client 4.193.202.195:17614] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zfile.php"] [unique_id "aXqkGZfa8Ix5wWmtmJzE4gAAAJY"]
[Thu Jan 29 08:04:42.189632 2026] [:error] [pid 19070:tid 19118] [client 4.193.202.195:17746] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zfile.php"] [unique_id "aXqkGrou83lIon_aKgY4DQAAAEw"]
[Thu Jan 29 08:04:42.459207 2026] [:error] [pid 19071:tid 19157] [client 4.193.202.195:17757] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/conflg.php"] [unique_id "aXqkGpfa8Ix5wWmtmJzE4wAAAJg"]
[Thu Jan 29 08:04:42.713661 2026] [:error] [pid 19070:tid 19124] [client 4.193.202.195:17787] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/conflg.php"] [unique_id "aXqkGrou83lIon_aKgY4DgAAAFI"]
[Thu Jan 29 08:04:42.903838 2026] [:error] [pid 19070:tid 19130] [client 4.193.202.195:17775] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/conflg.php"] [unique_id "aXqkGrou83lIon_aKgY4EAAAAFg"]
[Thu Jan 29 08:04:43.261491 2026] [:error] [pid 20578:tid 20630] [client 4.193.202.195:17684] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/conflg.php"] [unique_id "aXqkGw6UX7yOMwQFiyec2wAAAhE"]
[Thu Jan 29 08:04:43.527412 2026] [:error] [pid 19069:tid 19100] [client 4.193.202.195:17668] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkG_DHsRM4BJ9a4Qt6CgAAABY"]
[Thu Jan 29 08:04:43.704620 2026] [:error] [pid 20579:tid 20661] [client 4.193.202.195:17842] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkGzVXNopcNyjJc9WETgAAAlQ"]
[Thu Jan 29 08:04:43.889673 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17692] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkG_DHsRM4BJ9a4Qt6CwAAAAo"]
[Thu Jan 29 08:04:44.097158 2026] [:error] [pid 19069:tid 19097] [client 4.193.202.195:17716] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkHPDHsRM4BJ9a4Qt6DAAAABM"]
[Thu Jan 29 08:04:44.295190 2026] [:error] [pid 20486:tid 20504] [client 4.193.202.195:17606] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aXqkHHgqSZb6GBx5nnMXRAAAAQ8"]
[Thu Jan 29 08:04:44.541954 2026] [:error] [pid 19070:tid 19106] [client 4.193.202.195:17711] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aXqkHLou83lIon_aKgY4EgAAAEA"]
[Thu Jan 29 08:04:44.755394 2026] [:error] [pid 20486:tid 20498] [client 4.193.202.195:17719] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aXqkHHgqSZb6GBx5nnMXSAAAAQk"]
[Thu Jan 29 08:04:44.987758 2026] [:error] [pid 20580:tid 20692] [client 4.193.202.195:17847] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aXqkHJCZ5HHdXPmeL59qlwAAApg"]
[Thu Jan 29 08:04:45.302079 2026] [:error] [pid 20580:tid 20672] [client 4.193.202.195:17669] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aXqkHZCZ5HHdXPmeL59qmAAAAoQ"]
[Thu Jan 29 08:04:45.659391 2026] [:error] [pid 20580:tid 20691] [client 4.193.202.195:17643] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aXqkHZCZ5HHdXPmeL59qmgAAApc"]
[Thu Jan 29 08:04:46.154500 2026] [:error] [pid 19069:tid 19099] [client 4.193.202.195:17733] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aXqkHvDHsRM4BJ9a4Qt6EgAAABU"]
[Thu Jan 29 08:04:46.434724 2026] [:error] [pid 19071:tid 19151] [client 4.193.202.195:17682] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aXqkHpfa8Ix5wWmtmJzE5AAAAJI"]
[Thu Jan 29 08:04:46.847713 2026] [:error] [pid 19071:tid 19134] [client 4.193.202.195:17675] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aXqkHpfa8Ix5wWmtmJzE5wAAAIE"]
[Thu Jan 29 08:04:47.184186 2026] [:error] [pid 20578:tid 20634] [client 4.193.202.195:17700] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aXqkHw6UX7yOMwQFiyec4QAAAhU"]
[Thu Jan 29 08:04:47.380224 2026] [:error] [pid 20486:tid 20503] [client 4.193.202.195:17717] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aXqkH3gqSZb6GBx5nnMXUwAAAQ4"]
[Thu Jan 29 08:04:47.564396 2026] [:error] [pid 20486:tid 20496] [client 4.193.202.195:17863] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/NewFile.php"] [unique_id "aXqkH3gqSZb6GBx5nnMXVAAAAQc"]
[Thu Jan 29 08:04:47.790868 2026] [:error] [pid 19071:tid 19144] [client 4.193.202.195:17613] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/406.php"] [unique_id "aXqkH5fa8Ix5wWmtmJzE7AAAAIs"]
[Thu Jan 29 08:04:48.007671 2026] [:error] [pid 20576:tid 20592] [client 4.193.202.195:17678] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/406.php"] [unique_id "aXqkICrDZws_FlQGi9fnVAAAAcY"]
[Thu Jan 29 08:04:48.187632 2026] [:error] [pid 20576:tid 20598] [client 4.193.202.195:17720] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/406.php"] [unique_id "aXqkICrDZws_FlQGi9fnVQAAAcw"]
[Thu Jan 29 08:04:48.393167 2026] [:error] [pid 20578:tid 20626] [client 4.193.202.195:17672] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/406.php"] [unique_id "aXqkIA6UX7yOMwQFiyec4gAAAg0"]
[Thu Jan 29 08:04:48.585609 2026] [:error] [pid 20578:tid 20618] [client 4.193.202.195:17621] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r.php"] [unique_id "aXqkIA6UX7yOMwQFiyec4wAAAgU"]
[Thu Jan 29 08:04:48.759932 2026] [:error] [pid 20519:tid 20554] [client 4.193.202.195:17753] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r.php"] [unique_id "aXqkIAo4s4fyROrkyRlZXQAAAYY"]
[Thu Jan 29 08:04:48.980132 2026] [:error] [pid 19071:tid 19142] [client 4.193.202.195:17780] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r.php"] [unique_id "aXqkIJfa8Ix5wWmtmJzE8AAAAIk"]
[Thu Jan 29 08:04:49.175232 2026] [:error] [pid 19069:tid 19095] [client 4.193.202.195:17750] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r.php"] [unique_id "aXqkIfDHsRM4BJ9a4Qt6GAAAABE"]
[Thu Jan 29 08:04:49.360844 2026] [:error] [pid 20576:tid 20590] [client 4.193.202.195:17758] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "aXqkISrDZws_FlQGi9fnVgAAAcQ"]
[Thu Jan 29 08:04:49.541718 2026] [:error] [pid 20579:tid 20656] [client 4.193.202.195:17610] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "aXqkITVXNopcNyjJc9WEUAAAAk8"]
[Thu Jan 29 08:04:49.722988 2026] [:error] [pid 20578:tid 20613] [client 4.193.202.195:17696] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "aXqkIQ6UX7yOMwQFiyec5gAAAgA"]
[Thu Jan 29 08:04:49.998278 2026] [:error] [pid 20579:tid 20641] [client 4.193.202.195:17697] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "aXqkITVXNopcNyjJc9WEUwAAAkA"]
[Thu Jan 29 08:04:50.180516 2026] [:error] [pid 20579:tid 20652] [client 4.193.202.195:17602] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aXqkIjVXNopcNyjJc9WEVAAAAks"]
[Thu Jan 29 08:04:50.389943 2026] [:error] [pid 20579:tid 20654] [client 4.193.202.195:17677] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aXqkIjVXNopcNyjJc9WEWQAAAk0"]
[Thu Jan 29 08:04:50.593321 2026] [:error] [pid 20576:tid 20601] [client 4.193.202.195:17611] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aXqkIirDZws_FlQGi9fnVwAAAc8"]
[Thu Jan 29 08:04:50.867900 2026] [:error] [pid 19177:tid 19183] [client 4.193.202.195:17882] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aXqkInipGz0PT8TrQv4H_QAAAMQ"]
[Thu Jan 29 08:04:51.167582 2026] [:error] [pid 20519:tid 20555] [client 4.193.202.195:17767] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aXqkIwo4s4fyROrkyRlZXwAAAYc"]
[Thu Jan 29 08:04:51.373133 2026] [:error] [pid 20486:tid 20495] [client 4.193.202.195:17774] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aXqkI3gqSZb6GBx5nnMXWQAAAQY"]
[Thu Jan 29 08:04:51.548056 2026] [:error] [pid 20486:tid 20499] [client 4.193.202.195:17539] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aXqkI3gqSZb6GBx5nnMXWgAAAQo"]
[Thu Jan 29 08:04:51.757468 2026] [:error] [pid 20486:tid 20503] [client 4.193.202.195:17698] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aXqkI3gqSZb6GBx5nnMXXQAAAQ4"]
[Thu Jan 29 08:04:51.937618 2026] [:error] [pid 20486:tid 20496] [client 4.193.202.195:17665] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aXqkI3gqSZb6GBx5nnMXXgAAAQc"]
[Thu Jan 29 08:04:52.111851 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17689] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aXqkJPDHsRM4BJ9a4Qt6HAAAAAo"]
[Thu Jan 29 08:04:52.312249 2026] [:error] [pid 19177:tid 19199] [client 4.193.202.195:17721] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aXqkJHipGz0PT8TrQv4IAAAAANQ"]
[Thu Jan 29 08:04:52.517439 2026] [:error] [pid 20486:tid 20498] [client 4.193.202.195:17709] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aXqkJHgqSZb6GBx5nnMXYAAAAQk"]
[Thu Jan 29 08:04:52.738057 2026] [:error] [pid 20486:tid 20509] [client 4.193.202.195:17791] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aXqkJHgqSZb6GBx5nnMXYQAAARQ"]
[Thu Jan 29 08:04:53.044077 2026] [:error] [pid 20486:tid 20513] [client 4.193.202.195:17681] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aXqkJXgqSZb6GBx5nnMXYgAAARg"]
[Thu Jan 29 08:04:53.298407 2026] [:error] [pid 20486:tid 20510] [client 4.193.202.195:17670] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aXqkJXgqSZb6GBx5nnMXYwAAARU"]
[Thu Jan 29 08:04:53.512482 2026] [:error] [pid 20486:tid 20502] [client 4.193.202.195:17908] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aXqkJXgqSZb6GBx5nnMXZgAAAQ0"]
[Thu Jan 29 08:04:53.697321 2026] [:error] [pid 20486:tid 20489] [client 4.193.202.195:17671] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aXqkJXgqSZb6GBx5nnMXaQAAAQA"]
[Thu Jan 29 08:04:53.872053 2026] [:error] [pid 19177:tid 19187] [client 4.193.202.195:17856] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aXqkJXipGz0PT8TrQv4IBQAAAMg"]
[Thu Jan 29 08:04:54.096139 2026] [:error] [pid 20486:tid 20501] [client 4.193.202.195:17600] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aXqkJngqSZb6GBx5nnMXawAAAQw"]
[Thu Jan 29 08:04:54.392531 2026] [:error] [pid 19069:tid 19102] [client 4.193.202.195:17686] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aXqkJvDHsRM4BJ9a4Qt6HwAAABg"]
[Thu Jan 29 08:04:54.587817 2026] [:error] [pid 20578:tid 20617] [client 4.193.202.195:17704] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aXqkJg6UX7yOMwQFiyec6wAAAgQ"]
[Thu Jan 29 08:04:54.776941 2026] [:error] [pid 20578:tid 20626] [client 4.193.202.195:17759] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aXqkJg6UX7yOMwQFiyec7AAAAg0"]
[Thu Jan 29 08:04:54.979733 2026] [:error] [pid 19070:tid 19120] [client 4.193.202.195:17739] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aXqkJrou83lIon_aKgY4FQAAAE4"]
[Thu Jan 29 08:04:55.180467 2026] [:error] [pid 19069:tid 19099] [client 4.193.202.195:17706] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aXqkJ_DHsRM4BJ9a4Qt6IAAAABU"]
[Thu Jan 29 08:04:55.356203 2026] [:error] [pid 20578:tid 20618] [client 4.193.202.195:17654] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkJw6UX7yOMwQFiyec7gAAAgU"]
[Thu Jan 29 08:04:55.563411 2026] [:error] [pid 19177:tid 19201] [client 4.193.202.195:17635] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkJ3ipGz0PT8TrQv4ICAAAANY"]
[Thu Jan 29 08:04:55.738981 2026] [:error] [pid 20578:tid 20614] [client 4.193.202.195:17619] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkJw6UX7yOMwQFiyec7wAAAgE"]
[Thu Jan 29 08:04:55.944502 2026] [:error] [pid 20578:tid 20627] [client 4.193.202.195:17693] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkJw6UX7yOMwQFiyec8AAAAg4"]
[Thu Jan 29 08:04:56.127421 2026] [:error] [pid 20578:tid 20616] [client 4.193.202.195:17626] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asas.php"] [unique_id "aXqkKA6UX7yOMwQFiyec8QAAAgM"]
[Thu Jan 29 08:04:56.352680 2026] [:error] [pid 19071:tid 19138] [client 4.193.202.195:17860] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asas.php"] [unique_id "aXqkKJfa8Ix5wWmtmJzE9QAAAIU"]
[Thu Jan 29 08:04:56.543481 2026] [:error] [pid 20579:tid 20650] [client 4.193.202.195:17658] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asas.php"] [unique_id "aXqkKDVXNopcNyjJc9WEWwAAAkk"]
[Thu Jan 29 08:04:56.717310 2026] [:error] [pid 19070:tid 19119] [client 4.193.202.195:17685] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asas.php"] [unique_id "aXqkKLou83lIon_aKgY4FwAAAE0"]
[Thu Jan 29 08:04:56.897894 2026] [:error] [pid 20486:tid 20494] [client 4.193.202.195:17760] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rk2.php"] [unique_id "aXqkKHgqSZb6GBx5nnMXdAAAAQU"]
[Thu Jan 29 08:04:57.251833 2026] [:error] [pid 19070:tid 19130] [client 4.193.202.195:17755] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rk2.php"] [unique_id "aXqkKbou83lIon_aKgY4GAAAAFg"]
[Thu Jan 29 08:04:57.428897 2026] [:error] [pid 19069:tid 19084] [client 4.193.202.195:17701] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rk2.php"] [unique_id "aXqkKfDHsRM4BJ9a4Qt6JwAAAAY"]
[Thu Jan 29 08:04:57.610494 2026] [:error] [pid 20486:tid 20502] [client 4.193.202.195:17857] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rk2.php"] [unique_id "aXqkKXgqSZb6GBx5nnMXdgAAAQ0"]
[Thu Jan 29 08:04:57.790764 2026] [:error] [pid 20486:tid 20512] [client 4.193.202.195:17707] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "aXqkKXgqSZb6GBx5nnMXdwAAARc"]
[Thu Jan 29 08:04:58.048255 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17726] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "aXqkKvDHsRM4BJ9a4Qt6KAAAAAo"]
[Thu Jan 29 08:04:58.240487 2026] [:error] [pid 20579:tid 20645] [client 4.193.202.195:17630] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "aXqkKjVXNopcNyjJc9WEXgAAAkQ"]
[Thu Jan 29 08:04:58.417823 2026] [:error] [pid 20579:tid 20668] [client 4.193.202.195:17799] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "aXqkKjVXNopcNyjJc9WEXwAAAlg"]
[Thu Jan 29 08:04:58.631846 2026] [:error] [pid 20486:tid 20496] [client 4.193.202.195:17690] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aXqkKngqSZb6GBx5nnMXfAAAAQc"]
[Thu Jan 29 08:04:58.853494 2026] [:error] [pid 20578:tid 20622] [client 4.193.202.195:17546] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aXqkKg6UX7yOMwQFiyec9QAAAgk"]
[Thu Jan 29 08:04:59.037688 2026] [:error] [pid 19177:tid 19199] [client 4.193.202.195:17627] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aXqkK3ipGz0PT8TrQv4IEQAAANQ"]
[Thu Jan 29 08:04:59.291924 2026] [:error] [pid 19070:tid 19117] [client 4.193.202.195:17712] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aXqkK7ou83lIon_aKgY4HwAAAEs"]
[Thu Jan 29 08:04:59.472867 2026] [:error] [pid 19071:tid 19136] [client 4.193.202.195:17752] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-aespa.php"] [unique_id "aXqkK5fa8Ix5wWmtmJzE9wAAAIM"]
[Thu Jan 29 08:04:59.705321 2026] [:error] [pid 19070:tid 19113] [client 4.193.202.195:17722] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-aespa.php"] [unique_id "aXqkK7ou83lIon_aKgY4IQAAAEc"]
[Thu Jan 29 08:04:59.961371 2026] [:error] [pid 19070:tid 19114] [client 4.193.202.195:17786] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-aespa.php"] [unique_id "aXqkK7ou83lIon_aKgY4IgAAAEg"]
[Thu Jan 29 08:05:00.144830 2026] [:error] [pid 19070:tid 19107] [client 4.193.202.195:17705] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-aespa.php"] [unique_id "aXqkLLou83lIon_aKgY4IwAAAEE"]
[Thu Jan 29 08:05:00.391290 2026] [:error] [pid 19070:tid 19123] [client 4.193.202.195:17641] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aXqkLLou83lIon_aKgY4JQAAAFE"]
[Thu Jan 29 08:05:00.574820 2026] [:error] [pid 19069:tid 19078] [client 4.193.202.195:17601] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aXqkLPDHsRM4BJ9a4Qt6KQAAAAA"]
[Thu Jan 29 08:05:00.760748 2026] [:error] [pid 20578:tid 20617] [client 4.193.202.195:17663] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aXqkLA6UX7yOMwQFiyec-AAAAgQ"]
[Thu Jan 29 08:05:00.953452 2026] [:error] [pid 20579:tid 20642] [client 4.193.202.195:17785] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aXqkLDVXNopcNyjJc9WEYAAAAkE"]
[Thu Jan 29 08:05:01.162135 2026] [:error] [pid 19071:tid 19143] [client 4.193.202.195:17631] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkLZfa8Ix5wWmtmJzE-AAAAIo"]
[Thu Jan 29 08:05:01.337403 2026] [:error] [pid 19071:tid 19146] [client 4.193.202.195:17699] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkLZfa8Ix5wWmtmJzE-gAAAI0"]
[Thu Jan 29 08:05:01.523240 2026] [:error] [pid 20578:tid 20618] [client 4.193.202.195:17542] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkLQ6UX7yOMwQFiyec_AAAAgU"]
[Thu Jan 29 08:05:01.702362 2026] [:error] [pid 19070:tid 19119] [client 4.193.202.195:17723] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aXqkLbou83lIon_aKgY4KQAAAE0"]
[Thu Jan 29 08:05:01.905476 2026] [:error] [pid 19069:tid 19099] [client 4.193.202.195:17560] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aXqkLfDHsRM4BJ9a4Qt6KgAAABU"]
[Thu Jan 29 08:05:02.105600 2026] [:error] [pid 19071:tid 19135] [client 4.193.202.195:17647] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aXqkLpfa8Ix5wWmtmJzE_QAAAII"]
[Thu Jan 29 08:05:02.319658 2026] [:error] [pid 20519:tid 20553] [client 4.193.202.195:17629] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aXqkLgo4s4fyROrkyRlZZQAAAYU"]
[Thu Jan 29 08:05:02.497890 2026] [:error] [pid 19070:tid 19110] [client 4.193.202.195:17538] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aXqkLrou83lIon_aKgY4KwAAAEQ"]
[Thu Jan 29 08:05:02.718886 2026] [:error] [pid 20578:tid 20625] [client 4.193.202.195:17625] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aXqkLg6UX7yOMwQFiyedAAAAAgw"]
[Thu Jan 29 08:05:02.893504 2026] [:error] [pid 19070:tid 19124] [client 4.193.202.195:17566] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aXqkLrou83lIon_aKgY4LAAAAFI"]
[Thu Jan 29 08:05:03.070865 2026] [:error] [pid 19070:tid 19112] [client 4.193.202.195:17836] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aXqkL7ou83lIon_aKgY4LgAAAEY"]
[Thu Jan 29 08:05:03.298325 2026] [:error] [pid 19071:tid 19150] [client 4.193.202.195:17618] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aXqkL5fa8Ix5wWmtmJzE_gAAAJE"]
[Thu Jan 29 08:05:03.602271 2026] [:error] [pid 19070:tid 19106] [client 4.193.202.195:17540] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aXqkL7ou83lIon_aKgY4MQAAAEA"]
[Thu Jan 29 08:05:03.781031 2026] [:error] [pid 19070:tid 19113] [client 4.193.202.195:17605] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aXqkL7ou83lIon_aKgY4MgAAAEc"]
[Thu Jan 29 08:05:04.020300 2026] [proxy_fcgi:error] [pid 20486:tid 20505] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.113300 2026] [proxy_fcgi:error] [pid 20486:tid 20511] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.206225 2026] [proxy_fcgi:error] [pid 20486:tid 20498] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.299050 2026] [proxy_fcgi:error] [pid 20486:tid 20503] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.391160 2026] [proxy_fcgi:error] [pid 20486:tid 20508] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.483234 2026] [proxy_fcgi:error] [pid 20486:tid 20504] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.575342 2026] [proxy_fcgi:error] [pid 20486:tid 20506] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.668320 2026] [proxy_fcgi:error] [pid 20486:tid 20513] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.761832 2026] [proxy_fcgi:error] [pid 20486:tid 20493] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.856288 2026] [proxy_fcgi:error] [pid 20486:tid 20500] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:04.949048 2026] [proxy_fcgi:error] [pid 20486:tid 20489] [client 4.193.202.195:17788] AH01071: Got error 'Primary script unknown'
[Thu Jan 29 08:05:05.053904 2026] [:error] [pid 20486:tid 20490] [client 4.193.202.195:17788] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aXqkMXgqSZb6GBx5nnMXjgAAAQE"]
[Thu Jan 29 08:05:05.247624 2026] [:error] [pid 19070:tid 19119] [client 4.193.202.195:17710] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aXqkMbou83lIon_aKgY4NgAAAE0"]
[Thu Jan 29 08:05:05.514926 2026] [:error] [pid 19071:tid 19147] [client 4.193.202.195:17620] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aXqkMZfa8Ix5wWmtmJzFBAAAAI4"]
[Thu Jan 29 08:05:05.742893 2026] [:error] [pid 19070:tid 19124] [client 4.193.202.195:17662] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aXqkMbou83lIon_aKgY4NwAAAFI"]
[Thu Jan 29 08:05:06.021094 2026] [:error] [pid 20578:tid 20632] [client 4.193.202.195:17607] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aXqkMg6UX7yOMwQFiyedAwAAAhM"]
[Thu Jan 29 08:05:06.383008 2026] [:error] [pid 20579:tid 20649] [client 4.193.202.195:17725] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aXqkMjVXNopcNyjJc9WEYwAAAkg"]
[Thu Jan 29 08:05:06.606263 2026] [:error] [pid 19069:tid 19083] [client 4.193.202.195:17624] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aXqkMvDHsRM4BJ9a4Qt6LwAAAAU"]
[Thu Jan 29 08:05:06.814093 2026] [:error] [pid 20578:tid 20622] [client 4.193.202.195:17562] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aXqkMg6UX7yOMwQFiyedBQAAAgk"]
[Thu Jan 29 08:05:07.021162 2026] [:error] [pid 19069:tid 19087] [client 4.193.202.195:17567] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/web.php"] [unique_id "aXqkM_DHsRM4BJ9a4Qt6MAAAAAk"]
[Thu Jan 29 08:05:07.197449 2026] [:error] [pid 20486:tid 20495] [client 4.193.202.195:17871] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/web.php"] [unique_id "aXqkM3gqSZb6GBx5nnMXkQAAAQY"]
[Thu Jan 29 08:05:07.383372 2026] [:error] [pid 20578:tid 20619] [client 4.193.202.195:17616] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/web.php"] [unique_id "aXqkMw6UX7yOMwQFiyedBwAAAgY"]
[Thu Jan 29 08:05:07.563871 2026] [:error] [pid 19177:tid 19183] [client 4.193.202.195:17676] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/web.php"] [unique_id "aXqkM3ipGz0PT8TrQv4IGAAAAMQ"]
[Thu Jan 29 08:05:07.761712 2026] [:error] [pid 20578:tid 20629] [client 4.193.202.195:17636] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aXqkMw6UX7yOMwQFiyedCAAAAhA"]
[Thu Jan 29 08:05:07.937805 2026] [:error] [pid 19069:tid 19090] [client 4.193.202.195:17661] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aXqkM_DHsRM4BJ9a4Qt6MwAAAAw"]
[Thu Jan 29 08:05:08.118033 2026] [:error] [pid 19177:tid 19184] [client 4.193.202.195:17648] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aXqkNHipGz0PT8TrQv4IGQAAAMU"]
[Thu Jan 29 08:05:08.325731 2026] [:error] [pid 19070:tid 19111] [client 4.193.202.195:17550] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aXqkNLou83lIon_aKgY4OwAAAEU"]
[Thu Jan 29 08:05:08.502795 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17632] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aXqkNPDHsRM4BJ9a4Qt6NwAAAAo"]
[Thu Jan 29 08:05:08.685999 2026] [:error] [pid 19069:tid 19097] [client 4.193.202.195:17506] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aXqkNPDHsRM4BJ9a4Qt6OAAAABM"]
[Thu Jan 29 08:05:08.862559 2026] [:error] [pid 20486:tid 20499] [client 4.193.202.195:17604] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aXqkNHgqSZb6GBx5nnMXkgAAAQo"]
[Thu Jan 29 08:05:09.051673 2026] [:error] [pid 20486:tid 20496] [client 4.193.202.195:17633] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aXqkNXgqSZb6GBx5nnMXkwAAAQc"]
[Thu Jan 29 08:05:09.242754 2026] [:error] [pid 20486:tid 20511] [client 4.193.202.195:17628] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cron.php"] [unique_id "aXqkNXgqSZb6GBx5nnMXlQAAARY"]
[Thu Jan 29 08:05:09.437238 2026] [:error] [pid 20579:tid 20643] [client 4.193.202.195:17552] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cron.php"] [unique_id "aXqkNTVXNopcNyjJc9WEaAAAAkI"]
[Thu Jan 29 08:05:09.682969 2026] [:error] [pid 20486:tid 20498] [client 4.193.202.195:17617] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cron.php"] [unique_id "aXqkNXgqSZb6GBx5nnMXlgAAAQk"]
[Thu Jan 29 08:05:09.885992 2026] [:error] [pid 19069:tid 19091] [client 4.193.202.195:17724] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cron.php"] [unique_id "aXqkNfDHsRM4BJ9a4Qt6PAAAAA0"]
[Thu Jan 29 08:05:10.088319 2026] [:error] [pid 19069:tid 19092] [client 4.193.202.195:17645] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php"] [unique_id "aXqkNvDHsRM4BJ9a4Qt6PgAAAA4"]
[Thu Jan 29 08:05:10.277894 2026] [:error] [pid 20519:tid 20564] [client 4.193.202.195:17841] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php"] [unique_id "aXqkNgo4s4fyROrkyRlZbAAAAZA"]
[Thu Jan 29 08:05:10.454259 2026] [:error] [pid 20486:tid 20504] [client 4.193.202.195:17556] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php"] [unique_id "aXqkNngqSZb6GBx5nnMXmAAAAQ8"]
[Thu Jan 29 08:05:10.628442 2026] [:error] [pid 20486:tid 20507] [client 4.193.202.195:17649] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php"] [unique_id "aXqkNngqSZb6GBx5nnMXmQAAARI"]
[Thu Jan 29 08:05:10.808258 2026] [:error] [pid 20519:tid 20567] [client 4.193.202.195:17565] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aXqkNgo4s4fyROrkyRlZbgAAAZM"]
[Thu Jan 29 08:05:11.001458 2026] [:error] [pid 20578:tid 20631] [client 4.193.202.195:17659] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aXqkNw6UX7yOMwQFiyedDQAAAhI"]
[Thu Jan 29 08:05:11.184880 2026] [:error] [pid 20486:tid 20502] [client 4.193.202.195:17597] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aXqkN3gqSZb6GBx5nnMXmgAAAQ0"]
[Thu Jan 29 08:05:11.362056 2026] [:error] [pid 20486:tid 20500] [client 4.193.202.195:17615] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aXqkN3gqSZb6GBx5nnMXmwAAAQs"]
[Thu Jan 29 08:05:11.537638 2026] [:error] [pid 20486:tid 20492] [client 4.193.202.195:17575] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aXqkN3gqSZb6GBx5nnMXnAAAAQM"]
[Thu Jan 29 08:05:11.781166 2026] [:error] [pid 20580:tid 20667] [client 4.193.202.195:17612] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aXqkN5CZ5HHdXPmeL59qoQAAAoE"]
[Thu Jan 29 08:05:11.958638 2026] [:error] [pid 19070:tid 19112] [client 4.193.202.195:17708] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aXqkN7ou83lIon_aKgY4PwAAAEY"]
[Thu Jan 29 08:05:12.147195 2026] [:error] [pid 19069:tid 19090] [client 4.193.202.195:17544] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aXqkOPDHsRM4BJ9a4Qt6QgAAAAw"]
[Thu Jan 29 08:05:12.339897 2026] [:error] [pid 20578:tid 20613] [client 4.193.202.195:17559] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aXqkOA6UX7yOMwQFiyedEAAAAgA"]
[Thu Jan 29 08:05:12.518140 2026] [:error] [pid 19177:tid 19186] [client 4.193.202.195:17598] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aXqkOHipGz0PT8TrQv4IIQAAAMc"]
[Thu Jan 29 08:05:12.692940 2026] [:error] [pid 20578:tid 20630] [client 4.193.202.195:17564] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aXqkOA6UX7yOMwQFiyedEQAAAhE"]
[Thu Jan 29 08:05:12.870328 2026] [:error] [pid 20576:tid 20600] [client 4.193.202.195:17655] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aXqkOCrDZws_FlQGi9fnbQAAAc4"]
[Thu Jan 29 08:05:13.046325 2026] [:error] [pid 19177:tid 19195] [client 4.193.202.195:17568] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aXqkOXipGz0PT8TrQv4IIgAAANA"]
[Thu Jan 29 08:05:13.238756 2026] [:error] [pid 20519:tid 20553] [client 4.193.202.195:17588] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aXqkOQo4s4fyROrkyRlZcQAAAYU"]
[Thu Jan 29 08:05:13.433296 2026] [:error] [pid 20579:tid 20660] [client 4.193.202.195:17603] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aXqkOTVXNopcNyjJc9WEawAAAlM"]
[Thu Jan 29 08:05:13.615100 2026] [:error] [pid 20580:tid 20678] [client 4.193.202.195:17573] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aXqkOZCZ5HHdXPmeL59qpAAAAoo"]
[Thu Jan 29 08:05:13.792083 2026] [:error] [pid 20578:tid 20629] [client 4.193.202.195:17547] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aXqkOQ6UX7yOMwQFiyedFgAAAhA"]
[Thu Jan 29 08:05:13.986874 2026] [:error] [pid 19069:tid 19100] [client 4.193.202.195:17594] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aXqkOfDHsRM4BJ9a4Qt6RgAAABY"]
[Thu Jan 29 08:05:14.210160 2026] [:error] [pid 19071:tid 19137] [client 4.193.202.195:17577] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aXqkOpfa8Ix5wWmtmJzFCwAAAIQ"]
[Thu Jan 29 08:05:14.411217 2026] [:error] [pid 20576:tid 20586] [client 4.193.202.195:17642] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aXqkOirDZws_FlQGi9fnbgAAAcA"]
[Thu Jan 29 08:05:14.590007 2026] [:error] [pid 19070:tid 19117] [client 4.193.202.195:17657] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-widgets.php"] [unique_id "aXqkOrou83lIon_aKgY4QwAAAEs"]
[Thu Jan 29 08:05:14.787699 2026] [:error] [pid 20519:tid 20554] [client 4.193.202.195:17472] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-widgets.php"] [unique_id "aXqkOgo4s4fyROrkyRlZdQAAAYY"]
[Thu Jan 29 08:05:14.972755 2026] [:error] [pid 19069:tid 19079] [client 4.193.202.195:17637] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-widgets.php"] [unique_id "aXqkOvDHsRM4BJ9a4Qt6RwAAAAE"]
[Thu Jan 29 08:05:15.157728 2026] [:error] [pid 19069:tid 19091] [client 4.193.202.195:17584] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-widgets.php"] [unique_id "aXqkO_DHsRM4BJ9a4Qt6SQAAAA0"]
[Thu Jan 29 08:05:15.357458 2026] [:error] [pid 19070:tid 19114] [client 4.193.202.195:17497] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpupex.php"] [unique_id "aXqkO7ou83lIon_aKgY4RQAAAEg"]
[Thu Jan 29 08:05:15.540648 2026] [:error] [pid 19177:tid 19199] [client 4.193.202.195:17608] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpupex.php"] [unique_id "aXqkO3ipGz0PT8TrQv4IJAAAANQ"]
[Thu Jan 29 08:05:15.725513 2026] [:error] [pid 20486:tid 20495] [client 4.193.202.195:17644] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpupex.php"] [unique_id "aXqkO3gqSZb6GBx5nnMXqgAAAQY"]
[Thu Jan 29 08:05:15.929158 2026] [:error] [pid 19071:tid 19155] [client 4.193.202.195:17653] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpupex.php"] [unique_id "aXqkO5fa8Ix5wWmtmJzFDAAAAJY"]
[Thu Jan 29 08:05:16.120893 2026] [:error] [pid 20579:tid 20642] [client 4.193.202.195:17587] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aXqkPDVXNopcNyjJc9WEbQAAAkE"]
[Thu Jan 29 08:05:16.335801 2026] [:error] [pid 19071:tid 19147] [client 4.193.202.195:17509] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aXqkPJfa8Ix5wWmtmJzFDQAAAI4"]
[Thu Jan 29 08:05:16.526915 2026] [:error] [pid 19071:tid 19138] [client 4.193.202.195:17581] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aXqkPJfa8Ix5wWmtmJzFDwAAAIU"]
[Thu Jan 29 08:05:16.708811 2026] [:error] [pid 20579:tid 20656] [client 4.193.202.195:17623] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aXqkPDVXNopcNyjJc9WEbwAAAk8"]
[Thu Jan 29 08:05:16.893891 2026] [:error] [pid 19177:tid 19184] [client 4.193.202.195:17551] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aXqkPHipGz0PT8TrQv4IJwAAAMU"]
[Thu Jan 29 08:05:17.075885 2026] [:error] [pid 19070:tid 19123] [client 4.193.202.195:17580] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aXqkPbou83lIon_aKgY4SQAAAFE"]
[Thu Jan 29 08:05:17.263788 2026] [:error] [pid 20519:tid 20550] [client 4.193.202.195:17634] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aXqkPQo4s4fyROrkyRlZdgAAAYI"]
[Thu Jan 29 08:05:17.511708 2026] [:error] [pid 19070:tid 19129] [client 4.193.202.195:17595] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aXqkPbou83lIon_aKgY4SgAAAFc"]
[Thu Jan 29 08:05:17.704383 2026] [:error] [pid 20579:tid 20647] [client 4.193.202.195:17718] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aXqkPTVXNopcNyjJc9WEcQAAAkY"]
[Thu Jan 29 08:05:17.901644 2026] [:error] [pid 19071:tid 19143] [client 4.193.202.195:17545] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aXqkPZfa8Ix5wWmtmJzFEwAAAIo"]
[Thu Jan 29 08:05:18.125855 2026] [:error] [pid 20486:tid 20509] [client 4.193.202.195:17593] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aXqkPngqSZb6GBx5nnMXrgAAARQ"]
[Thu Jan 29 08:05:18.374945 2026] [:error] [pid 19177:tid 19200] [client 4.193.202.195:17770] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aXqkPnipGz0PT8TrQv4IKAAAANU"]
[Thu Jan 29 08:05:18.561228 2026] [:error] [pid 20576:tid 20588] [client 4.193.202.195:17586] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aXqkPirDZws_FlQGi9fncwAAAcI"]
[Thu Jan 29 08:05:18.740108 2026] [:error] [pid 20576:tid 20609] [client 4.193.202.195:17576] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aXqkPirDZws_FlQGi9fndQAAAdc"]
[Thu Jan 29 08:05:18.920633 2026] [:error] [pid 19071:tid 19146] [client 4.193.202.195:17721] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aXqkPpfa8Ix5wWmtmJzFFQAAAI0"]
[Thu Jan 29 08:05:19.164455 2026] [:error] [pid 20579:tid 20664] [client 4.193.202.195:17484] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aXqkPzVXNopcNyjJc9WEdAAAAlY"]
[Thu Jan 29 08:05:19.373277 2026] [:error] [pid 19070:tid 19112] [client 4.193.202.195:17683] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aXqkP7ou83lIon_aKgY4TwAAAEY"]
[Thu Jan 29 08:05:19.664910 2026] [:error] [pid 20578:tid 20622] [client 4.193.202.195:17670] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aXqkPw6UX7yOMwQFiyedHQAAAgk"]
[Thu Jan 29 08:05:19.869927 2026] [:error] [pid 20579:tid 20644] [client 4.193.202.195:17536] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aXqkPzVXNopcNyjJc9WEdQAAAkM"]
[Thu Jan 29 08:05:20.073139 2026] [:error] [pid 20519:tid 20562] [client 4.193.202.195:17523] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aXqkQAo4s4fyROrkyRlZfAAAAY4"]
[Thu Jan 29 08:05:20.296145 2026] [:error] [pid 19071:tid 19157] [client 4.193.202.195:17646] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aXqkQJfa8Ix5wWmtmJzFFwAAAJg"]
[Thu Jan 29 08:05:20.478942 2026] [:error] [pid 19071:tid 19135] [client 4.193.202.195:17583] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aXqkQJfa8Ix5wWmtmJzFGAAAAII"]
[Thu Jan 29 08:05:20.693372 2026] [:error] [pid 19071:tid 19151] [client 4.193.202.195:17490] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aXqkQJfa8Ix5wWmtmJzFGQAAAJI"]
[Thu Jan 29 08:05:20.878460 2026] [:error] [pid 20580:tid 20682] [client 4.193.202.195:17574] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aXqkQJCZ5HHdXPmeL59qtAAAAo4"]
[Thu Jan 29 08:05:21.071009 2026] [:error] [pid 20486:tid 20513] [client 4.193.202.195:17477] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aXqkQXgqSZb6GBx5nnMXugAAARg"]
[Thu Jan 29 08:05:21.285404 2026] [:error] [pid 20580:tid 20679] [client 4.193.202.195:17521] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aXqkQZCZ5HHdXPmeL59qtQAAAos"]
[Thu Jan 29 08:05:21.462010 2026] [:error] [pid 19071:tid 19152] [client 4.193.202.195:17549] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aXqkQZfa8Ix5wWmtmJzFGwAAAJM"]
[Thu Jan 29 08:05:21.637035 2026] [:error] [pid 19071:tid 19137] [client 4.193.202.195:17557] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aXqkQZfa8Ix5wWmtmJzFHAAAAIQ"]
[Thu Jan 29 08:05:21.823626 2026] [:error] [pid 20579:tid 20651] [client 4.193.202.195:17479] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkQTVXNopcNyjJc9WEeQAAAko"]
[Thu Jan 29 08:05:22.026061 2026] [:error] [pid 19070:tid 19113] [client 4.193.202.195:17524] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkQrou83lIon_aKgY4VAAAAEc"]
[Thu Jan 29 08:05:22.238118 2026] [:error] [pid 20579:tid 20655] [client 4.193.202.195:17548] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkQjVXNopcNyjJc9WEegAAAk4"]
[Thu Jan 29 08:05:22.412668 2026] [:error] [pid 20486:tid 20508] [client 4.193.202.195:17592] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/"] [unique_id "aXqkQngqSZb6GBx5nnMXuwAAARM"]
[Thu Jan 29 08:05:22.675987 2026] [:error] [pid 20579:tid 20661] [client 4.193.202.195:17522] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/"] [unique_id "aXqkQjVXNopcNyjJc9WEfAAAAlQ"]
[Thu Jan 29 08:05:22.857878 2026] [:error] [pid 20580:tid 20676] [client 4.193.202.195:17537] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/"] [unique_id "aXqkQpCZ5HHdXPmeL59qugAAAog"]
[Thu Jan 29 08:05:23.047643 2026] [:error] [pid 19071:tid 19148] [client 4.193.202.195:17492] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/"] [unique_id "aXqkQ5fa8Ix5wWmtmJzFIQAAAI8"]
[Thu Jan 29 08:05:23.276157 2026] [:error] [pid 19177:tid 19197] [client 4.193.202.195:17481] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/"] [unique_id "aXqkQ3ipGz0PT8TrQv4ILgAAANI"]
[Thu Jan 29 08:05:23.515259 2026] [:error] [pid 20580:tid 20686] [client 4.193.202.195:17482] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkQ5CZ5HHdXPmeL59qvQAAApI"]
[Thu Jan 29 08:05:23.699473 2026] [:error] [pid 19070:tid 19115] [client 4.193.202.195:17569] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkQ7ou83lIon_aKgY4VQAAAEk"]
[Thu Jan 29 08:05:23.902572 2026] [:error] [pid 20579:tid 20657] [client 4.193.202.195:17530] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkQzVXNopcNyjJc9WEfQAAAlA"]
[Thu Jan 29 08:05:24.093162 2026] [:error] [pid 20576:tid 20595] [client 4.193.202.195:17512] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXqkRCrDZws_FlQGi9fnegAAAck"]
[Thu Jan 29 08:05:24.315078 2026] [:error] [pid 19177:tid 19186] [client 4.193.202.195:17541] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aXqkRHipGz0PT8TrQv4IMAAAAMc"]
[Thu Jan 29 08:05:24.523145 2026] [:error] [pid 20486:tid 20506] [client 4.193.202.195:17554] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aXqkRHgqSZb6GBx5nnMXvAAAARE"]
[Thu Jan 29 08:05:24.714191 2026] [:error] [pid 20580:tid 20687] [client 4.193.202.195:17563] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aXqkRJCZ5HHdXPmeL59qvwAAApM"]
[Thu Jan 29 08:05:24.893902 2026] [:error] [pid 20580:tid 20685] [client 4.193.202.195:17652] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aXqkRJCZ5HHdXPmeL59qwAAAApE"]
[Thu Jan 29 08:05:25.090976 2026] [:error] [pid 19070:tid 19108] [client 4.193.202.195:17485] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aXqkRbou83lIon_aKgY4WAAAAEI"]
[Thu Jan 29 08:05:25.265854 2026] [:error] [pid 20579:tid 20646] [client 4.193.202.195:17495] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aXqkRTVXNopcNyjJc9WEfwAAAkU"]
[Thu Jan 29 08:05:25.457136 2026] [:error] [pid 20580:tid 20672] [client 4.193.202.195:17589] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aXqkRZCZ5HHdXPmeL59qwgAAAoQ"]
[Thu Jan 29 08:05:25.634316 2026] [:error] [pid 20519:tid 20550] [client 4.193.202.195:17498] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aXqkRQo4s4fyROrkyRlZhAAAAYI"]
[Thu Jan 29 08:05:25.812688 2026] [:error] [pid 20580:tid 20689] [client 4.193.202.195:17478] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aXqkRZCZ5HHdXPmeL59qxAAAApU"]
[Thu Jan 29 08:05:26.020873 2026] [:error] [pid 20486:tid 20500] [client 4.193.202.195:17454] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aXqkRngqSZb6GBx5nnMXwgAAAQs"]
[Thu Jan 29 08:05:26.209754 2026] [:error] [pid 19177:tid 19194] [client 4.193.202.195:17503] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aXqkRnipGz0PT8TrQv4IMgAAAM8"]
[Thu Jan 29 08:05:26.399647 2026] [:error] [pid 20578:tid 20627] [client 4.193.202.195:17813] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aXqkRg6UX7yOMwQFiyedJAAAAg4"]
[Thu Jan 29 08:05:26.585071 2026] [:error] [pid 19070:tid 19126] [client 4.193.202.195:17438] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aXqkRrou83lIon_aKgY4XAAAAFQ"]
[Thu Jan 29 08:05:26.764848 2026] [:error] [pid 19070:tid 19130] [client 4.193.202.195:17640] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aXqkRrou83lIon_aKgY4XgAAAFg"]
[Thu Jan 29 08:05:26.959655 2026] [:error] [pid 19070:tid 19116] [client 4.193.202.195:17660] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aXqkRrou83lIon_aKgY4XwAAAEo"]
[Thu Jan 29 08:05:27.180205 2026] [:error] [pid 20579:tid 20642] [client 4.193.202.195:17502] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aXqkRzVXNopcNyjJc9WEgAAAAkE"]
[Thu Jan 29 08:05:27.389720 2026] [:error] [pid 20578:tid 20624] [client 4.193.202.195:17423] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkRw6UX7yOMwQFiyedJQAAAgs"]
[Thu Jan 29 08:05:27.567220 2026] [:error] [pid 19070:tid 19117] [client 4.193.202.195:17533] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkR7ou83lIon_aKgY4YAAAAEs"]
[Thu Jan 29 08:05:27.747485 2026] [:error] [pid 20580:tid 20691] [client 4.193.202.195:17475] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkR5CZ5HHdXPmeL59qyAAAApc"]
[Thu Jan 29 08:05:27.937478 2026] [:error] [pid 20486:tid 20512] [client 4.193.202.195:17500] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aXqkR3gqSZb6GBx5nnMXwwAAARc"]
[Thu Jan 29 08:05:28.113049 2026] [:error] [pid 20579:tid 20656] [client 4.193.202.195:17570] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ki1k.php"] [unique_id "aXqkSDVXNopcNyjJc9WEgQAAAk8"]
[Thu Jan 29 08:05:28.326155 2026] [:error] [pid 20580:tid 20688] [client 4.193.202.195:17468] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ki1k.php"] [unique_id "aXqkSJCZ5HHdXPmeL59qygAAApQ"]
[Thu Jan 29 08:05:28.529728 2026] [:error] [pid 20579:tid 20659] [client 4.193.202.195:17638] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ki1k.php"] [unique_id "aXqkSDVXNopcNyjJc9WEggAAAlI"]
[Thu Jan 29 08:05:28.744843 2026] [:error] [pid 20579:tid 20648] [client 4.193.202.195:17496] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ki1k.php"] [unique_id "aXqkSDVXNopcNyjJc9WEhAAAAkc"]
[Thu Jan 29 08:05:28.923922 2026] [:error] [pid 20579:tid 20644] [client 4.193.202.195:17529] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkSDVXNopcNyjJc9WEiAAAAkM"]
[Thu Jan 29 08:05:29.153737 2026] [:error] [pid 20576:tid 20596] [client 4.193.202.195:17639] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkSSrDZws_FlQGi9fnfQAAAco"]
[Thu Jan 29 08:05:29.338019 2026] [:error] [pid 19070:tid 19128] [client 4.193.202.195:17436] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkSbou83lIon_aKgY4YwAAAFY"]
[Thu Jan 29 08:05:29.523341 2026] [:error] [pid 20579:tid 20661] [client 4.193.202.195:17789] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aXqkSTVXNopcNyjJc9WEjAAAAlQ"]
[Thu Jan 29 08:05:29.698031 2026] [:error] [pid 19069:tid 19088] [client 4.193.202.195:17486] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkSfDHsRM4BJ9a4Qt6WQAAAAo"]
[Thu Jan 29 08:05:29.889913 2026] [:error] [pid 19070:tid 19113] [client 4.193.202.195:17590] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkSbou83lIon_aKgY4ZAAAAEc"]
[Thu Jan 29 08:05:30.159308 2026] [:error] [pid 19070:tid 19106] [client 4.193.202.195:17513] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkSrou83lIon_aKgY4ZQAAAEA"]
[Thu Jan 29 08:05:30.338863 2026] [:error] [pid 19069:tid 19078] [client 4.193.202.195:17561] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkSvDHsRM4BJ9a4Qt6WwAAAAA"]
[Thu Jan 29 08:05:30.518664 2026] [:error] [pid 20578:tid 20629] [client 4.193.202.195:17525] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkSg6UX7yOMwQFiyedKQAAAhA"]
[Thu Jan 29 08:05:30.728915 2026] [:error] [pid 19071:tid 19154] [client 4.193.202.195:17520] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkSpfa8Ix5wWmtmJzFJwAAAJU"]
[Thu Jan 29 08:05:30.971164 2026] [:error] [pid 20519:tid 20552] [client 4.193.202.195:17656] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkSgo4s4fyROrkyRlZhwAAAYQ"]
[Thu Jan 29 08:05:31.155777 2026] [:error] [pid 20519:tid 20563] [client 4.193.202.195:17421] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkSwo4s4fyROrkyRlZiAAAAY8"]
[Thu Jan 29 08:05:31.340260 2026] [:error] [pid 19071:tid 19152] [client 4.193.202.195:17434] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkS5fa8Ix5wWmtmJzFKQAAAJM"]
[Thu Jan 29 08:05:31.516567 2026] [:error] [pid 19070:tid 19109] [client 4.193.202.195:17531] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkS7ou83lIon_aKgY4aQAAAEM"]
[Thu Jan 29 08:05:31.693363 2026] [:error] [pid 19177:tid 19189] [client 4.193.202.195:17917] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkS3ipGz0PT8TrQv4INgAAAMo"]
[Thu Jan 29 08:05:31.879668 2026] [:error] [pid 19070:tid 19127] [client 4.193.202.195:17713] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aXqkS7ou83lIon_aKgY4agAAAFU"]
[Thu Jan 29 08:05:32.077999 2026] [:error] [pid 20576:tid 20597] [client 4.193.202.195:17501] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkTCrDZws_FlQGi9fngQAAAcs"]
[Thu Jan 29 08:05:32.263688 2026] [:error] [pid 19070:tid 19129] [client 4.193.202.195:17418] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkTLou83lIon_aKgY4awAAAFc"]
[Thu Jan 29 08:05:32.442167 2026] [:error] [pid 19070:tid 19107] [client 4.193.202.195:17474] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkTLou83lIon_aKgY4bAAAAEE"]
[Thu Jan 29 08:05:32.667148 2026] [:error] [pid 19177:tid 19198] [client 4.193.202.195:17447] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aXqkTHipGz0PT8TrQv4INwAAANM"]
[Thu Jan 29 08:05:32.898474 2026] [:error] [pid 20576:tid 20588] [client 4.193.202.195:17572] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aXqkTCrDZws_FlQGi9fnhAAAAcI"]
[Thu Jan 29 08:05:33.167911 2026] [:error] [pid 19069:tid 19089] [client 4.193.202.195:17517] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aXqkTfDHsRM4BJ9a4Qt6YgAAAAs"]
[Thu Jan 29 08:05:33.454693 2026] [:error] [pid 20519:tid 20562] [client 4.193.202.195:17725] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aXqkTQo4s4fyROrkyRlZigAAAY4"]
[Thu Jan 29 08:05:33.675616 2026] [:error] [pid 20579:tid 20646] [client 4.193.202.195:17442] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aXqkTTVXNopcNyjJc9WEjwAAAkU"]
[Thu Jan 29 08:05:33.865254 2026] [:error] [pid 19071:tid 19138] [client 4.193.202.195:17578] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aXqkTZfa8Ix5wWmtmJzFLAAAAIU"]
[Thu Jan 29 08:05:34.201352 2026] [:error] [pid 20519:tid 20553] [client 4.193.202.195:17511] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aXqkTgo4s4fyROrkyRlZjAAAAYU"]
[Thu Jan 29 08:05:34.398165 2026] [:error] [pid 20519:tid 20551] [client 4.193.202.195:17422] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aXqkTgo4s4fyROrkyRlZjwAAAYM"]
[Thu Jan 29 08:05:34.587644 2026] [:error] [pid 20576:tid 20609] [client 4.193.202.195:17409] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aXqkTirDZws_FlQGi9fnhgAAAdc"]
[Thu Jan 29 08:05:34.771098 2026] [:error] [pid 19071:tid 19145] [client 4.193.202.195:17493] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aXqkTpfa8Ix5wWmtmJzFLQAAAIw"]
[Thu Jan 29 08:05:34.946921 2026] [:error] [pid 19177:tid 19184] [client 4.193.202.195:11224] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aXqkTnipGz0PT8TrQv4IOQAAAMU"]
[Thu Jan 29 08:05:35.128699 2026] [:error] [pid 19071:tid 19144] [client 4.193.202.195:17455] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aXqkT5fa8Ix5wWmtmJzFLgAAAIs"]
[Thu Jan 29 08:05:35.311752 2026] [:error] [pid 19071:tid 19134] [client 4.193.202.195:17504] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aXqkT5fa8Ix5wWmtmJzFLwAAAIE"]
[Thu Jan 29 08:05:35.485783 2026] [:error] [pid 19177:tid 19200] [client 4.193.202.195:17489] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aXqkT3ipGz0PT8TrQv4IOgAAANU"]
[Thu Jan 29 08:05:35.661625 2026] [:error] [pid 19070:tid 19116] [client 4.193.202.195:17483] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aXqkT7ou83lIon_aKgY4bwAAAEo"]
[Thu Jan 29 08:05:35.867867 2026] [:error] [pid 20486:tid 20507] [client 4.193.202.195:17459] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aXqkT3gqSZb6GBx5nnMXyQAAARI"]
[Thu Jan 29 08:05:36.064564 2026] [:error] [pid 19069:tid 19100] [client 4.193.202.195:17505] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aXqkUPDHsRM4BJ9a4Qt6agAAABY"]
[Thu Jan 29 08:05:36.253749 2026] [:error] [pid 19071:tid 19146] [client 4.193.202.195:17543] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/text.php"] [unique_id "aXqkUJfa8Ix5wWmtmJzFMgAAAI0"]
[Thu Jan 29 08:05:36.442859 2026] [:error] [pid 20576:tid 20595] [client 4.193.202.195:17469] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/text.php"] [unique_id "aXqkUCrDZws_FlQGi9fniAAAAck"]
[Thu Jan 29 08:05:36.652013 2026] [:error] [pid 20486:tid 20495] [client 4.193.202.195:17476] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/text.php"] [unique_id "aXqkUHgqSZb6GBx5nnMXywAAAQY"]
[Thu Jan 29 08:05:36.859800 2026] [:error] [pid 19177:tid 19185] [client 4.193.202.195:17508] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/text.php"] [unique_id "aXqkUHipGz0PT8TrQv4IPAAAAMY"]
[Thu Jan 29 08:05:37.054769 2026] [:error] [pid 20519:tid 20556] [client 4.193.202.195:17555] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aXqkUQo4s4fyROrkyRlZkwAAAYg"]
[Thu Jan 29 08:05:37.273635 2026] [:error] [pid 20579:tid 20654] [client 4.193.202.195:11228] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aXqkUTVXNopcNyjJc9WElgAAAk0"]
[Thu Jan 29 08:05:37.471656 2026] [:error] [pid 20579:tid 20643] [client 4.193.202.195:17585] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aXqkUTVXNopcNyjJc9WElwAAAkI"]
[Thu Jan 29 08:05:37.724814 2026] [:error] [pid 20486:tid 20510] [client 4.193.202.195:17413] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aXqkUXgqSZb6GBx5nnMXzAAAARU"]
[Thu Jan 29 08:05:37.905573 2026] [:error] [pid 20579:tid 20661] [client 4.193.202.195:17416] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aXqkUTVXNopcNyjJc9WEmAAAAlQ"]
[Thu Jan 29 08:05:38.092762 2026] [:error] [pid 19070:tid 19128] [client 4.193.202.195:11221] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aXqkUrou83lIon_aKgY4cwAAAFY"]
[Thu Jan 29 08:05:38.274657 2026] [:error] [pid 19071:tid 19140] [client 4.193.202.195:17518] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aXqkUpfa8Ix5wWmtmJzFMwAAAIc"]
[Thu Jan 29 08:05:38.512131 2026] [:error] [pid 20486:tid 20505] [client 4.193.202.195:17535] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aXqkUngqSZb6GBx5nnMXzgAAARA"]
[Thu Jan 29 08:05:38.694331 2026] [:error] [pid 20580:tid 20674] [client 4.193.202.195:17510] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkUpCZ5HHdXPmeL59qzgAAAoY"]
[Thu Jan 29 08:05:38.890284 2026] [:error] [pid 19070:tid 19115] [client 4.193.202.195:17514] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkUrou83lIon_aKgY4dgAAAEk"]
[Thu Jan 29 08:05:39.078021 2026] [:error] [pid 19071:tid 19152] [client 4.193.202.195:17441] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkU5fa8Ix5wWmtmJzFNgAAAJM"]
[Thu Jan 29 08:05:39.263611 2026] [:error] [pid 19069:tid 19096] [client 4.193.202.195:17450] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aXqkU_DHsRM4BJ9a4Qt6bQAAABI"]
[Thu Jan 29 08:05:39.467125 2026] [:error] [pid 20576:tid 20596] [client 4.193.202.195:17419] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes.php"] [unique_id "aXqkUyrDZws_FlQGi9fniwAAAco"]
[Thu Jan 29 08:05:39.643736 2026] [:error] [pid 20486:tid 20512] [client 4.193.202.195:17427] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes.php"] [unique_id "aXqkU3gqSZb6GBx5nnMX0AAAARc"]
[Thu Jan 29 08:05:39.818093 2026] [:error] [pid 20486:tid 20489] [client 4.193.202.195:17417] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes.php"] [unique_id "aXqkU3gqSZb6GBx5nnMX0QAAAQA"]
[Thu Jan 29 08:05:39.998606 2026] [:error] [pid 19177:tid 19195] [client 4.193.202.195:17679] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes.php"] [unique_id "aXqkU3ipGz0PT8TrQv4IQQAAANA"]
[Thu Jan 29 08:05:40.193595 2026] [:error] [pid 19070:tid 19122] [client 4.193.202.195:11210] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkVLou83lIon_aKgY4egAAAFA"]
[Thu Jan 29 08:05:40.433780 2026] [:error] [pid 20576:tid 20590] [client 4.193.202.195:17700] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkVCrDZws_FlQGi9fnjAAAAcQ"]
[Thu Jan 29 08:05:40.654424 2026] [:error] [pid 20576:tid 20597] [client 4.193.202.195:17435] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkVCrDZws_FlQGi9fnjwAAAcs"]
[Thu Jan 29 08:05:40.848254 2026] [:error] [pid 20519:tid 20558] [client 4.193.202.195:17519] [client 4.193.202.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aXqkVAo4s4fyROrkyRlZlgAAAYo"]
[Thu Jan 29 09:29:54.685922 2026] [:error] [pid 19177:tid 19199] [client 106.227.49.113:60633] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aXq4EnipGz0PT8TrQv4YsQAAANQ"]
[Thu Jan 29 23:27:51.411383 2026] [:error] [pid 20580:tid 20675] [client 45.141.215.153:60780] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aXt8d5CZ5HHdXPmeL59aRwAAAoc"]
[Thu Jan 29 23:27:51.726277 2026] [:error] [pid 39863:tid 39869] [client 45.141.215.153:60796] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aXt8d7sHJJGGu8set58hmAAAAUM"]
[Fri Jan 30 00:17:51.555436 2026] [proxy_fcgi:error] [pid 39813:tid 39832] [client 217.154.172.107:61226] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Fri Jan 30 00:18:02.589589 2026] [:error] [pid 39813:tid 39834] [client 217.154.172.107:58644] [client 217.154.172.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aXuIOt_AaZSBkqpNK026vQAAAVM"], referer: www.google.com
[Fri Jan 30 01:11:30.368325 2026] [:error] [pid 39592:tid 39617] [client 144.172.112.114:33004] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aXuUwplnGYODSsJUyHk-wwAAANQ"]
[Fri Jan 30 01:38:21.143254 2026] [:error] [pid 39783:tid 39797] [client 144.172.112.54:47382] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aXubDa51RNfzhKG5ppPNPAAAAEw"]
[Fri Jan 30 02:37:18.587272 2026] [:error] [pid 13797:tid 13818] [client 43.130.139.136:34270] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXuo3kZz78bylh5pU4SHfwAAAdM"]
[Fri Jan 30 04:16:09.378479 2026] [:error] [pid 46913:tid 46959] [client 79.120.76.144:56816] [client 79.120.76.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aXvACTMWmKL8hOfC3uT0OwAAAEg"]
[Fri Jan 30 04:55:33.217910 2026] [:error] [pid 46913:tid 46964] [client 5.182.17.127:64510] [client 5.182.17.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aXvJRTMWmKL8hOfC3uQFsQAAAE0"], referer: binance.com
[Fri Jan 30 04:57:35.300000 2026] [:error] [pid 46914:tid 47001] [client 182.44.10.67:49620] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXvJv1gSfJ4kZxNKlb-o6wAAAJc"]
[Fri Jan 30 10:55:03.001407 2026] [:error] [pid 47021:tid 47042] [client 43.159.148.221:60658] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXwdhtap1k13UdZUNSS1agAAANM"]
[Fri Jan 30 15:01:49.205447 2026] [proxy_fcgi:error] [pid 47663:tid 47682] [client 20.199.113.235:5392] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 16:10:54.627055 2026] [:error] [pid 47021:tid 47045] [client 91.217.249.217:57849] [client 91.217.249.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.217.249.217, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aXxnjtap1k13UdZUNSQKrAAAANY"]
[Fri Jan 30 16:10:54.633027 2026] [proxy_fcgi:error] [pid 47021:tid 47045] [client 91.217.249.217:57849] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 18:23:56.844087 2026] [:error] [pid 38980:tid 39009] [client 49.36.180.137:54084] [client 49.36.180.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.180.137, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aXyGvLYByxUZEaKXdHqI0AAAAhY"]
[Fri Jan 30 18:23:56.854920 2026] [proxy_fcgi:error] [pid 38980:tid 39009] [client 49.36.180.137:54084] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 18:42:45.948287 2026] [:error] [pid 46914:tid 46986] [client 43.153.104.196:35462] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aXyLJVgSfJ4kZxNKlb-maQAAAIg"]
[Fri Jan 30 22:07:56.962348 2026] [proxy_fcgi:error] [pid 38980:tid 39002] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:07:57.530630 2026] [proxy_fcgi:error] [pid 38980:tid 38988] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:07:58.130133 2026] [proxy_fcgi:error] [pid 38980:tid 38999] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:07:58.706841 2026] [proxy_fcgi:error] [pid 38980:tid 39007] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:07:59.335738 2026] [proxy_fcgi:error] [pid 38980:tid 38988] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:07:59.896277 2026] [proxy_fcgi:error] [pid 38980:tid 39009] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:00.452691 2026] [proxy_fcgi:error] [pid 38980:tid 38999] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:01.011629 2026] [proxy_fcgi:error] [pid 38980:tid 39008] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:01.568846 2026] [proxy_fcgi:error] [pid 38980:tid 38990] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:02.135689 2026] [proxy_fcgi:error] [pid 38980:tid 38994] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:03.248950 2026] [proxy_fcgi:error] [pid 38980:tid 39009] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:03.815795 2026] [proxy_fcgi:error] [pid 38980:tid 38996] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:04.410166 2026] [proxy_fcgi:error] [pid 38980:tid 39006] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:04.970727 2026] [proxy_fcgi:error] [pid 38980:tid 39005] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:05.529669 2026] [proxy_fcgi:error] [pid 38980:tid 39011] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:06.090909 2026] [proxy_fcgi:error] [pid 38980:tid 39004] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:06.678613 2026] [proxy_fcgi:error] [pid 38980:tid 39000] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:07.239604 2026] [proxy_fcgi:error] [pid 38980:tid 39010] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:07.808008 2026] [proxy_fcgi:error] [pid 38980:tid 39005] [client 45.137.126.15:56871] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:16.223785 2026] [:error] [pid 38980:tid 38993] [client 45.137.126.15:56871] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy7ULYByxUZEaKXdHqwvQAAAgY"]
[Fri Jan 30 22:08:19.018302 2026] [:error] [pid 46914:tid 46990] [client 45.137.126.27:22687] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy7U1gSfJ4kZxNKlb_axgAAAIw"]
[Fri Jan 30 22:08:21.781242 2026] [proxy_fcgi:error] [pid 46914:tid 46993] [client 45.137.126.39:23031] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:23.479639 2026] [:error] [pid 46914:tid 46992] [client 45.137.126.39:23031] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aXy7V1gSfJ4kZxNKlb_a3wAAAI4"]
[Fri Jan 30 22:08:25.719301 2026] [proxy_fcgi:error] [pid 46912:tid 46944] [client 45.137.126.8:54881] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:26.274944 2026] [:error] [pid 46912:tid 46926] [client 45.137.126.8:54881] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aXy7Wj6yiVW7A9NwFFnvwwAAAAI"]
[Fri Jan 30 22:08:27.936482 2026] [proxy_fcgi:error] [pid 46914:tid 46990] [client 45.137.126.47:24527] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:30.698013 2026] [:error] [pid 46914:tid 46997] [client 45.137.126.47:24527] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy7XlgSfJ4kZxNKlb_bEwAAAJM"]
[Fri Jan 30 22:08:32.361560 2026] [:error] [pid 46914:tid 46992] [client 45.137.126.38:53829] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy7YFgSfJ4kZxNKlb_bHgAAAI4"]
[Fri Jan 30 22:08:33.460947 2026] [:error] [pid 38980:tid 38992] [client 45.137.126.12:48909] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy7YbYByxUZEaKXdHqw-gAAAgU"]
[Fri Jan 30 22:08:34.560644 2026] [:error] [pid 46912:tid 46945] [client 45.137.126.24:30031] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy7Yj6yiVW7A9NwFFnv1QAAABU"]
[Fri Jan 30 22:08:35.662716 2026] [:error] [pid 24681:tid 24702] [client 45.137.126.26:47971] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy7Y4E368IXQpahn0KMcwAAARM"]
[Fri Jan 30 22:08:36.778591 2026] [:error] [pid 38686:tid 38690] [client 45.137.126.40:64639] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy7ZAoE8BAjgw1_sAV0MAAAAcA"]
[Fri Jan 30 22:08:38.465503 2026] [:error] [pid 24711:tid 24737] [client 45.137.126.11:62857] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy7Zq5Gwh4var6T23KvwAAAAVc"]
[Fri Jan 30 22:08:39.578034 2026] [proxy_fcgi:error] [pid 46914:tid 46991] [client 45.137.126.53:40693] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:40.682287 2026] [:error] [pid 46914:tid 46983] [client 45.137.126.53:40693] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aXy7aFgSfJ4kZxNKlb_bRwAAAIU"]
[Fri Jan 30 22:08:41.786583 2026] [proxy_fcgi:error] [pid 47663:tid 47681] [client 45.137.126.25:51323] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:42.904502 2026] [:error] [pid 47663:tid 47677] [client 45.137.126.25:51323] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy7akHGTrgIKCqEYbWjHgAAAkw"]
[Fri Jan 30 22:08:44.585675 2026] [:error] [pid 47021:tid 47028] [client 45.137.126.11:29159] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy7bNap1k13UdZUNSRUtQAAAMU"]
[Fri Jan 30 22:08:45.692772 2026] [proxy_fcgi:error] [pid 24712:tid 24754] [client 45.137.126.5:54191] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:46.255464 2026] [:error] [pid 24712:tid 24765] [client 45.137.126.5:54191] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy7boRLQrFiQF3h9-tZiwAAAZc"]
[Fri Jan 30 22:08:47.392026 2026] [proxy_fcgi:error] [pid 46913:tid 46966] [client 45.137.126.8:58853] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:49.043368 2026] [proxy_fcgi:error] [pid 46913:tid 46958] [client 45.137.126.8:58853] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:50.701594 2026] [:error] [pid 46913:tid 46956] [client 45.137.126.8:58853] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy7cjMWmKL8hOfC3uTYcgAAAEU"]
[Fri Jan 30 22:08:51.800505 2026] [proxy_fcgi:error] [pid 38686:tid 38698] [client 45.137.126.53:43187] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:52.356674 2026] [:error] [pid 38686:tid 38708] [client 45.137.126.53:43187] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy7dAoE8BAjgw1_sAV0rgAAAdI"]
[Fri Jan 30 22:08:53.458928 2026] [proxy_fcgi:error] [pid 38980:tid 38992] [client 45.137.126.11:43417] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:54.559863 2026] [:error] [pid 38980:tid 39007] [client 45.137.126.11:43417] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aXy7drYByxUZEaKXdHqxOgAAAhQ"]
[Fri Jan 30 22:08:56.225066 2026] [:error] [pid 24681:tid 24691] [client 45.137.126.17:56635] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy7eIE368IXQpahn0KM_QAAAQg"]
[Fri Jan 30 22:08:57.931608 2026] [proxy_fcgi:error] [pid 38980:tid 38987] [client 45.137.126.23:30759] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:58.481090 2026] [proxy_fcgi:error] [pid 38980:tid 38989] [client 45.137.126.23:30759] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:08:59.580756 2026] [:error] [pid 38980:tid 39001] [client 45.137.126.23:30759] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy7e7YByxUZEaKXdHqxUgAAAg4"]
[Fri Jan 30 22:09:01.279371 2026] [:error] [pid 38980:tid 38995] [client 45.137.126.41:43671] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy7fbYByxUZEaKXdHqxXAAAAgg"]
[Fri Jan 30 22:09:02.959048 2026] [:error] [pid 24712:tid 24754] [client 45.137.126.44:43985] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy7foRLQrFiQF3h9-taGQAAAY0"]
[Fri Jan 30 22:09:04.052598 2026] [:error] [pid 24681:tid 24696] [client 45.137.126.23:48195] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy7gIE368IXQpahn0KNLwAAAQ0"]
[Fri Jan 30 22:09:05.171099 2026] [:error] [pid 46914:tid 46978] [client 45.137.126.36:26185] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy7gVgSfJ4kZxNKlb_brQAAAIA"]
[Fri Jan 30 22:09:07.437632 2026] [proxy_fcgi:error] [pid 24712:tid 24755] [client 45.137.126.49:34593] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:07.986480 2026] [:error] [pid 24712:tid 24748] [client 45.137.126.49:34593] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aXy7g4RLQrFiQF3h9-taJgAAAYc"]
[Fri Jan 30 22:09:09.085929 2026] [:error] [pid 46912:tid 46945] [client 45.137.126.17:21051] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aXy7hT6yiVW7A9NwFFnwXAAAABU"]
[Fri Jan 30 22:09:10.179588 2026] [:error] [pid 46914:tid 46980] [client 45.137.126.53:43191] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXy7hlgSfJ4kZxNKlb_bwQAAAII"]
[Fri Jan 30 22:09:12.420646 2026] [proxy_fcgi:error] [pid 24711:tid 24726] [client 45.137.126.40:30595] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:13.529420 2026] [proxy_fcgi:error] [pid 24711:tid 24719] [client 45.137.126.40:30595] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:16.044582 2026] [:error] [pid 24711:tid 24732] [client 45.137.126.40:30595] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aXy7jK5Gwh4var6T23KwngAAAVI"]
[Fri Jan 30 22:09:18.870527 2026] [:error] [pid 24711:tid 24736] [client 45.137.126.48:59423] [client 45.137.126.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.48, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aXy7jq5Gwh4var6T23KwuQAAAVY"]
[Fri Jan 30 22:09:19.440620 2026] [proxy_fcgi:error] [pid 24711:tid 24725] [client 45.137.126.48:59423] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:22.234367 2026] [proxy_fcgi:error] [pid 24711:tid 24717] [client 45.137.126.48:59423] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:22.788688 2026] [proxy_fcgi:error] [pid 24711:tid 24726] [client 45.137.126.48:59423] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:25.582334 2026] [:error] [pid 24711:tid 24726] [client 45.137.126.48:59423] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXy7la5Gwh4var6T23Kw7wAAAUw"]
[Fri Jan 30 22:09:27.264385 2026] [proxy_fcgi:error] [pid 46914:tid 46978] [client 45.137.126.11:59903] AH01071: Got error 'Primary script unknown'
[Fri Jan 30 22:09:27.816013 2026] [:error] [pid 46914:tid 46989] [client 45.137.126.11:59903] [client 45.137.126.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.11, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXy7l1gSfJ4kZxNKlb_cVQAAAIs"]
[Fri Jan 30 22:09:28.933891 2026] [:error] [pid 46914:tid 46997] [client 45.137.126.11:59903] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aXy7mFgSfJ4kZxNKlb_cXgAAAJM"]
[Sat Jan 31 03:20:09.212512 2026] [autoindex:error] [pid 35592:tid 35670] [client 20.214.137.92:41838] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Jan 31 03:20:09.351340 2026] [proxy_fcgi:error] [pid 35592:tid 35681] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:09.493511 2026] [proxy_fcgi:error] [pid 35592:tid 35679] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:09.773710 2026] [proxy_fcgi:error] [pid 35592:tid 35680] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:09.914680 2026] [proxy_fcgi:error] [pid 35592:tid 35668] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:10.058381 2026] [proxy_fcgi:error] [pid 35592:tid 35661] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:10.197745 2026] [proxy_fcgi:error] [pid 35592:tid 35660] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:10.348936 2026] [proxy_fcgi:error] [pid 35592:tid 35662] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:10.487590 2026] [proxy_fcgi:error] [pid 35592:tid 35671] [client 20.214.137.92:41838] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:20:10.911838 2026] [:error] [pid 35592:tid 35666] [client 20.214.137.92:41838] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/"] [unique_id "aX0EarHYEbkeqIda0scsJQAAAAY"]
[Sat Jan 31 03:20:11.454405 2026] [:error] [pid 35764:tid 35779] [client 20.214.137.92:13718] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/"] [unique_id "aX0EaxNkH_A8Hisc3MhrFgAAAM0"]
[Sat Jan 31 03:20:11.997482 2026] [:error] [pid 35592:tid 35677] [client 20.214.137.92:13805] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/"] [unique_id "aX0Ea7HYEbkeqIda0scsJgAAABE"]
[Sat Jan 31 03:20:12.542439 2026] [:error] [pid 35605:tid 35727] [client 20.214.137.92:13798] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/"] [unique_id "aX0EbEE0LGv7vurmDzdn7wAAAIg"]
[Sat Jan 31 03:35:04.930672 2026] [proxy_fcgi:error] [pid 39339:tid 39342] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:05.170432 2026] [proxy_fcgi:error] [pid 39339:tid 39357] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:05.513941 2026] [proxy_fcgi:error] [pid 39339:tid 39349] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:05.749450 2026] [proxy_fcgi:error] [pid 39339:tid 39356] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:06.009842 2026] [proxy_fcgi:error] [pid 39339:tid 39351] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:06.245466 2026] [proxy_fcgi:error] [pid 39339:tid 39345] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:06.488180 2026] [proxy_fcgi:error] [pid 39339:tid 39359] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:06.724037 2026] [proxy_fcgi:error] [pid 39339:tid 39350] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:06.963267 2026] [proxy_fcgi:error] [pid 39339:tid 39346] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:07.202358 2026] [proxy_fcgi:error] [pid 39339:tid 39355] [client 172.213.25.189:6605] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:35:07.439855 2026] [:error] [pid 39339:tid 39347] [client 172.213.25.189:6605] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doko.php"] [unique_id "aX0H68Wi-IjigR3oHY5cWgAAAMY"]
[Sat Jan 31 03:35:08.330849 2026] [:error] [pid 39243:tid 39283] [client 172.213.25.189:25334] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doko.php"] [unique_id "aX0H7BBW1k4JK8a4v0YYrgAAAEE"]
[Sat Jan 31 03:35:10.587458 2026] [:error] [pid 39242:tid 39267] [client 172.213.25.189:13316] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doko.php"] [unique_id "aX0H7tOgXnkKGGSSCINBvAAAAA0"]
[Sat Jan 31 03:35:12.272858 2026] [:error] [pid 39339:tid 39345] [client 172.213.25.189:39862] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doko.php"] [unique_id "aX0H8MWi-IjigR3oHY5cYgAAAMQ"]
[Sat Jan 31 03:35:12.865827 2026] [:error] [pid 39339:tid 39354] [client 172.213.25.189:25288] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sst.php"] [unique_id "aX0H8MWi-IjigR3oHY5cYwAAAM0"]
[Sat Jan 31 03:35:14.016290 2026] [:error] [pid 39339:tid 39353] [client 172.213.25.189:13329] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sst.php"] [unique_id "aX0H8sWi-IjigR3oHY5cZgAAAMw"]
[Sat Jan 31 03:35:21.625490 2026] [:error] [pid 39243:tid 39304] [client 172.213.25.189:19128] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sst.php"] [unique_id "aX0H-RBW1k4JK8a4v0YYwwAAAFY"]
[Sat Jan 31 03:35:25.406501 2026] [:error] [pid 39242:tid 39258] [client 172.213.25.189:29708] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sst.php"] [unique_id "aX0H_dOgXnkKGGSSCINBzQAAAAQ"]
[Sat Jan 31 03:35:26.331105 2026] [:error] [pid 39339:tid 39347] [client 172.213.25.189:26002] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/easy.php"] [unique_id "aX0H_sWi-IjigR3oHY5ceAAAAMY"]
[Sat Jan 31 03:35:32.661718 2026] [:error] [pid 39243:tid 39294] [client 172.213.25.189:6263] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/easy.php"] [unique_id "aX0IBBBW1k4JK8a4v0YY0AAAAEw"]
[Sat Jan 31 03:35:35.740744 2026] [:error] [pid 39243:tid 39297] [client 172.213.25.189:6833] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/easy.php"] [unique_id "aX0IBxBW1k4JK8a4v0YY1gAAAE8"]
[Sat Jan 31 03:35:37.824745 2026] [:error] [pid 39243:tid 39291] [client 172.213.25.189:39802] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/easy.php"] [unique_id "aX0ICRBW1k4JK8a4v0YY2wAAAEk"]
[Sat Jan 31 03:35:41.280287 2026] [:error] [pid 39339:tid 39356] [client 172.213.25.189:19074] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rss4.php"] [unique_id "aX0IDcWi-IjigR3oHY5cjgAAAM8"]
[Sat Jan 31 03:35:42.079404 2026] [:error] [pid 39242:tid 39257] [client 172.213.25.189:19086] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rss4.php"] [unique_id "aX0IDtOgXnkKGGSSCINB2wAAAAM"]
[Sat Jan 31 03:35:43.095101 2026] [:error] [pid 39242:tid 39276] [client 172.213.25.189:39754] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rss4.php"] [unique_id "aX0ID9OgXnkKGGSSCINB3wAAABY"]
[Sat Jan 31 03:35:43.825909 2026] [:error] [pid 39242:tid 39255] [client 172.213.25.189:39781] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rss4.php"] [unique_id "aX0ID9OgXnkKGGSSCINB4AAAAAE"]
[Sat Jan 31 03:35:45.427863 2026] [:error] [pid 39243:tid 39286] [client 172.213.25.189:50187] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nlvbr.php"] [unique_id "aX0IERBW1k4JK8a4v0YY3gAAAEQ"]
[Sat Jan 31 03:35:50.394932 2026] [:error] [pid 39339:tid 39347] [client 172.213.25.189:6247] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nlvbr.php"] [unique_id "aX0IFsWi-IjigR3oHY5cmwAAAMY"]
[Sat Jan 31 03:35:53.278436 2026] [:error] [pid 39244:tid 39318] [client 172.213.25.189:7006] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nlvbr.php"] [unique_id "aX0IGXo-KRTvg3jHEDyksAAAAIg"]
[Sat Jan 31 03:35:54.421448 2026] [:error] [pid 39243:tid 39288] [client 172.213.25.189:6262] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nlvbr.php"] [unique_id "aX0IGhBW1k4JK8a4v0YY6gAAAEY"]
[Sat Jan 31 03:35:56.648963 2026] [:error] [pid 39243:tid 39294] [client 172.213.25.189:6988] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aX0IHBBW1k4JK8a4v0YY8AAAAEw"]
[Sat Jan 31 03:35:58.535431 2026] [:error] [pid 39242:tid 39277] [client 172.213.25.189:6676] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aX0IHtOgXnkKGGSSCINB5wAAABc"]
[Sat Jan 31 03:35:59.851946 2026] [:error] [pid 39243:tid 39300] [client 172.213.25.189:23503] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aX0IHxBW1k4JK8a4v0YY-gAAAFI"]
[Sat Jan 31 03:36:02.814275 2026] [:error] [pid 39339:tid 39349] [client 172.213.25.189:6995] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aX0IIsWi-IjigR3oHY5cwAAAAMg"]
[Sat Jan 31 03:36:03.576520 2026] [:error] [pid 39244:tid 39310] [client 172.213.25.189:30354] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/icoxp.php"] [unique_id "aX0II3o-KRTvg3jHEDykwAAAAIE"]
[Sat Jan 31 03:36:07.681934 2026] [proxy_fcgi:error] [pid 39339:tid 39344] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:08.516641 2026] [proxy_fcgi:error] [pid 39339:tid 39348] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:08.752637 2026] [proxy_fcgi:error] [pid 39339:tid 39349] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:08.989443 2026] [proxy_fcgi:error] [pid 39339:tid 39361] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:09.230835 2026] [proxy_fcgi:error] [pid 39339:tid 39359] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:09.578235 2026] [proxy_fcgi:error] [pid 39339:tid 39363] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:09.814468 2026] [proxy_fcgi:error] [pid 39339:tid 39350] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:10.050865 2026] [proxy_fcgi:error] [pid 39339:tid 39364] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:10.287984 2026] [proxy_fcgi:error] [pid 39339:tid 39346] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:10.524367 2026] [proxy_fcgi:error] [pid 39339:tid 39353] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:10.937876 2026] [proxy_fcgi:error] [pid 39339:tid 39357] [client 172.213.25.189:50204] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 03:36:11.170900 2026] [:error] [pid 39339:tid 39361] [client 172.213.25.189:50204] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1.php"] [unique_id "aX0IK8Wi-IjigR3oHY5c5QAAANQ"]
[Sat Jan 31 03:36:17.614209 2026] [:error] [pid 39244:tid 39326] [client 172.213.25.189:7017] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1.php"] [unique_id "aX0IMXo-KRTvg3jHEDyk1QAAAJA"]
[Sat Jan 31 03:36:18.584052 2026] [:error] [pid 39244:tid 39312] [client 172.213.25.189:50189] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1.php"] [unique_id "aX0IMno-KRTvg3jHEDyk1wAAAIM"]
[Sat Jan 31 03:36:21.952166 2026] [:error] [pid 39242:tid 39263] [client 172.213.25.189:6860] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w1.php"] [unique_id "aX0INdOgXnkKGGSSCINB_AAAAAk"]
[Sat Jan 31 03:36:24.777808 2026] [:error] [pid 39242:tid 39267] [client 172.213.25.189:30350] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dgdaolin.php"] [unique_id "aX0IONOgXnkKGGSSCINCAAAAAA0"]
[Sat Jan 31 03:36:29.864698 2026] [:error] [pid 39243:tid 39299] [client 172.213.25.189:48829] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dgdaolin.php"] [unique_id "aX0IPRBW1k4JK8a4v0YZIwAAAFE"]
[Sat Jan 31 03:36:31.796836 2026] [:error] [pid 39339:tid 39361] [client 172.213.25.189:16300] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dgdaolin.php"] [unique_id "aX0IP8Wi-IjigR3oHY5dCQAAANQ"]
[Sat Jan 31 03:36:35.087502 2026] [:error] [pid 39244:tid 39327] [client 172.213.25.189:16292] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dgdaolin.php"] [unique_id "aX0IQ3o-KRTvg3jHEDylAgAAAJE"]
[Sat Jan 31 03:36:35.991215 2026] [:error] [pid 39242:tid 39255] [client 172.213.25.189:19196] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrhbdzdz.php"] [unique_id "aX0IQ9OgXnkKGGSSCINCFAAAAAE"]
[Sat Jan 31 03:36:36.568618 2026] [:error] [pid 39242:tid 39268] [client 172.213.25.189:6896] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrhbdzdz.php"] [unique_id "aX0IRNOgXnkKGGSSCINCFQAAAA4"]
[Sat Jan 31 03:36:37.194234 2026] [:error] [pid 39339:tid 39355] [client 172.213.25.189:31726] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrhbdzdz.php"] [unique_id "aX0IRcWi-IjigR3oHY5dJgAAAM4"]
[Sat Jan 31 03:36:39.356996 2026] [:error] [pid 39243:tid 39303] [client 172.213.25.189:35583] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rrhbdzdz.php"] [unique_id "aX0IRxBW1k4JK8a4v0YZOAAAAFU"]
[Sat Jan 31 03:36:40.088407 2026] [:error] [pid 39244:tid 39331] [client 172.213.25.189:35520] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aX0ISHo-KRTvg3jHEDylIgAAAJU"]
[Sat Jan 31 03:36:40.754620 2026] [:error] [pid 39243:tid 39290] [client 172.213.25.189:31729] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aX0ISBBW1k4JK8a4v0YZPAAAAEg"]
[Sat Jan 31 03:36:41.403889 2026] [:error] [pid 39339:tid 39348] [client 172.213.25.189:48810] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aX0IScWi-IjigR3oHY5dOAAAAMc"]
[Sat Jan 31 03:36:41.975373 2026] [:error] [pid 39339:tid 39356] [client 172.213.25.189:48816] [client 172.213.25.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aX0IScWi-IjigR3oHY5dOwAAAM8"]
[Sat Jan 31 04:01:29.217020 2026] [:error] [pid 39242:tid 39264] [client 43.131.243.61:53152] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX0OGdOgXnkKGGSSCINK_AAAAAo"]
[Sat Jan 31 04:52:03.017982 2026] [proxy_fcgi:error] [pid 39244:tid 39328] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:03.163044 2026] [proxy_fcgi:error] [pid 39244:tid 39311] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:03.283985 2026] [proxy_fcgi:error] [pid 39244:tid 39319] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:03.405722 2026] [proxy_fcgi:error] [pid 39244:tid 39326] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:03.816445 2026] [proxy_fcgi:error] [pid 39244:tid 39334] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:05.285893 2026] [proxy_fcgi:error] [pid 39244:tid 39322] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:05.465370 2026] [proxy_fcgi:error] [pid 39244:tid 39329] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:05.993260 2026] [proxy_fcgi:error] [pid 39244:tid 39314] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:06.120672 2026] [proxy_fcgi:error] [pid 39244:tid 39324] [client 20.46.176.183:50370] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 04:52:06.387939 2026] [:error] [pid 39244:tid 39327] [client 20.46.176.183:50370] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0Z9no-KRTvg3jHEDzIrQAAAJE"]
[Sat Jan 31 04:52:06.904483 2026] [:error] [pid 20836:tid 20852] [client 20.46.176.183:54072] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0Z9oACllgWRWVrYITLaQAAAUs"]
[Sat Jan 31 04:52:07.398741 2026] [:error] [pid 39244:tid 39312] [client 20.46.176.183:55630] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0Z93o-KRTvg3jHEDzIrgAAAIM"]
[Sat Jan 31 04:52:07.906097 2026] [:error] [pid 39339:tid 39363] [client 20.46.176.183:5669] [client 20.46.176.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0Z98Wi-IjigR3oHY6H4gAAANY"]
[Sat Jan 31 05:08:01.143678 2026] [proxy_fcgi:error] [pid 20210:tid 20223] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:01.285121 2026] [proxy_fcgi:error] [pid 20210:tid 20219] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:01.443747 2026] [proxy_fcgi:error] [pid 20210:tid 20212] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:01.928920 2026] [proxy_fcgi:error] [pid 20210:tid 20233] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:02.434118 2026] [proxy_fcgi:error] [pid 20210:tid 20215] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:02.581292 2026] [proxy_fcgi:error] [pid 20210:tid 20213] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:02.742024 2026] [proxy_fcgi:error] [pid 20210:tid 20216] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:03.061777 2026] [proxy_fcgi:error] [pid 20210:tid 20221] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:03.210041 2026] [proxy_fcgi:error] [pid 20210:tid 20230] [client 20.214.137.92:10785] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 05:08:03.355400 2026] [:error] [pid 20210:tid 20236] [client 20.214.137.92:10785] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0ds3Ky7OGBlTY8MCerHQAAARg"]
[Sat Jan 31 05:08:03.920567 2026] [:error] [pid 20210:tid 20232] [client 20.214.137.92:23813] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0ds3Ky7OGBlTY8MCerHgAAARQ"]
[Sat Jan 31 05:08:04.477868 2026] [:error] [pid 20210:tid 20235] [client 20.214.137.92:26559] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0dtHKy7OGBlTY8MCerIwAAARc"]
[Sat Jan 31 05:08:05.033947 2026] [:error] [pid 20210:tid 20217] [client 20.214.137.92:23811] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "aX0dtXKy7OGBlTY8MCerJQAAAQU"]
[Sat Jan 31 06:05:33.134310 2026] [proxy_fcgi:error] [pid 39243:tid 39295] [client 20.100.196.146:41237] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 06:38:02.883656 2026] [:error] [pid 39339:tid 39359] [client 49.7.227.204:60874] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX0yysWi-IjigR3oHY6pkQAAANI"]
[Sat Jan 31 08:02:51.193404 2026] [:error] [pid 39242:tid 39254] [client 20.214.137.92:21304] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aX1Gq9OgXnkKGGSSCIONUAAAAAA"]
[Sat Jan 31 08:02:51.747611 2026] [:error] [pid 52451:tid 52473] [client 20.214.137.92:56201] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aX1Gq3ubVy7MGYWM2NYx2wAAAdM"]
[Sat Jan 31 08:02:52.290271 2026] [:error] [pid 52451:tid 52478] [client 20.214.137.92:56197] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aX1GrHubVy7MGYWM2NYx3AAAAdg"]
[Sat Jan 31 08:02:52.835719 2026] [:error] [pid 39339:tid 39345] [client 20.214.137.92:19517] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aX1GrMWi-IjigR3oHY64pgAAAMQ"]
[Sat Jan 31 11:35:06.661518 2026] [proxy_fcgi:error] [pid 52451:tid 52468] [client 3.127.203.41:14540] AH01071: Got error 'Primary script unknown'
[Sat Jan 31 14:18:42.052736 2026] [:error] [pid 59581:tid 59587] [client 49.51.253.26:46002] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aX2ewrpwqlqnnPNSmoGsvgAAA4M"]
[Sat Jan 31 16:45:18.257571 2026] [:error] [pid 39339:tid 39354] [client 43.130.141.193:51102] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX3BHsWi-IjigR3oHY4_nAAAAM0"]
[Sat Jan 31 19:33:50.253896 2026] [:error] [pid 39242:tid 39257] [client 182.44.12.37:50622] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX3ontOgXnkKGGSSCIMusQAAAAM"]
[Sun Feb 01 00:08:24.544335 2026] [:error] [pid 31465:tid 31496] [client 43.164.195.17:47604] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX4o-DkaGp475ez0mlxDzwAAAkI"]
[Sun Feb 01 06:21:31.066411 2026] [:error] [pid 10509:tid 10588] [client 45.155.68.142:34668] [client 45.155.68.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aX6Aa1MNpJBihOJgwVvr_wAAAJE"]
[Sun Feb 01 08:01:06.318627 2026] [:error] [pid 10509:tid 10580] [client 43.135.145.117:49762] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aX6XwlMNpJBihOJgwVsLAAAAAIk"]
[Sun Feb 01 08:43:17.009675 2026] [:error] [pid 10616:tid 10631] [client 43.140.247.223:40850] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX6hpWd8pZdmVx6pUp4fYwAAAMs"]
[Sun Feb 01 15:12:46.033218 2026] [:error] [pid 51610:tid 51622] [client 182.42.111.156:41834] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aX787t7GFdNFAqImMQDQVwAAAUg"]
[Sun Feb 01 21:51:08.558339 2026] [:error] [pid 10509:tid 10580] [client 60.188.57.0:34600] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX9aTFMNpJBihOJgwVsI2QAAAIk"]
[Mon Feb 02 01:47:56.659698 2026] [:error] [pid 8877:tid 8891] [client 43.166.238.12:50518] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aX-RzFjWRgIEkmjg6ouqEgAAAso"]
[Mon Feb 02 03:51:06.608757 2026] [proxy_fcgi:error] [pid 63034:tid 63137] [client 20.53.251.127:21266] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 04:30:25.178159 2026] [:error] [pid 63033:tid 63106] [client 182.42.111.156:56434] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aX-34feMX2QyIh3K16oPmQAAAE8"]
[Mon Feb 02 04:47:50.174008 2026] [:error] [pid 63032:tid 63071] [client 45.130.83.154:28121] [client 45.130.83.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aX-79nyEQ1PkpebvdRgO0QAAAAg"]
[Mon Feb 02 10:42:32.347568 2026] [:error] [pid 46008:tid 46033] [client 124.156.226.179:46092] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYAPGCRa52iYn7SlSMkoYQAAAVY"]
[Mon Feb 02 13:44:57.320623 2026] [:error] [pid 57081:tid 57129] [client 193.36.225.78:39805] [client 193.36.225.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.78, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYA52WvouJ2Jkm6HfBjvlQAAAw4"]
[Mon Feb 02 13:44:57.335677 2026] [proxy_fcgi:error] [pid 57081:tid 57129] [client 193.36.225.78:39805] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 15:41:03.090762 2026] [:error] [pid 56989:tid 57012] [client 38.183.50.57:36371] [client 38.183.50.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.183.50.57, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYBVD0p44HnChN-GZli-FQAAAhU"]
[Mon Feb 02 15:41:03.101566 2026] [proxy_fcgi:error] [pid 56989:tid 57012] [client 38.183.50.57:36371] AH01071: Got error 'Primary script unknown'
[Mon Feb 02 18:09:03.076351 2026] [:error] [pid 57081:tid 57122] [client 43.153.73.200:39874] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYB3v2vouJ2Jkm6HfBgi7AAAAwc"]
[Mon Feb 02 18:23:54.602093 2026] [:error] [pid 57021:tid 57030] [client 114.96.103.33:45934] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYB7Ov7AEpx7VcmYK3HpPwAAAkU"]
[Mon Feb 02 23:30:54.459419 2026] [:error] [pid 33612:tid 33633] [client 45.141.215.153:55322] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aYDDLstFn80qQEmo5QoiAgAAARM"]
[Mon Feb 02 23:30:55.611932 2026] [:error] [pid 63153:tid 63184] [client 45.141.215.153:55370] [client 45.141.215.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aYDDL3C9GXHnmLkdgdnFMwAAANc"]
[Tue Feb 03 00:23:48.317968 2026] [:error] [pid 33612:tid 33636] [client 193.36.225.31:33921] [client 193.36.225.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.31, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYDPlMtFn80qQEmo5QopSAAAARY"]
[Tue Feb 03 00:23:48.363346 2026] [proxy_fcgi:error] [pid 33612:tid 33636] [client 193.36.225.31:33921] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 00:52:49.779558 2026] [:error] [pid 56989:tid 56992] [client 43.159.136.201:47028] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYDWYUp44HnChN-GZlhNbAAAAgE"]
[Tue Feb 03 08:25:29.070937 2026] [:error] [pid 43028:tid 43042] [client 89.117.104.23:35892] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/mu-plugins/"] [unique_id "aYFAeVnHWnJD4cJC5DvJBgAAAMw"]
[Tue Feb 03 08:25:37.174234 2026] [:error] [pid 43028:tid 43051] [client 89.117.104.23:47798] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/mu-plugins/"] [unique_id "aYFAgVnHWnJD4cJC5DvJCgAAANU"]
[Tue Feb 03 08:25:41.377304 2026] [:error] [pid 42921:tid 42959] [client 89.117.104.23:54666] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aYFAhYblShffGl-01oe4rAAAAEE"]
[Tue Feb 03 08:25:45.797616 2026] [:error] [pid 5148:tid 5162] [client 89.117.104.23:54668] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aYFAib83HCHLtUIbS7LzSwAAAUs"]
[Tue Feb 03 08:25:49.453616 2026] [:error] [pid 43028:tid 43034] [client 89.117.104.23:54684] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYFAjVnHWnJD4cJC5DvJJQAAAMQ"]
[Tue Feb 03 08:25:53.894318 2026] [:error] [pid 42921:tid 42973] [client 89.117.104.23:58882] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYFAkYblShffGl-01oe4vQAAAE8"]
[Tue Feb 03 08:25:57.708507 2026] [:error] [pid 42920:tid 42943] [client 89.117.104.23:58888] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYFAlSix3YKltG4EU0nEGAAAAA4"]
[Tue Feb 03 08:26:02.764731 2026] [:error] [pid 42921:tid 42958] [client 89.117.104.23:40956] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/"] [unique_id "aYFAmoblShffGl-01oe4xgAAAEA"]
[Tue Feb 03 08:26:07.870360 2026] [:error] [pid 28720:tid 28742] [client 89.117.104.23:40968] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/"] [unique_id "aYFAn2mRXm2bmr_sYiYARAAAARQ"]
[Tue Feb 03 08:26:12.362892 2026] [:error] [pid 42922:tid 43000] [client 89.117.104.23:50656] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/"] [unique_id "aYFApGazX4WPS_dQRkjbpwAAAI8"]
[Tue Feb 03 08:26:17.889922 2026] [:error] [pid 43028:tid 43032] [client 89.117.104.23:50664] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/"] [unique_id "aYFAqVnHWnJD4cJC5DvJQQAAAMI"]
[Tue Feb 03 08:26:22.204640 2026] [:error] [pid 5148:tid 5162] [client 89.117.104.23:36174] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "aYFArr83HCHLtUIbS7LzeAAAAUs"]
[Tue Feb 03 08:26:26.426825 2026] [:error] [pid 5229:tid 5244] [client 89.117.104.23:36186] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "aYFAskKmEgmJub93yUrGZgAAAY0"]
[Tue Feb 03 08:26:33.393459 2026] [autoindex:error] [pid 42922:tid 43009] [client 89.117.104.23:51294] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 08:26:34.776958 2026] [autoindex:error] [pid 42922:tid 42994] [client 89.117.104.23:51294] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Feb 03 08:26:37.793560 2026] [:error] [pid 42922:tid 43002] [client 89.117.104.23:51294] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/uploads/"] [unique_id "aYFAvWazX4WPS_dQRkjbyAAAAJE"]
[Tue Feb 03 08:26:41.390600 2026] [:error] [pid 42921:tid 42966] [client 89.117.104.23:32872] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/uploads/"] [unique_id "aYFAwYblShffGl-01oe45AAAAEg"]
[Tue Feb 03 08:26:44.588480 2026] [:error] [pid 5148:tid 5167] [client 89.117.104.23:32888] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/uploads/"] [unique_id "aYFAxL83HCHLtUIbS7LzlAAAAVA"]
[Tue Feb 03 08:26:48.890417 2026] [:error] [pid 43028:tid 43045] [client 89.117.104.23:32896] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Admin/uploads/"] [unique_id "aYFAyFnHWnJD4cJC5DvJYAAAAM8"]
[Tue Feb 03 08:26:54.101761 2026] [:error] [pid 5229:tid 5251] [client 89.117.104.23:59446] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Admin/uploads/"] [unique_id "aYFAzkKmEgmJub93yUrGmAAAAZQ"]
[Tue Feb 03 08:26:59.259978 2026] [:error] [pid 42921:tid 42967] [client 89.117.104.23:59454] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/"] [unique_id "aYFA04blShffGl-01oe5DQAAAEk"]
[Tue Feb 03 08:27:04.682346 2026] [:error] [pid 42920:tid 42947] [client 89.117.104.23:35538] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/"] [unique_id "aYFA2Cix3YKltG4EU0nEQQAAABI"]
[Tue Feb 03 08:27:10.105534 2026] [:error] [pid 5229:tid 5253] [client 89.117.104.23:35550] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/"] [unique_id "aYFA3kKmEgmJub93yUrGswAAAZY"]
[Tue Feb 03 08:27:14.795048 2026] [:error] [pid 43028:tid 43050] [client 89.117.104.23:48886] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/"] [unique_id "aYFA4lnHWnJD4cJC5DvJeAAAANQ"]
[Tue Feb 03 08:27:19.079630 2026] [:error] [pid 42921:tid 42968] [client 89.117.104.23:48900] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/"] [unique_id "aYFA54blShffGl-01oe5IQAAAEo"]
[Tue Feb 03 08:27:24.047194 2026] [:error] [pid 28720:tid 28733] [client 89.117.104.23:54252] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/"] [unique_id "aYFA7GmRXm2bmr_sYiYAdgAAAQs"]
[Tue Feb 03 08:27:29.121836 2026] [:error] [pid 5148:tid 5168] [client 89.117.104.23:54278] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aYFA8b83HCHLtUIbS7LzvgAAAVE"]
[Tue Feb 03 08:27:33.802311 2026] [:error] [pid 5148:tid 5171] [client 89.117.104.23:40216] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aYFA9b83HCHLtUIbS7LzxAAAAVQ"]
[Tue Feb 03 08:27:42.894511 2026] [:error] [pid 5229:tid 5250] [client 89.117.104.23:40232] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/editor/"] [unique_id "aYFA_kKmEgmJub93yUrG-wAAAZM"]
[Tue Feb 03 08:27:47.485718 2026] [:error] [pid 5148:tid 5161] [client 89.117.104.23:54546] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/editor/"] [unique_id "aYFBA783HCHLtUIbS7Lz2wAAAUo"]
[Tue Feb 03 08:27:51.626366 2026] [:error] [pid 42920:tid 42931] [client 89.117.104.23:51076] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/editor/"] [unique_id "aYFBByix3YKltG4EU0nEYwAAAAI"]
[Tue Feb 03 08:27:56.181392 2026] [:error] [pid 42920:tid 42929] [client 89.117.104.23:51092] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/include/"] [unique_id "aYFBDCix3YKltG4EU0nEdgAAAAA"]
[Tue Feb 03 08:28:00.969925 2026] [:error] [pid 42922:tid 43001] [client 89.117.104.23:57430] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/include/"] [unique_id "aYFBEGazX4WPS_dQRkjcCgAAAJA"]
[Tue Feb 03 08:28:05.562809 2026] [:error] [pid 28720:tid 28725] [client 89.117.104.23:57434] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/include/"] [unique_id "aYFBFWmRXm2bmr_sYiYAmwAAAQM"]
[Tue Feb 03 08:28:06.962432 2026] [:error] [pid 28720:tid 28736] [client 89.117.104.23:57436] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Assets/"] [unique_id "aYFBFmmRXm2bmr_sYiYAnQAAAQ4"]
[Tue Feb 03 08:28:12.529822 2026] [:error] [pid 42922:tid 43009] [client 89.117.104.23:38776] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Assets/"] [unique_id "aYFBHGazX4WPS_dQRkjcIQAAAJg"]
[Tue Feb 03 08:28:15.108092 2026] [:error] [pid 5148:tid 5171] [client 89.117.104.23:38792] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Assets/"] [unique_id "aYFBH783HCHLtUIbS7L0EgAAAVQ"]
[Tue Feb 03 08:28:18.151677 2026] [:error] [pid 42922:tid 42989] [client 89.117.104.23:38800] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/stories/"] [unique_id "aYFBImazX4WPS_dQRkjcJAAAAIQ"]
[Tue Feb 03 08:28:19.873797 2026] [:error] [pid 5148:tid 5161] [client 89.117.104.23:38814] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/stories/"] [unique_id "aYFBI783HCHLtUIbS7L0HAAAAUo"]
[Tue Feb 03 08:28:22.744537 2026] [:error] [pid 42922:tid 42997] [client 89.117.104.23:59928] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/stories/"] [unique_id "aYFBJmazX4WPS_dQRkjcKAAAAIw"]
[Tue Feb 03 08:28:25.934920 2026] [:error] [pid 43028:tid 43040] [client 89.117.104.23:59932] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/stories/"] [unique_id "aYFBKVnHWnJD4cJC5DvJxAAAAMo"]
[Tue Feb 03 08:28:30.793146 2026] [:error] [pid 28720:tid 28733] [client 89.117.104.23:58414] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins/"] [unique_id "aYFBLmmRXm2bmr_sYiYAuAAAAQs"]
[Tue Feb 03 08:28:34.291932 2026] [:error] [pid 42921:tid 42958] [client 89.117.104.23:58418] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins/"] [unique_id "aYFBMoblShffGl-01oe5gAAAAEA"]
[Tue Feb 03 08:28:37.080195 2026] [:error] [pid 43028:tid 43043] [client 89.117.104.23:58434] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php/"] [unique_id "aYFBNVnHWnJD4cJC5DvJ0QAAAM0"]
[Tue Feb 03 08:28:41.136870 2026] [:error] [pid 5148:tid 5167] [client 89.117.104.23:54402] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php/"] [unique_id "aYFBOb83HCHLtUIbS7L0LAAAAVA"]
[Tue Feb 03 08:28:48.589425 2026] [:error] [pid 5229:tid 5253] [client 89.117.104.23:54414] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "aYFBQEKmEgmJub93yUrHYwAAAZY"]
[Tue Feb 03 08:28:53.155915 2026] [:error] [pid 5229:tid 5248] [client 89.117.104.23:56214] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "aYFBRUKmEgmJub93yUrHagAAAZE"]
[Tue Feb 03 08:28:55.206037 2026] [:error] [pid 28720:tid 28745] [client 89.117.104.23:56218] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "aYFBR2mRXm2bmr_sYiYAxgAAARc"]
[Tue Feb 03 08:28:58.861866 2026] [:error] [pid 5229:tid 5233] [client 89.117.104.23:56228] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYFBSkKmEgmJub93yUrHbwAAAYI"]
[Tue Feb 03 08:29:02.395454 2026] [:error] [pid 5148:tid 5159] [client 89.117.104.23:38498] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYFBTr83HCHLtUIbS7L0QQAAAUg"]
[Tue Feb 03 08:29:06.476419 2026] [:error] [pid 42920:tid 42950] [client 89.117.104.23:38512] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYFBUiix3YKltG4EU0nEwwAAABU"]
[Tue Feb 03 08:29:11.274985 2026] [:error] [pid 42921:tid 42980] [client 89.117.104.23:59536] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYFBV4blShffGl-01oe5nAAAAFY"]
[Tue Feb 03 08:29:15.283300 2026] [:error] [pid 43028:tid 43033] [client 89.117.104.23:59548] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/"] [unique_id "aYFBW1nHWnJD4cJC5DvJ9AAAAMM"]
[Tue Feb 03 08:29:18.387183 2026] [:error] [pid 42921:tid 42964] [client 89.117.104.23:59560] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/"] [unique_id "aYFBXoblShffGl-01oe5owAAAEY"]
[Tue Feb 03 08:29:23.141063 2026] [:error] [pid 5229:tid 5247] [client 89.117.104.23:51968] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/"] [unique_id "aYFBY0KmEgmJub93yUrHiwAAAZA"]
[Tue Feb 03 08:29:27.017207 2026] [:error] [pid 42922:tid 43002] [client 89.117.104.23:51976] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/"] [unique_id "aYFBZ2azX4WPS_dQRkjcVAAAAJE"]
[Tue Feb 03 08:29:32.049627 2026] [:error] [pid 5148:tid 5170] [client 89.117.104.23:40158] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/"] [unique_id "aYFBbL83HCHLtUIbS7L0WQAAAVM"]
[Tue Feb 03 08:29:35.756443 2026] [:error] [pid 42921:tid 42981] [client 89.117.104.23:40160] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/"] [unique_id "aYFBb4blShffGl-01oe5swAAAFc"]
[Tue Feb 03 08:29:40.315874 2026] [:error] [pid 5229:tid 5240] [client 89.117.104.23:40162] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/"] [unique_id "aYFBdEKmEgmJub93yUrIewAAAYk"]
[Tue Feb 03 08:29:45.523396 2026] [:error] [pid 5148:tid 5174] [client 89.117.104.23:46406] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aYFBeb83HCHLtUIbS7L0bgAAAVc"]
[Tue Feb 03 08:29:54.466874 2026] [:error] [pid 42922:tid 43008] [client 89.117.104.23:46412] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYFBgmazX4WPS_dQRkjcfgAAAJc"]
[Tue Feb 03 08:29:59.709609 2026] [:error] [pid 5229:tid 5245] [client 89.117.104.23:46136] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYFBh0KmEgmJub93yUrIlQAAAY4"]
[Tue Feb 03 08:30:03.087792 2026] [:error] [pid 42920:tid 42938] [client 89.117.104.23:42694] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYFBiyix3YKltG4EU0nE9AAAAAk"]
[Tue Feb 03 08:30:07.379881 2026] [:error] [pid 42922:tid 43006] [client 89.117.104.23:42700] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/components/"] [unique_id "aYFBj2azX4WPS_dQRkjciQAAAJU"]
[Tue Feb 03 08:30:11.575620 2026] [:error] [pid 5229:tid 5246] [client 89.117.104.23:48744] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/components/"] [unique_id "aYFBk0KmEgmJub93yUrIrwAAAY8"]
[Tue Feb 03 08:30:16.318369 2026] [:error] [pid 43028:tid 43037] [client 89.117.104.23:48748] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/uploads/images/"] [unique_id "aYFBmFnHWnJD4cJC5DvKRwAAAMc"]
[Tue Feb 03 08:30:19.906719 2026] [:error] [pid 42920:tid 42948] [client 89.117.104.23:48762] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/uploads/images/"] [unique_id "aYFBmyix3YKltG4EU0nFFgAAABM"]
[Tue Feb 03 08:30:23.500125 2026] [:error] [pid 5229:tid 5234] [client 89.117.104.23:47408] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/uploads/images/"] [unique_id "aYFBn0KmEgmJub93yUrI2wAAAYM"]
[Tue Feb 03 08:30:28.639239 2026] [:error] [pid 5229:tid 5234] [client 89.117.104.23:47410] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aYFBpEKmEgmJub93yUrI5gAAAYM"]
[Tue Feb 03 08:30:33.175669 2026] [:error] [pid 5229:tid 5238] [client 89.117.104.23:48586] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/classic-editor/"] [unique_id "aYFBqUKmEgmJub93yUrI7AAAAYc"]
[Tue Feb 03 08:30:38.897043 2026] [:error] [pid 5148:tid 5168] [client 89.117.104.23:48594] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/fonts/"] [unique_id "aYFBrr83HCHLtUIbS7L0rQAAAVE"]
[Tue Feb 03 08:30:43.091603 2026] [:error] [pid 42921:tid 42980] [client 89.117.104.23:48974] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/fonts/"] [unique_id "aYFBs4blShffGl-01oe5-AAAAFY"]
[Tue Feb 03 08:30:46.903722 2026] [:error] [pid 42922:tid 42989] [client 89.117.104.23:48980] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aYFBtmazX4WPS_dQRkjctQAAAIQ"]
[Tue Feb 03 08:30:51.715189 2026] [:error] [pid 5148:tid 5163] [client 89.117.104.23:38660] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/contact-form-7/admin/js/"] [unique_id "aYFBu783HCHLtUIbS7L0uwAAAUw"]
[Tue Feb 03 08:31:00.699182 2026] [:error] [pid 42922:tid 43004] [client 89.117.104.23:38676] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYFBxGazX4WPS_dQRkjcygAAAJM"]
[Tue Feb 03 08:31:01.792743 2026] [:error] [pid 42922:tid 42997] [client 89.117.104.23:38380] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYFBxWazX4WPS_dQRkjczAAAAIw"]
[Tue Feb 03 08:31:05.794959 2026] [:error] [pid 5148:tid 5154] [client 89.117.104.23:38390] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYFByb83HCHLtUIbS7L0yQAAAUM"]
[Tue Feb 03 08:31:07.179767 2026] [:error] [pid 42922:tid 42989] [client 89.117.104.23:38392] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYFBy2azX4WPS_dQRkjc0wAAAIQ"]
[Tue Feb 03 08:31:10.827899 2026] [:error] [pid 5148:tid 5151] [client 89.117.104.23:37118] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "aYFBzr83HCHLtUIbS7L00QAAAUA"]
[Tue Feb 03 08:31:15.594517 2026] [:error] [pid 5229:tid 5240] [client 89.117.104.23:37132] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "aYFB00KmEgmJub93yUrJHAAAAYk"]
[Tue Feb 03 08:31:19.694270 2026] [:error] [pid 43028:tid 43036] [client 89.117.104.23:37146] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "aYFB11nHWnJD4cJC5DvK8AAAAMY"]
[Tue Feb 03 08:31:22.559770 2026] [:error] [pid 42921:tid 42963] [client 89.117.104.23:55296] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "aYFB2oblShffGl-01oe6HwAAAEU"]
[Tue Feb 03 08:31:26.255688 2026] [:error] [pid 28720:tid 28738] [client 89.117.104.23:55300] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "aYFB3mmRXm2bmr_sYiYBPwAAARA"]
[Tue Feb 03 08:31:28.280822 2026] [:error] [pid 42920:tid 42949] [client 89.117.104.23:55310] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "aYFB4Cix3YKltG4EU0nFlAAAABQ"]
[Tue Feb 03 08:31:31.295187 2026] [:error] [pid 5229:tid 5239] [client 89.117.104.23:57704] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "aYFB40KmEgmJub93yUrJMQAAAYg"]
[Tue Feb 03 08:31:34.180426 2026] [:error] [pid 42922:tid 42987] [client 89.117.104.23:57720] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "aYFB5mazX4WPS_dQRkjc8QAAAII"]
[Tue Feb 03 08:31:37.917779 2026] [:error] [pid 43028:tid 43053] [client 89.117.104.23:57726] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "aYFB6VnHWnJD4cJC5DvLCgAAANc"]
[Tue Feb 03 08:31:40.587991 2026] [:error] [pid 42921:tid 42976] [client 89.117.104.23:36774] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYFB7IblShffGl-01oe6OAAAAFI"]
[Tue Feb 03 08:31:43.658830 2026] [:error] [pid 5229:tid 5250] [client 89.117.104.23:36776] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYFB70KmEgmJub93yUrJYQAAAZM"]
[Tue Feb 03 08:31:48.069276 2026] [:error] [pid 5229:tid 5234] [client 89.117.104.23:36782] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYFB9EKmEgmJub93yUrJZwAAAYM"]
[Tue Feb 03 08:31:52.324774 2026] [:error] [pid 5148:tid 5174] [client 89.117.104.23:43668] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/"] [unique_id "aYFB-L83HCHLtUIbS7L1BgAAAVc"]
[Tue Feb 03 08:31:55.865296 2026] [:error] [pid 5229:tid 5231] [client 89.117.104.23:43676] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/"] [unique_id "aYFB-0KmEgmJub93yUrJegAAAYA"]
[Tue Feb 03 08:31:59.151861 2026] [:error] [pid 42921:tid 42968] [client 89.117.104.23:43692] [client 89.117.104.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/"] [unique_id "aYFB_4blShffGl-01oe6SwAAAEo"]
[Tue Feb 03 15:09:08.799244 2026] [:error] [pid 43028:tid 43035] [client 43.153.123.3:53208] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYGfFFnHWnJD4cJC5Ds90QAAAMU"]
[Tue Feb 03 15:11:03.438711 2026] [:error] [pid 43028:tid 43050] [client 49.235.136.28:35774] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYGfh1nHWnJD4cJC5Ds-RQAAANQ"]
[Tue Feb 03 19:32:58.940898 2026] [:error] [pid 42922:tid 43001] [client 103.65.236.149:60770] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aYHc6mazX4WPS_dQRkiD8QAAAJA"]
[Tue Feb 03 19:32:59.253173 2026] [:error] [pid 42922:tid 43004] [client 103.65.236.149:60819] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aYHc62azX4WPS_dQRkiD8gAAAJM"]
[Tue Feb 03 20:46:58.233089 2026] [proxy_fcgi:error] [pid 5148:tid 5158] [client 20.41.103.99:7702] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 22:22:33.432966 2026] [:error] [pid 43028:tid 43044] [client 103.19.197.28:54821] [client 103.19.197.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.19.197.28, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYIEqVnHWnJD4cJC5DvLmgAAAM4"]
[Tue Feb 03 22:22:33.445956 2026] [proxy_fcgi:error] [pid 43028:tid 43044] [client 103.19.197.28:54821] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:19.629170 2026] [proxy_fcgi:error] [pid 42921:tid 42980] [client 20.194.44.29:5917] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:19.931332 2026] [proxy_fcgi:error] [pid 42921:tid 42976] [client 20.194.44.29:5917] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:20.088305 2026] [proxy_fcgi:error] [pid 42921:tid 42970] [client 20.194.44.29:5917] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:21.359653 2026] [proxy_fcgi:error] [pid 42921:tid 42971] [client 20.194.44.29:5917] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:21.498466 2026] [proxy_fcgi:error] [pid 42921:tid 42973] [client 20.194.44.29:5917] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:21.645685 2026] [proxy_fcgi:error] [pid 42921:tid 42979] [client 20.194.44.29:5917] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:06:21.799592 2026] [:error] [pid 42921:tid 42977] [client 20.194.44.29:5917] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/m.php"] [unique_id "aYIO7YblShffGl-01oebKQAAAFM"]
[Tue Feb 03 23:06:44.222689 2026] [:error] [pid 42920:tid 42941] [client 20.194.44.29:8495] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aYIPBCix3YKltG4EU0mnSwAAAAw"]
[Tue Feb 03 23:06:47.989260 2026] [:error] [pid 5148:tid 5157] [client 20.194.44.29:34234] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aYIPB783HCHLtUIbS7INUQAAAUY"]
[Tue Feb 03 23:06:57.686841 2026] [:error] [pid 42922:tid 43008] [client 20.194.44.29:12323] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aYIPEWazX4WPS_dQRki-nQAAAJc"]
[Tue Feb 03 23:07:02.957804 2026] [:error] [pid 43028:tid 43035] [client 20.194.44.29:12301] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aYIPFlnHWnJD4cJC5Dve3gAAAMU"]
[Tue Feb 03 23:07:03.690591 2026] [:error] [pid 5229:tid 5249] [client 20.194.44.29:8231] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aYIPF0KmEgmJub93yUoqUAAAAZI"]
[Tue Feb 03 23:07:07.319642 2026] [:error] [pid 5229:tid 5231] [client 20.194.44.29:12355] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aYIPG0KmEgmJub93yUoqVwAAAYA"]
[Tue Feb 03 23:07:36.906998 2026] [:error] [pid 5148:tid 5164] [client 20.194.44.29:9773] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aYIPOL83HCHLtUIbS7INhQAAAU0"]
[Tue Feb 03 23:07:42.362897 2026] [:error] [pid 42920:tid 42943] [client 20.194.44.29:5707] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aYIPPiix3YKltG4EU0mnxAAAAA4"]
[Tue Feb 03 23:07:43.359754 2026] [:error] [pid 43028:tid 43043] [client 20.194.44.29:9729] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x56.php"] [unique_id "aYIPP1nHWnJD4cJC5DvfIAAAAM0"]
[Tue Feb 03 23:07:46.060100 2026] [:error] [pid 43028:tid 43053] [client 20.194.44.29:52755] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htaccess.php"] [unique_id "aYIPQlnHWnJD4cJC5DvfOAAAANc"]
[Tue Feb 03 23:07:57.778036 2026] [:error] [pid 42922:tid 43005] [client 20.194.44.29:9858] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htaccess.php"] [unique_id "aYIPTWazX4WPS_dQRki-zwAAAJQ"]
[Tue Feb 03 23:08:03.515582 2026] [:error] [pid 42922:tid 43003] [client 20.194.44.29:13912] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/readme.php"] [unique_id "aYIPU2azX4WPS_dQRki-2AAAAJI"]
[Tue Feb 03 23:08:16.840715 2026] [:error] [pid 42922:tid 42989] [client 20.194.44.29:13892] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x50.php"] [unique_id "aYIPYGazX4WPS_dQRki-5AAAAIQ"]
[Tue Feb 03 23:08:19.988713 2026] [:error] [pid 42922:tid 43001] [client 20.194.44.29:16614] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x50.php"] [unique_id "aYIPY2azX4WPS_dQRki-6gAAAJA"]
[Tue Feb 03 23:08:23.690368 2026] [proxy_fcgi:error] [pid 5229:tid 5249] [client 20.194.44.29:5411] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:08:23.827882 2026] [proxy_fcgi:error] [pid 5229:tid 5252] [client 20.194.44.29:5411] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:08:23.980737 2026] [proxy_fcgi:error] [pid 5229:tid 5241] [client 20.194.44.29:5411] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:08:24.454284 2026] [proxy_fcgi:error] [pid 5229:tid 5231] [client 20.194.44.29:5411] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:08:24.682643 2026] [:error] [pid 5229:tid 5234] [client 20.194.44.29:5411] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aYIPaEKmEgmJub93yUoqqwAAAYM"]
[Tue Feb 03 23:08:29.072356 2026] [:error] [pid 5229:tid 5233] [client 20.194.44.29:10123] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aYIPbUKmEgmJub93yUoqtwAAAYI"]
[Tue Feb 03 23:08:30.834629 2026] [:error] [pid 42920:tid 42935] [client 20.194.44.29:55507] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aYIPbiix3YKltG4EU0mn9wAAAAY"]
[Tue Feb 03 23:08:32.415994 2026] [:error] [pid 5148:tid 5159] [client 20.194.44.29:10100] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aYIPcL83HCHLtUIbS7INzAAAAUg"]
[Tue Feb 03 23:08:36.061023 2026] [:error] [pid 42921:tid 42965] [client 20.194.44.29:11646] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aYIPdIblShffGl-01oebpAAAAEc"]
[Tue Feb 03 23:08:51.515628 2026] [:error] [pid 5148:tid 5168] [client 20.194.44.29:10166] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gtc.php"] [unique_id "aYIPg783HCHLtUIbS7IN5AAAAVE"]
[Tue Feb 03 23:09:00.792358 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:13948] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gtc.php"] [unique_id "aYIPjEKmEgmJub93yUoq4gAAAYw"]
[Tue Feb 03 23:09:02.612532 2026] [:error] [pid 5229:tid 5237] [client 20.194.44.29:5338] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gtc.php"] [unique_id "aYIPjkKmEgmJub93yUoq7AAAAYY"]
[Tue Feb 03 23:09:03.643530 2026] [:error] [pid 5229:tid 5244] [client 20.194.44.29:43152] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gtc.php"] [unique_id "aYIPj0KmEgmJub93yUoq8QAAAY0"]
[Tue Feb 03 23:09:04.711688 2026] [:error] [pid 5229:tid 5248] [client 20.194.44.29:5423] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atx.php"] [unique_id "aYIPkEKmEgmJub93yUoq9AAAAZE"]
[Tue Feb 03 23:09:05.731914 2026] [:error] [pid 5229:tid 5235] [client 20.194.44.29:43138] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atx.php"] [unique_id "aYIPkUKmEgmJub93yUoq9wAAAYQ"]
[Tue Feb 03 23:09:07.818384 2026] [:error] [pid 5229:tid 5232] [client 20.194.44.29:8358] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atx.php"] [unique_id "aYIPk0KmEgmJub93yUorAAAAAYE"]
[Tue Feb 03 23:10:07.803826 2026] [:error] [pid 42921:tid 42974] [client 20.194.44.29:55751] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z60.php"] [unique_id "aYIPz4blShffGl-01oecDAAAAFA"]
[Tue Feb 03 23:10:14.878925 2026] [:error] [pid 42921:tid 42966] [client 20.194.44.29:34647] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z60.php"] [unique_id "aYIP1oblShffGl-01oecEQAAAEg"]
[Tue Feb 03 23:10:23.863290 2026] [:error] [pid 42920:tid 42939] [client 20.194.44.29:18861] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYIP3yix3YKltG4EU0modwAAAAo"]
[Tue Feb 03 23:10:25.646433 2026] [:error] [pid 42922:tid 42986] [client 20.194.44.29:53963] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYIP4WazX4WPS_dQRki_TQAAAIE"]
[Tue Feb 03 23:10:31.016177 2026] [proxy_fcgi:error] [pid 42921:tid 42958] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:31.154889 2026] [proxy_fcgi:error] [pid 42921:tid 42977] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:31.297986 2026] [proxy_fcgi:error] [pid 42921:tid 42960] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:31.731843 2026] [proxy_fcgi:error] [pid 42921:tid 42982] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:31.871784 2026] [proxy_fcgi:error] [pid 42921:tid 42971] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:32.016242 2026] [proxy_fcgi:error] [pid 42921:tid 42966] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:32.158415 2026] [proxy_fcgi:error] [pid 42921:tid 42961] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:32.296855 2026] [proxy_fcgi:error] [pid 42921:tid 42972] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:32.439628 2026] [proxy_fcgi:error] [pid 42921:tid 42962] [client 20.194.44.29:34642] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:10:32.762665 2026] [:error] [pid 42921:tid 42975] [client 20.194.44.29:34642] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYIP6IblShffGl-01oecNAAAAFE"]
[Tue Feb 03 23:10:35.008757 2026] [:error] [pid 5229:tid 5242] [client 20.194.44.29:5612] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aYIP60KmEgmJub93yUoraQAAAYs"]
[Tue Feb 03 23:10:38.433438 2026] [:error] [pid 42921:tid 42982] [client 20.194.44.29:18856] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aYIP7oblShffGl-01oecOgAAAFg"]
[Tue Feb 03 23:10:42.948272 2026] [:error] [pid 42921:tid 42976] [client 20.194.44.29:10122] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aYIP8oblShffGl-01oecSAAAAFI"]
[Tue Feb 03 23:10:45.074679 2026] [:error] [pid 28720:tid 28738] [client 20.194.44.29:10162] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cong.php"] [unique_id "aYIP9WmRXm2bmr_sYib0aQAAARA"]
[Tue Feb 03 23:10:45.992974 2026] [:error] [pid 28720:tid 28728] [client 20.194.44.29:55757] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aYIP9WmRXm2bmr_sYib0awAAAQY"]
[Tue Feb 03 23:10:48.104291 2026] [:error] [pid 5229:tid 5234] [client 20.194.44.29:55504] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aYIP-EKmEgmJub93yUorhgAAAYM"]
[Tue Feb 03 23:10:49.467641 2026] [:error] [pid 43028:tid 43053] [client 20.194.44.29:55697] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aYIP-VnHWnJD4cJC5DvgSAAAANc"]
[Tue Feb 03 23:10:51.966881 2026] [:error] [pid 28720:tid 28728] [client 20.194.44.29:5407] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aYIP-2mRXm2bmr_sYib0ewAAAQY"]
[Tue Feb 03 23:10:56.433836 2026] [:error] [pid 5148:tid 5174] [client 20.194.44.29:34652] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYIQAL83HCHLtUIbS7IOlAAAAVc"]
[Tue Feb 03 23:11:00.167920 2026] [:error] [pid 42921:tid 42968] [client 20.194.44.29:52695] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYIQBIblShffGl-01oecYAAAAEo"]
[Tue Feb 03 23:11:11.497671 2026] [:error] [pid 42921:tid 42963] [client 20.194.44.29:5397] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aYIQD4blShffGl-01oecbgAAAEU"]
[Tue Feb 03 23:11:12.459864 2026] [:error] [pid 5229:tid 5246] [client 20.194.44.29:18835] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aYIQEEKmEgmJub93yUorqQAAAY8"]
[Tue Feb 03 23:11:13.427879 2026] [:error] [pid 42922:tid 43000] [client 20.194.44.29:57401] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aYIQEWazX4WPS_dQRki_fwAAAI8"]
[Tue Feb 03 23:11:14.335062 2026] [:error] [pid 5229:tid 5233] [client 20.194.44.29:5394] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "aYIQEkKmEgmJub93yUorrgAAAYI"]
[Tue Feb 03 23:11:15.446216 2026] [:error] [pid 5148:tid 5172] [client 20.194.44.29:57385] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aYIQE783HCHLtUIbS7IOsQAAAVU"]
[Tue Feb 03 23:11:16.114419 2026] [:error] [pid 5229:tid 5248] [client 20.194.44.29:5414] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aYIQFEKmEgmJub93yUoruwAAAZE"]
[Tue Feb 03 23:11:19.886023 2026] [:error] [pid 42922:tid 43001] [client 20.194.44.29:55732] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aYIQF2azX4WPS_dQRki_kQAAAJA"]
[Tue Feb 03 23:11:23.948516 2026] [:error] [pid 42920:tid 42948] [client 20.194.44.29:5424] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aYIQGyix3YKltG4EU0mosgAAABM"]
[Tue Feb 03 23:11:28.303565 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:55694] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aYIQIEKmEgmJub93yUor0gAAAYw"]
[Tue Feb 03 23:11:49.225125 2026] [:error] [pid 5148:tid 5160] [client 20.194.44.29:5727] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYIQNb83HCHLtUIbS7IO0wAAAUk"]
[Tue Feb 03 23:11:57.871304 2026] [:error] [pid 42920:tid 42952] [client 20.194.44.29:43191] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYIQPSix3YKltG4EU0mo8gAAABc"]
[Tue Feb 03 23:12:01.972454 2026] [:error] [pid 5148:tid 5172] [client 20.194.44.29:10121] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYIQQb83HCHLtUIbS7IO5wAAAVU"]
[Tue Feb 03 23:12:03.371040 2026] [:error] [pid 42920:tid 42939] [client 20.194.44.29:10148] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aYIQQyix3YKltG4EU0mo-AAAAAo"]
[Tue Feb 03 23:12:30.607700 2026] [:error] [pid 42922:tid 42996] [client 20.194.44.29:11615] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYIQXmazX4WPS_dQRki_7AAAAIs"]
[Tue Feb 03 23:12:36.344618 2026] [proxy_fcgi:error] [pid 5148:tid 5169] [client 20.194.44.29:53496] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:12:36.486658 2026] [proxy_fcgi:error] [pid 5148:tid 5159] [client 20.194.44.29:53496] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:12:36.931157 2026] [proxy_fcgi:error] [pid 5148:tid 5161] [client 20.194.44.29:53496] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:12:37.308024 2026] [proxy_fcgi:error] [pid 5148:tid 5175] [client 20.194.44.29:53496] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:12:37.449040 2026] [proxy_fcgi:error] [pid 5148:tid 5155] [client 20.194.44.29:53496] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:12:37.593969 2026] [proxy_fcgi:error] [pid 5148:tid 5154] [client 20.194.44.29:53496] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:12:37.905530 2026] [:error] [pid 5148:tid 5157] [client 20.194.44.29:53496] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYIQZb83HCHLtUIbS7IPIQAAAUY"]
[Tue Feb 03 23:12:45.305978 2026] [:error] [pid 5148:tid 5170] [client 20.194.44.29:14265] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYIQbb83HCHLtUIbS7IPKQAAAVM"]
[Tue Feb 03 23:12:46.198436 2026] [:error] [pid 42922:tid 42990] [client 20.194.44.29:9737] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYIQbmazX4WPS_dQRki_-gAAAIU"]
[Tue Feb 03 23:12:46.820824 2026] [:error] [pid 42922:tid 43003] [client 20.194.44.29:37402] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYIQbmazX4WPS_dQRki__AAAAJI"]
[Tue Feb 03 23:12:48.607152 2026] [:error] [pid 42922:tid 42994] [client 20.194.44.29:14232] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYIQcGazX4WPS_dQRki__wAAAIk"]
[Tue Feb 03 23:12:51.428169 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:13934] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYIQc0KmEgmJub93yUosSgAAAYw"]
[Tue Feb 03 23:12:52.016567 2026] [:error] [pid 5229:tid 5252] [client 20.194.44.29:5752] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYIQdEKmEgmJub93yUosUAAAAZU"]
[Tue Feb 03 23:12:59.695129 2026] [:error] [pid 5229:tid 5234] [client 20.194.44.29:14224] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYIQe0KmEgmJub93yUosbgAAAYM"]
[Tue Feb 03 23:13:00.837645 2026] [:error] [pid 43028:tid 43031] [client 20.194.44.29:10051] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIQfFnHWnJD4cJC5DvhTAAAAME"]
[Tue Feb 03 23:13:04.313218 2026] [:error] [pid 5148:tid 5169] [client 20.194.44.29:37421] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIQgL83HCHLtUIbS7IPPQAAAVI"]
[Tue Feb 03 23:13:11.290878 2026] [:error] [pid 28720:tid 28740] [client 20.194.44.29:11608] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aYIQh2mRXm2bmr_sYib1RgAAARI"]
[Tue Feb 03 23:13:44.141028 2026] [proxy_fcgi:error] [pid 5229:tid 5235] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:44.279600 2026] [proxy_fcgi:error] [pid 5229:tid 5250] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:44.638230 2026] [proxy_fcgi:error] [pid 5229:tid 5255] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:44.778171 2026] [proxy_fcgi:error] [pid 5229:tid 5246] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:45.256960 2026] [proxy_fcgi:error] [pid 5229:tid 5232] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:45.532584 2026] [proxy_fcgi:error] [pid 5229:tid 5243] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:46.028461 2026] [proxy_fcgi:error] [pid 5229:tid 5254] [client 20.194.44.29:37400] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:13:46.232276 2026] [:error] [pid 5229:tid 5253] [client 20.194.44.29:37400] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aYIQqkKmEgmJub93yUosxgAAAZY"]
[Tue Feb 03 23:14:04.468420 2026] [:error] [pid 42920:tid 42936] [client 20.194.44.29:12370] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aYIQvCix3YKltG4EU0mpgAAAAAc"]
[Tue Feb 03 23:14:06.060808 2026] [:error] [pid 42920:tid 42946] [client 20.194.44.29:19387] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aYIQviix3YKltG4EU0mphAAAABE"]
[Tue Feb 03 23:14:15.650147 2026] [:error] [pid 42921:tid 42982] [client 20.194.44.29:10349] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aYIQx4blShffGl-01oedYwAAAFg"]
[Tue Feb 03 23:14:19.282920 2026] [:error] [pid 5148:tid 5155] [client 20.194.44.29:12741] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aYIQy783HCHLtUIbS7IP_AAAAUQ"]
[Tue Feb 03 23:14:26.020385 2026] [:error] [pid 43028:tid 43046] [client 20.194.44.29:12333] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aYIQ0lnHWnJD4cJC5DvhwwAAANA"]
[Tue Feb 03 23:14:27.979797 2026] [:error] [pid 42920:tid 42949] [client 20.194.44.29:55213] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aYIQ0yix3YKltG4EU0mplwAAABQ"]
[Tue Feb 03 23:14:30.235905 2026] [:error] [pid 42922:tid 43003] [client 20.194.44.29:57422] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aYIQ1mazX4WPS_dQRkjAcwAAAJI"]
[Tue Feb 03 23:14:31.169618 2026] [:error] [pid 5148:tid 5173] [client 20.194.44.29:8379] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIQ1783HCHLtUIbS7IQCAAAAVY"]
[Tue Feb 03 23:14:34.745820 2026] [:error] [pid 43028:tid 43042] [client 20.194.44.29:15026] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIQ2lnHWnJD4cJC5DvhzAAAAMw"]
[Tue Feb 03 23:14:36.859801 2026] [:error] [pid 42922:tid 42987] [client 20.194.44.29:11131] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIQ3GazX4WPS_dQRkjAeQAAAII"]
[Tue Feb 03 23:14:40.522207 2026] [:error] [pid 43028:tid 43049] [client 20.194.44.29:8465] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYIQ4FnHWnJD4cJC5Dvh2gAAANM"]
[Tue Feb 03 23:14:41.647189 2026] [:error] [pid 42921:tid 42967] [client 20.194.44.29:15006] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aYIQ4YblShffGl-01oedcgAAAEk"]
[Tue Feb 03 23:14:43.593168 2026] [:error] [pid 5148:tid 5154] [client 20.194.44.29:9289] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aYIQ4783HCHLtUIbS7IQHAAAAUM"]
[Tue Feb 03 23:14:49.723976 2026] [proxy_fcgi:error] [pid 5229:tid 5247] [client 20.194.44.29:34209] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:14:50.009689 2026] [:error] [pid 5229:tid 5241] [client 20.194.44.29:34209] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYIQ6kKmEgmJub93yUotJQAAAYo"]
[Tue Feb 03 23:14:52.891267 2026] [:error] [pid 5148:tid 5155] [client 20.194.44.29:9298] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYIQ7L83HCHLtUIbS7IQJQAAAUQ"]
[Tue Feb 03 23:14:53.492848 2026] [:error] [pid 42920:tid 42948] [client 20.194.44.29:5232] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aYIQ7Six3YKltG4EU0mpqgAAABM"]
[Tue Feb 03 23:14:54.138184 2026] [:error] [pid 28720:tid 28733] [client 20.194.44.29:54002] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aYIQ7mmRXm2bmr_sYib14QAAAQs"]
[Tue Feb 03 23:15:06.194647 2026] [:error] [pid 42922:tid 43006] [client 20.194.44.29:55192] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "aYIQ-mazX4WPS_dQRkjAkAAAAJU"]
[Tue Feb 03 23:15:17.493000 2026] [:error] [pid 42920:tid 42929] [client 20.194.44.29:5138] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aYIRBSix3YKltG4EU0mpxgAAAAA"]
[Tue Feb 03 23:15:37.860280 2026] [:error] [pid 5229:tid 5250] [client 20.194.44.29:54940] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYIRGUKmEgmJub93yUotWQAAAZM"]
[Tue Feb 03 23:15:38.684210 2026] [:error] [pid 28720:tid 28724] [client 20.194.44.29:55011] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYIRGmmRXm2bmr_sYib2BAAAAQI"]
[Tue Feb 03 23:15:39.238601 2026] [:error] [pid 42922:tid 42997] [client 20.194.44.29:5950] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYIRG2azX4WPS_dQRkjAsgAAAIw"]
[Tue Feb 03 23:15:44.407638 2026] [:error] [pid 43028:tid 43049] [client 20.194.44.29:6040] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYIRIFnHWnJD4cJC5DviOgAAANM"]
[Tue Feb 03 23:15:57.965712 2026] [:error] [pid 42922:tid 42991] [client 20.194.44.29:9306] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIRLWazX4WPS_dQRkjAxgAAAIY"]
[Tue Feb 03 23:15:58.967111 2026] [:error] [pid 42922:tid 43001] [client 20.194.44.29:55019] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYIRLmazX4WPS_dQRkjAyAAAAJA"]
[Tue Feb 03 23:16:00.522368 2026] [:error] [pid 42920:tid 42932] [client 20.194.44.29:34219] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYIRMCix3YKltG4EU0mp2QAAAAM"]
[Tue Feb 03 23:16:02.092044 2026] [:error] [pid 5148:tid 5167] [client 20.194.44.29:11115] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aYIRMr83HCHLtUIbS7IQXgAAAVA"]
[Tue Feb 03 23:16:04.781685 2026] [:error] [pid 42921:tid 42976] [client 20.194.44.29:9723] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aYIRNIblShffGl-01oed0QAAAFI"]
[Tue Feb 03 23:16:05.257618 2026] [:error] [pid 43028:tid 43039] [client 20.194.44.29:8472] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aYIRNVnHWnJD4cJC5DviXgAAAMk"]
[Tue Feb 03 23:16:07.194697 2026] [:error] [pid 5148:tid 5155] [client 20.194.44.29:5434] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww1.php"] [unique_id "aYIRN783HCHLtUIbS7IQawAAAUQ"]
[Tue Feb 03 23:16:11.730757 2026] [:error] [pid 42921:tid 42959] [client 20.194.44.29:8452] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYIRO4blShffGl-01oed2wAAAEE"]
[Tue Feb 03 23:16:13.498369 2026] [:error] [pid 43028:tid 43030] [client 20.194.44.29:6041] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYIRPVnHWnJD4cJC5DvibgAAAMA"]
[Tue Feb 03 23:16:21.980700 2026] [:error] [pid 43028:tid 43035] [client 20.194.44.29:5212] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYIRRVnHWnJD4cJC5DviiQAAAMU"]
[Tue Feb 03 23:16:52.929974 2026] [:error] [pid 42921:tid 42965] [client 20.194.44.29:55034] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYIRZIblShffGl-01oed_AAAAEc"]
[Tue Feb 03 23:16:53.949075 2026] [:error] [pid 28720:tid 28731] [client 20.194.44.29:54986] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYIRZWmRXm2bmr_sYib2VAAAAQk"]
[Tue Feb 03 23:16:59.016455 2026] [proxy_fcgi:error] [pid 42920:tid 42933] [client 20.194.44.29:54461] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:16:59.380282 2026] [proxy_fcgi:error] [pid 42920:tid 42947] [client 20.194.44.29:54461] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:16:59.538342 2026] [:error] [pid 42920:tid 42949] [client 20.194.44.29:54461] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYIRayix3YKltG4EU0mqGQAAABQ"]
[Tue Feb 03 23:17:02.616840 2026] [:error] [pid 5229:tid 5232] [client 20.194.44.29:34182] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYIRbkKmEgmJub93yUot3QAAAYE"]
[Tue Feb 03 23:17:03.871588 2026] [:error] [pid 42921:tid 42964] [client 20.194.44.29:34185] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYIRb4blShffGl-01oeeBwAAAEY"]
[Tue Feb 03 23:17:06.040846 2026] [:error] [pid 28720:tid 28736] [client 20.194.44.29:5829] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aYIRcmmRXm2bmr_sYib2XgAAAQ4"]
[Tue Feb 03 23:17:15.997136 2026] [:error] [pid 28720:tid 28724] [client 20.194.44.29:11092] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYIRe2mRXm2bmr_sYib2aAAAAQI"]
[Tue Feb 03 23:17:17.945336 2026] [:error] [pid 42920:tid 42942] [client 20.194.44.29:11076] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYIRfSix3YKltG4EU0mqJQAAAA0"]
[Tue Feb 03 23:17:19.378088 2026] [:error] [pid 5148:tid 5173] [client 20.194.44.29:5907] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aYIRf783HCHLtUIbS7IQoQAAAVY"]
[Tue Feb 03 23:17:25.109922 2026] [:error] [pid 28720:tid 28744] [client 20.194.44.29:55000] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYIRhWmRXm2bmr_sYib2gAAAARY"]
[Tue Feb 03 23:17:26.341733 2026] [:error] [pid 42920:tid 42939] [client 20.194.44.29:11626] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYIRhiix3YKltG4EU0mqLAAAAAo"]
[Tue Feb 03 23:17:42.145283 2026] [:error] [pid 42922:tid 43004] [client 20.194.44.29:9948] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYIRlmazX4WPS_dQRkjBWAAAAJM"]
[Tue Feb 03 23:17:44.717399 2026] [:error] [pid 43028:tid 43033] [client 20.194.44.29:9436] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aYIRmFnHWnJD4cJC5Dvi-wAAAMM"]
[Tue Feb 03 23:17:45.858779 2026] [:error] [pid 42922:tid 42996] [client 20.194.44.29:9700] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aYIRmWazX4WPS_dQRkjBXwAAAIs"]
[Tue Feb 03 23:18:00.691966 2026] [proxy_fcgi:error] [pid 42920:tid 42934] [client 20.194.44.29:52991] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:18:01.599951 2026] [proxy_fcgi:error] [pid 42920:tid 42949] [client 20.194.44.29:52991] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:18:01.742184 2026] [proxy_fcgi:error] [pid 42920:tid 42939] [client 20.194.44.29:52991] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:18:01.877006 2026] [:error] [pid 42920:tid 42936] [client 20.194.44.29:52991] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aYIRqSix3YKltG4EU0mqYwAAAAc"]
[Tue Feb 03 23:18:02.934142 2026] [:error] [pid 43028:tid 43051] [client 20.194.44.29:6073] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aYIRqlnHWnJD4cJC5DvjGQAAANU"]
[Tue Feb 03 23:18:06.436933 2026] [:error] [pid 42921:tid 42976] [client 20.194.44.29:54912] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aYIRroblShffGl-01oeeeQAAAFI"]
[Tue Feb 03 23:18:16.744018 2026] [:error] [pid 42920:tid 42934] [client 20.194.44.29:54974] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aYIRuCix3YKltG4EU0mqcwAAAAU"]
[Tue Feb 03 23:18:20.450296 2026] [:error] [pid 5148:tid 5165] [client 20.194.44.29:9461] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYIRvL83HCHLtUIbS7IQ_AAAAU4"]
[Tue Feb 03 23:18:21.402758 2026] [:error] [pid 5148:tid 5160] [client 20.194.44.29:54460] [client 20.194.44.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYIRvb83HCHLtUIbS7IQ_wAAAUk"]
[Tue Feb 03 23:18:24.984871 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:52942] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYIRwEKmEgmJub93yUouaAAAAYw"]
[Tue Feb 03 23:18:26.942314 2026] [:error] [pid 43028:tid 43052] [client 20.194.44.29:9430] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYIRwlnHWnJD4cJC5DvjVAAAANY"]
[Tue Feb 03 23:18:27.938268 2026] [:error] [pid 5148:tid 5169] [client 20.194.44.29:53891] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYIRw783HCHLtUIbS7IRCAAAAVI"]
[Tue Feb 03 23:18:40.731153 2026] [:error] [pid 42921:tid 42961] [client 20.194.44.29:54402] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aYIR0IblShffGl-01oeergAAAEM"]
[Tue Feb 03 23:18:42.258348 2026] [:error] [pid 28720:tid 28724] [client 20.194.44.29:43445] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aYIR0mmRXm2bmr_sYib21QAAAQI"]
[Tue Feb 03 23:18:44.269627 2026] [:error] [pid 5229:tid 5233] [client 20.194.44.29:12753] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aYIR1EKmEgmJub93yUouggAAAYI"]
[Tue Feb 03 23:18:47.053826 2026] [:error] [pid 5229:tid 5246] [client 20.194.44.29:10891] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o1.php"] [unique_id "aYIR10KmEgmJub93yUoujwAAAY8"]
[Tue Feb 03 23:18:48.083363 2026] [:error] [pid 43028:tid 43039] [client 20.194.44.29:9464] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aYIR2FnHWnJD4cJC5DvjggAAAMk"]
[Tue Feb 03 23:18:49.613492 2026] [:error] [pid 43028:tid 43045] [client 20.194.44.29:55264] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aYIR2VnHWnJD4cJC5DvjhgAAAM8"]
[Tue Feb 03 23:18:51.815617 2026] [:error] [pid 5229:tid 5243] [client 20.194.44.29:35053] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aYIR20KmEgmJub93yUoulwAAAYw"]
[Tue Feb 03 23:18:54.182465 2026] [:error] [pid 28720:tid 28726] [client 20.194.44.29:29733] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/juuuu.php"] [unique_id "aYIR3mmRXm2bmr_sYib2-QAAAQQ"]
[Tue Feb 03 23:18:55.965888 2026] [:error] [pid 5229:tid 5232] [client 20.194.44.29:10043] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ha.php"] [unique_id "aYIR30KmEgmJub93yUouoQAAAYE"]
[Tue Feb 03 23:19:05.487385 2026] [proxy_fcgi:error] [pid 42921:tid 42967] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:05.641996 2026] [proxy_fcgi:error] [pid 42921:tid 42980] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:05.803419 2026] [proxy_fcgi:error] [pid 42921:tid 42963] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:06.274449 2026] [proxy_fcgi:error] [pid 42921:tid 42965] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:06.446291 2026] [proxy_fcgi:error] [pid 42921:tid 42981] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:06.687379 2026] [proxy_fcgi:error] [pid 42921:tid 42978] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:06.958741 2026] [proxy_fcgi:error] [pid 42921:tid 42958] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:07.099331 2026] [proxy_fcgi:error] [pid 42921:tid 42966] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:07.238385 2026] [proxy_fcgi:error] [pid 42921:tid 42975] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:07.377346 2026] [proxy_fcgi:error] [pid 42921:tid 42979] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:07.745491 2026] [proxy_fcgi:error] [pid 42921:tid 42961] [client 20.194.44.29:35011] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:19:07.929682 2026] [:error] [pid 42921:tid 42970] [client 20.194.44.29:35011] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ave.php"] [unique_id "aYIR64blShffGl-01oee2AAAAEw"]
[Tue Feb 03 23:19:54.469512 2026] [:error] [pid 43028:tid 43048] [client 20.194.44.29:12330] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aYISGlnHWnJD4cJC5DvkHAAAANI"]
[Tue Feb 03 23:19:57.129164 2026] [:error] [pid 42921:tid 42973] [client 20.194.44.29:12309] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aYISHYblShffGl-01oefPQAAAE8"]
[Tue Feb 03 23:20:06.511148 2026] [:error] [pid 42921:tid 42980] [client 20.194.44.29:12343] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aYISJoblShffGl-01oefUgAAAFY"]
[Tue Feb 03 23:20:12.363685 2026] [proxy_fcgi:error] [pid 42922:tid 42992] [client 20.194.44.29:57396] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:20:12.582103 2026] [:error] [pid 42922:tid 42997] [client 20.194.44.29:57396] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aYISLGazX4WPS_dQRkjCEQAAAIw"]
[Tue Feb 03 23:20:25.641228 2026] [:error] [pid 5148:tid 5151] [client 20.194.44.29:57350] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aYISOb83HCHLtUIbS7IR2gAAAUA"]
[Tue Feb 03 23:20:26.984523 2026] [:error] [pid 28720:tid 28733] [client 20.194.44.29:11972] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aYISOmmRXm2bmr_sYib3lwAAAQs"]
[Tue Feb 03 23:20:33.655225 2026] [:error] [pid 28720:tid 28726] [client 20.194.44.29:52734] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files.php"] [unique_id "aYISQWmRXm2bmr_sYib3nQAAAQQ"]
[Tue Feb 03 23:20:35.145534 2026] [:error] [pid 5148:tid 5174] [client 20.194.44.29:9315] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files.php"] [unique_id "aYISQ783HCHLtUIbS7IR5QAAAVc"]
[Tue Feb 03 23:20:36.573166 2026] [:error] [pid 28720:tid 28745] [client 20.194.44.29:12358] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files.php"] [unique_id "aYISRGmRXm2bmr_sYib3pgAAARc"]
[Tue Feb 03 23:20:38.110091 2026] [:error] [pid 43028:tid 43039] [client 20.194.44.29:52978] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files.php"] [unique_id "aYISRlnHWnJD4cJC5DvkWgAAAMk"]
[Tue Feb 03 23:20:45.623084 2026] [:error] [pid 28720:tid 28728] [client 20.194.44.29:12328] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aYISTWmRXm2bmr_sYib3uwAAAQY"]
[Tue Feb 03 23:20:46.551836 2026] [:error] [pid 5148:tid 5154] [client 20.194.44.29:5410] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aYISTr83HCHLtUIbS7IR_wAAAUM"]
[Tue Feb 03 23:20:51.566196 2026] [:error] [pid 5148:tid 5164] [client 20.194.44.29:9296] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aYISU783HCHLtUIbS7ISEwAAAU0"]
[Tue Feb 03 23:20:57.074279 2026] [:error] [pid 28720:tid 28742] [client 20.194.44.29:16600] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aYISWWmRXm2bmr_sYib3yQAAARQ"]
[Tue Feb 03 23:21:01.648136 2026] [:error] [pid 42921:tid 42970] [client 20.194.44.29:11643] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aYISXYblShffGl-01oefnAAAAEw"]
[Tue Feb 03 23:21:04.144848 2026] [:error] [pid 42920:tid 42950] [client 20.194.44.29:5420] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aYISYCix3YKltG4EU0mrMAAAABU"]
[Tue Feb 03 23:21:06.139638 2026] [:error] [pid 5148:tid 5154] [client 20.194.44.29:43167] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aYISYr83HCHLtUIbS7ISJAAAAUM"]
[Tue Feb 03 23:21:07.616267 2026] [:error] [pid 28720:tid 28729] [client 20.194.44.29:10158] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYISY2mRXm2bmr_sYib31AAAAQc"]
[Tue Feb 03 23:21:11.715034 2026] [:error] [pid 5229:tid 5244] [client 20.194.44.29:37392] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYISZ0KmEgmJub93yUovkgAAAY0"]
[Tue Feb 03 23:21:17.058833 2026] [:error] [pid 5229:tid 5231] [client 20.194.44.29:43137] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nox.php"] [unique_id "aYISbUKmEgmJub93yUovqAAAAYA"]
[Tue Feb 03 23:21:21.591561 2026] [:error] [pid 42921:tid 42966] [client 20.194.44.29:5181] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nox.php"] [unique_id "aYIScYblShffGl-01oefuQAAAEg"]
[Tue Feb 03 23:21:22.815799 2026] [:error] [pid 5148:tid 5162] [client 20.194.44.29:19381] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nox.php"] [unique_id "aYIScr83HCHLtUIbS7ISNQAAAUs"]
[Tue Feb 03 23:21:28.836256 2026] [:error] [pid 28720:tid 28723] [client 20.194.44.29:37406] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nox.php"] [unique_id "aYISeGmRXm2bmr_sYib36AAAAQE"]
[Tue Feb 03 23:21:29.863605 2026] [:error] [pid 5148:tid 5166] [client 20.194.44.29:9837] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aYISeb83HCHLtUIbS7ISQAAAAU8"]
[Tue Feb 03 23:21:33.455589 2026] [:error] [pid 5229:tid 5252] [client 20.194.44.29:19387] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aYISfUKmEgmJub93yUovxwAAAZU"]
[Tue Feb 03 23:21:35.049461 2026] [:error] [pid 28720:tid 28738] [client 20.194.44.29:5235] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aYISf2mRXm2bmr_sYib39QAAARA"]
[Tue Feb 03 23:21:36.134419 2026] [:error] [pid 42922:tid 42999] [client 20.194.44.29:43173] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aYISgGazX4WPS_dQRkjCeQAAAI4"]
[Tue Feb 03 23:21:37.513679 2026] [:error] [pid 42921:tid 42959] [client 20.194.44.29:19363] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aYISgYblShffGl-01oef2QAAAEE"]
[Tue Feb 03 23:21:38.649161 2026] [:error] [pid 5148:tid 5167] [client 20.194.44.29:11095] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aYISgr83HCHLtUIbS7ISTgAAAVA"]
[Tue Feb 03 23:21:42.932056 2026] [:error] [pid 42920:tid 42929] [client 20.194.44.29:34182] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aYIShiix3YKltG4EU0mrdwAAAAA"]
[Tue Feb 03 23:21:43.655248 2026] [:error] [pid 5229:tid 5234] [client 20.194.44.29:13534] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aYISh0KmEgmJub93yUov0AAAAYM"]
[Tue Feb 03 23:21:49.116448 2026] [:error] [pid 5229:tid 5245] [client 20.194.44.29:9919] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aYISjUKmEgmJub93yUov0wAAAY4"]
[Tue Feb 03 23:21:49.970623 2026] [:error] [pid 42921:tid 42964] [client 20.194.44.29:11124] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aYISjYblShffGl-01oef7wAAAEY"]
[Tue Feb 03 23:21:50.715282 2026] [:error] [pid 5229:tid 5232] [client 20.194.44.29:9866] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aYISjkKmEgmJub93yUov1wAAAYE"]
[Tue Feb 03 23:21:52.494447 2026] [:error] [pid 42922:tid 43005] [client 20.194.44.29:9917] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class9.php"] [unique_id "aYISkGazX4WPS_dQRkjClgAAAJQ"]
[Tue Feb 03 23:21:53.245900 2026] [:error] [pid 43028:tid 43044] [client 20.194.44.29:11078] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYISkVnHWnJD4cJC5DvkxQAAAM4"]
[Tue Feb 03 23:21:59.474519 2026] [:error] [pid 5229:tid 5247] [client 20.194.44.29:19366] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYISl0KmEgmJub93yUov6gAAAZA"]
[Tue Feb 03 23:22:03.984224 2026] [:error] [pid 5148:tid 5168] [client 20.194.44.29:9674] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYISm783HCHLtUIbS7ISaQAAAVE"]
[Tue Feb 03 23:22:10.107828 2026] [:error] [pid 42920:tid 42942] [client 20.194.44.29:14983] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aYISoiix3YKltG4EU0mrrgAAAA0"]
[Tue Feb 03 23:22:38.992269 2026] [proxy_fcgi:error] [pid 42921:tid 42971] [client 20.194.44.29:53470] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:22:39.130793 2026] [proxy_fcgi:error] [pid 42921:tid 42975] [client 20.194.44.29:53470] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:22:39.362620 2026] [proxy_fcgi:error] [pid 42921:tid 42981] [client 20.194.44.29:53470] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:22:39.502103 2026] [proxy_fcgi:error] [pid 42921:tid 42970] [client 20.194.44.29:53470] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:22:39.638880 2026] [:error] [pid 42921:tid 42980] [client 20.194.44.29:53470] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ac.php"] [unique_id "aYISv4blShffGl-01oegGAAAAFY"]
[Tue Feb 03 23:22:42.384188 2026] [:error] [pid 42922:tid 43001] [client 20.194.44.29:44334] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ac.php"] [unique_id "aYISwmazX4WPS_dQRkjCyQAAAJA"]
[Tue Feb 03 23:22:43.809827 2026] [:error] [pid 42920:tid 42933] [client 20.194.44.29:10103] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ac.php"] [unique_id "aYISwyix3YKltG4EU0mr3QAAAAQ"]
[Tue Feb 03 23:22:58.111482 2026] [:error] [pid 43028:tid 43036] [client 20.194.44.29:54012] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aYIS0lnHWnJD4cJC5DvlEwAAAMY"]
[Tue Feb 03 23:23:01.737031 2026] [:error] [pid 5229:tid 5251] [client 20.194.44.29:15011] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aYIS1UKmEgmJub93yUowWAAAAZQ"]
[Tue Feb 03 23:23:03.393467 2026] [:error] [pid 42921:tid 42981] [client 20.194.44.29:5848] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aYIS14blShffGl-01oegMwAAAFc"]
[Tue Feb 03 23:23:07.747825 2026] [:error] [pid 28720:tid 28741] [client 20.194.44.29:10052] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aYIS22mRXm2bmr_sYib4TAAAARM"]
[Tue Feb 03 23:23:16.408914 2026] [:error] [pid 28720:tid 28737] [client 20.194.44.29:53490] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pop.php"] [unique_id "aYIS5GmRXm2bmr_sYib4VAAAAQ8"]
[Tue Feb 03 23:23:17.795750 2026] [:error] [pid 28720:tid 28726] [client 20.194.44.29:43417] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pop.php"] [unique_id "aYIS5WmRXm2bmr_sYib4VwAAAQQ"]
[Tue Feb 03 23:23:21.218736 2026] [:error] [pid 5148:tid 5168] [client 20.194.44.29:8207] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pop.php"] [unique_id "aYIS6b83HCHLtUIbS7ISzgAAAVE"]
[Tue Feb 03 23:23:27.980874 2026] [:error] [pid 5148:tid 5160] [client 20.194.44.29:44302] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "aYIS7783HCHLtUIbS7IS1AAAAUk"]
[Tue Feb 03 23:23:33.994177 2026] [:error] [pid 5229:tid 5249] [client 20.194.44.29:43402] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "aYIS9UKmEgmJub93yUowhAAAAZI"]
[Tue Feb 03 23:23:47.343604 2026] [proxy_fcgi:error] [pid 42921:tid 42979] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:47.497693 2026] [proxy_fcgi:error] [pid 42921:tid 42977] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:47.649062 2026] [proxy_fcgi:error] [pid 42921:tid 42972] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:47.788456 2026] [proxy_fcgi:error] [pid 42921:tid 42978] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:47.930303 2026] [proxy_fcgi:error] [pid 42921:tid 42964] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:48.076187 2026] [proxy_fcgi:error] [pid 42921:tid 42958] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:48.219078 2026] [proxy_fcgi:error] [pid 42921:tid 42976] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:48.361758 2026] [proxy_fcgi:error] [pid 42921:tid 42959] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:48.601382 2026] [proxy_fcgi:error] [pid 42921:tid 42962] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Tue Feb 03 23:23:48.755751 2026] [proxy_fcgi:error] [pid 42921:tid 42963] [client 20.194.44.29:9973] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 03:26:26.871635 2026] [:error] [pid 16862:tid 16944] [client 193.36.225.29:38297] [client 193.36.225.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.29, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYJL4vGO7AI3pfxBWeChdgAAAJA"]
[Wed Feb 04 03:26:26.878660 2026] [proxy_fcgi:error] [pid 16862:tid 16944] [client 193.36.225.29:38297] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:08:36.119354 2026] [:error] [pid 47577:tid 47598] [client 170.106.180.139:37266] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYJj1KvA4Yp0Sov-3kTvWgAAABE"]
[Wed Feb 04 05:38:31.053743 2026] [proxy_fcgi:error] [pid 47578:tid 47619] [client 104.208.91.171:10025] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:38:31.218750 2026] [proxy_fcgi:error] [pid 47578:tid 47623] [client 104.208.91.171:10025] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:38:31.643957 2026] [proxy_fcgi:error] [pid 47578:tid 47617] [client 104.208.91.171:10025] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:38:31.781305 2026] [proxy_fcgi:error] [pid 47578:tid 47625] [client 104.208.91.171:10025] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:38:32.165412 2026] [proxy_fcgi:error] [pid 47578:tid 47641] [client 104.208.91.171:10025] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:38:32.302422 2026] [proxy_fcgi:error] [pid 47578:tid 47621] [client 104.208.91.171:10025] AH01071: Got error 'Primary script unknown'
[Wed Feb 04 05:38:32.548721 2026] [:error] [pid 47578:tid 47627] [client 104.208.91.171:10025] [client 104.208.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYJq2J5oatM9u8-yDv_wigAAAEw"]
[Wed Feb 04 05:38:33.025989 2026] [:error] [pid 47578:tid 47618] [client 104.208.91.171:7617] [client 104.208.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYJq2Z5oatM9u8-yDv_wjAAAAEM"]
[Wed Feb 04 05:38:33.501776 2026] [:error] [pid 47676:tid 47680] [client 104.208.91.171:7650] [client 104.208.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYJq2QrYSkTgZEfUDqFpNwAAAMI"]
[Wed Feb 04 05:38:33.984414 2026] [:error] [pid 47676:tid 47697] [client 104.208.91.171:27805] [client 104.208.91.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYJq2QrYSkTgZEfUDqFpOAAAANM"]
[Wed Feb 04 11:53:25.822080 2026] [:error] [pid 47405:tid 47441] [client 36.111.67.189:53846] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYLCtaTmhSrwHQTn6I7m7wAAAME"]
[Wed Feb 04 14:21:16.719433 2026] [:error] [pid 47405:tid 47444] [client 37.27.119.185:63023] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYLlXKTmhSrwHQTn6I4RQQAAAMQ"], referer: https://www.netflix.com
[Wed Feb 04 14:21:17.493930 2026] [:error] [pid 8285:tid 8306] [client 37.27.119.185:63769] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYLlXRpweS7ndDaunz-TNQAAAFM"], referer: https://www.wsj.com
[Wed Feb 04 14:21:19.305761 2026] [:error] [pid 47404:tid 47411] [client 37.27.119.185:64363] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYLlX1tGjJnGFKjTTubASwAAAIE"], referer: https://www.reddit.com/r/IAmA
[Wed Feb 04 14:21:20.093285 2026] [:error] [pid 50578:tid 50580] [client 37.27.119.185:65015] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYLlYNYUQBXdXxfW1mccBgAAAAA"], referer: https://www.facebook.com
[Wed Feb 04 18:29:21.778947 2026] [:error] [pid 50578:tid 50583] [client 114.96.103.33:44103] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYMfgdYUQBXdXxfW1mdSSAAAAAM"]
[Thu Feb 05 01:28:58.473558 2026] [:error] [pid 6490:tid 6494] [client 185.137.164.5:45791] [client 185.137.164.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aYOB2vjiJaSp2OpoDUl5tQAAAEE"]
[Thu Feb 05 02:12:53.742636 2026] [:error] [pid 26443:tid 26450] [client 43.157.22.109:52254] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYOMJdRUJ4b_jBAfhPKAXgAAAUU"]
[Thu Feb 05 05:01:55.444967 2026] [:error] [pid 12187:tid 12218] [client 103.62.232.34:47524] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aYOzw4nHiwpamEOSyaPgmQAAABY"]
[Thu Feb 05 05:01:56.945454 2026] [:error] [pid 12188:tid 12224] [client 103.62.232.34:47538] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aYOzxDKWpl9mNO_-qzPa7QAAAEA"]
[Thu Feb 05 05:39:13.693676 2026] [:error] [pid 12187:tid 12207] [client 193.36.225.39:38197] [client 193.36.225.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.39, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYO8gYnHiwpamEOSyaPtJwAAAAs"]
[Thu Feb 05 05:39:13.728616 2026] [proxy_fcgi:error] [pid 12187:tid 12207] [client 193.36.225.39:38197] AH01071: Got error 'Primary script unknown'
[Thu Feb 05 07:47:06.964438 2026] [:error] [pid 10949:tid 10976] [client 36.111.67.189:38302] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYPaetyI0wNtlpWZ1djxfwAAAVY"]
[Thu Feb 05 10:30:52.854875 2026] [:error] [pid 31833:tid 31850] [client 45.92.1.79:62713] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYQA3BzypZt5yekRAkGi6QAAAY8"]
[Thu Feb 05 10:30:53.477881 2026] [:error] [pid 31833:tid 31847] [client 45.92.1.79:63076] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYQA3RzypZt5yekRAkGjEwAAAYw"]
[Thu Feb 05 10:30:54.086560 2026] [:error] [pid 31833:tid 31848] [client 45.92.1.79:63542] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYQA3hzypZt5yekRAkGjOAAAAY0"]
[Thu Feb 05 10:30:54.714798 2026] [:error] [pid 33396:tid 33409] [client 45.92.1.79:63973] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYQA3vTgp_Ev6LiSSgApkgAAAMY"]
[Thu Feb 05 10:30:55.560991 2026] [:error] [pid 31775:tid 31824] [client 45.92.1.79:64418] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYQA3xNlTj92HTKsJN1uEAAAARM"]
[Thu Feb 05 12:05:55.626907 2026] [:error] [pid 33396:tid 33423] [client 43.153.19.83:43134] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYQXI_Tgp_Ev6LiSSgBKwQAAANQ"]
[Thu Feb 05 14:24:50.683868 2026] [:error] [pid 31833:tid 31835] [client 192.144.148.122:43104] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYQ3shzypZt5yekRAkEA1wAAAYA"]
[Thu Feb 05 15:26:05.942025 2026] [:error] [pid 31774:tid 31780] [client 134.209.160.163:45140] [client 134.209.160.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/wp-json/wc/store/cart"] [unique_id "aYRGDajDlLg1NOhSOXXwhwAAAII"]
[Thu Feb 05 17:35:11.955072 2026] [:error] [pid 31775:tid 31806] [client 43.133.69.37:56066] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYRkTxNlTj92HTKsJN3u-AAAAQE"]
[Thu Feb 05 20:58:12.414848 2026] [:error] [pid 31739:tid 31755] [client 182.44.67.97:57496] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYST5AGrHl_5BvMstJLhdQAAAA4"]
[Thu Feb 05 23:41:29.491383 2026] [proxy_fcgi:error] [pid 33396:tid 33420] [client 20.65.59.176:3725] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 02:12:01.663961 2026] [:error] [pid 11123:tid 11197] [client 43.166.131.228:50460] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYTdcaJk7pHfPArl4eW5NwAAAQ0"]
[Fri Feb 06 03:46:08.718362 2026] [:error] [pid 1665:tid 1741] [client 106.54.62.156:38786] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYTzgDYZLE6gThXvZMp6zgAAAI4"]
[Fri Feb 06 06:07:03.632359 2026] [proxy_fcgi:error] [pid 34582:tid 34589] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:04.011738 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:04.452894 2026] [proxy_fcgi:error] [pid 34582:tid 34599] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:04.821601 2026] [proxy_fcgi:error] [pid 34582:tid 34592] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:05.172903 2026] [proxy_fcgi:error] [pid 34582:tid 34589] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:05.581122 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:05.968335 2026] [proxy_fcgi:error] [pid 34582:tid 34599] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:06.373624 2026] [proxy_fcgi:error] [pid 34582:tid 34596] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:06.773395 2026] [proxy_fcgi:error] [pid 34582:tid 34605] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:07.123525 2026] [proxy_fcgi:error] [pid 34582:tid 34596] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:08.048925 2026] [proxy_fcgi:error] [pid 34582:tid 34593] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:08.465081 2026] [proxy_fcgi:error] [pid 34582:tid 34592] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:08.863483 2026] [proxy_fcgi:error] [pid 34582:tid 34603] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:09.257221 2026] [proxy_fcgi:error] [pid 34582:tid 34585] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:09.614887 2026] [proxy_fcgi:error] [pid 34582:tid 34591] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:10.008679 2026] [proxy_fcgi:error] [pid 34582:tid 34607] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:10.382937 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:10.782793 2026] [proxy_fcgi:error] [pid 34582:tid 34595] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:11.177348 2026] [proxy_fcgi:error] [pid 34582:tid 34603] [client 188.212.135.41:65007] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:17.218045 2026] [:error] [pid 34582:tid 34587] [client 188.212.135.41:65007] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYUUleDeJq1JGssYG6yNjQAAAQI"]
[Fri Feb 06 06:07:19.098039 2026] [:error] [pid 1773:tid 1807] [client 188.212.135.38:61935] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYUUlzYbySBHYmKOdJ-6nAAAANg"]
[Fri Feb 06 06:07:21.289802 2026] [proxy_fcgi:error] [pid 1665:tid 1742] [client 188.212.135.48:26283] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:22.536599 2026] [:error] [pid 1665:tid 1734] [client 188.212.135.48:26283] [client 188.212.135.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aYUUmjYZLE6gThXvZMqnZAAAAIc"]
[Fri Feb 06 06:07:24.035610 2026] [proxy_fcgi:error] [pid 1773:tid 1791] [client 188.212.135.33:38629] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:24.398729 2026] [:error] [pid 1773:tid 1796] [client 188.212.135.33:38629] [client 188.212.135.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aYUUnDYbySBHYmKOdJ-6_QAAAM0"]
[Fri Feb 06 06:07:25.523283 2026] [proxy_fcgi:error] [pid 1665:tid 1736] [client 188.212.135.27:53857] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:27.696083 2026] [:error] [pid 1665:tid 1745] [client 188.212.135.27:53857] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYUUnzYZLE6gThXvZMqnxwAAAJI"]
[Fri Feb 06 06:07:28.852680 2026] [:error] [pid 34582:tid 34598] [client 188.212.135.53:47651] [client 188.212.135.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYUUoODeJq1JGssYG6yOoQAAAQ0"]
[Fri Feb 06 06:07:29.574361 2026] [:error] [pid 34582:tid 34605] [client 188.212.135.6:61495] [client 188.212.135.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYUUoeDeJq1JGssYG6yOrQAAARQ"]
[Fri Feb 06 06:07:30.249843 2026] [:error] [pid 34582:tid 34605] [client 188.212.135.26:44565] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYUUouDeJq1JGssYG6yOwQAAARQ"]
[Fri Feb 06 06:07:30.980475 2026] [:error] [pid 34582:tid 34592] [client 188.212.135.38:39575] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYUUouDeJq1JGssYG6yOzwAAAQc"]
[Fri Feb 06 06:07:31.750481 2026] [:error] [pid 1663:tid 1686] [client 188.212.135.60:36683] [client 188.212.135.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYUUo19EQrJaKkABjK-rDwAAAA0"]
[Fri Feb 06 06:07:32.853452 2026] [:error] [pid 34582:tid 34592] [client 188.212.135.45:35887] [client 188.212.135.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYUUpODeJq1JGssYG6yO8gAAAQc"]
[Fri Feb 06 06:07:33.637081 2026] [proxy_fcgi:error] [pid 34582:tid 34606] [client 188.212.135.14:26835] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:34.374044 2026] [:error] [pid 34582:tid 34605] [client 188.212.135.14:26835] [client 188.212.135.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aYUUpuDeJq1JGssYG6yPEwAAARQ"]
[Fri Feb 06 06:07:35.137386 2026] [proxy_fcgi:error] [pid 1665:tid 1729] [client 188.212.135.30:28889] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:35.890486 2026] [:error] [pid 1665:tid 1750] [client 188.212.135.30:28889] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYUUpzYZLE6gThXvZMqobwAAAJc"]
[Fri Feb 06 06:07:36.996606 2026] [:error] [pid 1773:tid 1807] [client 188.212.135.39:37505] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYUUqDYbySBHYmKOdJ-7nQAAANg"]
[Fri Feb 06 06:07:37.740132 2026] [proxy_fcgi:error] [pid 1663:tid 1681] [client 188.212.135.33:60719] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:38.125921 2026] [:error] [pid 1663:tid 1673] [client 188.212.135.33:60719] [client 188.212.135.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYUUql9EQrJaKkABjK-ruwAAAAA"]
[Fri Feb 06 06:07:38.946733 2026] [proxy_fcgi:error] [pid 1773:tid 1800] [client 188.212.135.52:46479] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:40.066382 2026] [proxy_fcgi:error] [pid 1773:tid 1791] [client 188.212.135.52:46479] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:41.528085 2026] [:error] [pid 1773:tid 1795] [client 188.212.135.52:46479] [client 188.212.135.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYUUrTYbySBHYmKOdJ-78AAAAMw"]
[Fri Feb 06 06:07:42.237224 2026] [proxy_fcgi:error] [pid 1663:tid 1696] [client 188.212.135.28:25405] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:42.638580 2026] [:error] [pid 1663:tid 1693] [client 188.212.135.28:25405] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYUUrl9EQrJaKkABjK-sKQAAABQ"]
[Fri Feb 06 06:07:43.419177 2026] [proxy_fcgi:error] [pid 1663:tid 1674] [client 188.212.135.46:23237] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:44.168163 2026] [:error] [pid 1663:tid 1686] [client 188.212.135.46:23237] [client 188.212.135.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aYUUsF9EQrJaKkABjK-sUwAAAA0"]
[Fri Feb 06 06:07:45.307437 2026] [:error] [pid 1663:tid 1685] [client 188.212.135.34:52337] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYUUsV9EQrJaKkABjK-scwAAAAw"]
[Fri Feb 06 06:07:46.409822 2026] [proxy_fcgi:error] [pid 1665:tid 1727] [client 188.212.135.56:38509] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:46.793640 2026] [proxy_fcgi:error] [pid 1665:tid 1739] [client 188.212.135.56:38509] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:47.549902 2026] [:error] [pid 1665:tid 1740] [client 188.212.135.56:38509] [client 188.212.135.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYUUszYZLE6gThXvZMqplAAAAI0"]
[Fri Feb 06 06:07:48.683178 2026] [:error] [pid 1663:tid 1674] [client 188.212.135.59:64279] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYUUtF9EQrJaKkABjK-szQAAAAE"]
[Fri Feb 06 06:07:50.793177 2026] [:error] [pid 1664:tid 1717] [client 188.212.135.27:20897] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYUUtu_0lM6yA3VnvQWDWgAAAFE"]
[Fri Feb 06 06:07:51.497287 2026] [:error] [pid 34582:tid 34586] [client 188.212.135.55:51453] [client 188.212.135.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYUUt-DeJq1JGssYG6yQmwAAAQE"]
[Fri Feb 06 06:07:52.290046 2026] [:error] [pid 1664:tid 1722] [client 188.212.135.7:30493] [client 188.212.135.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYUUuO_0lM6yA3VnvQWDhgAAAFY"]
[Fri Feb 06 06:07:53.862038 2026] [proxy_fcgi:error] [pid 34582:tid 34592] [client 188.212.135.56:61239] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:54.271246 2026] [:error] [pid 34582:tid 34593] [client 188.212.135.56:61239] [client 188.212.135.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aYUUuuDeJq1JGssYG6yQ6wAAAQg"]
[Fri Feb 06 06:07:55.063430 2026] [:error] [pid 34582:tid 34595] [client 188.212.135.47:56685] [client 188.212.135.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aYUUu-DeJq1JGssYG6yRAQAAAQo"]
[Fri Feb 06 06:07:55.817177 2026] [:error] [pid 1665:tid 1750] [client 188.212.135.35:32175] [client 188.212.135.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYUUuzYZLE6gThXvZMqqPgAAAJc"]
[Fri Feb 06 06:07:57.426990 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 188.212.135.55:56545] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:58.201072 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 188.212.135.55:56545] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:07:59.786858 2026] [:error] [pid 34582:tid 34586] [client 188.212.135.55:56545] [client 188.212.135.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aYUUv-DeJq1JGssYG6yRdgAAAQE"]
[Fri Feb 06 06:08:01.986151 2026] [:error] [pid 1664:tid 1718] [client 188.212.135.36:61835] [client 188.212.135.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.36, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYUUwe_0lM6yA3VnvQWEkAAAAFI"]
[Fri Feb 06 06:08:02.355398 2026] [proxy_fcgi:error] [pid 1664:tid 1724] [client 188.212.135.36:61835] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:04.332935 2026] [proxy_fcgi:error] [pid 1664:tid 1716] [client 188.212.135.36:61835] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:04.693873 2026] [proxy_fcgi:error] [pid 1664:tid 1700] [client 188.212.135.36:61835] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:06.676815 2026] [:error] [pid 1664:tid 1710] [client 188.212.135.36:61835] [client 188.212.135.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYUUxu_0lM6yA3VnvQWFAQAAAEo"]
[Fri Feb 06 06:08:07.905744 2026] [proxy_fcgi:error] [pid 34582:tid 34597] [client 188.212.135.42:30151] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:08.327416 2026] [:error] [pid 34582:tid 34592] [client 188.212.135.42:30151] [client 188.212.135.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.42, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYUUyODeJq1JGssYG6ySjQAAAQc"]
[Fri Feb 06 06:08:09.082605 2026] [:error] [pid 34582:tid 34594] [client 188.212.135.42:30151] [client 188.212.135.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aYUUyeDeJq1JGssYG6ySqQAAAQk"]
[Fri Feb 06 06:08:11.473697 2026] [proxy_fcgi:error] [pid 1663:tid 1697] [client 188.212.135.42:51635] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:12.316235 2026] [proxy_fcgi:error] [pid 1663:tid 1674] [client 188.212.135.42:51635] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:13.071840 2026] [:error] [pid 1663:tid 1679] [client 188.212.135.42:51635] [client 188.212.135.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYUUzV9EQrJaKkABjK-usQAAAAY"]
[Fri Feb 06 06:08:13.784165 2026] [proxy_fcgi:error] [pid 1664:tid 1710] [client 188.212.135.55:49017] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:14.937722 2026] [proxy_fcgi:error] [pid 1664:tid 1706] [client 188.212.135.55:49017] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:15.698775 2026] [proxy_fcgi:error] [pid 1664:tid 1717] [client 188.212.135.55:49017] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:16.468768 2026] [proxy_fcgi:error] [pid 1664:tid 1717] [client 188.212.135.55:49017] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:16.836561 2026] [:error] [pid 1664:tid 1711] [client 188.212.135.55:49017] [client 188.212.135.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYUU0O_0lM6yA3VnvQWF7AAAAEs"]
[Fri Feb 06 06:08:17.575018 2026] [proxy_fcgi:error] [pid 1664:tid 1704] [client 188.212.135.24:44219] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:17.938880 2026] [proxy_fcgi:error] [pid 1664:tid 1712] [client 188.212.135.24:44219] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:18.318516 2026] [:error] [pid 1664:tid 1702] [client 188.212.135.24:44219] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYUU0u_0lM6yA3VnvQWGDQAAAEI"]
[Fri Feb 06 06:08:19.533901 2026] [proxy_fcgi:error] [pid 1664:tid 1708] [client 188.212.135.56:47705] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:20.676403 2026] [:error] [pid 1664:tid 1714] [client 188.212.135.56:47705] [client 188.212.135.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.56, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aYUU1O_0lM6yA3VnvQWGQgAAAE4"]
[Fri Feb 06 06:08:21.057942 2026] [:error] [pid 1664:tid 1720] [client 188.212.135.56:47705] [client 188.212.135.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYUU1e_0lM6yA3VnvQWGTAAAAFQ"]
[Fri Feb 06 06:08:25.803770 2026] [proxy_fcgi:error] [pid 1664:tid 1716] [client 188.212.135.46:35279] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:27.694821 2026] [proxy_fcgi:error] [pid 1664:tid 1713] [client 188.212.135.46:35279] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:28.468042 2026] [proxy_fcgi:error] [pid 1664:tid 1716] [client 188.212.135.46:35279] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:28.889619 2026] [:error] [pid 1664:tid 1708] [client 188.212.135.46:35279] [client 188.212.135.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYUU3O_0lM6yA3VnvQWHLwAAAEg"]
[Fri Feb 06 06:08:29.703121 2026] [proxy_fcgi:error] [pid 1665:tid 1744] [client 188.212.135.28:54437] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:30.957937 2026] [:error] [pid 1665:tid 1750] [client 188.212.135.28:54437] [client 188.212.135.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.28, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYUU3jYZLE6gThXvZMqtgwAAAJc"]
[Fri Feb 06 06:08:31.326695 2026] [proxy_fcgi:error] [pid 1665:tid 1749] [client 188.212.135.28:54437] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:32.059189 2026] [proxy_fcgi:error] [pid 1665:tid 1747] [client 188.212.135.28:54437] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:32.437138 2026] [proxy_fcgi:error] [pid 1665:tid 1749] [client 188.212.135.28:54437] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:32.843010 2026] [:error] [pid 1665:tid 1732] [client 188.212.135.28:54437] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aYUU4DYZLE6gThXvZMqtqQAAAIU"]
[Fri Feb 06 06:08:33.661280 2026] [proxy_fcgi:error] [pid 1773:tid 1798] [client 188.212.135.34:42131] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:34.038424 2026] [:error] [pid 1773:tid 1788] [client 188.212.135.34:42131] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aYUU4jYbySBHYmKOdJ_AyQAAAMU"]
[Fri Feb 06 06:08:35.248935 2026] [proxy_fcgi:error] [pid 1663:tid 1690] [client 188.212.135.39:48023] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:35.622589 2026] [:error] [pid 1663:tid 1683] [client 188.212.135.39:48023] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYUU419EQrJaKkABjK-wmwAAAAo"]
[Fri Feb 06 06:08:39.427433 2026] [proxy_fcgi:error] [pid 34582:tid 34609] [client 188.212.135.34:26875] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:39.864856 2026] [:error] [pid 34582:tid 34602] [client 188.212.135.34:26875] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYUU5-DeJq1JGssYG6yWDgAAARE"]
[Fri Feb 06 06:08:40.578967 2026] [:error] [pid 34582:tid 34607] [client 188.212.135.28:22909] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYUU6ODeJq1JGssYG6yWJwAAARY"]
[Fri Feb 06 06:08:41.368081 2026] [proxy_fcgi:error] [pid 1773:tid 1779] [client 188.212.135.57:58571] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:41.727329 2026] [proxy_fcgi:error] [pid 1773:tid 1784] [client 188.212.135.57:58571] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:43.214210 2026] [:error] [pid 1773:tid 1805] [client 188.212.135.57:58571] [client 188.212.135.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYUU6zYbySBHYmKOdJ_B9AAAANY"]
[Fri Feb 06 06:08:45.392416 2026] [:error] [pid 1665:tid 1732] [client 188.212.135.30:40373] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYUU7TYZLE6gThXvZMqu3gAAAIU"]
[Fri Feb 06 06:08:46.186238 2026] [proxy_fcgi:error] [pid 1665:tid 1727] [client 188.212.135.15:33801] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:47.289368 2026] [:error] [pid 1665:tid 1747] [client 188.212.135.15:33801] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aYUU7zYZLE6gThXvZMqvIQAAAJQ"]
[Fri Feb 06 06:08:48.107467 2026] [proxy_fcgi:error] [pid 1664:tid 1706] [client 188.212.135.43:50751] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:48.898028 2026] [proxy_fcgi:error] [pid 1664:tid 1722] [client 188.212.135.43:50751] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:49.289643 2026] [:error] [pid 1664:tid 1719] [client 188.212.135.43:50751] [client 188.212.135.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYUU8e_0lM6yA3VnvQWJDgAAAFM"]
[Fri Feb 06 06:08:50.013259 2026] [proxy_fcgi:error] [pid 34582:tid 34607] [client 188.212.135.6:60883] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:50.409015 2026] [:error] [pid 34582:tid 34596] [client 188.212.135.6:60883] [client 188.212.135.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/admin.php"] [unique_id "aYUU8uDeJq1JGssYG6yW9gAAAQs"]
[Fri Feb 06 06:08:51.555812 2026] [:error] [pid 1663:tid 1687] [client 188.212.135.55:44833] [client 188.212.135.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aYUU819EQrJaKkABjK-yGQAAAA4"]
[Fri Feb 06 06:08:52.332760 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 188.212.135.13:49437] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:53.475842 2026] [:error] [pid 34582:tid 34586] [client 188.212.135.13:49437] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYUU9eDeJq1JGssYG6yXPgAAAQE"]
[Fri Feb 06 06:08:54.688827 2026] [proxy_fcgi:error] [pid 1665:tid 1728] [client 188.212.135.60:44173] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:55.467759 2026] [proxy_fcgi:error] [pid 1665:tid 1746] [client 188.212.135.60:44173] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:55.816706 2026] [proxy_fcgi:error] [pid 1665:tid 1728] [client 188.212.135.60:44173] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:56.620530 2026] [proxy_fcgi:error] [pid 1665:tid 1727] [client 188.212.135.60:44173] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:08:56.979977 2026] [:error] [pid 1665:tid 1746] [client 188.212.135.60:44173] [client 188.212.135.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYUU-DYZLE6gThXvZMqwOwAAAJM"]
[Fri Feb 06 06:08:57.764787 2026] [:error] [pid 1665:tid 1743] [client 188.212.135.13:37827] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aYUU-TYZLE6gThXvZMqwSgAAAJA"]
[Fri Feb 06 06:08:58.524156 2026] [:error] [pid 1773:tid 1783] [client 188.212.135.18:61503] [client 188.212.135.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYUU-jYbySBHYmKOdJ_DnwAAAMI"]
[Fri Feb 06 06:08:59.247919 2026] [:error] [pid 1664:tid 1709] [client 188.212.135.29:25985] [client 188.212.135.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYUU--_0lM6yA3VnvQWKCAAAAEk"]
[Fri Feb 06 06:09:00.049627 2026] [proxy_fcgi:error] [pid 1665:tid 1734] [client 188.212.135.41:35389] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:00.423710 2026] [:error] [pid 1665:tid 1738] [client 188.212.135.41:35389] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYUU_DYZLE6gThXvZMqwfAAAAIs"]
[Fri Feb 06 06:09:01.257401 2026] [:error] [pid 1665:tid 1740] [client 188.212.135.17:30155] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYUU_TYZLE6gThXvZMqwjQAAAI0"]
[Fri Feb 06 06:09:02.491124 2026] [proxy_fcgi:error] [pid 1664:tid 1701] [client 188.212.135.32:34089] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:03.269792 2026] [:error] [pid 1664:tid 1707] [client 188.212.135.32:34089] [client 188.212.135.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aYUU_-_0lM6yA3VnvQWKTgAAAEc"]
[Fri Feb 06 06:09:04.162468 2026] [:error] [pid 1664:tid 1701] [client 188.212.135.24:33623] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYUVAO_0lM6yA3VnvQWKWQAAAEE"]
[Fri Feb 06 06:09:04.912651 2026] [:error] [pid 1773:tid 1804] [client 188.212.135.40:28583] [client 188.212.135.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYUVADYbySBHYmKOdJ_EOwAAANU"]
[Fri Feb 06 06:09:05.657982 2026] [:error] [pid 1664:tid 1716] [client 188.212.135.39:31057] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYUVAe_0lM6yA3VnvQWKdAAAAFA"]
[Fri Feb 06 06:09:06.817511 2026] [:error] [pid 1773:tid 1804] [client 188.212.135.19:28773] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYUVAjYbySBHYmKOdJ_EcgAAANU"]
[Fri Feb 06 06:09:08.466175 2026] [:error] [pid 1665:tid 1731] [client 188.212.135.6:20293] [client 188.212.135.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYUVBDYZLE6gThXvZMqxLQAAAIQ"]
[Fri Feb 06 06:09:09.179882 2026] [proxy_fcgi:error] [pid 1665:tid 1730] [client 188.212.135.45:34829] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:10.268226 2026] [proxy_fcgi:error] [pid 1665:tid 1745] [client 188.212.135.45:34829] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:10.627006 2026] [:error] [pid 1665:tid 1734] [client 188.212.135.45:34829] [client 188.212.135.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYUVBjYZLE6gThXvZMqxaAAAAIc"]
[Fri Feb 06 06:09:11.821483 2026] [proxy_fcgi:error] [pid 1664:tid 1709] [client 188.212.135.63:36351] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:12.208195 2026] [proxy_fcgi:error] [pid 1664:tid 1704] [client 188.212.135.63:36351] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:13.928493 2026] [proxy_fcgi:error] [pid 1664:tid 1703] [client 188.212.135.63:36351] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:14.276904 2026] [:error] [pid 1664:tid 1704] [client 188.212.135.63:36351] [client 188.212.135.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aYUVCu_0lM6yA3VnvQWLFAAAAEQ"]
[Fri Feb 06 06:09:15.035215 2026] [proxy_fcgi:error] [pid 1663:tid 1697] [client 188.212.135.32:26209] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:16.150223 2026] [:error] [pid 1663:tid 1678] [client 188.212.135.32:26209] [client 188.212.135.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYUVDF9EQrJaKkABjK-0jgAAAAU"]
[Fri Feb 06 06:09:16.907908 2026] [:error] [pid 34582:tid 34606] [client 188.212.135.45:56815] [client 188.212.135.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYUVDODeJq1JGssYG6yZ1QAAARU"]
[Fri Feb 06 06:09:19.167964 2026] [:error] [pid 1664:tid 1711] [client 188.212.135.45:32515] [client 188.212.135.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYUVD-_0lM6yA3VnvQWLkQAAAEs"]
[Fri Feb 06 06:09:20.825720 2026] [proxy_fcgi:error] [pid 34582:tid 34593] [client 188.212.135.38:24697] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:21.214078 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 188.212.135.38:24697] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:21.582235 2026] [proxy_fcgi:error] [pid 34582:tid 34604] [client 188.212.135.38:24697] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:21.954170 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 188.212.135.38:24697] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:24.250806 2026] [:error] [pid 34582:tid 34598] [client 188.212.135.38:24697] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYUVFODeJq1JGssYG6yatwAAAQ0"]
[Fri Feb 06 06:09:25.026650 2026] [:error] [pid 34582:tid 34604] [client 188.212.135.39:35333] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYUVFeDeJq1JGssYG6yazQAAARM"]
[Fri Feb 06 06:09:25.718742 2026] [:error] [pid 34582:tid 34595] [client 188.212.135.20:21729] [client 188.212.135.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYUVFeDeJq1JGssYG6ya6wAAAQo"]
[Fri Feb 06 06:09:26.426869 2026] [:error] [pid 1665:tid 1743] [client 188.212.135.22:34121] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYUVFjYZLE6gThXvZMqy4wAAAJA"]
[Fri Feb 06 06:09:27.125837 2026] [:error] [pid 1773:tid 1787] [client 188.212.135.13:64349] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYUVFzYbySBHYmKOdJ_GnQAAAMQ"]
[Fri Feb 06 06:09:27.911934 2026] [:error] [pid 1773:tid 1791] [client 188.212.135.47:62081] [client 188.212.135.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYUVFzYbySBHYmKOdJ_GrAAAAMg"]
[Fri Feb 06 06:09:29.147156 2026] [:error] [pid 1665:tid 1731] [client 188.212.135.13:59269] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYUVGTYZLE6gThXvZMqzEgAAAIQ"]
[Fri Feb 06 06:09:29.935608 2026] [:error] [pid 1773:tid 1795] [client 188.212.135.44:56009] [client 188.212.135.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYUVGTYbySBHYmKOdJ_G0gAAAMw"]
[Fri Feb 06 06:09:30.672564 2026] [:error] [pid 1664:tid 1704] [client 188.212.135.39:34135] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYUVGu_0lM6yA3VnvQWMngAAAEQ"]
[Fri Feb 06 06:09:31.358442 2026] [:error] [pid 1665:tid 1749] [client 188.212.135.63:47967] [client 188.212.135.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYUVGzYZLE6gThXvZMqzNAAAAJY"]
[Fri Feb 06 06:09:32.833873 2026] [:error] [pid 1663:tid 1691] [client 188.212.135.60:50401] [client 188.212.135.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYUVHF9EQrJaKkABjK-1lgAAABI"]
[Fri Feb 06 06:09:34.110985 2026] [:error] [pid 1773:tid 1803] [client 188.212.135.24:42919] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYUVHjYbySBHYmKOdJ_HNwAAANQ"]
[Fri Feb 06 06:09:37.016318 2026] [proxy_fcgi:error] [pid 1664:tid 1708] [client 188.212.135.28:24993] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:37.749356 2026] [:error] [pid 1664:tid 1723] [client 188.212.135.28:24993] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aYUVIe_0lM6yA3VnvQWNOAAAAFc"]
[Fri Feb 06 06:09:39.204860 2026] [:error] [pid 1773:tid 1803] [client 188.212.135.23:60243] [client 188.212.135.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYUVIzYbySBHYmKOdJ_HswAAANQ"]
[Fri Feb 06 06:09:39.929961 2026] [proxy_fcgi:error] [pid 1773:tid 1806] [client 188.212.135.59:21479] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:40.970932 2026] [proxy_fcgi:error] [pid 1773:tid 1787] [client 188.212.135.59:21479] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:41.649230 2026] [:error] [pid 1773:tid 1802] [client 188.212.135.59:21479] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aYUVJTYbySBHYmKOdJ_H5gAAANM"]
[Fri Feb 06 06:09:42.874214 2026] [proxy_fcgi:error] [pid 1663:tid 1691] [client 188.212.135.19:22981] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:43.255805 2026] [proxy_fcgi:error] [pid 1663:tid 1689] [client 188.212.135.19:22981] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:43.657465 2026] [proxy_fcgi:error] [pid 1663:tid 1680] [client 188.212.135.19:22981] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:44.005635 2026] [:error] [pid 1663:tid 1689] [client 188.212.135.19:22981] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYUVKF9EQrJaKkABjK-2NQAAABA"]
[Fri Feb 06 06:09:44.739956 2026] [proxy_fcgi:error] [pid 1664:tid 1708] [client 188.212.135.57:42241] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:45.142451 2026] [:error] [pid 1664:tid 1722] [client 188.212.135.57:42241] [client 188.212.135.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aYUVKe_0lM6yA3VnvQWN0wAAAFY"]
[Fri Feb 06 06:09:46.777667 2026] [proxy_fcgi:error] [pid 1663:tid 1685] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:47.188580 2026] [proxy_fcgi:error] [pid 1663:tid 1680] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:47.548691 2026] [proxy_fcgi:error] [pid 1663:tid 1674] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:48.312140 2026] [proxy_fcgi:error] [pid 1663:tid 1692] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:49.472982 2026] [proxy_fcgi:error] [pid 1663:tid 1693] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:49.863239 2026] [proxy_fcgi:error] [pid 1663:tid 1686] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:50.264903 2026] [proxy_fcgi:error] [pid 1663:tid 1692] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:50.694331 2026] [proxy_fcgi:error] [pid 1663:tid 1693] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:51.860732 2026] [proxy_fcgi:error] [pid 1663:tid 1687] [client 188.212.135.40:46681] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:52.221050 2026] [:error] [pid 1663:tid 1692] [client 188.212.135.40:46681] [client 188.212.135.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aYUVMF9EQrJaKkABjK-2twAAABM"]
[Fri Feb 06 06:09:52.957685 2026] [:error] [pid 1664:tid 1722] [client 188.212.135.50:24929] [client 188.212.135.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYUVMO_0lM6yA3VnvQWOswAAAFY"]
[Fri Feb 06 06:09:53.715140 2026] [:error] [pid 1663:tid 1678] [client 188.212.135.28:61531] [client 188.212.135.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.28, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYUVMV9EQrJaKkABjK-20AAAAAU"]
[Fri Feb 06 06:09:53.720940 2026] [proxy_fcgi:error] [pid 1663:tid 1678] [client 188.212.135.28:61531] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:54.070183 2026] [proxy_fcgi:error] [pid 1663:tid 1680] [client 188.212.135.28:61531] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:54.492603 2026] [:error] [pid 1663:tid 1684] [client 188.212.135.28:61531] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aYUVMl9EQrJaKkABjK-22QAAAAs"]
[Fri Feb 06 06:09:55.703691 2026] [proxy_fcgi:error] [pid 1663:tid 1687] [client 188.212.135.34:34213] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:09:56.132489 2026] [:error] [pid 1663:tid 1684] [client 188.212.135.34:34213] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYUVNF9EQrJaKkABjK-27AAAAAs"]
[Fri Feb 06 06:09:56.931868 2026] [:error] [pid 1773:tid 1807] [client 188.212.135.36:20459] [client 188.212.135.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aYUVNDYbySBHYmKOdJ_JBQAAANg"]
[Fri Feb 06 06:09:59.296336 2026] [:error] [pid 1665:tid 1742] [client 188.212.135.9:31549] [client 188.212.135.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYUVNzYZLE6gThXvZMq1uwAAAI8"]
[Fri Feb 06 06:10:00.071254 2026] [:error] [pid 34582:tid 34601] [client 188.212.135.32:48091] [client 188.212.135.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aYUVOODeJq1JGssYG6yf3wAAARA"]
[Fri Feb 06 06:10:02.040404 2026] [proxy_fcgi:error] [pid 1663:tid 1688] [client 188.212.135.59:41345] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:02.834765 2026] [:error] [pid 1663:tid 1678] [client 188.212.135.59:41345] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aYUVOl9EQrJaKkABjK-3UAAAAAU"]
[Fri Feb 06 06:10:04.365721 2026] [proxy_fcgi:error] [pid 1665:tid 1738] [client 188.212.135.32:41727] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:05.164793 2026] [:error] [pid 1665:tid 1748] [client 188.212.135.32:41727] [client 188.212.135.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "aYUVPTYZLE6gThXvZMq2hAAAAJU"]
[Fri Feb 06 06:10:05.923515 2026] [:error] [pid 34582:tid 34607] [client 188.212.135.41:56461] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugins.php"] [unique_id "aYUVPeDeJq1JGssYG6ygqgAAARY"]
[Fri Feb 06 06:10:07.006233 2026] [proxy_fcgi:error] [pid 34582:tid 34600] [client 188.212.135.21:35487] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:07.401884 2026] [:error] [pid 34582:tid 34596] [client 188.212.135.21:35487] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aYUVP-DeJq1JGssYG6yg3gAAAQs"]
[Fri Feb 06 06:10:08.197293 2026] [:error] [pid 1773:tid 1783] [client 188.212.135.13:35211] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYUVQDYbySBHYmKOdJ_JowAAAMI"]
[Fri Feb 06 06:10:09.831725 2026] [proxy_fcgi:error] [pid 1773:tid 1795] [client 188.212.135.14:23857] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:10.204394 2026] [proxy_fcgi:error] [pid 1773:tid 1805] [client 188.212.135.14:23857] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:10.910249 2026] [proxy_fcgi:error] [pid 1773:tid 1787] [client 188.212.135.14:23857] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:11.676923 2026] [:error] [pid 1773:tid 1792] [client 188.212.135.14:23857] [client 188.212.135.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aYUVQzYbySBHYmKOdJ_J2QAAAMk"]
[Fri Feb 06 06:10:12.400132 2026] [:error] [pid 1663:tid 1697] [client 188.212.135.15:28917] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aYUVRF9EQrJaKkABjK-3_gAAABg"]
[Fri Feb 06 06:10:13.283320 2026] [proxy_fcgi:error] [pid 1773:tid 1800] [client 188.212.135.39:55311] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:13.673941 2026] [proxy_fcgi:error] [pid 1773:tid 1801] [client 188.212.135.39:55311] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:14.441786 2026] [proxy_fcgi:error] [pid 1773:tid 1798] [client 188.212.135.39:55311] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:16.613564 2026] [:error] [pid 1773:tid 1803] [client 188.212.135.39:55311] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "aYUVSDYbySBHYmKOdJ_KPAAAANQ"]
[Fri Feb 06 06:10:17.475278 2026] [:error] [pid 1664:tid 1700] [client 188.212.135.12:54627] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYUVSe_0lM6yA3VnvQWQiwAAAEA"]
[Fri Feb 06 06:10:18.230096 2026] [:error] [pid 1773:tid 1790] [client 188.212.135.33:26355] [client 188.212.135.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYUVSjYbySBHYmKOdJ_KSwAAAMc"]
[Fri Feb 06 06:10:20.510652 2026] [proxy_fcgi:error] [pid 1664:tid 1721] [client 188.212.135.29:38269] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:20.859680 2026] [:error] [pid 1664:tid 1702] [client 188.212.135.29:38269] [client 188.212.135.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aYUVTO_0lM6yA3VnvQWQ4AAAAEI"]
[Fri Feb 06 06:10:22.007731 2026] [:error] [pid 1664:tid 1712] [client 188.212.135.26:64297] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYUVTu_0lM6yA3VnvQWRAQAAAEw"]
[Fri Feb 06 06:10:22.753480 2026] [proxy_fcgi:error] [pid 34582:tid 34609] [client 188.212.135.21:33809] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:23.167297 2026] [proxy_fcgi:error] [pid 34582:tid 34597] [client 188.212.135.21:33809] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:23.924064 2026] [proxy_fcgi:error] [pid 34582:tid 34603] [client 188.212.135.21:33809] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:25.556830 2026] [:error] [pid 34582:tid 34604] [client 188.212.135.21:33809] [client 188.212.135.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/js/wp-login.php"] [unique_id "aYUVUeDeJq1JGssYG6yi3AAAARM"]
[Fri Feb 06 06:10:26.367238 2026] [:error] [pid 34582:tid 34599] [client 188.212.135.21:33809] File does not exist: /home/measureyourbrand/public_html/measureyourbrand.com/worm.PhP
[Fri Feb 06 06:10:26.748111 2026] [proxy_fcgi:error] [pid 34582:tid 34595] [client 188.212.135.21:33809] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:27.114902 2026] [proxy_fcgi:error] [pid 34582:tid 34603] [client 188.212.135.21:33809] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:28.199842 2026] [:error] [pid 34582:tid 34605] [client 188.212.135.21:33809] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aYUVVODeJq1JGssYG6yjKAAAARQ"]
[Fri Feb 06 06:10:28.991786 2026] [:error] [pid 34582:tid 34604] [client 188.212.135.17:42243] [client 188.212.135.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.17, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aYUVVODeJq1JGssYG6yjNgAAARM"]
[Fri Feb 06 06:10:30.192379 2026] [proxy_fcgi:error] [pid 34582:tid 34609] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:30.570909 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:31.368987 2026] [proxy_fcgi:error] [pid 34582:tid 34595] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:32.181097 2026] [proxy_fcgi:error] [pid 34582:tid 34609] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:33.317912 2026] [proxy_fcgi:error] [pid 34582:tid 34585] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:37.735040 2026] [proxy_fcgi:error] [pid 34582:tid 34599] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:38.208066 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:40.158504 2026] [proxy_fcgi:error] [pid 34582:tid 34596] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:40.564521 2026] [proxy_fcgi:error] [pid 34582:tid 34597] [client 188.212.135.17:42243] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:40.948314 2026] [:error] [pid 34582:tid 34601] [client 188.212.135.17:42243] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aYUVYODeJq1JGssYG6ykggAAARA"]
[Fri Feb 06 06:10:42.085680 2026] [proxy_fcgi:error] [pid 1665:tid 1727] [client 188.212.135.38:60533] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:42.494650 2026] [proxy_fcgi:error] [pid 1665:tid 1747] [client 188.212.135.38:60533] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:42.837331 2026] [:error] [pid 1665:tid 1734] [client 188.212.135.38:60533] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYUVYjYZLE6gThXvZMq6nQAAAIc"]
[Fri Feb 06 06:10:44.039969 2026] [proxy_fcgi:error] [pid 1664:tid 1706] [client 188.212.135.47:45835] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:44.392360 2026] [:error] [pid 1664:tid 1718] [client 188.212.135.47:45835] [client 188.212.135.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aYUVZO_0lM6yA3VnvQWSxwAAAFI"]
[Fri Feb 06 06:10:46.011001 2026] [proxy_fcgi:error] [pid 1663:tid 1689] [client 188.212.135.22:36131] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:47.137271 2026] [proxy_fcgi:error] [pid 1663:tid 1674] [client 188.212.135.22:36131] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:47.919624 2026] [proxy_fcgi:error] [pid 1663:tid 1675] [client 188.212.135.22:36131] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:48.305486 2026] [proxy_fcgi:error] [pid 1663:tid 1680] [client 188.212.135.22:36131] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:49.626183 2026] [:error] [pid 1663:tid 1685] [client 188.212.135.22:36131] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYUVaV9EQrJaKkABjK-7nQAAAAw"]
[Fri Feb 06 06:10:50.421086 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 188.212.135.43:58525] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:50.855878 2026] [proxy_fcgi:error] [pid 34582:tid 34607] [client 188.212.135.43:58525] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:51.287720 2026] [:error] [pid 34582:tid 34595] [client 188.212.135.43:58525] [client 188.212.135.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYUVa-DeJq1JGssYG6ylkQAAAQo"]
[Fri Feb 06 06:10:52.500656 2026] [:error] [pid 1663:tid 1682] [client 188.212.135.19:49685] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aYUVbF9EQrJaKkABjK-73QAAAAk"]
[Fri Feb 06 06:10:53.648145 2026] [proxy_fcgi:error] [pid 34582:tid 34605] [client 188.212.135.12:64457] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:54.839048 2026] [proxy_fcgi:error] [pid 34582:tid 34602] [client 188.212.135.12:64457] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:55.237809 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 188.212.135.12:64457] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:10:55.656413 2026] [:error] [pid 34582:tid 34600] [client 188.212.135.12:64457] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aYUVb-DeJq1JGssYG6yl-gAAAQ8"]
[Fri Feb 06 06:10:56.498035 2026] [:error] [pid 34582:tid 34588] [client 188.212.135.51:61049] [client 188.212.135.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aYUVcODeJq1JGssYG6ymCQAAAQM"]
[Fri Feb 06 06:10:59.257304 2026] [proxy_fcgi:error] [pid 1773:tid 1802] [client 188.212.135.38:60375] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:00.079752 2026] [:error] [pid 1773:tid 1799] [client 188.212.135.38:60375] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aYUVdDYbySBHYmKOdJ_OIAAAANA"]
[Fri Feb 06 06:11:03.905707 2026] [:error] [pid 1773:tid 1790] [client 188.212.135.38:42315] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aYUVdzYbySBHYmKOdJ_ObgAAAMc"]
[Fri Feb 06 06:11:05.086637 2026] [proxy_fcgi:error] [pid 1663:tid 1693] [client 188.212.135.30:23949] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:05.508850 2026] [proxy_fcgi:error] [pid 1663:tid 1684] [client 188.212.135.30:23949] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:05.916045 2026] [:error] [pid 1663:tid 1675] [client 188.212.135.30:23949] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aYUVeV9EQrJaKkABjK-87AAAAAI"]
[Fri Feb 06 06:11:07.069625 2026] [proxy_fcgi:error] [pid 1664:tid 1719] [client 188.212.135.46:44313] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:07.477564 2026] [proxy_fcgi:error] [pid 1664:tid 1711] [client 188.212.135.46:44313] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:08.277922 2026] [proxy_fcgi:error] [pid 1664:tid 1714] [client 188.212.135.46:44313] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:09.719368 2026] [:error] [pid 1664:tid 1705] [client 188.212.135.46:44313] [client 188.212.135.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aYUVfe_0lM6yA3VnvQWUxgAAAEU"]
[Fri Feb 06 06:11:10.581262 2026] [proxy_fcgi:error] [pid 1663:tid 1680] [client 188.212.135.17:56573] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:11.744668 2026] [:error] [pid 1663:tid 1675] [client 188.212.135.17:56573] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYUVf19EQrJaKkABjK-9fAAAAAI"]
[Fri Feb 06 06:11:12.836699 2026] [proxy_fcgi:error] [pid 1664:tid 1724] [client 188.212.135.50:32771] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:13.925485 2026] [proxy_fcgi:error] [pid 1664:tid 1715] [client 188.212.135.50:32771] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:14.306920 2026] [proxy_fcgi:error] [pid 1664:tid 1703] [client 188.212.135.50:32771] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:15.047379 2026] [:error] [pid 1664:tid 1703] [client 188.212.135.50:32771] [client 188.212.135.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.50, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aYUVg-_0lM6yA3VnvQWVSAAAAEM"]
[Fri Feb 06 06:11:15.787699 2026] [proxy_fcgi:error] [pid 1664:tid 1702] [client 188.212.135.50:32771] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:16.918360 2026] [:error] [pid 1664:tid 1723] [client 188.212.135.50:32771] [client 188.212.135.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aYUVhO_0lM6yA3VnvQWVdgAAAFc"]
[Fri Feb 06 06:11:17.730296 2026] [:error] [pid 34582:tid 34591] [client 188.212.135.36:64561] [client 188.212.135.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/small.php"] [unique_id "aYUVheDeJq1JGssYG6yoeAAAAQY"]
[Fri Feb 06 06:11:18.562823 2026] [proxy_fcgi:error] [pid 1665:tid 1748] [client 188.212.135.38:41297] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:18.989163 2026] [:error] [pid 1665:tid 1733] [client 188.212.135.38:41297] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aYUVhjYZLE6gThXvZMq9lAAAAIY"]
[Fri Feb 06 06:11:19.723466 2026] [proxy_fcgi:error] [pid 1664:tid 1715] [client 188.212.135.52:61139] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:20.431644 2026] [proxy_fcgi:error] [pid 1664:tid 1700] [client 188.212.135.52:61139] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:23.378800 2026] [:error] [pid 1664:tid 1701] [client 188.212.135.52:61139] [client 188.212.135.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aYUVi-_0lM6yA3VnvQWV6QAAAEE"]
[Fri Feb 06 06:11:24.504787 2026] [proxy_fcgi:error] [pid 34582:tid 34603] [client 188.212.135.28:40207] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:24.884537 2026] [proxy_fcgi:error] [pid 34582:tid 34592] [client 188.212.135.28:40207] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:25.588615 2026] [:error] [pid 34582:tid 34607] [client 188.212.135.28:40207] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aYUVjeDeJq1JGssYG6ypiAAAARY"]
[Fri Feb 06 06:11:27.871036 2026] [:error] [pid 1664:tid 1700] [client 188.212.135.27:64579] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYUVj-_0lM6yA3VnvQWWPQAAAEA"]
[Fri Feb 06 06:11:28.609946 2026] [proxy_fcgi:error] [pid 1773:tid 1797] [client 188.212.135.6:59001] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:28.976653 2026] [proxy_fcgi:error] [pid 1773:tid 1778] [client 188.212.135.6:59001] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:29.700061 2026] [:error] [pid 1773:tid 1806] [client 188.212.135.6:59001] [client 188.212.135.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aYUVkTYbySBHYmKOdJ_QegAAANc"]
[Fri Feb 06 06:11:30.427856 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 188.212.135.45:56621] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:31.300315 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 188.212.135.45:56621] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:31.676512 2026] [:error] [pid 34582:tid 34600] [client 188.212.135.45:56621] [client 188.212.135.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aYUVk-DeJq1JGssYG6yqIAAAAQ8"]
[Fri Feb 06 06:11:32.798769 2026] [:error] [pid 34582:tid 34590] [client 188.212.135.5:54963] [client 188.212.135.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/db.php"] [unique_id "aYUVlODeJq1JGssYG6yqOQAAAQU"]
[Fri Feb 06 06:11:33.483824 2026] [:error] [pid 1665:tid 1744] [client 188.212.135.49:20793] [client 188.212.135.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aYUVlTYZLE6gThXvZMq-sAAAAJE"]
[Fri Feb 06 06:11:34.197936 2026] [:error] [pid 1773:tid 1783] [client 188.212.135.18:28665] [client 188.212.135.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aYUVljYbySBHYmKOdJ_Q8QAAAMI"]
[Fri Feb 06 06:11:34.947563 2026] [:error] [pid 34582:tid 34591] [client 188.212.135.36:39917] [client 188.212.135.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aYUVluDeJq1JGssYG6yqgAAAAQY"]
[Fri Feb 06 06:11:35.728433 2026] [:error] [pid 1663:tid 1691] [client 188.212.135.7:45695] [client 188.212.135.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aYUVl19EQrJaKkABjK_AZQAAABI"]
[Fri Feb 06 06:11:36.563359 2026] [:error] [pid 1663:tid 1678] [client 188.212.135.52:23629] [client 188.212.135.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aYUVmF9EQrJaKkABjK_AeAAAAAU"]
[Fri Feb 06 06:11:38.068827 2026] [:error] [pid 34582:tid 34590] [client 188.212.135.14:24457] [client 188.212.135.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aYUVmuDeJq1JGssYG6yqzwAAAQU"]
[Fri Feb 06 06:11:38.861980 2026] [:error] [pid 1773:tid 1806] [client 188.212.135.59:57951] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aYUVmjYbySBHYmKOdJ_RYAAAANc"]
[Fri Feb 06 06:11:39.624434 2026] [:error] [pid 1664:tid 1709] [client 188.212.135.22:55969] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aYUVm-_0lM6yA3VnvQWXEAAAAEk"]
[Fri Feb 06 06:11:41.127636 2026] [:error] [pid 1665:tid 1746] [client 188.212.135.50:63513] [client 188.212.135.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aYUVnTYZLE6gThXvZMq_tAAAAJM"]
[Fri Feb 06 06:11:42.632671 2026] [:error] [pid 1664:tid 1719] [client 188.212.135.57:42555] [client 188.212.135.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aYUVnu_0lM6yA3VnvQWXTAAAAFM"]
[Fri Feb 06 06:11:43.335636 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 188.212.135.15:64849] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:44.978623 2026] [:error] [pid 34582:tid 34599] [client 188.212.135.15:64849] [client 188.212.135.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.15, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYUVoODeJq1JGssYG6yrtwAAAQ4"]
[Fri Feb 06 06:11:46.970403 2026] [proxy_fcgi:error] [pid 34582:tid 34608] [client 188.212.135.15:64849] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:47.410400 2026] [:error] [pid 34582:tid 34586] [client 188.212.135.15:64849] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aYUVo-DeJq1JGssYG6ysCQAAAQE"]
[Fri Feb 06 06:11:48.221638 2026] [:error] [pid 1773:tid 1795] [client 188.212.135.33:56917] [client 188.212.135.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aYUVpDYbySBHYmKOdJ_SQAAAAMw"]
[Fri Feb 06 06:11:50.126446 2026] [proxy_fcgi:error] [pid 34582:tid 34601] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:50.569666 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:52.359811 2026] [proxy_fcgi:error] [pid 34582:tid 34590] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:52.734300 2026] [proxy_fcgi:error] [pid 34582:tid 34596] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:54.260056 2026] [proxy_fcgi:error] [pid 34582:tid 34608] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:54.701462 2026] [proxy_fcgi:error] [pid 34582:tid 34609] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:55.112709 2026] [proxy_fcgi:error] [pid 34582:tid 34591] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:55.534220 2026] [proxy_fcgi:error] [pid 34582:tid 34595] [client 188.212.135.22:59803] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:11:55.959428 2026] [:error] [pid 34582:tid 34587] [client 188.212.135.22:59803] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYUVq-DeJq1JGssYG6ytKQAAAQI"]
[Fri Feb 06 06:11:56.759430 2026] [:error] [pid 34582:tid 34598] [client 188.212.135.54:50013] [client 188.212.135.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aYUVrODeJq1JGssYG6ytPwAAAQ0"]
[Fri Feb 06 06:11:57.543945 2026] [:error] [pid 1665:tid 1729] [client 188.212.135.12:41899] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aYUVrTYZLE6gThXvZMrBHAAAAII"]
[Fri Feb 06 06:11:59.719637 2026] [proxy_fcgi:error] [pid 1665:tid 1744] [client 188.212.135.39:31895] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:00.131914 2026] [proxy_fcgi:error] [pid 1665:tid 1743] [client 188.212.135.39:31895] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:01.022186 2026] [proxy_fcgi:error] [pid 1665:tid 1750] [client 188.212.135.39:31895] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:01.848092 2026] [:error] [pid 1665:tid 1740] [client 188.212.135.39:31895] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aYUVsTYZLE6gThXvZMrBawAAAI0"]
[Fri Feb 06 06:12:02.548343 2026] [:error] [pid 34582:tid 34604] [client 188.212.135.54:32125] [client 188.212.135.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aYUVsuDeJq1JGssYG6ytsgAAARM"]
[Fri Feb 06 06:12:03.266699 2026] [:error] [pid 1663:tid 1679] [client 188.212.135.7:36611] [client 188.212.135.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aYUVs19EQrJaKkABjK_DUAAAAAY"]
[Fri Feb 06 06:12:06.087307 2026] [:error] [pid 1773:tid 1788] [client 188.212.135.54:64725] [client 188.212.135.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aYUVtjYbySBHYmKOdJ_TgwAAAMU"]
[Fri Feb 06 06:12:07.659283 2026] [:error] [pid 34582:tid 34603] [client 188.212.135.42:47113] [client 188.212.135.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aYUVt-DeJq1JGssYG6yuEwAAARI"]
[Fri Feb 06 06:12:09.227179 2026] [:error] [pid 34582:tid 34604] [client 188.212.135.17:43713] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aYUVueDeJq1JGssYG6yuSAAAARM"]
[Fri Feb 06 06:12:10.705036 2026] [proxy_fcgi:error] [pid 1773:tid 1803] [client 188.212.135.22:22033] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:14.330041 2026] [:error] [pid 1773:tid 1794] [client 188.212.135.22:22033] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aYUVvjYbySBHYmKOdJ_UQQAAAMs"]
[Fri Feb 06 06:12:15.108114 2026] [proxy_fcgi:error] [pid 34582:tid 34608] [client 188.212.135.21:29033] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:15.906668 2026] [:error] [pid 34582:tid 34599] [client 188.212.135.21:29033] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "aYUVv-DeJq1JGssYG6yvDAAAAQ4"]
[Fri Feb 06 06:12:17.442044 2026] [proxy_fcgi:error] [pid 1665:tid 1741] [client 188.212.135.24:62211] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:18.576949 2026] [proxy_fcgi:error] [pid 1665:tid 1749] [client 188.212.135.24:62211] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:19.004082 2026] [:error] [pid 1665:tid 1747] [client 188.212.135.24:62211] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aYUVwzYZLE6gThXvZMrDBQAAAJQ"]
[Fri Feb 06 06:12:20.598780 2026] [:error] [pid 1664:tid 1702] [client 188.212.135.9:53657] [client 188.212.135.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aYUVxO_0lM6yA3VnvQWaagAAAEI"]
[Fri Feb 06 06:12:21.684733 2026] [proxy_fcgi:error] [pid 1663:tid 1693] [client 188.212.135.51:51019] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:22.819475 2026] [:error] [pid 1663:tid 1681] [client 188.212.135.51:51019] [client 188.212.135.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aYUVxl9EQrJaKkABjK_FUAAAAAg"]
[Fri Feb 06 06:12:25.396688 2026] [:error] [pid 1773:tid 1801] [client 188.212.135.21:51473] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aYUVyTYbySBHYmKOdJ_VMgAAANI"]
[Fri Feb 06 06:12:26.489745 2026] [proxy_fcgi:error] [pid 1773:tid 1791] [client 188.212.135.53:64471] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:26.870810 2026] [:error] [pid 1773:tid 1797] [client 188.212.135.53:64471] [client 188.212.135.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aYUVyjYbySBHYmKOdJ_VWwAAAM4"]
[Fri Feb 06 06:12:28.027947 2026] [:error] [pid 34582:tid 34586] [client 188.212.135.19:37019] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aYUVzODeJq1JGssYG6ywDwAAAQE"]
[Fri Feb 06 06:12:33.613709 2026] [:error] [pid 1773:tid 1805] [client 188.212.135.30:26861] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aYUV0TYbySBHYmKOdJ_WEAAAANY"]
[Fri Feb 06 06:12:34.344663 2026] [proxy_fcgi:error] [pid 34582:tid 34589] [client 188.212.135.14:59993] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:35.925068 2026] [proxy_fcgi:error] [pid 34582:tid 34598] [client 188.212.135.14:59993] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:36.296099 2026] [:error] [pid 34582:tid 34607] [client 188.212.135.14:59993] [client 188.212.135.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aYUV1ODeJq1JGssYG6yw-wAAARY"]
[Fri Feb 06 06:12:38.027750 2026] [proxy_fcgi:error] [pid 1665:tid 1742] [client 188.212.135.53:49971] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:38.857164 2026] [:error] [pid 1665:tid 1741] [client 188.212.135.53:49971] [client 188.212.135.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYUV1jYZLE6gThXvZMrEsAAAAI4"]
[Fri Feb 06 06:12:39.665003 2026] [:error] [pid 1664:tid 1716] [client 188.212.135.34:63199] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aYUV1-_0lM6yA3VnvQWcGgAAAFA"]
[Fri Feb 06 06:12:41.172405 2026] [:error] [pid 1665:tid 1743] [client 188.212.135.23:58657] [client 188.212.135.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aYUV2TYZLE6gThXvZMrE3gAAAJA"]
[Fri Feb 06 06:12:45.387122 2026] [:error] [pid 1773:tid 1806] [client 188.212.135.17:39503] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/install.php"] [unique_id "aYUV3TYbySBHYmKOdJ_XVwAAANc"]
[Fri Feb 06 06:12:46.277751 2026] [:error] [pid 1665:tid 1732] [client 188.212.135.41:21929] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aYUV3jYZLE6gThXvZMrFHQAAAIU"]
[Fri Feb 06 06:12:47.380039 2026] [proxy_fcgi:error] [pid 34582:tid 34588] [client 188.212.135.61:38669] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:49.249110 2026] [:error] [pid 34582:tid 34596] [client 188.212.135.61:38669] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/category-double.php"] [unique_id "aYUV4eDeJq1JGssYG6yydgAAAQs"]
[Fri Feb 06 06:12:50.883494 2026] [:error] [pid 1663:tid 1691] [client 188.212.135.61:31731] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aYUV4l9EQrJaKkABjK_H7wAAABI"]
[Fri Feb 06 06:12:51.674068 2026] [:error] [pid 34582:tid 34585] [client 188.212.135.48:39229] [client 188.212.135.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aYUV4-DeJq1JGssYG6yyzAAAAQA"]
[Fri Feb 06 06:12:52.866280 2026] [proxy_fcgi:error] [pid 1665:tid 1736] [client 188.212.135.26:44231] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:53.243257 2026] [:error] [pid 1665:tid 1731] [client 188.212.135.26:44231] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aYUV5TYZLE6gThXvZMrFjwAAAIQ"]
[Fri Feb 06 06:12:54.353464 2026] [:error] [pid 1663:tid 1690] [client 188.212.135.15:24495] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aYUV5l9EQrJaKkABjK_IKwAAABE"]
[Fri Feb 06 06:12:57.022921 2026] [:error] [pid 1665:tid 1729] [client 188.212.135.49:54443] [client 188.212.135.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aYUV6TYZLE6gThXvZMrF1wAAAII"]
[Fri Feb 06 06:12:58.099617 2026] [proxy_fcgi:error] [pid 1665:tid 1736] [client 188.212.135.57:36417] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:12:58.499674 2026] [:error] [pid 1665:tid 1733] [client 188.212.135.57:36417] [client 188.212.135.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aYUV6jYZLE6gThXvZMrF9gAAAIY"]
[Fri Feb 06 06:13:00.113658 2026] [:error] [pid 1773:tid 1802] [client 188.212.135.27:43645] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aYUV7DYbySBHYmKOdJ_YogAAANM"]
[Fri Feb 06 06:13:04.080280 2026] [:error] [pid 1665:tid 1737] [client 188.212.135.10:42957] [client 188.212.135.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/as.php"] [unique_id "aYUV8DYZLE6gThXvZMrGNwAAAIo"]
[Fri Feb 06 06:13:05.176798 2026] [:error] [pid 34582:tid 34598] [client 188.212.135.28:55647] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aYUV8eDeJq1JGssYG6y0VgAAAQ0"]
[Fri Feb 06 06:13:05.956952 2026] [:error] [pid 34582:tid 34598] [client 188.212.135.38:61207] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "aYUV8eDeJq1JGssYG6y0aAAAAQ0"]
[Fri Feb 06 06:13:06.829459 2026] [:error] [pid 1664:tid 1706] [client 188.212.135.12:35309] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aYUV8u_0lM6yA3VnvQWeHQAAAEY"]
[Fri Feb 06 06:13:09.908577 2026] [:error] [pid 1663:tid 1695] [client 188.212.135.60:57397] [client 188.212.135.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aYUV9V9EQrJaKkABjK_JCAAAABY"]
[Fri Feb 06 06:13:11.995158 2026] [:error] [pid 1665:tid 1729] [client 188.212.135.48:43501] [client 188.212.135.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "aYUV9zYZLE6gThXvZMrGmgAAAII"]
[Fri Feb 06 06:13:13.094633 2026] [proxy_fcgi:error] [pid 1663:tid 1674] [client 188.212.135.27:42985] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:13.444431 2026] [proxy_fcgi:error] [pid 1663:tid 1693] [client 188.212.135.27:42985] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:13.910030 2026] [:error] [pid 1663:tid 1694] [client 188.212.135.27:42985] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aYUV-V9EQrJaKkABjK_JUAAAABU"]
[Fri Feb 06 06:13:17.875521 2026] [:error] [pid 34582:tid 34602] [client 188.212.135.60:59813] [client 188.212.135.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aYUV_eDeJq1JGssYG6y1ZQAAARE"]
[Fri Feb 06 06:13:18.779228 2026] [proxy_fcgi:error] [pid 1664:tid 1721] [client 188.212.135.9:60065] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:21.063108 2026] [:error] [pid 1664:tid 1717] [client 188.212.135.9:60065] [client 188.212.135.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aYUWAe_0lM6yA3VnvQWe9QAAAFE"]
[Fri Feb 06 06:13:22.152981 2026] [:error] [pid 34582:tid 34597] [client 188.212.135.39:28089] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aYUWAuDeJq1JGssYG6y1twAAAQw"]
[Fri Feb 06 06:13:23.406853 2026] [:error] [pid 34582:tid 34587] [client 188.212.135.61:38549] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aYUWA-DeJq1JGssYG6y1zwAAAQI"]
[Fri Feb 06 06:13:24.972597 2026] [:error] [pid 1773:tid 1802] [client 188.212.135.38:31003] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aYUWBDYbySBHYmKOdJ_aeQAAANM"]
[Fri Feb 06 06:13:27.347969 2026] [:error] [pid 1773:tid 1803] [client 188.212.135.24:51181] [client 188.212.135.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/kurd.php"] [unique_id "aYUWBzYbySBHYmKOdJ_amwAAANQ"]
[Fri Feb 06 06:13:29.563440 2026] [:error] [pid 34582:tid 34599] [client 188.212.135.51:55447] [client 188.212.135.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aYUWCeDeJq1JGssYG6y2agAAAQ4"]
[Fri Feb 06 06:13:30.394084 2026] [:error] [pid 1665:tid 1735] [client 188.212.135.29:64935] [client 188.212.135.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aYUWCjYZLE6gThXvZMrH3QAAAIg"]
[Fri Feb 06 06:13:32.395711 2026] [:error] [pid 1773:tid 1778] [client 188.212.135.17:51187] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aYUWDDYbySBHYmKOdJ_a4AAAAMA"]
[Fri Feb 06 06:13:33.074847 2026] [:error] [pid 1664:tid 1713] [client 188.212.135.15:34781] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYUWDe_0lM6yA3VnvQWf2AAAAE0"]
[Fri Feb 06 06:13:34.508256 2026] [:error] [pid 1664:tid 1710] [client 188.212.135.12:54151] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aYUWDu_0lM6yA3VnvQWf_gAAAEo"]
[Fri Feb 06 06:13:35.663761 2026] [:error] [pid 1665:tid 1747] [client 188.212.135.49:56303] [client 188.212.135.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aYUWDzYZLE6gThXvZMrIdwAAAJQ"]
[Fri Feb 06 06:13:36.465055 2026] [:error] [pid 34582:tid 34586] [client 188.212.135.55:47907] [client 188.212.135.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.55, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aYUWEODeJq1JGssYG6y3BwAAAQE"]
[Fri Feb 06 06:13:36.486626 2026] [proxy_fcgi:error] [pid 34582:tid 34586] [client 188.212.135.55:47907] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:36.929839 2026] [:error] [pid 34582:tid 34589] [client 188.212.135.55:47907] [client 188.212.135.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aYUWEODeJq1JGssYG6y3EwAAAQQ"]
[Fri Feb 06 06:13:38.446599 2026] [proxy_fcgi:error] [pid 1665:tid 1743] [client 188.212.135.38:60537] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:38.792823 2026] [:error] [pid 1665:tid 1750] [client 188.212.135.38:60537] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYUWEjYZLE6gThXvZMrIuwAAAJc"]
[Fri Feb 06 06:13:39.605080 2026] [:error] [pid 1663:tid 1685] [client 188.212.135.41:20665] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/network.php"] [unique_id "aYUWE19EQrJaKkABjK_K8gAAAAw"]
[Fri Feb 06 06:13:40.408684 2026] [proxy_fcgi:error] [pid 1663:tid 1690] [client 188.212.135.46:53549] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:43.482677 2026] [:error] [pid 1663:tid 1694] [client 188.212.135.46:53549] [client 188.212.135.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aYUWF19EQrJaKkABjK_LPwAAABU"]
[Fri Feb 06 06:13:44.191875 2026] [:error] [pid 1665:tid 1748] [client 188.212.135.5:47477] [client 188.212.135.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aYUWGDYZLE6gThXvZMrJLwAAAJU"]
[Fri Feb 06 06:13:45.633221 2026] [:error] [pid 1663:tid 1673] [client 188.212.135.22:53873] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aYUWGV9EQrJaKkABjK_LXQAAAAA"]
[Fri Feb 06 06:13:46.389826 2026] [:error] [pid 1665:tid 1735] [client 188.212.135.51:20293] [client 188.212.135.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aYUWGjYZLE6gThXvZMrJUgAAAIg"]
[Fri Feb 06 06:13:47.112027 2026] [proxy_fcgi:error] [pid 1665:tid 1728] [client 188.212.135.42:38927] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:47.481269 2026] [:error] [pid 1665:tid 1731] [client 188.212.135.42:38927] [client 188.212.135.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.212.135.42, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aYUWGzYZLE6gThXvZMrJXgAAAIQ"]
[Fri Feb 06 06:13:48.267505 2026] [:error] [pid 1665:tid 1729] [client 188.212.135.42:38927] [client 188.212.135.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aYUWHDYZLE6gThXvZMrJZQAAAII"]
[Fri Feb 06 06:13:50.656410 2026] [:error] [pid 1663:tid 1685] [client 188.212.135.23:37087] [client 188.212.135.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aYUWHl9EQrJaKkABjK_LpgAAAAw"]
[Fri Feb 06 06:13:51.447592 2026] [proxy_fcgi:error] [pid 34582:tid 34597] [client 188.212.135.24:36399] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:51.839680 2026] [:error] [pid 34582:tid 34588] [client 188.212.135.24:36399] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aYUWH-DeJq1JGssYG6y4mQAAAQM"]
[Fri Feb 06 06:13:52.531253 2026] [:error] [pid 1664:tid 1700] [client 188.212.135.57:23907] [client 188.212.135.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aYUWIO_0lM6yA3VnvQWhggAAAEA"]
[Fri Feb 06 06:13:53.255308 2026] [proxy_fcgi:error] [pid 1663:tid 1689] [client 188.212.135.6:55079] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:54.346668 2026] [:error] [pid 1663:tid 1680] [client 188.212.135.6:55079] [client 188.212.135.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYUWIl9EQrJaKkABjK_L4QAAAAc"]
[Fri Feb 06 06:13:55.905721 2026] [:error] [pid 1663:tid 1695] [client 188.212.135.13:33421] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYUWI19EQrJaKkABjK_L7wAAABY"]
[Fri Feb 06 06:13:56.621624 2026] [proxy_fcgi:error] [pid 1663:tid 1691] [client 188.212.135.53:48465] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:57.351315 2026] [proxy_fcgi:error] [pid 1663:tid 1691] [client 188.212.135.53:48465] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:13:58.046518 2026] [:error] [pid 1663:tid 1681] [client 188.212.135.53:48465] [client 188.212.135.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aYUWJl9EQrJaKkABjK_MGQAAAAg"]
[Fri Feb 06 06:13:58.801755 2026] [:error] [pid 1664:tid 1723] [client 188.212.135.13:63963] [client 188.212.135.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bypass.php"] [unique_id "aYUWJu_0lM6yA3VnvQWh_AAAAFc"]
[Fri Feb 06 06:14:00.845662 2026] [:error] [pid 34582:tid 34600] [client 188.212.135.7:50397] [client 188.212.135.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/count.php"] [unique_id "aYUWKODeJq1JGssYG6y5hAAAAQ8"]
[Fri Feb 06 06:14:01.684633 2026] [proxy_fcgi:error] [pid 1773:tid 1806] [client 188.212.135.48:42029] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:04.053170 2026] [:error] [pid 1773:tid 1793] [client 188.212.135.48:42029] [client 188.212.135.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYUWLDYbySBHYmKOdJ_ccwAAAMo"]
[Fri Feb 06 06:14:07.083565 2026] [:error] [pid 34582:tid 34598] [client 188.212.135.19:42981] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com"] [uri "/images/stories/themes.php"] [unique_id "aYUWL-DeJq1JGssYG6y6IQAAAQ0"]
[Fri Feb 06 06:14:07.479431 2026] [:error] [pid 34582:tid 34605] [client 188.212.135.19:42981] [client 188.212.135.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aYUWL-DeJq1JGssYG6y6LwAAARQ"]
[Fri Feb 06 06:14:08.877970 2026] [:error] [pid 1665:tid 1732] [client 188.212.135.22:20603] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aYUWMDYZLE6gThXvZMrKfQAAAIU"]
[Fri Feb 06 06:14:09.557904 2026] [:error] [pid 1773:tid 1807] [client 188.212.135.28:56467] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aYUWMTYbySBHYmKOdJ_czwAAANg"]
[Fri Feb 06 06:14:11.039639 2026] [proxy_fcgi:error] [pid 1665:tid 1743] [client 188.212.135.52:51067] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:12.532355 2026] [:error] [pid 1665:tid 1730] [client 188.212.135.52:51067] [client 188.212.135.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aYUWNDYZLE6gThXvZMrKvAAAAIM"]
[Fri Feb 06 06:14:14.045560 2026] [:error] [pid 1773:tid 1779] [client 188.212.135.21:37491] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aYUWNjYbySBHYmKOdJ_dIgAAAME"]
[Fri Feb 06 06:14:15.279560 2026] [:error] [pid 1665:tid 1744] [client 188.212.135.5:21573] [client 188.212.135.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aYUWNzYZLE6gThXvZMrK4AAAAJE"]
[Fri Feb 06 06:14:15.990813 2026] [proxy_fcgi:error] [pid 34582:tid 34587] [client 188.212.135.41:45145] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:17.796668 2026] [:error] [pid 34582:tid 34608] [client 188.212.135.41:45145] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aYUWOeDeJq1JGssYG6y6_gAAARc"]
[Fri Feb 06 06:14:19.319345 2026] [:error] [pid 1773:tid 1803] [client 188.212.135.26:27887] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/colour.php"] [unique_id "aYUWOzYbySBHYmKOdJ_dfAAAANQ"]
[Fri Feb 06 06:14:20.027133 2026] [proxy_fcgi:error] [pid 1663:tid 1682] [client 188.212.135.30:24885] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:20.442379 2026] [:error] [pid 1663:tid 1686] [client 188.212.135.30:24885] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aYUWPF9EQrJaKkABjK_NcgAAAA0"]
[Fri Feb 06 06:14:21.195030 2026] [:error] [pid 1665:tid 1730] [client 188.212.135.63:35335] [client 188.212.135.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/include.php"] [unique_id "aYUWPTYZLE6gThXvZMrLQgAAAIM"]
[Fri Feb 06 06:14:22.805985 2026] [:error] [pid 1773:tid 1807] [client 188.212.135.24:62537] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aYUWPjYbySBHYmKOdJ_dsQAAANg"]
[Fri Feb 06 06:14:24.668002 2026] [proxy_fcgi:error] [pid 1663:tid 1688] [client 188.212.135.6:64789] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:25.037803 2026] [:error] [pid 1663:tid 1679] [client 188.212.135.6:64789] [client 188.212.135.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aYUWQV9EQrJaKkABjK_NtwAAAAY"]
[Fri Feb 06 06:14:25.869591 2026] [:error] [pid 34582:tid 34600] [client 188.212.135.31:40653] [client 188.212.135.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aYUWQeDeJq1JGssYG6y7egAAAQ8"]
[Fri Feb 06 06:14:28.890428 2026] [proxy_fcgi:error] [pid 1773:tid 1789] [client 188.212.135.30:56283] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:29.672625 2026] [:error] [pid 1773:tid 1791] [client 188.212.135.30:56283] [client 188.212.135.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aYUWRTYbySBHYmKOdJ_eEgAAAMg"]
[Fri Feb 06 06:14:31.375446 2026] [:error] [pid 1663:tid 1688] [client 188.212.135.14:36403] [client 188.212.135.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aYUWR19EQrJaKkABjK_OEwAAAA8"]
[Fri Feb 06 06:14:32.098108 2026] [proxy_fcgi:error] [pid 1665:tid 1740] [client 188.212.135.59:62539] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:33.280834 2026] [:error] [pid 1665:tid 1739] [client 188.212.135.59:62539] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYUWSTYZLE6gThXvZMrL9wAAAIw"]
[Fri Feb 06 06:14:34.070885 2026] [:error] [pid 1664:tid 1715] [client 188.212.135.42:32649] [client 188.212.135.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aYUWSu_0lM6yA3VnvQWkOQAAAE8"]
[Fri Feb 06 06:14:35.107165 2026] [:error] [pid 1663:tid 1690] [client 188.212.135.38:56795] [client 188.212.135.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aYUWS19EQrJaKkABjK_OMwAAABE"]
[Fri Feb 06 06:14:35.921830 2026] [proxy_fcgi:error] [pid 1664:tid 1709] [client 188.212.135.27:60461] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:36.717395 2026] [:error] [pid 1664:tid 1718] [client 188.212.135.27:60461] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aYUWTO_0lM6yA3VnvQWkYQAAAFI"]
[Fri Feb 06 06:14:37.503266 2026] [proxy_fcgi:error] [pid 34582:tid 34593] [client 188.212.135.24:32187] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:38.232196 2026] [:error] [pid 34582:tid 34601] [client 188.212.135.24:32187] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aYUWTuDeJq1JGssYG6y8SwAAARA"]
[Fri Feb 06 06:14:38.963679 2026] [:error] [pid 1773:tid 1787] [client 188.212.135.28:65321] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aYUWTjYbySBHYmKOdJ_emwAAAMQ"]
[Fri Feb 06 06:14:40.184410 2026] [:error] [pid 1773:tid 1787] [client 188.212.135.32:26469] [client 188.212.135.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aYUWUDYbySBHYmKOdJ_erAAAAMQ"]
[Fri Feb 06 06:14:40.920079 2026] [:error] [pid 34582:tid 34599] [client 188.212.135.10:27953] [client 188.212.135.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aYUWUODeJq1JGssYG6y8cwAAAQ4"]
[Fri Feb 06 06:14:42.392842 2026] [:error] [pid 1665:tid 1748] [client 188.212.135.12:21029] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aYUWUjYZLE6gThXvZMrMfQAAAJU"]
[Fri Feb 06 06:14:44.047722 2026] [:error] [pid 1773:tid 1806] [client 188.212.135.23:30707] [client 188.212.135.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aYUWVDYbySBHYmKOdJ_e2QAAANc"]
[Fri Feb 06 06:14:44.767931 2026] [:error] [pid 1665:tid 1729] [client 188.212.135.28:42159] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aYUWVDYZLE6gThXvZMrMkwAAAII"]
[Fri Feb 06 06:14:45.533278 2026] [:error] [pid 34582:tid 34592] [client 188.212.135.57:59753] [client 188.212.135.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aYUWVeDeJq1JGssYG6y85QAAAQc"]
[Fri Feb 06 06:14:47.384932 2026] [:error] [pid 1664:tid 1711] [client 188.212.135.27:42403] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aYUWV-_0lM6yA3VnvQWk6QAAAEs"]
[Fri Feb 06 06:14:48.971566 2026] [:error] [pid 1773:tid 1784] [client 188.212.135.26:50653] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aYUWWDYbySBHYmKOdJ_fJQAAAMM"]
[Fri Feb 06 06:14:50.130438 2026] [:error] [pid 1665:tid 1746] [client 188.212.135.6:32591] [client 188.212.135.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aYUWWjYZLE6gThXvZMrM2wAAAJM"]
[Fri Feb 06 06:14:51.285990 2026] [:error] [pid 1773:tid 1801] [client 188.212.135.60:47123] [client 188.212.135.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYUWWzYbySBHYmKOdJ_fQgAAANI"]
[Fri Feb 06 06:14:52.799003 2026] [proxy_fcgi:error] [pid 1773:tid 1799] [client 188.212.135.17:33351] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:54.307050 2026] [:error] [pid 1773:tid 1800] [client 188.212.135.17:33351] [client 188.212.135.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugin.php"] [unique_id "aYUWXjYbySBHYmKOdJ_fZwAAANE"]
[Fri Feb 06 06:14:55.040214 2026] [:error] [pid 1773:tid 1793] [client 188.212.135.24:31695] [client 188.212.135.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aYUWXzYbySBHYmKOdJ_fbwAAAMo"]
[Fri Feb 06 06:14:56.174645 2026] [proxy_fcgi:error] [pid 1664:tid 1714] [client 188.212.135.27:28509] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:14:56.537564 2026] [:error] [pid 1664:tid 1707] [client 188.212.135.27:28509] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aYUWYO_0lM6yA3VnvQWlVQAAAEc"]
[Fri Feb 06 06:14:58.708045 2026] [:error] [pid 34582:tid 34608] [client 188.212.135.46:39835] [client 188.212.135.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aYUWYuDeJq1JGssYG6y9rAAAARc"]
[Fri Feb 06 06:14:59.934650 2026] [proxy_fcgi:error] [pid 34582:tid 34585] [client 188.212.135.61:20013] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:00.282924 2026] [:error] [pid 34582:tid 34594] [client 188.212.135.61:20013] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aYUWZODeJq1JGssYG6y9ywAAAQk"]
[Fri Feb 06 06:15:01.787023 2026] [:error] [pid 1665:tid 1734] [client 188.212.135.41:24249] [client 188.212.135.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aYUWZTYZLE6gThXvZMrNmQAAAIc"]
[Fri Feb 06 06:15:02.573380 2026] [proxy_fcgi:error] [pid 1663:tid 1682] [client 188.212.135.54:41723] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:02.973807 2026] [:error] [pid 1663:tid 1685] [client 188.212.135.54:41723] [client 188.212.135.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aYUWZl9EQrJaKkABjK_PYQAAAAw"]
[Fri Feb 06 06:15:04.111469 2026] [:error] [pid 1663:tid 1696] [client 188.212.135.22:62259] [client 188.212.135.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aYUWaF9EQrJaKkABjK_PcQAAABc"]
[Fri Feb 06 06:15:07.832669 2026] [proxy_fcgi:error] [pid 1665:tid 1732] [client 188.212.135.28:45559] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:10.537185 2026] [:error] [pid 1665:tid 1746] [client 188.212.135.28:45559] [client 188.212.135.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aYUWbjYZLE6gThXvZMrONAAAAJM"]
[Fri Feb 06 06:15:12.665063 2026] [:error] [pid 1665:tid 1738] [client 188.212.135.48:38065] [client 188.212.135.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aYUWcDYZLE6gThXvZMrOXAAAAIs"]
[Fri Feb 06 06:15:13.389979 2026] [proxy_fcgi:error] [pid 1665:tid 1749] [client 188.212.135.42:40925] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:13.766065 2026] [:error] [pid 1665:tid 1743] [client 188.212.135.42:40925] [client 188.212.135.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aYUWcTYZLE6gThXvZMrOaQAAAJA"]
[Fri Feb 06 06:15:14.582826 2026] [:error] [pid 1664:tid 1705] [client 188.212.135.21:61295] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aYUWcu_0lM6yA3VnvQWl-AAAAEU"]
[Fri Feb 06 06:15:15.294851 2026] [proxy_fcgi:error] [pid 1664:tid 1709] [client 188.212.135.21:26959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:16.078789 2026] [:error] [pid 1664:tid 1712] [client 188.212.135.21:26959] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aYUWdO_0lM6yA3VnvQWmEgAAAEw"]
[Fri Feb 06 06:15:16.795852 2026] [:error] [pid 1664:tid 1710] [client 188.212.135.39:25505] [client 188.212.135.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aYUWdO_0lM6yA3VnvQWmGAAAAEo"]
[Fri Feb 06 06:15:19.988862 2026] [:error] [pid 1665:tid 1743] [client 188.212.135.9:32539] [client 188.212.135.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aYUWdzYZLE6gThXvZMrOzAAAAJA"]
[Fri Feb 06 06:15:20.711701 2026] [:error] [pid 34582:tid 34609] [client 188.212.135.35:57389] [client 188.212.135.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aYUWeODeJq1JGssYG6y-yQAAARg"]
[Fri Feb 06 06:15:21.896097 2026] [:error] [pid 34582:tid 34589] [client 188.212.135.26:24763] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/log.php"] [unique_id "aYUWeeDeJq1JGssYG6y-3gAAAQQ"]
[Fri Feb 06 06:15:22.672981 2026] [:error] [pid 1664:tid 1711] [client 188.212.135.20:39747] [client 188.212.135.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aYUWeu_0lM6yA3VnvQWmVgAAAEs"]
[Fri Feb 06 06:15:23.397981 2026] [:error] [pid 1663:tid 1696] [client 188.212.135.26:38539] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aYUWe19EQrJaKkABjK_QPAAAABc"]
[Fri Feb 06 06:15:24.104365 2026] [:error] [pid 34582:tid 34599] [client 188.212.135.27:32207] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/aw.php"] [unique_id "aYUWfODeJq1JGssYG6y-_wAAAQ4"]
[Fri Feb 06 06:15:26.507484 2026] [:error] [pid 34582:tid 34589] [client 188.212.135.15:48921] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aYUWfuDeJq1JGssYG6y_JQAAAQQ"]
[Fri Feb 06 06:15:27.223836 2026] [:error] [pid 34582:tid 34607] [client 188.212.135.10:39441] [client 188.212.135.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/install.php"] [unique_id "aYUWf-DeJq1JGssYG6y_OAAAARY"]
[Fri Feb 06 06:15:28.337098 2026] [proxy_fcgi:error] [pid 1773:tid 1791] [client 188.212.135.15:27535] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:28.718959 2026] [:error] [pid 1773:tid 1797] [client 188.212.135.15:27535] [client 188.212.135.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aYUWgDYbySBHYmKOdJ_g8gAAAM4"]
[Fri Feb 06 06:15:29.481758 2026] [:error] [pid 1664:tid 1712] [client 188.212.135.23:45133] [client 188.212.135.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aYUWge_0lM6yA3VnvQWmmwAAAEw"]
[Fri Feb 06 06:15:31.041120 2026] [:error] [pid 1664:tid 1717] [client 188.212.135.44:57807] [client 188.212.135.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/template-less.php"] [unique_id "aYUWg-_0lM6yA3VnvQWmqwAAAFE"]
[Fri Feb 06 06:15:31.754015 2026] [:error] [pid 34582:tid 34603] [client 188.212.135.21:22549] [client 188.212.135.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aYUWg-DeJq1JGssYG6y_kwAAARI"]
[Fri Feb 06 06:15:35.189211 2026] [:error] [pid 1773:tid 1801] [client 188.212.135.61:33429] [client 188.212.135.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aYUWhzYbySBHYmKOdJ_hIwAAANI"]
[Fri Feb 06 06:15:36.027763 2026] [:error] [pid 1664:tid 1702] [client 188.212.135.12:41861] [client 188.212.135.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aYUWiO_0lM6yA3VnvQWm4AAAAEI"]
[Fri Feb 06 06:15:37.539602 2026] [:error] [pid 1665:tid 1740] [client 188.212.135.27:27485] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/file.php"] [unique_id "aYUWiTYZLE6gThXvZMrPxQAAAI0"]
[Fri Feb 06 06:15:38.635996 2026] [:error] [pid 34582:tid 34595] [client 188.212.135.50:40891] [client 188.212.135.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aYUWiuDeJq1JGssYG6zATQAAAQo"]
[Fri Feb 06 06:15:39.829727 2026] [:error] [pid 34582:tid 34604] [client 188.212.135.27:65201] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/load.php"] [unique_id "aYUWi-DeJq1JGssYG6zAegAAARM"]
[Fri Feb 06 06:15:40.583813 2026] [:error] [pid 1665:tid 1734] [client 188.212.135.34:35685] [client 188.212.135.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aYUWjDYZLE6gThXvZMrP5AAAAIc"]
[Fri Feb 06 06:15:41.434008 2026] [:error] [pid 1663:tid 1694] [client 188.212.135.49:29051] [client 188.212.135.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aYUWjV9EQrJaKkABjK_RFgAAABU"]
[Fri Feb 06 06:15:43.196519 2026] [:error] [pid 1665:tid 1746] [client 188.212.135.44:62191] [client 188.212.135.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aYUWjzYZLE6gThXvZMrQBQAAAJM"]
[Fri Feb 06 06:15:43.990196 2026] [proxy_fcgi:error] [pid 1664:tid 1711] [client 188.212.135.55:27319] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:44.380901 2026] [:error] [pid 1664:tid 1700] [client 188.212.135.55:27319] [client 188.212.135.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aYUWkO_0lM6yA3VnvQWnPQAAAEA"]
[Fri Feb 06 06:15:45.832912 2026] [proxy_fcgi:error] [pid 1664:tid 1722] [client 188.212.135.26:42927] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:46.186190 2026] [:error] [pid 1664:tid 1713] [client 188.212.135.26:42927] [client 188.212.135.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aYUWku_0lM6yA3VnvQWnYgAAAE0"]
[Fri Feb 06 06:15:46.865435 2026] [:error] [pid 1773:tid 1779] [client 188.212.135.40:22657] [client 188.212.135.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aYUWkjYbySBHYmKOdJ_hrwAAAME"]
[Fri Feb 06 06:15:47.987605 2026] [:error] [pid 1664:tid 1713] [client 188.212.135.27:23211] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aYUWk-_0lM6yA3VnvQWnhwAAAE0"]
[Fri Feb 06 06:15:53.244924 2026] [proxy_fcgi:error] [pid 1663:tid 1674] [client 188.212.135.50:55423] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 06:15:56.579393 2026] [:error] [pid 1663:tid 1686] [client 188.212.135.50:55423] [client 188.212.135.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/system.php"] [unique_id "aYUWnF9EQrJaKkABjK_R3QAAAA0"]
[Fri Feb 06 06:15:57.667114 2026] [:error] [pid 34582:tid 34605] [client 188.212.135.27:25659] [client 188.212.135.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aYUWneDeJq1JGssYG6zB4gAAARQ"]
[Fri Feb 06 06:15:59.273036 2026] [:error] [pid 1664:tid 1713] [client 188.212.135.45:49153] [client 188.212.135.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aYUWn-_0lM6yA3VnvQWn8gAAAE0"]
[Fri Feb 06 06:16:00.165629 2026] [:error] [pid 34582:tid 34602] [client 188.212.135.59:57807] [client 188.212.135.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYUWoODeJq1JGssYG6zCEwAAARE"]
[Fri Feb 06 06:16:00.965697 2026] [:error] [pid 1664:tid 1702] [client 188.212.135.10:58619] [client 188.212.135.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aYUWoO_0lM6yA3VnvQWoBgAAAEI"]
[Fri Feb 06 06:16:35.826538 2026] [:error] [pid 1664:tid 1718] [client 188.212.135.18:54129] [client 188.212.135.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/"] [unique_id "aYUWw-_0lM6yA3VnvQWpSAAAAFI"]
[Fri Feb 06 06:16:39.576208 2026] [:error] [pid 34582:tid 34600] [client 188.212.135.7:54437] [client 188.212.135.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "aYUWx-DeJq1JGssYG6zE0gAAAQ8"]
[Fri Feb 06 10:00:52.344743 2026] [:error] [pid 3382:tid 3459] [client 223.244.35.77:33618] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYVLVMIgU1HR0rhYrE9W7QAAAJM"]
[Fri Feb 06 15:24:31.218338 2026] [:error] [pid 3381:tid 3419] [client 45.148.10.244:32582] [client 45.148.10.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aYWXLy81zqRg96ZREggCnAAAAEY"]
[Fri Feb 06 15:30:20.147437 2026] [:error] [pid 3381:tid 3426] [client 3.113.181.128:50130] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aYWYjC81zqRg96ZREggFAgAAAE0"]
[Fri Feb 06 15:30:20.627376 2026] [:error] [pid 3381:tid 3416] [client 3.113.181.128:50138] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aYWYjC81zqRg96ZREggFCAAAAEM"]
[Fri Feb 06 15:30:21.107447 2026] [:error] [pid 3382:tid 3458] [client 3.113.181.128:50142] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/credentials"] [unique_id "aYWYjcIgU1HR0rhYrE_hvgAAAJI"]
[Fri Feb 06 15:30:21.588934 2026] [:error] [pid 3380:tid 3400] [client 3.113.181.128:50158] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config.bak"] [unique_id "aYWYjRFAlUvBGSBK2jcDSwAAABA"]
[Fri Feb 06 15:30:22.076066 2026] [:error] [pid 3380:tid 3397] [client 3.113.181.128:50162] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config.old"] [unique_id "aYWYjhFAlUvBGSBK2jcDTQAAAA0"]
[Fri Feb 06 15:30:27.386132 2026] [:error] [pid 3513:tid 3531] [client 3.113.181.128:54182] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.production"] [unique_id "aYWYkzSw3-HAlzpqSxx3mQAAAVA"]
[Fri Feb 06 15:30:27.872757 2026] [:error] [pid 3381:tid 3417] [client 3.113.181.128:54188] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.development"] [unique_id "aYWYky81zqRg96ZREggFIAAAAEQ"]
[Fri Feb 06 15:30:28.350590 2026] [:error] [pid 3382:tid 3453] [client 3.113.181.128:54204] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aYWYlMIgU1HR0rhYrE_h0AAAAI0"]
[Fri Feb 06 15:30:28.829411 2026] [:error] [pid 3381:tid 3427] [client 3.113.181.128:54208] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.local"] [unique_id "aYWYlC81zqRg96ZREggFJQAAAE4"]
[Fri Feb 06 15:30:29.309562 2026] [:error] [pid 3477:tid 3498] [client 3.113.181.128:54224] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.test"] [unique_id "aYWYlbL0Hdh40C7HYgUJpwAAANM"]
[Fri Feb 06 15:30:29.788430 2026] [:error] [pid 3477:tid 3499] [client 3.113.181.128:54228] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.backup"] [unique_id "aYWYlbL0Hdh40C7HYgUJqgAAANQ"]
[Fri Feb 06 15:30:30.270930 2026] [:error] [pid 3382:tid 3460] [client 3.113.181.128:54236] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.old"] [unique_id "aYWYlsIgU1HR0rhYrE_h0gAAAJQ"]
[Fri Feb 06 15:30:30.750209 2026] [:error] [pid 3477:tid 3496] [client 3.113.181.128:54246] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.bak"] [unique_id "aYWYlrL0Hdh40C7HYgUJrgAAANE"]
[Fri Feb 06 15:30:31.231765 2026] [:error] [pid 3513:tid 3518] [client 3.113.181.128:54256] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.dist"] [unique_id "aYWYlzSw3-HAlzpqSxx3qwAAAUM"]
[Fri Feb 06 15:30:31.716418 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:54268] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aYWYl8IgU1HR0rhYrE_h2wAAAJg"]
[Fri Feb 06 15:30:32.195743 2026] [:error] [pid 3380:tid 3404] [client 3.113.181.128:54272] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.php"] [unique_id "aYWYmBFAlUvBGSBK2jcDdAAAABQ"]
[Fri Feb 06 15:30:32.675674 2026] [:error] [pid 3380:tid 3385] [client 3.113.181.128:49202] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.example"] [unique_id "aYWYmBFAlUvBGSBK2jcDeAAAAAE"]
[Fri Feb 06 15:30:33.156075 2026] [:error] [pid 3477:tid 3499] [client 3.113.181.128:49208] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.sample"] [unique_id "aYWYmbL0Hdh40C7HYgUJtwAAANQ"]
[Fri Feb 06 15:30:33.635011 2026] [:error] [pid 3381:tid 3413] [client 3.113.181.128:49212] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.dev"] [unique_id "aYWYmS81zqRg96ZREggFNAAAAEA"]
[Fri Feb 06 15:30:34.114626 2026] [:error] [pid 3381:tid 3420] [client 3.113.181.128:49228] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.prod"] [unique_id "aYWYmi81zqRg96ZREggFNQAAAEc"]
[Fri Feb 06 15:30:34.604714 2026] [:error] [pid 3381:tid 3430] [client 3.113.181.128:49234] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.stage"] [unique_id "aYWYmi81zqRg96ZREggFOAAAAFE"]
[Fri Feb 06 15:30:35.084646 2026] [:error] [pid 3381:tid 3418] [client 3.113.181.128:49246] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.live"] [unique_id "aYWYmy81zqRg96ZREggFPAAAAEU"]
[Fri Feb 06 15:30:36.059585 2026] [:error] [pid 3381:tid 3435] [client 3.113.181.128:49272] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/bitbucket_keys.json"] [unique_id "aYWYnC81zqRg96ZREggFQwAAAFY"]
[Fri Feb 06 15:30:36.544735 2026] [:error] [pid 3380:tid 3390] [client 3.113.181.128:49286] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.bitbucket_keys"] [unique_id "aYWYnBFAlUvBGSBK2jcDfgAAAAY"]
[Fri Feb 06 15:30:37.026143 2026] [:error] [pid 3380:tid 3406] [client 3.113.181.128:49302] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php"] [unique_id "aYWYnRFAlUvBGSBK2jcDggAAABY"]
[Fri Feb 06 15:30:37.506652 2026] [:error] [pid 3380:tid 3394] [client 3.113.181.128:49316] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info.php"] [unique_id "aYWYnRFAlUvBGSBK2jcDhgAAAAo"]
[Fri Feb 06 15:30:37.987521 2026] [:error] [pid 3380:tid 3396] [client 3.113.181.128:49324] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/test.php"] [unique_id "aYWYnRFAlUvBGSBK2jcDigAAAAw"]
[Fri Feb 06 15:30:38.471881 2026] [:error] [pid 3380:tid 3399] [client 3.113.181.128:49336] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php.php"] [unique_id "aYWYnhFAlUvBGSBK2jcDjgAAAA8"]
[Fri Feb 06 15:30:38.953471 2026] [:error] [pid 3381:tid 3424] [client 3.113.181.128:49342] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php.bak"] [unique_id "aYWYni81zqRg96ZREggFSgAAAEs"]
[Fri Feb 06 15:30:39.435141 2026] [:error] [pid 3382:tid 3447] [client 3.113.181.128:49356] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/admin/phpinfo.php"] [unique_id "aYWYn8IgU1HR0rhYrE_h7wAAAIc"]
[Fri Feb 06 15:30:39.915871 2026] [:error] [pid 3382:tid 3444] [client 3.113.181.128:49370] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/admin/info.php"] [unique_id "aYWYn8IgU1HR0rhYrE_h8QAAAIQ"]
[Fri Feb 06 15:30:40.396479 2026] [:error] [pid 3382:tid 3463] [client 3.113.181.128:49382] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/public/phpinfo.php"] [unique_id "aYWYoMIgU1HR0rhYrE_h9AAAAJc"]
[Fri Feb 06 15:30:40.880731 2026] [:error] [pid 3477:tid 3493] [client 3.113.181.128:49396] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server.php"] [unique_id "aYWYoLL0Hdh40C7HYgUJxQAAAM4"]
[Fri Feb 06 15:30:41.361640 2026] [:error] [pid 3477:tid 3490] [client 3.113.181.128:49412] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/debug.php"] [unique_id "aYWYobL0Hdh40C7HYgUJyQAAAMs"]
[Fri Feb 06 15:30:41.840603 2026] [:error] [pid 3382:tid 3453] [client 3.113.181.128:49422] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php_info.php"] [unique_id "aYWYocIgU1HR0rhYrE_h-gAAAI0"]
[Fri Feb 06 15:30:42.319656 2026] [:error] [pid 3380:tid 3393] [client 3.113.181.128:49432] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/testphp.php"] [unique_id "aYWYohFAlUvBGSBK2jcDmAAAAAk"]
[Fri Feb 06 15:30:42.799806 2026] [:error] [pid 3381:tid 3414] [client 3.113.181.128:49804] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/probe.php"] [unique_id "aYWYoi81zqRg96ZREggFTwAAAEE"]
[Fri Feb 06 15:30:43.278212 2026] [:error] [pid 3381:tid 3431] [client 3.113.181.128:49808] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/check.php"] [unique_id "aYWYoy81zqRg96ZREggFUQAAAFI"]
[Fri Feb 06 15:30:43.761631 2026] [:error] [pid 3380:tid 3406] [client 3.113.181.128:49814] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/phpinfo.php"] [unique_id "aYWYoxFAlUvBGSBK2jcDmwAAABY"]
[Fri Feb 06 15:30:44.244059 2026] [:error] [pid 3477:tid 3481] [client 3.113.181.128:49822] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/info.php"] [unique_id "aYWYpLL0Hdh40C7HYgUJ1gAAAMI"]
[Fri Feb 06 15:30:44.726608 2026] [:error] [pid 3382:tid 3461] [client 3.113.181.128:49832] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo"] [unique_id "aYWYpMIgU1HR0rhYrE_iAwAAAJU"]
[Fri Feb 06 15:30:45.207234 2026] [:error] [pid 3380:tid 3387] [client 3.113.181.128:49846] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info"] [unique_id "aYWYpRFAlUvBGSBK2jcDnAAAAAM"]
[Fri Feb 06 15:30:45.688630 2026] [:error] [pid 3477:tid 3492] [client 3.113.181.128:49858] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/test"] [unique_id "aYWYpbL0Hdh40C7HYgUJ2QAAAM0"]
[Fri Feb 06 15:30:46.166718 2026] [:error] [pid 3380:tid 3403] [client 3.113.181.128:49870] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php"] [unique_id "aYWYphFAlUvBGSBK2jcDpQAAABM"]
[Fri Feb 06 15:30:46.642674 2026] [:error] [pid 3380:tid 3401] [client 3.113.181.128:49872] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.bak"] [unique_id "aYWYphFAlUvBGSBK2jcDqwAAABE"]
[Fri Feb 06 15:30:47.121240 2026] [:error] [pid 3477:tid 3497] [client 3.113.181.128:49882] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/admin/phpinfo"] [unique_id "aYWYp7L0Hdh40C7HYgUJ2gAAANI"]
[Fri Feb 06 15:30:47.601034 2026] [:error] [pid 3382:tid 3462] [client 3.113.181.128:49890] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/admin/info"] [unique_id "aYWYp8IgU1HR0rhYrE_iCAAAAJY"]
[Fri Feb 06 15:30:48.079314 2026] [:error] [pid 3477:tid 3494] [client 3.113.181.128:49902] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/public/phpinfo"] [unique_id "aYWYqLL0Hdh40C7HYgUJ4wAAAM8"]
[Fri Feb 06 15:30:48.555692 2026] [:error] [pid 3380:tid 3405] [client 3.113.181.128:49904] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server"] [unique_id "aYWYqBFAlUvBGSBK2jcDsQAAABU"]
[Fri Feb 06 15:30:49.034967 2026] [:error] [pid 3380:tid 3401] [client 3.113.181.128:49908] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/debug"] [unique_id "aYWYqRFAlUvBGSBK2jcDtgAAABE"]
[Fri Feb 06 15:30:49.514744 2026] [:error] [pid 3513:tid 3533] [client 3.113.181.128:49920] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php_info"] [unique_id "aYWYqTSw3-HAlzpqSxx34gAAAVI"]
[Fri Feb 06 15:30:49.994117 2026] [:error] [pid 3477:tid 3498] [client 3.113.181.128:49924] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/testphp"] [unique_id "aYWYqbL0Hdh40C7HYgUJ6AAAANM"]
[Fri Feb 06 15:30:50.474497 2026] [:error] [pid 3382:tid 3446] [client 3.113.181.128:49938] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/probe"] [unique_id "aYWYqsIgU1HR0rhYrE_iEAAAAIY"]
[Fri Feb 06 15:30:50.952993 2026] [:error] [pid 3381:tid 3419] [client 3.113.181.128:49940] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/check"] [unique_id "aYWYqi81zqRg96ZREggFWwAAAEY"]
[Fri Feb 06 15:30:51.430132 2026] [:error] [pid 3477:tid 3486] [client 3.113.181.128:49950] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/phpinfo"] [unique_id "aYWYq7L0Hdh40C7HYgUJ6wAAAMc"]
[Fri Feb 06 15:30:51.909242 2026] [:error] [pid 3477:tid 3494] [client 3.113.181.128:49964] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/api/info"] [unique_id "aYWYq7L0Hdh40C7HYgUJ7QAAAM8"]
[Fri Feb 06 15:30:52.387964 2026] [:error] [pid 3381:tid 3421] [client 3.113.181.128:37672] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php.old"] [unique_id "aYWYrC81zqRg96ZREggFZAAAAEg"]
[Fri Feb 06 15:30:52.869797 2026] [:error] [pid 3477:tid 3487] [client 3.113.181.128:37676] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/_profiler/phpinfo"] [unique_id "aYWYrLL0Hdh40C7HYgUJ8QAAAMg"]
[Fri Feb 06 15:30:53.346416 2026] [:error] [pid 3381:tid 3434] [client 3.113.181.128:37686] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/cpanel/phpinfo.php"] [unique_id "aYWYrS81zqRg96ZREggFagAAAFU"]
[Fri Feb 06 15:30:53.830401 2026] [:error] [pid 3477:tid 3501] [client 3.113.181.128:37698] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/www/phpinfo.php"] [unique_id "aYWYrbL0Hdh40C7HYgUJ9QAAANY"]
[Fri Feb 06 15:30:54.310522 2026] [:error] [pid 3513:tid 3515] [client 3.113.181.128:37700] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/web/phpinfo.php"] [unique_id "aYWYrjSw3-HAlzpqSxx38AAAAUA"]
[Fri Feb 06 15:30:54.789764 2026] [:error] [pid 3477:tid 3496] [client 3.113.181.128:37708] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server/phpinfo.php"] [unique_id "aYWYrrL0Hdh40C7HYgUJ9wAAANE"]
[Fri Feb 06 15:30:55.268611 2026] [:error] [pid 3382:tid 3449] [client 3.113.181.128:37716] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info2.php"] [unique_id "aYWYr8IgU1HR0rhYrE_iGAAAAIk"]
[Fri Feb 06 15:30:55.753653 2026] [:error] [pid 3513:tid 3522] [client 3.113.181.128:37730] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info1.php"] [unique_id "aYWYrzSw3-HAlzpqSxx3-AAAAUc"]
[Fri Feb 06 15:30:56.233221 2026] [:error] [pid 3477:tid 3494] [client 3.113.181.128:37732] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info3.php"] [unique_id "aYWYsLL0Hdh40C7HYgUJ-AAAAM8"]
[Fri Feb 06 15:30:56.710652 2026] [:error] [pid 3477:tid 3483] [client 3.113.181.128:37742] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php-info.php"] [unique_id "aYWYsLL0Hdh40C7HYgUJ-wAAAMQ"]
[Fri Feb 06 15:30:57.189587 2026] [:error] [pid 3477:tid 3487] [client 3.113.181.128:37752] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phptest.php"] [unique_id "aYWYsbL0Hdh40C7HYgUJ_gAAAMg"]
[Fri Feb 06 15:30:57.669923 2026] [:error] [pid 3513:tid 3528] [client 3.113.181.128:37764] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "aYWYsTSw3-HAlzpqSxx3_AAAAU0"]
[Fri Feb 06 15:30:58.147916 2026] [:error] [pid 3513:tid 3531] [client 3.113.181.128:37770] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php_version.php"] [unique_id "aYWYsjSw3-HAlzpqSxx3_wAAAVA"]
[Fri Feb 06 15:30:58.624219 2026] [:error] [pid 3513:tid 3517] [client 3.113.181.128:37772] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/serverinfo.php"] [unique_id "aYWYsjSw3-HAlzpqSxx4AgAAAUI"]
[Fri Feb 06 15:30:59.106694 2026] [:error] [pid 3513:tid 3535] [client 3.113.181.128:37776] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/_debug"] [unique_id "aYWYszSw3-HAlzpqSxx4BgAAAVQ"]
[Fri Feb 06 15:30:59.588671 2026] [:error] [pid 3380:tid 3386] [client 3.113.181.128:37778] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/pi.php"] [unique_id "aYWYsxFAlUvBGSBK2jcD3gAAAAI"]
[Fri Feb 06 15:31:00.067239 2026] [:error] [pid 3477:tid 3487] [client 3.113.181.128:37782] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/i.php"] [unique_id "aYWYtLL0Hdh40C7HYgUKBQAAAMg"]
[Fri Feb 06 15:31:00.544491 2026] [:error] [pid 3380:tid 3396] [client 3.113.181.128:37794] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/p.php"] [unique_id "aYWYtBFAlUvBGSBK2jcD5gAAAAw"]
[Fri Feb 06 15:31:01.029064 2026] [:error] [pid 3380:tid 3407] [client 3.113.181.128:37806] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/t.php"] [unique_id "aYWYtRFAlUvBGSBK2jcD6gAAABc"]
[Fri Feb 06 15:31:01.507037 2026] [:error] [pid 3513:tid 3531] [client 3.113.181.128:37822] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/3.php"] [unique_id "aYWYtTSw3-HAlzpqSxx4EQAAAVA"]
[Fri Feb 06 15:31:01.990721 2026] [:error] [pid 3477:tid 3484] [client 3.113.181.128:37834] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/2.php"] [unique_id "aYWYtbL0Hdh40C7HYgUKEQAAAMU"]
[Fri Feb 06 15:31:02.470740 2026] [:error] [pid 3382:tid 3461] [client 3.113.181.128:46284] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/1.php"] [unique_id "aYWYtsIgU1HR0rhYrE_iKAAAAJU"]
[Fri Feb 06 15:31:02.946187 2026] [:error] [pid 3382:tid 3462] [client 3.113.181.128:46300] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/diagnostic.php"] [unique_id "aYWYtsIgU1HR0rhYrE_iKgAAAJY"]
[Fri Feb 06 15:31:03.425732 2026] [:error] [pid 3382:tid 3456] [client 3.113.181.128:46310] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.txt"] [unique_id "aYWYt8IgU1HR0rhYrE_iMAAAAJA"]
[Fri Feb 06 15:31:03.906286 2026] [:error] [pid 3381:tid 3420] [client 3.113.181.128:46312] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info.txt"] [unique_id "aYWYty81zqRg96ZREggFegAAAEc"]
[Fri Feb 06 15:31:04.385921 2026] [:error] [pid 3513:tid 3533] [client 3.113.181.128:46320] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.html"] [unique_id "aYWYuDSw3-HAlzpqSxx4FwAAAVI"]
[Fri Feb 06 15:31:04.869451 2026] [:error] [pid 3513:tid 3539] [client 3.113.181.128:46330] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info.html"] [unique_id "aYWYuDSw3-HAlzpqSxx4GAAAAVg"]
[Fri Feb 06 15:31:05.345878 2026] [:error] [pid 3381:tid 3431] [client 3.113.181.128:46340] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php~"] [unique_id "aYWYuS81zqRg96ZREggFfgAAAFI"]
[Fri Feb 06 15:31:05.826428 2026] [:error] [pid 3381:tid 3427] [client 3.113.181.128:46350] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php.save"] [unique_id "aYWYuS81zqRg96ZREggFgQAAAE4"]
[Fri Feb 06 15:31:06.304270 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:46364] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/wp-admin/info.php"] [unique_id "aYWYusIgU1HR0rhYrE_iOwAAAJg"]
[Fri Feb 06 15:31:06.783751 2026] [:error] [pid 3382:tid 3450] [client 3.113.181.128:46380] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/wp-content/phpinfo.php"] [unique_id "aYWYusIgU1HR0rhYrE_iPQAAAIo"]
[Fri Feb 06 15:31:07.259421 2026] [:error] [pid 3513:tid 3515] [client 3.113.181.128:46390] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/cgi-bin/phpinfo.php"] [unique_id "aYWYuzSw3-HAlzpqSxx4HwAAAUA"]
[Fri Feb 06 15:31:07.737453 2026] [:error] [pid 3380:tid 3389] [client 3.113.181.128:46398] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/v1/phpinfo.php"] [unique_id "aYWYuxFAlUvBGSBK2jcD-gAAAAU"]
[Fri Feb 06 15:31:08.212593 2026] [:error] [pid 3477:tid 3488] [client 3.113.181.128:46406] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/v2/phpinfo.php"] [unique_id "aYWYvLL0Hdh40C7HYgUKJAAAAMk"]
[Fri Feb 06 15:31:08.691390 2026] [:error] [pid 3513:tid 3533] [client 3.113.181.128:46412] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.gitlab-ci.yml"] [unique_id "aYWYvDSw3-HAlzpqSxx4IAAAAVI"]
[Fri Feb 06 15:31:09.171808 2026] [:error] [pid 3381:tid 3424] [client 3.113.181.128:46418] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.gitlab/config"] [unique_id "aYWYvS81zqRg96ZREggFjgAAAEs"]
[Fri Feb 06 15:31:09.650340 2026] [:error] [pid 3381:tid 3422] [client 3.113.181.128:46422] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/gitlab/config"] [unique_id "aYWYvS81zqRg96ZREggFkAAAAEk"]
[Fri Feb 06 15:31:10.130950 2026] [:error] [pid 3381:tid 3430] [client 3.113.181.128:46428] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/config/gitlab.json"] [unique_id "aYWYvi81zqRg96ZREggFkgAAAFE"]
[Fri Feb 06 15:31:10.610255 2026] [:error] [pid 3513:tid 3519] [client 3.113.181.128:46438] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.config/git/config"] [unique_id "aYWYvjSw3-HAlzpqSxx4JwAAAUQ"]
[Fri Feb 06 15:31:11.093608 2026] [:error] [pid 3513:tid 3526] [client 3.113.181.128:46446] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/.config/git/credentials"] [unique_id "aYWYvzSw3-HAlzpqSxx4LgAAAUs"]
[Fri Feb 06 18:23:18.155378 2026] [:error] [pid 36857:tid 36859] [client 43.153.123.4:45746] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYXBFpVQwfj7Kp4Dd0HYzgAAAYA"]
[Fri Feb 06 20:12:13.457185 2026] [proxy_fcgi:error] [pid 3477:tid 3494] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:13.783245 2026] [proxy_fcgi:error] [pid 3477:tid 3495] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:14.054498 2026] [proxy_fcgi:error] [pid 3477:tid 3490] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:14.326790 2026] [proxy_fcgi:error] [pid 3477:tid 3485] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:14.622854 2026] [proxy_fcgi:error] [pid 3477:tid 3489] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:14.902936 2026] [proxy_fcgi:error] [pid 3477:tid 3493] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:15.182786 2026] [proxy_fcgi:error] [pid 3477:tid 3496] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:15.456232 2026] [proxy_fcgi:error] [pid 3477:tid 3488] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:15.743706 2026] [proxy_fcgi:error] [pid 3477:tid 3503] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:16.020235 2026] [proxy_fcgi:error] [pid 3477:tid 3497] [client 134.149.17.140:2959] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:12:16.293709 2026] [:error] [pid 3477:tid 3501] [client 134.149.17.140:2959] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYXaoLL0Hdh40C7HYgVlNgAAANY"]
[Fri Feb 06 20:12:16.875658 2026] [:error] [pid 3381:tid 3423] [client 134.149.17.140:3031] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYXaoC81zqRg96ZREghf3wAAAEo"]
[Fri Feb 06 20:12:17.434501 2026] [:error] [pid 36857:tid 36861] [client 134.149.17.140:2949] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYXaoZVQwfj7Kp4Dd0HofwAAAYI"]
[Fri Feb 06 20:12:17.959074 2026] [:error] [pid 3477:tid 3494] [client 134.149.17.140:3050] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYXaobL0Hdh40C7HYgVlOAAAAM8"]
[Fri Feb 06 20:12:18.537609 2026] [:error] [pid 3380:tid 3400] [client 134.149.17.140:2962] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYXaohFAlUvBGSBK2jdevQAAABA"]
[Fri Feb 06 20:12:19.160579 2026] [:error] [pid 3381:tid 3416] [client 134.149.17.140:3013] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYXaoy81zqRg96ZREghf6QAAAEM"]
[Fri Feb 06 20:12:19.702999 2026] [:error] [pid 3382:tid 3446] [client 134.149.17.140:3065] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYXao8IgU1HR0rhYrE9CfgAAAIY"]
[Fri Feb 06 20:12:20.235958 2026] [:error] [pid 46432:tid 46442] [client 134.149.17.140:3016] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYXapAbwJwu_od0kZjMeigAAAkg"]
[Fri Feb 06 20:12:20.784653 2026] [:error] [pid 15821:tid 15841] [client 134.149.17.140:3053] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYXapHARQa67J4c772kCkAAAARA"]
[Fri Feb 06 20:12:21.332643 2026] [:error] [pid 3381:tid 3433] [client 134.149.17.140:3066] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYXapS81zqRg96ZREghf6wAAAFQ"]
[Fri Feb 06 20:12:21.888587 2026] [:error] [pid 3382:tid 3451] [client 134.149.17.140:2981] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYXapcIgU1HR0rhYrE9CggAAAIs"]
[Fri Feb 06 20:12:22.428253 2026] [:error] [pid 37019:tid 37024] [client 134.149.17.140:3067] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYXapgkAjqd3bcgYBrtcfwAAAgM"]
[Fri Feb 06 20:12:22.946239 2026] [:error] [pid 3382:tid 3444] [client 134.149.17.140:3070] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYXapsIgU1HR0rhYrE9CgwAAAIQ"]
[Fri Feb 06 20:12:23.465645 2026] [:error] [pid 46432:tid 46450] [client 134.149.17.140:2950] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYXapwbwJwu_od0kZjMejQAAAlA"]
[Fri Feb 06 20:12:24.010134 2026] [:error] [pid 3380:tid 3404] [client 134.149.17.140:2899] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYXaqBFAlUvBGSBK2jdevwAAABQ"]
[Fri Feb 06 20:12:24.568269 2026] [:error] [pid 37019:tid 37033] [client 134.149.17.140:3009] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYXaqAkAjqd3bcgYBrtcgAAAAgw"]
[Fri Feb 06 20:12:25.092735 2026] [:error] [pid 37019:tid 37030] [client 134.149.17.140:3014] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYXaqQkAjqd3bcgYBrtcgQAAAgk"]
[Fri Feb 06 20:12:25.593182 2026] [:error] [pid 37019:tid 37042] [client 134.149.17.140:3035] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYXaqQkAjqd3bcgYBrtcggAAAhU"]
[Fri Feb 06 20:12:26.113975 2026] [:error] [pid 3513:tid 3538] [client 134.149.17.140:3024] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYXaqjSw3-HAlzpqSxzK9wAAAVc"]
[Fri Feb 06 20:12:26.683520 2026] [:error] [pid 3477:tid 3479] [client 134.149.17.140:3051] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYXaqrL0Hdh40C7HYgVlQAAAAMA"]
[Fri Feb 06 20:12:27.204530 2026] [:error] [pid 15821:tid 15834] [client 134.149.17.140:3033] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYXaq3ARQa67J4c772kClQAAAQk"]
[Fri Feb 06 20:12:27.761136 2026] [:error] [pid 3513:tid 3523] [client 134.149.17.140:2993] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYXaqzSw3-HAlzpqSxzK-AAAAUg"]
[Fri Feb 06 20:12:28.334866 2026] [:error] [pid 46432:tid 46451] [client 134.149.17.140:2951] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYXarAbwJwu_od0kZjMekQAAAlE"]
[Fri Feb 06 20:12:28.936084 2026] [:error] [pid 15821:tid 15825] [client 134.149.17.140:3045] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYXarHARQa67J4c772kClwAAAQA"]
[Fri Feb 06 20:12:29.764106 2026] [:error] [pid 3380:tid 3395] [client 134.149.17.140:3047] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYXarRFAlUvBGSBK2jdewgAAAAs"]
[Fri Feb 06 20:12:30.299122 2026] [:error] [pid 46432:tid 46439] [client 134.149.17.140:3043] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYXargbwJwu_od0kZjMekwAAAkU"]
[Fri Feb 06 20:12:30.897619 2026] [:error] [pid 15821:tid 15847] [client 134.149.17.140:2958] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYXarnARQa67J4c772kCnQAAARY"]
[Fri Feb 06 20:12:31.444261 2026] [:error] [pid 46432:tid 46454] [client 134.149.17.140:3064] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYXarwbwJwu_od0kZjMemAAAAlQ"]
[Fri Feb 06 20:12:31.974984 2026] [:error] [pid 3477:tid 3497] [client 134.149.17.140:3061] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYXar7L0Hdh40C7HYgVlRgAAANI"]
[Fri Feb 06 20:12:32.510457 2026] [:error] [pid 3381:tid 3425] [client 134.149.17.140:2965] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYXasC81zqRg96ZREghf-QAAAEw"]
[Fri Feb 06 20:12:33.042482 2026] [:error] [pid 46432:tid 46441] [client 134.149.17.140:2945] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYXasQbwJwu_od0kZjMemQAAAkc"]
[Fri Feb 06 20:12:33.589827 2026] [:error] [pid 3382:tid 3458] [client 134.149.17.140:3007] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYXascIgU1HR0rhYrE9CjwAAAJI"]
[Fri Feb 06 20:12:34.110096 2026] [:error] [pid 15821:tid 15832] [client 134.149.17.140:2960] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYXasnARQa67J4c772kCoQAAAQc"]
[Fri Feb 06 20:12:34.634605 2026] [:error] [pid 15821:tid 15825] [client 134.149.17.140:3056] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/luxe.php"] [unique_id "aYXasnARQa67J4c772kCogAAAQA"]
[Fri Feb 06 20:12:36.188889 2026] [:error] [pid 36857:tid 36865] [client 134.149.17.140:3062] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/luxe.php"] [unique_id "aYXatJVQwfj7Kp4Dd0HoiAAAAYY"]
[Fri Feb 06 20:12:36.725882 2026] [:error] [pid 3381:tid 3436] [client 134.149.17.140:2883] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/luxe.php"] [unique_id "aYXatC81zqRg96ZREghgAAAAAFc"]
[Fri Feb 06 20:12:37.276943 2026] [:error] [pid 3382:tid 3451] [client 134.149.17.140:3018] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYXatcIgU1HR0rhYrE9CmAAAAIs"]
[Fri Feb 06 20:12:37.818164 2026] [:error] [pid 36928:tid 36940] [client 134.149.17.140:3039] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYXatZs7fyU8D36r-OpoaQAAAcg"]
[Fri Feb 06 20:12:38.380908 2026] [:error] [pid 46432:tid 46456] [client 134.149.17.140:2986] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYXatgbwJwu_od0kZjMeoAAAAlY"]
[Fri Feb 06 20:12:38.924680 2026] [:error] [pid 3380:tid 3397] [client 134.149.17.140:3015] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYXathFAlUvBGSBK2jdexAAAAA0"]
[Fri Feb 06 20:12:39.456472 2026] [:error] [pid 37019:tid 37042] [client 134.149.17.140:2944] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYXatwkAjqd3bcgYBrtcjwAAAhU"]
[Fri Feb 06 20:12:40.071629 2026] [:error] [pid 36857:tid 36862] [client 134.149.17.140:2946] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYXauJVQwfj7Kp4Dd0HoiQAAAYM"]
[Fri Feb 06 20:12:40.638441 2026] [:error] [pid 3382:tid 3453] [client 134.149.17.140:2974] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYXauMIgU1HR0rhYrE9CngAAAI0"]
[Fri Feb 06 20:12:41.183952 2026] [:error] [pid 3380:tid 3389] [client 134.149.17.140:3032] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYXauRFAlUvBGSBK2jdexwAAAAU"]
[Fri Feb 06 20:12:41.769262 2026] [:error] [pid 46432:tid 46449] [client 134.149.17.140:2985] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYXauQbwJwu_od0kZjMepAAAAk8"]
[Fri Feb 06 20:12:42.301453 2026] [:error] [pid 3382:tid 3446] [client 134.149.17.140:2884] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYXausIgU1HR0rhYrE9CnwAAAIY"]
[Fri Feb 06 20:12:42.837319 2026] [:error] [pid 3477:tid 3486] [client 134.149.17.140:2952] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYXaurL0Hdh40C7HYgVlWwAAAMc"]
[Fri Feb 06 20:12:43.378897 2026] [:error] [pid 3381:tid 3431] [client 134.149.17.140:2963] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYXauy81zqRg96ZREghgBQAAAFI"]
[Fri Feb 06 20:12:43.922501 2026] [:error] [pid 3380:tid 3385] [client 134.149.17.140:3049] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYXauxFAlUvBGSBK2jdezgAAAAE"]
[Fri Feb 06 20:12:44.474090 2026] [:error] [pid 3380:tid 3398] [client 134.149.17.140:2968] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYXavBFAlUvBGSBK2jde0QAAAA4"]
[Fri Feb 06 20:12:45.056668 2026] [:error] [pid 3382:tid 3461] [client 134.149.17.140:3011] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYXavcIgU1HR0rhYrE9CoQAAAJU"]
[Fri Feb 06 20:12:45.589961 2026] [:error] [pid 15821:tid 15836] [client 134.149.17.140:2999] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYXavXARQa67J4c772kCrgAAAQs"]
[Fri Feb 06 20:12:46.145527 2026] [:error] [pid 3382:tid 3463] [client 134.149.17.140:3017] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYXavsIgU1HR0rhYrE9CogAAAJc"]
[Fri Feb 06 20:12:46.725849 2026] [:error] [pid 3382:tid 3447] [client 134.149.17.140:3052] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYXavsIgU1HR0rhYrE9CowAAAIc"]
[Fri Feb 06 20:12:47.307967 2026] [:error] [pid 3382:tid 3450] [client 134.149.17.140:3023] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYXav8IgU1HR0rhYrE9CpQAAAIo"]
[Fri Feb 06 20:12:47.841679 2026] [:error] [pid 36928:tid 36944] [client 134.149.17.140:3070] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYXav5s7fyU8D36r-OpobQAAAcw"]
[Fri Feb 06 20:12:48.436479 2026] [:error] [pid 36857:tid 36872] [client 134.149.17.140:2989] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYXawJVQwfj7Kp4Dd0HojwAAAY0"]
[Fri Feb 06 20:12:49.085480 2026] [:error] [pid 15821:tid 15831] [client 134.149.17.140:2994] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYXawXARQa67J4c772kCsgAAAQY"]
[Fri Feb 06 20:12:49.657864 2026] [:error] [pid 37019:tid 37034] [client 134.149.17.140:3028] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYXawQkAjqd3bcgYBrtckgAAAg0"]
[Fri Feb 06 20:12:50.204646 2026] [:error] [pid 3382:tid 3444] [client 134.149.17.140:3054] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYXawsIgU1HR0rhYrE9CqQAAAIQ"]
[Fri Feb 06 20:12:50.749712 2026] [:error] [pid 36857:tid 36883] [client 134.149.17.140:3042] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYXawpVQwfj7Kp4Dd0HokgAAAZg"]
[Fri Feb 06 20:12:51.270028 2026] [:error] [pid 46432:tid 46443] [client 134.149.17.140:2991] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYXawwbwJwu_od0kZjMepwAAAkk"]
[Fri Feb 06 20:12:51.859756 2026] [:error] [pid 36928:tid 36942] [client 134.149.17.140:2969] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYXaw5s7fyU8D36r-OpocAAAAco"]
[Fri Feb 06 20:12:52.380398 2026] [:error] [pid 3477:tid 3501] [client 134.149.17.140:2933] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYXaxLL0Hdh40C7HYgVlZwAAANY"]
[Fri Feb 06 20:12:52.924948 2026] [:error] [pid 3382:tid 3446] [client 134.149.17.140:2887] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYXaxMIgU1HR0rhYrE9CrAAAAIY"]
[Fri Feb 06 20:12:53.457218 2026] [:error] [pid 3477:tid 3494] [client 134.149.17.140:3012] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYXaxbL0Hdh40C7HYgVlbAAAAM8"]
[Fri Feb 06 20:12:54.030958 2026] [:error] [pid 15821:tid 15830] [client 134.149.17.140:3021] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYXaxnARQa67J4c772kCtQAAAQU"]
[Fri Feb 06 20:12:54.712353 2026] [:error] [pid 46432:tid 46439] [client 134.149.17.140:2954] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYXaxgbwJwu_od0kZjMeqgAAAkU"]
[Fri Feb 06 20:12:55.248269 2026] [:error] [pid 37019:tid 37024] [client 134.149.17.140:3040] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYXaxwkAjqd3bcgYBrtclwAAAgM"]
[Fri Feb 06 20:12:55.769982 2026] [:error] [pid 3380:tid 3390] [client 134.149.17.140:3059] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYXaxxFAlUvBGSBK2jde1gAAAAY"]
[Fri Feb 06 20:12:56.304741 2026] [:error] [pid 3382:tid 3450] [client 134.149.17.140:2957] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYXayMIgU1HR0rhYrE9CrQAAAIo"]
[Fri Feb 06 20:12:56.861170 2026] [:error] [pid 46432:tid 46449] [client 134.149.17.140:3068] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYXayAbwJwu_od0kZjMesAAAAk8"]
[Fri Feb 06 20:12:57.400739 2026] [:error] [pid 3513:tid 3533] [client 134.149.17.140:3020] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYXayTSw3-HAlzpqSxzLBwAAAVI"]
[Fri Feb 06 20:12:57.963660 2026] [:error] [pid 37019:tid 37036] [client 134.149.17.140:2820] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYXayQkAjqd3bcgYBrtcmAAAAg8"]
[Fri Feb 06 20:12:58.537998 2026] [:error] [pid 3477:tid 3482] [client 134.149.17.140:2976] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYXayrL0Hdh40C7HYgVlbQAAAMM"]
[Fri Feb 06 20:12:59.100525 2026] [:error] [pid 46432:tid 46441] [client 134.149.17.140:3003] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYXaywbwJwu_od0kZjMetAAAAkc"]
[Fri Feb 06 20:12:59.642677 2026] [:error] [pid 46432:tid 46437] [client 134.149.17.140:2953] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYXaywbwJwu_od0kZjMetQAAAkM"]
[Fri Feb 06 20:13:00.169966 2026] [:error] [pid 3513:tid 3528] [client 134.149.17.140:3055] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYXazDSw3-HAlzpqSxzLDgAAAU0"]
[Fri Feb 06 20:13:00.825710 2026] [:error] [pid 46432:tid 46452] [client 134.149.17.140:2980] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYXazAbwJwu_od0kZjMetwAAAlI"]
[Fri Feb 06 20:13:01.395012 2026] [:error] [pid 3477:tid 3492] [client 134.149.17.140:2915] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYXazbL0Hdh40C7HYgVlcAAAAM0"]
[Fri Feb 06 20:13:01.942287 2026] [:error] [pid 36857:tid 36880] [client 134.149.17.140:2975] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYXazZVQwfj7Kp4Dd0HomQAAAZU"]
[Fri Feb 06 20:13:02.540339 2026] [:error] [pid 46432:tid 46458] [client 134.149.17.140:2978] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYXazgbwJwu_od0kZjMeuAAAAlg"]
[Fri Feb 06 20:13:03.139757 2026] [:error] [pid 37019:tid 37038] [client 134.149.17.140:3058] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYXazwkAjqd3bcgYBrtcngAAAhE"]
[Fri Feb 06 20:13:03.780672 2026] [:error] [pid 3381:tid 3431] [client 134.149.17.140:2897] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYXazy81zqRg96ZREghgGAAAAFI"]
[Fri Feb 06 20:13:04.335017 2026] [:error] [pid 36857:tid 36867] [client 134.149.17.140:3001] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYXa0JVQwfj7Kp4Dd0HomwAAAYg"]
[Fri Feb 06 20:13:04.882999 2026] [:error] [pid 36928:tid 36946] [client 134.149.17.140:2923] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYXa0Js7fyU8D36r-OpodwAAAc4"]
[Fri Feb 06 20:13:05.425709 2026] [:error] [pid 46432:tid 46445] [client 134.149.17.140:3069] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYXa0QbwJwu_od0kZjMeuwAAAks"]
[Fri Feb 06 20:13:06.054815 2026] [:error] [pid 3477:tid 3494] [client 134.149.17.140:2956] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYXa0rL0Hdh40C7HYgVlcgAAAM8"]
[Fri Feb 06 20:13:06.718171 2026] [:error] [pid 3380:tid 3389] [client 134.149.17.140:2833] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYXa0hFAlUvBGSBK2jde3gAAAAU"]
[Fri Feb 06 20:13:07.278662 2026] [:error] [pid 36928:tid 36932] [client 134.149.17.140:2967] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYXa05s7fyU8D36r-OpoeQAAAcA"]
[Fri Feb 06 20:13:07.823047 2026] [:error] [pid 3380:tid 3394] [client 134.149.17.140:2888] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aYXa0xFAlUvBGSBK2jde3wAAAAo"]
[Fri Feb 06 20:13:08.369600 2026] [:error] [pid 3381:tid 3422] [client 134.149.17.140:2885] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aYXa1C81zqRg96ZREghgIAAAAEk"]
[Fri Feb 06 20:13:08.924782 2026] [:error] [pid 46432:tid 46443] [client 134.149.17.140:2905] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aYXa1AbwJwu_od0kZjMevgAAAkk"]
[Fri Feb 06 20:13:09.515471 2026] [:error] [pid 46432:tid 46457] [client 134.149.17.140:3005] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYXa1QbwJwu_od0kZjMevwAAAlc"]
[Fri Feb 06 20:13:10.126951 2026] [:error] [pid 36928:tid 36948] [client 134.149.17.140:2824] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYXa1ps7fyU8D36r-OpofQAAAdA"]
[Fri Feb 06 20:13:10.653250 2026] [:error] [pid 36857:tid 36867] [client 134.149.17.140:2921] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYXa1pVQwfj7Kp4Dd0HovwAAAYg"]
[Fri Feb 06 20:13:11.189932 2026] [:error] [pid 3477:tid 3481] [client 134.149.17.140:2881] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYXa17L0Hdh40C7HYgVldAAAAMI"]
[Fri Feb 06 20:13:11.849128 2026] [:error] [pid 36857:tid 36877] [client 134.149.17.140:2911] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYXa15VQwfj7Kp4Dd0HowwAAAZI"]
[Fri Feb 06 20:13:12.410338 2026] [:error] [pid 3477:tid 3488] [client 134.149.17.140:2961] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYXa2LL0Hdh40C7HYgVldQAAAMk"]
[Fri Feb 06 20:13:12.962369 2026] [:error] [pid 46432:tid 46456] [client 134.149.17.140:2890] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYXa2AbwJwu_od0kZjMexAAAAlY"]
[Fri Feb 06 20:13:13.529466 2026] [:error] [pid 15821:tid 15826] [client 134.149.17.140:3010] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYXa2XARQa67J4c772kCvQAAAQE"]
[Fri Feb 06 20:13:14.093796 2026] [:error] [pid 15821:tid 15827] [client 134.149.17.140:2929] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYXa2nARQa67J4c772kCvgAAAQI"]
[Fri Feb 06 20:13:14.669691 2026] [:error] [pid 46432:tid 46445] [client 134.149.17.140:3041] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXa2gbwJwu_od0kZjMexgAAAks"]
[Fri Feb 06 20:13:15.225945 2026] [:error] [pid 3477:tid 3491] [client 134.149.17.140:3019] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXa27L0Hdh40C7HYgVlegAAAMw"]
[Fri Feb 06 20:13:15.775141 2026] [:error] [pid 3381:tid 3429] [client 134.149.17.140:2928] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXa2y81zqRg96ZREghgNgAAAFA"]
[Fri Feb 06 20:13:16.558061 2026] [proxy_fcgi:error] [pid 3477:tid 3492] [client 134.149.17.140:2948] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:13:17.064855 2026] [proxy_fcgi:error] [pid 3477:tid 3483] [client 134.149.17.140:2948] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:13:18.087132 2026] [proxy_fcgi:error] [pid 3477:tid 3487] [client 134.149.17.140:2948] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:13:18.337581 2026] [:error] [pid 3477:tid 3495] [client 134.149.17.140:2948] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYXa3rL0Hdh40C7HYgVlhwAAANA"]
[Fri Feb 06 20:13:18.861403 2026] [proxy_fcgi:error] [pid 3381:tid 3437] [client 134.149.17.140:3071] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:13:19.675585 2026] [:error] [pid 3381:tid 3418] [client 134.149.17.140:3071] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/wp-includes//index.php"] [unique_id "aYXa3y81zqRg96ZREghgOwAAAEU"]
[Fri Feb 06 20:13:20.234253 2026] [:error] [pid 15821:tid 15843] [client 134.149.17.140:2931] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/wp-includes//index.php"] [unique_id "aYXa4HARQa67J4c772kCxAAAARI"]
[Fri Feb 06 20:13:20.772722 2026] [:error] [pid 15821:tid 15841] [client 134.149.17.140:3030] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/wp-includes//index.php"] [unique_id "aYXa4HARQa67J4c772kCxQAAARA"]
[Fri Feb 06 20:13:21.331004 2026] [:error] [pid 3381:tid 3417] [client 134.149.17.140:2971] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/wp-includes//index.php"] [unique_id "aYXa4S81zqRg96ZREghgPAAAAEQ"]
[Fri Feb 06 20:13:21.864737 2026] [:error] [pid 3380:tid 3399] [client 134.149.17.140:3002] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "aYXa4RFAlUvBGSBK2jde5gAAAA8"]
[Fri Feb 06 20:13:22.384229 2026] [:error] [pid 3382:tid 3456] [client 134.149.17.140:2996] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "aYXa4sIgU1HR0rhYrE9CtwAAAJA"]
[Fri Feb 06 20:13:22.922979 2026] [:error] [pid 36928:tid 36945] [client 134.149.17.140:3038] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "aYXa4ps7fyU8D36r-OpojQAAAc0"]
[Fri Feb 06 20:13:23.440693 2026] [:error] [pid 46432:tid 46435] [client 134.149.17.140:2886] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "aYXa4wbwJwu_od0kZjMe0wAAAkE"]
[Fri Feb 06 20:13:23.940404 2026] [:error] [pid 15821:tid 15831] [client 134.149.17.140:3048] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aYXa43ARQa67J4c772kCyQAAAQY"]
[Fri Feb 06 20:13:24.449254 2026] [:error] [pid 46432:tid 46454] [client 134.149.17.140:2901] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aYXa5AbwJwu_od0kZjMe1QAAAlQ"]
[Fri Feb 06 20:13:24.976049 2026] [:error] [pid 46432:tid 46439] [client 134.149.17.140:3063] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aYXa5AbwJwu_od0kZjMe1wAAAkU"]
[Fri Feb 06 20:13:25.509631 2026] [:error] [pid 3477:tid 3492] [client 134.149.17.140:2955] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aYXa5bL0Hdh40C7HYgVligAAAM0"]
[Fri Feb 06 20:13:26.033112 2026] [:error] [pid 36928:tid 36949] [client 134.149.17.140:2920] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYXa5ps7fyU8D36r-OpojgAAAdE"]
[Fri Feb 06 20:13:26.568337 2026] [:error] [pid 3382:tid 3445] [client 134.149.17.140:2938] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYXa5sIgU1HR0rhYrE9CugAAAIU"]
[Fri Feb 06 20:13:27.087089 2026] [:error] [pid 3381:tid 3431] [client 134.149.17.140:2964] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYXa5y81zqRg96ZREghgQgAAAFI"]
[Fri Feb 06 20:13:27.635134 2026] [:error] [pid 3477:tid 3490] [client 134.149.17.140:3029] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYXa57L0Hdh40C7HYgVljwAAAMs"]
[Fri Feb 06 20:13:28.177399 2026] [:error] [pid 3477:tid 3499] [client 134.149.17.140:2889] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYXa6LL0Hdh40C7HYgVlkAAAANQ"]
[Fri Feb 06 20:13:28.720428 2026] [:error] [pid 3382:tid 3460] [client 134.149.17.140:2979] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYXa6MIgU1HR0rhYrE9CuwAAAJQ"]
[Fri Feb 06 20:13:29.306833 2026] [:error] [pid 46432:tid 46443] [client 134.149.17.140:2940] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYXa6QbwJwu_od0kZjMe2wAAAkk"]
[Fri Feb 06 20:13:29.849425 2026] [:error] [pid 3477:tid 3488] [client 134.149.17.140:3026] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYXa6bL0Hdh40C7HYgVlkwAAAMk"]
[Fri Feb 06 20:13:30.396402 2026] [:error] [pid 15821:tid 15825] [client 134.149.17.140:2829] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYXa6nARQa67J4c772kCywAAAQA"]
[Fri Feb 06 20:13:30.973135 2026] [:error] [pid 3382:tid 3463] [client 134.149.17.140:2930] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYXa6sIgU1HR0rhYrE9CvwAAAJc"]
[Fri Feb 06 20:13:31.477816 2026] [:error] [pid 46432:tid 46436] [client 134.149.17.140:2895] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYXa6wbwJwu_od0kZjMe3AAAAkI"]
[Fri Feb 06 20:13:32.067938 2026] [:error] [pid 3382:tid 3464] [client 134.149.17.140:2892] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYXa7MIgU1HR0rhYrE9CxgAAAJg"]
[Fri Feb 06 20:13:32.588016 2026] [:error] [pid 3477:tid 3502] [client 134.149.17.140:2913] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aYXa7LL0Hdh40C7HYgVllAAAANc"]
[Fri Feb 06 20:13:33.111180 2026] [:error] [pid 3513:tid 3530] [client 134.149.17.140:2995] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYXa7TSw3-HAlzpqSxzLHQAAAU8"]
[Fri Feb 06 20:13:33.655903 2026] [:error] [pid 3382:tid 3448] [client 134.149.17.140:3046] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYXa7cIgU1HR0rhYrE9CywAAAIg"]
[Fri Feb 06 20:13:34.211615 2026] [:error] [pid 3513:tid 3518] [client 134.149.17.140:2907] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYXa7jSw3-HAlzpqSxzLHgAAAUM"]
[Fri Feb 06 20:13:34.755635 2026] [:error] [pid 36857:tid 36880] [client 134.149.17.140:3044] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYXa7pVQwfj7Kp4Dd0Ho0gAAAZU"]
[Fri Feb 06 20:13:35.271850 2026] [:error] [pid 46432:tid 46454] [client 134.149.17.140:2943] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYXa7wbwJwu_od0kZjMe3QAAAlQ"]
[Fri Feb 06 20:13:35.792375 2026] [:error] [pid 3381:tid 3433] [client 134.149.17.140:2847] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYXa7y81zqRg96ZREghgSwAAAFQ"]
[Fri Feb 06 20:13:36.316636 2026] [:error] [pid 3382:tid 3459] [client 134.149.17.140:3060] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYXa8MIgU1HR0rhYrE9CzAAAAJM"]
[Fri Feb 06 20:13:36.982636 2026] [:error] [pid 15821:tid 15838] [client 134.149.17.140:2819] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYXa8HARQa67J4c772kCzAAAAQ0"]
[Fri Feb 06 20:13:37.525318 2026] [:error] [pid 3382:tid 3464] [client 134.149.17.140:2894] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXa8cIgU1HR0rhYrE9CzwAAAJg"]
[Fri Feb 06 20:13:38.046314 2026] [:error] [pid 37019:tid 37045] [client 134.149.17.140:2908] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXa8gkAjqd3bcgYBrtcrwAAAhg"]
[Fri Feb 06 20:13:38.599080 2026] [:error] [pid 46432:tid 46442] [client 134.149.17.140:3036] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXa8gbwJwu_od0kZjMe4AAAAkg"]
[Fri Feb 06 20:13:39.136971 2026] [:error] [pid 46432:tid 46458] [client 134.149.17.140:2898] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXa8wbwJwu_od0kZjMe4QAAAlg"]
[Fri Feb 06 20:13:39.676221 2026] [:error] [pid 46432:tid 46455] [client 134.149.17.140:2927] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYXa8wbwJwu_od0kZjMe4wAAAlU"]
[Fri Feb 06 20:13:40.195866 2026] [:error] [pid 3382:tid 3440] [client 134.149.17.140:2755] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYXa9MIgU1HR0rhYrE9C0AAAAIA"]
[Fri Feb 06 20:13:40.729942 2026] [:error] [pid 46432:tid 46437] [client 134.149.17.140:2860] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYXa9AbwJwu_od0kZjMe6wAAAkM"]
[Fri Feb 06 20:13:41.266606 2026] [:error] [pid 3477:tid 3492] [client 134.149.17.140:3000] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYXa9bL0Hdh40C7HYgVlnQAAAM0"]
[Fri Feb 06 20:13:41.822856 2026] [:error] [pid 36928:tid 36951] [client 134.149.17.140:2902] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXa9Zs7fyU8D36r-OpolwAAAdM"]
[Fri Feb 06 20:13:42.364392 2026] [:error] [pid 3380:tid 3384] [client 134.149.17.140:3008] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXa9hFAlUvBGSBK2jde7wAAAAA"]
[Fri Feb 06 20:13:42.951581 2026] [:error] [pid 15821:tid 15840] [client 134.149.17.140:2770] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXa9nARQa67J4c772kC0QAAAQ8"]
[Fri Feb 06 20:13:43.466169 2026] [:error] [pid 3382:tid 3453] [client 134.149.17.140:2997] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXa98IgU1HR0rhYrE9C1AAAAI0"]
[Fri Feb 06 20:13:43.992626 2026] [:error] [pid 3477:tid 3483] [client 134.149.17.140:2966] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYXa97L0Hdh40C7HYgVloQAAAMQ"]
[Fri Feb 06 20:13:44.544234 2026] [:error] [pid 15821:tid 15848] [client 134.149.17.140:2893] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYXa-HARQa67J4c772kC1AAAARc"]
[Fri Feb 06 20:13:45.133465 2026] [:error] [pid 36857:tid 36860] [client 134.149.17.140:2984] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYXa-ZVQwfj7Kp4Dd0Ho2gAAAYE"]
[Fri Feb 06 20:13:45.676204 2026] [:error] [pid 3382:tid 3441] [client 134.149.17.140:2914] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYXa-cIgU1HR0rhYrE9C1QAAAIE"]
[Fri Feb 06 20:13:46.219326 2026] [:error] [pid 3382:tid 3447] [client 134.149.17.140:3022] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYXa-sIgU1HR0rhYrE9C1gAAAIc"]
[Fri Feb 06 20:13:46.754486 2026] [:error] [pid 3513:tid 3520] [client 134.149.17.140:2896] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYXa-jSw3-HAlzpqSxzLJAAAAUU"]
[Fri Feb 06 20:13:47.304743 2026] [:error] [pid 3380:tid 3405] [client 134.149.17.140:3057] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYXa-xFAlUvBGSBK2jde9gAAABU"]
[Fri Feb 06 20:13:47.840341 2026] [:error] [pid 46432:tid 46444] [client 134.149.17.140:2852] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYXa-wbwJwu_od0kZjMe_wAAAko"]
[Fri Feb 06 20:13:48.388281 2026] [:error] [pid 36928:tid 36947] [client 134.149.17.140:3004] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYXa_Js7fyU8D36r-OpomQAAAc8"]
[Fri Feb 06 20:13:48.890891 2026] [:error] [pid 36928:tid 36956] [client 134.149.17.140:2865] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYXa_Js7fyU8D36r-OpomgAAAdg"]
[Fri Feb 06 20:13:49.424289 2026] [:error] [pid 3381:tid 3416] [client 134.149.17.140:2972] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYXa_S81zqRg96ZREghgXQAAAEM"]
[Fri Feb 06 20:13:49.962858 2026] [:error] [pid 3380:tid 3402] [client 134.149.17.140:2987] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYXa_RFAlUvBGSBK2jdfBAAAABI"]
[Fri Feb 06 20:13:50.511729 2026] [:error] [pid 36857:tid 36868] [client 134.149.17.140:2937] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYXa_pVQwfj7Kp4Dd0Ho2wAAAYk"]
[Fri Feb 06 20:13:51.060877 2026] [:error] [pid 3381:tid 3429] [client 134.149.17.140:2804] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYXa_y81zqRg96ZREghgXgAAAFA"]
[Fri Feb 06 20:13:51.604475 2026] [:error] [pid 36857:tid 36877] [client 134.149.17.140:2842] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYXa_5VQwfj7Kp4Dd0Ho3AAAAZI"]
[Fri Feb 06 20:13:52.134332 2026] [:error] [pid 37019:tid 37036] [client 134.149.17.140:2936] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYXbAAkAjqd3bcgYBrtcugAAAg8"]
[Fri Feb 06 20:13:52.676060 2026] [:error] [pid 36857:tid 36866] [client 134.149.17.140:2861] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYXbAJVQwfj7Kp4Dd0Ho3gAAAYc"]
[Fri Feb 06 20:13:53.218261 2026] [:error] [pid 3380:tid 3396] [client 134.149.17.140:2904] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYXbARFAlUvBGSBK2jdfDAAAAAw"]
[Fri Feb 06 20:13:53.758751 2026] [:error] [pid 46432:tid 46449] [client 134.149.17.140:2834] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYXbAQbwJwu_od0kZjMfAwAAAk8"]
[Fri Feb 06 20:13:54.304634 2026] [:error] [pid 36857:tid 36871] [client 134.149.17.140:2776] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYXbApVQwfj7Kp4Dd0Ho3wAAAYw"]
[Fri Feb 06 20:13:54.852122 2026] [:error] [pid 3513:tid 3527] [client 134.149.17.140:2903] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYXbAjSw3-HAlzpqSxzLKQAAAUw"]
[Fri Feb 06 20:13:55.393387 2026] [:error] [pid 46432:tid 46448] [client 134.149.17.140:2983] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYXbAwbwJwu_od0kZjMfBQAAAk4"]
[Fri Feb 06 20:13:55.970795 2026] [:error] [pid 3477:tid 3490] [client 134.149.17.140:2857] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYXbA7L0Hdh40C7HYgVlrAAAAMs"]
[Fri Feb 06 20:13:56.505422 2026] [:error] [pid 36857:tid 36865] [client 134.149.17.140:2973] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYXbBJVQwfj7Kp4Dd0Ho4wAAAYY"]
[Fri Feb 06 20:13:57.055814 2026] [:error] [pid 36857:tid 36876] [client 134.149.17.140:2900] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYXbBZVQwfj7Kp4Dd0Ho5AAAAZE"]
[Fri Feb 06 20:13:57.584561 2026] [:error] [pid 3477:tid 3493] [client 134.149.17.140:2998] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYXbBbL0Hdh40C7HYgVlsAAAAM4"]
[Fri Feb 06 20:13:58.107043 2026] [:error] [pid 36857:tid 36870] [client 134.149.17.140:2939] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYXbBpVQwfj7Kp4Dd0Ho5gAAAYs"]
[Fri Feb 06 20:13:58.649177 2026] [:error] [pid 3381:tid 3430] [client 134.149.17.140:3027] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYXbBi81zqRg96ZREghgYAAAAFE"]
[Fri Feb 06 20:13:59.187647 2026] [:error] [pid 3382:tid 3449] [client 134.149.17.140:2823] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYXbB8IgU1HR0rhYrE9C2wAAAIk"]
[Fri Feb 06 20:13:59.737415 2026] [:error] [pid 3381:tid 3435] [client 134.149.17.140:2846] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYXbBy81zqRg96ZREghgYgAAAFY"]
[Fri Feb 06 20:14:00.286970 2026] [:error] [pid 36857:tid 36872] [client 134.149.17.140:2912] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYXbCJVQwfj7Kp4Dd0Ho5wAAAY0"]
[Fri Feb 06 20:14:00.881439 2026] [:error] [pid 3381:tid 3424] [client 134.149.17.140:2758] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYXbCC81zqRg96ZREghgYwAAAEs"]
[Fri Feb 06 20:14:01.483633 2026] [:error] [pid 3381:tid 3417] [client 134.149.17.140:2817] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYXbCS81zqRg96ZREghgZQAAAEQ"]
[Fri Feb 06 20:14:02.026596 2026] [:error] [pid 3381:tid 3425] [client 134.149.17.140:2843] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYXbCi81zqRg96ZREghgZgAAAEw"]
[Fri Feb 06 20:14:02.574630 2026] [:error] [pid 15821:tid 15845] [client 134.149.17.140:2837] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYXbCnARQa67J4c772kC3AAAARQ"]
[Fri Feb 06 20:14:03.115850 2026] [:error] [pid 3513:tid 3533] [client 134.149.17.140:2832] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYXbCzSw3-HAlzpqSxzLMAAAAVI"]
[Fri Feb 06 20:14:03.669994 2026] [:error] [pid 3477:tid 3496] [client 134.149.17.140:2830] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYXbC7L0Hdh40C7HYgVluQAAANE"]
[Fri Feb 06 20:14:04.205406 2026] [:error] [pid 3513:tid 3539] [client 134.149.17.140:2891] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYXbDDSw3-HAlzpqSxzLMQAAAVg"]
[Fri Feb 06 20:14:04.743005 2026] [:error] [pid 3477:tid 3502] [client 134.149.17.140:2847] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYXbDLL0Hdh40C7HYgVluwAAANc"]
[Fri Feb 06 20:14:05.275994 2026] [:error] [pid 36857:tid 36875] [client 134.149.17.140:2853] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYXbDZVQwfj7Kp4Dd0Ho7wAAAZA"]
[Fri Feb 06 20:14:05.800245 2026] [:error] [pid 36857:tid 36866] [client 134.149.17.140:2909] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYXbDZVQwfj7Kp4Dd0Ho8AAAAYc"]
[Fri Feb 06 20:14:06.323738 2026] [:error] [pid 3381:tid 3415] [client 134.149.17.140:2856] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYXbDi81zqRg96ZREghgaQAAAEI"]
[Fri Feb 06 20:14:06.860351 2026] [:error] [pid 36857:tid 36859] [client 134.149.17.140:2768] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYXbDpVQwfj7Kp4Dd0Ho8gAAAYA"]
[Fri Feb 06 20:14:07.414692 2026] [:error] [pid 3382:tid 3447] [client 134.149.17.140:2917] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYXbD8IgU1HR0rhYrE9C4gAAAIc"]
[Fri Feb 06 20:14:07.965017 2026] [:error] [pid 3382:tid 3456] [client 134.149.17.140:2941] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYXbD8IgU1HR0rhYrE9C5AAAAJA"]
[Fri Feb 06 20:14:08.499193 2026] [:error] [pid 36857:tid 36873] [client 134.149.17.140:3037] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYXbEJVQwfj7Kp4Dd0Ho9gAAAY4"]
[Fri Feb 06 20:14:09.052905 2026] [:error] [pid 15821:tid 15829] [client 134.149.17.140:2990] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYXbEXARQa67J4c772kC5QAAAQQ"]
[Fri Feb 06 20:14:09.596666 2026] [:error] [pid 36857:tid 36866] [client 134.149.17.140:2871] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYXbEZVQwfj7Kp4Dd0HpAAAAAYc"]
[Fri Feb 06 20:14:10.119785 2026] [:error] [pid 15821:tid 15845] [client 134.149.17.140:2970] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYXbEnARQa67J4c772kC5wAAARQ"]
[Fri Feb 06 20:14:10.665629 2026] [:error] [pid 3381:tid 3429] [client 134.149.17.140:2845] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYXbEi81zqRg96ZREghgbQAAAFA"]
[Fri Feb 06 20:14:11.203262 2026] [:error] [pid 3382:tid 3455] [client 134.149.17.140:2880] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYXbE8IgU1HR0rhYrE9C5QAAAI8"]
[Fri Feb 06 20:14:11.743476 2026] [:error] [pid 3382:tid 3443] [client 134.149.17.140:2840] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYXbE8IgU1HR0rhYrE9C5wAAAIM"]
[Fri Feb 06 20:14:12.283885 2026] [:error] [pid 3381:tid 3428] [client 134.149.17.140:2765] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYXbFC81zqRg96ZREghgcAAAAE8"]
[Fri Feb 06 20:14:12.816943 2026] [:error] [pid 3382:tid 3461] [client 134.149.17.140:2825] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYXbFMIgU1HR0rhYrE9C6AAAAJU"]
[Fri Feb 06 20:14:13.377703 2026] [:error] [pid 3477:tid 3500] [client 134.149.17.140:2767] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYXbFbL0Hdh40C7HYgVlxQAAANU"]
[Fri Feb 06 20:14:13.963414 2026] [:error] [pid 3380:tid 3399] [client 134.149.17.140:2839] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYXbFRFAlUvBGSBK2jdfEAAAAA8"]
[Fri Feb 06 20:14:14.520647 2026] [:error] [pid 3477:tid 3487] [client 134.149.17.140:2947] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYXbFrL0Hdh40C7HYgVlyAAAAMg"]
[Fri Feb 06 20:14:15.120146 2026] [:error] [pid 3382:tid 3459] [client 134.149.17.140:2811] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYXbF8IgU1HR0rhYrE9C6wAAAJM"]
[Fri Feb 06 20:14:15.678657 2026] [:error] [pid 3381:tid 3421] [client 134.149.17.140:2836] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYXbFy81zqRg96ZREghgcgAAAEg"]
[Fri Feb 06 20:14:16.216436 2026] [:error] [pid 3381:tid 3433] [client 134.149.17.140:2867] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYXbGC81zqRg96ZREghgcwAAAFQ"]
[Fri Feb 06 20:14:16.779669 2026] [:error] [pid 3381:tid 3436] [client 134.149.17.140:2758] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYXbGC81zqRg96ZREghgdgAAAFc"]
[Fri Feb 06 20:14:17.353242 2026] [:error] [pid 3477:tid 3492] [client 134.149.17.140:2866] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYXbGbL0Hdh40C7HYgVlzwAAAM0"]
[Fri Feb 06 20:14:17.954171 2026] [:error] [pid 3477:tid 3499] [client 134.149.17.140:2869] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYXbGbL0Hdh40C7HYgVl0AAAANQ"]
[Fri Feb 06 20:14:18.476041 2026] [:error] [pid 3477:tid 3498] [client 134.149.17.140:2882] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYXbGrL0Hdh40C7HYgVl0gAAANM"]
[Fri Feb 06 20:14:19.309033 2026] [proxy_fcgi:error] [pid 36857:tid 36869] [client 134.149.17.140:2844] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:14:19.865107 2026] [proxy_fcgi:error] [pid 36857:tid 36883] [client 134.149.17.140:2844] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:14:20.952057 2026] [proxy_fcgi:error] [pid 36857:tid 36862] [client 134.149.17.140:2844] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:14:21.227703 2026] [proxy_fcgi:error] [pid 36857:tid 36860] [client 134.149.17.140:2844] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:14:21.498869 2026] [proxy_fcgi:error] [pid 36857:tid 36873] [client 134.149.17.140:2844] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:14:21.771700 2026] [proxy_fcgi:error] [pid 36857:tid 36870] [client 134.149.17.140:2844] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:14:22.040015 2026] [:error] [pid 36857:tid 36878] [client 134.149.17.140:2844] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aYXbHpVQwfj7Kp4Dd0HpDgAAAZM"]
[Fri Feb 06 20:14:22.568689 2026] [:error] [pid 46432:tid 46447] [client 134.149.17.140:2826] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aYXbHgbwJwu_od0kZjMfDAAAAk0"]
[Fri Feb 06 20:14:23.109369 2026] [:error] [pid 36857:tid 36875] [client 134.149.17.140:2862] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aYXbH5VQwfj7Kp4Dd0HpEgAAAZA"]
[Fri Feb 06 20:14:23.683596 2026] [:error] [pid 36857:tid 36881] [client 134.149.17.140:2875] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-miiss.php.php"] [unique_id "aYXbH5VQwfj7Kp4Dd0HpFQAAAZY"]
[Fri Feb 06 20:14:24.236650 2026] [:error] [pid 3381:tid 3431] [client 134.149.17.140:2864] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ho/wpup.php"] [unique_id "aYXbIC81zqRg96ZREghgegAAAFI"]
[Fri Feb 06 20:14:24.781458 2026] [:error] [pid 3381:tid 3428] [client 134.149.17.140:2822] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ho/wpup.php"] [unique_id "aYXbIC81zqRg96ZREghgewAAAE8"]
[Fri Feb 06 20:14:25.338497 2026] [:error] [pid 3381:tid 3437] [client 134.149.17.140:2926] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ho/wpup.php"] [unique_id "aYXbIS81zqRg96ZREghgfwAAAFg"]
[Fri Feb 06 20:14:26.081513 2026] [:error] [pid 15821:tid 15829] [client 134.149.17.140:2759] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ho/wpup.php"] [unique_id "aYXbInARQa67J4c772kC8QAAAQQ"]
[Fri Feb 06 20:14:26.632144 2026] [:error] [pid 15821:tid 15840] [client 134.149.17.140:2797] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aYXbInARQa67J4c772kC9AAAAQ8"]
[Fri Feb 06 20:14:27.158272 2026] [:error] [pid 3381:tid 3413] [client 134.149.17.140:2942] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aYXbIy81zqRg96ZREghggAAAAEA"]
[Fri Feb 06 20:14:27.666985 2026] [:error] [pid 3382:tid 3447] [client 134.149.17.140:2733] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aYXbI8IgU1HR0rhYrE9C8AAAAIc"]
[Fri Feb 06 20:14:28.196639 2026] [:error] [pid 3382:tid 3442] [client 134.149.17.140:2910] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aYXbJMIgU1HR0rhYrE9C8QAAAII"]
[Fri Feb 06 20:14:28.742972 2026] [:error] [pid 15821:tid 15845] [client 134.149.17.140:2870] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aYXbJHARQa67J4c772kC_QAAARQ"]
[Fri Feb 06 20:14:29.296952 2026] [:error] [pid 3382:tid 3456] [client 134.149.17.140:2828] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aYXbJcIgU1HR0rhYrE9C9AAAAJA"]
[Fri Feb 06 20:14:29.868313 2026] [:error] [pid 3382:tid 3454] [client 134.149.17.140:2977] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aYXbJcIgU1HR0rhYrE9C9gAAAI4"]
[Fri Feb 06 20:14:30.395720 2026] [:error] [pid 3380:tid 3400] [client 134.149.17.140:2835] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filesss.php"] [unique_id "aYXbJhFAlUvBGSBK2jdfFQAAABA"]
[Fri Feb 06 20:14:30.998639 2026] [:error] [pid 36857:tid 36873] [client 134.149.17.140:2932] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYXbJpVQwfj7Kp4Dd0HpGwAAAY4"]
[Fri Feb 06 20:14:31.529714 2026] [:error] [pid 3382:tid 3458] [client 134.149.17.140:2818] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYXbJ8IgU1HR0rhYrE9C9wAAAJI"]
[Fri Feb 06 20:14:32.072917 2026] [:error] [pid 3382:tid 3459] [client 134.149.17.140:2922] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYXbKMIgU1HR0rhYrE9C-wAAAJM"]
[Fri Feb 06 20:14:32.630793 2026] [:error] [pid 36857:tid 36879] [client 134.149.17.140:2752] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYXbKJVQwfj7Kp4Dd0HpHQAAAZQ"]
[Fri Feb 06 20:14:33.172465 2026] [:error] [pid 15821:tid 15839] [client 134.149.17.140:2878] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXbKXARQa67J4c772kDAQAAAQ4"]
[Fri Feb 06 20:14:33.709728 2026] [:error] [pid 15821:tid 15834] [client 134.149.17.140:2796] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXbKXARQa67J4c772kDAgAAAQk"]
[Fri Feb 06 20:14:34.235931 2026] [:error] [pid 3382:tid 3454] [client 134.149.17.140:2841] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXbKsIgU1HR0rhYrE9DAwAAAI4"]
[Fri Feb 06 20:14:34.778945 2026] [:error] [pid 3477:tid 3496] [client 134.149.17.140:2827] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYXbKrL0Hdh40C7HYgVl2QAAANE"]
[Fri Feb 06 20:14:35.303120 2026] [:error] [pid 37019:tid 37036] [client 134.149.17.140:2781] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYXbKwkAjqd3bcgYBrtczAAAAg8"]
[Fri Feb 06 20:14:35.829580 2026] [:error] [pid 46432:tid 46438] [client 134.149.17.140:2992] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYXbKwbwJwu_od0kZjMfEQAAAkQ"]
[Fri Feb 06 20:14:36.366319 2026] [:error] [pid 37019:tid 37024] [client 134.149.17.140:2801] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYXbLAkAjqd3bcgYBrtczgAAAgM"]
[Fri Feb 06 20:14:36.920351 2026] [:error] [pid 15821:tid 15828] [client 134.149.17.140:2831] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYXbLHARQa67J4c772kDBAAAAQM"]
[Fri Feb 06 20:14:37.462944 2026] [:error] [pid 37019:tid 37034] [client 134.149.17.140:2726] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYXbLQkAjqd3bcgYBrtc1AAAAg0"]
[Fri Feb 06 20:14:37.998100 2026] [:error] [pid 3477:tid 3492] [client 134.149.17.140:2988] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYXbLbL0Hdh40C7HYgVl3gAAAM0"]
[Fri Feb 06 20:14:38.536255 2026] [:error] [pid 3382:tid 3453] [client 134.149.17.140:2772] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYXbLsIgU1HR0rhYrE9DBwAAAI0"]
[Fri Feb 06 20:14:39.055583 2026] [:error] [pid 3513:tid 3529] [client 134.149.17.140:2850] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYXbLzSw3-HAlzpqSxzLRgAAAU4"]
[Fri Feb 06 20:14:39.623714 2026] [:error] [pid 3513:tid 3538] [client 134.149.17.140:2934] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYXbLzSw3-HAlzpqSxzLSAAAAVc"]
[Fri Feb 06 20:14:40.158872 2026] [:error] [pid 3513:tid 3527] [client 134.149.17.140:2925] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYXbMDSw3-HAlzpqSxzLSgAAAUw"]
[Fri Feb 06 20:14:40.679046 2026] [:error] [pid 3513:tid 3530] [client 134.149.17.140:2919] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYXbMDSw3-HAlzpqSxzLTQAAAU8"]
[Fri Feb 06 20:14:41.203783 2026] [:error] [pid 3381:tid 3419] [client 134.149.17.140:2756] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYXbMS81zqRg96ZREghgggAAAEY"]
[Fri Feb 06 20:14:41.777179 2026] [:error] [pid 46432:tid 46441] [client 134.149.17.140:2873] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYXbMQbwJwu_od0kZjMfFAAAAkc"]
[Fri Feb 06 20:14:42.302879 2026] [:error] [pid 46432:tid 46442] [client 134.149.17.140:2924] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYXbMgbwJwu_od0kZjMfFwAAAkg"]
[Fri Feb 06 20:14:42.843931 2026] [:error] [pid 3381:tid 3425] [client 134.149.17.140:2738] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYXbMi81zqRg96ZREghggwAAAEw"]
[Fri Feb 06 20:14:43.391797 2026] [:error] [pid 3477:tid 3503] [client 134.149.17.140:2821] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYXbM7L0Hdh40C7HYgVl4QAAANg"]
[Fri Feb 06 20:14:43.955195 2026] [:error] [pid 15821:tid 15834] [client 134.149.17.140:2775] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYXbM3ARQa67J4c772kDCwAAAQk"]
[Fri Feb 06 20:14:44.495141 2026] [:error] [pid 3381:tid 3429] [client 134.149.17.140:3025] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYXbNC81zqRg96ZREghghwAAAFA"]
[Fri Feb 06 20:14:45.052694 2026] [:error] [pid 3477:tid 3501] [client 134.149.17.140:2982] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYXbNbL0Hdh40C7HYgVl5QAAANY"]
[Fri Feb 06 20:14:45.593282 2026] [:error] [pid 15821:tid 15828] [client 134.149.17.140:2698] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYXbNXARQa67J4c772kDDgAAAQM"]
[Fri Feb 06 20:14:46.117194 2026] [:error] [pid 15821:tid 15840] [client 134.149.17.140:2762] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYXbNnARQa67J4c772kDDwAAAQ8"]
[Fri Feb 06 20:14:46.647667 2026] [:error] [pid 37019:tid 37040] [client 134.149.17.140:2851] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYXbNgkAjqd3bcgYBrtc1wAAAhM"]
[Fri Feb 06 20:14:47.188217 2026] [:error] [pid 37019:tid 37041] [client 134.149.17.140:2805] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYXbNwkAjqd3bcgYBrtc2wAAAhQ"]
[Fri Feb 06 20:14:47.801044 2026] [:error] [pid 3477:tid 3498] [client 134.149.17.140:2567] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYXbN7L0Hdh40C7HYgVl6wAAANM"]
[Fri Feb 06 20:14:48.359562 2026] [:error] [pid 3477:tid 3492] [client 134.149.17.140:2778] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYXbOLL0Hdh40C7HYgVl7AAAAM0"]
[Fri Feb 06 20:14:48.932152 2026] [:error] [pid 3477:tid 3494] [client 134.149.17.140:2855] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYXbOLL0Hdh40C7HYgVl7wAAAM8"]
[Fri Feb 06 20:14:49.456626 2026] [:error] [pid 3477:tid 3487] [client 134.149.17.140:2849] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYXbObL0Hdh40C7HYgVl8QAAAMg"]
[Fri Feb 06 20:14:49.983204 2026] [:error] [pid 3380:tid 3405] [client 134.149.17.140:2788] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYXbORFAlUvBGSBK2jdfIQAAABU"]
[Fri Feb 06 20:14:50.549297 2026] [:error] [pid 46432:tid 46434] [client 134.149.17.140:2848] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYXbOgbwJwu_od0kZjMfGAAAAkA"]
[Fri Feb 06 20:14:51.120072 2026] [:error] [pid 3381:tid 3422] [client 134.149.17.140:2812] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYXbOy81zqRg96ZREghgkwAAAEk"]
[Fri Feb 06 20:14:51.653628 2026] [:error] [pid 3380:tid 3397] [client 134.149.17.140:2868] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYXbOxFAlUvBGSBK2jdfJAAAAA0"]
[Fri Feb 06 20:14:52.175015 2026] [:error] [pid 3380:tid 3398] [client 134.149.17.140:2879] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYXbPBFAlUvBGSBK2jdfJgAAAA4"]
[Fri Feb 06 20:14:52.723631 2026] [:error] [pid 46432:tid 46450] [client 134.149.17.140:2792] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYXbPAbwJwu_od0kZjMfGwAAAlA"]
[Fri Feb 06 20:14:53.258981 2026] [:error] [pid 3381:tid 3416] [client 134.149.17.140:2709] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYXbPS81zqRg96ZREghglQAAAEM"]
[Fri Feb 06 20:14:53.803288 2026] [:error] [pid 3513:tid 3516] [client 134.149.17.140:2624] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYXbPTSw3-HAlzpqSxzLTgAAAUE"]
[Fri Feb 06 20:14:54.341187 2026] [:error] [pid 3477:tid 3486] [client 134.149.17.140:2693] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYXbPrL0Hdh40C7HYgVl9wAAAMc"]
[Fri Feb 06 20:14:54.880919 2026] [:error] [pid 36928:tid 36944] [client 134.149.17.140:2906] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYXbPps7fyU8D36r-OporwAAAcw"]
[Fri Feb 06 20:14:55.397619 2026] [:error] [pid 36928:tid 36952] [client 134.149.17.140:2813] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYXbP5s7fyU8D36r-OposQAAAdQ"]
[Fri Feb 06 20:14:55.916230 2026] [:error] [pid 3382:tid 3442] [client 134.149.17.140:2753] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYXbP8IgU1HR0rhYrE9DEAAAAII"]
[Fri Feb 06 20:14:56.468888 2026] [:error] [pid 3382:tid 3445] [client 134.149.17.140:2803] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYXbQMIgU1HR0rhYrE9DEQAAAIU"]
[Fri Feb 06 20:14:57.008222 2026] [:error] [pid 36857:tid 36882] [client 134.149.17.140:2713] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYXbQZVQwfj7Kp4Dd0HpKAAAAZc"]
[Fri Feb 06 20:14:57.548959 2026] [:error] [pid 3477:tid 3501] [client 134.149.17.140:2688] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYXbQbL0Hdh40C7HYgVl-gAAANY"]
[Fri Feb 06 20:14:58.099833 2026] [:error] [pid 46432:tid 46442] [client 134.149.17.140:2799] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYXbQgbwJwu_od0kZjMfIQAAAkg"]
[Fri Feb 06 20:14:58.685778 2026] [:error] [pid 3382:tid 3450] [client 134.149.17.140:2760] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYXbQsIgU1HR0rhYrE9DEwAAAIo"]
[Fri Feb 06 20:14:59.226524 2026] [:error] [pid 46432:tid 46451] [client 134.149.17.140:2777] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYXbQwbwJwu_od0kZjMfIgAAAlE"]
[Fri Feb 06 20:14:59.799851 2026] [:error] [pid 46432:tid 46455] [client 134.149.17.140:2858] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYXbQwbwJwu_od0kZjMfIwAAAlU"]
[Fri Feb 06 20:15:00.354035 2026] [:error] [pid 36928:tid 36933] [client 134.149.17.140:2784] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYXbRJs7fyU8D36r-OposgAAAcE"]
[Fri Feb 06 20:15:00.917275 2026] [:error] [pid 3477:tid 3498] [client 134.149.17.140:2806] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYXbRLL0Hdh40C7HYgVl_gAAANM"]
[Fri Feb 06 20:15:01.460222 2026] [:error] [pid 46432:tid 46456] [client 134.149.17.140:2729] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXbRQbwJwu_od0kZjMfJQAAAlY"]
[Fri Feb 06 20:15:02.011853 2026] [:error] [pid 3477:tid 3500] [client 134.149.17.140:2918] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXbRrL0Hdh40C7HYgVmAAAAANU"]
[Fri Feb 06 20:15:02.556909 2026] [:error] [pid 46432:tid 46434] [client 134.149.17.140:2872] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXbRgbwJwu_od0kZjMfJwAAAkA"]
[Fri Feb 06 20:15:03.082895 2026] [:error] [pid 3382:tid 3462] [client 134.149.17.140:2916] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYXbR8IgU1HR0rhYrE9DGQAAAJY"]
[Fri Feb 06 20:15:03.611725 2026] [:error] [pid 3381:tid 3420] [client 134.149.17.140:2695] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYXbRy81zqRg96ZREghgnAAAAEc"]
[Fri Feb 06 20:15:04.146372 2026] [:error] [pid 3382:tid 3446] [client 134.149.17.140:2815] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYXbSMIgU1HR0rhYrE9DGgAAAIY"]
[Fri Feb 06 20:15:04.753662 2026] [:error] [pid 15821:tid 15846] [client 134.149.17.140:2874] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYXbSHARQa67J4c772kDFwAAARU"]
[Fri Feb 06 20:15:05.293518 2026] [:error] [pid 3477:tid 3497] [client 134.149.17.140:2854] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYXbSbL0Hdh40C7HYgVmBAAAANI"]
[Fri Feb 06 20:15:05.861853 2026] [:error] [pid 3513:tid 3515] [client 134.149.17.140:2629] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYXbSTSw3-HAlzpqSxzLUwAAAUA"]
[Fri Feb 06 20:15:06.403258 2026] [:error] [pid 3382:tid 3442] [client 134.149.17.140:2761] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYXbSsIgU1HR0rhYrE9DIAAAAII"]
[Fri Feb 06 20:15:06.923626 2026] [:error] [pid 36857:tid 36874] [client 134.149.17.140:2800] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYXbSpVQwfj7Kp4Dd0HpKwAAAY8"]
[Fri Feb 06 20:15:07.459998 2026] [:error] [pid 3382:tid 3450] [client 134.149.17.140:2795] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYXbS8IgU1HR0rhYrE9DIwAAAIo"]
[Fri Feb 06 20:15:07.981420 2026] [:error] [pid 3382:tid 3443] [client 134.149.17.140:2689] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYXbS8IgU1HR0rhYrE9DJQAAAIM"]
[Fri Feb 06 20:15:08.517518 2026] [:error] [pid 3382:tid 3463] [client 134.149.17.140:2757] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYXbTMIgU1HR0rhYrE9DKAAAAJc"]
[Fri Feb 06 20:15:09.052766 2026] [:error] [pid 3477:tid 3484] [client 134.149.17.140:2802] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYXbTbL0Hdh40C7HYgVmCAAAAMU"]
[Fri Feb 06 20:15:09.579262 2026] [:error] [pid 36928:tid 36951] [client 134.149.17.140:2876] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYXbTZs7fyU8D36r-OpotAAAAdM"]
[Fri Feb 06 20:15:10.083899 2026] [:error] [pid 15821:tid 15843] [client 134.149.17.140:2807] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYXbTnARQa67J4c772kDHAAAARI"]
[Fri Feb 06 20:15:10.593482 2026] [:error] [pid 3381:tid 3413] [client 134.149.17.140:2785] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYXbTi81zqRg96ZREghgngAAAEA"]
[Fri Feb 06 20:15:11.118950 2026] [:error] [pid 15821:tid 15842] [client 134.149.17.140:2791] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYXbT3ARQa67J4c772kDHwAAARE"]
[Fri Feb 06 20:15:11.656564 2026] [:error] [pid 36857:tid 36870] [client 134.149.17.140:2714] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYXbT5VQwfj7Kp4Dd0HpLwAAAYs"]
[Fri Feb 06 20:15:12.196312 2026] [:error] [pid 3381:tid 3425] [client 134.149.17.140:2980] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYXbUC81zqRg96ZREghgogAAAEw"]
[Fri Feb 06 20:15:12.754472 2026] [:error] [pid 36928:tid 36932] [client 134.149.17.140:2741] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYXbUJs7fyU8D36r-OpotQAAAcA"]
[Fri Feb 06 20:15:13.294342 2026] [:error] [pid 36928:tid 36948] [client 134.149.17.140:2877] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYXbUZs7fyU8D36r-OpotgAAAdA"]
[Fri Feb 06 20:15:13.854032 2026] [:error] [pid 3382:tid 3463] [client 134.149.17.140:2810] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYXbUcIgU1HR0rhYrE9DOAAAAJc"]
[Fri Feb 06 20:15:14.423179 2026] [:error] [pid 3477:tid 3503] [client 134.149.17.140:2746] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYXbUrL0Hdh40C7HYgVmDQAAANg"]
[Fri Feb 06 20:15:14.946171 2026] [:error] [pid 36928:tid 36945] [client 134.149.17.140:2780] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYXbUps7fyU8D36r-OpougAAAc0"]
[Fri Feb 06 20:15:15.499175 2026] [:error] [pid 36857:tid 36882] [client 134.149.17.140:2707] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYXbU5VQwfj7Kp4Dd0HpMwAAAZc"]
[Fri Feb 06 20:15:16.050870 2026] [:error] [pid 3382:tid 3453] [client 134.149.17.140:2706] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYXbVMIgU1HR0rhYrE9DPgAAAI0"]
[Fri Feb 06 20:15:16.557793 2026] [:error] [pid 36928:tid 36949] [client 134.149.17.140:2749] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYXbVJs7fyU8D36r-OpouwAAAdE"]
[Fri Feb 06 20:15:17.080541 2026] [:error] [pid 3382:tid 3463] [client 134.149.17.140:2766] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYXbVcIgU1HR0rhYrE9DQgAAAJc"]
[Fri Feb 06 20:15:17.624679 2026] [:error] [pid 3380:tid 3391] [client 134.149.17.140:2697] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYXbVRFAlUvBGSBK2jdfLAAAAAc"]
[Fri Feb 06 20:15:18.161565 2026] [:error] [pid 3380:tid 3396] [client 134.149.17.140:2935] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYXbVhFAlUvBGSBK2jdfLQAAAAw"]
[Fri Feb 06 20:15:18.680324 2026] [:error] [pid 37019:tid 37029] [client 134.149.17.140:2691] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYXbVgkAjqd3bcgYBrtc5QAAAgg"]
[Fri Feb 06 20:15:19.200026 2026] [:error] [pid 3477:tid 3488] [client 134.149.17.140:2763] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYXbV7L0Hdh40C7HYgVmEQAAAMk"]
[Fri Feb 06 20:15:19.737045 2026] [:error] [pid 37019:tid 37032] [client 134.149.17.140:2722] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYXbVwkAjqd3bcgYBrtc5gAAAgs"]
[Fri Feb 06 20:15:20.282575 2026] [:error] [pid 46432:tid 46446] [client 134.149.17.140:2754] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYXbWAbwJwu_od0kZjMfNgAAAkw"]
[Fri Feb 06 20:15:20.844861 2026] [:error] [pid 3513:tid 3537] [client 134.149.17.140:2715] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aYXbWDSw3-HAlzpqSxzLVwAAAVY"]
[Fri Feb 06 20:15:22.625865 2026] [proxy_fcgi:error] [pid 3380:tid 3394] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:22.897481 2026] [proxy_fcgi:error] [pid 3380:tid 3393] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:23.169858 2026] [proxy_fcgi:error] [pid 3380:tid 3402] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:23.440809 2026] [proxy_fcgi:error] [pid 3380:tid 3408] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:23.982323 2026] [proxy_fcgi:error] [pid 3380:tid 3403] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:24.523364 2026] [proxy_fcgi:error] [pid 3380:tid 3387] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:24.793774 2026] [proxy_fcgi:error] [pid 3380:tid 3406] [client 134.149.17.140:2794] AH01071: Got error 'Primary script unknown'
[Fri Feb 06 20:15:25.065834 2026] [:error] [pid 3380:tid 3391] [client 134.149.17.140:2794] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYXbXRFAlUvBGSBK2jdfQAAAAAc"]
[Fri Feb 06 20:15:25.602531 2026] [:error] [pid 36928:tid 36952] [client 134.149.17.140:2989] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYXbXZs7fyU8D36r-OpovgAAAdQ"]
[Fri Feb 06 20:15:26.157528 2026] [:error] [pid 3513:tid 3533] [client 134.149.17.140:2787] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYXbXjSw3-HAlzpqSxzLXAAAAVI"]
[Fri Feb 06 20:15:26.688579 2026] [:error] [pid 15821:tid 15842] [client 134.149.17.140:2731] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aYXbXnARQa67J4c772kDKgAAARE"]
[Fri Feb 06 20:15:27.193588 2026] [:error] [pid 37019:tid 37031] [client 134.149.17.140:2720] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aYXbXwkAjqd3bcgYBrtc7QAAAgo"]
[Fri Feb 06 20:15:27.736861 2026] [:error] [pid 3513:tid 3517] [client 134.149.17.140:2712] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aYXbXzSw3-HAlzpqSxzLXwAAAUI"]
[Fri Feb 06 20:15:28.318131 2026] [:error] [pid 36928:tid 36951] [client 134.149.17.140:2798] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aYXbYJs7fyU8D36r-OpowwAAAdM"]
[Fri Feb 06 20:15:28.858159 2026] [:error] [pid 3381:tid 3424] [client 134.149.17.140:2724] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v2.php"] [unique_id "aYXbYC81zqRg96ZREghgrgAAAEs"]
[Fri Feb 06 20:15:29.478914 2026] [:error] [pid 3382:tid 3451] [client 134.149.17.140:2790] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYXbYcIgU1HR0rhYrE9DUAAAAIs"]
[Fri Feb 06 20:15:30.060654 2026] [:error] [pid 36857:tid 36871] [client 134.149.17.140:2719] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYXbYpVQwfj7Kp4Dd0HpPAAAAYw"]
[Fri Feb 06 20:15:30.656770 2026] [:error] [pid 3380:tid 3388] [client 134.149.17.140:2702] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYXbYhFAlUvBGSBK2jdfQQAAAAQ"]
[Fri Feb 06 20:15:31.201067 2026] [:error] [pid 3382:tid 3458] [client 134.149.17.140:2658] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aYXbY8IgU1HR0rhYrE9DUQAAAJI"]
[Fri Feb 06 20:15:31.755045 2026] [:error] [pid 3382:tid 3457] [client 134.149.17.140:2701] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aYXbY8IgU1HR0rhYrE9DUgAAAJE"]
[Fri Feb 06 20:15:32.291691 2026] [:error] [pid 3381:tid 3415] [client 134.149.17.140:2816] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aYXbZC81zqRg96ZREghguAAAAEI"]
[Fri Feb 06 20:15:32.865401 2026] [:error] [pid 3381:tid 3421] [client 134.149.17.140:3034] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aYXbZC81zqRg96ZREghgvQAAAEg"]
[Fri Feb 06 20:15:33.411607 2026] [:error] [pid 3477:tid 3485] [client 134.149.17.140:2646] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aYXbZbL0Hdh40C7HYgVmGwAAAMY"]
[Fri Feb 06 20:15:33.947480 2026] [:error] [pid 36857:tid 36859] [client 134.149.17.140:2764] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.cache/x.php"] [unique_id "aYXbZZVQwfj7Kp4Dd0HpQAAAAYA"]
[Fri Feb 06 20:15:34.496284 2026] [:error] [pid 3380:tid 3392] [client 134.149.17.140:2710] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.cache/x.php"] [unique_id "aYXbZhFAlUvBGSBK2jdfRQAAAAg"]
[Fri Feb 06 20:15:35.063756 2026] [:error] [pid 3382:tid 3452] [client 134.149.17.140:2718] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.cache/x.php"] [unique_id "aYXbZ8IgU1HR0rhYrE9DVgAAAIw"]
[Fri Feb 06 20:15:35.656062 2026] [:error] [pid 3381:tid 3422] [client 134.149.17.140:2789] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.cache/x.php"] [unique_id "aYXbZy81zqRg96ZREghgwQAAAEk"]
[Fri Feb 06 20:15:36.189375 2026] [:error] [pid 3380:tid 3384] [client 134.149.17.140:2774] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYXbaBFAlUvBGSBK2jdfSQAAAAA"]
[Fri Feb 06 20:15:36.730975 2026] [:error] [pid 3381:tid 3418] [client 134.149.17.140:2739] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYXbaC81zqRg96ZREghgxgAAAEU"]
[Fri Feb 06 20:15:37.268169 2026] [:error] [pid 46432:tid 46449] [client 134.149.17.140:2639] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYXbaQbwJwu_od0kZjMfQwAAAk8"]
[Fri Feb 06 20:15:37.808464 2026] [:error] [pid 46432:tid 46458] [client 134.149.17.140:2814] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYXbaQbwJwu_od0kZjMfRgAAAlg"]
[Fri Feb 06 20:15:38.332976 2026] [:error] [pid 3382:tid 3463] [client 134.149.17.140:2704] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYXbasIgU1HR0rhYrE9DWQAAAJc"]
[Fri Feb 06 20:15:38.879995 2026] [:error] [pid 3380:tid 3400] [client 134.149.17.140:2637] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYXbahFAlUvBGSBK2jdfTQAAABA"]
[Fri Feb 06 20:15:39.426726 2026] [:error] [pid 15821:tid 15832] [client 134.149.17.140:2745] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYXba3ARQa67J4c772kDNQAAAQc"]
[Fri Feb 06 20:15:39.965356 2026] [:error] [pid 36857:tid 36878] [client 134.149.17.140:2728] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYXba5VQwfj7Kp4Dd0HpRwAAAZM"]
[Fri Feb 06 20:15:40.570295 2026] [:error] [pid 36857:tid 36871] [client 134.149.17.140:2690] [client 134.149.17.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYXbbJVQwfj7Kp4Dd0HpSQAAAYw"]
[Fri Feb 06 20:15:41.111281 2026] [:error] [pid 36857:tid 36868] [client 134.149.17.140:2782] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYXbbZVQwfj7Kp4Dd0HpSwAAAYk"]
[Fri Feb 06 20:15:41.676820 2026] [:error] [pid 36857:tid 36869] [client 134.149.17.140:2653] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYXbbZVQwfj7Kp4Dd0HpTQAAAYo"]
[Fri Feb 06 20:15:42.220990 2026] [:error] [pid 36857:tid 36860] [client 134.149.17.140:2721] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYXbbpVQwfj7Kp4Dd0HpTgAAAYE"]
[Fri Feb 06 20:15:42.780656 2026] [:error] [pid 3380:tid 3395] [client 134.149.17.140:2748] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYXbbhFAlUvBGSBK2jdfTwAAAAs"]
[Fri Feb 06 20:15:43.368390 2026] [:error] [pid 36857:tid 36876] [client 134.149.17.140:2651] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYXbb5VQwfj7Kp4Dd0HpTwAAAZE"]
[Fri Feb 06 20:15:43.939694 2026] [:error] [pid 46432:tid 46453] [client 134.149.17.140:2838] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYXbbwbwJwu_od0kZjMfYwAAAlM"]
[Fri Feb 06 20:15:44.556814 2026] [:error] [pid 37019:tid 37036] [client 134.149.17.140:2647] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYXbcAkAjqd3bcgYBrtc-gAAAg8"]
[Fri Feb 06 20:15:45.197013 2026] [:error] [pid 36857:tid 36870] [client 134.149.17.140:2743] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYXbcZVQwfj7Kp4Dd0HpUQAAAYs"]
[Fri Feb 06 20:15:45.830062 2026] [:error] [pid 3382:tid 3443] [client 134.149.17.140:2700] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXbccIgU1HR0rhYrE9DdAAAAIM"]
[Fri Feb 06 20:15:46.385434 2026] [:error] [pid 36857:tid 36878] [client 134.149.17.140:3006] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXbcpVQwfj7Kp4Dd0HpVQAAAZM"]
[Fri Feb 06 20:15:46.987336 2026] [:error] [pid 15821:tid 15837] [client 134.149.17.140:2769] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXbcnARQa67J4c772kDPAAAAQw"]
[Fri Feb 06 20:15:47.525696 2026] [:error] [pid 37019:tid 37045] [client 134.149.17.140:2783] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYXbcwkAjqd3bcgYBrtc_wAAAhg"]
[Fri Feb 06 20:15:48.095411 2026] [:error] [pid 37019:tid 37032] [client 134.149.17.140:2859] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYXbdAkAjqd3bcgYBrtdAAAAAgs"]
[Fri Feb 06 20:15:48.653470 2026] [:error] [pid 15821:tid 15848] [client 134.149.17.140:2681] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYXbdHARQa67J4c772kDPQAAARc"]
[Fri Feb 06 20:15:49.189584 2026] [:error] [pid 3381:tid 3424] [client 134.149.17.140:2809] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYXbdS81zqRg96ZREghg1gAAAEs"]
[Fri Feb 06 20:15:49.743471 2026] [:error] [pid 3513:tid 3520] [client 134.149.17.140:2672] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYXbdTSw3-HAlzpqSxzLZgAAAUU"]
[Fri Feb 06 20:15:50.303412 2026] [:error] [pid 3381:tid 3435] [client 134.149.17.140:2732] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYXbdi81zqRg96ZREghg2QAAAFY"]
[Fri Feb 06 20:15:50.864028 2026] [:error] [pid 36928:tid 36956] [client 134.149.17.140:2703] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYXbdps7fyU8D36r-Opo0gAAAdg"]
[Fri Feb 06 20:15:51.407795 2026] [:error] [pid 15821:tid 15841] [client 134.149.17.140:2572] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYXbd3ARQa67J4c772kDPwAAARA"]
[Fri Feb 06 20:15:51.983801 2026] [:error] [pid 36928:tid 36939] [client 134.149.17.140:2708] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYXbd5s7fyU8D36r-Opo0wAAAcc"]
[Fri Feb 06 20:15:52.511835 2026] [:error] [pid 15821:tid 15847] [client 134.149.17.140:2694] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYXbeHARQa67J4c772kDQQAAARY"]
[Fri Feb 06 20:15:53.028851 2026] [:error] [pid 3381:tid 3415] [client 134.149.17.140:2730] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYXbeS81zqRg96ZREghg2wAAAEI"]
[Fri Feb 06 20:15:53.563793 2026] [:error] [pid 3382:tid 3456] [client 134.149.17.140:2699] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYXbecIgU1HR0rhYrE9DeAAAAJA"]
[Fri Feb 06 20:15:54.081226 2026] [:error] [pid 3477:tid 3503] [client 134.149.17.140:2636] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYXberL0Hdh40C7HYgVmLgAAANg"]
[Fri Feb 06 20:15:54.598949 2026] [:error] [pid 37019:tid 37021] [client 134.149.17.140:2779] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYXbegkAjqd3bcgYBrtdBQAAAgA"]
[Fri Feb 06 20:15:55.118351 2026] [:error] [pid 36857:tid 36859] [client 134.149.17.140:2705] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYXbe5VQwfj7Kp4Dd0HpWwAAAYA"]
[Fri Feb 06 20:15:55.639762 2026] [:error] [pid 36928:tid 36947] [client 134.149.17.140:2645] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYXbe5s7fyU8D36r-Opo1QAAAc8"]
[Fri Feb 06 20:15:56.180030 2026] [:error] [pid 15821:tid 15836] [client 134.149.17.140:2615] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYXbfHARQa67J4c772kDQwAAAQs"]
[Fri Feb 06 20:15:56.699405 2026] [:error] [pid 3380:tid 3403] [client 134.149.17.140:2924] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYXbfBFAlUvBGSBK2jdfVAAAABM"]
[Fri Feb 06 20:15:57.241406 2026] [:error] [pid 3382:tid 3448] [client 134.149.17.140:2664] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYXbfcIgU1HR0rhYrE9DfgAAAIg"]
[Fri Feb 06 20:15:57.795869 2026] [:error] [pid 3477:tid 3500] [client 134.149.17.140:2562] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYXbfbL0Hdh40C7HYgVmNQAAANU"]
[Fri Feb 06 20:15:58.354211 2026] [:error] [pid 3381:tid 3430] [client 134.149.17.140:2627] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYXbfi81zqRg96ZREghg3wAAAFE"]
[Fri Feb 06 20:15:58.913585 2026] [:error] [pid 3381:tid 3436] [client 134.149.17.140:2632] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYXbfi81zqRg96ZREghg4QAAAFc"]
[Fri Feb 06 20:15:59.467053 2026] [:error] [pid 37019:tid 37031] [client 134.149.17.140:2643] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYXbfwkAjqd3bcgYBrtdBwAAAgo"]
[Fri Feb 06 20:16:00.012655 2026] [:error] [pid 3380:tid 3401] [client 134.149.17.140:2771] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYXbgBFAlUvBGSBK2jdfVgAAABE"]
[Fri Feb 06 20:16:00.564432 2026] [:error] [pid 3513:tid 3519] [client 134.149.17.140:2673] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYXbgDSw3-HAlzpqSxzLcAAAAUQ"]
[Fri Feb 06 20:16:01.113010 2026] [:error] [pid 15821:tid 15835] [client 134.149.17.140:2644] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYXbgXARQa67J4c772kDSQAAAQo"]
[Fri Feb 06 20:16:01.647645 2026] [:error] [pid 3477:tid 3502] [client 134.149.17.140:2808] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYXbgbL0Hdh40C7HYgVmPgAAANc"]
[Fri Feb 06 20:16:02.182706 2026] [:error] [pid 36928:tid 36950] [client 134.149.17.140:2747] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYXbgps7fyU8D36r-Opo2AAAAdI"]
[Fri Feb 06 20:16:02.717466 2026] [:error] [pid 3381:tid 3420] [client 134.149.17.140:2863] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYXbgi81zqRg96ZREghg6AAAAEc"]
[Fri Feb 06 20:16:03.254332 2026] [:error] [pid 36928:tid 36934] [client 134.149.17.140:2634] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYXbg5s7fyU8D36r-Opo2QAAAcI"]
[Fri Feb 06 20:16:03.840372 2026] [:error] [pid 3381:tid 3435] [client 134.149.17.140:2737] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYXbgy81zqRg96ZREghg6QAAAFY"]
[Fri Feb 06 20:16:04.359107 2026] [:error] [pid 3513:tid 3532] [client 134.149.17.140:2696] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYXbhDSw3-HAlzpqSxzLcwAAAVE"]
[Fri Feb 06 20:16:04.907876 2026] [:error] [pid 3380:tid 3399] [client 134.149.17.140:2638] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYXbhBFAlUvBGSBK2jdfWwAAAA8"]
[Fri Feb 06 20:16:05.513472 2026] [:error] [pid 36857:tid 36864] [client 134.149.17.140:2590] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYXbhZVQwfj7Kp4Dd0HpYgAAAYU"]
[Fri Feb 06 20:16:06.100143 2026] [:error] [pid 3513:tid 3525] [client 134.149.17.140:2711] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYXbhjSw3-HAlzpqSxzLdwAAAUo"]
[Fri Feb 06 20:16:06.643115 2026] [:error] [pid 3381:tid 3422] [client 134.149.17.140:2625] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYXbhi81zqRg96ZREghg7wAAAEk"]
[Fri Feb 06 20:16:07.179182 2026] [:error] [pid 3380:tid 3384] [client 134.149.17.140:2630] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYXbhxFAlUvBGSBK2jdfYAAAAAA"]
[Fri Feb 06 21:46:56.997060 2026] [:error] [pid 36857:tid 36869] [client 138.197.177.114:58723] [client 138.197.177.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.177.114, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYXw0JVQwfj7Kp4Dd0H3FAAAAYo"]
[Fri Feb 06 21:46:57.007436 2026] [proxy_fcgi:error] [pid 36857:tid 36869] [client 138.197.177.114:58723] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 02:48:41.235607 2026] [:error] [pid 35307:tid 35366] [client 43.157.62.101:51686] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYY3iesb9VwRNUckGgvg8wAAAAE"]
[Sat Feb 07 05:49:27.450476 2026] [:error] [pid 55157:tid 55165] [client 182.42.111.156:48440] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYZh5336JdtTn2bTEozZhwAAAQM"]
[Sat Feb 07 06:58:50.524677 2026] [proxy_fcgi:error] [pid 50673:tid 50752] [client 20.78.154.40:2194] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:58:50.667189 2026] [proxy_fcgi:error] [pid 50673:tid 50738] [client 20.78.154.40:2194] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:58:52.219088 2026] [proxy_fcgi:error] [pid 50673:tid 50757] [client 20.78.154.40:2194] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:58:52.348733 2026] [proxy_fcgi:error] [pid 50673:tid 50735] [client 20.78.154.40:2194] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:58:52.812910 2026] [proxy_fcgi:error] [pid 50673:tid 50752] [client 20.78.154.40:2194] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:58:52.944811 2026] [proxy_fcgi:error] [pid 50673:tid 50759] [client 20.78.154.40:2194] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 06:58:53.478958 2026] [:error] [pid 50673:tid 50756] [client 20.78.154.40:2194] [client 20.78.154.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYZyLWVwLsaZ7aKO2ckSdgAAAJU"]
[Sat Feb 07 06:58:53.994564 2026] [:error] [pid 50672:tid 50708] [client 20.78.154.40:5771] [client 20.78.154.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYZyLQ9o0jq1XS8Nv7OXsAAAAEA"]
[Sat Feb 07 06:58:54.497645 2026] [:error] [pid 43182:tid 43188] [client 20.78.154.40:2646] [client 20.78.154.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYZyLvEC82JnxmrnFYnZugAAAUQ"]
[Sat Feb 07 06:58:54.994621 2026] [:error] [pid 43182:tid 43199] [client 20.78.154.40:2110] [client 20.78.154.40] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/"] [unique_id "aYZyLvEC82JnxmrnFYnZuwAAAU8"]
[Sat Feb 07 07:36:44.046349 2026] [proxy_fcgi:error] [pid 50672:tid 50709] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:44.310657 2026] [proxy_fcgi:error] [pid 50672:tid 50732] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:44.579235 2026] [proxy_fcgi:error] [pid 50672:tid 50720] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:44.843775 2026] [proxy_fcgi:error] [pid 50672:tid 50718] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:45.107479 2026] [proxy_fcgi:error] [pid 50672:tid 50728] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:45.372448 2026] [proxy_fcgi:error] [pid 50672:tid 50715] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:45.641034 2026] [proxy_fcgi:error] [pid 50672:tid 50717] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:45.904786 2026] [proxy_fcgi:error] [pid 50672:tid 50721] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:46.167800 2026] [proxy_fcgi:error] [pid 50672:tid 50726] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:46.431150 2026] [proxy_fcgi:error] [pid 50672:tid 50725] [client 20.100.190.151:63668] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:36:46.690488 2026] [:error] [pid 50672:tid 50727] [client 20.100.190.151:63668] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYZ7Dg9o0jq1XS8Nv7OjUgAAAFM"]
[Sat Feb 07 07:36:47.212889 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:32514] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYZ7D2VwLsaZ7aKO2ckfCAAAAJE"]
[Sat Feb 07 07:36:47.733505 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:34482] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYZ7D336JdtTn2bTEowNmgAAAQ0"]
[Sat Feb 07 07:36:48.253026 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:32305] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Update/f35.php"] [unique_id "aYZ7EOtUmIu2JHM2CrvJewAAANg"]
[Sat Feb 07 07:36:48.771400 2026] [:error] [pid 50672:tid 50724] [client 20.100.190.151:37607] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYZ7EA9o0jq1XS8Nv7OjVgAAAFA"]
[Sat Feb 07 07:36:49.290050 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:31697] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYZ7EX36JdtTn2bTEowNnQAAARc"]
[Sat Feb 07 07:36:49.808333 2026] [:error] [pid 50671:tid 50689] [client 20.100.190.151:29742] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYZ7EbvqLohWBI_mqBMDagAAAAk"]
[Sat Feb 07 07:36:50.326694 2026] [:error] [pid 55157:tid 55174] [client 20.100.190.151:31742] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYZ7En36JdtTn2bTEowNnwAAAQw"]
[Sat Feb 07 07:36:50.846669 2026] [:error] [pid 50780:tid 50794] [client 20.100.190.151:22778] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYZ7EutUmIu2JHM2CrvJgAAAAMw"]
[Sat Feb 07 07:36:51.368258 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:31723] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYZ7E2VwLsaZ7aKO2ckfDgAAAIg"]
[Sat Feb 07 07:36:51.886730 2026] [:error] [pid 50671:tid 50681] [client 20.100.190.151:29720] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYZ7E7vqLohWBI_mqBMDbQAAAAE"]
[Sat Feb 07 07:36:52.406050 2026] [:error] [pid 50780:tid 50790] [client 20.100.190.151:27055] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Wp-good.php"] [unique_id "aYZ7FOtUmIu2JHM2CrvJhAAAAMg"]
[Sat Feb 07 07:36:52.923965 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:63646] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYZ7FLvqLohWBI_mqBMDbwAAABQ"]
[Sat Feb 07 07:36:53.442081 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:25957] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYZ7FfEC82JnxmrnFYnsRwAAAUk"]
[Sat Feb 07 07:36:53.963074 2026] [:error] [pid 50671:tid 50693] [client 20.100.190.151:27027] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYZ7FbvqLohWBI_mqBMDcAAAAA0"]
[Sat Feb 07 07:36:54.479881 2026] [:error] [pid 55157:tid 55165] [client 20.100.190.151:32264] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tphp.php"] [unique_id "aYZ7Fn36JdtTn2bTEowNpQAAAQM"]
[Sat Feb 07 07:36:54.997464 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:32282] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYZ7FutUmIu2JHM2CrvJhwAAAM4"]
[Sat Feb 07 07:36:55.519484 2026] [:error] [pid 55157:tid 55178] [client 20.100.190.151:29716] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYZ7F336JdtTn2bTEowNpwAAARA"]
[Sat Feb 07 07:36:56.036775 2026] [:error] [pid 50672:tid 50726] [client 20.100.190.151:37585] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYZ7GA9o0jq1XS8Nv7OjXQAAAFI"]
[Sat Feb 07 07:36:56.555974 2026] [:error] [pid 55157:tid 55176] [client 20.100.190.151:63673] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aYZ7GH36JdtTn2bTEowNqQAAAQ4"]
[Sat Feb 07 07:36:57.074456 2026] [:error] [pid 43182:tid 43184] [client 20.100.190.151:63625] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYZ7GfEC82JnxmrnFYnsTwAAAUA"]
[Sat Feb 07 07:36:57.593542 2026] [:error] [pid 50673:tid 50739] [client 20.100.190.151:31702] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYZ7GWVwLsaZ7aKO2ckfFQAAAIQ"]
[Sat Feb 07 07:36:58.113811 2026] [:error] [pid 55157:tid 55171] [client 20.100.190.151:35361] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYZ7Gn36JdtTn2bTEowNrQAAAQk"]
[Sat Feb 07 07:36:58.633496 2026] [:error] [pid 50672:tid 50720] [client 20.100.190.151:25947] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYZ7Gg9o0jq1XS8Nv7OjYgAAAEw"]
[Sat Feb 07 07:36:59.151439 2026] [:error] [pid 50673:tid 50751] [client 20.100.190.151:35355] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYZ7G2VwLsaZ7aKO2ckfFgAAAJA"]
[Sat Feb 07 07:36:59.670267 2026] [:error] [pid 50672:tid 50714] [client 20.100.190.151:37569] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYZ7Gw9o0jq1XS8Nv7OjYwAAAEY"]
[Sat Feb 07 07:37:00.194323 2026] [:error] [pid 50671:tid 50704] [client 20.100.190.151:32273] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYZ7HLvqLohWBI_mqBMDcwAAABg"]
[Sat Feb 07 07:37:00.711630 2026] [:error] [pid 43182:tid 43203] [client 20.100.190.151:31693] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aYZ7HPEC82JnxmrnFYnsUgAAAVM"]
[Sat Feb 07 07:37:01.230522 2026] [:error] [pid 50673:tid 50742] [client 20.100.190.151:63660] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYZ7HWVwLsaZ7aKO2ckfGAAAAIc"]
[Sat Feb 07 07:37:01.753476 2026] [:error] [pid 50671:tid 50694] [client 20.100.190.151:31684] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYZ7HbvqLohWBI_mqBMDdwAAAA4"]
[Sat Feb 07 07:37:02.270961 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:32551] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYZ7HvEC82JnxmrnFYnsVQAAAVc"]
[Sat Feb 07 07:37:02.788703 2026] [:error] [pid 43182:tid 43185] [client 20.100.190.151:27018] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aYZ7HvEC82JnxmrnFYnsVwAAAUE"]
[Sat Feb 07 07:37:03.307563 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:63638] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYZ7H2VwLsaZ7aKO2ckfGwAAAIw"]
[Sat Feb 07 07:37:03.827806 2026] [:error] [pid 50673:tid 50738] [client 20.100.190.151:63665] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/luxe.php"] [unique_id "aYZ7H2VwLsaZ7aKO2ckfHwAAAIM"]
[Sat Feb 07 07:37:04.346361 2026] [:error] [pid 55157:tid 55181] [client 20.100.190.151:22747] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/luxe.php"] [unique_id "aYZ7IH36JdtTn2bTEowNugAAARM"]
[Sat Feb 07 07:37:04.863393 2026] [:error] [pid 50672:tid 50712] [client 20.100.190.151:63666] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/luxe.php"] [unique_id "aYZ7IA9o0jq1XS8Nv7OjaAAAAEQ"]
[Sat Feb 07 07:37:05.381315 2026] [:error] [pid 50672:tid 50708] [client 20.100.190.151:22770] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYZ7IQ9o0jq1XS8Nv7OjawAAAEA"]
[Sat Feb 07 07:37:05.899654 2026] [:error] [pid 43182:tid 43184] [client 20.100.190.151:27047] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYZ7IfEC82JnxmrnFYnsWQAAAUA"]
[Sat Feb 07 07:37:06.430452 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:31695] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYZ7IutUmIu2JHM2CrvJkQAAANg"]
[Sat Feb 07 07:37:06.952024 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:32573] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/wpupex.php/"] [unique_id "aYZ7IvEC82JnxmrnFYnsWwAAAUc"]
[Sat Feb 07 07:37:07.470139 2026] [:error] [pid 50780:tid 50797] [client 20.100.190.151:22727] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYZ7I-tUmIu2JHM2CrvJlQAAAM8"]
[Sat Feb 07 07:37:07.989218 2026] [:error] [pid 43182:tid 43187] [client 20.100.190.151:10921] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYZ7I_EC82JnxmrnFYnsXwAAAUM"]
[Sat Feb 07 07:37:08.507579 2026] [:error] [pid 50671:tid 50693] [client 20.100.190.151:63658] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYZ7JLvqLohWBI_mqBMDewAAAA0"]
[Sat Feb 07 07:37:09.025109 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:37594] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rezor.php"] [unique_id "aYZ7JetUmIu2JHM2CrvJlwAAAME"]
[Sat Feb 07 07:37:09.545670 2026] [:error] [pid 50780:tid 50787] [client 20.100.190.151:25944] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYZ7JetUmIu2JHM2CrvJmAAAAMU"]
[Sat Feb 07 07:37:10.063394 2026] [:error] [pid 43182:tid 43192] [client 20.100.190.151:29750] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYZ7JvEC82JnxmrnFYnsdgAAAUg"]
[Sat Feb 07 07:37:10.580980 2026] [:error] [pid 50780:tid 50798] [client 20.100.190.151:35337] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYZ7JutUmIu2JHM2CrvJmQAAANA"]
[Sat Feb 07 07:37:11.100009 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:31697] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aYZ7J336JdtTn2bTEowNzAAAAQY"]
[Sat Feb 07 07:37:11.620078 2026] [:error] [pid 43182:tid 43200] [client 20.100.190.151:37570] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYZ7J_EC82JnxmrnFYnshwAAAVA"]
[Sat Feb 07 07:37:12.141673 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:27045] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYZ7KGVwLsaZ7aKO2ckfOQAAAIg"]
[Sat Feb 07 07:37:12.659854 2026] [:error] [pid 55157:tid 55162] [client 20.100.190.151:35351] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYZ7KH36JdtTn2bTEowN0gAAAQA"]
[Sat Feb 07 07:37:13.179432 2026] [:error] [pid 50671:tid 50689] [client 20.100.190.151:33869] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aYZ7KbvqLohWBI_mqBMDfwAAAAk"]
[Sat Feb 07 07:37:13.701002 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:25940] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYZ7KfEC82JnxmrnFYnskAAAAUc"]
[Sat Feb 07 07:37:14.219644 2026] [:error] [pid 55157:tid 55179] [client 20.100.190.151:10908] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYZ7Kn36JdtTn2bTEowN1QAAARE"]
[Sat Feb 07 07:37:14.738897 2026] [:error] [pid 55157:tid 55170] [client 20.100.190.151:34490] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYZ7Kn36JdtTn2bTEowN2gAAAQg"]
[Sat Feb 07 07:37:15.265791 2026] [:error] [pid 55157:tid 55173] [client 20.100.190.151:22725] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aYZ7K336JdtTn2bTEowN2wAAAQs"]
[Sat Feb 07 07:37:15.783482 2026] [:error] [pid 50780:tid 50785] [client 20.100.190.151:22738] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYZ7K-tUmIu2JHM2CrvJoAAAAMM"]
[Sat Feb 07 07:37:16.303095 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:63630] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYZ7LH36JdtTn2bTEowN4wAAARU"]
[Sat Feb 07 07:37:16.821600 2026] [:error] [pid 55157:tid 55182] [client 20.100.190.151:34476] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYZ7LH36JdtTn2bTEowN5QAAARQ"]
[Sat Feb 07 07:37:17.340997 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:37574] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/~norapump/hah.php"] [unique_id "aYZ7LfEC82JnxmrnFYnslQAAAUk"]
[Sat Feb 07 07:37:17.861597 2026] [:error] [pid 50672:tid 50713] [client 20.100.190.151:30525] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYZ7LQ9o0jq1XS8Nv7OjegAAAEU"]
[Sat Feb 07 07:37:18.381656 2026] [:error] [pid 55157:tid 55184] [client 20.100.190.151:32565] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYZ7Ln36JdtTn2bTEowN7AAAARY"]
[Sat Feb 07 07:37:18.900669 2026] [:error] [pid 55157:tid 55186] [client 20.100.190.151:10931] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYZ7Ln36JdtTn2bTEowN7wAAARg"]
[Sat Feb 07 07:37:19.419083 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:37611] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sto.php"] [unique_id "aYZ7L_EC82JnxmrnFYnsmQAAAUs"]
[Sat Feb 07 07:37:19.936546 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:31692] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYZ7L_EC82JnxmrnFYnsmwAAAUY"]
[Sat Feb 07 07:37:20.453462 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:22777] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYZ7MPEC82JnxmrnFYnsnQAAAU8"]
[Sat Feb 07 07:37:20.971236 2026] [:error] [pid 50672:tid 50708] [client 20.100.190.151:37627] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYZ7MA9o0jq1XS8Nv7OjgAAAAEA"]
[Sat Feb 07 07:37:21.490270 2026] [:error] [pid 50671:tid 50697] [client 20.100.190.151:27039] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aYZ7MbvqLohWBI_mqBMDiAAAABE"]
[Sat Feb 07 07:37:22.010495 2026] [:error] [pid 43182:tid 43187] [client 20.100.190.151:32289] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYZ7MvEC82JnxmrnFYnsngAAAUM"]
[Sat Feb 07 07:37:22.530642 2026] [:error] [pid 55157:tid 55167] [client 20.100.190.151:10920] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYZ7Mn36JdtTn2bTEowN8gAAAQU"]
[Sat Feb 07 07:37:23.051622 2026] [:error] [pid 50780:tid 50790] [client 20.100.190.151:37591] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYZ7M-tUmIu2JHM2CrvJpQAAAMg"]
[Sat Feb 07 07:37:23.569580 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:32518] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYZ7M-tUmIu2JHM2CrvJpwAAAM4"]
[Sat Feb 07 07:37:24.088418 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:27037] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYZ7NH36JdtTn2bTEowN-AAAARU"]
[Sat Feb 07 07:37:24.606565 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:32317] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYZ7NPEC82JnxmrnFYnsowAAAVc"]
[Sat Feb 07 07:37:25.124324 2026] [:error] [pid 50673:tid 50744] [client 20.100.190.151:32534] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYZ7NWVwLsaZ7aKO2ckfQwAAAIk"]
[Sat Feb 07 07:37:25.642040 2026] [:error] [pid 43182:tid 43185] [client 20.100.190.151:32301] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aYZ7NfEC82JnxmrnFYnspwAAAUE"]
[Sat Feb 07 07:37:26.164693 2026] [:error] [pid 43182:tid 43186] [client 20.100.190.151:31701] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYZ7NvEC82JnxmrnFYnsqQAAAUI"]
[Sat Feb 07 07:37:26.682591 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:35333] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYZ7NvEC82JnxmrnFYnsqgAAAU8"]
[Sat Feb 07 07:37:27.201273 2026] [:error] [pid 43182:tid 43196] [client 20.100.190.151:32519] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYZ7N_EC82JnxmrnFYnsrwAAAUw"]
[Sat Feb 07 07:37:27.726682 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:22731] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aYZ7N_EC82JnxmrnFYnssgAAAUk"]
[Sat Feb 07 07:37:28.246292 2026] [:error] [pid 43182:tid 43198] [client 20.100.190.151:37616] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYZ7OPEC82JnxmrnFYnstgAAAU4"]
[Sat Feb 07 07:37:28.765738 2026] [:error] [pid 50780:tid 50797] [client 20.100.190.151:29701] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYZ7OOtUmIu2JHM2CrvJrAAAAM8"]
[Sat Feb 07 07:37:29.284851 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:22780] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYZ7OfEC82JnxmrnFYnsuQAAAU8"]
[Sat Feb 07 07:37:29.803901 2026] [:error] [pid 50780:tid 50787] [client 20.100.190.151:34442] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aYZ7OetUmIu2JHM2CrvJrwAAAMU"]
[Sat Feb 07 07:37:30.322409 2026] [:error] [pid 50673:tid 50756] [client 20.100.190.151:25946] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYZ7OmVwLsaZ7aKO2ckfSQAAAJU"]
[Sat Feb 07 07:37:30.851291 2026] [:error] [pid 43182:tid 43202] [client 20.100.190.151:34462] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYZ7OvEC82JnxmrnFYnsvQAAAVI"]
[Sat Feb 07 07:37:31.369360 2026] [:error] [pid 50780:tid 50788] [client 20.100.190.151:25966] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYZ7O-tUmIu2JHM2CrvJsQAAAMY"]
[Sat Feb 07 07:37:31.889244 2026] [:error] [pid 50672:tid 50717] [client 20.100.190.151:22767] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/o.php"] [unique_id "aYZ7Ow9o0jq1XS8Nv7OjhwAAAEk"]
[Sat Feb 07 07:37:32.408627 2026] [:error] [pid 50673:tid 50744] [client 20.100.190.151:25932] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYZ7PGVwLsaZ7aKO2ckfTQAAAIk"]
[Sat Feb 07 07:37:32.927597 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:32292] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aYZ7PGVwLsaZ7aKO2ckfTgAAAIw"]
[Sat Feb 07 07:37:33.448690 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:32525] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aYZ7PfEC82JnxmrnFYnswAAAAUc"]
[Sat Feb 07 07:37:33.974000 2026] [:error] [pid 50672:tid 50715] [client 20.100.190.151:37597] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aYZ7PQ9o0jq1XS8Nv7OjigAAAEc"]
[Sat Feb 07 07:37:34.492590 2026] [:error] [pid 43182:tid 43200] [client 20.100.190.151:32308] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYZ7PvEC82JnxmrnFYnswgAAAVA"]
[Sat Feb 07 07:37:35.009874 2026] [:error] [pid 50673:tid 50739] [client 20.100.190.151:32513] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYZ7P2VwLsaZ7aKO2ckfVQAAAIQ"]
[Sat Feb 07 07:37:35.527923 2026] [:error] [pid 55157:tid 55177] [client 20.100.190.151:35352] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYZ7P336JdtTn2bTEowOAQAAAQ8"]
[Sat Feb 07 07:37:36.047121 2026] [:error] [pid 50671:tid 50686] [client 20.100.190.151:34469] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/f/"] [unique_id "aYZ7QLvqLohWBI_mqBMDmQAAAAY"]
[Sat Feb 07 07:37:36.573865 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:10940] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7QPEC82JnxmrnFYnsxAAAAUk"]
[Sat Feb 07 07:37:37.094744 2026] [:error] [pid 50673:tid 50742] [client 20.100.190.151:25104] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7QWVwLsaZ7aKO2ckfWgAAAIc"]
[Sat Feb 07 07:37:37.614949 2026] [:error] [pid 43182:tid 43203] [client 20.100.190.151:10913] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7QfEC82JnxmrnFYnsxgAAAVM"]
[Sat Feb 07 07:37:38.133110 2026] [:error] [pid 50673:tid 50748] [client 20.100.190.151:63629] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7QmVwLsaZ7aKO2ckfXAAAAI0"]
[Sat Feb 07 07:37:38.652569 2026] [:error] [pid 50673:tid 50736] [client 20.100.190.151:27048] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aYZ7QmVwLsaZ7aKO2ckfXgAAAIE"]
[Sat Feb 07 07:37:39.171981 2026] [:error] [pid 55157:tid 55170] [client 20.100.190.151:32544] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7Q336JdtTn2bTEowOBQAAAQg"]
[Sat Feb 07 07:37:39.689343 2026] [:error] [pid 55157:tid 55167] [client 20.100.190.151:37577] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7Q336JdtTn2bTEowOCQAAAQU"]
[Sat Feb 07 07:37:40.205944 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:31691] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7RGVwLsaZ7aKO2ckfYgAAAJQ"]
[Sat Feb 07 07:37:40.723830 2026] [:error] [pid 43182:tid 43189] [client 20.100.190.151:27017] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "aYZ7RPEC82JnxmrnFYnsywAAAUU"]
[Sat Feb 07 07:37:41.242829 2026] [:error] [pid 50672:tid 50728] [client 20.100.190.151:34468] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "aYZ7RQ9o0jq1XS8Nv7OjlQAAAFQ"]
[Sat Feb 07 07:37:41.763940 2026] [:error] [pid 50671:tid 50703] [client 20.100.190.151:34481] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "aYZ7RbvqLohWBI_mqBMDnQAAABc"]
[Sat Feb 07 07:37:42.282423 2026] [:error] [pid 50780:tid 50784] [client 20.100.190.151:31738] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "aYZ7RutUmIu2JHM2CrvJvQAAAMI"]
[Sat Feb 07 07:37:42.800692 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:29702] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/skin/install/default/security.php"] [unique_id "aYZ7RvEC82JnxmrnFYnszgAAAU8"]
[Sat Feb 07 07:37:43.319574 2026] [:error] [pid 43182:tid 43192] [client 20.100.190.151:29706] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/skin/install/default/security.php"] [unique_id "aYZ7R_EC82JnxmrnFYns0QAAAUg"]
[Sat Feb 07 07:37:43.838968 2026] [:error] [pid 43182:tid 43187] [client 20.100.190.151:25129] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/skin/install/default/security.php"] [unique_id "aYZ7R_EC82JnxmrnFYns1QAAAUM"]
[Sat Feb 07 07:37:44.356915 2026] [:error] [pid 50672:tid 50714] [client 20.100.190.151:10915] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/skin/install/default/security.php"] [unique_id "aYZ7SA9o0jq1XS8Nv7OjmwAAAEY"]
[Sat Feb 07 07:37:44.874396 2026] [:error] [pid 50671:tid 50691] [client 20.100.190.151:34485] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aYZ7SLvqLohWBI_mqBMDngAAAAs"]
[Sat Feb 07 07:37:45.392179 2026] [:error] [pid 50671:tid 50690] [client 20.100.190.151:22783] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aYZ7SbvqLohWBI_mqBMDnwAAAAo"]
[Sat Feb 07 07:37:45.911017 2026] [:error] [pid 43182:tid 43205] [client 20.100.190.151:19278] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aYZ7SfEC82JnxmrnFYns2AAAAVU"]
[Sat Feb 07 07:37:46.440395 2026] [proxy_fcgi:error] [pid 55157:tid 55174] [client 20.100.190.151:27036] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:37:47.898889 2026] [proxy_fcgi:error] [pid 55157:tid 55185] [client 20.100.190.151:27036] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:37:48.159088 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:27036] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYZ7TH36JdtTn2bTEowOGAAAAQ0"]
[Sat Feb 07 07:37:48.681583 2026] [proxy_fcgi:error] [pid 50671:tid 50692] [client 20.100.190.151:34440] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:37:49.732543 2026] [proxy_fcgi:error] [pid 50671:tid 50686] [client 20.100.190.151:34440] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:37:49.994261 2026] [proxy_fcgi:error] [pid 50671:tid 50680] [client 20.100.190.151:34440] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:37:50.253063 2026] [:error] [pid 50671:tid 50702] [client 20.100.190.151:34440] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYZ7TrvqLohWBI_mqBMDrwAAABY"]
[Sat Feb 07 07:37:50.785365 2026] [:error] [pid 50671:tid 50687] [client 20.100.190.151:10925] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYZ7TrvqLohWBI_mqBMDsgAAAAc"]
[Sat Feb 07 07:37:51.304070 2026] [:error] [pid 55157:tid 55165] [client 20.100.190.151:29722] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYZ7T336JdtTn2bTEowOHwAAAQM"]
[Sat Feb 07 07:37:51.823541 2026] [:error] [pid 50780:tid 50801] [client 20.100.190.151:31680] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fk2e3/"] [unique_id "aYZ7T-tUmIu2JHM2CrvJwQAAANM"]
[Sat Feb 07 07:37:52.342801 2026] [:error] [pid 50671:tid 50684] [client 20.100.190.151:63635] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYZ7ULvqLohWBI_mqBMDswAAAAQ"]
[Sat Feb 07 07:37:52.861445 2026] [:error] [pid 50673:tid 50758] [client 20.100.190.151:19280] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYZ7UGVwLsaZ7aKO2ckfcwAAAJc"]
[Sat Feb 07 07:37:53.379600 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:27008] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYZ7UWVwLsaZ7aKO2ckfdAAAAJQ"]
[Sat Feb 07 07:37:53.898402 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:29718] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aYZ7UfEC82JnxmrnFYns6AAAAUQ"]
[Sat Feb 07 07:37:54.417140 2026] [:error] [pid 43182:tid 43208] [client 20.100.190.151:27015] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYZ7UvEC82JnxmrnFYns6gAAAVg"]
[Sat Feb 07 07:37:54.935632 2026] [:error] [pid 50780:tid 50799] [client 20.100.190.151:19297] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYZ7UutUmIu2JHM2CrvJxQAAANE"]
[Sat Feb 07 07:37:55.454557 2026] [:error] [pid 43182:tid 43198] [client 20.100.190.151:10888] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYZ7U_EC82JnxmrnFYns8QAAAU4"]
[Sat Feb 07 07:37:55.977536 2026] [:error] [pid 50672:tid 50720] [client 20.100.190.151:34458] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aYZ7Uw9o0jq1XS8Nv7OjqwAAAEw"]
[Sat Feb 07 07:37:56.495205 2026] [:error] [pid 55157:tid 55174] [client 20.100.190.151:10918] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aYZ7VH36JdtTn2bTEowOLQAAAQw"]
[Sat Feb 07 07:37:57.013343 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:32550] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYZ7VX36JdtTn2bTEowOLwAAAQc"]
[Sat Feb 07 07:37:57.530663 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:22762] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYZ7VfEC82JnxmrnFYns_wAAAUk"]
[Sat Feb 07 07:37:58.048407 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:10902] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxo.php"] [unique_id "aYZ7VvEC82JnxmrnFYntBAAAAUY"]
[Sat Feb 07 07:37:58.566130 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:22733] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYZ7VvEC82JnxmrnFYntCgAAAUs"]
[Sat Feb 07 07:37:59.083340 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:22744] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYZ7V_EC82JnxmrnFYntDwAAAUk"]
[Sat Feb 07 07:37:59.608872 2026] [:error] [pid 43182:tid 43187] [client 20.100.190.151:32277] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYZ7V_EC82JnxmrnFYntFwAAAUM"]
[Sat Feb 07 07:38:00.127941 2026] [:error] [pid 50672:tid 50723] [client 20.100.190.151:25945] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "aYZ7WA9o0jq1XS8Nv7OjrgAAAE8"]
[Sat Feb 07 07:38:00.652011 2026] [:error] [pid 50672:tid 50714] [client 20.100.190.151:32563] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7WA9o0jq1XS8Nv7OjsQAAAEY"]
[Sat Feb 07 07:38:01.172734 2026] [:error] [pid 50671:tid 50685] [client 20.100.190.151:26257] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7WbvqLohWBI_mqBMDuQAAAAU"]
[Sat Feb 07 07:38:01.705439 2026] [:error] [pid 43182:tid 43198] [client 20.100.190.151:27065] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7WfEC82JnxmrnFYntJAAAAU4"]
[Sat Feb 07 07:38:02.224890 2026] [:error] [pid 50672:tid 50732] [client 20.100.190.151:22728] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7Wg9o0jq1XS8Nv7OjtQAAAFg"]
[Sat Feb 07 07:38:02.742894 2026] [:error] [pid 50672:tid 50729] [client 20.100.190.151:25974] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYZ7Wg9o0jq1XS8Nv7OjtgAAAFU"]
[Sat Feb 07 07:38:03.259625 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:32306] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYZ7W2VwLsaZ7aKO2ckfewAAAI4"]
[Sat Feb 07 07:38:03.777898 2026] [:error] [pid 50671:tid 50693] [client 20.100.190.151:22754] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYZ7W7vqLohWBI_mqBMDuwAAAA0"]
[Sat Feb 07 07:38:04.297664 2026] [:error] [pid 55157:tid 55172] [client 20.100.190.151:31687] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aYZ7XH36JdtTn2bTEowONQAAAQo"]
[Sat Feb 07 07:38:04.817108 2026] [:error] [pid 50673:tid 50750] [client 20.100.190.151:63642] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ7XGVwLsaZ7aKO2ckffgAAAI8"]
[Sat Feb 07 07:38:05.336240 2026] [:error] [pid 55157:tid 55180] [client 20.100.190.151:10883] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ7XX36JdtTn2bTEowONgAAARI"]
[Sat Feb 07 07:38:05.854497 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:22735] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ7XetUmIu2JHM2CrvJzgAAAMc"]
[Sat Feb 07 07:38:06.385204 2026] [:error] [pid 50671:tid 50694] [client 20.100.190.151:33886] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ7XrvqLohWBI_mqBMDwAAAAA4"]
[Sat Feb 07 07:38:06.903017 2026] [:error] [pid 55157:tid 55171] [client 20.100.190.151:32556] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYZ7Xn36JdtTn2bTEowONwAAAQk"]
[Sat Feb 07 07:38:07.423514 2026] [:error] [pid 43182:tid 43194] [client 20.100.190.151:19307] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYZ7X_EC82JnxmrnFYntTgAAAUo"]
[Sat Feb 07 07:38:07.942523 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:10917] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYZ7X_EC82JnxmrnFYntUwAAAVc"]
[Sat Feb 07 07:38:08.461862 2026] [:error] [pid 50672:tid 50711] [client 20.100.190.151:63663] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WordPress/x/"] [unique_id "aYZ7YA9o0jq1XS8Nv7OjvQAAAEM"]
[Sat Feb 07 07:38:08.983468 2026] [:error] [pid 50671:tid 50683] [client 20.100.190.151:37576] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYZ7YLvqLohWBI_mqBMDwwAAAAM"]
[Sat Feb 07 07:38:09.502012 2026] [:error] [pid 55157:tid 55184] [client 20.100.190.151:10909] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYZ7YX36JdtTn2bTEowOPAAAARY"]
[Sat Feb 07 07:38:10.025207 2026] [:error] [pid 50673:tid 50757] [client 20.100.190.151:10932] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYZ7YmVwLsaZ7aKO2ckfhQAAAJY"]
[Sat Feb 07 07:38:10.543341 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:27043] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aYZ7YmVwLsaZ7aKO2ckfhwAAAIw"]
[Sat Feb 07 07:38:11.070689 2026] [:error] [pid 50780:tid 50788] [client 20.100.190.151:35372] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYZ7Y-tUmIu2JHM2CrvJ1AAAAMY"]
[Sat Feb 07 07:38:11.588715 2026] [:error] [pid 50673:tid 50753] [client 20.100.190.151:35185] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYZ7Y2VwLsaZ7aKO2ckfiQAAAJI"]
[Sat Feb 07 07:38:12.108489 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:32287] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYZ7ZH36JdtTn2bTEowOQAAAARc"]
[Sat Feb 07 07:38:12.626649 2026] [:error] [pid 50673:tid 50748] [client 20.100.190.151:32309] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geck.php"] [unique_id "aYZ7ZGVwLsaZ7aKO2ckfjQAAAI0"]
[Sat Feb 07 07:38:13.145405 2026] [:error] [pid 50672:tid 50722] [client 20.100.190.151:37580] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYZ7ZQ9o0jq1XS8Nv7OjwgAAAE4"]
[Sat Feb 07 07:38:13.673173 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:32316] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYZ7ZetUmIu2JHM2CrvJ2QAAAM4"]
[Sat Feb 07 07:38:14.191618 2026] [:error] [pid 50672:tid 50712] [client 20.100.190.151:22774] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYZ7Zg9o0jq1XS8Nv7OjxQAAAEQ"]
[Sat Feb 07 07:38:14.709877 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:10887] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aYZ7ZvEC82JnxmrnFYntbwAAAUk"]
[Sat Feb 07 07:38:15.228230 2026] [:error] [pid 50673:tid 50745] [client 20.100.190.151:32302] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYZ7Z2VwLsaZ7aKO2ckfkAAAAIo"]
[Sat Feb 07 07:38:15.746794 2026] [:error] [pid 43182:tid 43186] [client 20.100.190.151:32257] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYZ7Z_EC82JnxmrnFYntcAAAAUI"]
[Sat Feb 07 07:38:16.265761 2026] [:error] [pid 43182:tid 43205] [client 20.100.190.151:63634] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYZ7aPEC82JnxmrnFYntcwAAAVU"]
[Sat Feb 07 07:38:16.786915 2026] [:error] [pid 50671:tid 50688] [client 20.100.190.151:26278] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYZ7aLvqLohWBI_mqBMDyAAAAAg"]
[Sat Feb 07 07:38:17.304605 2026] [:error] [pid 55157:tid 55181] [client 20.100.190.151:32299] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7aX36JdtTn2bTEowOSQAAARM"]
[Sat Feb 07 07:38:17.824162 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:29723] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7afEC82JnxmrnFYnteAAAAUY"]
[Sat Feb 07 07:38:18.344191 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:25929] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7avEC82JnxmrnFYnteQAAAU8"]
[Sat Feb 07 07:38:18.861832 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:31707] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7avEC82JnxmrnFYntfAAAAUc"]
[Sat Feb 07 07:38:19.381904 2026] [:error] [pid 50673:tid 50749] [client 20.100.190.151:10926] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYZ7a2VwLsaZ7aKO2ckfkQAAAI4"]
[Sat Feb 07 07:38:19.902972 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:35162] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYZ7a-tUmIu2JHM2CrvJ4gAAANg"]
[Sat Feb 07 07:38:20.421841 2026] [:error] [pid 50671:tid 50696] [client 20.100.190.151:25927] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYZ7bLvqLohWBI_mqBMDzQAAABA"]
[Sat Feb 07 07:38:20.942384 2026] [:error] [pid 55157:tid 55182] [client 20.100.190.151:30522] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYZ7bH36JdtTn2bTEowOUwAAARQ"]
[Sat Feb 07 07:38:21.463791 2026] [:error] [pid 55157:tid 55162] [client 20.100.190.151:37571] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYZ7bX36JdtTn2bTEowOVwAAAQA"]
[Sat Feb 07 07:38:21.984784 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:34465] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYZ7bX36JdtTn2bTEowOWwAAAQ0"]
[Sat Feb 07 07:38:22.504476 2026] [:error] [pid 55157:tid 55180] [client 20.100.190.151:22765] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYZ7bn36JdtTn2bTEowOXAAAARI"]
[Sat Feb 07 07:38:23.024275 2026] [:error] [pid 50780:tid 50793] [client 20.100.190.151:34456] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftp.php"] [unique_id "aYZ7b-tUmIu2JHM2CrvJ5wAAAMs"]
[Sat Feb 07 07:38:23.543673 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:19293] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYZ7b2VwLsaZ7aKO2ckflwAAAJQ"]
[Sat Feb 07 07:38:24.062502 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:32572] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYZ7cGVwLsaZ7aKO2ckfmgAAAIg"]
[Sat Feb 07 07:38:24.586112 2026] [:error] [pid 50672:tid 50717] [client 20.100.190.151:34473] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYZ7cA9o0jq1XS8Nv7OjzAAAAEk"]
[Sat Feb 07 07:38:25.103590 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:22740] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mds.php"] [unique_id "aYZ7cX36JdtTn2bTEowOYgAAAQY"]
[Sat Feb 07 07:38:25.622443 2026] [:error] [pid 55157:tid 55175] [client 20.100.190.151:63661] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYZ7cX36JdtTn2bTEowOYwAAAQ0"]
[Sat Feb 07 07:38:26.142912 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:22775] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYZ7cvEC82JnxmrnFYntiQAAAUs"]
[Sat Feb 07 07:38:26.662738 2026] [:error] [pid 50672:tid 50714] [client 20.100.190.151:27026] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYZ7cg9o0jq1XS8Nv7Oj0gAAAEY"]
[Sat Feb 07 07:38:27.180627 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:37602] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aYZ7c336JdtTn2bTEowOZQAAAQc"]
[Sat Feb 07 07:38:27.697901 2026] [:error] [pid 50672:tid 50716] [client 20.100.190.151:25924] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYZ7cw9o0jq1XS8Nv7Oj1QAAAEg"]
[Sat Feb 07 07:38:28.215607 2026] [:error] [pid 50671:tid 50698] [client 20.100.190.151:22772] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYZ7dLvqLohWBI_mqBMD0AAAABI"]
[Sat Feb 07 07:38:28.733122 2026] [:error] [pid 43182:tid 43189] [client 20.100.190.151:34432] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYZ7dPEC82JnxmrnFYntkAAAAUU"]
[Sat Feb 07 07:38:29.253115 2026] [:error] [pid 50671:tid 50692] [client 20.100.190.151:22768] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/class-db.php"] [unique_id "aYZ7dbvqLohWBI_mqBMD0QAAAAw"]
[Sat Feb 07 07:38:29.771499 2026] [:error] [pid 43182:tid 43208] [client 20.100.190.151:29752] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYZ7dfEC82JnxmrnFYntkwAAAVg"]
[Sat Feb 07 07:38:30.292627 2026] [:error] [pid 43182:tid 43187] [client 20.100.190.151:22736] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYZ7dvEC82JnxmrnFYntlQAAAUM"]
[Sat Feb 07 07:38:30.811363 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:35173] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYZ7dvEC82JnxmrnFYntlwAAAUs"]
[Sat Feb 07 07:38:31.333709 2026] [:error] [pid 50673:tid 50742] [client 20.100.190.151:22737] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cool.php"] [unique_id "aYZ7d2VwLsaZ7aKO2ckfrAAAAIc"]
[Sat Feb 07 07:38:31.852093 2026] [:error] [pid 43182:tid 43186] [client 20.100.190.151:37628] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYZ7d_EC82JnxmrnFYntmgAAAUI"]
[Sat Feb 07 07:38:32.370109 2026] [:error] [pid 50673:tid 50736] [client 20.100.190.151:27022] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYZ7eGVwLsaZ7aKO2ckfrgAAAIE"]
[Sat Feb 07 07:38:32.889680 2026] [:error] [pid 55157:tid 55179] [client 20.100.190.151:63669] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYZ7eH36JdtTn2bTEowOcAAAARE"]
[Sat Feb 07 07:38:33.409150 2026] [:error] [pid 50780:tid 50799] [client 20.100.190.151:63622] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aYZ7eetUmIu2JHM2CrvKAQAAANE"]
[Sat Feb 07 07:38:33.928398 2026] [:error] [pid 50780:tid 50803] [client 20.100.190.151:37624] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYZ7eetUmIu2JHM2CrvKAwAAANU"]
[Sat Feb 07 07:38:34.447140 2026] [:error] [pid 50672:tid 50715] [client 20.100.190.151:63659] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYZ7eg9o0jq1XS8Nv7Oj2gAAAEc"]
[Sat Feb 07 07:38:34.965901 2026] [:error] [pid 55157:tid 55177] [client 20.100.190.151:25965] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYZ7en36JdtTn2bTEowOcgAAAQ8"]
[Sat Feb 07 07:38:35.484889 2026] [:error] [pid 50672:tid 50721] [client 20.100.190.151:34463] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYZ7ew9o0jq1XS8Nv7Oj3AAAAE0"]
[Sat Feb 07 07:38:36.004649 2026] [:error] [pid 55157:tid 55166] [client 20.100.190.151:27016] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYZ7fH36JdtTn2bTEowOcwAAAQQ"]
[Sat Feb 07 07:38:36.522883 2026] [:error] [pid 50780:tid 50791] [client 20.100.190.151:37598] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYZ7fOtUmIu2JHM2CrvKCQAAAMk"]
[Sat Feb 07 07:38:37.041300 2026] [:error] [pid 50673:tid 50741] [client 20.100.190.151:32516] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYZ7fWVwLsaZ7aKO2ckfswAAAIY"]
[Sat Feb 07 07:38:37.559874 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:32291] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "aYZ7fetUmIu2JHM2CrvKCgAAAM0"]
[Sat Feb 07 07:38:38.078949 2026] [:error] [pid 43182:tid 43201] [client 20.100.190.151:19267] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYZ7fvEC82JnxmrnFYntqAAAAVE"]
[Sat Feb 07 07:38:38.598425 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:25977] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYZ7fvEC82JnxmrnFYntqQAAAUQ"]
[Sat Feb 07 07:38:39.120700 2026] [:error] [pid 50672:tid 50709] [client 20.100.190.151:35391] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYZ7fw9o0jq1XS8Nv7Oj3wAAAEE"]
[Sat Feb 07 07:38:39.639290 2026] [:error] [pid 43182:tid 43204] [client 20.100.190.151:32318] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYZ7f_EC82JnxmrnFYntrAAAAVQ"]
[Sat Feb 07 07:38:40.168925 2026] [:error] [pid 50671:tid 50682] [client 20.100.190.151:22743] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aYZ7gLvqLohWBI_mqBMD3AAAAAI"]
[Sat Feb 07 07:38:40.689108 2026] [:error] [pid 50780:tid 50803] [client 20.100.190.151:37631] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aYZ7gOtUmIu2JHM2CrvKDgAAANU"]
[Sat Feb 07 07:38:41.212491 2026] [:error] [pid 55157:tid 55179] [client 20.100.190.151:22756] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aYZ7gX36JdtTn2bTEowOewAAARE"]
[Sat Feb 07 07:38:41.733048 2026] [:error] [pid 43182:tid 43194] [client 20.100.190.151:32290] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aYZ7gfEC82JnxmrnFYntsQAAAUo"]
[Sat Feb 07 07:38:42.252665 2026] [:error] [pid 50671:tid 50685] [client 20.100.190.151:25923] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aYZ7grvqLohWBI_mqBMD3QAAAAU"]
[Sat Feb 07 07:38:42.773639 2026] [:error] [pid 50780:tid 50791] [client 20.100.190.151:34443] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aYZ7gutUmIu2JHM2CrvKFQAAAMk"]
[Sat Feb 07 07:38:43.291841 2026] [:error] [pid 43182:tid 43197] [client 20.100.190.151:27066] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aYZ7g_EC82JnxmrnFYntsgAAAU0"]
[Sat Feb 07 07:38:43.809321 2026] [:error] [pid 43182:tid 43201] [client 20.100.190.151:10910] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aYZ7g_EC82JnxmrnFYntswAAAVE"]
[Sat Feb 07 07:38:44.330282 2026] [:error] [pid 43182:tid 43186] [client 20.100.190.151:63633] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/fafa/"] [unique_id "aYZ7hPEC82JnxmrnFYnttgAAAUI"]
[Sat Feb 07 07:38:44.849624 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:32567] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/fafa/"] [unique_id "aYZ7hPEC82JnxmrnFYntuQAAAUY"]
[Sat Feb 07 07:38:45.378895 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:25970] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/fafa/"] [unique_id "aYZ7hfEC82JnxmrnFYntugAAAUs"]
[Sat Feb 07 07:38:45.896083 2026] [:error] [pid 43182:tid 43196] [client 20.100.190.151:63628] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/fafa/"] [unique_id "aYZ7hfEC82JnxmrnFYntvgAAAUw"]
[Sat Feb 07 07:38:46.412696 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:10933] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aYZ7hutUmIu2JHM2CrvKGQAAANg"]
[Sat Feb 07 07:38:46.932037 2026] [:error] [pid 43182:tid 43201] [client 20.100.190.151:35191] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aYZ7hvEC82JnxmrnFYntvwAAAVE"]
[Sat Feb 07 07:38:47.451831 2026] [:error] [pid 50672:tid 50717] [client 20.100.190.151:37612] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aYZ7hw9o0jq1XS8Nv7Oj4wAAAEk"]
[Sat Feb 07 07:38:47.979872 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:10899] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aYZ7h_EC82JnxmrnFYntwwAAAUc"]
[Sat Feb 07 07:38:48.498041 2026] [:error] [pid 43182:tid 43189] [client 20.100.190.151:25148] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/"] [unique_id "aYZ7iPEC82JnxmrnFYntxQAAAUU"]
[Sat Feb 07 07:38:49.817297 2026] [proxy_fcgi:error] [pid 50780:tid 50787] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:50.080181 2026] [proxy_fcgi:error] [pid 50780:tid 50798] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:50.342596 2026] [proxy_fcgi:error] [pid 50780:tid 50803] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:51.858726 2026] [proxy_fcgi:error] [pid 50780:tid 50799] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:52.121338 2026] [proxy_fcgi:error] [pid 50780:tid 50804] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:52.649497 2026] [proxy_fcgi:error] [pid 50780:tid 50801] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:52.912588 2026] [proxy_fcgi:error] [pid 50780:tid 50797] [client 20.100.190.151:63623] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:38:53.181568 2026] [:error] [pid 50780:tid 50793] [client 20.100.190.151:63623] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYZ7jetUmIu2JHM2CrvKLAAAAMs"]
[Sat Feb 07 07:38:53.699218 2026] [:error] [pid 55157:tid 55182] [client 20.100.190.151:22746] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYZ7jX36JdtTn2bTEowOfwAAARQ"]
[Sat Feb 07 07:38:54.218406 2026] [:error] [pid 50780:tid 50802] [client 20.100.190.151:29741] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYZ7jutUmIu2JHM2CrvKMAAAANQ"]
[Sat Feb 07 07:38:54.737959 2026] [:error] [pid 50672:tid 50723] [client 20.100.190.151:34436] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hey.php"] [unique_id "aYZ7jg9o0jq1XS8Nv7Oj6AAAAE8"]
[Sat Feb 07 07:38:55.257630 2026] [:error] [pid 50780:tid 50787] [client 20.100.190.151:32543] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7j-tUmIu2JHM2CrvKMgAAAMU"]
[Sat Feb 07 07:38:55.776153 2026] [:error] [pid 50672:tid 50710] [client 20.100.190.151:32276] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7jw9o0jq1XS8Nv7Oj6QAAAEI"]
[Sat Feb 07 07:38:56.298004 2026] [:error] [pid 50673:tid 50748] [client 20.100.190.151:34494] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7kGVwLsaZ7aKO2ckfvAAAAI0"]
[Sat Feb 07 07:38:56.817839 2026] [:error] [pid 50672:tid 50716] [client 20.100.190.151:37615] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aYZ7kA9o0jq1XS8Nv7Oj6wAAAEg"]
[Sat Feb 07 07:38:57.336806 2026] [:error] [pid 55157:tid 55179] [client 20.100.190.151:34493] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYZ7kX36JdtTn2bTEowOggAAARE"]
[Sat Feb 07 07:38:57.854612 2026] [:error] [pid 43182:tid 43189] [client 20.100.190.151:27054] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYZ7kfEC82JnxmrnFYnt0gAAAUU"]
[Sat Feb 07 07:38:58.373685 2026] [:error] [pid 50671:tid 50683] [client 20.100.190.151:19282] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYZ7krvqLohWBI_mqBMD5AAAAAM"]
[Sat Feb 07 07:38:58.892441 2026] [:error] [pid 50780:tid 50796] [client 20.100.190.151:34439] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1337.php"] [unique_id "aYZ7kutUmIu2JHM2CrvKNAAAAM4"]
[Sat Feb 07 07:38:59.411873 2026] [:error] [pid 50780:tid 50806] [client 20.100.190.151:27029] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYZ7k-tUmIu2JHM2CrvKNQAAANg"]
[Sat Feb 07 07:38:59.935027 2026] [:error] [pid 50671:tid 50691] [client 20.100.190.151:32535] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYZ7k7vqLohWBI_mqBMD5wAAAAs"]
[Sat Feb 07 07:39:00.456726 2026] [:error] [pid 50672:tid 50720] [client 20.100.190.151:10930] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYZ7lA9o0jq1XS8Nv7Oj8AAAAEw"]
[Sat Feb 07 07:39:00.975470 2026] [:error] [pid 50671:tid 50690] [client 20.100.190.151:25950] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aYZ7lLvqLohWBI_mqBMD6AAAAAo"]
[Sat Feb 07 07:39:01.493369 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:37609] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYZ7lX36JdtTn2bTEowOiQAAAQc"]
[Sat Feb 07 07:39:02.014481 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:32310] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYZ7lvEC82JnxmrnFYnt1wAAAUQ"]
[Sat Feb 07 07:39:02.534020 2026] [:error] [pid 43182:tid 43202] [client 20.100.190.151:63616] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYZ7lvEC82JnxmrnFYnt2AAAAVI"]
[Sat Feb 07 07:39:03.054026 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:34452] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apsarasarts/okk.php"] [unique_id "aYZ7l_EC82JnxmrnFYnt2QAAAUY"]
[Sat Feb 07 07:39:03.574203 2026] [:error] [pid 50673:tid 50746] [client 20.100.190.151:35171] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYZ7l2VwLsaZ7aKO2ckfxQAAAIs"]
[Sat Feb 07 07:39:04.092206 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:32311] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYZ7mPEC82JnxmrnFYnt2gAAAVc"]
[Sat Feb 07 07:39:04.610801 2026] [:error] [pid 43182:tid 43199] [client 20.100.190.151:63643] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYZ7mPEC82JnxmrnFYnt3AAAAU8"]
[Sat Feb 07 07:39:05.129114 2026] [:error] [pid 50671:tid 50682] [client 20.100.190.151:31719] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYZ7mbvqLohWBI_mqBMD6wAAAAI"]
[Sat Feb 07 07:39:05.647954 2026] [:error] [pid 50780:tid 50797] [client 20.100.190.151:34453] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYZ7metUmIu2JHM2CrvKOAAAAM8"]
[Sat Feb 07 07:39:06.167126 2026] [:error] [pid 43182:tid 43192] [client 20.100.190.151:25928] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYZ7mvEC82JnxmrnFYnt3wAAAUg"]
[Sat Feb 07 07:39:06.685913 2026] [:error] [pid 55157:tid 55171] [client 20.100.190.151:22734] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYZ7mn36JdtTn2bTEowOkAAAAQk"]
[Sat Feb 07 07:39:07.204232 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:37625] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-is.php"] [unique_id "aYZ7m2VwLsaZ7aKO2ckfxgAAAJE"]
[Sat Feb 07 07:39:07.723360 2026] [:error] [pid 50780:tid 50805] [client 20.100.190.151:32270] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYZ7m-tUmIu2JHM2CrvKOQAAANc"]
[Sat Feb 07 07:39:08.244567 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:63645] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYZ7nPEC82JnxmrnFYnt5AAAAUk"]
[Sat Feb 07 07:39:08.763690 2026] [:error] [pid 50672:tid 50710] [client 20.100.190.151:22753] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYZ7nA9o0jq1XS8Nv7Oj9gAAAEI"]
[Sat Feb 07 07:39:09.285206 2026] [:error] [pid 43182:tid 43205] [client 20.100.190.151:31689] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYZ7nfEC82JnxmrnFYnt5gAAAVU"]
[Sat Feb 07 07:39:09.805266 2026] [:error] [pid 43182:tid 43187] [client 20.100.190.151:63674] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYZ7nfEC82JnxmrnFYnt5wAAAUM"]
[Sat Feb 07 07:39:10.324821 2026] [:error] [pid 55157:tid 55178] [client 20.100.190.151:32552] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYZ7nn36JdtTn2bTEowOlwAAARA"]
[Sat Feb 07 07:39:10.850864 2026] [:error] [pid 43182:tid 43200] [client 20.100.190.151:22741] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYZ7nvEC82JnxmrnFYnt6gAAAVA"]
[Sat Feb 07 07:39:11.387270 2026] [:error] [pid 55157:tid 55182] [client 20.100.190.151:32531] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aYZ7n336JdtTn2bTEowOmQAAARQ"]
[Sat Feb 07 07:39:11.905983 2026] [:error] [pid 50672:tid 50731] [client 20.100.190.151:25933] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYZ7nw9o0jq1XS8Nv7Oj_QAAAFc"]
[Sat Feb 07 07:39:12.425760 2026] [:error] [pid 50672:tid 50711] [client 20.100.190.151:25118] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYZ7oA9o0jq1XS8Nv7Oj_gAAAEM"]
[Sat Feb 07 07:39:12.944586 2026] [:error] [pid 50672:tid 50717] [client 20.100.190.151:29707] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYZ7oA9o0jq1XS8Nv7OkAgAAAEk"]
[Sat Feb 07 07:39:13.461810 2026] [:error] [pid 50672:tid 50721] [client 20.100.190.151:27068] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnn_.php"] [unique_id "aYZ7oQ9o0jq1XS8Nv7OkBwAAAE0"]
[Sat Feb 07 07:39:13.982404 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:34466] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYZ7oetUmIu2JHM2CrvKPAAAAME"]
[Sat Feb 07 07:39:14.506714 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:22722] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYZ7ovEC82JnxmrnFYnt7wAAAUk"]
[Sat Feb 07 07:39:15.026088 2026] [:error] [pid 55157:tid 55173] [client 20.100.190.151:32286] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYZ7o336JdtTn2bTEowOnQAAAQs"]
[Sat Feb 07 07:39:15.545640 2026] [:error] [pid 43182:tid 43205] [client 20.100.190.151:27023] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/json.php"] [unique_id "aYZ7o_EC82JnxmrnFYnt8gAAAVU"]
[Sat Feb 07 07:39:16.065803 2026] [:error] [pid 50671:tid 50701] [client 20.100.190.151:10903] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYZ7pLvqLohWBI_mqBMD8QAAABU"]
[Sat Feb 07 07:39:16.585078 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:63641] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYZ7pOtUmIu2JHM2CrvKPwAAAM0"]
[Sat Feb 07 07:39:17.105368 2026] [:error] [pid 50780:tid 50788] [client 20.100.190.151:25104] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYZ7petUmIu2JHM2CrvKQAAAAMY"]
[Sat Feb 07 07:39:17.622827 2026] [:error] [pid 50780:tid 50790] [client 20.100.190.151:30486] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hzz.php"] [unique_id "aYZ7petUmIu2JHM2CrvKQQAAAMg"]
[Sat Feb 07 07:39:18.140785 2026] [:error] [pid 43182:tid 43190] [client 20.100.190.151:35169] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYZ7pvEC82JnxmrnFYnt9gAAAUY"]
[Sat Feb 07 07:39:18.659962 2026] [:error] [pid 50780:tid 50784] [client 20.100.190.151:29708] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYZ7putUmIu2JHM2CrvKQgAAAMI"]
[Sat Feb 07 07:39:19.180742 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:25962] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYZ7p_EC82JnxmrnFYnt-AAAAUs"]
[Sat Feb 07 07:39:19.700348 2026] [:error] [pid 55157:tid 55180] [client 20.100.190.151:33903] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aYZ7p336JdtTn2bTEowOoQAAARI"]
[Sat Feb 07 07:39:20.220678 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:63636] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYZ7qH36JdtTn2bTEowOogAAAQc"]
[Sat Feb 07 07:39:20.739333 2026] [:error] [pid 50672:tid 50719] [client 20.100.190.151:29705] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYZ7qA9o0jq1XS8Nv7OkCgAAAEs"]
[Sat Feb 07 07:39:21.259150 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:27056] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYZ7qfEC82JnxmrnFYnt-wAAAUQ"]
[Sat Feb 07 07:39:21.778318 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:32520] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aYZ7qfEC82JnxmrnFYnuAQAAAVc"]
[Sat Feb 07 07:39:22.296296 2026] [:error] [pid 50673:tid 50751] [client 20.100.190.151:25942] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7qmVwLsaZ7aKO2ckfzAAAAJA"]
[Sat Feb 07 07:39:22.814691 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:32275] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7qvEC82JnxmrnFYnuEQAAAUQ"]
[Sat Feb 07 07:39:23.334447 2026] [:error] [pid 43182:tid 43204] [client 20.100.190.151:22724] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7q_EC82JnxmrnFYnuFQAAAVQ"]
[Sat Feb 07 07:39:23.877201 2026] [:error] [pid 50671:tid 50698] [client 20.100.190.151:10884] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aYZ7q7vqLohWBI_mqBMD9AAAABI"]
[Sat Feb 07 07:39:24.423449 2026] [:error] [pid 50780:tid 50788] [client 20.100.190.151:29730] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYZ7rOtUmIu2JHM2CrvKUAAAAMY"]
[Sat Feb 07 07:39:24.943845 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:35161] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYZ7rPEC82JnxmrnFYnuGgAAAUs"]
[Sat Feb 07 07:39:25.462873 2026] [:error] [pid 50780:tid 50802] [client 20.100.190.151:37596] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYZ7retUmIu2JHM2CrvKUQAAANQ"]
[Sat Feb 07 07:39:25.981500 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:34459] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ps.php"] [unique_id "aYZ7rfEC82JnxmrnFYnuHAAAAUk"]
[Sat Feb 07 07:39:26.501084 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:27032] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYZ7rn36JdtTn2bTEowOsgAAARU"]
[Sat Feb 07 07:39:27.018562 2026] [:error] [pid 43182:tid 43189] [client 20.100.190.151:10904] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYZ7r_EC82JnxmrnFYnuHgAAAUU"]
[Sat Feb 07 07:39:27.537046 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:34478] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYZ7r336JdtTn2bTEowOtAAAAQc"]
[Sat Feb 07 07:39:28.054640 2026] [:error] [pid 50673:tid 50735] [client 20.100.190.151:19295] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aYZ7sGVwLsaZ7aKO2ckfzwAAAIA"]
[Sat Feb 07 07:39:28.573725 2026] [:error] [pid 50673:tid 50743] [client 20.100.190.151:26240] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYZ7sGVwLsaZ7aKO2ckf0QAAAIg"]
[Sat Feb 07 07:39:29.097171 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:33918] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYZ7sX36JdtTn2bTEowOtQAAAQY"]
[Sat Feb 07 07:39:29.622485 2026] [:error] [pid 50673:tid 50746] [client 20.100.190.151:10941] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYZ7sWVwLsaZ7aKO2ckf1AAAAIs"]
[Sat Feb 07 07:39:30.141163 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:37593] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/dd/"] [unique_id "aYZ7sutUmIu2JHM2CrvKVQAAAMc"]
[Sat Feb 07 07:39:30.689369 2026] [:error] [pid 50671:tid 50686] [client 20.100.190.151:30519] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYZ7srvqLohWBI_mqBMD-AAAAAY"]
[Sat Feb 07 07:39:31.221506 2026] [:error] [pid 55157:tid 55176] [client 20.100.190.151:29710] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYZ7s336JdtTn2bTEowOuQAAAQ4"]
[Sat Feb 07 07:39:31.740249 2026] [:error] [pid 43182:tid 43200] [client 20.100.190.151:29725] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYZ7s_EC82JnxmrnFYnuIQAAAVA"]
[Sat Feb 07 07:39:32.259819 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:19326] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aYZ7tPEC82JnxmrnFYnuIgAAAUc"]
[Sat Feb 07 07:39:32.779366 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:34448] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYZ7tPEC82JnxmrnFYnuIwAAAUs"]
[Sat Feb 07 07:39:33.297782 2026] [:error] [pid 43182:tid 43196] [client 20.100.190.151:37610] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYZ7tfEC82JnxmrnFYnuJAAAAUw"]
[Sat Feb 07 07:39:33.820849 2026] [:error] [pid 55157:tid 55170] [client 20.100.190.151:63644] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYZ7tX36JdtTn2bTEowOvQAAAQg"]
[Sat Feb 07 07:39:34.338068 2026] [:error] [pid 43182:tid 43193] [client 20.100.190.151:32528] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aYZ7tvEC82JnxmrnFYnuJgAAAUk"]
[Sat Feb 07 07:39:34.855868 2026] [:error] [pid 43182:tid 43194] [client 20.100.190.151:35189] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYZ7tvEC82JnxmrnFYnuKQAAAUo"]
[Sat Feb 07 07:39:35.377774 2026] [:error] [pid 50671:tid 50691] [client 20.100.190.151:35197] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYZ7t7vqLohWBI_mqBMEAAAAAAs"]
[Sat Feb 07 07:39:35.895704 2026] [:error] [pid 43182:tid 43184] [client 20.100.190.151:35155] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYZ7t_EC82JnxmrnFYnuLAAAAUA"]
[Sat Feb 07 07:39:36.414017 2026] [:error] [pid 50671:tid 50682] [client 20.100.190.151:25981] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aYZ7uLvqLohWBI_mqBMEBAAAAAI"]
[Sat Feb 07 07:39:36.934794 2026] [:error] [pid 43182:tid 43207] [client 20.100.190.151:32527] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYZ7uPEC82JnxmrnFYnuLgAAAVc"]
[Sat Feb 07 07:39:37.453257 2026] [:error] [pid 50672:tid 50727] [client 20.100.190.151:32281] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYZ7uQ9o0jq1XS8Nv7OkJQAAAFM"]
[Sat Feb 07 07:39:37.972590 2026] [:error] [pid 50673:tid 50756] [client 20.100.190.151:22723] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYZ7uWVwLsaZ7aKO2ckf5QAAAJU"]
[Sat Feb 07 07:39:38.492025 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:63632] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aYZ7uutUmIu2JHM2CrvKXwAAAMc"]
[Sat Feb 07 07:39:39.013054 2026] [:error] [pid 50673:tid 50748] [client 20.100.190.151:32524] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYZ7u2VwLsaZ7aKO2ckf6QAAAI0"]
[Sat Feb 07 07:39:39.530598 2026] [:error] [pid 55157:tid 55178] [client 20.100.190.151:32304] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYZ7u336JdtTn2bTEowOwgAAARA"]
[Sat Feb 07 07:39:40.049017 2026] [:error] [pid 55157:tid 55176] [client 20.100.190.151:27010] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYZ7vH36JdtTn2bTEowOxAAAAQ4"]
[Sat Feb 07 07:39:40.567896 2026] [:error] [pid 50673:tid 50750] [client 20.100.190.151:35360] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/user.php"] [unique_id "aYZ7vGVwLsaZ7aKO2ckf7wAAAI8"]
[Sat Feb 07 07:39:41.086985 2026] [:error] [pid 55157:tid 55170] [client 20.100.190.151:35389] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aYZ7vX36JdtTn2bTEowOyAAAAQg"]
[Sat Feb 07 07:39:41.615868 2026] [:error] [pid 50672:tid 50721] [client 20.100.190.151:33876] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aYZ7vQ9o0jq1XS8Nv7OkKwAAAE0"]
[Sat Feb 07 07:39:42.135752 2026] [:error] [pid 50780:tid 50805] [client 20.100.190.151:25935] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aYZ7vutUmIu2JHM2CrvKYgAAANc"]
[Sat Feb 07 07:39:42.654799 2026] [:error] [pid 50672:tid 50716] [client 20.100.190.151:27057] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/"] [unique_id "aYZ7vg9o0jq1XS8Nv7OkLwAAAEg"]
[Sat Feb 07 07:39:43.174491 2026] [:error] [pid 55157:tid 55186] [client 20.100.190.151:32274] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7v336JdtTn2bTEowOyQAAARg"]
[Sat Feb 07 07:39:43.692262 2026] [:error] [pid 43182:tid 43204] [client 20.100.190.151:32523] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7v_EC82JnxmrnFYnuNwAAAVQ"]
[Sat Feb 07 07:39:44.211088 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:35170] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7wOtUmIu2JHM2CrvKZQAAAME"]
[Sat Feb 07 07:39:44.729685 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:34472] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aYZ7wH36JdtTn2bTEowOygAAARU"]
[Sat Feb 07 07:39:45.247301 2026] [:error] [pid 43182:tid 43191] [client 20.100.190.151:29696] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7wfEC82JnxmrnFYnuOQAAAUc"]
[Sat Feb 07 07:39:45.765340 2026] [:error] [pid 50672:tid 50730] [client 20.100.190.151:37630] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7wQ9o0jq1XS8Nv7OkXAAAAFY"]
[Sat Feb 07 07:39:46.282826 2026] [:error] [pid 43182:tid 43184] [client 20.100.190.151:10898] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7wvEC82JnxmrnFYnuPAAAAUA"]
[Sat Feb 07 07:39:46.801012 2026] [:error] [pid 55157:tid 55180] [client 20.100.190.151:10889] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aYZ7wn36JdtTn2bTEowOzAAAARI"]
[Sat Feb 07 07:39:47.320228 2026] [:error] [pid 55157:tid 55185] [client 20.100.190.151:63672] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rip.php"] [unique_id "aYZ7w336JdtTn2bTEowOzQAAARc"]
[Sat Feb 07 07:39:47.838230 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:22748] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rip.php"] [unique_id "aYZ7w-tUmIu2JHM2CrvKhwAAAMc"]
[Sat Feb 07 07:39:48.356214 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:25941] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rip.php"] [unique_id "aYZ7xH36JdtTn2bTEowO0AAAAQY"]
[Sat Feb 07 07:39:48.874554 2026] [:error] [pid 50672:tid 50718] [client 20.100.190.151:19274] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rip.php"] [unique_id "aYZ7xA9o0jq1XS8Nv7OkeAAAAEo"]
[Sat Feb 07 07:39:49.394412 2026] [:error] [pid 50673:tid 50756] [client 20.100.190.151:35194] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp4.php"] [unique_id "aYZ7xWVwLsaZ7aKO2ckgAwAAAJU"]
[Sat Feb 07 07:39:49.912998 2026] [:error] [pid 50780:tid 50799] [client 20.100.190.151:37587] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp4.php"] [unique_id "aYZ7xetUmIu2JHM2CrvKjAAAANE"]
[Sat Feb 07 07:39:50.431958 2026] [:error] [pid 50671:tid 50687] [client 20.100.190.151:10936] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp4.php"] [unique_id "aYZ7xrvqLohWBI_mqBMEPgAAAAc"]
[Sat Feb 07 07:39:50.951783 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:27035] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp4.php"] [unique_id "aYZ7xutUmIu2JHM2CrvKjgAAAM0"]
[Sat Feb 07 07:39:51.470153 2026] [:error] [pid 50673:tid 50739] [client 20.100.190.151:32529] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYZ7x2VwLsaZ7aKO2ckgBwAAAIQ"]
[Sat Feb 07 07:39:51.991934 2026] [:error] [pid 50672:tid 50720] [client 20.100.190.151:34449] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYZ7xw9o0jq1XS8Nv7OkewAAAEw"]
[Sat Feb 07 07:39:52.521342 2026] [proxy_fcgi:error] [pid 55157:tid 55181] [client 20.100.190.151:32530] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:39:53.048334 2026] [proxy_fcgi:error] [pid 55157:tid 55186] [client 20.100.190.151:32530] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:39:53.576331 2026] [proxy_fcgi:error] [pid 55157:tid 55166] [client 20.100.190.151:32530] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:39:53.841967 2026] [proxy_fcgi:error] [pid 55157:tid 55180] [client 20.100.190.151:32530] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:39:54.368154 2026] [proxy_fcgi:error] [pid 55157:tid 55162] [client 20.100.190.151:32530] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 07:39:55.420825 2026] [:error] [pid 55157:tid 55167] [client 20.100.190.151:32530] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYZ7y336JdtTn2bTEowO5gAAAQU"]
[Sat Feb 07 07:39:55.939529 2026] [:error] [pid 50672:tid 50714] [client 20.100.190.151:22749] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYZ7yw9o0jq1XS8Nv7OkfgAAAEY"]
[Sat Feb 07 07:39:56.458363 2026] [:error] [pid 50780:tid 50804] [client 20.100.190.151:29698] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYZ7zOtUmIu2JHM2CrvKkAAAANY"]
[Sat Feb 07 07:39:56.977071 2026] [:error] [pid 50673:tid 50759] [client 20.100.190.151:27024] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dr.php"] [unique_id "aYZ7zGVwLsaZ7aKO2ckgFgAAAJg"]
[Sat Feb 07 07:39:57.496773 2026] [:error] [pid 50673:tid 50747] [client 20.100.190.151:29756] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYZ7zWVwLsaZ7aKO2ckgFwAAAIw"]
[Sat Feb 07 07:39:58.014667 2026] [:error] [pid 50672:tid 50709] [client 20.100.190.151:35176] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYZ7zg9o0jq1XS8Nv7OkgAAAAEE"]
[Sat Feb 07 07:39:58.534290 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:29717] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYZ7zutUmIu2JHM2CrvKlQAAAME"]
[Sat Feb 07 07:39:59.057392 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:34484] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raw.php"] [unique_id "aYZ7z2VwLsaZ7aKO2ckgGgAAAJE"]
[Sat Feb 07 07:39:59.575511 2026] [:error] [pid 55157:tid 55180] [client 20.100.190.151:31729] [client 20.100.190.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aYZ7z336JdtTn2bTEowO6QAAARI"]
[Sat Feb 07 07:40:00.096299 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:35358] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYZ70GVwLsaZ7aKO2ckgGwAAAJQ"]
[Sat Feb 07 07:40:00.618406 2026] [:error] [pid 50673:tid 50746] [client 20.100.190.151:27062] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYZ70GVwLsaZ7aKO2ckgHQAAAIs"]
[Sat Feb 07 07:40:01.138216 2026] [:error] [pid 50673:tid 50756] [client 20.100.190.151:25958] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aYZ70WVwLsaZ7aKO2ckgHwAAAJU"]
[Sat Feb 07 07:40:01.659203 2026] [:error] [pid 50671:tid 50689] [client 20.100.190.151:37590] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYZ70bvqLohWBI_mqBMETQAAAAk"]
[Sat Feb 07 07:40:02.179162 2026] [:error] [pid 55157:tid 55163] [client 20.100.190.151:27025] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYZ70n36JdtTn2bTEowO6wAAAQE"]
[Sat Feb 07 07:40:02.697194 2026] [:error] [pid 50780:tid 50791] [client 20.100.190.151:32284] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYZ70utUmIu2JHM2CrvKmQAAAMk"]
[Sat Feb 07 07:40:03.216361 2026] [:error] [pid 50780:tid 50792] [client 20.100.190.151:10892] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o2.php"] [unique_id "aYZ70-tUmIu2JHM2CrvKmwAAAMo"]
[Sat Feb 07 07:40:03.734490 2026] [:error] [pid 55157:tid 55179] [client 20.100.190.151:25963] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ70336JdtTn2bTEowO7AAAARE"]
[Sat Feb 07 07:40:04.255820 2026] [:error] [pid 43182:tid 43194] [client 20.100.190.151:37619] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ71PEC82JnxmrnFYnuVwAAAUo"]
[Sat Feb 07 07:40:04.775511 2026] [:error] [pid 50671:tid 50687] [client 20.100.190.151:32553] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ71LvqLohWBI_mqBMETgAAAAc"]
[Sat Feb 07 07:40:05.295968 2026] [:error] [pid 50671:tid 50691] [client 20.100.190.151:35138] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aYZ71bvqLohWBI_mqBMETwAAAAs"]
[Sat Feb 07 07:40:05.815162 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:35336] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYZ71etUmIu2JHM2CrvKnQAAAME"]
[Sat Feb 07 07:40:06.333417 2026] [:error] [pid 43182:tid 43204] [client 20.100.190.151:32293] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYZ71vEC82JnxmrnFYnuWQAAAVQ"]
[Sat Feb 07 07:40:06.851431 2026] [:error] [pid 43182:tid 43195] [client 20.100.190.151:25982] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYZ71vEC82JnxmrnFYnuWwAAAUs"]
[Sat Feb 07 07:40:07.370287 2026] [:error] [pid 50672:tid 50721] [client 20.100.190.151:29726] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dlu.php"] [unique_id "aYZ71w9o0jq1XS8Nv7OkhQAAAE0"]
[Sat Feb 07 07:40:07.888169 2026] [:error] [pid 50780:tid 50794] [client 20.100.190.151:37581] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYZ71-tUmIu2JHM2CrvKpQAAAMw"]
[Sat Feb 07 07:40:08.406057 2026] [:error] [pid 55157:tid 55174] [client 20.100.190.151:33885] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYZ72H36JdtTn2bTEowO8AAAAQw"]
[Sat Feb 07 07:40:08.925148 2026] [:error] [pid 50673:tid 50741] [client 20.100.190.151:35331] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYZ72GVwLsaZ7aKO2ckgJQAAAIY"]
[Sat Feb 07 07:40:09.444564 2026] [:error] [pid 50673:tid 50752] [client 20.100.190.151:37620] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/about.php"] [unique_id "aYZ72WVwLsaZ7aKO2ckgJwAAAJE"]
[Sat Feb 07 07:40:09.963045 2026] [:error] [pid 50673:tid 50755] [client 20.100.190.151:31720] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYZ72WVwLsaZ7aKO2ckgKAAAAJQ"]
[Sat Feb 07 07:40:10.482295 2026] [:error] [pid 50671:tid 50703] [client 20.100.190.151:27071] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYZ72rvqLohWBI_mqBMEUQAAABc"]
[Sat Feb 07 07:40:10.999972 2026] [:error] [pid 43182:tid 43188] [client 20.100.190.151:32538] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYZ72vEC82JnxmrnFYnuXgAAAUQ"]
[Sat Feb 07 07:40:11.518605 2026] [:error] [pid 50672:tid 50712] [client 20.100.190.151:34460] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aYZ72w9o0jq1XS8Nv7OkiAAAAEQ"]
[Sat Feb 07 07:40:12.036406 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:35369] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYZ73LvqLohWBI_mqBMEVAAAABQ"]
[Sat Feb 07 07:40:12.555468 2026] [:error] [pid 55157:tid 55168] [client 20.100.190.151:10928] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYZ73H36JdtTn2bTEowO9AAAAQY"]
[Sat Feb 07 07:40:13.074935 2026] [:error] [pid 55157:tid 55162] [client 20.100.190.151:63670] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYZ73X36JdtTn2bTEowO9gAAAQA"]
[Sat Feb 07 07:40:13.593378 2026] [:error] [pid 50672:tid 50727] [client 20.100.190.151:35340] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aYZ73Q9o0jq1XS8Nv7OkiwAAAFM"]
[Sat Feb 07 07:40:14.112216 2026] [:error] [pid 50671:tid 50680] [client 20.100.190.151:32280] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYZ73rvqLohWBI_mqBMEVQAAAAA"]
[Sat Feb 07 07:40:14.640330 2026] [:error] [pid 50671:tid 50684] [client 20.100.190.151:63619] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYZ73rvqLohWBI_mqBMEVgAAAAQ"]
[Sat Feb 07 07:40:15.158163 2026] [:error] [pid 55157:tid 55164] [client 20.100.190.151:33871] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYZ73336JdtTn2bTEowO-wAAAQI"]
[Sat Feb 07 07:40:15.677305 2026] [:error] [pid 50780:tid 50801] [client 20.100.190.151:27046] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "aYZ73-tUmIu2JHM2CrvKrwAAANM"]
[Sat Feb 07 07:40:16.195874 2026] [:error] [pid 50780:tid 50792] [client 20.100.190.151:31683] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYZ74OtUmIu2JHM2CrvKsQAAAMo"]
[Sat Feb 07 07:40:16.714804 2026] [:error] [pid 55157:tid 55169] [client 20.100.190.151:27019] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYZ74H36JdtTn2bTEowO_wAAAQc"]
[Sat Feb 07 07:40:17.233869 2026] [:error] [pid 50780:tid 50800] [client 20.100.190.151:27028] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYZ74etUmIu2JHM2CrvKswAAANI"]
[Sat Feb 07 07:40:17.752729 2026] [:error] [pid 50780:tid 50789] [client 20.100.190.151:10901] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aYZ74etUmIu2JHM2CrvKtQAAAMc"]
[Sat Feb 07 07:40:18.272944 2026] [:error] [pid 50780:tid 50782] [client 20.100.190.151:25925] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYZ74utUmIu2JHM2CrvKtgAAAMA"]
[Sat Feb 07 07:40:18.794751 2026] [:error] [pid 50673:tid 50759] [client 20.100.190.151:32319] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYZ74mVwLsaZ7aKO2ckgMAAAAJg"]
[Sat Feb 07 07:40:19.313452 2026] [:error] [pid 50671:tid 50689] [client 20.100.190.151:32259] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYZ747vqLohWBI_mqBMEWQAAAAk"]
[Sat Feb 07 07:40:19.837373 2026] [:error] [pid 55157:tid 55183] [client 20.100.190.151:10886] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/des.php"] [unique_id "aYZ74336JdtTn2bTEowPAwAAARU"]
[Sat Feb 07 07:40:20.355807 2026] [:error] [pid 50673:tid 50758] [client 20.100.190.151:10905] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYZ75GVwLsaZ7aKO2ckgMQAAAJc"]
[Sat Feb 07 07:40:20.872995 2026] [:error] [pid 50673:tid 50750] [client 20.100.190.151:32548] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYZ75GVwLsaZ7aKO2ckgMwAAAI8"]
[Sat Feb 07 07:40:21.390424 2026] [:error] [pid 50780:tid 50795] [client 20.100.190.151:19309] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYZ75etUmIu2JHM2CrvKvAAAAM0"]
[Sat Feb 07 07:40:21.907918 2026] [:error] [pid 50780:tid 50800] [client 20.100.190.151:29744] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aYZ75etUmIu2JHM2CrvKvwAAANI"]
[Sat Feb 07 07:40:22.426530 2026] [:error] [pid 55157:tid 55173] [client 20.100.190.151:25956] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYZ75n36JdtTn2bTEowPBQAAAQs"]
[Sat Feb 07 07:40:22.944290 2026] [:error] [pid 50672:tid 50731] [client 20.100.190.151:34434] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYZ75g9o0jq1XS8Nv7OkjwAAAFc"]
[Sat Feb 07 07:40:23.461793 2026] [:error] [pid 50671:tid 50700] [client 20.100.190.151:35187] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYZ757vqLohWBI_mqBMEXQAAABQ"]
[Sat Feb 07 07:40:23.993434 2026] [:error] [pid 50780:tid 50783] [client 20.100.190.151:25931] [client 20.100.190.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aYZ75-tUmIu2JHM2CrvKwwAAAME"]
[Sat Feb 07 11:52:38.743228 2026] [:error] [pid 50673:tid 50742] [client 164.92.213.111:54122] [client 164.92.213.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.213.111, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYa3BmVwLsaZ7aKO2clqrAAAAIc"]
[Sat Feb 07 11:52:38.752442 2026] [proxy_fcgi:error] [pid 50673:tid 50742] [client 164.92.213.111:54122] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 11:59:56.593413 2026] [:error] [pid 43182:tid 43186] [client 104.248.192.177:51944] [client 104.248.192.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.192.177, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYa4vPEC82JnxmrnFYk88QAAAUI"]
[Sat Feb 07 11:59:56.603242 2026] [proxy_fcgi:error] [pid 43182:tid 43186] [client 104.248.192.177:51944] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 12:08:33.131600 2026] [:error] [pid 50780:tid 50786] [client 182.42.110.255:34782] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYa6wetUmIu2JHM2CrsPxAAAAMQ"]
[Sat Feb 07 12:53:56.338196 2026] [:error] [pid 43182:tid 43204] [client 49.51.243.156:47072] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYbFZPEC82JnxmrnFYlH9gAAAVQ"]
[Sat Feb 07 15:04:03.934798 2026] [:error] [pid 43182:tid 43199] [client 43.164.197.177:33802] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYbj4_EC82JnxmrnFYlmKAAAAU8"]
[Sat Feb 07 20:55:08.737934 2026] [:error] [pid 50672:tid 50726] [client 43.153.35.128:52924] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYc2LA9o0jq1XS8Nv7NGMwAAAFI"]
[Sun Feb 08 00:16:09.096752 2026] [:error] [pid 58058:tid 58079] [client 103.77.107.178:63542] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aYdlSbz-Qlvs65S4DP9svQAAAZI"]
[Sun Feb 08 00:16:09.671986 2026] [:error] [pid 55157:tid 55177] [client 103.77.107.178:63800] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aYdlSX36JdtTn2bTEowP_gAAAQ8"]
[Sun Feb 08 04:21:16.007843 2026] [proxy_fcgi:error] [pid 24423:tid 24503] [client 20.215.184.141:32057] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 04:21:16.269159 2026] [:error] [pid 24423:tid 24492] [client 20.215.184.141:32057] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYeevE3f9n1Y0TpV5YZsewAAAIc"]
[Sun Feb 08 04:21:23.333020 2026] [:error] [pid 24422:tid 24461] [client 20.215.184.141:43984] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYeewyNNjcLoSCLKhTdvnAAAAEM"]
[Sun Feb 08 04:21:26.199323 2026] [:error] [pid 24423:tid 24486] [client 20.215.184.141:37322] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYeexk3f9n1Y0TpV5YZsjQAAAIE"]
[Sun Feb 08 04:21:27.807359 2026] [:error] [pid 24422:tid 24468] [client 20.215.184.141:26127] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYeexyNNjcLoSCLKhTdvowAAAEo"]
[Sun Feb 08 04:21:29.319311 2026] [:error] [pid 24530:tid 24545] [client 20.215.184.141:2124] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byel.php"] [unique_id "aYeeyUazNRCs1GRWrh7iOQAAAM0"]
[Sun Feb 08 04:21:31.879891 2026] [:error] [pid 24530:tid 24540] [client 20.215.184.141:32038] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byel.php"] [unique_id "aYeey0azNRCs1GRWrh7iPwAAAMg"]
[Sun Feb 08 04:21:33.864290 2026] [:error] [pid 24423:tid 24508] [client 20.215.184.141:43974] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byel.php"] [unique_id "aYeezU3f9n1Y0TpV5YZsowAAAJc"]
[Sun Feb 08 04:21:36.726002 2026] [:error] [pid 24421:tid 24454] [client 20.215.184.141:2267] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byel.php"] [unique_id "aYee0Kp7cTzhX5M1IP8CHgAAABc"]
[Sun Feb 08 04:21:38.078308 2026] [:error] [pid 24423:tid 24507] [client 20.215.184.141:24360] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layou.php"] [unique_id "aYee0k3f9n1Y0TpV5YZsrwAAAJY"]
[Sun Feb 08 04:21:39.686005 2026] [:error] [pid 56906:tid 56909] [client 20.215.184.141:26126] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layou.php"] [unique_id "aYee0_xl3WX27-WXfDh1AgAAAQE"]
[Sun Feb 08 04:21:40.340936 2026] [:error] [pid 24530:tid 24548] [client 20.215.184.141:2122] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layou.php"] [unique_id "aYee1EazNRCs1GRWrh7iSAAAANA"]
[Sun Feb 08 04:21:42.437834 2026] [:error] [pid 24421:tid 24442] [client 20.215.184.141:37321] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layou.php"] [unique_id "aYee1qp7cTzhX5M1IP8CJwAAAAs"]
[Sun Feb 08 04:21:44.367080 2026] [:error] [pid 24530:tid 24552] [client 20.215.184.141:43972] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lgsts.php"] [unique_id "aYee2EazNRCs1GRWrh7iTgAAANQ"]
[Sun Feb 08 04:21:46.713397 2026] [:error] [pid 56906:tid 56931] [client 20.215.184.141:23705] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lgsts.php"] [unique_id "aYee2vxl3WX27-WXfDh1CQAAARc"]
[Sun Feb 08 04:21:48.843188 2026] [:error] [pid 24530:tid 24533] [client 20.215.184.141:24334] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lgsts.php"] [unique_id "aYee3EazNRCs1GRWrh7iYQAAAME"]
[Sun Feb 08 04:21:52.206370 2026] [:error] [pid 24422:tid 24464] [client 20.215.184.141:26152] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lgsts.php"] [unique_id "aYee4CNNjcLoSCLKhTdvzgAAAEY"]
[Sun Feb 08 04:21:53.494095 2026] [:error] [pid 24421:tid 24441] [client 20.215.184.141:43973] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tourpa.php"] [unique_id "aYee4ap7cTzhX5M1IP8CPQAAAAo"]
[Sun Feb 08 04:21:58.042042 2026] [:error] [pid 24421:tid 24446] [client 20.215.184.141:2268] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tourpa.php"] [unique_id "aYee5qp7cTzhX5M1IP8CRAAAAA8"]
[Sun Feb 08 04:22:00.366696 2026] [:error] [pid 56906:tid 56914] [client 20.215.184.141:2241] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tourpa.php"] [unique_id "aYee6Pxl3WX27-WXfDh1JwAAAQY"]
[Sun Feb 08 04:22:01.663958 2026] [:error] [pid 56906:tid 56928] [client 20.215.184.141:29794] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tourpa.php"] [unique_id "aYee6fxl3WX27-WXfDh1LQAAARQ"]
[Sun Feb 08 04:22:02.894561 2026] [:error] [pid 24530:tid 24551] [client 20.215.184.141:2149] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yvtuizub.php"] [unique_id "aYee6kazNRCs1GRWrh7icwAAANM"]
[Sun Feb 08 04:22:03.973715 2026] [:error] [pid 56906:tid 56932] [client 20.215.184.141:23699] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yvtuizub.php"] [unique_id "aYee6_xl3WX27-WXfDh1NAAAARg"]
[Sun Feb 08 04:22:05.084081 2026] [:error] [pid 24422:tid 24459] [client 20.215.184.141:37821] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yvtuizub.php"] [unique_id "aYee7SNNjcLoSCLKhTdv5gAAAEE"]
[Sun Feb 08 04:22:06.574858 2026] [:error] [pid 56906:tid 56927] [client 20.215.184.141:23710] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yvtuizub.php"] [unique_id "aYee7vxl3WX27-WXfDh1PQAAARM"]
[Sun Feb 08 04:22:08.937610 2026] [:error] [pid 56906:tid 56917] [client 20.215.184.141:24337] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mln.php"] [unique_id "aYee8Pxl3WX27-WXfDh1RQAAAQk"]
[Sun Feb 08 04:22:09.846376 2026] [:error] [pid 24423:tid 24496] [client 20.215.184.141:30245] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mln.php"] [unique_id "aYee8U3f9n1Y0TpV5YZs0QAAAIs"]
[Sun Feb 08 04:22:10.954498 2026] [:error] [pid 24530:tid 24539] [client 20.215.184.141:44020] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mln.php"] [unique_id "aYee8kazNRCs1GRWrh7ihQAAAMc"]
[Sun Feb 08 04:22:13.141620 2026] [:error] [pid 24530:tid 24556] [client 20.215.184.141:37799] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mln.php"] [unique_id "aYee9UazNRCs1GRWrh7iiAAAANg"]
[Sun Feb 08 04:22:15.922771 2026] [:error] [pid 24423:tid 24507] [client 20.215.184.141:37818] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aYee903f9n1Y0TpV5YZs4QAAAJY"]
[Sun Feb 08 04:22:23.711478 2026] [proxy_fcgi:error] [pid 24423:tid 24497] [client 20.215.184.141:29089] AH01071: Got error 'Primary script unknown'
[Sun Feb 08 08:00:02.283160 2026] [:error] [pid 24530:tid 24534] [client 175.6.217.4:50039] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYfSAkazNRCs1GRWrh4rGwAAAMI"]
[Sun Feb 08 08:14:39.460070 2026] [:error] [pid 24421:tid 24446] [client 170.106.72.93:54466] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYfVb6p7cTzhX5M1IP9kCAAAAA8"]
[Sun Feb 08 08:22:41.947286 2026] [:error] [pid 24530:tid 24533] [client 158.158.72.156:11406] [client 158.158.72.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYfXUUazNRCs1GRWrh4zRAAAAME"]
[Sun Feb 08 08:22:43.573760 2026] [:error] [pid 24421:tid 24445] [client 158.158.72.156:14283] [client 158.158.72.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYfXU6p7cTzhX5M1IP9nxwAAAA4"]
[Sun Feb 08 08:22:45.318917 2026] [:error] [pid 56906:tid 56911] [client 158.158.72.156:12223] [client 158.158.72.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYfXVfxl3WX27-WXfDj1dQAAAQM"]
[Sun Feb 08 08:22:47.057238 2026] [:error] [pid 24422:tid 24472] [client 158.158.72.156:40090] [client 158.158.72.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYfXVyNNjcLoSCLKhTfI-wAAAE4"]
[Sun Feb 08 17:02:05.570066 2026] [:error] [pid 24423:tid 24506] [client 43.157.50.58:36366] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYhRDU3f9n1Y0TpV5YZGoAAAAJU"]
[Sun Feb 08 21:15:39.307909 2026] [:error] [pid 56906:tid 56924] [client 122.51.236.174:36206] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYiMe_xl3WX27-WXfDjRNAAAARA"]
[Sun Feb 08 22:24:09.946228 2026] [:error] [pid 9422:tid 9431] [client 43.134.141.244:51182] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYicia9DqDJC68qBbywiSQAAAYY"]
[Mon Feb 09 01:45:07.556960 2026] [proxy_fcgi:error] [pid 6723:tid 6787] [client 20.100.184.236:33751] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:07.816795 2026] [:error] [pid 6723:tid 6808] [client 20.100.184.236:33751] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/new.php"] [unique_id "aYjLozkiu6gHwS33P0qejQAAA1c"]
[Mon Feb 09 01:45:10.883304 2026] [proxy_fcgi:error] [pid 9482:tid 9553] [client 20.100.184.236:30473] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:11.187988 2026] [proxy_fcgi:error] [pid 9482:tid 9555] [client 20.100.184.236:30473] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:11.471475 2026] [proxy_fcgi:error] [pid 9482:tid 9548] [client 20.100.184.236:30473] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:13.012949 2026] [proxy_fcgi:error] [pid 9482:tid 9561] [client 20.100.184.236:30473] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:13.833645 2026] [proxy_fcgi:error] [pid 9482:tid 9552] [client 20.100.184.236:30473] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:14.845026 2026] [proxy_fcgi:error] [pid 9482:tid 9556] [client 20.100.184.236:30473] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:45:15.106191 2026] [:error] [pid 9482:tid 9545] [client 20.100.184.236:30473] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/alfa-rex.php7"] [unique_id "aYjLq8TkGH_puEFp5zPZbQAAA8Y"]
[Mon Feb 09 01:45:16.372211 2026] [:error] [pid 24423:tid 24493] [client 20.100.184.236:30499] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/alfa-rex.php7"] [unique_id "aYjLrE3f9n1Y0TpV5YaRvwAAAIg"]
[Mon Feb 09 01:45:17.741809 2026] [:error] [pid 6662:tid 6667] [client 20.100.184.236:59466] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/alfa-rex.php7"] [unique_id "aYjLrd-oEK1ut16KiNIldQAAAkE"]
[Mon Feb 09 01:45:19.442694 2026] [:error] [pid 9422:tid 9439] [client 20.100.184.236:53722] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/alfa-rex.php7"] [unique_id "aYjLr69DqDJC68qBbyxUfgAAAY4"]
[Mon Feb 09 01:45:20.586746 2026] [:error] [pid 24530:tid 24543] [client 20.100.184.236:40201] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYjLsEazNRCs1GRWrh5DRwAAAMs"]
[Mon Feb 09 01:45:23.159712 2026] [:error] [pid 24530:tid 24555] [client 20.100.184.236:19725] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYjLs0azNRCs1GRWrh5DSgAAANc"]
[Mon Feb 09 01:45:26.493390 2026] [:error] [pid 24530:tid 24554] [client 20.100.184.236:59493] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYjLtkazNRCs1GRWrh5DSwAAANY"]
[Mon Feb 09 01:45:28.661594 2026] [:error] [pid 24530:tid 24556] [client 20.100.184.236:30516] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYjLuEazNRCs1GRWrh5DTQAAANg"]
[Mon Feb 09 01:45:29.890095 2026] [:error] [pid 6662:tid 6666] [client 20.100.184.236:33700] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYjLud-oEK1ut16KiNIlgQAAAkA"]
[Mon Feb 09 01:45:32.741323 2026] [:error] [pid 6662:tid 6687] [client 20.100.184.236:50122] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYjLvN-oEK1ut16KiNIlhQAAAlU"]
[Mon Feb 09 01:45:33.744790 2026] [:error] [pid 6723:tid 6793] [client 20.100.184.236:65115] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYjLvTkiu6gHwS33P0qenQAAA0g"]
[Mon Feb 09 01:45:34.813440 2026] [:error] [pid 24421:tid 24444] [client 20.100.184.236:63254] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYjLvqp7cTzhX5M1IP9i-QAAAA0"]
[Mon Feb 09 01:45:36.087704 2026] [:error] [pid 6663:tid 6705] [client 20.100.184.236:59463] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/proxy.php"] [unique_id "aYjLwGGI3uHqWdeZM76pswAAAow"]
[Mon Feb 09 01:45:37.374415 2026] [:error] [pid 6662:tid 6671] [client 20.100.184.236:42470] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/proxy.php"] [unique_id "aYjLwd-oEK1ut16KiNIljAAAAkU"]
[Mon Feb 09 01:45:38.824950 2026] [:error] [pid 24423:tid 24489] [client 20.100.184.236:51299] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/proxy.php"] [unique_id "aYjLwk3f9n1Y0TpV5YaR0wAAAIQ"]
[Mon Feb 09 01:45:39.892302 2026] [:error] [pid 9422:tid 9438] [client 20.100.184.236:51299] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/proxy.php"] [unique_id "aYjLw69DqDJC68qBbyxUmAAAAY0"]
[Mon Feb 09 01:45:41.419406 2026] [:error] [pid 6723:tid 6789] [client 20.100.184.236:42449] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aYjLxTkiu6gHwS33P0qepgAAA0Q"]
[Mon Feb 09 01:45:42.460185 2026] [:error] [pid 24423:tid 24494] [client 20.100.184.236:50124] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aYjLxk3f9n1Y0TpV5YaR3QAAAIk"]
[Mon Feb 09 01:45:43.276703 2026] [:error] [pid 24530:tid 24532] [client 20.100.184.236:63266] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aYjLx0azNRCs1GRWrh5DXgAAAMA"]
[Mon Feb 09 01:45:44.020273 2026] [:error] [pid 6662:tid 6684] [client 20.100.184.236:30505] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aYjLyN-oEK1ut16KiNIlkAAAAlI"]
[Mon Feb 09 01:45:44.771899 2026] [:error] [pid 9482:tid 9539] [client 20.100.184.236:19764] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYjLyMTkGH_puEFp5zPZewAAA8A"]
[Mon Feb 09 01:45:45.564567 2026] [:error] [pid 6723:tid 6797] [client 20.100.184.236:59517] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYjLyTkiu6gHwS33P0qesAAAA0w"]
[Mon Feb 09 01:45:46.300839 2026] [:error] [pid 6662:tid 6672] [client 20.100.184.236:16580] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYjLyt-oEK1ut16KiNIlkQAAAkY"]
[Mon Feb 09 01:45:47.693476 2026] [:error] [pid 24530:tid 24541] [client 20.100.184.236:21795] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYjLy0azNRCs1GRWrh5DYwAAAMk"]
[Mon Feb 09 01:45:48.484529 2026] [:error] [pid 24530:tid 24536] [client 20.100.184.236:32282] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aYjLzEazNRCs1GRWrh5DZQAAAMQ"]
[Mon Feb 09 01:45:49.687732 2026] [:error] [pid 9482:tid 9546] [client 20.100.184.236:42478] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aYjLzcTkGH_puEFp5zPZggAAA8c"]
[Mon Feb 09 01:45:50.392790 2026] [:error] [pid 6662:tid 6674] [client 20.100.184.236:42451] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aYjLzt-oEK1ut16KiNIllgAAAkg"]
[Mon Feb 09 01:45:51.186784 2026] [:error] [pid 6630:tid 6633] [client 20.100.184.236:16254] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aYjLz52jf0FBTEb_cWQcKAAAAgA"]
[Mon Feb 09 01:45:51.850782 2026] [:error] [pid 6662:tid 6673] [client 20.100.184.236:42432] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYjLz9-oEK1ut16KiNIllwAAAkc"]
[Mon Feb 09 01:45:52.638661 2026] [:error] [pid 24530:tid 24550] [client 20.100.184.236:32261] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYjL0EazNRCs1GRWrh5DcQAAANI"]
[Mon Feb 09 01:45:53.197191 2026] [:error] [pid 24530:tid 24541] [client 20.100.184.236:64483] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYjL0UazNRCs1GRWrh5DcgAAAMk"]
[Mon Feb 09 01:45:53.916800 2026] [:error] [pid 24530:tid 24534] [client 20.100.184.236:45904] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYjL0UazNRCs1GRWrh5DdAAAAMI"]
[Mon Feb 09 01:45:54.615943 2026] [:error] [pid 43900:tid 43906] [client 20.100.184.236:28328] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aYjL0uWrhnpm_Csk3knTIwAAAUM"]
[Mon Feb 09 01:45:55.307679 2026] [:error] [pid 6662:tid 6690] [client 20.100.184.236:32265] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aYjL09-oEK1ut16KiNIlmQAAAlg"]
[Mon Feb 09 01:45:55.898598 2026] [:error] [pid 6723:tid 6802] [client 20.100.184.236:64450] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aYjL0zkiu6gHwS33P0qeuQAAA1E"]
[Mon Feb 09 01:45:56.995982 2026] [:error] [pid 6662:tid 6675] [client 20.100.184.236:64499] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aYjL1N-oEK1ut16KiNIlmwAAAkk"]
[Mon Feb 09 01:45:58.295731 2026] [:error] [pid 6663:tid 6697] [client 20.100.184.236:64450] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/common.php"] [unique_id "aYjL1mGI3uHqWdeZM76p0AAAAoQ"]
[Mon Feb 09 01:45:59.615046 2026] [:error] [pid 24421:tid 24444] [client 20.100.184.236:6562] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/common.php"] [unique_id "aYjL16p7cTzhX5M1IP9jAAAAAA0"]
[Mon Feb 09 01:46:03.041806 2026] [:error] [pid 9422:tid 9438] [client 20.100.184.236:16253] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/common.php"] [unique_id "aYjL269DqDJC68qBbyxUsgAAAY0"]
[Mon Feb 09 01:46:05.052664 2026] [:error] [pid 6723:tid 6804] [client 20.100.184.236:45928] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/common.php"] [unique_id "aYjL3Tkiu6gHwS33P0qexAAAA1M"]
[Mon Feb 09 01:46:12.354762 2026] [:error] [pid 9422:tid 9444] [client 20.100.184.236:16599] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test/adminer-4.6.0-mysql.php"] [unique_id "aYjL5K9DqDJC68qBbyxUwAAAAZM"]
[Mon Feb 09 01:46:18.284358 2026] [:error] [pid 9422:tid 9427] [client 20.100.184.236:15721] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/defaults.php"] [unique_id "aYjL6q9DqDJC68qBbyxUzwAAAYI"]
[Mon Feb 09 01:46:25.746772 2026] [proxy_fcgi:error] [pid 24421:tid 24438] [client 20.100.184.236:31805] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:26.292684 2026] [proxy_fcgi:error] [pid 24421:tid 24451] [client 20.100.184.236:31805] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:26.571931 2026] [proxy_fcgi:error] [pid 24421:tid 24441] [client 20.100.184.236:31805] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:26.861912 2026] [proxy_fcgi:error] [pid 24421:tid 24433] [client 20.100.184.236:31805] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:27.410716 2026] [proxy_fcgi:error] [pid 24421:tid 24454] [client 20.100.184.236:31805] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:27.674164 2026] [proxy_fcgi:error] [pid 24421:tid 24455] [client 20.100.184.236:31805] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:27.943642 2026] [:error] [pid 24421:tid 24452] [client 20.100.184.236:31805] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/HdGGN/post.php"] [unique_id "aYjL86p7cTzhX5M1IP9jGQAAABU"]
[Mon Feb 09 01:46:33.224887 2026] [proxy_fcgi:error] [pid 6630:tid 6634] [client 20.100.184.236:56317] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:33.490317 2026] [proxy_fcgi:error] [pid 6630:tid 6656] [client 20.100.184.236:56317] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:46:34.336654 2026] [:error] [pid 6630:tid 6633] [client 20.100.184.236:56317] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYjL-p2jf0FBTEb_cWQcNgAAAgA"]
[Mon Feb 09 01:46:37.947284 2026] [:error] [pid 43900:tid 43916] [client 20.100.184.236:6874] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYjL_eWrhnpm_Csk3knTPgAAAU0"]
[Mon Feb 09 01:46:39.176062 2026] [:error] [pid 6630:tid 6642] [client 20.100.184.236:49168] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYjL_52jf0FBTEb_cWQcOgAAAgk"]
[Mon Feb 09 01:46:40.256325 2026] [:error] [pid 6662:tid 6682] [client 20.100.184.236:58236] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYjMAN-oEK1ut16KiNIlswAAAlA"]
[Mon Feb 09 01:46:42.857615 2026] [:error] [pid 6630:tid 6657] [client 20.100.184.236:64483] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/include.php"] [unique_id "aYjMAp2jf0FBTEb_cWQcRQAAAhg"]
[Mon Feb 09 01:46:44.326192 2026] [:error] [pid 6630:tid 6645] [client 20.100.184.236:6849] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/server/php/index.php"] [unique_id "aYjMBJ2jf0FBTEb_cWQcTgAAAgw"]
[Mon Feb 09 01:46:48.582369 2026] [:error] [pid 9422:tid 9437] [client 20.100.184.236:51203] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/server/php/index.php"] [unique_id "aYjMCK9DqDJC68qBbyxU3gAAAYw"]
[Mon Feb 09 01:46:51.618130 2026] [:error] [pid 6723:tid 6805] [client 20.100.184.236:6723] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/server/php/index.php"] [unique_id "aYjMCzkiu6gHwS33P0qfEAAAA1Q"]
[Mon Feb 09 01:46:54.429859 2026] [:error] [pid 24421:tid 24438] [client 20.100.184.236:58211] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/server/php/index.php"] [unique_id "aYjMDqp7cTzhX5M1IP9jKAAAAAc"]
[Mon Feb 09 01:47:00.728944 2026] [:error] [pid 24421:tid 24433] [client 20.100.184.236:6336] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/plugins-dist.php"] [unique_id "aYjMFKp7cTzhX5M1IP9jLQAAAAI"]
[Mon Feb 09 01:47:06.794864 2026] [:error] [pid 6723:tid 6806] [client 20.100.184.236:22506] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/plugins-dist.php"] [unique_id "aYjMGjkiu6gHwS33P0qfIwAAA1U"]
[Mon Feb 09 01:47:09.353716 2026] [:error] [pid 6723:tid 6801] [client 20.100.184.236:6933] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/plugins-dist.php"] [unique_id "aYjMHTkiu6gHwS33P0qfJwAAA1A"]
[Mon Feb 09 01:47:12.108733 2026] [:error] [pid 24530:tid 24540] [client 20.100.184.236:45688] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bwiau.php"] [unique_id "aYjMIEazNRCs1GRWrh5DyQAAAMg"]
[Mon Feb 09 01:47:14.348284 2026] [:error] [pid 43900:tid 43904] [client 20.100.184.236:6931] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bwiau.php"] [unique_id "aYjMIuWrhnpm_Csk3knTZwAAAUE"]
[Mon Feb 09 01:47:16.867738 2026] [:error] [pid 24530:tid 24533] [client 20.100.184.236:24406] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bwiau.php"] [unique_id "aYjMJEazNRCs1GRWrh5DzQAAAME"]
[Mon Feb 09 01:47:18.766774 2026] [:error] [pid 6663:tid 6711] [client 20.100.184.236:49417] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bwiau.php"] [unique_id "aYjMJmGI3uHqWdeZM76qEwAAApI"]
[Mon Feb 09 01:47:21.461825 2026] [:error] [pid 24421:tid 24445] [client 20.100.184.236:26933] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aYjMKap7cTzhX5M1IP9jPgAAAA4"]
[Mon Feb 09 01:47:22.424605 2026] [:error] [pid 9422:tid 9444] [client 20.100.184.236:26906] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aYjMKq9DqDJC68qBbyxU-QAAAZM"]
[Mon Feb 09 01:47:23.106532 2026] [:error] [pid 9422:tid 9430] [client 20.100.184.236:51856] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aYjMK69DqDJC68qBbyxU_QAAAYU"]
[Mon Feb 09 01:47:25.422770 2026] [:error] [pid 6663:tid 6701] [client 20.100.184.236:65024] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aYjMLWGI3uHqWdeZM76qHQAAAog"]
[Mon Feb 09 01:47:34.393767 2026] [proxy_fcgi:error] [pid 6723:tid 6808] [client 20.100.184.236:65064] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:34.946371 2026] [proxy_fcgi:error] [pid 6723:tid 6799] [client 20.100.184.236:65064] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:35.210900 2026] [proxy_fcgi:error] [pid 6723:tid 6800] [client 20.100.184.236:65064] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:35.774108 2026] [:error] [pid 6723:tid 6796] [client 20.100.184.236:65064] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-query-href.php"] [unique_id "aYjMNzkiu6gHwS33P0qfVAAAA0s"]
[Mon Feb 09 01:47:44.024643 2026] [:error] [pid 24421:tid 24455] [client 20.100.184.236:59414] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYjMQKp7cTzhX5M1IP9jUAAAABg"]
[Mon Feb 09 01:47:45.321467 2026] [proxy_fcgi:error] [pid 24530:tid 24540] [client 20.100.184.236:59415] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:45.864156 2026] [proxy_fcgi:error] [pid 24530:tid 24538] [client 20.100.184.236:59415] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:46.139947 2026] [proxy_fcgi:error] [pid 24530:tid 24552] [client 20.100.184.236:59415] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:46.400718 2026] [:error] [pid 24530:tid 24545] [client 20.100.184.236:59415] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-http-cookie-set.php"] [unique_id "aYjMQkazNRCs1GRWrh5D7gAAAM0"]
[Mon Feb 09 01:47:48.135051 2026] [:error] [pid 43900:tid 43912] [client 20.100.184.236:59399] [client 20.100.184.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/fields/about.php"] [unique_id "aYjMROWrhnpm_Csk3knTewAAAUk"]
[Mon Feb 09 01:47:48.925845 2026] [proxy_fcgi:error] [pid 9422:tid 9426] [client 20.100.184.236:6285] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:47:49.184813 2026] [:error] [pid 9422:tid 9449] [client 20.100.184.236:6285] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aYjMRa9DqDJC68qBbyxVDwAAAZg"]
[Mon Feb 09 01:47:50.243257 2026] [:error] [pid 6723:tid 6798] [client 20.100.184.236:49475] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aYjMRjkiu6gHwS33P0qfYAAAA00"]
[Mon Feb 09 01:47:51.196108 2026] [:error] [pid 24530:tid 24537] [client 20.100.184.236:47312] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aYjMR0azNRCs1GRWrh5D8gAAAMU"]
[Mon Feb 09 01:47:52.459944 2026] [:error] [pid 9482:tid 9543] [client 20.100.184.236:23112] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aYjMSMTkGH_puEFp5zPZ8QAAA8Q"]
[Mon Feb 09 01:47:53.050006 2026] [:error] [pid 6663:tid 6700] [client 20.100.184.236:23085] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ak.php"] [unique_id "aYjMSWGI3uHqWdeZM76qLgAAAoc"]
[Mon Feb 09 01:47:53.876562 2026] [:error] [pid 6662:tid 6666] [client 20.100.184.236:55722] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ak.php"] [unique_id "aYjMSd-oEK1ut16KiNIl1AAAAkA"]
[Mon Feb 09 01:47:54.767149 2026] [:error] [pid 6662:tid 6677] [client 20.100.184.236:48490] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ak.php"] [unique_id "aYjMSt-oEK1ut16KiNIl1wAAAks"]
[Mon Feb 09 01:47:55.666056 2026] [:error] [pid 24530:tid 24549] [client 20.100.184.236:48496] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ak.php"] [unique_id "aYjMS0azNRCs1GRWrh5D-QAAANE"]
[Mon Feb 09 01:47:56.656795 2026] [:error] [pid 9482:tid 9562] [client 20.100.184.236:55724] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aYjMTMTkGH_puEFp5zPaAQAAA9c"]
[Mon Feb 09 01:47:57.851190 2026] [:error] [pid 9422:tid 9435] [client 20.100.184.236:55688] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aYjMTa9DqDJC68qBbyxVGAAAAYo"]
[Mon Feb 09 01:47:59.832265 2026] [:error] [pid 9482:tid 9547] [client 20.100.184.236:25601] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aYjMT8TkGH_puEFp5zPaDAAAA8g"]
[Mon Feb 09 01:48:00.716914 2026] [:error] [pid 24423:tid 24500] [client 20.100.184.236:18588] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aYjMUE3f9n1Y0TpV5YaSGAAAAI8"]
[Mon Feb 09 01:48:01.721095 2026] [:error] [pid 9482:tid 9555] [client 20.100.184.236:55717] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aYjMUcTkGH_puEFp5zPaEAAAA9A"]
[Mon Feb 09 01:48:02.436274 2026] [:error] [pid 6662:tid 6689] [client 20.100.184.236:7038] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aYjMUt-oEK1ut16KiNIl2QAAAlc"]
[Mon Feb 09 01:48:03.400963 2026] [:error] [pid 9422:tid 9447] [client 20.100.184.236:45568] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aYjMU69DqDJC68qBbyxVHwAAAZY"]
[Mon Feb 09 01:48:04.263222 2026] [:error] [pid 9422:tid 9445] [client 20.100.184.236:53151] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aYjMVK9DqDJC68qBbyxVIwAAAZQ"]
[Mon Feb 09 01:48:05.839021 2026] [:error] [pid 9422:tid 9435] [client 20.100.184.236:53157] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2015/dup-installer/main.installer.php"] [unique_id "aYjMVa9DqDJC68qBbyxVJAAAAYo"]
[Mon Feb 09 01:48:08.894670 2026] [:error] [pid 6630:tid 6646] [client 20.100.184.236:48474] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2015/dup-installer/main.installer.php"] [unique_id "aYjMWJ2jf0FBTEb_cWQchwAAAg0"]
[Mon Feb 09 01:48:11.841279 2026] [:error] [pid 6630:tid 6647] [client 20.100.184.236:6289] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2015/dup-installer/main.installer.php"] [unique_id "aYjMW52jf0FBTEb_cWQcjAAAAg4"]
[Mon Feb 09 01:48:13.522026 2026] [:error] [pid 6723:tid 6801] [client 20.100.184.236:6334] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2015/dup-installer/main.installer.php"] [unique_id "aYjMXTkiu6gHwS33P0qfbAAAA1A"]
[Mon Feb 09 01:48:20.396124 2026] [:error] [pid 24423:tid 24488] [client 20.100.184.236:6252] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aYjMZE3f9n1Y0TpV5YaSIQAAAIM"]
[Mon Feb 09 01:48:22.282270 2026] [:error] [pid 43900:tid 43915] [client 20.100.184.236:7116] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aYjMZuWrhnpm_Csk3knTigAAAUw"]
[Mon Feb 09 01:48:34.370905 2026] [:error] [pid 6723:tid 6789] [client 20.100.184.236:65057] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "aYjMcjkiu6gHwS33P0qfeAAAA0Q"]
[Mon Feb 09 01:48:37.925104 2026] [:error] [pid 6630:tid 6648] [client 20.100.184.236:59392] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "aYjMdZ2jf0FBTEb_cWQcmQAAAg8"]
[Mon Feb 09 01:48:39.499153 2026] [:error] [pid 6662:tid 6690] [client 20.100.184.236:23137] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "aYjMd9-oEK1ut16KiNIl7AAAAlg"]
[Mon Feb 09 01:48:40.641722 2026] [:error] [pid 43900:tid 43924] [client 20.100.184.236:48425] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "aYjMeOWrhnpm_Csk3knTlAAAAVU"]
[Mon Feb 09 01:48:43.455140 2026] [:error] [pid 24421:tid 24438] [client 20.100.184.236:26935] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkj.php"] [unique_id "aYjMe6p7cTzhX5M1IP9jcgAAAAc"]
[Mon Feb 09 01:48:44.680919 2026] [:error] [pid 9422:tid 9426] [client 20.100.184.236:25001] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkj.php"] [unique_id "aYjMfK9DqDJC68qBbyxVVgAAAYE"]
[Mon Feb 09 01:48:45.561705 2026] [:error] [pid 6663:tid 6703] [client 20.100.184.236:51958] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkj.php"] [unique_id "aYjMfWGI3uHqWdeZM76qOgAAAoo"]
[Mon Feb 09 01:48:46.439326 2026] [:error] [pid 24421:tid 24432] [client 20.100.184.236:49260] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkj.php"] [unique_id "aYjMfqp7cTzhX5M1IP9jcwAAAAE"]
[Mon Feb 09 01:48:47.223071 2026] [:error] [pid 24530:tid 24556] [client 20.100.184.236:34284] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/auth.php"] [unique_id "aYjMf0azNRCs1GRWrh5EGgAAANg"]
[Mon Feb 09 01:48:48.277521 2026] [proxy_fcgi:error] [pid 24530:tid 24553] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:49.023776 2026] [proxy_fcgi:error] [pid 24530:tid 24537] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:49.287623 2026] [proxy_fcgi:error] [pid 24530:tid 24554] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:49.872953 2026] [proxy_fcgi:error] [pid 24530:tid 24540] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:50.221528 2026] [proxy_fcgi:error] [pid 24530:tid 24551] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:51.128281 2026] [proxy_fcgi:error] [pid 24530:tid 24543] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:51.558763 2026] [proxy_fcgi:error] [pid 24530:tid 24542] [client 20.100.184.236:49223] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:48:51.822666 2026] [:error] [pid 24530:tid 24535] [client 20.100.184.236:49223] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/96i.php"] [unique_id "aYjMg0azNRCs1GRWrh5EKgAAAMM"]
[Mon Feb 09 01:48:52.839393 2026] [:error] [pid 24423:tid 24501] [client 20.100.184.236:35013] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/96i.php"] [unique_id "aYjMhE3f9n1Y0TpV5YaSQAAAAJA"]
[Mon Feb 09 01:48:54.769464 2026] [:error] [pid 6723:tid 6791] [client 20.100.184.236:42398] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/96i.php"] [unique_id "aYjMhjkiu6gHwS33P0qfgwAAA0Y"]
[Mon Feb 09 01:48:55.462563 2026] [:error] [pid 24421:tid 24443] [client 20.100.184.236:58181] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/96i.php"] [unique_id "aYjMh6p7cTzhX5M1IP9jdwAAAAw"]
[Mon Feb 09 01:48:56.242143 2026] [:error] [pid 6663:tid 6700] [client 20.100.184.236:25035] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/background-image-cropper/content-post.php"] [unique_id "aYjMiGGI3uHqWdeZM76qQwAAAoc"]
[Mon Feb 09 01:48:57.789099 2026] [:error] [pid 6662:tid 6675] [client 20.100.184.236:47282] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/background-image-cropper/content-post.php"] [unique_id "aYjMid-oEK1ut16KiNIl-QAAAkk"]
[Mon Feb 09 01:48:59.137300 2026] [:error] [pid 43900:tid 43918] [client 20.100.184.236:31132] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/background-image-cropper/content-post.php"] [unique_id "aYjMi-Wrhnpm_Csk3knTnwAAAU8"]
[Mon Feb 09 01:49:00.568605 2026] [:error] [pid 6663:tid 6697] [client 20.100.184.236:21048] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/background-image-cropper/content-post.php"] [unique_id "aYjMjGGI3uHqWdeZM76qRAAAAoQ"]
[Mon Feb 09 01:49:02.033864 2026] [:error] [pid 43900:tid 43912] [client 20.100.184.236:26284] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aYjMjuWrhnpm_Csk3knToQAAAUk"]
[Mon Feb 09 01:49:03.295676 2026] [:error] [pid 43900:tid 43925] [client 20.100.184.236:15696] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aYjMj-Wrhnpm_Csk3knTpAAAAVY"]
[Mon Feb 09 01:49:04.444871 2026] [:error] [pid 9422:tid 9444] [client 20.100.184.236:17671] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aYjMkK9DqDJC68qBbyxVagAAAZM"]
[Mon Feb 09 01:49:05.652103 2026] [:error] [pid 6662:tid 6666] [client 20.100.184.236:15687] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aYjMkd-oEK1ut16KiNIl_gAAAkA"]
[Mon Feb 09 01:49:06.299301 2026] [:error] [pid 6723:tid 6806] [client 20.100.184.236:17670] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kjh.php"] [unique_id "aYjMkjkiu6gHwS33P0qfjgAAA1U"]
[Mon Feb 09 01:49:06.923120 2026] [:error] [pid 24423:tid 24487] [client 20.100.184.236:38686] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kjh.php"] [unique_id "aYjMkk3f9n1Y0TpV5YaSSwAAAII"]
[Mon Feb 09 01:49:07.576044 2026] [:error] [pid 24423:tid 24496] [client 20.100.184.236:55270] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kjh.php"] [unique_id "aYjMk03f9n1Y0TpV5YaSTQAAAIs"]
[Mon Feb 09 01:49:08.274250 2026] [:error] [pid 24423:tid 24494] [client 20.100.184.236:58119] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kjh.php"] [unique_id "aYjMlE3f9n1Y0TpV5YaSTgAAAIk"]
[Mon Feb 09 01:49:08.915906 2026] [:error] [pid 6662:tid 6686] [client 20.100.184.236:53800] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a332.php"] [unique_id "aYjMlN-oEK1ut16KiNImAQAAAlQ"]
[Mon Feb 09 01:49:09.816088 2026] [:error] [pid 24421:tid 24449] [client 20.100.184.236:26242] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a332.php"] [unique_id "aYjMlap7cTzhX5M1IP9jgAAAABI"]
[Mon Feb 09 01:49:11.331954 2026] [:error] [pid 9482:tid 9549] [client 20.100.184.236:55282] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a332.php"] [unique_id "aYjMl8TkGH_puEFp5zPaMAAAA8o"]
[Mon Feb 09 01:49:12.882265 2026] [:error] [pid 9422:tid 9444] [client 20.100.184.236:15688] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a332.php"] [unique_id "aYjMmK9DqDJC68qBbyxVcgAAAZM"]
[Mon Feb 09 01:49:14.757734 2026] [:error] [pid 24421:tid 24453] [client 20.100.184.236:17674] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old/server/phpinfo.php"] [unique_id "aYjMmqp7cTzhX5M1IP9jgwAAABY"]
[Mon Feb 09 01:49:15.625971 2026] [:error] [pid 24421:tid 24446] [client 20.100.184.236:63844] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old/server/phpinfo.php"] [unique_id "aYjMm6p7cTzhX5M1IP9jhAAAAA8"]
[Mon Feb 09 01:49:16.361933 2026] [:error] [pid 9482:tid 9556] [client 20.100.184.236:55268] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old/server/phpinfo.php"] [unique_id "aYjMnMTkGH_puEFp5zPaNAAAA9E"]
[Mon Feb 09 01:49:19.008747 2026] [:error] [pid 6630:tid 6641] [client 20.100.184.236:53789] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old/server/phpinfo.php"] [unique_id "aYjMn52jf0FBTEb_cWQctAAAAgg"]
[Mon Feb 09 01:49:21.741695 2026] [:error] [pid 24423:tid 24498] [client 20.100.184.236:47291] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/adminer-3.5.1.php"] [unique_id "aYjMoU3f9n1Y0TpV5YaSWAAAAI0"]
[Mon Feb 09 01:49:26.050477 2026] [:error] [pid 24530:tid 24554] [client 20.100.184.236:53794] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/adminer-3.5.1.php"] [unique_id "aYjMpkazNRCs1GRWrh5ENQAAANY"]
[Mon Feb 09 01:49:29.773452 2026] [:error] [pid 6663:tid 6717] [client 20.100.184.236:26251] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/adminer-3.5.1.php"] [unique_id "aYjMqWGI3uHqWdeZM76qVQAAApg"]
[Mon Feb 09 01:49:31.406229 2026] [:error] [pid 9482:tid 9542] [client 20.100.184.236:31119] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/adminer-3.5.1.php"] [unique_id "aYjMq8TkGH_puEFp5zPaOwAAA8M"]
[Mon Feb 09 01:49:33.194974 2026] [:error] [pid 6663:tid 6695] [client 20.100.184.236:6518] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYjMrWGI3uHqWdeZM76qWAAAAoI"]
[Mon Feb 09 01:49:34.533078 2026] [:error] [pid 6662:tid 6678] [client 20.100.184.236:15702] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYjMrt-oEK1ut16KiNImDgAAAkw"]
[Mon Feb 09 01:49:35.687127 2026] [:error] [pid 6662:tid 6673] [client 20.100.184.236:6520] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYjMr9-oEK1ut16KiNImDwAAAkc"]
[Mon Feb 09 01:49:36.755728 2026] [:error] [pid 6663:tid 6695] [client 20.100.184.236:15694] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYjMsGGI3uHqWdeZM76qagAAAoI"]
[Mon Feb 09 01:49:37.449155 2026] [:error] [pid 9422:tid 9433] [client 20.100.184.236:58168] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYjMsa9DqDJC68qBbyxVkQAAAYg"]
[Mon Feb 09 01:49:38.129894 2026] [:error] [pid 24423:tid 24494] [client 20.100.184.236:31137] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYjMsk3f9n1Y0TpV5YaSYgAAAIk"]
[Mon Feb 09 01:49:38.791831 2026] [:error] [pid 24423:tid 24509] [client 20.100.184.236:51256] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYjMsk3f9n1Y0TpV5YaSZQAAAJg"]
[Mon Feb 09 01:49:39.589525 2026] [:error] [pid 6662:tid 6683] [client 20.100.184.236:26240] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYjMs9-oEK1ut16KiNImEwAAAlE"]
[Mon Feb 09 01:49:40.323752 2026] [:error] [pid 43900:tid 43914] [client 20.100.184.236:25033] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rwvri.php"] [unique_id "aYjMtOWrhnpm_Csk3knTxwAAAUs"]
[Mon Feb 09 01:49:41.945326 2026] [:error] [pid 24423:tid 24501] [client 20.100.184.236:38715] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rwvri.php"] [unique_id "aYjMtU3f9n1Y0TpV5YaSZwAAAJA"]
[Mon Feb 09 01:49:42.765782 2026] [:error] [pid 43900:tid 43927] [client 20.100.184.236:17726] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rwvri.php"] [unique_id "aYjMtuWrhnpm_Csk3knTygAAAVg"]
[Mon Feb 09 01:49:45.201208 2026] [:error] [pid 24423:tid 24488] [client 20.100.184.236:25062] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rwvri.php"] [unique_id "aYjMuU3f9n1Y0TpV5YaSagAAAIM"]
[Mon Feb 09 01:49:46.695496 2026] [:error] [pid 43900:tid 43909] [client 20.100.184.236:63861] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "aYjMuuWrhnpm_Csk3knTzwAAAUY"]
[Mon Feb 09 01:49:48.463944 2026] [:error] [pid 24530:tid 24537] [client 20.100.184.236:6524] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "aYjMvEazNRCs1GRWrh5ESgAAAMU"]
[Mon Feb 09 01:49:50.448469 2026] [:error] [pid 9422:tid 9443] [client 20.100.184.236:53810] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "aYjMvq9DqDJC68qBbyxVoAAAAZI"]
[Mon Feb 09 01:49:53.024509 2026] [proxy_fcgi:error] [pid 9482:tid 9552] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:53.289927 2026] [proxy_fcgi:error] [pid 9482:tid 9561] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:53.563094 2026] [proxy_fcgi:error] [pid 9482:tid 9553] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:53.840575 2026] [proxy_fcgi:error] [pid 9482:tid 9555] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:54.105404 2026] [proxy_fcgi:error] [pid 9482:tid 9554] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:54.370166 2026] [proxy_fcgi:error] [pid 9482:tid 9548] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:54.926913 2026] [proxy_fcgi:error] [pid 9482:tid 9551] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:55.193473 2026] [proxy_fcgi:error] [pid 9482:tid 9547] [client 20.100.184.236:6513] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:49:56.755948 2026] [:error] [pid 9482:tid 9550] [client 20.100.184.236:6513] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lol.php"] [unique_id "aYjMxMTkGH_puEFp5zPaVgAAA8s"]
[Mon Feb 09 01:49:59.453028 2026] [:error] [pid 24423:tid 24506] [client 20.100.184.236:51253] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lol.php"] [unique_id "aYjMx03f9n1Y0TpV5YaSdAAAAJU"]
[Mon Feb 09 01:50:07.177093 2026] [:error] [pid 24530:tid 24538] [client 20.100.184.236:38671] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lol.php"] [unique_id "aYjMz0azNRCs1GRWrh5EWAAAAMY"]
[Mon Feb 09 01:50:11.034345 2026] [:error] [pid 6723:tid 6799] [client 20.100.184.236:64385] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lol.php"] [unique_id "aYjM0zkiu6gHwS33P0qfxQAAA04"]
[Mon Feb 09 01:50:15.495292 2026] [:error] [pid 9422:tid 9438] [client 20.100.184.236:53712] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aYjM169DqDJC68qBbyxVwQAAAY0"]
[Mon Feb 09 01:50:18.281244 2026] [:error] [pid 6663:tid 6714] [client 20.100.184.236:17226] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aYjM2mGI3uHqWdeZM76qiQAAApU"]
[Mon Feb 09 01:50:21.518763 2026] [:error] [pid 9422:tid 9428] [client 20.100.184.236:6689] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aYjM3a9DqDJC68qBbyxVxgAAAYM"]
[Mon Feb 09 01:50:25.654724 2026] [:error] [pid 9422:tid 9439] [client 20.100.184.236:45902] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aYjM4a9DqDJC68qBbyxVzwAAAY4"]
[Mon Feb 09 01:50:28.355419 2026] [:error] [pid 9422:tid 9435] [client 20.100.184.236:18624] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYjM5K9DqDJC68qBbyxV1wAAAYo"]
[Mon Feb 09 01:50:33.775127 2026] [:error] [pid 6662:tid 6673] [client 20.100.184.236:56226] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYjM6d-oEK1ut16KiNImLwAAAkc"]
[Mon Feb 09 01:50:34.729116 2026] [:error] [pid 6662:tid 6680] [client 20.100.184.236:46693] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYjM6t-oEK1ut16KiNImMAAAAk4"]
[Mon Feb 09 01:50:35.786866 2026] [:error] [pid 6630:tid 6639] [client 20.100.184.236:16196] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYjM652jf0FBTEb_cWQc3QAAAgY"]
[Mon Feb 09 01:50:37.394615 2026] [:error] [pid 6630:tid 6640] [client 20.100.184.236:18682] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aYjM7Z2jf0FBTEb_cWQc4AAAAgc"]
[Mon Feb 09 01:50:41.603383 2026] [:error] [pid 6723:tid 6800] [client 20.100.184.236:56235] [client 20.100.184.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aYjM8Tkiu6gHwS33P0qf1gAAA08"]
[Mon Feb 09 01:50:58.404601 2026] [proxy_fcgi:error] [pid 6630:tid 6653] [client 20.100.184.236:31784] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:50:58.677518 2026] [proxy_fcgi:error] [pid 6630:tid 6652] [client 20.100.184.236:31784] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:50:59.204160 2026] [proxy_fcgi:error] [pid 6630:tid 6647] [client 20.100.184.236:31784] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:50:59.467684 2026] [proxy_fcgi:error] [pid 6630:tid 6636] [client 20.100.184.236:31784] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:50:59.745344 2026] [proxy_fcgi:error] [pid 6630:tid 6640] [client 20.100.184.236:31784] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 01:51:00.029000 2026] [proxy_fcgi:error] [pid 6630:tid 6644] [client 20.100.184.236:31784] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 02:24:11.877731 2026] [:error] [pid 43900:tid 43914] [client 81.206.32.142:33060] [client 81.206.32.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.206.32.142, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYjUy-Wrhnpm_Csk3knbTQAAAUs"]
[Mon Feb 09 02:24:11.888332 2026] [proxy_fcgi:error] [pid 43900:tid 43914] [client 81.206.32.142:33060] AH01071: Got error 'Primary script unknown'
[Mon Feb 09 06:23:16.278133 2026] [:error] [pid 47939:tid 48006] [client 170.106.197.109:36010] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYkM1NkpZei8M7cJ2z1SowAAAIA"]
[Mon Feb 09 16:56:11.420470 2026] [:error] [pid 47937:tid 47966] [client 14.215.163.132:34824] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYmhK84Fd42MP2DhNrXHRwAAABQ"]
[Mon Feb 09 17:12:39.765116 2026] [:error] [pid 60679:tid 60772] [client 194.5.82.102:35229] [client 194.5.82.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYmlB8ixhoT1e6Iv6g_HyQAAA1Q"]
[Mon Feb 09 22:55:20.908765 2026] [:error] [pid 60589:tid 60596] [client 43.130.67.33:58446] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYn1WDIJyhPWC0JyMLyt1wAAAcU"]
[Tue Feb 10 04:34:39.346033 2026] [:error] [pid 47837:tid 47912] [client 43.156.109.53:34896] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aYpE33FY8KYFPX79Z4nILQAAAIw"]
[Tue Feb 10 06:13:02.774601 2026] [:error] [pid 47831:tid 47894] [client 43.153.87.54:38402] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYpb7idxbZYarWVkiABQBgAAAFU"]
[Tue Feb 10 06:29:05.085820 2026] [:error] [pid 30054:tid 30065] [client 182.40.104.255:32926] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYpfsWecgOOXCu-GgYU4cQAAAQk"]
[Tue Feb 10 11:05:20.295617 2026] [:error] [pid 47937:tid 47963] [client 45.155.68.151:42784] [client 45.155.68.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aYqgcMpqXpC2CvJ3fOMJKQAAANg"]
[Tue Feb 10 14:29:19.828652 2026] [:error] [pid 7704:tid 7725] [client 106.200.18.213:14796] [client 106.200.18.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.18.213, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYrQP_0EcqgVBUs6CW3MiAAAAdI"]
[Tue Feb 10 14:29:19.840109 2026] [proxy_fcgi:error] [pid 7704:tid 7725] [client 106.200.18.213:14796] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 21:08:39.724130 2026] [:error] [pid 59544:tid 59570] [client 62.72.41.205:59347] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYst16ZySR9mFY4Bain_3AAAAZM"]
[Tue Feb 10 21:08:40.096812 2026] [:error] [pid 47937:tid 47943] [client 62.72.41.205:52535] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aYst2MpqXpC2CvJ3fOO9VAAAAMQ"]
[Tue Feb 10 21:08:40.456112 2026] [:error] [pid 47831:tid 47881] [client 62.72.41.205:62434] [client 62.72.41.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "aYst2CdxbZYarWVkiACQmgAAAEg"]
[Tue Feb 10 23:56:38.781285 2026] [proxy_fcgi:error] [pid 59407:tid 59418] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:39.143867 2026] [proxy_fcgi:error] [pid 59407:tid 59415] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:39.403264 2026] [proxy_fcgi:error] [pid 59407:tid 59412] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:39.661840 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:39.923871 2026] [proxy_fcgi:error] [pid 59407:tid 59432] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:40.188139 2026] [proxy_fcgi:error] [pid 59407:tid 59430] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:40.587334 2026] [proxy_fcgi:error] [pid 59407:tid 59419] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:40.845927 2026] [proxy_fcgi:error] [pid 59407:tid 59409] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:41.106039 2026] [proxy_fcgi:error] [pid 59407:tid 59420] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:41.514489 2026] [proxy_fcgi:error] [pid 59407:tid 59424] [client 74.248.133.77:5277] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:56:41.822806 2026] [:error] [pid 59407:tid 59417] [client 74.248.133.77:5277] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aYtVOWLlhBXE3qmX-JlNdgAAAUg"]
[Tue Feb 10 23:56:42.703385 2026] [:error] [pid 7704:tid 7730] [client 74.248.133.77:24248] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aYtVOv0EcqgVBUs6CW1F4QAAAdc"]
[Tue Feb 10 23:56:45.311653 2026] [:error] [pid 47937:tid 47960] [client 74.248.133.77:20029] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aYtVPcpqXpC2CvJ3fOPk7gAAANU"]
[Tue Feb 10 23:56:47.276257 2026] [:error] [pid 59407:tid 59415] [client 74.248.133.77:5286] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aYtVP2LlhBXE3qmX-JlNfAAAAUY"]
[Tue Feb 10 23:56:48.100936 2026] [:error] [pid 47837:tid 47921] [client 74.248.133.77:5299] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYtVQHFY8KYFPX79Z4kXFwAAAJU"]
[Tue Feb 10 23:56:49.982654 2026] [:error] [pid 47831:tid 47895] [client 74.248.133.77:18533] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYtVQSdxbZYarWVkiADNrgAAAFY"]
[Tue Feb 10 23:56:51.218510 2026] [:error] [pid 47837:tid 47917] [client 74.248.133.77:18520] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYtVQ3FY8KYFPX79Z4kXHAAAAJE"]
[Tue Feb 10 23:56:52.081184 2026] [:error] [pid 30054:tid 30068] [client 74.248.133.77:38528] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYtVRGecgOOXCu-GgYVjvgAAAQw"]
[Tue Feb 10 23:56:53.003772 2026] [:error] [pid 47830:tid 47845] [client 74.248.133.77:53124] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aYtVRUco45BZs8e301C4CAAAAAA"]
[Tue Feb 10 23:56:54.440234 2026] [:error] [pid 59407:tid 59430] [client 74.248.133.77:31750] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aYtVRmLlhBXE3qmX-JlNkgAAAVU"]
[Tue Feb 10 23:56:55.466318 2026] [:error] [pid 30054:tid 30069] [client 74.248.133.77:20016] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aYtVR2ecgOOXCu-GgYVjxgAAAQ0"]
[Tue Feb 10 23:56:57.347388 2026] [:error] [pid 47937:tid 47963] [client 74.248.133.77:5637] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aYtVScpqXpC2CvJ3fOPlAgAAANg"]
[Tue Feb 10 23:56:59.561321 2026] [:error] [pid 47937:tid 47953] [client 74.248.133.77:20012] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aYtVS8pqXpC2CvJ3fOPlBwAAAM4"]
[Tue Feb 10 23:57:01.000978 2026] [:error] [pid 59544:tid 59575] [client 74.248.133.77:20822] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aYtVTKZySR9mFY4Baiki3QAAAZc"]
[Tue Feb 10 23:57:01.755551 2026] [:error] [pid 47837:tid 47920] [client 74.248.133.77:20856] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aYtVTXFY8KYFPX79Z4kXIwAAAJQ"]
[Tue Feb 10 23:57:02.883812 2026] [:error] [pid 47830:tid 47854] [client 74.248.133.77:5669] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aYtVTkco45BZs8e301C4GQAAAAg"]
[Tue Feb 10 23:57:04.617563 2026] [:error] [pid 59407:tid 59427] [client 74.248.133.77:27420] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aYtVUGLlhBXE3qmX-JlNpAAAAVI"]
[Tue Feb 10 23:57:05.473478 2026] [:error] [pid 30054:tid 30070] [client 74.248.133.77:24230] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aYtVUWecgOOXCu-GgYVj1QAAAQ4"]
[Tue Feb 10 23:57:08.327789 2026] [:error] [pid 47937:tid 47946] [client 74.248.133.77:31744] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aYtVVMpqXpC2CvJ3fOPlCwAAAMc"]
[Tue Feb 10 23:57:09.451159 2026] [:error] [pid 30054:tid 30060] [client 74.248.133.77:5673] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aYtVVWecgOOXCu-GgYVj2QAAAQQ"]
[Tue Feb 10 23:57:10.324642 2026] [:error] [pid 47937:tid 47944] [client 74.248.133.77:10348] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aYtVVspqXpC2CvJ3fOPlEAAAAMU"]
[Tue Feb 10 23:57:11.001376 2026] [:error] [pid 47830:tid 47857] [client 74.248.133.77:20856] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aYtVV0co45BZs8e301C4JgAAAAs"]
[Tue Feb 10 23:57:12.047267 2026] [:error] [pid 7704:tid 7729] [client 74.248.133.77:53167] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aYtVWP0EcqgVBUs6CW1GCQAAAdY"]
[Tue Feb 10 23:57:14.442072 2026] [:error] [pid 59407:tid 59423] [client 74.248.133.77:38579] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aYtVWmLlhBXE3qmX-JlNswAAAU4"]
[Tue Feb 10 23:57:15.121876 2026] [:error] [pid 47830:tid 47845] [client 74.248.133.77:31755] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aYtVW0co45BZs8e301C4KAAAAAA"]
[Tue Feb 10 23:57:16.620968 2026] [:error] [pid 47831:tid 47888] [client 74.248.133.77:24251] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aYtVXCdxbZYarWVkiADN7AAAAE8"]
[Tue Feb 10 23:57:18.379538 2026] [:error] [pid 59544:tid 59550] [client 74.248.133.77:24206] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aYtVXqZySR9mFY4Baiki8wAAAYI"]
[Tue Feb 10 23:57:19.103008 2026] [:error] [pid 47937:tid 47947] [client 74.248.133.77:38575] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aYtVX8pqXpC2CvJ3fOPlIwAAAMg"]
[Tue Feb 10 23:57:20.850045 2026] [:error] [pid 47830:tid 47855] [client 74.248.133.77:27424] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp5.php"] [unique_id "aYtVYEco45BZs8e301C4NQAAAAk"]
[Tue Feb 10 23:57:22.036424 2026] [:error] [pid 47837:tid 47908] [client 74.248.133.77:24221] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp5.php"] [unique_id "aYtVYnFY8KYFPX79Z4kXOAAAAIg"]
[Tue Feb 10 23:57:23.557253 2026] [:error] [pid 47830:tid 47847] [client 74.248.133.77:5265] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp5.php"] [unique_id "aYtVY0co45BZs8e301C4NgAAAAE"]
[Tue Feb 10 23:57:24.402451 2026] [:error] [pid 47831:tid 47887] [client 74.248.133.77:38536] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp5.php"] [unique_id "aYtVZCdxbZYarWVkiADN-AAAAE4"]
[Tue Feb 10 23:57:27.316442 2026] [:error] [pid 59544:tid 59548] [client 74.248.133.77:10355] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee8.php"] [unique_id "aYtVZ6ZySR9mFY4Baiki-gAAAYA"]
[Tue Feb 10 23:57:28.135518 2026] [:error] [pid 47937:tid 47957] [client 74.248.133.77:10328] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee8.php"] [unique_id "aYtVaMpqXpC2CvJ3fOPlLAAAANI"]
[Tue Feb 10 23:57:29.068720 2026] [:error] [pid 47937:tid 47952] [client 74.248.133.77:5287] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee8.php"] [unique_id "aYtVacpqXpC2CvJ3fOPlLgAAAM0"]
[Tue Feb 10 23:57:30.521110 2026] [:error] [pid 47831:tid 47891] [client 74.248.133.77:24203] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee8.php"] [unique_id "aYtVaidxbZYarWVkiADN_wAAAFI"]
[Tue Feb 10 23:57:31.092996 2026] [:error] [pid 47830:tid 47850] [client 74.248.133.77:38560] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aYtVa0co45BZs8e301C4QQAAAAQ"]
[Tue Feb 10 23:57:31.961371 2026] [:error] [pid 59544:tid 59574] [client 74.248.133.77:5651] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aYtVa6ZySR9mFY4BaikjBAAAAZY"]
[Tue Feb 10 23:57:32.683142 2026] [:error] [pid 59544:tid 59558] [client 74.248.133.77:12619] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aYtVbKZySR9mFY4BaikjBgAAAYo"]
[Tue Feb 10 23:57:33.486217 2026] [:error] [pid 47830:tid 47854] [client 74.248.133.77:12666] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aYtVbUco45BZs8e301C4RAAAAAg"]
[Tue Feb 10 23:57:34.520106 2026] [:error] [pid 59407:tid 59426] [client 74.248.133.77:53236] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aYtVbmLlhBXE3qmX-JlNwwAAAVE"]
[Tue Feb 10 23:57:35.420612 2026] [:error] [pid 47831:tid 47890] [client 74.248.133.77:12575] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aYtVbydxbZYarWVkiADODQAAAFE"]
[Tue Feb 10 23:57:37.303143 2026] [:error] [pid 59407:tid 59415] [client 74.248.133.77:5675] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aYtVcWLlhBXE3qmX-JlNyQAAAUY"]
[Tue Feb 10 23:57:37.961817 2026] [:error] [pid 47937:tid 47941] [client 74.248.133.77:26723] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aYtVccpqXpC2CvJ3fOPlMQAAAMI"]
[Tue Feb 10 23:57:38.727243 2026] [:error] [pid 47831:tid 47882] [client 74.248.133.77:24213] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYtVcidxbZYarWVkiADOFwAAAEk"]
[Tue Feb 10 23:57:39.580618 2026] [:error] [pid 7704:tid 7711] [client 74.248.133.77:31748] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYtVc_0EcqgVBUs6CW1GRgAAAcQ"]
[Tue Feb 10 23:57:40.535768 2026] [:error] [pid 47937:tid 47947] [client 74.248.133.77:20842] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYtVdMpqXpC2CvJ3fOPlNwAAAMg"]
[Tue Feb 10 23:57:41.286402 2026] [proxy_fcgi:error] [pid 47830:tid 47864] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:41.627878 2026] [proxy_fcgi:error] [pid 47830:tid 47850] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:41.918969 2026] [proxy_fcgi:error] [pid 47830:tid 47845] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:42.213267 2026] [proxy_fcgi:error] [pid 47830:tid 47866] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:42.474558 2026] [proxy_fcgi:error] [pid 47830:tid 47863] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:42.739336 2026] [proxy_fcgi:error] [pid 47830:tid 47858] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:43.000677 2026] [proxy_fcgi:error] [pid 47830:tid 47848] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:43.489700 2026] [proxy_fcgi:error] [pid 47830:tid 47853] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:43.750770 2026] [proxy_fcgi:error] [pid 47830:tid 47862] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:44.009843 2026] [proxy_fcgi:error] [pid 47830:tid 47857] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:44.768087 2026] [proxy_fcgi:error] [pid 47830:tid 47849] [client 74.248.133.77:27453] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:57:45.024060 2026] [:error] [pid 47830:tid 47868] [client 74.248.133.77:27453] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aYtVeUco45BZs8e301C4WAAAABY"]
[Tue Feb 10 23:57:46.779264 2026] [:error] [pid 47831:tid 47891] [client 74.248.133.77:32006] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aYtVeidxbZYarWVkiADOMgAAAFI"]
[Tue Feb 10 23:57:47.801019 2026] [:error] [pid 30054:tid 30057] [client 74.248.133.77:15119] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aYtVe2ecgOOXCu-GgYVkEAAAAQE"]
[Tue Feb 10 23:57:48.833510 2026] [:error] [pid 47831:tid 47885] [client 74.248.133.77:21131] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aYtVfCdxbZYarWVkiADOOQAAAEw"]
[Tue Feb 10 23:57:50.041964 2026] [:error] [pid 47937:tid 47941] [client 74.248.133.77:5633] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYtVfspqXpC2CvJ3fOPlOwAAAMI"]
[Tue Feb 10 23:57:51.089476 2026] [:error] [pid 30054:tid 30067] [client 74.248.133.77:6124] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYtVf2ecgOOXCu-GgYVkFAAAAQs"]
[Tue Feb 10 23:57:51.954402 2026] [:error] [pid 47830:tid 47855] [client 74.248.133.77:21161] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYtVf0co45BZs8e301C4YAAAAAk"]
[Tue Feb 10 23:57:52.889760 2026] [:error] [pid 7704:tid 7723] [client 74.248.133.77:30786] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYtVgP0EcqgVBUs6CW1GaAAAAdA"]
[Tue Feb 10 23:57:53.690497 2026] [:error] [pid 59407:tid 59410] [client 74.248.133.77:31777] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aYtVgWLlhBXE3qmX-JlN3wAAAUE"]
[Tue Feb 10 23:57:55.136988 2026] [:error] [pid 47830:tid 47867] [client 74.248.133.77:5296] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aYtVg0co45BZs8e301C4ZwAAABU"]
[Tue Feb 10 23:57:55.997864 2026] [:error] [pid 30054:tid 30073] [client 74.248.133.77:19203] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aYtVg2ecgOOXCu-GgYVkJgAAARE"]
[Tue Feb 10 23:57:56.850597 2026] [:error] [pid 47830:tid 47848] [client 74.248.133.77:6109] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aYtVhEco45BZs8e301C4awAAAAI"]
[Tue Feb 10 23:57:57.598417 2026] [:error] [pid 47837:tid 47921] [client 74.248.133.77:5482] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aYtVhXFY8KYFPX79Z4kXYQAAAJU"]
[Tue Feb 10 23:57:58.336105 2026] [:error] [pid 47831:tid 47897] [client 74.248.133.77:15739] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aYtVhidxbZYarWVkiADOXwAAAFg"]
[Tue Feb 10 23:57:59.133097 2026] [:error] [pid 47937:tid 47950] [client 74.248.133.77:15734] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aYtVh8pqXpC2CvJ3fOPlRQAAAMs"]
[Tue Feb 10 23:57:59.833374 2026] [:error] [pid 7704:tid 7726] [client 74.248.133.77:11658] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aYtVh_0EcqgVBUs6CW1GewAAAdM"]
[Tue Feb 10 23:58:00.765011 2026] [:error] [pid 30054:tid 30080] [client 74.248.133.77:28579] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYtViGecgOOXCu-GgYVkMQAAARg"]
[Tue Feb 10 23:58:01.433590 2026] [:error] [pid 47937:tid 47947] [client 74.248.133.77:6135] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYtVicpqXpC2CvJ3fOPlTQAAAMg"]
[Tue Feb 10 23:58:02.060966 2026] [:error] [pid 47837:tid 47917] [client 74.248.133.77:28549] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYtVinFY8KYFPX79Z4kXZwAAAJE"]
[Tue Feb 10 23:58:02.994231 2026] [:error] [pid 59407:tid 59423] [client 74.248.133.77:29432] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYtVimLlhBXE3qmX-JlN6QAAAU4"]
[Tue Feb 10 23:58:03.674902 2026] [:error] [pid 30054:tid 30065] [client 74.248.133.77:20048] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aYtVi2ecgOOXCu-GgYVkNwAAAQk"]
[Tue Feb 10 23:58:04.704831 2026] [:error] [pid 30054:tid 30076] [client 74.248.133.77:53902] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aYtVjGecgOOXCu-GgYVkOQAAARQ"]
[Tue Feb 10 23:58:05.781020 2026] [:error] [pid 47830:tid 47861] [client 74.248.133.77:27841] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aYtVjUco45BZs8e301C4bwAAAA8"]
[Tue Feb 10 23:58:06.422804 2026] [:error] [pid 59407:tid 59421] [client 74.248.133.77:20427] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aYtVjmLlhBXE3qmX-JlN7wAAAUw"]
[Tue Feb 10 23:58:07.334418 2026] [:error] [pid 30054:tid 30064] [client 74.248.133.77:53900] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aYtVj2ecgOOXCu-GgYVkOwAAAQg"]
[Tue Feb 10 23:58:08.000237 2026] [:error] [pid 7704:tid 7718] [client 74.248.133.77:28583] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aYtVj_0EcqgVBUs6CW1GgAAAAcs"]
[Tue Feb 10 23:58:08.601027 2026] [:error] [pid 7704:tid 7731] [client 74.248.133.77:15695] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aYtVkP0EcqgVBUs6CW1GggAAAdg"]
[Tue Feb 10 23:58:09.268971 2026] [:error] [pid 7704:tid 7713] [client 74.248.133.77:16174] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aYtVkf0EcqgVBUs6CW1GhAAAAcY"]
[Tue Feb 10 23:58:10.347149 2026] [:error] [pid 47830:tid 47849] [client 74.248.133.77:27879] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aYtVkkco45BZs8e301C4eAAAAAM"]
[Tue Feb 10 23:58:11.365837 2026] [:error] [pid 47837:tid 47906] [client 74.248.133.77:20417] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aYtVk3FY8KYFPX79Z4kXdAAAAIY"]
[Tue Feb 10 23:58:12.509689 2026] [:error] [pid 30054:tid 30066] [client 74.248.133.77:15696] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aYtVlGecgOOXCu-GgYVkQAAAAQo"]
[Tue Feb 10 23:58:14.517846 2026] [:error] [pid 47830:tid 47858] [client 74.248.133.77:5559] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aYtVlkco45BZs8e301C4gQAAAAw"]
[Tue Feb 10 23:58:15.534598 2026] [:error] [pid 47937:tid 47953] [client 74.248.133.77:26672] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aYtVl8pqXpC2CvJ3fOPlXAAAAM4"]
[Tue Feb 10 23:58:16.643286 2026] [:error] [pid 7704:tid 7707] [client 74.248.133.77:27881] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aYtVmP0EcqgVBUs6CW1GigAAAcA"]
[Tue Feb 10 23:58:18.002121 2026] [:error] [pid 47831:tid 47881] [client 74.248.133.77:11592] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aYtVmidxbZYarWVkiADOtwAAAEg"]
[Tue Feb 10 23:58:18.821940 2026] [:error] [pid 47831:tid 47873] [client 74.248.133.77:5407] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aYtVmidxbZYarWVkiADOuQAAAEA"]
[Tue Feb 10 23:58:19.705357 2026] [:error] [pid 59544:tid 59548] [client 74.248.133.77:15710] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYtVm6ZySR9mFY4BaikjMwAAAYA"]
[Tue Feb 10 23:58:21.439088 2026] [:error] [pid 47830:tid 47848] [client 74.248.133.77:34978] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYtVnUco45BZs8e301C4jQAAAAI"]
[Tue Feb 10 23:58:22.391954 2026] [:error] [pid 30054:tid 30069] [client 74.248.133.77:11597] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYtVnmecgOOXCu-GgYVkRgAAAQ0"]
[Tue Feb 10 23:58:23.313404 2026] [:error] [pid 30054:tid 30061] [client 74.248.133.77:5472] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jmfi2.php"] [unique_id "aYtVn2ecgOOXCu-GgYVkSAAAAQU"]
[Tue Feb 10 23:58:24.098939 2026] [:error] [pid 30054:tid 30062] [client 74.248.133.77:16146] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aYtVoGecgOOXCu-GgYVkSQAAAQY"]
[Tue Feb 10 23:58:24.898488 2026] [:error] [pid 59407:tid 59410] [client 74.248.133.77:53931] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aYtVoGLlhBXE3qmX-JlOEwAAAUE"]
[Tue Feb 10 23:58:25.636376 2026] [:error] [pid 47937:tid 47963] [client 74.248.133.77:34963] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aYtVocpqXpC2CvJ3fOPleQAAANg"]
[Tue Feb 10 23:58:26.657135 2026] [:error] [pid 7704:tid 7730] [client 74.248.133.77:5544] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aYtVov0EcqgVBUs6CW1GkAAAAdc"]
[Tue Feb 10 23:58:27.713983 2026] [:error] [pid 47837:tid 47900] [client 74.248.133.77:28985] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aYtVo3FY8KYFPX79Z4kXgAAAAIA"]
[Tue Feb 10 23:58:28.504142 2026] [:error] [pid 47831:tid 47897] [client 74.248.133.77:22667] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aYtVpCdxbZYarWVkiADOvgAAAFg"]
[Tue Feb 10 23:58:29.498085 2026] [:error] [pid 47831:tid 47881] [client 74.248.133.77:21606] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aYtVpSdxbZYarWVkiADOwAAAAEg"]
[Tue Feb 10 23:58:31.894283 2026] [:error] [pid 47937:tid 47956] [client 74.248.133.77:35012] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aYtVp8pqXpC2CvJ3fOPlswAAANE"]
[Tue Feb 10 23:58:32.754653 2026] [:error] [pid 47831:tid 47884] [client 74.248.133.77:16633] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aYtVqCdxbZYarWVkiADOzQAAAEs"]
[Tue Feb 10 23:58:34.012583 2026] [:error] [pid 59407:tid 59433] [client 74.248.133.77:25056] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aYtVqmLlhBXE3qmX-JlOKQAAAVg"]
[Tue Feb 10 23:58:36.509722 2026] [:error] [pid 47830:tid 47859] [client 74.248.133.77:13335] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aYtVrEco45BZs8e301C4pAAAAA0"]
[Tue Feb 10 23:58:39.669070 2026] [:error] [pid 47830:tid 47851] [client 74.248.133.77:14717] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aYtVr0co45BZs8e301C4pwAAAAU"]
[Tue Feb 10 23:58:41.972567 2026] [:error] [pid 59544:tid 59562] [client 74.248.133.77:16585] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cfile.php"] [unique_id "aYtVsaZySR9mFY4BaikjUwAAAY4"]
[Tue Feb 10 23:58:45.455487 2026] [proxy_fcgi:error] [pid 59544:tid 59549] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:45.714103 2026] [proxy_fcgi:error] [pid 59544:tid 59562] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:45.978057 2026] [proxy_fcgi:error] [pid 59544:tid 59560] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:46.238433 2026] [proxy_fcgi:error] [pid 59544:tid 59553] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:46.521044 2026] [proxy_fcgi:error] [pid 59544:tid 59557] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:46.865894 2026] [proxy_fcgi:error] [pid 59544:tid 59574] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:47.127357 2026] [proxy_fcgi:error] [pid 59544:tid 59572] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:47.619112 2026] [proxy_fcgi:error] [pid 59544:tid 59550] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:48.095050 2026] [proxy_fcgi:error] [pid 59544:tid 59570] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:48.355174 2026] [proxy_fcgi:error] [pid 59544:tid 59553] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:48.696277 2026] [proxy_fcgi:error] [pid 59544:tid 59555] [client 74.248.133.77:13362] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:58:48.951872 2026] [:error] [pid 59544:tid 59574] [client 74.248.133.77:13362] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aYtVuKZySR9mFY4BaikjdgAAAZY"]
[Tue Feb 10 23:58:51.579465 2026] [:error] [pid 59544:tid 59553] [client 74.248.133.77:27885] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aYtVu6ZySR9mFY4BaikjhAAAAYU"]
[Tue Feb 10 23:58:52.862243 2026] [:error] [pid 59544:tid 59556] [client 74.248.133.77:5627] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aYtVvKZySR9mFY4BaikjiwAAAYg"]
[Tue Feb 10 23:58:53.681473 2026] [:error] [pid 47831:tid 47891] [client 74.248.133.77:10590] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aYtVvSdxbZYarWVkiADO8gAAAFI"]
[Tue Feb 10 23:58:54.494919 2026] [:error] [pid 47837:tid 47907] [client 74.248.133.77:27105] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aYtVvnFY8KYFPX79Z4kXoQAAAIc"]
[Tue Feb 10 23:58:55.441631 2026] [:error] [pid 47937:tid 47956] [client 74.248.133.77:5618] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aYtVv8pqXpC2CvJ3fOPl8wAAANE"]
[Tue Feb 10 23:58:56.654685 2026] [:error] [pid 47831:tid 47877] [client 74.248.133.77:26123] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aYtVwCdxbZYarWVkiADO-AAAAEQ"]
[Tue Feb 10 23:58:57.669321 2026] [:error] [pid 30054:tid 30071] [client 74.248.133.77:32287] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aYtVwWecgOOXCu-GgYVkZwAAAQ8"]
[Tue Feb 10 23:58:58.576107 2026] [:error] [pid 47830:tid 47849] [client 74.248.133.77:5576] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aYtVwkco45BZs8e301C4xQAAAAM"]
[Tue Feb 10 23:58:59.466264 2026] [:error] [pid 47837:tid 47916] [client 74.248.133.77:31610] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aYtVw3FY8KYFPX79Z4kXpAAAAJA"]
[Tue Feb 10 23:59:00.290610 2026] [:error] [pid 47831:tid 47876] [client 74.248.133.77:32331] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aYtVxCdxbZYarWVkiADPAQAAAEM"]
[Tue Feb 10 23:59:01.146140 2026] [:error] [pid 7704:tid 7716] [client 74.248.133.77:31831] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aYtVxf0EcqgVBUs6CW1GrQAAAck"]
[Tue Feb 10 23:59:02.203841 2026] [:error] [pid 47937:tid 47943] [client 74.248.133.77:32380] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYtVxspqXpC2CvJ3fOPl-gAAAMQ"]
[Tue Feb 10 23:59:03.086468 2026] [:error] [pid 59544:tid 59566] [client 74.248.133.77:26148] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYtVx6ZySR9mFY4BaikjswAAAZA"]
[Tue Feb 10 23:59:06.757260 2026] [:error] [pid 47830:tid 47860] [client 74.248.133.77:17734] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYtVykco45BZs8e301C4zgAAAA4"]
[Tue Feb 10 23:59:08.103368 2026] [:error] [pid 47837:tid 47920] [client 74.248.133.77:23925] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aYtVzHFY8KYFPX79Z4kXqQAAAJQ"]
[Tue Feb 10 23:59:09.152629 2026] [:error] [pid 47937:tid 47946] [client 74.248.133.77:32326] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aYtVzcpqXpC2CvJ3fOPl_QAAAMc"]
[Tue Feb 10 23:59:10.915834 2026] [:error] [pid 59544:tid 59563] [client 74.248.133.77:12870] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aYtVzqZySR9mFY4BaikjugAAAY8"]
[Tue Feb 10 23:59:11.782438 2026] [:error] [pid 59544:tid 59570] [client 74.248.133.77:13438] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aYtVz6ZySR9mFY4BaikjuwAAAZM"]
[Tue Feb 10 23:59:13.134510 2026] [:error] [pid 7704:tid 7721] [client 74.248.133.77:12810] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aYtV0f0EcqgVBUs6CW1GwAAAAc4"]
[Tue Feb 10 23:59:13.994688 2026] [:error] [pid 30054:tid 30068] [client 74.248.133.77:13380] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aYtV0WecgOOXCu-GgYVkcgAAAQw"]
[Tue Feb 10 23:59:15.034138 2026] [:error] [pid 7704:tid 7726] [client 74.248.133.77:12099] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aYtV0_0EcqgVBUs6CW1GwQAAAdM"]
[Tue Feb 10 23:59:15.914854 2026] [:error] [pid 59544:tid 59571] [client 74.248.133.77:32586] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aYtV06ZySR9mFY4BaikjwQAAAZQ"]
[Tue Feb 10 23:59:16.543902 2026] [:error] [pid 59407:tid 59419] [client 74.248.133.77:12338] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aYtV1GLlhBXE3qmX-JlORwAAAUo"]
[Tue Feb 10 23:59:17.747760 2026] [:error] [pid 30054:tid 30066] [client 74.248.133.77:11344] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYtV1WecgOOXCu-GgYVkfQAAAQo"]
[Tue Feb 10 23:59:18.660590 2026] [:error] [pid 7704:tid 7723] [client 74.248.133.77:5699] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYtV1v0EcqgVBUs6CW1GxQAAAdA"]
[Tue Feb 10 23:59:19.330518 2026] [:error] [pid 59544:tid 59559] [client 74.248.133.77:24610] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYtV16ZySR9mFY4BaikjxQAAAYs"]
[Tue Feb 10 23:59:20.261624 2026] [:error] [pid 7704:tid 7711] [client 74.248.133.77:32636] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aYtV2P0EcqgVBUs6CW1GyAAAAcQ"]
[Tue Feb 10 23:59:21.282601 2026] [:error] [pid 7704:tid 7724] [client 74.248.133.77:12817] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYtV2f0EcqgVBUs6CW1GywAAAdE"]
[Tue Feb 10 23:59:22.009207 2026] [:error] [pid 47831:tid 47886] [client 74.248.133.77:33121] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYtV2idxbZYarWVkiADPEgAAAE0"]
[Tue Feb 10 23:59:23.024780 2026] [:error] [pid 47937:tid 47960] [client 74.248.133.77:12155] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYtV28pqXpC2CvJ3fOPmDAAAANU"]
[Tue Feb 10 23:59:23.969420 2026] [:error] [pid 47831:tid 47893] [client 74.248.133.77:12806] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYtV2ydxbZYarWVkiADPFQAAAFQ"]
[Tue Feb 10 23:59:24.866847 2026] [:error] [pid 59544:tid 59572] [client 74.248.133.77:13592] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aYtV3KZySR9mFY4BaikjyAAAAZU"]
[Tue Feb 10 23:59:25.754897 2026] [:error] [pid 47837:tid 47924] [client 74.248.133.77:12922] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aYtV3XFY8KYFPX79Z4kXwgAAAJg"]
[Tue Feb 10 23:59:27.786339 2026] [:error] [pid 7704:tid 7731] [client 74.248.133.77:33516] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aYtV3_0EcqgVBUs6CW1G1wAAAdg"]
[Tue Feb 10 23:59:28.944917 2026] [:error] [pid 59407:tid 59428] [client 74.248.133.77:38102] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aYtV4GLlhBXE3qmX-JlOTgAAAVM"]
[Tue Feb 10 23:59:31.607147 2026] [:error] [pid 59407:tid 59425] [client 74.248.133.77:31260] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aYtV42LlhBXE3qmX-JlOVgAAAVA"]
[Tue Feb 10 23:59:33.138218 2026] [:error] [pid 59544:tid 59561] [client 74.248.133.77:12850] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aYtV5aZySR9mFY4BaikjygAAAY0"]
[Tue Feb 10 23:59:33.961185 2026] [:error] [pid 59544:tid 59574] [client 74.248.133.77:24637] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aYtV5aZySR9mFY4BaikjywAAAZY"]
[Tue Feb 10 23:59:34.649219 2026] [:error] [pid 59544:tid 59569] [client 74.248.133.77:15422] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aYtV5qZySR9mFY4BaikjzAAAAZI"]
[Tue Feb 10 23:59:36.130668 2026] [:error] [pid 30054:tid 30072] [client 74.248.133.77:13426] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aYtV6GecgOOXCu-GgYVkmwAAARA"]
[Tue Feb 10 23:59:37.065846 2026] [:error] [pid 59544:tid 59562] [client 74.248.133.77:13412] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aYtV6aZySR9mFY4Baikj0QAAAY4"]
[Tue Feb 10 23:59:39.792597 2026] [:error] [pid 59544:tid 59567] [client 74.248.133.77:12875] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aYtV66ZySR9mFY4Baikj1QAAAZE"]
[Tue Feb 10 23:59:41.489778 2026] [:error] [pid 7704:tid 7719] [client 74.248.133.77:15380] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aYtV7f0EcqgVBUs6CW1G5QAAAcw"]
[Tue Feb 10 23:59:42.573448 2026] [:error] [pid 47831:tid 47884] [client 74.248.133.77:12815] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/199.php"] [unique_id "aYtV7idxbZYarWVkiADPLwAAAEs"]
[Tue Feb 10 23:59:47.542073 2026] [:error] [pid 59544:tid 59553] [client 74.248.133.77:5914] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/199.php"] [unique_id "aYtV86ZySR9mFY4Baikj3QAAAYU"]
[Tue Feb 10 23:59:48.425488 2026] [proxy_fcgi:error] [pid 47830:tid 47847] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:48.728311 2026] [proxy_fcgi:error] [pid 47830:tid 47867] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:48.998724 2026] [proxy_fcgi:error] [pid 47830:tid 47856] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:49.262294 2026] [proxy_fcgi:error] [pid 47830:tid 47868] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:49.697354 2026] [proxy_fcgi:error] [pid 47830:tid 47869] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:51.216917 2026] [proxy_fcgi:error] [pid 47830:tid 47860] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:51.769441 2026] [proxy_fcgi:error] [pid 47830:tid 47863] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:52.029596 2026] [proxy_fcgi:error] [pid 47830:tid 47859] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:52.292290 2026] [proxy_fcgi:error] [pid 47830:tid 47870] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:52.550991 2026] [proxy_fcgi:error] [pid 47830:tid 47865] [client 74.248.133.77:38131] AH01071: Got error 'Primary script unknown'
[Tue Feb 10 23:59:52.870602 2026] [:error] [pid 47830:tid 47866] [client 74.248.133.77:38131] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nope.php"] [unique_id "aYtV-Eco45BZs8e301C5EwAAABQ"]
[Tue Feb 10 23:59:54.511920 2026] [:error] [pid 47831:tid 47873] [client 74.248.133.77:5901] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nope.php"] [unique_id "aYtV-idxbZYarWVkiADPQAAAAEA"]
[Tue Feb 10 23:59:55.176127 2026] [:error] [pid 47937:tid 47949] [client 74.248.133.77:23926] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nope.php"] [unique_id "aYtV-8pqXpC2CvJ3fOPmPwAAAMo"]
[Tue Feb 10 23:59:56.278243 2026] [:error] [pid 47837:tid 47922] [client 74.248.133.77:17762] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nope.php"] [unique_id "aYtV_HFY8KYFPX79Z4kX4wAAAJY"]
[Tue Feb 10 23:59:57.668995 2026] [:error] [pid 47830:tid 47852] [client 74.248.133.77:31845] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aYtV_Uco45BZs8e301C5GAAAAAY"]
[Tue Feb 10 23:59:58.793661 2026] [:error] [pid 7704:tid 7723] [client 74.248.133.77:12912] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aYtV_v0EcqgVBUs6CW1G7gAAAdA"]
[Tue Feb 10 23:59:59.610785 2026] [:error] [pid 30054:tid 30057] [client 74.248.133.77:15397] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aYtV_2ecgOOXCu-GgYVksQAAAQE"]
[Wed Feb 11 00:00:00.967640 2026] [:error] [pid 59407:tid 59417] [client 74.248.133.77:32374] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aYtWAGLlhBXE3qmX-JlOZAAAAUg"]
[Wed Feb 11 00:00:02.160597 2026] [:error] [pid 7704:tid 7708] [client 74.248.133.77:38092] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aYtWAv0EcqgVBUs6CW1G9wAAAcE"]
[Wed Feb 11 00:00:04.156043 2026] [:error] [pid 47830:tid 47866] [client 74.248.133.77:31850] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aYtWBEco45BZs8e301C5HwAAABQ"]
[Wed Feb 11 00:00:04.953978 2026] [:error] [pid 30054:tid 30061] [client 74.248.133.77:21921] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aYtWBGecgOOXCu-GgYVktQAAAQU"]
[Wed Feb 11 00:00:06.265543 2026] [:error] [pid 59407:tid 59432] [client 74.248.133.77:21950] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aYtWBmLlhBXE3qmX-JlOagAAAVc"]
[Wed Feb 11 00:00:07.269302 2026] [:error] [pid 47937:tid 47957] [client 74.248.133.77:31603] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/async.php"] [unique_id "aYtWB8pqXpC2CvJ3fOPmSQAAANI"]
[Wed Feb 11 00:00:08.478876 2026] [:error] [pid 47837:tid 47905] [client 74.248.133.77:17319] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/async.php"] [unique_id "aYtWCHFY8KYFPX79Z4kX7QAAAIU"]
[Wed Feb 11 00:00:10.910901 2026] [:error] [pid 30054:tid 30064] [client 74.248.133.77:31822] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/async.php"] [unique_id "aYtWCmecgOOXCu-GgYVkuwAAAQg"]
[Wed Feb 11 00:00:11.872929 2026] [:error] [pid 47831:tid 47873] [client 74.248.133.77:17346] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/async.php"] [unique_id "aYtWCydxbZYarWVkiADPTwAAAEA"]
[Wed Feb 11 00:00:12.656515 2026] [:error] [pid 47837:tid 47910] [client 74.248.133.77:31579] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff.php"] [unique_id "aYtWDHFY8KYFPX79Z4kX7wAAAIo"]
[Wed Feb 11 00:00:13.904240 2026] [:error] [pid 47837:tid 47911] [client 74.248.133.77:27104] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff.php"] [unique_id "aYtWDXFY8KYFPX79Z4kX8AAAAIs"]
[Wed Feb 11 00:00:15.221747 2026] [:error] [pid 30054:tid 30079] [client 74.248.133.77:17300] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff.php"] [unique_id "aYtWD2ecgOOXCu-GgYVkvwAAARc"]
[Wed Feb 11 00:00:18.299963 2026] [:error] [pid 7704:tid 7714] [client 74.248.133.77:10571] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff.php"] [unique_id "aYtWEv0EcqgVBUs6CW1HBwAAAcc"]
[Wed Feb 11 00:00:19.279069 2026] [:error] [pid 59544:tid 59574] [client 74.248.133.77:5820] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aYtWE6ZySR9mFY4Baikj9AAAAZY"]
[Wed Feb 11 00:00:20.610761 2026] [:error] [pid 47937:tid 47962] [client 74.248.133.77:10618] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aYtWFMpqXpC2CvJ3fOPmVQAAANc"]
[Wed Feb 11 00:00:21.645228 2026] [:error] [pid 30054:tid 30069] [client 74.248.133.77:53941] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aYtWFWecgOOXCu-GgYVkyAAAAQ0"]
[Wed Feb 11 00:00:22.594355 2026] [:error] [pid 59544:tid 59559] [client 74.248.133.77:30109] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aYtWFqZySR9mFY4Baikj-QAAAYs"]
[Wed Feb 11 00:00:24.371464 2026] [:error] [pid 59407:tid 59425] [client 74.248.133.77:17303] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aYtWGGLlhBXE3qmX-JlOfAAAAVA"]
[Wed Feb 11 00:00:25.223420 2026] [:error] [pid 59544:tid 59571] [client 74.248.133.77:10572] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aYtWGaZySR9mFY4Baikj_wAAAZQ"]
[Wed Feb 11 00:00:26.503370 2026] [:error] [pid 7704:tid 7710] [client 74.248.133.77:21505] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aYtWGv0EcqgVBUs6CW1HDQAAAcM"]
[Wed Feb 11 00:00:27.550988 2026] [:error] [pid 47830:tid 47849] [client 74.248.133.77:5198] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aYtWG0co45BZs8e301C5OAAAAAM"]
[Wed Feb 11 00:00:28.697398 2026] [:error] [pid 47937:tid 47945] [client 74.248.133.77:10583] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aYtWHMpqXpC2CvJ3fOPmXAAAAMY"]
[Wed Feb 11 00:00:30.170041 2026] [:error] [pid 30054:tid 30067] [client 74.248.133.77:31602] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aYtWHmecgOOXCu-GgYVk0QAAAQs"]
[Wed Feb 11 00:00:30.925667 2026] [:error] [pid 47830:tid 47864] [client 74.248.133.77:30118] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aYtWHkco45BZs8e301C5PAAAABI"]
[Wed Feb 11 00:00:32.197170 2026] [:error] [pid 30054:tid 30069] [client 74.248.133.77:25836] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aYtWIGecgOOXCu-GgYVk0wAAAQ0"]
[Wed Feb 11 00:00:33.666143 2026] [:error] [pid 47937:tid 47958] [client 74.248.133.77:21533] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aYtWIcpqXpC2CvJ3fOPmYgAAANM"]
[Wed Feb 11 00:00:35.099865 2026] [:error] [pid 59544:tid 59557] [client 74.248.133.77:14599] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aYtWI6ZySR9mFY4BaikkCwAAAYk"]
[Wed Feb 11 00:00:35.930980 2026] [:error] [pid 47831:tid 47881] [client 74.248.133.77:14616] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aYtWIydxbZYarWVkiADPbQAAAEg"]
[Wed Feb 11 00:00:39.042473 2026] [:error] [pid 47830:tid 47868] [client 74.248.133.77:14609] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aYtWJ0co45BZs8e301C5RgAAABY"]
[Wed Feb 11 00:00:42.774002 2026] [:error] [pid 47837:tid 47915] [client 74.248.133.77:14902] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYtWKnFY8KYFPX79Z4kYEAAAAI8"]
[Wed Feb 11 00:00:44.667884 2026] [:error] [pid 30054:tid 30062] [client 74.248.133.77:31308] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYtWLGecgOOXCu-GgYVk3wAAAQY"]
[Wed Feb 11 00:00:45.395041 2026] [:error] [pid 59407:tid 59414] [client 74.248.133.77:17385] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYtWLWLlhBXE3qmX-JlOkAAAAUU"]
[Wed Feb 11 00:00:47.438011 2026] [:error] [pid 47830:tid 47852] [client 74.248.133.77:17327] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYtWL0co45BZs8e301C5VwAAAAY"]
[Wed Feb 11 00:00:48.802565 2026] [:error] [pid 47830:tid 47870] [client 74.248.133.77:27823] [client 74.248.133.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYtWMEco45BZs8e301C5WgAAABg"]
[Wed Feb 11 00:00:49.716366 2026] [:error] [pid 47831:tid 47873] [client 74.248.133.77:27829] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aYtWMSdxbZYarWVkiADPjgAAAEA"]
[Wed Feb 11 00:00:50.878086 2026] [:error] [pid 47837:tid 47906] [client 74.248.133.77:5361] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aYtWMnFY8KYFPX79Z4kYFwAAAIY"]
[Wed Feb 11 00:00:51.768033 2026] [:error] [pid 47831:tid 47880] [client 74.248.133.77:17364] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aYtWMydxbZYarWVkiADPkgAAAEc"]
[Wed Feb 11 00:00:52.549744 2026] [proxy_fcgi:error] [pid 47837:tid 47914] [client 74.248.133.77:27465] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:52.881687 2026] [proxy_fcgi:error] [pid 47837:tid 47904] [client 74.248.133.77:27465] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:53.199594 2026] [proxy_fcgi:error] [pid 47837:tid 47922] [client 74.248.133.77:27465] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:53.460312 2026] [proxy_fcgi:error] [pid 47837:tid 47905] [client 74.248.133.77:27465] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:53.896491 2026] [proxy_fcgi:error] [pid 47837:tid 47915] [client 74.248.133.77:27465] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:54.202778 2026] [proxy_fcgi:error] [pid 47837:tid 47901] [client 74.248.133.77:27465] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:54.459207 2026] [:error] [pid 47837:tid 47911] [client 74.248.133.77:27465] [client 74.248.133.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aYtWNnFY8KYFPX79Z4kYJQAAAIs"]
[Wed Feb 11 00:00:55.208354 2026] [proxy_fcgi:error] [pid 59407:tid 59424] [client 74.248.133.77:17282] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:55.562305 2026] [proxy_fcgi:error] [pid 59407:tid 59429] [client 74.248.133.77:17282] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:55.823912 2026] [proxy_fcgi:error] [pid 59407:tid 59427] [client 74.248.133.77:17282] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:56.133497 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 74.248.133.77:17282] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:56.473987 2026] [proxy_fcgi:error] [pid 59407:tid 59419] [client 74.248.133.77:17282] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:00:57.033855 2026] [:error] [pid 59407:tid 59409] [client 74.248.133.77:17282] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aYtWOWLlhBXE3qmX-JlOqAAAAUA"]
[Wed Feb 11 00:00:57.795035 2026] [:error] [pid 47830:tid 47864] [client 74.248.133.77:11010] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aYtWOUco45BZs8e301C5bQAAABI"]
[Wed Feb 11 00:00:58.951952 2026] [:error] [pid 59407:tid 59415] [client 74.248.133.77:22744] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aYtWOmLlhBXE3qmX-JlOrgAAAUY"]
[Wed Feb 11 00:01:00.428029 2026] [:error] [pid 7704:tid 7731] [client 74.248.133.77:14374] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aYtWPP0EcqgVBUs6CW1HJQAAAdg"]
[Wed Feb 11 00:01:01.584015 2026] [:error] [pid 47830:tid 47865] [client 74.248.133.77:30578] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aYtWPUco45BZs8e301C5dgAAABM"]
[Wed Feb 11 00:01:02.326441 2026] [:error] [pid 59544:tid 59557] [client 74.248.133.77:10783] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aYtWPqZySR9mFY4BaikkHgAAAYk"]
[Wed Feb 11 00:01:03.329929 2026] [:error] [pid 7704:tid 7716] [client 74.248.133.77:11058] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aYtWP_0EcqgVBUs6CW1HMQAAAck"]
[Wed Feb 11 00:01:04.025090 2026] [:error] [pid 7704:tid 7715] [client 74.248.133.77:53930] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aYtWQP0EcqgVBUs6CW1HNAAAAcg"]
[Wed Feb 11 00:01:05.108676 2026] [:error] [pid 47831:tid 47891] [client 74.248.133.77:5372] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aYtWQSdxbZYarWVkiADPoQAAAFI"]
[Wed Feb 11 00:01:06.028853 2026] [:error] [pid 47831:tid 47890] [client 74.248.133.77:14354] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aYtWQidxbZYarWVkiADPowAAAFE"]
[Wed Feb 11 00:01:07.661111 2026] [:error] [pid 47831:tid 47877] [client 74.248.133.77:30768] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aYtWQydxbZYarWVkiADPpgAAAEQ"]
[Wed Feb 11 00:01:08.433381 2026] [:error] [pid 47837:tid 47900] [client 74.248.133.77:30541] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aYtWRHFY8KYFPX79Z4kYNAAAAIA"]
[Wed Feb 11 00:01:09.503948 2026] [:error] [pid 47937:tid 47944] [client 74.248.133.77:24251] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aYtWRcpqXpC2CvJ3fOPmjQAAAMU"]
[Wed Feb 11 00:01:10.346683 2026] [:error] [pid 47937:tid 47954] [client 74.248.133.77:22727] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aYtWRspqXpC2CvJ3fOPmjgAAAM8"]
[Wed Feb 11 00:01:11.232617 2026] [:error] [pid 30054:tid 30066] [client 74.248.133.77:11059] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aYtWR2ecgOOXCu-GgYVk-wAAAQo"]
[Wed Feb 11 00:01:12.152954 2026] [:error] [pid 47837:tid 47906] [client 74.248.133.77:11773] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aYtWSHFY8KYFPX79Z4kYOQAAAIY"]
[Wed Feb 11 00:01:15.759615 2026] [:error] [pid 59407:tid 59428] [client 74.248.133.77:18480] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYtWS2LlhBXE3qmX-JlOwAAAAVM"]
[Wed Feb 11 00:01:17.261808 2026] [:error] [pid 59407:tid 59422] [client 74.248.133.77:17000] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYtWTWLlhBXE3qmX-JlOxQAAAU0"]
[Wed Feb 11 00:01:18.008796 2026] [:error] [pid 47937:tid 47954] [client 74.248.133.77:33445] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYtWTspqXpC2CvJ3fOPmlgAAAM8"]
[Wed Feb 11 00:01:19.180666 2026] [:error] [pid 59407:tid 59417] [client 74.248.133.77:30727] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYtWT2LlhBXE3qmX-JlOxwAAAUg"]
[Wed Feb 11 00:01:20.267705 2026] [:error] [pid 47831:tid 47894] [client 74.248.133.77:11025] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYtWUCdxbZYarWVkiADPugAAAFU"]
[Wed Feb 11 00:01:21.355518 2026] [:error] [pid 7704:tid 7724] [client 74.248.133.77:22310] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYtWUf0EcqgVBUs6CW1HRgAAAdE"]
[Wed Feb 11 00:01:21.974662 2026] [:error] [pid 7704:tid 7718] [client 74.248.133.77:11731] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYtWUf0EcqgVBUs6CW1HRwAAAcs"]
[Wed Feb 11 00:01:22.717284 2026] [:error] [pid 47830:tid 47854] [client 74.248.133.77:11735] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYtWUkco45BZs8e301C5iAAAAAg"]
[Wed Feb 11 00:01:23.749069 2026] [:error] [pid 59544:tid 59561] [client 74.248.133.77:25022] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aYtWU6ZySR9mFY4BaikkNAAAAY0"]
[Wed Feb 11 00:01:25.171935 2026] [:error] [pid 30054:tid 30066] [client 74.248.133.77:25009] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aYtWVWecgOOXCu-GgYVlBgAAAQo"]
[Wed Feb 11 00:01:26.297214 2026] [:error] [pid 30054:tid 30056] [client 74.248.133.77:14089] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aYtWVmecgOOXCu-GgYVlCAAAAQA"]
[Wed Feb 11 00:01:27.435895 2026] [:error] [pid 59407:tid 59419] [client 74.248.133.77:23471] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aYtWV2LlhBXE3qmX-JlOzgAAAUo"]
[Wed Feb 11 00:01:28.364974 2026] [:error] [pid 47937:tid 47957] [client 74.248.133.77:30738] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYtWWMpqXpC2CvJ3fOPmnQAAANI"]
[Wed Feb 11 00:01:29.597815 2026] [:error] [pid 47831:tid 47885] [client 74.248.133.77:26696] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYtWWSdxbZYarWVkiADPxgAAAEw"]
[Wed Feb 11 00:01:30.555434 2026] [:error] [pid 47937:tid 47942] [client 74.248.133.77:22290] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYtWWspqXpC2CvJ3fOPmnwAAAMM"]
[Wed Feb 11 00:01:31.848897 2026] [:error] [pid 47937:tid 47959] [client 74.248.133.77:33121] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/la.php"] [unique_id "aYtWW8pqXpC2CvJ3fOPmoAAAANQ"]
[Wed Feb 11 00:01:33.073169 2026] [:error] [pid 59544:tid 59554] [client 74.248.133.77:23091] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aYtWXaZySR9mFY4BaikkPAAAAYY"]
[Wed Feb 11 00:01:35.116981 2026] [:error] [pid 7704:tid 7714] [client 74.248.133.77:16967] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aYtWX_0EcqgVBUs6CW1HUgAAAcc"]
[Wed Feb 11 00:01:36.863354 2026] [:error] [pid 47831:tid 47876] [client 74.248.133.77:14100] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aYtWYCdxbZYarWVkiADP2AAAAEM"]
[Wed Feb 11 00:01:39.080039 2026] [:error] [pid 47831:tid 47881] [client 74.248.133.77:31095] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aYtWYydxbZYarWVkiADP3AAAAEg"]
[Wed Feb 11 00:01:40.416381 2026] [:error] [pid 47831:tid 47876] [client 74.248.133.77:23092] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aYtWZCdxbZYarWVkiADP5QAAAEM"]
[Wed Feb 11 00:01:45.011995 2026] [:error] [pid 30054:tid 30061] [client 74.248.133.77:17006] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aYtWaWecgOOXCu-GgYVlFQAAAQU"]
[Wed Feb 11 00:01:52.126796 2026] [:error] [pid 47831:tid 47882] [client 74.248.133.77:38618] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aYtWcCdxbZYarWVkiADQDwAAAEk"]
[Wed Feb 11 00:01:53.045758 2026] [:error] [pid 47937:tid 47952] [client 74.248.133.77:24205] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aYtWccpqXpC2CvJ3fOPmywAAAM0"]
[Wed Feb 11 00:01:57.526063 2026] [proxy_fcgi:error] [pid 59407:tid 59410] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:01:57.900299 2026] [proxy_fcgi:error] [pid 59407:tid 59427] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:01:58.482987 2026] [proxy_fcgi:error] [pid 59407:tid 59414] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:01:59.401757 2026] [proxy_fcgi:error] [pid 59407:tid 59411] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:01:59.758728 2026] [proxy_fcgi:error] [pid 59407:tid 59409] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:02:00.481962 2026] [proxy_fcgi:error] [pid 59407:tid 59426] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:02:00.750497 2026] [proxy_fcgi:error] [pid 59407:tid 59429] [client 74.248.133.77:33029] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:02:01.007717 2026] [:error] [pid 59407:tid 59419] [client 74.248.133.77:33029] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYtWeWLlhBXE3qmX-JlPEQAAAUo"]
[Wed Feb 11 00:02:02.656628 2026] [:error] [pid 47937:tid 47960] [client 74.248.133.77:53173] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYtWespqXpC2CvJ3fOPm5gAAANU"]
[Wed Feb 11 00:02:03.447915 2026] [:error] [pid 7704:tid 7708] [client 74.248.133.77:50759] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYtWe_0EcqgVBUs6CW1HXgAAAcE"]
[Wed Feb 11 00:02:04.137618 2026] [:error] [pid 47830:tid 47864] [client 74.248.133.77:26657] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYtWfEco45BZs8e301C5qgAAABI"]
[Wed Feb 11 00:02:04.982801 2026] [:error] [pid 59544:tid 59551] [client 74.248.133.77:38563] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aYtWfKZySR9mFY4BaikkWQAAAYM"]
[Wed Feb 11 00:02:05.898506 2026] [:error] [pid 59544:tid 59562] [client 74.248.133.77:55777] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aYtWfaZySR9mFY4BaikkWgAAAY4"]
[Wed Feb 11 00:02:06.876864 2026] [:error] [pid 7704:tid 7725] [client 74.248.133.77:55751] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aYtWfv0EcqgVBUs6CW1HYgAAAdI"]
[Wed Feb 11 00:02:07.703261 2026] [:error] [pid 30054:tid 30066] [client 74.248.133.77:25370] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aYtWf2ecgOOXCu-GgYVlJwAAAQo"]
[Wed Feb 11 00:02:08.886776 2026] [:error] [pid 47831:tid 47878] [client 74.248.133.77:55765] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYtWgCdxbZYarWVkiADQJgAAAEU"]
[Wed Feb 11 00:02:09.654526 2026] [:error] [pid 47830:tid 47850] [client 74.248.133.77:12598] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYtWgUco45BZs8e301C5sQAAAAQ"]
[Wed Feb 11 00:02:11.054544 2026] [:error] [pid 47831:tid 47876] [client 74.248.133.77:33074] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYtWgydxbZYarWVkiADQKAAAAEM"]
[Wed Feb 11 00:02:11.741096 2026] [:error] [pid 47937:tid 47963] [client 74.248.133.77:20053] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYtWg8pqXpC2CvJ3fOPm9QAAANg"]
[Wed Feb 11 00:02:12.557419 2026] [:error] [pid 59544:tid 59571] [client 74.248.133.77:15639] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aYtWhKZySR9mFY4BaikkYgAAAZQ"]
[Wed Feb 11 00:02:13.363720 2026] [:error] [pid 59407:tid 59431] [client 74.248.133.77:19219] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aYtWhWLlhBXE3qmX-JlPHAAAAVY"]
[Wed Feb 11 00:02:14.074508 2026] [:error] [pid 59544:tid 59556] [client 74.248.133.77:33067] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aYtWhqZySR9mFY4BaikkZgAAAYg"]
[Wed Feb 11 00:02:14.749173 2026] [:error] [pid 47837:tid 47923] [client 74.248.133.77:6118] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aYtWhnFY8KYFPX79Z4kYbQAAAJc"]
[Wed Feb 11 00:02:15.362453 2026] [:error] [pid 30054:tid 30071] [client 74.248.133.77:20095] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYtWh2ecgOOXCu-GgYVlMQAAAQ8"]
[Wed Feb 11 00:02:16.185421 2026] [:error] [pid 47831:tid 47878] [client 74.248.133.77:19208] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYtWiCdxbZYarWVkiADQKgAAAEU"]
[Wed Feb 11 00:02:17.115027 2026] [:error] [pid 59544:tid 59549] [client 74.248.133.77:28573] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYtWiaZySR9mFY4BaikkaQAAAYE"]
[Wed Feb 11 00:02:17.769289 2026] [:error] [pid 47837:tid 47910] [client 74.248.133.77:20427] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aYtWiXFY8KYFPX79Z4kYcwAAAIo"]
[Wed Feb 11 00:02:18.666718 2026] [:error] [pid 47831:tid 47894] [client 74.248.133.77:11272] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aYtWiidxbZYarWVkiADQLgAAAFU"]
[Wed Feb 11 00:02:20.159798 2026] [:error] [pid 59407:tid 59421] [client 74.248.133.77:11317] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aYtWjGLlhBXE3qmX-JlPIgAAAUw"]
[Wed Feb 11 00:02:21.686013 2026] [:error] [pid 47830:tid 47862] [client 74.248.133.77:20428] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aYtWjUco45BZs8e301C5wQAAABA"]
[Wed Feb 11 00:02:23.403727 2026] [:error] [pid 59407:tid 59416] [client 74.248.133.77:31000] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aYtWj2LlhBXE3qmX-JlPJQAAAUc"]
[Wed Feb 11 00:02:24.980062 2026] [:error] [pid 47831:tid 47896] [client 74.248.133.77:11572] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aYtWkCdxbZYarWVkiADQOAAAAFc"]
[Wed Feb 11 00:02:26.021523 2026] [:error] [pid 47830:tid 47851] [client 74.248.133.77:18849] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aYtWkkco45BZs8e301C5xgAAAAU"]
[Wed Feb 11 00:02:26.754008 2026] [:error] [pid 59407:tid 59431] [client 74.248.133.77:11564] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aYtWkmLlhBXE3qmX-JlPKQAAAVY"]
[Wed Feb 11 00:02:27.440408 2026] [:error] [pid 47837:tid 47906] [client 74.248.133.77:20471] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aYtWk3FY8KYFPX79Z4kYfgAAAIY"]
[Wed Feb 11 00:02:28.314004 2026] [:error] [pid 47831:tid 47885] [client 74.248.133.77:34289] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYtWlCdxbZYarWVkiADQOwAAAEw"]
[Wed Feb 11 00:02:29.070449 2026] [:error] [pid 59407:tid 59425] [client 74.248.133.77:55767] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYtWlWLlhBXE3qmX-JlPLQAAAVA"]
[Wed Feb 11 00:02:30.186898 2026] [:error] [pid 47831:tid 47880] [client 74.248.133.77:33034] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYtWlidxbZYarWVkiADQPQAAAEc"]
[Wed Feb 11 00:02:30.948161 2026] [:error] [pid 47937:tid 47944] [client 74.248.133.77:13831] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYtWlspqXpC2CvJ3fOPnBQAAAMU"]
[Wed Feb 11 00:02:31.777384 2026] [:error] [pid 47831:tid 47895] [client 74.248.133.77:18832] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aYtWlydxbZYarWVkiADQPgAAAFY"]
[Wed Feb 11 00:02:32.466943 2026] [:error] [pid 47937:tid 47950] [client 74.248.133.77:24273] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aYtWmMpqXpC2CvJ3fOPnBwAAAMs"]
[Wed Feb 11 00:02:33.547091 2026] [:error] [pid 47837:tid 47900] [client 74.248.133.77:38052] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aYtWmXFY8KYFPX79Z4kYhwAAAIA"]
[Wed Feb 11 00:02:35.315174 2026] [:error] [pid 47837:tid 47911] [client 74.248.133.77:14206] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aYtWm3FY8KYFPX79Z4kYigAAAIs"]
[Wed Feb 11 00:02:39.127226 2026] [:error] [pid 30054:tid 30059] [client 74.248.133.77:34945] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aYtWn2ecgOOXCu-GgYVlOQAAAQM"]
[Wed Feb 11 00:02:40.278173 2026] [:error] [pid 47831:tid 47895] [client 74.248.133.77:20444] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aYtWoCdxbZYarWVkiADQSwAAAFY"]
[Wed Feb 11 00:02:41.260334 2026] [:error] [pid 7704:tid 7718] [client 74.248.133.77:20453] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aYtWof0EcqgVBUs6CW1HgQAAAcs"]
[Wed Feb 11 00:02:43.498944 2026] [:error] [pid 47830:tid 47863] [client 74.248.133.77:11641] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aYtWo0co45BZs8e301C54AAAABE"]
[Wed Feb 11 00:02:44.728767 2026] [:error] [pid 47937:tid 47955] [client 74.248.133.77:33062] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aYtWpMpqXpC2CvJ3fOPnHwAAANA"]
[Wed Feb 11 00:02:46.048169 2026] [:error] [pid 47937:tid 47946] [client 74.248.133.77:24277] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aYtWpspqXpC2CvJ3fOPnIAAAAMc"]
[Wed Feb 11 00:02:46.807921 2026] [:error] [pid 47830:tid 47850] [client 74.248.133.77:11613] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aYtWpkco45BZs8e301C54gAAAAQ"]
[Wed Feb 11 00:02:50.108891 2026] [:error] [pid 47837:tid 47919] [client 74.248.133.77:10331] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aYtWqnFY8KYFPX79Z4kYlQAAAJM"]
[Wed Feb 11 00:02:50.917200 2026] [:error] [pid 59407:tid 59433] [client 74.248.133.77:34180] [client 74.248.133.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYtWqmLlhBXE3qmX-JlPPAAAAVg"]
[Wed Feb 11 00:02:52.130915 2026] [:error] [pid 47837:tid 47907] [client 74.248.133.77:28990] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aYtWrHFY8KYFPX79Z4kYlwAAAIc"]
[Wed Feb 11 00:02:53.202855 2026] [:error] [pid 47830:tid 47855] [client 74.248.133.77:55771] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aYtWrUco45BZs8e301C57gAAAAk"]
[Wed Feb 11 00:02:54.086531 2026] [:error] [pid 47830:tid 47847] [client 74.248.133.77:16580] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aYtWrkco45BZs8e301C59AAAAAE"]
[Wed Feb 11 00:02:55.455644 2026] [:error] [pid 47830:tid 47868] [client 74.248.133.77:34236] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aYtWr0co45BZs8e301C5-QAAABY"]
[Wed Feb 11 00:02:56.197046 2026] [:error] [pid 59544:tid 59553] [client 74.248.133.77:34193] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aYtWsKZySR9mFY4BaikkigAAAYU"]
[Wed Feb 11 00:02:57.089012 2026] [:error] [pid 47831:tid 47893] [client 74.248.133.77:15715] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aYtWsSdxbZYarWVkiADQYQAAAFQ"]
[Wed Feb 11 00:02:58.144678 2026] [:error] [pid 47831:tid 47884] [client 74.248.133.77:5487] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aYtWsidxbZYarWVkiADQYgAAAEs"]
[Wed Feb 11 00:02:58.882171 2026] [:error] [pid 47831:tid 47885] [client 74.248.133.77:32125] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aYtWsidxbZYarWVkiADQZQAAAEw"]
[Wed Feb 11 00:02:59.514441 2026] [:error] [pid 7704:tid 7717] [client 74.248.133.77:28247] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aYtWs_0EcqgVBUs6CW1HkAAAAco"]
[Wed Feb 11 00:03:00.400562 2026] [proxy_fcgi:error] [pid 30054:tid 30060] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:00.663883 2026] [proxy_fcgi:error] [pid 30054:tid 30064] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:00.924775 2026] [proxy_fcgi:error] [pid 30054:tid 30074] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:01.193842 2026] [proxy_fcgi:error] [pid 30054:tid 30056] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:01.475058 2026] [proxy_fcgi:error] [pid 30054:tid 30057] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:01.736102 2026] [proxy_fcgi:error] [pid 30054:tid 30076] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:01.997715 2026] [proxy_fcgi:error] [pid 30054:tid 30065] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:03.963402 2026] [proxy_fcgi:error] [pid 30054:tid 30063] [client 74.248.133.77:27873] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:03:04.223060 2026] [:error] [pid 30054:tid 30080] [client 74.248.133.77:27873] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aYtWuGecgOOXCu-GgYVlUAAAARg"]
[Wed Feb 11 00:03:10.282704 2026] [:error] [pid 47837:tid 47919] [client 74.248.133.77:28253] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aYtWvnFY8KYFPX79Z4kYqwAAAJM"]
[Wed Feb 11 00:03:12.831370 2026] [:error] [pid 47937:tid 47956] [client 74.248.133.77:5535] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aYtWwMpqXpC2CvJ3fOPnPwAAANE"]
[Wed Feb 11 00:03:14.645035 2026] [:error] [pid 47831:tid 47876] [client 74.248.133.77:28989] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aYtWwidxbZYarWVkiADQiQAAAEM"]
[Wed Feb 11 00:03:16.849221 2026] [:error] [pid 30054:tid 30078] [client 74.248.133.77:25035] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYtWxGecgOOXCu-GgYVlWgAAARY"]
[Wed Feb 11 00:03:20.096100 2026] [:error] [pid 47830:tid 47849] [client 74.248.133.77:28260] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYtWyEco45BZs8e301C6FAAAAAM"]
[Wed Feb 11 00:03:21.722606 2026] [:error] [pid 47937:tid 47959] [client 74.248.133.77:13663] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYtWycpqXpC2CvJ3fOPnSwAAANQ"]
[Wed Feb 11 00:03:22.797392 2026] [:error] [pid 30054:tid 30057] [client 74.248.133.77:12295] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYtWymecgOOXCu-GgYVlXgAAAQE"]
[Wed Feb 11 00:03:24.407005 2026] [:error] [pid 30054:tid 30063] [client 74.248.133.77:25042] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYtWzGecgOOXCu-GgYVlYAAAAQc"]
[Wed Feb 11 00:03:25.237114 2026] [:error] [pid 7704:tid 7724] [client 74.248.133.77:28975] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYtWzf0EcqgVBUs6CW1HrQAAAdE"]
[Wed Feb 11 00:03:26.067246 2026] [:error] [pid 47831:tid 47876] [client 74.248.133.77:6010] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYtWzidxbZYarWVkiADQkgAAAEM"]
[Wed Feb 11 00:03:27.098750 2026] [:error] [pid 47830:tid 47867] [client 74.248.133.77:28934] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aYtWz0co45BZs8e301C6GAAAABU"]
[Wed Feb 11 00:03:27.872306 2026] [:error] [pid 47831:tid 47889] [client 74.248.133.77:5445] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aYtWzydxbZYarWVkiADQnAAAAFA"]
[Wed Feb 11 00:03:28.850440 2026] [:error] [pid 47837:tid 47924] [client 74.248.133.77:16596] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aYtW0HFY8KYFPX79Z4kYwgAAAJg"]
[Wed Feb 11 00:03:29.687462 2026] [:error] [pid 47831:tid 47874] [client 74.248.133.77:12318] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aYtW0SdxbZYarWVkiADQoQAAAEE"]
[Wed Feb 11 00:03:30.408726 2026] [:error] [pid 47830:tid 47863] [client 74.248.133.77:16222] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aYtW0kco45BZs8e301C6GwAAABE"]
[Wed Feb 11 00:03:31.218415 2026] [:error] [pid 47837:tid 47902] [client 74.248.133.77:30174] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aYtW03FY8KYFPX79Z4kYxgAAAII"]
[Wed Feb 11 00:03:31.928676 2026] [:error] [pid 47837:tid 47908] [client 74.248.133.77:35017] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aYtW03FY8KYFPX79Z4kYyAAAAIg"]
[Wed Feb 11 00:03:32.927105 2026] [:error] [pid 47831:tid 47891] [client 74.248.133.77:16627] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aYtW1CdxbZYarWVkiADQrQAAAFI"]
[Wed Feb 11 00:03:33.614394 2026] [:error] [pid 30054:tid 30079] [client 74.248.133.77:19651] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aYtW1WecgOOXCu-GgYVlZQAAARc"]
[Wed Feb 11 00:03:34.367978 2026] [:error] [pid 30054:tid 30057] [client 74.248.133.77:16249] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYtW1mecgOOXCu-GgYVlZwAAAQE"]
[Wed Feb 11 00:03:35.371070 2026] [:error] [pid 47937:tid 47949] [client 74.248.133.77:28978] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYtW18pqXpC2CvJ3fOPnTwAAAMo"]
[Wed Feb 11 00:03:36.723741 2026] [:error] [pid 7704:tid 7717] [client 74.248.133.77:12135] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYtW2P0EcqgVBUs6CW1HtAAAAco"]
[Wed Feb 11 00:03:37.350790 2026] [:error] [pid 47937:tid 47950] [client 74.248.133.77:16251] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYtW2cpqXpC2CvJ3fOPnVAAAAMs"]
[Wed Feb 11 00:03:38.330346 2026] [:error] [pid 59544:tid 59570] [client 74.248.133.77:35031] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aYtW2qZySR9mFY4BaikksQAAAZM"]
[Wed Feb 11 00:03:39.031618 2026] [:error] [pid 59544:tid 59571] [client 74.248.133.77:28972] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aYtW26ZySR9mFY4BaikksgAAAZQ"]
[Wed Feb 11 00:03:39.948740 2026] [:error] [pid 47837:tid 47908] [client 74.248.133.77:6065] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aYtW23FY8KYFPX79Z4kYzwAAAIg"]
[Wed Feb 11 00:03:40.645414 2026] [:error] [pid 59407:tid 59416] [client 74.248.133.77:16590] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aYtW3GLlhBXE3qmX-JlPZQAAAUc"]
[Wed Feb 11 00:03:41.403124 2026] [:error] [pid 59544:tid 59561] [client 74.248.133.77:16604] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aYtW3aZySR9mFY4BaikkswAAAY0"]
[Wed Feb 11 00:03:42.046455 2026] [:error] [pid 59407:tid 59422] [client 74.248.133.77:6063] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aYtW3mLlhBXE3qmX-JlPaAAAAU0"]
[Wed Feb 11 00:03:42.823643 2026] [:error] [pid 7704:tid 7713] [client 74.248.133.77:16198] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aYtW3v0EcqgVBUs6CW1HtwAAAcY"]
[Wed Feb 11 00:03:43.401694 2026] [:error] [pid 59544:tid 59567] [client 74.248.133.77:5486] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aYtW36ZySR9mFY4BaikktwAAAZE"]
[Wed Feb 11 00:03:44.078861 2026] [:error] [pid 47937:tid 47944] [client 74.248.133.77:35068] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aYtW4MpqXpC2CvJ3fOPnWgAAAMU"]
[Wed Feb 11 00:03:44.832643 2026] [:error] [pid 47831:tid 47892] [client 74.248.133.77:28931] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aYtW4CdxbZYarWVkiADQvgAAAFM"]
[Wed Feb 11 00:03:45.472341 2026] [:error] [pid 47937:tid 47939] [client 74.248.133.77:30513] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aYtW4cpqXpC2CvJ3fOPnXAAAAMA"]
[Wed Feb 11 00:03:46.096164 2026] [:error] [pid 30054:tid 30076] [client 74.248.133.77:12384] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aYtW4mecgOOXCu-GgYVlcgAAARQ"]
[Wed Feb 11 00:03:46.893700 2026] [:error] [pid 59544:tid 59558] [client 74.248.133.77:6053] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYtW4qZySR9mFY4BaikkugAAAYo"]
[Wed Feb 11 00:03:47.507413 2026] [:error] [pid 47937:tid 47958] [client 74.248.133.77:11369] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYtW48pqXpC2CvJ3fOPnYgAAANM"]
[Wed Feb 11 00:03:48.312855 2026] [:error] [pid 47831:tid 47895] [client 74.248.133.77:6059] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYtW5CdxbZYarWVkiADQwAAAAFY"]
[Wed Feb 11 00:03:48.966990 2026] [:error] [pid 47837:tid 47919] [client 74.248.133.77:11363] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aYtW5HFY8KYFPX79Z4kY2wAAAJM"]
[Wed Feb 11 00:03:49.710678 2026] [:error] [pid 47937:tid 47963] [client 74.248.133.77:6074] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aYtW5cpqXpC2CvJ3fOPnZwAAANg"]
[Wed Feb 11 00:03:50.343966 2026] [:error] [pid 47937:tid 47961] [client 74.248.133.77:5505] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aYtW5spqXpC2CvJ3fOPnagAAANY"]
[Wed Feb 11 00:03:51.064229 2026] [:error] [pid 47830:tid 47858] [client 74.248.133.77:11329] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aYtW50co45BZs8e301C6LAAAAAw"]
[Wed Feb 11 00:03:52.267894 2026] [:error] [pid 59544:tid 59570] [client 74.248.133.77:35019] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aYtW6KZySR9mFY4BaikkwAAAAZM"]
[Wed Feb 11 00:03:53.259711 2026] [:error] [pid 47937:tid 47960] [client 74.248.133.77:55764] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aYtW6cpqXpC2CvJ3fOPnbgAAANU"]
[Wed Feb 11 00:03:54.027214 2026] [:error] [pid 47830:tid 47863] [client 74.248.133.77:12156] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aYtW6kco45BZs8e301C6OQAAABE"]
[Wed Feb 11 00:03:54.682793 2026] [:error] [pid 47831:tid 47883] [client 74.248.133.77:5741] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aYtW6idxbZYarWVkiADQxgAAAEo"]
[Wed Feb 11 00:03:56.217386 2026] [:error] [pid 59544:tid 59563] [client 74.248.133.77:12119] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aYtW7KZySR9mFY4BaikkxAAAAY8"]
[Wed Feb 11 00:03:57.014528 2026] [:error] [pid 7704:tid 7725] [client 74.248.133.77:28249] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aYtW7f0EcqgVBUs6CW1HxAAAAdI"]
[Wed Feb 11 00:04:00.528072 2026] [:error] [pid 59407:tid 59414] [client 74.248.133.77:31496] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aYtW8GLlhBXE3qmX-JlPcQAAAUU"]
[Wed Feb 11 00:04:02.191762 2026] [:error] [pid 59407:tid 59433] [client 74.248.133.77:31494] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aYtW8mLlhBXE3qmX-JlPcgAAAVg"]
[Wed Feb 11 00:04:03.456684 2026] [proxy_fcgi:error] [pid 59544:tid 59567] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:04.047216 2026] [proxy_fcgi:error] [pid 59544:tid 59569] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:04.307342 2026] [proxy_fcgi:error] [pid 59544:tid 59563] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:04.826870 2026] [proxy_fcgi:error] [pid 59544:tid 59549] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:05.274958 2026] [proxy_fcgi:error] [pid 59544:tid 59558] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:05.546112 2026] [proxy_fcgi:error] [pid 59544:tid 59548] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:05.807351 2026] [proxy_fcgi:error] [pid 59544:tid 59574] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:06.066287 2026] [proxy_fcgi:error] [pid 59544:tid 59550] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:06.326023 2026] [proxy_fcgi:error] [pid 59544:tid 59552] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:06.585615 2026] [proxy_fcgi:error] [pid 59544:tid 59556] [client 74.248.133.77:28227] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 00:04:07.174664 2026] [:error] [pid 59544:tid 59560] [client 74.248.133.77:28227] [client 74.248.133.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aYtW96ZySR9mFY4Baikk2AAAAYw"]
[Wed Feb 11 00:04:08.108381 2026] [:error] [pid 47937:tid 47942] [client 74.248.133.77:6037] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYtW-MpqXpC2CvJ3fOPnegAAAMM"]
[Wed Feb 11 00:04:08.739816 2026] [:error] [pid 47831:tid 47886] [client 74.248.133.77:12356] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYtW-CdxbZYarWVkiADQ2gAAAE0"]
[Wed Feb 11 00:04:09.684046 2026] [:error] [pid 7704:tid 7730] [client 74.248.133.77:33486] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYtW-f0EcqgVBUs6CW1H0QAAAdc"]
[Wed Feb 11 00:04:10.578741 2026] [:error] [pid 47830:tid 47862] [client 74.248.133.77:30509] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aYtW-kco45BZs8e301C6TAAAABA"]
[Wed Feb 11 00:04:11.330150 2026] [:error] [pid 47937:tid 47959] [client 74.248.133.77:38089] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYtW-8pqXpC2CvJ3fOPnfgAAANQ"]
[Wed Feb 11 00:04:13.493869 2026] [:error] [pid 47831:tid 47885] [client 74.248.133.77:15388] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYtW_SdxbZYarWVkiADQ4QAAAEw"]
[Wed Feb 11 00:04:14.401967 2026] [:error] [pid 7704:tid 7718] [client 74.248.133.77:16914] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYtW_v0EcqgVBUs6CW1H0wAAAcs"]
[Wed Feb 11 00:04:15.077944 2026] [:error] [pid 59407:tid 59423] [client 74.248.133.77:12374] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aYtW_2LlhBXE3qmX-JlPfQAAAU4"]
[Wed Feb 11 00:04:15.944710 2026] [:error] [pid 47937:tid 47958] [client 74.248.133.77:15405] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aYtW_8pqXpC2CvJ3fOPniQAAANM"]
[Wed Feb 11 00:04:16.964892 2026] [:error] [pid 30054:tid 30077] [client 74.248.133.77:16959] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aYtXAGecgOOXCu-GgYVligAAARU"]
[Wed Feb 11 00:04:18.001484 2026] [:error] [pid 47937:tid 47955] [client 74.248.133.77:38119] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aYtXAspqXpC2CvJ3fOPnigAAANA"]
[Wed Feb 11 00:04:20.153970 2026] [:error] [pid 47837:tid 47913] [client 74.248.133.77:38093] [client 74.248.133.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aYtXBHFY8KYFPX79Z4kY8gAAAI0"]
[Wed Feb 11 04:19:23.642536 2026] [:error] [pid 27964:tid 27985] [client 5.231.104.191:52251] [client 5.231.104.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aYuSy8p0XgWYHLcQtEi1oAAAAAo"]
[Wed Feb 11 04:19:24.861107 2026] [:error] [pid 27966:tid 28048] [client 94.249.212.87:59641] [client 94.249.212.87] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aYuSzF8HJ9ydyf0SPu6TTgAAAJI"]
[Wed Feb 11 09:20:38.566105 2026] [:error] [pid 27966:tid 28054] [client 182.42.111.156:54232] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aYvZZl8HJ9ydyf0SPu75iwAAAJg"]
[Wed Feb 11 14:17:22.591302 2026] [:error] [pid 27965:tid 28012] [client 173.239.224.187:47541] [client 173.239.224.187] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.187, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aYwe8tHLAUAIo8qpZyH1kAAAAEk"]
[Wed Feb 11 14:17:22.602538 2026] [proxy_fcgi:error] [pid 27965:tid 28012] [client 173.239.224.187:47541] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:38.534541 2026] [proxy_fcgi:error] [pid 22537:tid 22556] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:38.777565 2026] [proxy_fcgi:error] [pid 22537:tid 22562] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:39.032762 2026] [proxy_fcgi:error] [pid 22537:tid 22558] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:39.286949 2026] [proxy_fcgi:error] [pid 22537:tid 22539] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:39.530172 2026] [proxy_fcgi:error] [pid 22537:tid 22548] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:39.782254 2026] [proxy_fcgi:error] [pid 22537:tid 22542] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:40.025060 2026] [proxy_fcgi:error] [pid 22537:tid 22560] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:40.268241 2026] [proxy_fcgi:error] [pid 22537:tid 22553] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:40.514275 2026] [proxy_fcgi:error] [pid 22537:tid 22555] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:40.776356 2026] [proxy_fcgi:error] [pid 22537:tid 22547] [client 158.158.49.160:40727] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:33:41.017193 2026] [:error] [pid 22537:tid 22546] [client 158.158.49.160:40727] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYww1Sfg2TagwM3bvQO2ywAAAUc"]
[Wed Feb 11 15:33:44.087506 2026] [:error] [pid 22569:tid 22578] [client 158.158.49.160:21999] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYww2MAhSI7iX9G3enjs7AAAAYU"]
[Wed Feb 11 15:33:54.057471 2026] [:error] [pid 27964:tid 27988] [client 158.158.49.160:10461] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYww4sp0XgWYHLcQtEh_iwAAAA0"]
[Wed Feb 11 15:33:56.006784 2026] [:error] [pid 27964:tid 27979] [client 158.158.49.160:18483] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aYww5Mp0XgWYHLcQtEh_jwAAAAQ"]
[Wed Feb 11 15:33:59.525687 2026] [:error] [pid 27966:tid 28034] [client 158.158.49.160:40827] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aYww518HJ9ydyf0SPu5nLwAAAIQ"]
[Wed Feb 11 15:34:00.894454 2026] [:error] [pid 27966:tid 28031] [client 158.158.49.160:53745] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aYww6F8HJ9ydyf0SPu5nMAAAAIE"]
[Wed Feb 11 15:34:03.257408 2026] [:error] [pid 27966:tid 28045] [client 158.158.49.160:9447] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aYww618HJ9ydyf0SPu5nMgAAAI8"]
[Wed Feb 11 15:34:05.721256 2026] [:error] [pid 28073:tid 28089] [client 158.158.49.160:38169] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aYww7YeHYIlOlF-DsMxe4QAAAM4"]
[Wed Feb 11 15:34:10.109536 2026] [:error] [pid 28073:tid 28075] [client 158.158.49.160:40785] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aYww8oeHYIlOlF-DsMxe6QAAAMA"]
[Wed Feb 11 15:34:11.396130 2026] [:error] [pid 27964:tid 27984] [client 158.158.49.160:10478] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aYww88p0XgWYHLcQtEh_ogAAAAk"]
[Wed Feb 11 15:34:12.512200 2026] [:error] [pid 27966:tid 28044] [client 158.158.49.160:10961] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aYww9F8HJ9ydyf0SPu5nNQAAAI4"]
[Wed Feb 11 15:34:13.477302 2026] [:error] [pid 22570:tid 22603] [client 158.158.49.160:13904] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ty.php"] [unique_id "aYww9SE5uSe043FXwQopPwAAAcM"]
[Wed Feb 11 15:34:14.564971 2026] [:error] [pid 22537:tid 22562] [client 158.158.49.160:10964] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYww9ifg2TagwM3bvQO25wAAAVc"]
[Wed Feb 11 15:34:16.429918 2026] [:error] [pid 28073:tid 28098] [client 158.158.49.160:9411] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYww-IeHYIlOlF-DsMxe6wAAANc"]
[Wed Feb 11 15:34:18.615220 2026] [:error] [pid 22570:tid 22612] [client 158.158.49.160:18484] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYww-iE5uSe043FXwQopQwAAAcw"]
[Wed Feb 11 15:34:21.400783 2026] [:error] [pid 27966:tid 28045] [client 158.158.49.160:14098] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/m.php"] [unique_id "aYww_V8HJ9ydyf0SPu5nOQAAAI8"]
[Wed Feb 11 15:34:58.149962 2026] [proxy_fcgi:error] [pid 22537:tid 22546] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:58.394899 2026] [proxy_fcgi:error] [pid 22537:tid 22559] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:58.649274 2026] [proxy_fcgi:error] [pid 22537:tid 22544] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:58.903644 2026] [proxy_fcgi:error] [pid 22537:tid 22551] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:59.147828 2026] [proxy_fcgi:error] [pid 22537:tid 22539] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:59.394250 2026] [proxy_fcgi:error] [pid 22537:tid 22550] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:59.645356 2026] [proxy_fcgi:error] [pid 22537:tid 22541] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:34:59.904990 2026] [proxy_fcgi:error] [pid 22537:tid 22548] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:35:00.156480 2026] [proxy_fcgi:error] [pid 22537:tid 22549] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:35:00.408655 2026] [proxy_fcgi:error] [pid 22537:tid 22543] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:35:00.656630 2026] [proxy_fcgi:error] [pid 22537:tid 22540] [client 158.158.49.160:52069] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:35:00.926957 2026] [:error] [pid 22537:tid 22561] [client 158.158.49.160:52069] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/network.php"] [unique_id "aYwxJCfg2TagwM3bvQO3FgAAAVY"]
[Wed Feb 11 15:35:02.738560 2026] [:error] [pid 28073:tid 28099] [client 158.158.49.160:11923] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/network.php"] [unique_id "aYwxJoeHYIlOlF-DsMxfFQAAANg"]
[Wed Feb 11 15:35:06.666586 2026] [:error] [pid 27965:tid 28005] [client 158.158.49.160:14710] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/network.php"] [unique_id "aYwxKtHLAUAIo8qpZyEMKwAAAEI"]
[Wed Feb 11 15:35:18.436509 2026] [:error] [pid 27966:tid 28044] [client 158.158.49.160:52048] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aYwxNl8HJ9ydyf0SPu5nYwAAAI4"]
[Wed Feb 11 15:35:20.073216 2026] [:error] [pid 22570:tid 22609] [client 158.158.49.160:9660] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aYwxOCE5uSe043FXwQopcgAAAck"]
[Wed Feb 11 15:35:24.352296 2026] [:error] [pid 28073:tid 28096] [client 158.158.49.160:36351] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aYwxPIeHYIlOlF-DsMxfLAAAANU"]
[Wed Feb 11 15:35:25.735838 2026] [:error] [pid 22537:tid 22558] [client 158.158.49.160:36349] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aYwxPSfg2TagwM3bvQO3LQAAAVM"]
[Wed Feb 11 15:35:26.870695 2026] [:error] [pid 22537:tid 22563] [client 158.158.49.160:10202] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aYwxPifg2TagwM3bvQO3LgAAAVg"]
[Wed Feb 11 15:35:27.537362 2026] [:error] [pid 22537:tid 22551] [client 158.158.49.160:36236] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aYwxPyfg2TagwM3bvQO3LwAAAUw"]
[Wed Feb 11 15:35:28.289861 2026] [:error] [pid 27966:tid 28052] [client 158.158.49.160:41194] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aYwxQF8HJ9ydyf0SPu5nbAAAAJY"]
[Wed Feb 11 15:35:30.476779 2026] [:error] [pid 17401:tid 17425] [client 158.158.49.160:26929] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aYwxQg0lHeayTY40t34lFgAAARY"]
[Wed Feb 11 15:35:33.753368 2026] [:error] [pid 27964:tid 27987] [client 158.158.49.160:10187] [client 158.158.49.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/wp-config.php"] [unique_id "aYwxRcp0XgWYHLcQtEiAAAAAAAw"]
[Wed Feb 11 15:35:35.301237 2026] [:error] [pid 28073:tid 28081] [client 158.158.49.160:11933] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aYwxR4eHYIlOlF-DsMxfNgAAAMY"]
[Wed Feb 11 15:35:52.517168 2026] [:error] [pid 28073:tid 28083] [client 158.158.49.160:38486] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aYwxWIeHYIlOlF-DsMxfSwAAAMg"]
[Wed Feb 11 15:35:53.629813 2026] [:error] [pid 22570:tid 22603] [client 158.158.49.160:10177] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aYwxWSE5uSe043FXwQopowAAAcM"]
[Wed Feb 11 15:35:55.033331 2026] [:error] [pid 28073:tid 28076] [client 158.158.49.160:10678] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aYwxW4eHYIlOlF-DsMxfVwAAAME"]
[Wed Feb 11 15:36:00.112415 2026] [proxy_fcgi:error] [pid 22570:tid 22619] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:00.369017 2026] [proxy_fcgi:error] [pid 22570:tid 22614] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:00.753380 2026] [proxy_fcgi:error] [pid 22570:tid 22620] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:00.994898 2026] [proxy_fcgi:error] [pid 22570:tid 22612] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:01.295492 2026] [proxy_fcgi:error] [pid 22570:tid 22624] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:01.539147 2026] [proxy_fcgi:error] [pid 22570:tid 22604] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:01.785926 2026] [proxy_fcgi:error] [pid 22570:tid 22600] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:02.028942 2026] [proxy_fcgi:error] [pid 22570:tid 22618] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:02.605144 2026] [proxy_fcgi:error] [pid 22570:tid 22623] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:02.850095 2026] [proxy_fcgi:error] [pid 22570:tid 22601] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:03.093649 2026] [proxy_fcgi:error] [pid 22570:tid 22611] [client 158.158.49.160:40297] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:36:03.340727 2026] [:error] [pid 22570:tid 22619] [client 158.158.49.160:40297] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aYwxYyE5uSe043FXwQoptwAAAdM"]
[Wed Feb 11 15:36:06.786185 2026] [:error] [pid 22569:tid 22577] [client 158.158.49.160:12702] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aYwxZsAhSI7iX9G3enjtSgAAAYQ"]
[Wed Feb 11 15:36:11.766288 2026] [:error] [pid 27965:tid 28017] [client 158.158.49.160:13363] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aYwxa9HLAUAIo8qpZyEMeAAAAE4"]
[Wed Feb 11 15:36:12.376371 2026] [:error] [pid 28073:tid 28076] [client 158.158.49.160:5605] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aYwxbIeHYIlOlF-DsMxfbgAAAME"]
[Wed Feb 11 15:36:26.079986 2026] [:error] [pid 27964:tid 27981] [client 158.158.49.160:23797] [client 158.158.49.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aYwxesp0XgWYHLcQtEiAiwAAAAY"]
[Wed Feb 11 15:37:09.296396 2026] [proxy_fcgi:error] [pid 27965:tid 28012] [client 158.158.49.160:51982] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 15:37:09.555139 2026] [proxy_fcgi:error] [pid 27965:tid 28009] [client 158.158.49.160:51982] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:11.908857 2026] [proxy_fcgi:error] [pid 22569:tid 22587] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:12.714726 2026] [proxy_fcgi:error] [pid 22569:tid 22573] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:12.971310 2026] [proxy_fcgi:error] [pid 22569:tid 22577] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:14.883356 2026] [proxy_fcgi:error] [pid 22569:tid 22580] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:15.174536 2026] [proxy_fcgi:error] [pid 22569:tid 22575] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:15.421926 2026] [proxy_fcgi:error] [pid 22569:tid 22579] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:15.672458 2026] [proxy_fcgi:error] [pid 22569:tid 22582] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:16.597923 2026] [proxy_fcgi:error] [pid 22569:tid 22596] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:16.841046 2026] [proxy_fcgi:error] [pid 22569:tid 22591] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:17.093435 2026] [proxy_fcgi:error] [pid 22569:tid 22586] [client 158.158.48.108:44589] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:57:17.383612 2026] [:error] [pid 22569:tid 22589] [client 158.158.48.108:44589] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maraz.php"] [unique_id "aYxSfcAhSI7iX9G3engRXQAAAZA"]
[Wed Feb 11 17:57:19.251001 2026] [:error] [pid 27965:tid 28015] [client 158.158.48.108:30462] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maraz.php"] [unique_id "aYxSf9HLAUAIo8qpZyE6JAAAAEw"]
[Wed Feb 11 17:57:21.908319 2026] [:error] [pid 27964:tid 27984] [client 158.158.48.108:8480] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maraz.php"] [unique_id "aYxSgcp0XgWYHLcQtEiyzwAAAAk"]
[Wed Feb 11 17:57:23.370879 2026] [:error] [pid 27964:tid 27993] [client 158.158.48.108:46585] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maraz.php"] [unique_id "aYxSg8p0XgWYHLcQtEiy0wAAABI"]
[Wed Feb 11 17:57:24.760263 2026] [:error] [pid 27964:tid 27992] [client 158.158.48.108:8807] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aYxShMp0XgWYHLcQtEiy3gAAABE"]
[Wed Feb 11 17:57:26.844722 2026] [:error] [pid 17401:tid 17419] [client 158.158.48.108:30444] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aYxShg0lHeayTY40t35IhwAAARA"]
[Wed Feb 11 17:57:29.144367 2026] [:error] [pid 27964:tid 27977] [client 158.158.48.108:41049] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aYxSicp0XgWYHLcQtEiy6AAAAAI"]
[Wed Feb 11 17:57:31.206454 2026] [:error] [pid 27964:tid 27975] [client 158.158.48.108:41044] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aYxSi8p0XgWYHLcQtEiy6wAAAAA"]
[Wed Feb 11 17:57:33.661303 2026] [:error] [pid 27966:tid 28035] [client 158.158.48.108:39950] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYxSjV8HJ9ydyf0SPu6QTwAAAIU"]
[Wed Feb 11 17:57:38.069980 2026] [:error] [pid 27965:tid 28007] [client 158.158.48.108:8428] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYxSktHLAUAIo8qpZyE6OgAAAEQ"]
[Wed Feb 11 17:57:39.353039 2026] [:error] [pid 27966:tid 28047] [client 158.158.48.108:41068] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYxSk18HJ9ydyf0SPu6QVgAAAJE"]
[Wed Feb 11 17:57:41.061010 2026] [:error] [pid 22569:tid 22587] [client 158.158.48.108:43130] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aYxSlcAhSI7iX9G3engRegAAAY4"]
[Wed Feb 11 17:57:42.281577 2026] [:error] [pid 22569:tid 22573] [client 158.158.48.108:43366] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYxSlsAhSI7iX9G3engRfgAAAYA"]
[Wed Feb 11 17:57:43.831764 2026] [:error] [pid 27964:tid 27981] [client 158.158.48.108:8417] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYxSl8p0XgWYHLcQtEizCAAAAAY"]
[Wed Feb 11 17:57:45.940909 2026] [:error] [pid 22569:tid 22597] [client 158.158.48.108:44631] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYxSmcAhSI7iX9G3engRgwAAAZg"]
[Wed Feb 11 17:57:46.892433 2026] [:error] [pid 27966:tid 28042] [client 158.158.48.108:27273] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aYxSml8HJ9ydyf0SPu6QXgAAAIw"]
[Wed Feb 11 17:57:47.810754 2026] [:error] [pid 22537:tid 22552] [client 158.158.48.108:34677] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYxSmyfg2TagwM3bvQPa4wAAAU0"]
[Wed Feb 11 17:57:48.622432 2026] [:error] [pid 22570:tid 22608] [client 158.158.48.108:27280] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYxSnCE5uSe043FXwQpPkwAAAcg"]
[Wed Feb 11 17:57:49.866493 2026] [:error] [pid 28073:tid 28087] [client 158.158.48.108:24565] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYxSnYeHYIlOlF-DsMyf7AAAAMw"]
[Wed Feb 11 17:57:50.771204 2026] [:error] [pid 27964:tid 27987] [client 158.158.48.108:36777] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/24.php"] [unique_id "aYxSnsp0XgWYHLcQtEizEQAAAAw"]
[Wed Feb 11 17:57:51.609092 2026] [:error] [pid 28073:tid 28085] [client 158.158.48.108:43156] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bzjdlofz.php"] [unique_id "aYxSn4eHYIlOlF-DsMygFAAAAMo"]
[Wed Feb 11 17:57:52.668880 2026] [:error] [pid 27965:tid 28020] [client 158.158.48.108:42768] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bzjdlofz.php"] [unique_id "aYxSoNHLAUAIo8qpZyE6xgAAAFE"]
[Wed Feb 11 17:57:53.319726 2026] [:error] [pid 27964:tid 27993] [client 158.158.48.108:42819] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bzjdlofz.php"] [unique_id "aYxSocp0XgWYHLcQtEizFQAAABI"]
[Wed Feb 11 17:57:53.975412 2026] [:error] [pid 22537:tid 22544] [client 158.158.48.108:43141] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bzjdlofz.php"] [unique_id "aYxSoSfg2TagwM3bvQPa5gAAAUU"]
[Wed Feb 11 17:57:54.529245 2026] [:error] [pid 27964:tid 27999] [client 158.158.48.108:42850] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYxSosp0XgWYHLcQtEizFwAAABg"]
[Wed Feb 11 17:57:55.101567 2026] [:error] [pid 27966:tid 28032] [client 158.158.48.108:32314] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYxSo18HJ9ydyf0SPu6QfAAAAII"]
[Wed Feb 11 17:57:55.664330 2026] [:error] [pid 17401:tid 17421] [client 158.158.48.108:33057] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYxSow0lHeayTY40t35IkQAAARI"]
[Wed Feb 11 17:57:56.402728 2026] [:error] [pid 17401:tid 17413] [client 158.158.48.108:46637] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aYxSpA0lHeayTY40t35IkgAAAQo"]
[Wed Feb 11 17:57:57.076875 2026] [:error] [pid 28073:tid 28095] [client 158.158.48.108:44939] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aYxSpYeHYIlOlF-DsMygNgAAANQ"]
[Wed Feb 11 17:57:57.918312 2026] [:error] [pid 27965:tid 28026] [client 158.158.48.108:45785] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aYxSpdHLAUAIo8qpZyE66QAAAFc"]
[Wed Feb 11 17:57:58.598412 2026] [:error] [pid 22569:tid 22589] [client 158.158.48.108:32020] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aYxSpsAhSI7iX9G3engRjwAAAZA"]
[Wed Feb 11 17:57:59.217466 2026] [:error] [pid 17401:tid 17419] [client 158.158.48.108:38898] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aYxSpw0lHeayTY40t35IlAAAARA"]
[Wed Feb 11 17:58:00.171972 2026] [:error] [pid 27964:tid 27987] [client 158.158.48.108:8218] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYxSqMp0XgWYHLcQtEizHAAAAAw"]
[Wed Feb 11 17:58:00.993247 2026] [:error] [pid 28073:tid 28080] [client 158.158.48.108:29383] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYxSqIeHYIlOlF-DsMygPQAAAMU"]
[Wed Feb 11 17:58:02.180923 2026] [:error] [pid 22537:tid 22542] [client 158.158.48.108:34692] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYxSqifg2TagwM3bvQPa7wAAAUM"]
[Wed Feb 11 17:58:03.706428 2026] [:error] [pid 22537:tid 22551] [client 158.158.48.108:43702] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "aYxSqyfg2TagwM3bvQPa8wAAAUw"]
[Wed Feb 11 17:58:11.466945 2026] [:error] [pid 27965:tid 28010] [client 158.158.48.108:45201] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYxSs9HLAUAIo8qpZyE68wAAAEc"]
[Wed Feb 11 17:58:16.814344 2026] [:error] [pid 27965:tid 28004] [client 158.158.48.108:33752] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aYxSuNHLAUAIo8qpZyE6_wAAAEE"]
[Wed Feb 11 17:58:25.601830 2026] [proxy_fcgi:error] [pid 22569:tid 22580] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:25.870822 2026] [proxy_fcgi:error] [pid 22569:tid 22587] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:26.114906 2026] [proxy_fcgi:error] [pid 22569:tid 22590] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:28.434957 2026] [proxy_fcgi:error] [pid 22569:tid 22589] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:28.678600 2026] [proxy_fcgi:error] [pid 22569:tid 22594] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:28.924569 2026] [proxy_fcgi:error] [pid 22569:tid 22573] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:29.170939 2026] [proxy_fcgi:error] [pid 22569:tid 22578] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:30.937473 2026] [proxy_fcgi:error] [pid 22569:tid 22582] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:31.182747 2026] [proxy_fcgi:error] [pid 22569:tid 22574] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:31.441373 2026] [proxy_fcgi:error] [pid 22569:tid 22597] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:31.705169 2026] [proxy_fcgi:error] [pid 22569:tid 22595] [client 158.158.48.108:37263] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:58:31.954931 2026] [:error] [pid 22569:tid 22583] [client 158.158.48.108:37263] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aYxSx8AhSI7iX9G3engRvgAAAYo"]
[Wed Feb 11 17:58:34.732694 2026] [:error] [pid 27964:tid 27988] [client 158.158.48.108:36826] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aYxSysp0XgWYHLcQtEizTwAAAA0"]
[Wed Feb 11 17:58:54.235833 2026] [:error] [pid 28073:tid 28083] [client 158.158.48.108:42594] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkui.php"] [unique_id "aYxS3oeHYIlOlF-DsMygugAAAMg"]
[Wed Feb 11 17:58:56.667239 2026] [:error] [pid 22570:tid 22624] [client 158.158.48.108:28888] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkui.php"] [unique_id "aYxS4CE5uSe043FXwQpQGQAAAdg"]
[Wed Feb 11 17:58:58.824376 2026] [:error] [pid 27964:tid 27990] [client 158.158.48.108:28882] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkui.php"] [unique_id "aYxS4sp0XgWYHLcQtEizagAAAA8"]
[Wed Feb 11 17:59:03.354719 2026] [:error] [pid 22569:tid 22573] [client 158.158.48.108:23003] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lkui.php"] [unique_id "aYxS58AhSI7iX9G3engR7QAAAYA"]
[Wed Feb 11 17:59:05.862142 2026] [:error] [pid 27966:tid 28034] [client 158.158.48.108:34725] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYxS6V8HJ9ydyf0SPu6Q4wAAAIQ"]
[Wed Feb 11 17:59:07.092004 2026] [:error] [pid 28073:tid 28078] [client 158.158.48.108:32814] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYxS64eHYIlOlF-DsMyg3wAAAMM"]
[Wed Feb 11 17:59:13.918720 2026] [:error] [pid 22537:tid 22561] [client 158.158.48.108:28906] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYxS8Sfg2TagwM3bvQPbQgAAAVY"]
[Wed Feb 11 17:59:17.442698 2026] [:error] [pid 22537:tid 22560] [client 158.158.48.108:8682] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aYxS9Sfg2TagwM3bvQPbRwAAAVU"]
[Wed Feb 11 17:59:18.131539 2026] [:error] [pid 17401:tid 17406] [client 158.158.48.108:24186] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aYxS9g0lHeayTY40t35JHwAAAQM"]
[Wed Feb 11 17:59:19.496685 2026] [:error] [pid 28073:tid 28084] [client 158.158.48.108:32115] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aYxS94eHYIlOlF-DsMyhHgAAAMk"]
[Wed Feb 11 17:59:25.846073 2026] [:error] [pid 22570:tid 22613] [client 158.158.48.108:32110] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aYxS_SE5uSe043FXwQpQNAAAAc0"]
[Wed Feb 11 17:59:31.926211 2026] [proxy_fcgi:error] [pid 27964:tid 27991] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:32.169449 2026] [proxy_fcgi:error] [pid 27964:tid 27977] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:32.418511 2026] [proxy_fcgi:error] [pid 27964:tid 27989] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:32.662173 2026] [proxy_fcgi:error] [pid 27964:tid 27983] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:32.916450 2026] [proxy_fcgi:error] [pid 27964:tid 27992] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:33.160225 2026] [proxy_fcgi:error] [pid 27964:tid 27998] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:33.442016 2026] [proxy_fcgi:error] [pid 27964:tid 27982] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:33.686012 2026] [proxy_fcgi:error] [pid 27964:tid 27985] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:33.929512 2026] [proxy_fcgi:error] [pid 27964:tid 27994] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:34.194986 2026] [proxy_fcgi:error] [pid 27964:tid 27980] [client 158.158.48.108:38306] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 17:59:34.480090 2026] [:error] [pid 27964:tid 27975] [client 158.158.48.108:38306] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYxTBsp0XgWYHLcQtEiznQAAAAA"]
[Wed Feb 11 17:59:38.011522 2026] [:error] [pid 28073:tid 28087] [client 158.158.48.108:34976] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYxTCoeHYIlOlF-DsMyhUAAAAMw"]
[Wed Feb 11 17:59:40.184144 2026] [:error] [pid 28073:tid 28079] [client 158.158.48.108:28854] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYxTDIeHYIlOlF-DsMyhVAAAAMQ"]
[Wed Feb 11 17:59:41.598642 2026] [:error] [pid 27966:tid 28042] [client 158.158.48.108:28861] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aYxTDV8HJ9ydyf0SPu6RCgAAAIw"]
[Wed Feb 11 17:59:43.302073 2026] [:error] [pid 17401:tid 17413] [client 158.158.48.108:38299] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYxTDw0lHeayTY40t35JVwAAAQo"]
[Wed Feb 11 17:59:44.499366 2026] [:error] [pid 17401:tid 17409] [client 158.158.48.108:8219] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYxTEA0lHeayTY40t35JWgAAAQY"]
[Wed Feb 11 17:59:45.252786 2026] [:error] [pid 27964:tid 27975] [client 158.158.48.108:24090] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYxTEcp0XgWYHLcQtEiztAAAAAA"]
[Wed Feb 11 17:59:45.855656 2026] [:error] [pid 28073:tid 28099] [client 158.158.48.108:32884] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aYxTEYeHYIlOlF-DsMyhWwAAANg"]
[Wed Feb 11 17:59:46.924378 2026] [:error] [pid 27965:tid 28013] [client 158.158.48.108:38282] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "aYxTEtHLAUAIo8qpZyE7kgAAAEo"]
[Wed Feb 11 17:59:47.967707 2026] [:error] [pid 22537:tid 22543] [client 158.158.48.108:37113] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "aYxTEyfg2TagwM3bvQPbfQAAAUQ"]
[Wed Feb 11 17:59:48.700956 2026] [:error] [pid 27964:tid 27983] [client 158.158.48.108:40482] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "aYxTFMp0XgWYHLcQtEizuAAAAAg"]
[Wed Feb 11 17:59:49.312788 2026] [:error] [pid 22570:tid 22610] [client 158.158.48.108:9087] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "aYxTFSE5uSe043FXwQpQSgAAAco"]
[Wed Feb 11 17:59:49.959143 2026] [:error] [pid 22570:tid 22607] [client 158.158.48.108:40452] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYxTFSE5uSe043FXwQpQSwAAAcc"]
[Wed Feb 11 17:59:51.456612 2026] [:error] [pid 22570:tid 22601] [client 158.158.48.108:46185] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYxTFyE5uSe043FXwQpQTgAAAcE"]
[Wed Feb 11 17:59:52.284811 2026] [:error] [pid 27966:tid 28044] [client 158.158.48.108:28835] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYxTGF8HJ9ydyf0SPu6RFQAAAI4"]
[Wed Feb 11 17:59:52.992909 2026] [:error] [pid 28073:tid 28095] [client 158.158.48.108:37579] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aYxTGIeHYIlOlF-DsMyhZAAAANQ"]
[Wed Feb 11 17:59:53.978328 2026] [:error] [pid 27964:tid 27983] [client 158.158.48.108:40461] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsox.php"] [unique_id "aYxTGcp0XgWYHLcQtEizwQAAAAg"]
[Wed Feb 11 17:59:54.909732 2026] [:error] [pid 27965:tid 28018] [client 158.158.48.108:24082] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsox.php"] [unique_id "aYxTGtHLAUAIo8qpZyE7ngAAAE8"]
[Wed Feb 11 17:59:55.637185 2026] [:error] [pid 27964:tid 27990] [client 158.158.48.108:32869] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsox.php"] [unique_id "aYxTG8p0XgWYHLcQtEizwwAAAA8"]
[Wed Feb 11 17:59:56.202591 2026] [:error] [pid 22569:tid 22579] [client 158.158.48.108:34883] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsox.php"] [unique_id "aYxTHMAhSI7iX9G3engSKAAAAYY"]
[Wed Feb 11 17:59:57.138886 2026] [:error] [pid 17401:tid 17408] [client 158.158.48.108:31730] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aYxTHQ0lHeayTY40t35JaQAAAQU"]
[Wed Feb 11 17:59:57.981942 2026] [:error] [pid 27966:tid 28034] [client 158.158.48.108:28846] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aYxTHV8HJ9ydyf0SPu6RGQAAAIQ"]
[Wed Feb 11 18:00:00.732452 2026] [:error] [pid 17401:tid 17404] [client 158.158.48.108:8197] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aYxTIA0lHeayTY40t35JawAAAQE"]
[Wed Feb 11 18:00:02.887649 2026] [:error] [pid 27964:tid 27986] [client 158.158.48.108:24079] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aYxTIsp0XgWYHLcQtEizygAAAAs"]
[Wed Feb 11 18:00:05.983357 2026] [:error] [pid 28073:tid 28094] [client 158.158.48.108:8550] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYxTJYeHYIlOlF-DsMyhgQAAANM"]
[Wed Feb 11 18:00:09.883169 2026] [:error] [pid 22537:tid 22553] [client 158.158.48.108:31689] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYxTKSfg2TagwM3bvQPbjgAAAU4"]
[Wed Feb 11 18:00:11.561499 2026] [:error] [pid 27966:tid 28030] [client 158.158.48.108:32018] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYxTK18HJ9ydyf0SPu6RJAAAAIA"]
[Wed Feb 11 18:00:15.403119 2026] [:error] [pid 22570:tid 22621] [client 158.158.48.108:27899] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aYxTLyE5uSe043FXwQpQXgAAAdU"]
[Wed Feb 11 18:00:24.800174 2026] [:error] [pid 22537:tid 22544] [client 158.158.48.108:8210] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "aYxTOCfg2TagwM3bvQPbowAAAUU"]
[Wed Feb 11 18:00:30.813721 2026] [:error] [pid 28073:tid 28083] [client 158.158.48.108:30889] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "aYxTPoeHYIlOlF-DsMyhkgAAAMg"]
[Wed Feb 11 18:00:32.322330 2026] [:error] [pid 27966:tid 28035] [client 158.158.48.108:45792] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "aYxTQF8HJ9ydyf0SPu6RRQAAAIU"]
[Wed Feb 11 18:00:34.367088 2026] [proxy_fcgi:error] [pid 22569:tid 22580] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:34.632455 2026] [proxy_fcgi:error] [pid 22569:tid 22590] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:34.886232 2026] [proxy_fcgi:error] [pid 22569:tid 22581] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:35.740717 2026] [proxy_fcgi:error] [pid 22569:tid 22589] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:35.989302 2026] [proxy_fcgi:error] [pid 22569:tid 22594] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:36.235699 2026] [proxy_fcgi:error] [pid 22569:tid 22576] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:36.516445 2026] [proxy_fcgi:error] [pid 22569:tid 22574] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:36.769788 2026] [proxy_fcgi:error] [pid 22569:tid 22585] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:37.128158 2026] [proxy_fcgi:error] [pid 22569:tid 22595] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:37.375741 2026] [proxy_fcgi:error] [pid 22569:tid 22578] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:37.623603 2026] [proxy_fcgi:error] [pid 22569:tid 22588] [client 158.158.48.108:30865] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:00:37.863647 2026] [:error] [pid 22569:tid 22577] [client 158.158.48.108:30865] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYxTRcAhSI7iX9G3engScgAAAYQ"]
[Wed Feb 11 18:00:38.754865 2026] [:error] [pid 27965:tid 28008] [client 158.158.48.108:37769] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYxTRtHLAUAIo8qpZyE70wAAAEU"]
[Wed Feb 11 18:00:39.377841 2026] [:error] [pid 22537:tid 22546] [client 158.158.48.108:43199] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYxTRyfg2TagwM3bvQPbvQAAAUc"]
[Wed Feb 11 18:00:40.130480 2026] [:error] [pid 22537:tid 22558] [client 158.158.48.108:41413] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aYxTSCfg2TagwM3bvQPbvwAAAVM"]
[Wed Feb 11 18:00:41.026906 2026] [:error] [pid 22569:tid 22584] [client 158.158.48.108:30911] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aYxTScAhSI7iX9G3engSdQAAAYs"]
[Wed Feb 11 18:00:41.676589 2026] [:error] [pid 28073:tid 28076] [client 158.158.48.108:43169] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aYxTSYeHYIlOlF-DsMyhmQAAAME"]
[Wed Feb 11 18:00:42.727293 2026] [:error] [pid 27966:tid 28052] [client 158.158.48.108:37812] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aYxTSl8HJ9ydyf0SPu6RTgAAAJY"]
[Wed Feb 11 18:00:43.854126 2026] [:error] [pid 27965:tid 28013] [client 158.158.48.108:37374] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aYxTS9HLAUAIo8qpZyE72AAAAEo"]
[Wed Feb 11 18:00:44.456018 2026] [:error] [pid 28073:tid 28078] [client 158.158.48.108:37343] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link10.php"] [unique_id "aYxTTIeHYIlOlF-DsMyhnQAAAMM"]
[Wed Feb 11 18:00:45.776091 2026] [:error] [pid 27965:tid 28020] [client 158.158.48.108:37320] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link10.php"] [unique_id "aYxTTdHLAUAIo8qpZyE72gAAAFE"]
[Wed Feb 11 18:00:47.252230 2026] [:error] [pid 27966:tid 28031] [client 158.158.48.108:43469] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link10.php"] [unique_id "aYxTT18HJ9ydyf0SPu6RVgAAAIE"]
[Wed Feb 11 18:00:48.222267 2026] [:error] [pid 22569:tid 22587] [client 158.158.48.108:8634] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link10.php"] [unique_id "aYxTUMAhSI7iX9G3engSewAAAY4"]
[Wed Feb 11 18:00:49.317809 2026] [:error] [pid 17401:tid 17411] [client 158.158.48.108:43196] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYxTUQ0lHeayTY40t35JngAAAQg"]
[Wed Feb 11 18:00:50.102601 2026] [:error] [pid 28073:tid 28095] [client 158.158.48.108:42770] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYxTUoeHYIlOlF-DsMyhogAAANQ"]
[Wed Feb 11 18:00:51.065402 2026] [:error] [pid 22570:tid 22606] [client 158.158.48.108:31678] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYxTUyE5uSe043FXwQpQewAAAcY"]
[Wed Feb 11 18:00:52.301041 2026] [:error] [pid 27965:tid 28019] [client 158.158.48.108:42815] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aYxTVNHLAUAIo8qpZyE77AAAAFA"]
[Wed Feb 11 18:00:53.253963 2026] [:error] [pid 28073:tid 28086] [client 158.158.48.108:43959] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aYxTVYeHYIlOlF-DsMyhqAAAAMs"]
[Wed Feb 11 18:00:54.194801 2026] [:error] [pid 22537:tid 22544] [client 158.158.48.108:8610] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aYxTVifg2TagwM3bvQPbxgAAAUU"]
[Wed Feb 11 18:00:54.827435 2026] [:error] [pid 22570:tid 22608] [client 158.158.48.108:8580] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aYxTViE5uSe043FXwQpQfgAAAcg"]
[Wed Feb 11 18:00:55.696997 2026] [:error] [pid 22537:tid 22559] [client 158.158.48.108:32296] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aYxTVyfg2TagwM3bvQPbxwAAAVQ"]
[Wed Feb 11 18:00:56.373337 2026] [:error] [pid 27964:tid 27991] [client 158.158.48.108:31649] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aYxTWMp0XgWYHLcQtEi0JQAAABA"]
[Wed Feb 11 18:00:57.104815 2026] [:error] [pid 22569:tid 22596] [client 158.158.48.108:41436] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aYxTWcAhSI7iX9G3engSigAAAZc"]
[Wed Feb 11 18:00:58.204629 2026] [:error] [pid 27965:tid 28012] [client 158.158.48.108:42778] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aYxTWtHLAUAIo8qpZyE7-QAAAEk"]
[Wed Feb 11 18:00:59.410505 2026] [:error] [pid 22569:tid 22584] [client 158.158.48.108:24525] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aYxTW8AhSI7iX9G3engSjwAAAYs"]
[Wed Feb 11 18:01:00.366252 2026] [:error] [pid 28073:tid 28077] [client 158.158.48.108:44967] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYxTXIeHYIlOlF-DsMyhrgAAAMI"]
[Wed Feb 11 18:01:06.918121 2026] [:error] [pid 22569:tid 22577] [client 158.158.48.108:27297] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYxTYsAhSI7iX9G3engSpQAAAYQ"]
[Wed Feb 11 18:01:09.671754 2026] [:error] [pid 22569:tid 22584] [client 158.158.48.108:44988] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYxTZcAhSI7iX9G3engSqwAAAYs"]
[Wed Feb 11 18:01:14.344767 2026] [:error] [pid 27966:tid 28032] [client 158.158.48.108:44984] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aYxTal8HJ9ydyf0SPu6RegAAAII"]
[Wed Feb 11 18:01:17.794481 2026] [:error] [pid 22569:tid 22593] [client 158.158.48.108:27320] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aYxTbcAhSI7iX9G3engSuQAAAZQ"]
[Wed Feb 11 18:01:20.206233 2026] [:error] [pid 27964:tid 27978] [client 158.158.48.108:45281] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aYxTcMp0XgWYHLcQtEi0RwAAAAM"]
[Wed Feb 11 18:01:21.346789 2026] [:error] [pid 17401:tid 17412] [client 158.158.48.108:46866] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aYxTcQ0lHeayTY40t35JyQAAAQk"]
[Wed Feb 11 18:01:22.155864 2026] [:error] [pid 22570:tid 22601] [client 158.158.48.108:33251] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aYxTciE5uSe043FXwQpQqAAAAcE"]
[Wed Feb 11 18:01:22.897390 2026] [:error] [pid 27964:tid 27980] [client 158.158.48.108:36778] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xr.php"] [unique_id "aYxTcsp0XgWYHLcQtEi0UgAAAAU"]
[Wed Feb 11 18:01:23.446972 2026] [:error] [pid 22537:tid 22557] [client 158.158.48.108:35721] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xr.php"] [unique_id "aYxTcyfg2TagwM3bvQPb6QAAAVI"]
[Wed Feb 11 18:01:24.489585 2026] [:error] [pid 22570:tid 22600] [client 158.158.48.108:46083] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xr.php"] [unique_id "aYxTdCE5uSe043FXwQpQrwAAAcA"]
[Wed Feb 11 18:01:25.643768 2026] [:error] [pid 27966:tid 28046] [client 158.158.48.108:46888] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xr.php"] [unique_id "aYxTdV8HJ9ydyf0SPu6RigAAAJA"]
[Wed Feb 11 18:01:26.794182 2026] [:error] [pid 27965:tid 28016] [client 158.158.48.108:25267] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/baixy.php"] [unique_id "aYxTdtHLAUAIo8qpZyE8IAAAAE0"]
[Wed Feb 11 18:01:27.467494 2026] [:error] [pid 27966:tid 28043] [client 158.158.48.108:44011] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/baixy.php"] [unique_id "aYxTd18HJ9ydyf0SPu6RjAAAAI0"]
[Wed Feb 11 18:01:28.549776 2026] [:error] [pid 22570:tid 22601] [client 158.158.48.108:36521] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/baixy.php"] [unique_id "aYxTeCE5uSe043FXwQpQuQAAAcE"]
[Wed Feb 11 18:01:29.769510 2026] [:error] [pid 27965:tid 28024] [client 158.158.48.108:42045] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/baixy.php"] [unique_id "aYxTedHLAUAIo8qpZyE8JAAAAFU"]
[Wed Feb 11 18:01:31.545152 2026] [:error] [pid 27964:tid 27984] [client 158.158.48.108:27300] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rtx.php"] [unique_id "aYxTe8p0XgWYHLcQtEi0YwAAAAk"]
[Wed Feb 11 18:01:36.332027 2026] [:error] [pid 27966:tid 28041] [client 158.158.48.108:8503] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rtx.php"] [unique_id "aYxTgF8HJ9ydyf0SPu6RmQAAAIs"]
[Wed Feb 11 18:01:38.542656 2026] [proxy_fcgi:error] [pid 22569:tid 22575] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:38.806607 2026] [proxy_fcgi:error] [pid 22569:tid 22587] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:39.050618 2026] [proxy_fcgi:error] [pid 22569:tid 22592] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:39.295988 2026] [proxy_fcgi:error] [pid 22569:tid 22593] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:39.550876 2026] [proxy_fcgi:error] [pid 22569:tid 22588] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:39.795736 2026] [proxy_fcgi:error] [pid 22569:tid 22577] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:40.086900 2026] [proxy_fcgi:error] [pid 22569:tid 22579] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:40.348567 2026] [proxy_fcgi:error] [pid 22569:tid 22583] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:40.596405 2026] [proxy_fcgi:error] [pid 22569:tid 22589] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:41.187535 2026] [proxy_fcgi:error] [pid 22569:tid 22574] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:41.434959 2026] [proxy_fcgi:error] [pid 22569:tid 22596] [client 158.158.48.108:44921] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:01:41.703517 2026] [:error] [pid 22569:tid 22580] [client 158.158.48.108:44921] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aYxThcAhSI7iX9G3engS3AAAAYc"]
[Wed Feb 11 18:01:48.887687 2026] [:error] [pid 28073:tid 28085] [client 158.158.48.108:8770] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aYxTjIeHYIlOlF-DsMyh7wAAAMo"]
[Wed Feb 11 18:01:54.904975 2026] [:error] [pid 27966:tid 28042] [client 158.158.48.108:8966] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload.php"] [unique_id "aYxTkl8HJ9ydyf0SPu6RrwAAAIw"]
[Wed Feb 11 18:01:59.298783 2026] [:error] [pid 27965:tid 28023] [client 158.158.48.108:39075] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYxTl9HLAUAIo8qpZyE8VAAAAFQ"]
[Wed Feb 11 18:02:01.748565 2026] [:error] [pid 27966:tid 28045] [client 158.158.48.108:42834] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYxTmV8HJ9ydyf0SPu6RuwAAAI8"]
[Wed Feb 11 18:02:04.973034 2026] [:error] [pid 28073:tid 28085] [client 158.158.48.108:40297] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYxTnIeHYIlOlF-DsMyiAwAAAMo"]
[Wed Feb 11 18:02:08.595856 2026] [:error] [pid 22537:tid 22546] [client 158.158.48.108:46373] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aYxToCfg2TagwM3bvQPcTQAAAUc"]
[Wed Feb 11 18:02:14.549224 2026] [:error] [pid 22570:tid 22616] [client 158.158.48.108:46382] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asax.php"] [unique_id "aYxTpiE5uSe043FXwQpRRAAAAdA"]
[Wed Feb 11 18:02:21.586809 2026] [:error] [pid 28073:tid 28080] [client 158.158.48.108:33110] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asax.php"] [unique_id "aYxTrYeHYIlOlF-DsMyiNAAAAMU"]
[Wed Feb 11 18:02:31.286866 2026] [:error] [pid 22537:tid 22556] [client 158.158.48.108:8985] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/galer.php"] [unique_id "aYxTtyfg2TagwM3bvQPcZAAAAVE"]
[Wed Feb 11 18:02:35.213109 2026] [:error] [pid 28073:tid 28090] [client 158.158.48.108:33336] [client 158.158.48.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/galer.php"] [unique_id "aYxTu4eHYIlOlF-DsMyiTgAAAM8"]
[Wed Feb 11 18:02:41.308056 2026] [proxy_fcgi:error] [pid 27966:tid 28033] [client 158.158.48.108:46815] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:02:41.565442 2026] [proxy_fcgi:error] [pid 27966:tid 28037] [client 158.158.48.108:46815] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:02:41.808545 2026] [proxy_fcgi:error] [pid 27966:tid 28036] [client 158.158.48.108:46815] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:02:42.055380 2026] [proxy_fcgi:error] [pid 27966:tid 28045] [client 158.158.48.108:46815] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:02:42.309488 2026] [proxy_fcgi:error] [pid 27966:tid 28048] [client 158.158.48.108:46815] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 18:02:42.564703 2026] [proxy_fcgi:error] [pid 27966:tid 28034] [client 158.158.48.108:46815] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:33:13.540078 2026] [proxy_fcgi:error] [pid 22569:tid 22581] [client 45.8.22.141:64219] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 20:33:16.987644 2026] [proxy_fcgi:error] [pid 22570:tid 22606] [client 45.8.22.141:59398] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 21:30:40.934425 2026] [:error] [pid 27964:tid 27990] [client 41.142.70.221:59890] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aYyEgMp0XgWYHLcQtEj2OAAAAA8"], referer: https://www.quora.com/How-do-I-make-pizza-dough
[Wed Feb 11 21:30:42.401396 2026] [:error] [pid 27966:tid 28038] [client 41.142.70.221:60452] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "aYyEgl8HJ9ydyf0SPu7LQAAAAIg"], referer: https://news.ycombinator.com/from?site=nytimes.com
[Wed Feb 11 21:30:43.870299 2026] [:error] [pid 22537:tid 22558] [client 41.142.70.221:61053] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aYyEgyfg2TagwM3bvQMMdQAAAVM"], referer: https://www.linkedin.com/feed/update/def456/
[Wed Feb 11 21:30:46.239870 2026] [:error] [pid 17401:tid 17408] [client 41.142.70.221:61661] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/wp-config.php"] [unique_id "aYyEhg0lHeayTY40t355EgAAAQU"], referer: https://www.bing.com/search?q=how+to+tie+a+tie&qs=n&first=5
[Wed Feb 11 21:30:50.070289 2026] [:error] [pid 22570:tid 22613] [client 41.142.70.221:63459] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aYyEiiE5uSe043FXwQqGEwAAAc0"], referer: https://www.startpage.com/sp/search?query=coffee+recipes
[Wed Feb 11 21:30:50.776495 2026] [:error] [pid 27964:tid 27982] [client 41.142.70.221:64198] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "aYyEisp0XgWYHLcQtEj2RAAAAAc"], referer: https://gitlab.com/explore/projects?sort=latest_activity_desc
[Wed Feb 11 21:30:51.459158 2026] [:error] [pid 17401:tid 17420] [client 41.142.70.221:64433] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aYyEiw0lHeayTY40t355FgAAARE"], referer: https://www.reddit.com/r/all/
[Wed Feb 11 21:30:52.838989 2026] [:error] [pid 27965:tid 28009] [client 41.142.70.221:64644] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/wp-config.php"] [unique_id "aYyEjNHLAUAIo8qpZyF1KAAAAEY"], referer: https://www.facebook.com/travel/posts/67890?__cft__[0]=xyz
[Wed Feb 11 21:30:54.806421 2026] [:error] [pid 27964:tid 27976] [client 41.142.70.221:65122] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/web.config"] [unique_id "aYyEjsp0XgWYHLcQtEj2UAAAAAE"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Wed Feb 11 21:30:57.156433 2026] [:error] [pid 17401:tid 17427] [client 41.142.70.221:49388] [client 41.142.70.221] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com"] [uri "/config.ini"] [unique_id "aYyEkQ0lHeayTY40t355HgAAARg"], referer: https://news.google.com/
[Thu Feb 12 10:12:31.404802 2026] [proxy_fcgi:error] [pid 3188:tid 3211] [client 74.248.129.73:52965] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 10:12:31.665227 2026] [proxy_fcgi:error] [pid 3188:tid 3190] [client 74.248.129.73:52965] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 10:12:31.926639 2026] [proxy_fcgi:error] [pid 3188:tid 3201] [client 74.248.129.73:52965] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 17:52:13.437065 2026] [:error] [pid 63418:tid 63489] [client 104.236.38.191:43138] [client 104.236.38.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aY2izdzjh-bbJnStPZKYsAAAAI0"]
[Thu Feb 12 17:52:18.417826 2026] [:error] [pid 63511:tid 63519] [client 104.236.38.191:41160] [client 104.236.38.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aY2i0qQCQbD5BgeyIk3GIwAAAAY"]
[Thu Feb 12 19:12:25.695318 2026] [:error] [pid 63418:tid 63491] [client 104.28.246.113:18307] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aY21mdzjh-bbJnStPZK-4wAAAI8"]
[Thu Feb 12 19:12:27.111921 2026] [:error] [pid 63511:tid 63527] [client 104.28.246.113:18310] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/style.php"] [unique_id "aY21m6QCQbD5BgeyIk3xfwAAAA4"]
[Thu Feb 12 19:12:34.548169 2026] [:error] [pid 65064:tid 65073] [client 104.28.246.113:17982] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/style.php"] [unique_id "aY21ohOvRgscTcqsMBm-SgAAAMY"]
[Thu Feb 12 20:47:40.303177 2026] [proxy_fcgi:error] [pid 63511:tid 63537] [client 172.213.161.82:12811] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:09:23.403068 2026] [:error] [pid 63418:tid 63492] [client 43.153.122.30:45678] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aY3RA9zjh-bbJnStPZLthQAAAJA"]
[Thu Feb 12 21:12:43.326947 2026] [proxy_fcgi:error] [pid 63511:tid 63523] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:43.576293 2026] [proxy_fcgi:error] [pid 63511:tid 63533] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:43.878681 2026] [proxy_fcgi:error] [pid 63511:tid 63516] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:44.120815 2026] [proxy_fcgi:error] [pid 63511:tid 63526] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:45.612062 2026] [proxy_fcgi:error] [pid 63511:tid 63536] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:45.853866 2026] [proxy_fcgi:error] [pid 63511:tid 63517] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:46.119285 2026] [proxy_fcgi:error] [pid 63511:tid 63534] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:46.359653 2026] [proxy_fcgi:error] [pid 63511:tid 63521] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:46.600338 2026] [proxy_fcgi:error] [pid 63511:tid 63513] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:46.844401 2026] [proxy_fcgi:error] [pid 63511:tid 63529] [client 51.103.142.43:8536] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:12:47.085422 2026] [:error] [pid 63511:tid 63519] [client 51.103.142.43:8536] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bvb.php"] [unique_id "aY3Rz6QCQbD5BgeyIk0mfgAAAAY"]
[Thu Feb 12 21:12:47.838955 2026] [:error] [pid 46675:tid 46700] [client 51.103.142.43:39840] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bvb.php"] [unique_id "aY3RzzuaQILPonWFiQltSwAAAVY"]
[Thu Feb 12 21:12:48.499021 2026] [:error] [pid 63416:tid 63424] [client 51.103.142.43:8545] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bvb.php"] [unique_id "aY3R0L2wmecPaCHcM2_O5wAAAYM"]
[Thu Feb 12 21:12:49.153142 2026] [:error] [pid 46675:tid 46682] [client 51.103.142.43:65297] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bvb.php"] [unique_id "aY3R0TuaQILPonWFiQltUAAAAUQ"]
[Thu Feb 12 21:12:50.075603 2026] [:error] [pid 46718:tid 46728] [client 51.103.142.43:8350] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aY3R0kdfX45LelQwruQc2AAAAcc"]
[Thu Feb 12 21:12:51.352785 2026] [:error] [pid 46675:tid 46691] [client 51.103.142.43:65404] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aY3R0zuaQILPonWFiQltVgAAAU0"]
[Thu Feb 12 21:12:52.280794 2026] [:error] [pid 46603:tid 46606] [client 51.103.142.43:65314] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aY3R1PEi6O39v05JNJd7WwAAAQE"]
[Thu Feb 12 21:12:53.304409 2026] [:error] [pid 65064:tid 65090] [client 51.103.142.43:65299] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aY3R1ROvRgscTcqsMBkClwAAANc"]
[Thu Feb 12 21:12:54.123778 2026] [:error] [pid 46603:tid 46612] [client 51.103.142.43:8377] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aY3R1vEi6O39v05JNJd7YQAAAQc"]
[Thu Feb 12 21:12:54.765103 2026] [:error] [pid 46675:tid 46702] [client 51.103.142.43:64981] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aY3R1juaQILPonWFiQltYAAAAVg"]
[Thu Feb 12 21:12:55.521837 2026] [:error] [pid 46603:tid 46608] [client 51.103.142.43:64976] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aY3R1_Ei6O39v05JNJd7ZAAAAQM"]
[Thu Feb 12 21:12:56.163460 2026] [:error] [pid 46718:tid 46735] [client 51.103.142.43:65336] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aY3R2EdfX45LelQwruQc3gAAAc4"]
[Thu Feb 12 21:12:56.932289 2026] [:error] [pid 46718:tid 46724] [client 51.103.142.43:65375] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aY3R2EdfX45LelQwruQc4QAAAcM"]
[Thu Feb 12 21:12:57.628719 2026] [:error] [pid 65064:tid 65075] [client 51.103.142.43:8374] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aY3R2ROvRgscTcqsMBkCoAAAAMg"]
[Thu Feb 12 21:12:58.180043 2026] [:error] [pid 46603:tid 46621] [client 51.103.142.43:65325] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aY3R2vEi6O39v05JNJd7ZwAAARA"]
[Thu Feb 12 21:12:59.026046 2026] [:error] [pid 46718:tid 46740] [client 51.103.142.43:8527] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aY3R20dfX45LelQwruQc6AAAAdM"]
[Thu Feb 12 21:12:59.559251 2026] [:error] [pid 63418:tid 63476] [client 51.103.142.43:8357] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aY3R29zjh-bbJnStPZLunwAAAIA"]
[Thu Feb 12 21:13:00.057605 2026] [:error] [pid 63416:tid 63434] [client 51.103.142.43:39837] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aY3R3L2wmecPaCHcM2_O8gAAAY0"]
[Thu Feb 12 21:13:00.952232 2026] [:error] [pid 46718:tid 46741] [client 51.103.142.43:65338] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aY3R3EdfX45LelQwruQc6wAAAdQ"]
[Thu Feb 12 21:13:01.792491 2026] [:error] [pid 46603:tid 46629] [client 51.103.142.43:39842] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aY3R3fEi6O39v05JNJd7bwAAARg"]
[Thu Feb 12 21:13:02.893587 2026] [:error] [pid 46718:tid 46721] [client 51.103.142.43:39823] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aY3R3kdfX45LelQwruQc8QAAAcA"]
[Thu Feb 12 21:13:03.903091 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:65283] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aY3R3_Ei6O39v05JNJd7cQAAAQw"]
[Thu Feb 12 21:13:04.618200 2026] [:error] [pid 46603:tid 46605] [client 51.103.142.43:64989] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aY3R4PEi6O39v05JNJd7dQAAAQA"]
[Thu Feb 12 21:13:05.386872 2026] [:error] [pid 63418:tid 63488] [client 51.103.142.43:8344] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aY3R4dzjh-bbJnStPZLuqAAAAIw"]
[Thu Feb 12 21:13:06.122950 2026] [:error] [pid 46603:tid 46610] [client 51.103.142.43:65289] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aY3R4vEi6O39v05JNJd7dwAAAQU"]
[Thu Feb 12 21:13:06.825404 2026] [:error] [pid 63418:tid 63483] [client 51.103.142.43:65286] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aY3R4tzjh-bbJnStPZLurQAAAIc"]
[Thu Feb 12 21:13:07.667746 2026] [:error] [pid 46718:tid 46722] [client 51.103.142.43:8346] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aY3R40dfX45LelQwruQc-wAAAcE"]
[Thu Feb 12 21:13:08.272008 2026] [:error] [pid 46675:tid 46700] [client 51.103.142.43:8534] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aY3R5DuaQILPonWFiQltagAAAVY"]
[Thu Feb 12 21:13:08.926224 2026] [:error] [pid 46603:tid 46609] [client 51.103.142.43:8547] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aY3R5PEi6O39v05JNJd7fQAAAQQ"]
[Thu Feb 12 21:13:09.648472 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:65352] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aY3R5fEi6O39v05JNJd7fgAAAQw"]
[Thu Feb 12 21:13:10.442499 2026] [:error] [pid 63416:tid 63435] [client 51.103.142.43:39815] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aY3R5r2wmecPaCHcM2_O-QAAAY4"]
[Thu Feb 12 21:13:11.026222 2026] [:error] [pid 63416:tid 63442] [client 51.103.142.43:39828] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aY3R572wmecPaCHcM2_O-gAAAZU"]
[Thu Feb 12 21:13:11.813801 2026] [:error] [pid 46718:tid 46728] [client 51.103.142.43:39843] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aY3R50dfX45LelQwruQdBQAAAcc"]
[Thu Feb 12 21:13:12.337616 2026] [:error] [pid 65064:tid 65087] [client 51.103.142.43:39824] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aY3R6BOvRgscTcqsMBkCrwAAANQ"]
[Thu Feb 12 21:13:13.186667 2026] [:error] [pid 46718:tid 46733] [client 51.103.142.43:65342] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aY3R6UdfX45LelQwruQdBgAAAcw"]
[Thu Feb 12 21:13:13.789034 2026] [:error] [pid 46718:tid 46722] [client 51.103.142.43:65323] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aY3R6UdfX45LelQwruQdCgAAAcE"]
[Thu Feb 12 21:13:14.334563 2026] [:error] [pid 46718:tid 46739] [client 51.103.142.43:65383] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aY3R6kdfX45LelQwruQdDgAAAdI"]
[Thu Feb 12 21:13:14.943132 2026] [:error] [pid 46603:tid 46606] [client 51.103.142.43:8381] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aY3R6vEi6O39v05JNJd7hgAAAQE"]
[Thu Feb 12 21:13:15.804783 2026] [:error] [pid 65064:tid 65084] [client 51.103.142.43:65392] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aY3R6xOvRgscTcqsMBkCsAAAANE"]
[Thu Feb 12 21:13:16.444358 2026] [:error] [pid 63417:tid 63466] [client 51.103.142.43:65389] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lts.php"] [unique_id "aY3R7P8gSb97qRMtXCLzlwAAAFE"]
[Thu Feb 12 21:13:17.193065 2026] [:error] [pid 46603:tid 46613] [client 51.103.142.43:8561] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aY3R7fEi6O39v05JNJd7iwAAAQg"]
[Thu Feb 12 21:13:18.266312 2026] [:error] [pid 63416:tid 63438] [client 51.103.142.43:65291] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aY3R7r2wmecPaCHcM2_PAgAAAZE"]
[Thu Feb 12 21:13:19.254981 2026] [:error] [pid 63416:tid 63439] [client 51.103.142.43:64632] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aY3R772wmecPaCHcM2_PBwAAAZI"]
[Thu Feb 12 21:13:19.972886 2026] [:error] [pid 65064:tid 65069] [client 51.103.142.43:8369] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aY3R7xOvRgscTcqsMBkCswAAAMI"]
[Thu Feb 12 21:13:21.153831 2026] [:error] [pid 46603:tid 46626] [client 51.103.142.43:8563] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aY3R8fEi6O39v05JNJd7kAAAARU"]
[Thu Feb 12 21:13:21.776493 2026] [:error] [pid 63416:tid 63440] [client 51.103.142.43:8383] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aY3R8b2wmecPaCHcM2_PCAAAAZM"]
[Thu Feb 12 21:13:22.728820 2026] [:error] [pid 63511:tid 63531] [client 51.103.142.43:8516] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aY3R8qQCQbD5BgeyIk0mmQAAABI"]
[Thu Feb 12 21:13:23.705283 2026] [:error] [pid 63416:tid 63444] [client 51.103.142.43:8513] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login8.php"] [unique_id "aY3R872wmecPaCHcM2_PCwAAAZc"]
[Thu Feb 12 21:13:24.570328 2026] [:error] [pid 63416:tid 63422] [client 51.103.142.43:65280] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aY3R9L2wmecPaCHcM2_PEAAAAYE"]
[Thu Feb 12 21:13:25.967048 2026] [:error] [pid 65064:tid 65070] [client 51.103.142.43:64993] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aY3R9ROvRgscTcqsMBkCtwAAAMM"]
[Thu Feb 12 21:13:27.241434 2026] [:error] [pid 46718:tid 46722] [client 51.103.142.43:64991] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aY3R90dfX45LelQwruQdEwAAAcE"]
[Thu Feb 12 21:13:27.977010 2026] [:error] [pid 46718:tid 46735] [client 51.103.142.43:64985] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nnyvn.php"] [unique_id "aY3R90dfX45LelQwruQdFAAAAc4"]
[Thu Feb 12 21:13:28.701090 2026] [:error] [pid 46675:tid 46691] [client 51.103.142.43:65300] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aY3R-DuaQILPonWFiQltdAAAAU0"]
[Thu Feb 12 21:13:29.387742 2026] [:error] [pid 46603:tid 46605] [client 51.103.142.43:39850] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aY3R-fEi6O39v05JNJd7mQAAAQA"]
[Thu Feb 12 21:13:30.113939 2026] [:error] [pid 46675:tid 46681] [client 51.103.142.43:65293] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aY3R-juaQILPonWFiQltdgAAAUM"]
[Thu Feb 12 21:13:31.637875 2026] [:error] [pid 63511:tid 63535] [client 51.103.142.43:8528] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aY3R-6QCQbD5BgeyIk0mogAAABY"]
[Thu Feb 12 21:13:32.299636 2026] [:error] [pid 46603:tid 46608] [client 51.103.142.43:65285] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aY3R_PEi6O39v05JNJd7mwAAAQM"]
[Thu Feb 12 21:13:32.893415 2026] [:error] [pid 63418:tid 63478] [client 51.103.142.43:8559] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aY3R_Nzjh-bbJnStPZLuwQAAAII"]
[Thu Feb 12 21:13:33.450043 2026] [:error] [pid 46718:tid 46741] [client 51.103.142.43:8564] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aY3R_UdfX45LelQwruQdFQAAAdQ"]
[Thu Feb 12 21:13:33.994399 2026] [:error] [pid 63511:tid 63529] [client 51.103.142.43:64982] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aY3R_aQCQbD5BgeyIk0mpAAAABA"]
[Thu Feb 12 21:13:34.631081 2026] [:error] [pid 63418:tid 63497] [client 51.103.142.43:8345] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aY3R_tzjh-bbJnStPZLuwwAAAJU"]
[Thu Feb 12 21:13:35.284075 2026] [:error] [pid 46718:tid 46724] [client 51.103.142.43:64960] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aY3R_0dfX45LelQwruQdFwAAAcM"]
[Thu Feb 12 21:13:35.994501 2026] [:error] [pid 46603:tid 46620] [client 51.103.142.43:64971] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aY3R__Ei6O39v05JNJd7ogAAAQ8"]
[Thu Feb 12 21:13:36.549909 2026] [:error] [pid 63418:tid 63500] [client 51.103.142.43:65377] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aY3SANzjh-bbJnStPZLuxQAAAJg"]
[Thu Feb 12 21:13:37.633423 2026] [:error] [pid 46718:tid 46736] [client 51.103.142.43:64987] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aY3SAUdfX45LelQwruQdGgAAAc8"]
[Thu Feb 12 21:13:38.835137 2026] [:error] [pid 63417:tid 63458] [client 51.103.142.43:65291] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aY3SAv8gSb97qRMtXCLzrQAAAEk"]
[Thu Feb 12 21:13:39.713703 2026] [:error] [pid 46675:tid 46689] [client 51.103.142.43:65013] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aY3SAzuaQILPonWFiQlthAAAAUs"]
[Thu Feb 12 21:13:40.409058 2026] [:error] [pid 46718:tid 46745] [client 51.103.142.43:65401] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aY3SBEdfX45LelQwruQdKAAAAdg"]
[Thu Feb 12 21:13:41.636468 2026] [:error] [pid 63416:tid 63425] [client 51.103.142.43:8553] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aY3SBb2wmecPaCHcM2_PFwAAAYQ"]
[Thu Feb 12 21:13:42.323438 2026] [:error] [pid 63511:tid 63536] [client 51.103.142.43:8544] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aY3SBqQCQbD5BgeyIk0msgAAABc"]
[Thu Feb 12 21:13:42.851935 2026] [:error] [pid 46718:tid 46744] [client 51.103.142.43:39808] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aY3SBkdfX45LelQwruQdKgAAAdc"]
[Thu Feb 12 21:13:43.497090 2026] [:error] [pid 63511:tid 63519] [client 51.103.142.43:39818] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aY3SB6QCQbD5BgeyIk0mtQAAAAY"]
[Thu Feb 12 21:13:44.096597 2026] [:error] [pid 63418:tid 63486] [client 51.103.142.43:39841] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aY3SCNzjh-bbJnStPZLuzwAAAIo"]
[Thu Feb 12 21:13:45.004265 2026] [:error] [pid 63511:tid 63531] [client 51.103.142.43:65353] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aY3SCaQCQbD5BgeyIk0mtwAAABI"]
[Thu Feb 12 21:13:45.755607 2026] [:error] [pid 63418:tid 63495] [client 51.103.142.43:8570] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aY3SCdzjh-bbJnStPZLu0QAAAJM"]
[Thu Feb 12 21:13:46.304564 2026] [proxy_fcgi:error] [pid 63416:tid 63439] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:46.548093 2026] [proxy_fcgi:error] [pid 63416:tid 63445] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:46.806255 2026] [proxy_fcgi:error] [pid 63416:tid 63440] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:47.058691 2026] [proxy_fcgi:error] [pid 63416:tid 63425] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:47.479387 2026] [proxy_fcgi:error] [pid 63416:tid 63421] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:47.721048 2026] [proxy_fcgi:error] [pid 63416:tid 63422] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:47.962683 2026] [proxy_fcgi:error] [pid 63416:tid 63434] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:48.295807 2026] [proxy_fcgi:error] [pid 63416:tid 63426] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:48.568470 2026] [proxy_fcgi:error] [pid 63416:tid 63437] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:48.907456 2026] [proxy_fcgi:error] [pid 63416:tid 63438] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:49.200152 2026] [proxy_fcgi:error] [pid 63416:tid 63428] [client 51.103.142.43:8556] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:13:49.437018 2026] [:error] [pid 63416:tid 63436] [client 51.103.142.43:8556] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aY3SDb2wmecPaCHcM2_PLQAAAY8"]
[Thu Feb 12 21:13:50.183470 2026] [:error] [pid 63511:tid 63536] [client 51.103.142.43:65349] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aY3SDqQCQbD5BgeyIk0mvgAAABc"]
[Thu Feb 12 21:13:50.809462 2026] [:error] [pid 63418:tid 63489] [client 51.103.142.43:8522] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aY3SDtzjh-bbJnStPZLu2AAAAI0"]
[Thu Feb 12 21:13:51.449398 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:65334] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aY3SD_Ei6O39v05JNJd7uAAAAQw"]
[Thu Feb 12 21:13:51.984098 2026] [:error] [pid 46718:tid 46742] [client 51.103.142.43:8333] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aY3SD0dfX45LelQwruQdOgAAAdU"]
[Thu Feb 12 21:13:52.967433 2026] [:error] [pid 63416:tid 63443] [client 51.103.142.43:8356] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aY3SEL2wmecPaCHcM2_PMAAAAZY"]
[Thu Feb 12 21:13:53.526256 2026] [:error] [pid 63416:tid 63430] [client 51.103.142.43:65315] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aY3SEb2wmecPaCHcM2_PMQAAAYk"]
[Thu Feb 12 21:13:54.451019 2026] [:error] [pid 63417:tid 63464] [client 51.103.142.43:39832] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aY3SEv8gSb97qRMtXCLzuAAAAE8"]
[Thu Feb 12 21:13:55.185823 2026] [:error] [pid 63417:tid 63449] [client 51.103.142.43:65348] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aY3SE_8gSb97qRMtXCLzuQAAAEA"]
[Thu Feb 12 21:13:56.053764 2026] [:error] [pid 63416:tid 63440] [client 51.103.142.43:8327] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aY3SFL2wmecPaCHcM2_PNQAAAZM"]
[Thu Feb 12 21:13:56.698407 2026] [:error] [pid 46718:tid 46725] [client 51.103.142.43:64992] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aY3SFEdfX45LelQwruQdRgAAAcQ"]
[Thu Feb 12 21:13:57.408428 2026] [:error] [pid 63511:tid 63520] [client 51.103.142.43:64595] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aY3SFaQCQbD5BgeyIk0mvwAAAAc"]
[Thu Feb 12 21:13:58.095793 2026] [:error] [pid 63511:tid 63524] [client 51.103.142.43:8567] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aY3SFqQCQbD5BgeyIk0mwwAAAAs"]
[Thu Feb 12 21:13:59.060974 2026] [:error] [pid 46603:tid 46610] [client 51.103.142.43:39868] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aY3SF_Ei6O39v05JNJd7vAAAAQU"]
[Thu Feb 12 21:13:59.795092 2026] [:error] [pid 46603:tid 46629] [client 51.103.142.43:64973] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aY3SF_Ei6O39v05JNJd7vQAAARg"]
[Thu Feb 12 21:14:02.118385 2026] [:error] [pid 63418:tid 63483] [client 51.103.142.43:65288] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aY3SGtzjh-bbJnStPZLu4gAAAIc"]
[Thu Feb 12 21:14:04.854833 2026] [:error] [pid 46603:tid 46628] [client 51.103.142.43:8342] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aY3SHPEi6O39v05JNJd7ygAAARc"]
[Thu Feb 12 21:14:10.010706 2026] [:error] [pid 63511:tid 63523] [client 51.103.142.43:8371] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aY3SIqQCQbD5BgeyIk0myQAAAAo"]
[Thu Feb 12 21:14:13.355243 2026] [:error] [pid 63511:tid 63513] [client 51.103.142.43:65386] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aY3SJaQCQbD5BgeyIk0m0wAAAAA"]
[Thu Feb 12 21:14:14.512321 2026] [:error] [pid 63418:tid 63479] [client 51.103.142.43:8339] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aY3SJtzjh-bbJnStPZLu8gAAAIM"]
[Thu Feb 12 21:14:15.898513 2026] [:error] [pid 46718:tid 46721] [client 51.103.142.43:65369] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aY3SJ0dfX45LelQwruQdWAAAAcA"]
[Thu Feb 12 21:14:16.641669 2026] [:error] [pid 65064:tid 65068] [client 51.103.142.43:65407] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aY3SKBOvRgscTcqsMBkC4QAAAME"]
[Thu Feb 12 21:14:17.416793 2026] [:error] [pid 63418:tid 63486] [client 51.103.142.43:39853] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aY3SKdzjh-bbJnStPZLu9QAAAIo"]
[Thu Feb 12 21:14:18.524623 2026] [:error] [pid 63416:tid 63444] [client 51.103.142.43:8530] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aY3SKr2wmecPaCHcM2_PRgAAAZc"]
[Thu Feb 12 21:14:19.563318 2026] [:error] [pid 46675:tid 46701] [client 51.103.142.43:8341] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aY3SKzuaQILPonWFiQltnwAAAVc"]
[Thu Feb 12 21:14:20.908021 2026] [:error] [pid 63418:tid 63476] [client 51.103.142.43:65378] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aY3SLNzjh-bbJnStPZLu-gAAAIA"]
[Thu Feb 12 21:14:21.840381 2026] [:error] [pid 46675:tid 46702] [client 51.103.142.43:64955] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aY3SLTuaQILPonWFiQltowAAAVg"]
[Thu Feb 12 21:14:22.527361 2026] [:error] [pid 46675:tid 46679] [client 51.103.142.43:65356] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aY3SLjuaQILPonWFiQltpAAAAUE"]
[Thu Feb 12 21:14:23.958079 2026] [:error] [pid 63511:tid 63536] [client 51.103.142.43:65357] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aY3SL6QCQbD5BgeyIk0m3wAAABc"]
[Thu Feb 12 21:14:24.937466 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:39844] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aY3SMPEi6O39v05JNJd75gAAAQw"]
[Thu Feb 12 21:14:25.784217 2026] [:error] [pid 46718:tid 46735] [client 51.103.142.43:8331] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aY3SMUdfX45LelQwruQddAAAAc4"]
[Thu Feb 12 21:14:26.667784 2026] [:error] [pid 46675:tid 46700] [client 51.103.142.43:65318] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aY3SMjuaQILPonWFiQltqwAAAVY"]
[Thu Feb 12 21:14:28.872605 2026] [:error] [pid 46718:tid 46721] [client 51.103.142.43:65298] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aY3SNEdfX45LelQwruQdfwAAAcA"]
[Thu Feb 12 21:14:29.604153 2026] [:error] [pid 46675:tid 46701] [client 51.103.142.43:64567] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aY3SNTuaQILPonWFiQltrgAAAVc"]
[Thu Feb 12 21:14:30.741398 2026] [:error] [pid 63511:tid 63519] [client 51.103.142.43:65398] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aY3SNqQCQbD5BgeyIk0m5AAAAAY"]
[Thu Feb 12 21:14:31.945196 2026] [:error] [pid 46718:tid 46732] [client 51.103.142.43:64962] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aY3SN0dfX45LelQwruQdhgAAAcs"]
[Thu Feb 12 21:14:35.650742 2026] [:error] [pid 63416:tid 63427] [client 51.103.142.43:8337] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aY3SO72wmecPaCHcM2_PVQAAAYY"]
[Thu Feb 12 21:14:38.185314 2026] [:error] [pid 46675:tid 46684] [client 51.103.142.43:65381] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aY3SPjuaQILPonWFiQlttQAAAUY"]
[Thu Feb 12 21:14:39.953513 2026] [:error] [pid 46718:tid 46743] [client 51.103.142.43:39846] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aY3SP0dfX45LelQwruQdjQAAAdY"]
[Thu Feb 12 21:14:41.417165 2026] [:error] [pid 63417:tid 63461] [client 51.103.142.43:64915] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aY3SQf8gSb97qRMtXCL0QgAAAEw"]
[Thu Feb 12 21:14:43.582316 2026] [:error] [pid 46675:tid 46685] [client 51.103.142.43:65387] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aY3SQzuaQILPonWFiQltuQAAAUc"]
[Thu Feb 12 21:14:46.187912 2026] [:error] [pid 63511:tid 63517] [client 51.103.142.43:39811] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aY3SRqQCQbD5BgeyIk0m8QAAAAQ"]
[Thu Feb 12 21:14:47.463655 2026] [:error] [pid 46675:tid 46702] [client 51.103.142.43:64539] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aY3SRzuaQILPonWFiQltugAAAVg"]
[Thu Feb 12 21:14:49.220947 2026] [proxy_fcgi:error] [pid 63511:tid 63537] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:49.464381 2026] [proxy_fcgi:error] [pid 63511:tid 63535] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:49.704939 2026] [proxy_fcgi:error] [pid 63511:tid 63515] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:49.945496 2026] [proxy_fcgi:error] [pid 63511:tid 63531] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:50.312525 2026] [proxy_fcgi:error] [pid 63511:tid 63516] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:50.647065 2026] [proxy_fcgi:error] [pid 63511:tid 63527] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:50.885661 2026] [proxy_fcgi:error] [pid 63511:tid 63514] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:51.127584 2026] [proxy_fcgi:error] [pid 63511:tid 63525] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:52.062291 2026] [proxy_fcgi:error] [pid 63511:tid 63533] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:52.321583 2026] [proxy_fcgi:error] [pid 63511:tid 63536] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:52.757059 2026] [proxy_fcgi:error] [pid 63511:tid 63534] [client 51.103.142.43:8343] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:14:52.993665 2026] [:error] [pid 63511:tid 63518] [client 51.103.142.43:8343] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aY3STKQCQbD5BgeyIk0nAAAAAAU"]
[Thu Feb 12 21:14:54.084416 2026] [:error] [pid 65064:tid 65078] [client 51.103.142.43:63713] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aY3SThOvRgscTcqsMBkDGgAAAMs"]
[Thu Feb 12 21:14:54.854205 2026] [:error] [pid 46718:tid 46735] [client 51.103.142.43:65294] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aY3STkdfX45LelQwruQdyQAAAc4"]
[Thu Feb 12 21:14:55.581995 2026] [:error] [pid 63511:tid 63529] [client 51.103.142.43:65368] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aY3ST6QCQbD5BgeyIk0nBAAAABA"]
[Thu Feb 12 21:14:56.238018 2026] [:error] [pid 65064:tid 65091] [client 51.103.142.43:65001] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aY3SUBOvRgscTcqsMBkDHwAAANg"]
[Thu Feb 12 21:14:56.996933 2026] [:error] [pid 63417:tid 63458] [client 51.103.142.43:8558] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aY3SUP8gSb97qRMtXCL0SgAAAEk"]
[Thu Feb 12 21:14:57.603495 2026] [:error] [pid 65064:tid 65081] [client 51.103.142.43:8568] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aY3SUROvRgscTcqsMBkDJQAAAM4"]
[Thu Feb 12 21:14:58.321324 2026] [:error] [pid 46675:tid 46689] [client 51.103.142.43:39861] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "aY3SUjuaQILPonWFiQltywAAAUs"]
[Thu Feb 12 21:14:59.287967 2026] [:error] [pid 63511:tid 63533] [client 51.103.142.43:8352] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aY3SU6QCQbD5BgeyIk0nCAAAABQ"]
[Thu Feb 12 21:15:00.109247 2026] [:error] [pid 46718:tid 46727] [client 51.103.142.43:8369] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aY3SVEdfX45LelQwruQdzgAAAcY"]
[Thu Feb 12 21:15:00.965669 2026] [:error] [pid 46718:tid 46722] [client 51.103.142.43:8355] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aY3SVEdfX45LelQwruQd0AAAAcE"]
[Thu Feb 12 21:15:01.787052 2026] [:error] [pid 46718:tid 46733] [client 51.103.142.43:63695] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aY3SVUdfX45LelQwruQd0gAAAcw"]
[Thu Feb 12 21:15:02.405237 2026] [:error] [pid 46718:tid 46743] [client 51.103.142.43:65308] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aY3SVkdfX45LelQwruQd0wAAAdY"]
[Thu Feb 12 21:15:02.938629 2026] [:error] [pid 46718:tid 46736] [client 51.103.142.43:65351] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aY3SVkdfX45LelQwruQd1QAAAc8"]
[Thu Feb 12 21:15:03.475942 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:65337] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aY3SV_Ei6O39v05JNJd8UgAAAQw"]
[Thu Feb 12 21:15:04.042632 2026] [:error] [pid 65064:tid 65069] [client 51.103.142.43:65371] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aw.php"] [unique_id "aY3SWBOvRgscTcqsMBkDPgAAAMI"]
[Thu Feb 12 21:15:04.765956 2026] [:error] [pid 63511:tid 63534] [client 51.103.142.43:8517] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aY3SWKQCQbD5BgeyIk0nCgAAABU"]
[Thu Feb 12 21:15:05.498608 2026] [:error] [pid 63511:tid 63518] [client 51.103.142.43:64944] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aY3SWaQCQbD5BgeyIk0nCwAAAAU"]
[Thu Feb 12 21:15:06.379206 2026] [:error] [pid 63417:tid 63472] [client 51.103.142.43:8321] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aY3SWv8gSb97qRMtXCL0UAAAAFc"]
[Thu Feb 12 21:15:06.971623 2026] [:error] [pid 63511:tid 63521] [client 51.103.142.43:39851] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aY3SWqQCQbD5BgeyIk0nDQAAAAg"]
[Thu Feb 12 21:15:07.583693 2026] [:error] [pid 46718:tid 46740] [client 51.103.142.43:65344] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aY3SW0dfX45LelQwruQd5wAAAdM"]
[Thu Feb 12 21:15:08.289328 2026] [:error] [pid 63416:tid 63433] [client 51.103.142.43:39830] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aY3SXL2wmecPaCHcM2_PYwAAAYw"]
[Thu Feb 12 21:15:08.934984 2026] [:error] [pid 46675:tid 46688] [client 51.103.142.43:65326] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aY3SXDuaQILPonWFiQltzgAAAUo"]
[Thu Feb 12 21:15:09.505740 2026] [:error] [pid 63418:tid 63479] [client 51.103.142.43:65400] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aY3SXdzjh-bbJnStPZLvDwAAAIM"]
[Thu Feb 12 21:15:10.197317 2026] [:error] [pid 46603:tid 46611] [client 51.103.142.43:64942] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aY3SXvEi6O39v05JNJd8agAAAQY"]
[Thu Feb 12 21:15:10.842338 2026] [:error] [pid 46675:tid 46679] [client 51.103.142.43:8349] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aY3SXjuaQILPonWFiQlt0AAAAUE"]
[Thu Feb 12 21:15:11.534054 2026] [:error] [pid 65064:tid 65090] [client 51.103.142.43:64983] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aY3SXxOvRgscTcqsMBkDQgAAANc"]
[Thu Feb 12 21:15:12.168082 2026] [:error] [pid 63418:tid 63484] [client 51.103.142.43:65306] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aY3SYNzjh-bbJnStPZLvEwAAAIg"]
[Thu Feb 12 21:15:12.823313 2026] [:error] [pid 65064:tid 65084] [client 51.103.142.43:8549] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aY3SYBOvRgscTcqsMBkDQwAAANE"]
[Thu Feb 12 21:15:13.496748 2026] [:error] [pid 46675:tid 46692] [client 51.103.142.43:8348] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aY3SYTuaQILPonWFiQlt1AAAAU4"]
[Thu Feb 12 21:15:14.402791 2026] [:error] [pid 65064:tid 65077] [client 51.103.142.43:8519] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aY3SYhOvRgscTcqsMBkDRwAAAMo"]
[Thu Feb 12 21:15:14.995393 2026] [:error] [pid 63418:tid 63477] [client 51.103.142.43:64898] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aY3SYtzjh-bbJnStPZLvFgAAAIE"]
[Thu Feb 12 21:15:15.743991 2026] [:error] [pid 46718:tid 46745] [client 51.103.142.43:39862] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aY3SY0dfX45LelQwruQd6gAAAdg"]
[Thu Feb 12 21:15:16.530431 2026] [:error] [pid 46675:tid 46684] [client 51.103.142.43:65295] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aY3SZDuaQILPonWFiQlt2AAAAUY"]
[Thu Feb 12 21:15:17.175627 2026] [:error] [pid 46675:tid 46680] [client 51.103.142.43:64234] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aY3SZTuaQILPonWFiQlt2QAAAUI"]
[Thu Feb 12 21:15:17.792447 2026] [:error] [pid 46675:tid 46698] [client 51.103.142.43:65000] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tcp.php"] [unique_id "aY3SZTuaQILPonWFiQlt2gAAAVQ"]
[Thu Feb 12 21:15:18.494300 2026] [:error] [pid 46675:tid 46682] [client 51.103.142.43:8572] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aY3SZjuaQILPonWFiQlt2wAAAUQ"]
[Thu Feb 12 21:15:19.390169 2026] [:error] [pid 46718:tid 46727] [client 51.103.142.43:65327] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aY3SZ0dfX45LelQwruQeGQAAAcY"]
[Thu Feb 12 21:15:20.118414 2026] [:error] [pid 63418:tid 63491] [client 51.103.142.43:39814] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aY3SaNzjh-bbJnStPZLvGQAAAI8"]
[Thu Feb 12 21:15:21.299041 2026] [:error] [pid 46718:tid 46728] [client 51.103.142.43:64602] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aY3SaUdfX45LelQwruQeHAAAAcc"]
[Thu Feb 12 21:15:22.841193 2026] [:error] [pid 65064:tid 65069] [client 51.103.142.43:65388] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aY3SahOvRgscTcqsMBkDZAAAAMI"]
[Thu Feb 12 21:15:25.590975 2026] [:error] [pid 63416:tid 63434] [client 51.103.142.43:8375] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aY3Sbb2wmecPaCHcM2_PZwAAAY0"]
[Thu Feb 12 21:15:26.271336 2026] [:error] [pid 63416:tid 63421] [client 51.103.142.43:8537] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aY3Sbr2wmecPaCHcM2_PaQAAAYA"]
[Thu Feb 12 21:15:27.483285 2026] [:error] [pid 63416:tid 63423] [client 51.103.142.43:8364] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aY3Sb72wmecPaCHcM2_PbQAAAYI"]
[Thu Feb 12 21:15:28.414784 2026] [:error] [pid 63416:tid 63432] [client 51.103.142.43:65006] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aY3ScL2wmecPaCHcM2_PbgAAAYs"]
[Thu Feb 12 21:15:29.146412 2026] [:error] [pid 65064:tid 65067] [client 51.103.142.43:8373] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aY3ScROvRgscTcqsMBkDaAAAAMA"]
[Thu Feb 12 21:15:30.125436 2026] [:error] [pid 63417:tid 63457] [client 51.103.142.43:64969] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aY3Scv8gSb97qRMtXCL0pQAAAEg"]
[Thu Feb 12 21:15:30.795165 2026] [:error] [pid 46603:tid 46611] [client 51.103.142.43:65003] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aY3ScvEi6O39v05JNJd8owAAAQY"]
[Thu Feb 12 21:15:31.835157 2026] [:error] [pid 63418:tid 63484] [client 51.103.142.43:64142] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aY3Sc9zjh-bbJnStPZLvHgAAAIg"]
[Thu Feb 12 21:15:32.619037 2026] [:error] [pid 46675:tid 46693] [client 51.103.142.43:65020] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aY3SdDuaQILPonWFiQlt4wAAAU8"]
[Thu Feb 12 21:15:33.474177 2026] [:error] [pid 65064:tid 65087] [client 51.103.142.43:8514] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aY3SdROvRgscTcqsMBkDbAAAANQ"]
[Thu Feb 12 21:15:34.555221 2026] [:error] [pid 46675:tid 46680] [client 51.103.142.43:64896] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aY3SdjuaQILPonWFiQlt5wAAAUI"]
[Thu Feb 12 21:15:35.380933 2026] [:error] [pid 46603:tid 46629] [client 51.103.142.43:64974] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aY3Sd_Ei6O39v05JNJd8pwAAARg"]
[Thu Feb 12 21:15:36.115219 2026] [:error] [pid 63511:tid 63519] [client 51.103.142.43:8566] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aY3SeKQCQbD5BgeyIk0nGQAAAAY"]
[Thu Feb 12 21:15:37.279097 2026] [:error] [pid 65064:tid 65070] [client 51.103.142.43:8336] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aY3SeROvRgscTcqsMBkDbgAAAMM"]
[Thu Feb 12 21:15:38.183056 2026] [:error] [pid 46718:tid 46722] [client 51.103.142.43:65346] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aY3SekdfX45LelQwruQeKAAAAcE"]
[Thu Feb 12 21:15:40.481450 2026] [:error] [pid 46603:tid 46625] [client 51.103.142.43:65019] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aY3SfPEi6O39v05JNJd8rQAAARQ"]
[Thu Feb 12 21:15:41.479075 2026] [:error] [pid 46603:tid 46618] [client 51.103.142.43:64935] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aY3SffEi6O39v05JNJd8rgAAAQ0"]
[Thu Feb 12 21:15:42.125677 2026] [:error] [pid 46675:tid 46682] [client 51.103.142.43:39809] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aY3SfjuaQILPonWFiQlt6QAAAUQ"]
[Thu Feb 12 21:15:43.384066 2026] [:error] [pid 46675:tid 46697] [client 51.103.142.43:64520] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/past1.php"] [unique_id "aY3SfzuaQILPonWFiQlt6gAAAVM"]
[Thu Feb 12 21:15:44.886833 2026] [:error] [pid 63511:tid 63517] [client 51.103.142.43:39833] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3SgKQCQbD5BgeyIk0nHAAAAAQ"]
[Thu Feb 12 21:15:45.528959 2026] [:error] [pid 46675:tid 46688] [client 51.103.142.43:64227] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3SgTuaQILPonWFiQlt7AAAAUo"]
[Thu Feb 12 21:15:46.290354 2026] [:error] [pid 46675:tid 46685] [client 51.103.142.43:65309] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3SgjuaQILPonWFiQlt7gAAAUc"]
[Thu Feb 12 21:15:46.861256 2026] [:error] [pid 46718:tid 46723] [client 51.103.142.43:65385] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aY3SgkdfX45LelQwruQeMAAAAcI"]
[Thu Feb 12 21:15:47.869961 2026] [:error] [pid 63417:tid 63467] [client 51.103.142.43:65284] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aY3Sg_8gSb97qRMtXCL0rQAAAFI"]
[Thu Feb 12 21:15:48.992736 2026] [:error] [pid 46675:tid 46699] [client 51.103.142.43:8518] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aY3ShDuaQILPonWFiQlt8AAAAVU"]
[Thu Feb 12 21:15:49.626524 2026] [:error] [pid 46675:tid 46696] [client 51.103.142.43:39864] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aY3ShTuaQILPonWFiQlt8gAAAVI"]
[Thu Feb 12 21:15:50.286421 2026] [:error] [pid 46718:tid 46743] [client 51.103.142.43:64194] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aY3ShkdfX45LelQwruQeNAAAAdY"]
[Thu Feb 12 21:15:50.987478 2026] [:error] [pid 63418:tid 63499] [client 51.103.142.43:8546] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aY3Shtzjh-bbJnStPZLvJgAAAJc"]
[Thu Feb 12 21:15:51.520701 2026] [:error] [pid 63418:tid 63485] [client 51.103.142.43:64156] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aY3Sh9zjh-bbJnStPZLvKAAAAIk"]
[Thu Feb 12 21:15:52.342378 2026] [proxy_fcgi:error] [pid 63418:tid 63484] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:52.605377 2026] [proxy_fcgi:error] [pid 63418:tid 63480] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:52.849486 2026] [proxy_fcgi:error] [pid 63418:tid 63494] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:53.111994 2026] [proxy_fcgi:error] [pid 63418:tid 63482] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:53.358299 2026] [proxy_fcgi:error] [pid 63418:tid 63477] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:53.619955 2026] [proxy_fcgi:error] [pid 63418:tid 63481] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:53.938607 2026] [proxy_fcgi:error] [pid 63418:tid 63495] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:54.189449 2026] [proxy_fcgi:error] [pid 63418:tid 63478] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:54.443846 2026] [proxy_fcgi:error] [pid 63418:tid 63493] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:54.733090 2026] [proxy_fcgi:error] [pid 63418:tid 63500] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:55.048946 2026] [proxy_fcgi:error] [pid 63418:tid 63497] [client 51.103.142.43:64988] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:15:55.343009 2026] [:error] [pid 63418:tid 63476] [client 51.103.142.43:64988] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aY3Si9zjh-bbJnStPZLvOQAAAIA"]
[Thu Feb 12 21:15:56.076179 2026] [:error] [pid 65064:tid 65075] [client 51.103.142.43:8562] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aY3SjBOvRgscTcqsMBkDfAAAAMg"]
[Thu Feb 12 21:15:56.912097 2026] [:error] [pid 46603:tid 46624] [client 51.103.142.43:8542] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aY3SjPEi6O39v05JNJd8uAAAARM"]
[Thu Feb 12 21:15:58.291305 2026] [:error] [pid 63418:tid 63485] [client 51.103.142.43:65005] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aY3Sjtzjh-bbJnStPZLvOwAAAIk"]
[Thu Feb 12 21:16:01.626211 2026] [:error] [pid 46718:tid 46727] [client 51.103.142.43:64607] [client 51.103.142.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aY3SkUdfX45LelQwruQeOQAAAcY"]
[Thu Feb 12 21:16:03.285519 2026] [:error] [pid 46675:tid 46696] [client 51.103.142.43:64238] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aY3SkzuaQILPonWFiQlt_gAAAVI"]
[Thu Feb 12 21:16:04.604232 2026] [:error] [pid 46718:tid 46744] [client 51.103.142.43:65394] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aY3SlEdfX45LelQwruQePgAAAdc"]
[Thu Feb 12 21:16:06.233340 2026] [:error] [pid 63511:tid 63519] [client 51.103.142.43:64949] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aY3SlqQCQbD5BgeyIk0nJAAAAAY"]
[Thu Feb 12 21:16:07.007275 2026] [:error] [pid 63511:tid 63532] [client 51.103.142.43:64986] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aY3Sl6QCQbD5BgeyIk0nJgAAABM"]
[Thu Feb 12 21:16:08.063007 2026] [:error] [pid 63416:tid 63437] [client 51.103.142.43:65324] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aY3SmL2wmecPaCHcM2_PdwAAAZA"]
[Thu Feb 12 21:16:08.876034 2026] [:error] [pid 46718:tid 46742] [client 51.103.142.43:64995] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aY3SmEdfX45LelQwruQeRQAAAdU"]
[Thu Feb 12 21:16:10.209775 2026] [:error] [pid 65064:tid 65073] [client 51.103.142.43:65320] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hexx.php"] [unique_id "aY3SmhOvRgscTcqsMBkDggAAAMY"]
[Thu Feb 12 21:16:11.102492 2026] [:error] [pid 63417:tid 63451] [client 51.103.142.43:39867] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aY3Sm_8gSb97qRMtXCL0swAAAEI"]
[Thu Feb 12 21:16:11.964968 2026] [:error] [pid 46675:tid 46694] [client 51.103.142.43:65330] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aY3SmzuaQILPonWFiQluBQAAAVA"]
[Thu Feb 12 21:16:12.556885 2026] [:error] [pid 46675:tid 46701] [client 51.103.142.43:64160] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aY3SnDuaQILPonWFiQluBgAAAVc"]
[Thu Feb 12 21:16:13.876250 2026] [:error] [pid 63511:tid 63530] [client 51.103.142.43:64631] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aY3SnaQCQbD5BgeyIk0nLAAAABE"]
[Thu Feb 12 21:16:18.328593 2026] [:error] [pid 46675:tid 46698] [client 51.103.142.43:64197] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aY3SojuaQILPonWFiQluDgAAAVQ"]
[Thu Feb 12 21:16:19.045702 2026] [:error] [pid 46675:tid 46691] [client 51.103.142.43:64931] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aY3SozuaQILPonWFiQluDwAAAU0"]
[Thu Feb 12 21:16:20.332749 2026] [:error] [pid 65064:tid 65090] [client 51.103.142.43:39857] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aY3SpBOvRgscTcqsMBkDhwAAANc"]
[Thu Feb 12 21:16:22.440054 2026] [:error] [pid 63416:tid 63423] [client 51.103.142.43:64132] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aY3Spr2wmecPaCHcM2_PeAAAAYI"]
[Thu Feb 12 21:16:23.939211 2026] [:error] [pid 63511:tid 63525] [client 51.103.142.43:64968] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aY3Sp6QCQbD5BgeyIk0nNwAAAAw"]
[Thu Feb 12 21:16:25.634288 2026] [:error] [pid 63511:tid 63534] [client 51.103.142.43:64221] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aY3SqaQCQbD5BgeyIk0nOgAAABU"]
[Thu Feb 12 21:16:27.486441 2026] [:error] [pid 46603:tid 46623] [client 51.103.142.43:8347] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aY3Sq_Ei6O39v05JNJd8xQAAARI"]
[Thu Feb 12 21:16:28.512476 2026] [:error] [pid 63418:tid 63497] [client 51.103.142.43:8541] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aY3SrNzjh-bbJnStPZLvQwAAAJU"]
[Thu Feb 12 21:16:29.497426 2026] [:error] [pid 46675:tid 46692] [client 51.103.142.43:65329] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aY3SrTuaQILPonWFiQluFAAAAU4"]
[Thu Feb 12 21:16:30.795361 2026] [:error] [pid 63416:tid 63445] [client 51.103.142.43:64963] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aY3Srr2wmecPaCHcM2_PfQAAAZg"]
[Thu Feb 12 21:16:31.703722 2026] [:error] [pid 63418:tid 63496] [client 51.103.142.43:65402] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aY3Sr9zjh-bbJnStPZLvSgAAAJQ"]
[Thu Feb 12 21:16:32.420212 2026] [:error] [pid 63418:tid 63477] [client 51.103.142.43:64970] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aY3SsNzjh-bbJnStPZLvTQAAAIE"]
[Thu Feb 12 21:16:33.111063 2026] [:error] [pid 63417:tid 63464] [client 51.103.142.43:64512] [client 51.103.142.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aY3Ssf8gSb97qRMtXCL0vwAAAE8"]
[Thu Feb 12 21:16:33.911374 2026] [:error] [pid 46603:tid 46606] [client 51.103.142.43:64581] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfile25.php"] [unique_id "aY3SsfEi6O39v05JNJd8yAAAAQE"]
[Thu Feb 12 21:16:34.542634 2026] [:error] [pid 46603:tid 46607] [client 51.103.142.43:65332] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfile25.php"] [unique_id "aY3SsvEi6O39v05JNJd8yQAAAQI"]
[Thu Feb 12 21:16:35.354780 2026] [:error] [pid 63416:tid 63435] [client 51.103.142.43:64911] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfile25.php"] [unique_id "aY3Ss72wmecPaCHcM2_PgQAAAY4"]
[Thu Feb 12 21:16:36.085350 2026] [:error] [pid 46675:tid 46696] [client 51.103.142.43:64984] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfile25.php"] [unique_id "aY3StDuaQILPonWFiQluFQAAAVI"]
[Thu Feb 12 21:16:36.827649 2026] [:error] [pid 46718:tid 46725] [client 51.103.142.43:8334] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aY3StEdfX45LelQwruQeTwAAAcQ"]
[Thu Feb 12 21:16:37.576914 2026] [:error] [pid 46675:tid 46689] [client 51.103.142.43:64916] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aY3StTuaQILPonWFiQluFgAAAUs"]
[Thu Feb 12 21:16:38.244948 2026] [:error] [pid 46718:tid 46723] [client 51.103.142.43:65373] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aY3StkdfX45LelQwruQeUwAAAcI"]
[Thu Feb 12 21:16:38.915279 2026] [:error] [pid 46603:tid 46623] [client 51.103.142.43:8360] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aY3StvEi6O39v05JNJd80QAAARI"]
[Thu Feb 12 21:16:39.534475 2026] [:error] [pid 63418:tid 63480] [client 51.103.142.43:65396] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aY3St9zjh-bbJnStPZLvUwAAAIQ"]
[Thu Feb 12 21:16:40.259100 2026] [:error] [pid 46603:tid 46629] [client 51.103.142.43:64936] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aY3SuPEi6O39v05JNJd81QAAARg"]
[Thu Feb 12 21:16:40.950152 2026] [:error] [pid 63511:tid 63520] [client 51.103.142.43:65399] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aY3SuKQCQbD5BgeyIk0nPAAAAAc"]
[Thu Feb 12 21:16:41.825587 2026] [:error] [pid 63416:tid 63437] [client 51.103.142.43:64201] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aY3Sub2wmecPaCHcM2_PhgAAAZA"]
[Thu Feb 12 21:16:43.516338 2026] [:error] [pid 63511:tid 63537] [client 51.103.142.43:64559] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aY3Su6QCQbD5BgeyIk0nPwAAABg"]
[Thu Feb 12 21:16:44.288311 2026] [:error] [pid 63511:tid 63513] [client 51.103.142.43:64541] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aY3SvKQCQbD5BgeyIk0nQAAAAAA"]
[Thu Feb 12 21:16:44.906776 2026] [:error] [pid 63511:tid 63535] [client 51.103.142.43:8329] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aY3SvKQCQbD5BgeyIk0nQgAAABY"]
[Thu Feb 12 21:16:46.036144 2026] [:error] [pid 63418:tid 63481] [client 51.103.142.43:65322] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aY3Svtzjh-bbJnStPZLvVgAAAIU"]
[Thu Feb 12 21:16:46.877294 2026] [:error] [pid 46718:tid 46740] [client 51.103.142.43:65319] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aY3SvkdfX45LelQwruQeZQAAAdM"]
[Thu Feb 12 21:16:48.464557 2026] [:error] [pid 46603:tid 46613] [client 51.103.142.43:8552] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aY3SwPEi6O39v05JNJd82QAAAQg"]
[Thu Feb 12 21:16:49.209700 2026] [:error] [pid 63511:tid 63518] [client 51.103.142.43:39838] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aY3SwaQCQbD5BgeyIk0nRgAAAAU"]
[Thu Feb 12 21:16:49.936136 2026] [:error] [pid 46603:tid 46628] [client 51.103.142.43:64560] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aY3SwfEi6O39v05JNJd82wAAARc"]
[Thu Feb 12 21:16:50.601517 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:65017] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aY3SwvEi6O39v05JNJd83AAAAQw"]
[Thu Feb 12 21:16:51.659701 2026] [:error] [pid 63511:tid 63528] [client 51.103.142.43:64998] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aY3Sw6QCQbD5BgeyIk0nSQAAAA8"]
[Thu Feb 12 21:16:52.897461 2026] [:error] [pid 63418:tid 63497] [client 51.103.142.43:64978] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aY3SxNzjh-bbJnStPZLvWgAAAJU"]
[Thu Feb 12 21:16:55.758879 2026] [proxy_fcgi:error] [pid 63511:tid 63532] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:55.998890 2026] [proxy_fcgi:error] [pid 63511:tid 63517] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:56.238634 2026] [proxy_fcgi:error] [pid 63511:tid 63537] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:56.502339 2026] [proxy_fcgi:error] [pid 63511:tid 63524] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:56.763677 2026] [proxy_fcgi:error] [pid 63511:tid 63535] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:57.006586 2026] [proxy_fcgi:error] [pid 63511:tid 63530] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:57.245848 2026] [proxy_fcgi:error] [pid 63511:tid 63514] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:57.485430 2026] [proxy_fcgi:error] [pid 63511:tid 63518] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:57.725961 2026] [proxy_fcgi:error] [pid 63511:tid 63531] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:57.973951 2026] [proxy_fcgi:error] [pid 63511:tid 63521] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:58.279080 2026] [proxy_fcgi:error] [pid 63511:tid 63528] [client 51.103.142.43:8332] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:16:58.521772 2026] [:error] [pid 63511:tid 63527] [client 51.103.142.43:8332] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3SyqQCQbD5BgeyIk0nXAAAAA4"]
[Thu Feb 12 21:16:59.094855 2026] [:error] [pid 46675:tid 46700] [client 51.103.142.43:39854] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3SyzuaQILPonWFiQluJAAAAVY"]
[Thu Feb 12 21:16:59.976019 2026] [:error] [pid 46675:tid 46699] [client 51.103.142.43:64620] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3SyzuaQILPonWFiQluJwAAAVU"]
[Thu Feb 12 21:17:01.512914 2026] [:error] [pid 65064:tid 65083] [client 51.103.142.43:65287] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3SzROvRgscTcqsMBkDmQAAANA"]
[Thu Feb 12 21:17:02.446088 2026] [:error] [pid 46718:tid 46725] [client 51.103.142.43:8550] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY3SzkdfX45LelQwruQebwAAAcQ"]
[Thu Feb 12 21:17:03.253153 2026] [:error] [pid 46675:tid 46694] [client 51.103.142.43:39813] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY3SzzuaQILPonWFiQluMQAAAVA"]
[Thu Feb 12 21:17:04.093163 2026] [:error] [pid 46675:tid 46699] [client 51.103.142.43:65340] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY3S0DuaQILPonWFiQluNgAAAVU"]
[Thu Feb 12 21:17:05.045709 2026] [:error] [pid 63418:tid 63498] [client 51.103.142.43:8370] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY3S0dzjh-bbJnStPZLvXgAAAJY"]
[Thu Feb 12 21:17:05.921939 2026] [:error] [pid 63418:tid 63494] [client 51.103.142.43:64223] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aY3S0dzjh-bbJnStPZLvYQAAAJI"]
[Thu Feb 12 21:17:06.652141 2026] [:error] [pid 46718:tid 46743] [client 51.103.142.43:39812] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aY3S0kdfX45LelQwruQegwAAAdY"]
[Thu Feb 12 21:17:07.826776 2026] [:error] [pid 63418:tid 63492] [client 51.103.142.43:64624] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aY3S09zjh-bbJnStPZLvYwAAAJA"]
[Thu Feb 12 21:17:08.570170 2026] [:error] [pid 63418:tid 63477] [client 51.103.142.43:64253] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aY3S1Nzjh-bbJnStPZLvZAAAAIE"]
[Thu Feb 12 21:17:09.536969 2026] [:error] [pid 63418:tid 63486] [client 51.103.142.43:65406] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S1dzjh-bbJnStPZLvZgAAAIo"]
[Thu Feb 12 21:17:10.296624 2026] [:error] [pid 63511:tid 63518] [client 51.103.142.43:65384] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S1qQCQbD5BgeyIk0nagAAAAU"]
[Thu Feb 12 21:17:11.532011 2026] [:error] [pid 63511:tid 63527] [client 51.103.142.43:65358] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S16QCQbD5BgeyIk0nbAAAAA4"]
[Thu Feb 12 21:17:13.596081 2026] [:error] [pid 46603:tid 46626] [client 51.103.142.43:65360] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S2fEi6O39v05JNJd89gAAARU"]
[Thu Feb 12 21:17:15.274204 2026] [:error] [pid 46718:tid 46729] [client 51.103.142.43:65333] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S20dfX45LelQwruQekQAAAcg"]
[Thu Feb 12 21:17:16.090139 2026] [:error] [pid 46675:tid 46679] [client 51.103.142.43:8554] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S3DuaQILPonWFiQluPgAAAUE"]
[Thu Feb 12 21:17:17.890023 2026] [:error] [pid 46675:tid 46698] [client 51.103.142.43:64961] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S3TuaQILPonWFiQluRAAAAVQ"]
[Thu Feb 12 21:17:18.844907 2026] [:error] [pid 46603:tid 46620] [client 51.103.142.43:64929] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY3S3vEi6O39v05JNJd8-gAAAQ8"]
[Thu Feb 12 21:17:20.311021 2026] [:error] [pid 65064:tid 65071] [client 51.103.142.43:64577] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aY3S4BOvRgscTcqsMBkDpAAAAMQ"]
[Thu Feb 12 21:17:21.385038 2026] [:error] [pid 46603:tid 46616] [client 51.103.142.43:64248] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aY3S4fEi6O39v05JNJd8_AAAAQs"]
[Thu Feb 12 21:17:22.998731 2026] [:error] [pid 46718:tid 46732] [client 51.103.142.43:8359] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aY3S4kdfX45LelQwruQelQAAAcs"]
[Thu Feb 12 21:17:23.781708 2026] [:error] [pid 46675:tid 46701] [client 51.103.142.43:65405] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aY3S4zuaQILPonWFiQluRwAAAVc"]
[Thu Feb 12 21:17:24.463763 2026] [:error] [pid 63511:tid 63535] [client 51.103.142.43:64629] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3S5KQCQbD5BgeyIk0ncAAAABY"]
[Thu Feb 12 21:17:25.488666 2026] [:error] [pid 63418:tid 63480] [client 51.103.142.43:39823] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3S5dzjh-bbJnStPZLvbgAAAIQ"]
[Thu Feb 12 21:17:26.202198 2026] [:error] [pid 46675:tid 46695] [client 51.103.142.43:8538] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3S5juaQILPonWFiQluSAAAAVE"]
[Thu Feb 12 21:17:26.993337 2026] [:error] [pid 63417:tid 63453] [client 51.103.142.43:8532] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aY3S5v8gSb97qRMtXCL04QAAAEQ"]
[Thu Feb 12 21:17:27.671798 2026] [:error] [pid 46718:tid 46725] [client 51.103.142.43:39825] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aY3S50dfX45LelQwruQemQAAAcQ"]
[Thu Feb 12 21:17:28.574193 2026] [:error] [pid 46675:tid 46686] [client 51.103.142.43:64954] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aY3S6DuaQILPonWFiQluSQAAAUg"]
[Thu Feb 12 21:17:29.264922 2026] [:error] [pid 46675:tid 46693] [client 51.103.142.43:65404] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aY3S6TuaQILPonWFiQluSwAAAU8"]
[Thu Feb 12 21:17:30.163823 2026] [:error] [pid 46675:tid 46679] [client 51.103.142.43:63681] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aY3S6juaQILPonWFiQluTQAAAUE"]
[Thu Feb 12 21:17:30.862264 2026] [:error] [pid 63416:tid 63444] [client 51.103.142.43:64975] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aY3S6r2wmecPaCHcM2_PlQAAAZc"]
[Thu Feb 12 21:17:31.574698 2026] [:error] [pid 46718:tid 46735] [client 51.103.142.43:39816] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aY3S60dfX45LelQwruQeoAAAAc4"]
[Thu Feb 12 21:17:32.223350 2026] [:error] [pid 46603:tid 46608] [client 51.103.142.43:64897] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aY3S7PEi6O39v05JNJd9BwAAAQM"]
[Thu Feb 12 21:17:32.959200 2026] [:error] [pid 65064:tid 65077] [client 51.103.142.43:65389] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aY3S7BOvRgscTcqsMBkDrgAAAMo"]
[Thu Feb 12 21:17:33.543501 2026] [:error] [pid 46675:tid 46698] [client 51.103.142.43:64563] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aY3S7TuaQILPonWFiQluUQAAAVQ"]
[Thu Feb 12 21:17:34.181150 2026] [:error] [pid 65064:tid 65071] [client 51.103.142.43:64964] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aY3S7hOvRgscTcqsMBkDsAAAAMQ"]
[Thu Feb 12 21:17:34.692756 2026] [:error] [pid 46718:tid 46736] [client 51.103.142.43:64562] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aY3S7kdfX45LelQwruQeoQAAAc8"]
[Thu Feb 12 21:17:35.858120 2026] [:error] [pid 63511:tid 63520] [client 51.103.142.43:65303] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aY3S76QCQbD5BgeyIk0ndgAAAAc"]
[Thu Feb 12 21:17:36.590469 2026] [:error] [pid 46718:tid 46731] [client 51.103.142.43:64196] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY3S8EdfX45LelQwruQeowAAAco"]
[Thu Feb 12 21:17:37.235453 2026] [:error] [pid 46718:tid 46725] [client 51.103.142.43:65391] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY3S8UdfX45LelQwruQepAAAAcQ"]
[Thu Feb 12 21:17:37.974790 2026] [:error] [pid 63417:tid 63461] [client 51.103.142.43:65313] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY3S8f8gSb97qRMtXCL05gAAAEw"]
[Thu Feb 12 21:17:38.926283 2026] [:error] [pid 46675:tid 46682] [client 51.103.142.43:65280] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY3S8juaQILPonWFiQluVwAAAUQ"]
[Thu Feb 12 21:17:39.480919 2026] [:error] [pid 46675:tid 46683] [client 51.103.142.43:39863] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aY3S8zuaQILPonWFiQluWgAAAUU"]
[Thu Feb 12 21:17:40.122975 2026] [:error] [pid 46675:tid 46692] [client 51.103.142.43:8344] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aY3S9DuaQILPonWFiQluWwAAAU4"]
[Thu Feb 12 21:17:40.669649 2026] [:error] [pid 63418:tid 63493] [client 51.103.142.43:64139] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aY3S9Nzjh-bbJnStPZLvcwAAAJE"]
[Thu Feb 12 21:17:41.321129 2026] [:error] [pid 65064:tid 65068] [client 51.103.142.43:64515] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aY3S9ROvRgscTcqsMBkDuAAAAME"]
[Thu Feb 12 21:17:42.247330 2026] [:error] [pid 46603:tid 46615] [client 51.103.142.43:8551] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3S9vEi6O39v05JNJd9DgAAAQo"]
[Thu Feb 12 21:17:42.937797 2026] [:error] [pid 63511:tid 63516] [client 51.103.142.43:65370] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3S9qQCQbD5BgeyIk0negAAAAM"]
[Thu Feb 12 21:17:43.755776 2026] [:error] [pid 46718:tid 46730] [client 51.103.142.43:65328] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3S90dfX45LelQwruQerAAAAck"]
[Thu Feb 12 21:17:44.548158 2026] [:error] [pid 46718:tid 46729] [client 51.103.142.43:64205] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY3S-EdfX45LelQwruQerQAAAcg"]
[Thu Feb 12 21:17:45.186771 2026] [:error] [pid 46603:tid 46610] [client 51.103.142.43:64908] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aY3S-fEi6O39v05JNJd9EAAAAQU"]
[Thu Feb 12 21:17:45.825481 2026] [:error] [pid 46603:tid 46626] [client 51.103.142.43:64976] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aY3S-fEi6O39v05JNJd9EgAAARU"]
[Thu Feb 12 21:17:46.437721 2026] [:error] [pid 65064:tid 65089] [client 51.103.142.43:64561] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aY3S-hOvRgscTcqsMBkDuwAAANY"]
[Thu Feb 12 21:17:47.238516 2026] [:error] [pid 46603:tid 46627] [client 51.103.142.43:64957] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aY3S-_Ei6O39v05JNJd9FQAAARY"]
[Thu Feb 12 21:17:47.759238 2026] [:error] [pid 63417:tid 63454] [client 51.103.142.43:64906] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aY3S-_8gSb97qRMtXCL06QAAAEU"]
[Thu Feb 12 21:17:48.452904 2026] [:error] [pid 63511:tid 63528] [client 51.103.142.43:64905] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aY3S_KQCQbD5BgeyIk0nfgAAAA8"]
[Thu Feb 12 21:17:49.004668 2026] [:error] [pid 63416:tid 63443] [client 51.103.142.43:64172] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aY3S_b2wmecPaCHcM2_PngAAAZY"]
[Thu Feb 12 21:17:49.667087 2026] [:error] [pid 65064:tid 65074] [client 51.103.142.43:64999] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aY3S_ROvRgscTcqsMBkDwAAAAMc"]
[Thu Feb 12 21:17:50.183036 2026] [:error] [pid 46718:tid 46723] [client 51.103.142.43:65401] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aY3S_kdfX45LelQwruQesAAAAcI"]
[Thu Feb 12 21:17:50.844700 2026] [:error] [pid 46675:tid 46679] [client 51.103.142.43:64980] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aY3S_juaQILPonWFiQluaAAAAUE"]
[Thu Feb 12 21:17:51.478216 2026] [:error] [pid 46718:tid 46721] [client 51.103.142.43:64524] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aY3S_0dfX45LelQwruQetAAAAcA"]
[Thu Feb 12 21:17:51.957506 2026] [:error] [pid 63416:tid 63422] [client 51.103.142.43:65297] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aY3S_72wmecPaCHcM2_PnwAAAYE"]
[Thu Feb 12 21:17:52.545254 2026] [:error] [pid 46603:tid 46616] [client 51.103.142.43:64193] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aY3TAPEi6O39v05JNJd9GAAAAQs"]
[Thu Feb 12 21:17:53.221679 2026] [:error] [pid 65064:tid 65090] [client 51.103.142.43:65323] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aY3TAROvRgscTcqsMBkDwwAAANc"]
[Thu Feb 12 21:17:53.871085 2026] [:error] [pid 46603:tid 46617] [client 51.103.142.43:64529] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aY3TAfEi6O39v05JNJd9GQAAAQw"]
[Thu Feb 12 21:17:55.769311 2026] [:error] [pid 63418:tid 63486] [client 51.103.142.43:8560] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aY3TA9zjh-bbJnStPZLvfAAAAIo"]
[Thu Feb 12 21:17:56.420897 2026] [:error] [pid 46718:tid 46739] [client 51.103.142.43:8520] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aY3TBEdfX45LelQwruQevgAAAdI"]
[Thu Feb 12 21:17:56.940902 2026] [:error] [pid 63418:tid 63482] [client 51.103.142.43:8575] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aY3TBNzjh-bbJnStPZLvfQAAAIY"]
[Thu Feb 12 21:17:57.459087 2026] [:error] [pid 46675:tid 46698] [client 51.103.142.43:8529] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aY3TBTuaQILPonWFiQlubgAAAVQ"]
[Thu Feb 12 21:17:58.381098 2026] [proxy_fcgi:error] [pid 46675:tid 46691] [client 51.103.142.43:63706] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:17:59.123829 2026] [proxy_fcgi:error] [pid 46675:tid 46683] [client 51.103.142.43:63706] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:17:59.396789 2026] [:error] [pid 46675:tid 46692] [client 51.103.142.43:63706] [client 51.103.142.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aY3TBzuaQILPonWFiQludgAAAU4"]
[Thu Feb 12 21:18:00.053059 2026] [proxy_fcgi:error] [pid 63416:tid 63429] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:00.295539 2026] [proxy_fcgi:error] [pid 63416:tid 63426] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:00.538073 2026] [proxy_fcgi:error] [pid 63416:tid 63434] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:00.834922 2026] [proxy_fcgi:error] [pid 63416:tid 63430] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:01.078620 2026] [proxy_fcgi:error] [pid 63416:tid 63423] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:01.364661 2026] [proxy_fcgi:error] [pid 63416:tid 63432] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:01.616658 2026] [proxy_fcgi:error] [pid 63416:tid 63442] [client 51.103.142.43:39822] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:18:01.900876 2026] [:error] [pid 63416:tid 63422] [client 51.103.142.43:39822] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY3TCb2wmecPaCHcM2_PrwAAAYE"]
[Thu Feb 12 21:18:02.446157 2026] [:error] [pid 46675:tid 46679] [client 51.103.142.43:64525] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY3TCjuaQILPonWFiQlueQAAAUE"]
[Thu Feb 12 21:18:02.981863 2026] [:error] [pid 63416:tid 63444] [client 51.103.142.43:64991] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY3TCr2wmecPaCHcM2_PsQAAAZc"]
[Thu Feb 12 21:18:03.514962 2026] [:error] [pid 46718:tid 46734] [client 51.103.142.43:64164] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY3TC0dfX45LelQwruQewQAAAc0"]
[Thu Feb 12 21:18:04.107035 2026] [:error] [pid 46718:tid 46740] [client 51.103.142.43:65283] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aY3TDEdfX45LelQwruQewgAAAdM"]
[Thu Feb 12 21:18:04.595683 2026] [:error] [pid 63418:tid 63490] [client 51.103.142.43:65334] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aY3TDNzjh-bbJnStPZLvgwAAAI4"]
[Thu Feb 12 21:18:05.099852 2026] [:error] [pid 46718:tid 46724] [client 51.103.142.43:65286] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aY3TDUdfX45LelQwruQexAAAAcM"]
[Thu Feb 12 21:18:05.658678 2026] [:error] [pid 46718:tid 46729] [client 51.103.142.43:8372] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aY3TDUdfX45LelQwruQexQAAAcg"]
[Thu Feb 12 21:18:06.211737 2026] [:error] [pid 46718:tid 46727] [client 51.103.142.43:8320] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aY3TDkdfX45LelQwruQexgAAAcY"]
[Thu Feb 12 21:18:06.768919 2026] [:error] [pid 46675:tid 46695] [client 51.103.142.43:64965] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aY3TDjuaQILPonWFiQlufAAAAVE"]
[Thu Feb 12 21:18:07.866022 2026] [:error] [pid 46603:tid 46609] [client 51.103.142.43:8533] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aY3TD_Ei6O39v05JNJd9JQAAAQQ"]
[Thu Feb 12 21:18:08.967331 2026] [:error] [pid 46675:tid 46689] [client 51.103.142.43:39858] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aY3TEDuaQILPonWFiQlufwAAAUs"]
[Thu Feb 12 21:18:09.706823 2026] [:error] [pid 65064:tid 65082] [client 51.103.142.43:65292] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aY3TEROvRgscTcqsMBkD0AAAAM8"]
[Thu Feb 12 21:18:10.740149 2026] [:error] [pid 63418:tid 63496] [client 51.103.142.43:64950] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aY3TEtzjh-bbJnStPZLviAAAAJQ"]
[Thu Feb 12 21:18:11.810721 2026] [:error] [pid 46675:tid 46686] [client 51.103.142.43:64624] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aY3TEzuaQILPonWFiQluggAAAUg"]
[Thu Feb 12 21:18:12.837632 2026] [:error] [pid 46718:tid 46737] [client 51.103.142.43:64206] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aY3TFEdfX45LelQwruQeywAAAdA"]
[Thu Feb 12 21:18:15.292357 2026] [:error] [pid 46718:tid 46740] [client 51.103.142.43:64932] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aY3TF0dfX45LelQwruQezwAAAdM"]
[Thu Feb 12 21:18:17.296996 2026] [:error] [pid 63511:tid 63535] [client 51.103.142.43:65349] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aY3TGaQCQbD5BgeyIk0nkAAAABY"]
[Thu Feb 12 21:18:17.890847 2026] [:error] [pid 63511:tid 63525] [client 51.103.142.43:64535] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aY3TGaQCQbD5BgeyIk0nkQAAAAw"]
[Thu Feb 12 21:18:20.796297 2026] [:error] [pid 63511:tid 63515] [client 51.103.142.43:65004] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aY3THKQCQbD5BgeyIk0nlgAAAAI"]
[Thu Feb 12 21:18:22.372058 2026] [:error] [pid 46718:tid 46739] [client 51.103.142.43:8528] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aY3THkdfX45LelQwruQe1wAAAdI"]
[Thu Feb 12 21:18:26.874952 2026] [:error] [pid 65064:tid 65091] [client 51.103.142.43:64941] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aY3TIhOvRgscTcqsMBkD2wAAANg"]
[Thu Feb 12 21:18:27.488960 2026] [:error] [pid 63511:tid 63536] [client 51.103.142.43:65363] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aY3TI6QCQbD5BgeyIk0nlwAAABc"]
[Thu Feb 12 21:18:28.491393 2026] [:error] [pid 46718:tid 46731] [client 51.103.142.43:8377] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aY3TJEdfX45LelQwruQe6gAAAco"]
[Thu Feb 12 21:18:29.330062 2026] [:error] [pid 46718:tid 46729] [client 51.103.142.43:64252] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aY3TJUdfX45LelQwruQe7gAAAcg"]
[Thu Feb 12 21:18:30.824182 2026] [:error] [pid 63418:tid 63494] [client 51.103.142.43:65376] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aY3TJtzjh-bbJnStPZLvlAAAAJI"]
[Thu Feb 12 21:18:31.351536 2026] [:error] [pid 65064:tid 65068] [client 51.103.142.43:64152] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aY3TJxOvRgscTcqsMBkD3AAAAME"]
[Thu Feb 12 21:18:31.911703 2026] [:error] [pid 46603:tid 46623] [client 51.103.142.43:8350] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blurbs18.php"] [unique_id "aY3TJ_Ei6O39v05JNJd9NAAAARI"]
[Thu Feb 12 21:18:32.630719 2026] [:error] [pid 63511:tid 63524] [client 51.103.142.43:65341] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY3TKKQCQbD5BgeyIk0nnQAAAAs"]
[Thu Feb 12 21:18:33.155807 2026] [:error] [pid 46603:tid 46610] [client 51.103.142.43:64216] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY3TKfEi6O39v05JNJd9NQAAAQU"]
[Thu Feb 12 21:18:33.785986 2026] [:error] [pid 46603:tid 46629] [client 51.103.142.43:65002] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY3TKfEi6O39v05JNJd9NgAAARg"]
[Thu Feb 12 21:18:34.597336 2026] [:error] [pid 63417:tid 63469] [client 51.103.142.43:64596] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY3TKv8gSb97qRMtXCL1EAAAAFQ"]
[Thu Feb 12 21:18:35.138813 2026] [:error] [pid 46603:tid 46607] [client 51.103.142.43:8367] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3TK_Ei6O39v05JNJd9NwAAAQI"]
[Thu Feb 12 21:18:36.141431 2026] [:error] [pid 65064:tid 65088] [client 51.103.142.43:65008] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3TLBOvRgscTcqsMBkD3wAAANU"]
[Thu Feb 12 21:18:36.724442 2026] [:error] [pid 63417:tid 63470] [client 51.103.142.43:8341] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3TLP8gSb97qRMtXCL1EwAAAFU"]
[Thu Feb 12 21:18:37.362879 2026] [:error] [pid 46603:tid 46606] [client 51.103.142.43:8556] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aY3TLfEi6O39v05JNJd9OwAAAQE"]
[Thu Feb 12 21:18:37.865271 2026] [:error] [pid 65064:tid 65079] [client 51.103.142.43:64129] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aY3TLROvRgscTcqsMBkD4QAAAMw"]
[Thu Feb 12 21:18:38.436604 2026] [:error] [pid 63418:tid 63482] [client 51.103.142.43:39808] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aY3TLtzjh-bbJnStPZLvmwAAAIY"]
[Thu Feb 12 21:18:39.382382 2026] [:error] [pid 63416:tid 63442] [client 51.103.142.43:64543] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aY3TL72wmecPaCHcM2_PwwAAAZU"]
[Thu Feb 12 21:18:40.314410 2026] [:error] [pid 63418:tid 63484] [client 51.103.142.43:64992] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aY3TMNzjh-bbJnStPZLvoQAAAIg"]
[Thu Feb 12 21:18:40.973872 2026] [:error] [pid 63416:tid 63443] [client 51.103.142.43:64940] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY3TML2wmecPaCHcM2_PxAAAAZY"]
[Thu Feb 12 21:18:41.686856 2026] [:error] [pid 65064:tid 65083] [client 51.103.142.43:65011] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY3TMROvRgscTcqsMBkD5QAAANA"]
[Thu Feb 12 21:18:43.733873 2026] [:error] [pid 63417:tid 63461] [client 51.103.142.43:64579] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY3TM_8gSb97qRMtXCL1GgAAAEw"]
[Thu Feb 12 21:18:46.343789 2026] [:error] [pid 63416:tid 63434] [client 51.103.142.43:64996] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aY3TNr2wmecPaCHcM2_PyAAAAY0"]
[Thu Feb 12 21:18:49.124455 2026] [:error] [pid 63416:tid 63431] [client 51.103.142.43:65354] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3TOb2wmecPaCHcM2_PzQAAAYo"]
[Thu Feb 12 21:18:50.386028 2026] [:error] [pid 46718:tid 46724] [client 51.103.142.43:65302] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3TOkdfX45LelQwruQe_gAAAcM"]
[Thu Feb 12 21:18:52.415945 2026] [:error] [pid 46718:tid 46734] [client 51.103.142.43:8543] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3TPEdfX45LelQwruQfAwAAAc0"]
[Thu Feb 12 21:18:54.633527 2026] [:error] [pid 63417:tid 63472] [client 51.103.142.43:64987] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY3TPv8gSb97qRMtXCL1HwAAAFc"]
[Thu Feb 12 21:18:55.612881 2026] [:error] [pid 63417:tid 63463] [client 51.103.142.43:8342] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aY3TP_8gSb97qRMtXCL1JAAAAE4"]
[Thu Feb 12 21:18:57.784177 2026] [:error] [pid 63417:tid 63460] [client 51.103.142.43:8522] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aY3TQf8gSb97qRMtXCL1LAAAAEs"]
[Thu Feb 12 21:18:59.412727 2026] [:error] [pid 65064:tid 65076] [client 51.103.142.43:64189] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aY3TQxOvRgscTcqsMBkD7gAAAMk"]
[Thu Feb 12 21:19:00.225210 2026] [:error] [pid 63511:tid 63526] [client 51.103.142.43:63683] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aY3TRKQCQbD5BgeyIk0nugAAAA0"]
[Thu Feb 12 21:19:01.153154 2026] [proxy_fcgi:error] [pid 63418:tid 63498] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:01.393743 2026] [proxy_fcgi:error] [pid 63418:tid 63487] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:02.070696 2026] [proxy_fcgi:error] [pid 63418:tid 63492] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:02.313059 2026] [proxy_fcgi:error] [pid 63418:tid 63481] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:02.553298 2026] [proxy_fcgi:error] [pid 63418:tid 63483] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:02.793727 2026] [proxy_fcgi:error] [pid 63418:tid 63488] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:03.044186 2026] [proxy_fcgi:error] [pid 63418:tid 63493] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:03.702817 2026] [proxy_fcgi:error] [pid 63418:tid 63482] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:03.966854 2026] [proxy_fcgi:error] [pid 63418:tid 63495] [client 51.103.142.43:64189] AH01071: Got error 'Primary script unknown'
[Thu Feb 12 21:19:04.204139 2026] [:error] [pid 63418:tid 63490] [client 51.103.142.43:64189] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aY3TSNzjh-bbJnStPZLvuAAAAI4"]
[Thu Feb 12 21:19:04.747050 2026] [:error] [pid 46718:tid 46742] [client 51.103.142.43:65023] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aY3TSEdfX45LelQwruQfEAAAAdU"]
[Thu Feb 12 21:19:05.303920 2026] [:error] [pid 46603:tid 46619] [client 51.103.142.43:65366] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aY3TSfEi6O39v05JNJd9VgAAAQ4"]
[Thu Feb 12 21:19:05.888207 2026] [:error] [pid 63417:tid 63454] [client 51.103.142.43:64584] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aY3TSf8gSb97qRMtXCL1MQAAAEU"]
[Thu Feb 12 21:19:06.629043 2026] [:error] [pid 63418:tid 63479] [client 51.103.142.43:8352] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aY3TStzjh-bbJnStPZLvvwAAAIM"]
[Thu Feb 12 21:19:07.234175 2026] [:error] [pid 63511:tid 63518] [client 51.103.142.43:8513] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aY3TS6QCQbD5BgeyIk0n1wAAAAU"]
[Thu Feb 12 21:19:08.178823 2026] [:error] [pid 63417:tid 63456] [client 51.103.142.43:64586] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aY3TTP8gSb97qRMtXCL1NQAAAEc"]
[Thu Feb 12 21:19:08.937157 2026] [:error] [pid 46718:tid 46738] [client 51.103.142.43:65359] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aY3TTEdfX45LelQwruQfLwAAAdE"]
[Thu Feb 12 21:19:09.547130 2026] [:error] [pid 46603:tid 46619] [client 51.103.142.43:65339] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aY3TTfEi6O39v05JNJd9ZQAAAQ4"]
[Thu Feb 12 21:19:10.440509 2026] [:error] [pid 63416:tid 63445] [client 51.103.142.43:64621] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aY3TTr2wmecPaCHcM2_P2AAAAZg"]
[Thu Feb 12 21:19:11.070117 2026] [:error] [pid 63417:tid 63470] [client 51.103.142.43:65281] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aY3TT_8gSb97qRMtXCL1PQAAAFU"]
[Thu Feb 12 21:19:11.799681 2026] [:error] [pid 46603:tid 46606] [client 51.103.142.43:39871] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aY3TT_Ei6O39v05JNJd9bAAAAQE"]
[Thu Feb 12 21:19:12.330013 2026] [:error] [pid 65064:tid 65073] [client 51.103.142.43:65379] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aY3TUBOvRgscTcqsMBkD-QAAAMY"]
[Thu Feb 12 21:19:12.840349 2026] [:error] [pid 46675:tid 46701] [client 51.103.142.43:64576] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aY3TUDuaQILPonWFiQluvgAAAVc"]
[Thu Feb 12 21:19:13.407821 2026] [:error] [pid 46675:tid 46697] [client 51.103.142.43:39868] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aY3TUTuaQILPonWFiQluwgAAAVM"]
[Thu Feb 12 21:19:14.079806 2026] [:error] [pid 63417:tid 63460] [client 51.103.142.43:8536] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aY3TUv8gSb97qRMtXCL1QQAAAEs"]
[Thu Feb 12 21:19:14.570170 2026] [:error] [pid 63511:tid 63529] [client 51.103.142.43:64939] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aY3TUqQCQbD5BgeyIk0n4wAAABA"]
[Thu Feb 12 21:19:15.180201 2026] [:error] [pid 63416:tid 63430] [client 51.103.142.43:8515] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aY3TU72wmecPaCHcM2_P3AAAAYk"]
[Thu Feb 12 21:19:15.861891 2026] [:error] [pid 63417:tid 63449] [client 51.103.142.43:8540] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aY3TU_8gSb97qRMtXCL1QwAAAEA"]
[Thu Feb 12 21:19:16.426399 2026] [:error] [pid 63511:tid 63518] [client 51.103.142.43:39811] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aY3TVKQCQbD5BgeyIk0n5QAAAAU"]
[Thu Feb 12 21:19:16.922897 2026] [:error] [pid 46675:tid 46699] [client 51.103.142.43:64158] [client 51.103.142.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aY3TVDuaQILPonWFiQluyAAAAVU"]
[Thu Feb 12 21:19:17.423065 2026] [:error] [pid 46675:tid 46698] [client 51.103.142.43:64637] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aY3TVTuaQILPonWFiQluyQAAAVQ"]
[Thu Feb 12 21:19:18.095961 2026] [:error] [pid 46675:tid 46694] [client 51.103.142.43:64553] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aY3TVjuaQILPonWFiQluywAAAVA"]
[Thu Feb 12 21:19:18.804672 2026] [:error] [pid 65064:tid 65079] [client 51.103.142.43:64225] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aY3TVhOvRgscTcqsMBkEAgAAAMw"]
[Thu Feb 12 21:19:19.543324 2026] [:error] [pid 46718:tid 46742] [client 51.103.142.43:65301] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "aY3TV0dfX45LelQwruQfOwAAAdU"]
[Thu Feb 12 21:19:20.099897 2026] [:error] [pid 46718:tid 46745] [client 51.103.142.43:8322] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aY3TWEdfX45LelQwruQfPQAAAdg"]
[Thu Feb 12 21:19:20.644867 2026] [:error] [pid 63511:tid 63537] [client 51.103.142.43:8357] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aY3TWKQCQbD5BgeyIk0n5gAAABg"]
[Thu Feb 12 21:19:21.165742 2026] [:error] [pid 46603:tid 46610] [client 51.103.142.43:64175] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aY3TWfEi6O39v05JNJd9cgAAAQU"]
[Thu Feb 12 21:19:21.681405 2026] [:error] [pid 46718:tid 46737] [client 51.103.142.43:64531] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nyan.php"] [unique_id "aY3TWUdfX45LelQwruQfPwAAAdA"]
[Thu Feb 12 21:19:22.244886 2026] [:error] [pid 46675:tid 46681] [client 51.103.142.43:8567] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aY3TWjuaQILPonWFiQlu0gAAAUM"]
[Thu Feb 12 21:19:22.848392 2026] [:error] [pid 46718:tid 46725] [client 51.103.142.43:65018] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aY3TWkdfX45LelQwruQfQwAAAcQ"]
[Thu Feb 12 21:19:23.486787 2026] [:error] [pid 63511:tid 63524] [client 51.103.142.43:8326] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aY3TW6QCQbD5BgeyIk0n6gAAAAs"]
[Thu Feb 12 21:19:23.991123 2026] [:error] [pid 63416:tid 63427] [client 51.103.142.43:64902] [client 51.103.142.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aY3TW72wmecPaCHcM2_P5QAAAYY"]
[Thu Feb 12 21:19:24.639101 2026] [:error] [pid 63511:tid 63532] [client 51.103.142.43:65282] [client 51.103.142.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-mail.php"] [unique_id "aY3TXKQCQbD5BgeyIk0n7AAAABM"]
[Thu Feb 12 22:48:26.149112 2026] [:error] [pid 46718:tid 46735] [client 103.77.107.222:65325] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aY3oOkdfX45LelQwruRD6AAAAc4"]
[Thu Feb 12 22:48:26.367723 2026] [:error] [pid 65064:tid 65067] [client 103.77.107.222:65352] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aY3oOhOvRgscTcqsMBkcUAAAAMA"]
[Thu Feb 12 23:50:53.600350 2026] [:error] [pid 65064:tid 65067] [client 185.138.88.133:48344] [client 185.138.88.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aY323ROvRgscTcqsMBksPAAAAMA"]
[Fri Feb 13 01:27:21.737970 2026] [proxy_fcgi:error] [pid 23410:tid 23419] [client 20.111.48.18:19346] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:27:23.770161 2026] [:error] [pid 23410:tid 23431] [client 20.111.48.18:19346] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aY4NexXZP6NFBacuW_0hcAAAAJM"]
[Fri Feb 13 01:27:26.344043 2026] [proxy_fcgi:error] [pid 37510:tid 37518] [client 20.111.48.18:36112] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:27:27.102431 2026] [:error] [pid 37510:tid 37516] [client 20.111.48.18:36112] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4Nf8UrqDPNSf1wYBWV-gAAAYA"]
[Fri Feb 13 01:27:29.921945 2026] [:error] [pid 23410:tid 23432] [client 20.111.48.18:56605] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4NgRXZP6NFBacuW_0hgAAAAJQ"]
[Fri Feb 13 01:27:33.225038 2026] [:error] [pid 37510:tid 37534] [client 20.111.48.18:26779] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4NhcUrqDPNSf1wYBWWBwAAAZI"]
[Fri Feb 13 01:27:34.455811 2026] [:error] [pid 37512:tid 37624] [client 20.111.48.18:56064] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY4NhtDe69znS-f6vSZJfwAAAA4"]
[Fri Feb 13 01:27:43.057568 2026] [:error] [pid 37856:tid 37862] [client 20.111.48.18:26774] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/log.php"] [unique_id "aY4Nj5UcWP4qWM7hWskHBAAAAMM"]
[Fri Feb 13 01:27:46.025143 2026] [:error] [pid 37512:tid 37627] [client 20.111.48.18:31355] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/log.php"] [unique_id "aY4NktDe69znS-f6vSZJkgAAABE"]
[Fri Feb 13 01:27:59.157645 2026] [:error] [pid 37510:tid 37538] [client 20.111.48.18:56905] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY4Nn8UrqDPNSf1wYBWWQQAAAZY"]
[Fri Feb 13 01:28:01.729520 2026] [:error] [pid 23410:tid 23427] [client 20.111.48.18:17856] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY4NoRXZP6NFBacuW_0hzAAAAI8"]
[Fri Feb 13 01:28:03.052171 2026] [:error] [pid 23410:tid 23412] [client 20.111.48.18:36199] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY4NoxXZP6NFBacuW_0hzwAAAIA"]
[Fri Feb 13 01:28:04.039315 2026] [:error] [pid 37510:tid 37523] [client 20.111.48.18:36217] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aY4NpMUrqDPNSf1wYBWWTQAAAYc"]
[Fri Feb 13 01:28:05.700247 2026] [:error] [pid 37511:tid 37591] [client 20.111.48.18:36211] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aY4Npe8EBJ86uZdxpA19ZQAAAEo"]
[Fri Feb 13 01:28:06.777806 2026] [:error] [pid 37511:tid 37598] [client 20.111.48.18:26793] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aY4Npu8EBJ86uZdxpA19ZgAAAFE"]
[Fri Feb 13 01:28:10.107852 2026] [:error] [pid 37510:tid 37522] [client 20.111.48.18:27565] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aY4NqsUrqDPNSf1wYBWWWgAAAYY"]
[Fri Feb 13 01:28:16.436886 2026] [:error] [pid 37511:tid 37580] [client 20.111.48.18:26765] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless5.php"] [unique_id "aY4NsO8EBJ86uZdxpA19dgAAAEA"]
[Fri Feb 13 01:28:19.920564 2026] [:error] [pid 37512:tid 37616] [client 20.111.48.18:19388] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY4Ns9De69znS-f6vSZJ3QAAAAc"]
[Fri Feb 13 01:28:23.960646 2026] [:error] [pid 37512:tid 37612] [client 20.111.48.18:5578] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY4Nt9De69znS-f6vSZJ6QAAAAQ"]
[Fri Feb 13 01:28:26.877618 2026] [proxy_fcgi:error] [pid 37512:tid 37620] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:27.241582 2026] [proxy_fcgi:error] [pid 37512:tid 37634] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:27.499267 2026] [proxy_fcgi:error] [pid 37512:tid 37611] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:27.787362 2026] [proxy_fcgi:error] [pid 37512:tid 37629] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:28.056412 2026] [proxy_fcgi:error] [pid 37512:tid 37612] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:28.340514 2026] [proxy_fcgi:error] [pid 37512:tid 37633] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:28.587770 2026] [proxy_fcgi:error] [pid 37512:tid 37635] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:28.838767 2026] [proxy_fcgi:error] [pid 37512:tid 37618] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:29.078201 2026] [proxy_fcgi:error] [pid 37512:tid 37617] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:29.319858 2026] [proxy_fcgi:error] [pid 37512:tid 37630] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:29.560543 2026] [proxy_fcgi:error] [pid 37512:tid 37623] [client 20.111.48.18:26787] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:28:29.870875 2026] [:error] [pid 37512:tid 37613] [client 20.111.48.18:26787] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2clas.php"] [unique_id "aY4NvdDe69znS-f6vSZJ_AAAAAU"]
[Fri Feb 13 01:28:33.516494 2026] [:error] [pid 37856:tid 37873] [client 20.111.48.18:31321] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2clas.php"] [unique_id "aY4NwZUcWP4qWM7hWskHYwAAAM4"]
[Fri Feb 13 01:28:35.837207 2026] [:error] [pid 37856:tid 37879] [client 20.111.48.18:31330] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2clas.php"] [unique_id "aY4Nw5UcWP4qWM7hWskHZwAAANQ"]
[Fri Feb 13 01:28:40.949496 2026] [:error] [pid 37510:tid 37537] [client 20.111.48.18:19363] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2clas.php"] [unique_id "aY4NyMUrqDPNSf1wYBWWvwAAAZU"]
[Fri Feb 13 01:28:42.838253 2026] [:error] [pid 23410:tid 23416] [client 20.111.48.18:31314] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ave.php"] [unique_id "aY4NyhXZP6NFBacuW_0iSwAAAIQ"]
[Fri Feb 13 01:28:46.873500 2026] [:error] [pid 37512:tid 37616] [client 20.111.48.18:28693] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ave.php"] [unique_id "aY4NztDe69znS-f6vSZKEwAAAAc"]
[Fri Feb 13 01:28:49.218060 2026] [:error] [pid 23410:tid 23432] [client 20.111.48.18:30229] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ave.php"] [unique_id "aY4N0RXZP6NFBacuW_0iWQAAAJQ"]
[Fri Feb 13 01:28:51.173671 2026] [:error] [pid 37511:tid 37586] [client 20.111.48.18:5601] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ave.php"] [unique_id "aY4N0-8EBJ86uZdxpA192gAAAEU"]
[Fri Feb 13 01:28:56.816063 2026] [:error] [pid 37512:tid 37612] [client 20.111.48.18:36139] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wrt.php"] [unique_id "aY4N2NDe69znS-f6vSZKKgAAAAQ"]
[Fri Feb 13 01:29:28.946886 2026] [:error] [pid 23410:tid 23423] [client 20.111.48.18:17916] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bibil.php"] [unique_id "aY4N-BXZP6NFBacuW_0jBwAAAIs"]
[Fri Feb 13 01:30:07.996366 2026] [proxy_fcgi:error] [pid 23410:tid 23412] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:08.295070 2026] [proxy_fcgi:error] [pid 23410:tid 23414] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:08.534984 2026] [proxy_fcgi:error] [pid 23410:tid 23415] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:08.829447 2026] [proxy_fcgi:error] [pid 23410:tid 23423] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:09.440966 2026] [proxy_fcgi:error] [pid 23410:tid 23434] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:09.735795 2026] [proxy_fcgi:error] [pid 23410:tid 23431] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:10.011508 2026] [proxy_fcgi:error] [pid 23410:tid 23433] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:10.263018 2026] [proxy_fcgi:error] [pid 23410:tid 23418] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:10.550076 2026] [proxy_fcgi:error] [pid 23410:tid 23432] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:10.789081 2026] [proxy_fcgi:error] [pid 23410:tid 23429] [client 20.111.48.18:26382] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:30:11.060990 2026] [:error] [pid 23410:tid 23414] [client 20.111.48.18:26382] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "aY4OIxXZP6NFBacuW_0jmwAAAII"]
[Fri Feb 13 01:30:40.138633 2026] [:error] [pid 37511:tid 37580] [client 20.111.48.18:31992] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "aY4OQO8EBJ86uZdxpA1-ngAAAEA"]
[Fri Feb 13 01:30:42.270717 2026] [:error] [pid 23410:tid 23413] [client 20.111.48.18:33888] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "aY4OQhXZP6NFBacuW_0j2QAAAIE"]
[Fri Feb 13 01:30:54.350681 2026] [:error] [pid 37511:tid 37587] [client 20.111.48.18:14937] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aY4OTu8EBJ86uZdxpA1-tAAAAEY"]
[Fri Feb 13 01:30:56.418298 2026] [:error] [pid 23410:tid 23430] [client 20.111.48.18:14090] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aY4OUBXZP6NFBacuW_0j-AAAAJI"]
[Fri Feb 13 01:30:58.095048 2026] [:error] [pid 37510:tid 37537] [client 20.111.48.18:29492] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aY4OUsUrqDPNSf1wYBWX8wAAAZU"]
[Fri Feb 13 01:31:00.394165 2026] [:error] [pid 37856:tid 37871] [client 20.111.48.18:31968] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aY4OVJUcWP4qWM7hWskIqAAAAMw"]
[Fri Feb 13 01:31:02.553766 2026] [:error] [pid 37856:tid 37867] [client 20.111.48.18:31463] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aY4OVpUcWP4qWM7hWskIrwAAAMg"]
[Fri Feb 13 01:31:04.992427 2026] [:error] [pid 37511:tid 37583] [client 20.111.48.18:5332] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aY4OWO8EBJ86uZdxpA1-wgAAAEM"]
[Fri Feb 13 01:31:07.219426 2026] [:error] [pid 37856:tid 37866] [client 20.111.48.18:28239] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aY4OW5UcWP4qWM7hWskIvgAAAMc"]
[Fri Feb 13 01:31:08.466322 2026] [:error] [pid 37510:tid 37535] [client 20.111.48.18:14117] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aY4OXMUrqDPNSf1wYBWX_wAAAZM"]
[Fri Feb 13 01:31:10.741443 2026] [proxy_fcgi:error] [pid 37511:tid 37593] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:11.009181 2026] [proxy_fcgi:error] [pid 37511:tid 37601] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:11.288238 2026] [proxy_fcgi:error] [pid 37511:tid 37583] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:11.576779 2026] [proxy_fcgi:error] [pid 37511:tid 37589] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:11.877705 2026] [proxy_fcgi:error] [pid 37511:tid 37591] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:12.183497 2026] [proxy_fcgi:error] [pid 37511:tid 37590] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:13.737906 2026] [proxy_fcgi:error] [pid 37511:tid 37603] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:14.026606 2026] [proxy_fcgi:error] [pid 37511:tid 37592] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:14.318837 2026] [proxy_fcgi:error] [pid 37511:tid 37593] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:14.591443 2026] [proxy_fcgi:error] [pid 37511:tid 37601] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:14.895394 2026] [proxy_fcgi:error] [pid 37511:tid 37583] [client 20.111.48.18:33176] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 01:31:15.182467 2026] [:error] [pid 37511:tid 37588] [client 20.111.48.18:33176] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova.php"] [unique_id "aY4OY-8EBJ86uZdxpA1-3gAAAEc"]
[Fri Feb 13 01:31:18.753974 2026] [:error] [pid 37856:tid 37879] [client 20.111.48.18:16963] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova.php"] [unique_id "aY4OZpUcWP4qWM7hWskI0wAAANQ"]
[Fri Feb 13 01:31:33.902372 2026] [:error] [pid 23410:tid 23429] [client 20.111.48.18:52009] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aY4OdRXZP6NFBacuW_0kVwAAAJE"]
[Fri Feb 13 01:31:35.519377 2026] [:error] [pid 23410:tid 23413] [client 20.111.48.18:14100] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aY4OdxXZP6NFBacuW_0kXwAAAIE"]
[Fri Feb 13 01:31:39.208782 2026] [:error] [pid 37512:tid 37608] [client 20.111.48.18:52030] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aY4Oe9De69znS-f6vSZLagAAAAA"]
[Fri Feb 13 01:31:45.085049 2026] [:error] [pid 23410:tid 23425] [client 20.111.48.18:31456] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aY4OgRXZP6NFBacuW_0kdQAAAI0"]
[Fri Feb 13 01:31:46.816156 2026] [:error] [pid 37511:tid 37592] [client 20.111.48.18:20424] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aY4Ogu8EBJ86uZdxpA1_IgAAAEs"]
[Fri Feb 13 01:31:52.881956 2026] [:error] [pid 37512:tid 37619] [client 20.111.48.18:25717] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aY4OiNDe69znS-f6vSZLjwAAAAo"]
[Fri Feb 13 04:17:36.173198 2026] [proxy_fcgi:error] [pid 49223:tid 49249] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:36.528180 2026] [proxy_fcgi:error] [pid 49223:tid 49251] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:36.798740 2026] [proxy_fcgi:error] [pid 49223:tid 49237] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:37.065540 2026] [proxy_fcgi:error] [pid 49223:tid 49248] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:37.336639 2026] [proxy_fcgi:error] [pid 49223:tid 49236] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:37.600898 2026] [proxy_fcgi:error] [pid 49223:tid 49241] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:37.865400 2026] [proxy_fcgi:error] [pid 49223:tid 49234] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:38.142381 2026] [proxy_fcgi:error] [pid 49223:tid 49253] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:38.419031 2026] [proxy_fcgi:error] [pid 49223:tid 49238] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:38.693785 2026] [proxy_fcgi:error] [pid 49223:tid 49250] [client 51.120.78.0:27929] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:17:39.092804 2026] [:error] [pid 49223:tid 49249] [client 51.120.78.0:27929] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY41Yx8A_fZBamNLnfUSdgAAABE"]
[Fri Feb 13 04:17:41.504013 2026] [:error] [pid 49225:tid 49307] [client 51.120.78.0:24363] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY41ZTwH8-zGxtAd3ju26gAAAI0"]
[Fri Feb 13 04:17:45.716063 2026] [:error] [pid 49223:tid 49253] [client 51.120.78.0:24811] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY41aR8A_fZBamNLnfUSiQAAABU"]
[Fri Feb 13 04:17:47.287633 2026] [:error] [pid 49224:tid 49282] [client 51.120.78.0:23605] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY41a9iAvPoWmw5YhwlrMQAAAE8"]
[Fri Feb 13 04:18:09.262912 2026] [:error] [pid 49335:tid 49346] [client 51.120.78.0:52161] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/l3gi0n.php"] [unique_id "aY41gap--SFY2nwOiqkBaAAAAMk"]
[Fri Feb 13 04:18:11.701608 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:30031] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/l3gi0n.php"] [unique_id "aY41gx8A_fZBamNLnfUSpwAAAAg"]
[Fri Feb 13 04:18:23.430585 2026] [:error] [pid 49223:tid 49232] [client 51.120.78.0:52217] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sldnjqlm.php"] [unique_id "aY41jx8A_fZBamNLnfUStAAAAAA"]
[Fri Feb 13 04:18:24.879540 2026] [:error] [pid 49223:tid 49235] [client 51.120.78.0:46134] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sldnjqlm.php"] [unique_id "aY41kB8A_fZBamNLnfUSuQAAAAM"]
[Fri Feb 13 04:18:30.418091 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:27578] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sldnjqlm.php"] [unique_id "aY41ltiAvPoWmw5YhwlrZQAAAEI"]
[Fri Feb 13 04:18:32.849007 2026] [:error] [pid 51243:tid 51260] [client 51.120.78.0:18896] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sldnjqlm.php"] [unique_id "aY41mMim7ZTAHzi7xZujqgAAAQ8"]
[Fri Feb 13 04:18:33.804990 2026] [:error] [pid 49224:tid 49269] [client 51.120.78.0:26859] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3.php"] [unique_id "aY41mdiAvPoWmw5YhwlrcgAAAEI"]
[Fri Feb 13 04:19:03.637364 2026] [proxy_fcgi:error] [pid 51243:tid 51254] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:04.009517 2026] [proxy_fcgi:error] [pid 51243:tid 51245] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:04.273026 2026] [proxy_fcgi:error] [pid 51243:tid 51262] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:04.569197 2026] [proxy_fcgi:error] [pid 51243:tid 51249] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:04.832365 2026] [proxy_fcgi:error] [pid 51243:tid 51264] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:05.094666 2026] [proxy_fcgi:error] [pid 51243:tid 51261] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:05.449480 2026] [proxy_fcgi:error] [pid 51243:tid 51253] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:05.721004 2026] [proxy_fcgi:error] [pid 51243:tid 51263] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:05.994965 2026] [proxy_fcgi:error] [pid 51243:tid 51252] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:06.265566 2026] [proxy_fcgi:error] [pid 51243:tid 51250] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:06.530595 2026] [proxy_fcgi:error] [pid 51243:tid 51256] [client 51.120.78.0:25177] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:19:06.795755 2026] [:error] [pid 51243:tid 51245] [client 51.120.78.0:25177] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aY41usim7ZTAHzi7xZuj8gAAAQA"]
[Fri Feb 13 04:19:09.627294 2026] [:error] [pid 49223:tid 49240] [client 51.120.78.0:22676] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aY41vR8A_fZBamNLnfUTVgAAAAg"]
[Fri Feb 13 04:19:11.764456 2026] [:error] [pid 51243:tid 51267] [client 51.120.78.0:22665] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aY41v8im7ZTAHzi7xZuj9QAAARY"]
[Fri Feb 13 04:19:17.828338 2026] [:error] [pid 49335:tid 49337] [client 51.120.78.0:27212] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aY41xap--SFY2nwOiqkCTwAAAMA"]
[Fri Feb 13 04:19:21.443186 2026] [:error] [pid 51243:tid 51263] [client 51.120.78.0:21778] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nux.php"] [unique_id "aY41ycim7ZTAHzi7xZukAAAAARI"]
[Fri Feb 13 04:19:23.793275 2026] [:error] [pid 51243:tid 51250] [client 51.120.78.0:36682] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nux.php"] [unique_id "aY41y8im7ZTAHzi7xZukAwAAAQU"]
[Fri Feb 13 04:19:26.426697 2026] [:error] [pid 51243:tid 51259] [client 51.120.78.0:21798] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nux.php"] [unique_id "aY41zsim7ZTAHzi7xZukCAAAAQ4"]
[Fri Feb 13 04:19:28.453957 2026] [:error] [pid 49224:tid 49285] [client 51.120.78.0:22711] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nux.php"] [unique_id "aY410NiAvPoWmw5Yhwlr2AAAAFI"]
[Fri Feb 13 04:19:31.332929 2026] [:error] [pid 49223:tid 49242] [client 51.120.78.0:31624] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aY410x8A_fZBamNLnfUTfAAAAAo"]
[Fri Feb 13 04:19:40.857503 2026] [:error] [pid 49335:tid 49356] [client 51.120.78.0:51562] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aY413Kp--SFY2nwOiqkChAAAANM"]
[Fri Feb 13 04:20:03.698961 2026] [:error] [pid 49335:tid 49361] [client 51.120.78.0:24428] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wfwdhsjo.php"] [unique_id "aY4186p--SFY2nwOiqkCxAAAANg"]
[Fri Feb 13 04:20:05.948114 2026] [:error] [pid 49224:tid 49290] [client 51.120.78.0:4443] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wfwdhsjo.php"] [unique_id "aY419diAvPoWmw5YhwlsFAAAAFc"]
[Fri Feb 13 04:20:06.777597 2026] [proxy_fcgi:error] [pid 49224:tid 49287] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:07.042155 2026] [proxy_fcgi:error] [pid 49224:tid 49271] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:07.326666 2026] [proxy_fcgi:error] [pid 49224:tid 49278] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:07.643670 2026] [proxy_fcgi:error] [pid 49224:tid 49275] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:07.908363 2026] [proxy_fcgi:error] [pid 49224:tid 49285] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:08.280668 2026] [proxy_fcgi:error] [pid 49224:tid 49280] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:08.609389 2026] [proxy_fcgi:error] [pid 49224:tid 49281] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:08.874763 2026] [proxy_fcgi:error] [pid 49224:tid 49274] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:20:09.219900 2026] [proxy_fcgi:error] [pid 49224:tid 49291] [client 51.120.78.0:25732] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 04:25:41.879489 2026] [:error] [pid 51243:tid 51247] [client 177.223.244.99:28063] [client 177.223.244.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.223.244.99, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aY43Rcim7ZTAHzi7xZul_wAAAQI"]
[Fri Feb 13 04:25:41.890722 2026] [proxy_fcgi:error] [pid 51243:tid 51247] [client 177.223.244.99:28063] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:09:45.477215 2026] [proxy_fcgi:error] [pid 46821:tid 46839] [client 20.43.58.219:28902] AH01071: Got error 'Primary script unknown'
[Fri Feb 13 10:23:43.368098 2026] [:error] [pid 49225:tid 49310] [client 43.157.62.101:60342] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aY6LLzwH8-zGxtAd3jttnAAAAJA"]
[Fri Feb 13 14:34:49.883121 2026] [:error] [pid 49335:tid 49357] [client 216.26.235.4:36081] [client 216.26.235.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aY7GCap--SFY2nwOiqkqhAAAANQ"]
[Fri Feb 13 14:34:50.497804 2026] [:error] [pid 49335:tid 49359] [client 104.207.46.237:36527] [client 104.207.46.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aY7GCqp--SFY2nwOiqkqhgAAANY"]
[Fri Feb 13 14:34:51.736668 2026] [:error] [pid 47080:tid 47100] [client 104.207.57.188:58815] [client 104.207.57.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "aY7GC0bWJwYCVF39z6vS-AAAAcw"]
[Fri Feb 13 14:34:51.807692 2026] [:error] [pid 47575:tid 47595] [client 216.26.232.2:60683] [client 216.26.232.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "aY7GCwIPBuXb07mA_mR9awAAAs4"]
[Fri Feb 13 14:34:52.932640 2026] [:error] [pid 49223:tid 49236] [client 45.3.36.190:40403] [client 45.3.36.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aY7GDB8A_fZBamNLnfX9nwAAAAQ"]
[Fri Feb 13 14:34:53.820664 2026] [:error] [pid 49225:tid 49296] [client 45.3.42.135:22351] [client 45.3.42.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aY7GDTwH8-zGxtAd3jvCpgAAAII"]
[Fri Feb 13 14:34:54.910408 2026] [:error] [pid 49225:tid 49305] [client 65.111.22.48:35757] [client 65.111.22.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "aY7GDjwH8-zGxtAd3jvCqQAAAIs"]
[Fri Feb 13 14:34:55.358448 2026] [:error] [pid 49225:tid 49299] [client 104.207.41.79:46635] [client 104.207.41.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "aY7GDzwH8-zGxtAd3jvCqwAAAIU"]
[Fri Feb 13 14:34:56.018085 2026] [:error] [pid 51243:tid 51253] [client 104.207.39.129:46297] [client 104.207.39.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "aY7GEMim7ZTAHzi7xZuRYgAAAQg"]
[Fri Feb 13 14:34:57.111090 2026] [:error] [pid 47080:tid 47101] [client 209.50.164.100:56017] [client 209.50.164.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "aY7GEUbWJwYCVF39z6vS_wAAAc0"]
[Fri Feb 13 14:34:58.331044 2026] [:error] [pid 47143:tid 47224] [client 216.26.252.213:22353] [client 216.26.252.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "aY7GEshV30NbMarHJLsIUQAAAko"]
[Fri Feb 13 14:34:58.389195 2026] [:error] [pid 51243:tid 51260] [client 45.3.35.133:41955] [client 45.3.35.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "aY7GEsim7ZTAHzi7xZuRZgAAAQ8"]
[Fri Feb 13 14:35:00.302426 2026] [:error] [pid 18097:tid 18100] [client 45.3.43.73:28405] [client 45.3.43.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "aY7GFHFzYiQ_BfaDDlbdCgAAAYE"]
[Fri Feb 13 14:35:00.629576 2026] [:error] [pid 47080:tid 47103] [client 216.26.236.252:50491] [client 216.26.236.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "aY7GFEbWJwYCVF39z6vTCAAAAc8"]
[Fri Feb 13 14:35:02.233934 2026] [:error] [pid 47143:tid 47221] [client 216.26.244.197:48699] [client 216.26.244.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "aY7GFshV30NbMarHJLsIVwAAAkc"]
[Fri Feb 13 14:35:02.866737 2026] [:error] [pid 49225:tid 49304] [client 65.111.9.167:63867] [client 65.111.9.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "aY7GFjwH8-zGxtAd3jvCugAAAIo"]
[Fri Feb 13 14:35:03.789224 2026] [:error] [pid 18097:tid 18099] [client 209.50.170.183:12623] [client 209.50.170.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/frontend/.env"] [unique_id "aY7GF3FzYiQ_BfaDDlbdEAAAAYA"]
[Fri Feb 13 14:35:04.186962 2026] [:error] [pid 46821:tid 46829] [client 45.3.52.251:20625] [client 45.3.52.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/frontend/.env"] [unique_id "aY7GGI6G1N5YSq0J0gfT1AAAAUY"]
[Fri Feb 13 14:35:05.080283 2026] [:error] [pid 46821:tid 46835] [client 216.26.225.182:10291] [client 216.26.225.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aY7GGY6G1N5YSq0J0gfT2AAAAUw"]
[Fri Feb 13 14:35:05.506731 2026] [:error] [pid 49225:tid 49310] [client 216.26.233.72:64081] [client 216.26.233.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aY7GGTwH8-zGxtAd3jvCvQAAAJA"]
[Fri Feb 13 14:35:06.402515 2026] [:error] [pid 47575:tid 47601] [client 65.111.26.51:24867] [client 65.111.26.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env"] [unique_id "aY7GGgIPBuXb07mA_mR9fAAAAtQ"]
[Fri Feb 13 14:35:06.585771 2026] [:error] [pid 47143:tid 47224] [client 216.26.254.120:14975] [client 216.26.254.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env"] [unique_id "aY7GGshV30NbMarHJLsIXQAAAko"]
[Fri Feb 13 14:35:07.124285 2026] [:error] [pid 49335:tid 49337] [client 45.3.42.185:16077] [client 45.3.42.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aY7GG6p--SFY2nwOiqkqnAAAAMA"]
[Fri Feb 13 14:35:07.881331 2026] [:error] [pid 47358:tid 47389] [client 45.3.41.11:48467] [client 45.3.41.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aY7GG8QFBuVVUQTESUzRVAAAApc"]
[Fri Feb 13 14:35:08.985900 2026] [:error] [pid 47080:tid 47106] [client 104.207.58.57:19861] [client 104.207.58.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/dev/.git/config"] [unique_id "aY7GHEbWJwYCVF39z6vTHAAAAdI"]
[Fri Feb 13 14:35:09.025258 2026] [:error] [pid 49225:tid 49304] [client 216.26.240.109:18165] [client 216.26.240.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/dev/.git/config"] [unique_id "aY7GHTwH8-zGxtAd3jvCwAAAAIo"]
[Fri Feb 13 14:35:09.689964 2026] [:error] [pid 49223:tid 49237] [client 216.26.226.103:61405] [client 216.26.226.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.git/config"] [unique_id "aY7GHR8A_fZBamNLnfX9xAAAAAU"]
[Fri Feb 13 14:35:10.129640 2026] [:error] [pid 47080:tid 47103] [client 65.111.24.251:36603] [client 65.111.24.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.git/config"] [unique_id "aY7GHkbWJwYCVF39z6vTIAAAAc8"]
[Fri Feb 13 14:35:10.808475 2026] [:error] [pid 47575:tid 47604] [client 104.207.37.2:29509] [client 104.207.37.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/v2/.git/config"] [unique_id "aY7GHgIPBuXb07mA_mR9hQAAAtc"]
[Fri Feb 13 14:35:11.238849 2026] [:error] [pid 49335:tid 49359] [client 154.213.161.249:49845] [client 154.213.161.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/v2/.git/config"] [unique_id "aY7GH6p--SFY2nwOiqkqngAAANY"]
[Fri Feb 13 14:35:11.787499 2026] [:error] [pid 49223:tid 49256] [client 216.26.252.147:30153] [client 216.26.252.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/wp/.git/config"] [unique_id "aY7GHx8A_fZBamNLnfX9xwAAABg"]
[Fri Feb 13 14:35:12.467173 2026] [:error] [pid 49335:tid 49343] [client 216.26.228.19:17437] [client 216.26.228.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/wp/.git/config"] [unique_id "aY7GIKp--SFY2nwOiqkqoAAAAMY"]
[Fri Feb 13 14:35:13.140096 2026] [:error] [pid 18097:tid 18106] [client 104.207.38.40:44207] [client 104.207.38.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/test/.git/config"] [unique_id "aY7GIXFzYiQ_BfaDDlbdGwAAAYc"]
[Fri Feb 13 14:35:13.563337 2026] [:error] [pid 18097:tid 18112] [client 216.26.245.115:14915] [client 216.26.245.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/test/.git/config"] [unique_id "aY7GIXFzYiQ_BfaDDlbdHAAAAY0"]
[Fri Feb 13 14:35:14.220635 2026] [:error] [pid 47143:tid 47226] [client 45.3.33.4:62417] [client 45.3.33.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.git/config"] [unique_id "aY7GIshV30NbMarHJLsIYgAAAkw"]
[Fri Feb 13 14:35:14.664714 2026] [:error] [pid 47143:tid 47225] [client 154.213.165.81:50561] [client 154.213.165.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.git/config"] [unique_id "aY7GIshV30NbMarHJLsIZAAAAks"]
[Fri Feb 13 14:35:15.347927 2026] [:error] [pid 49225:tid 49309] [client 45.3.52.212:28539] [client 45.3.52.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backup/.git/config"] [unique_id "aY7GIzwH8-zGxtAd3jvCygAAAI8"]
[Fri Feb 13 14:35:15.889468 2026] [:error] [pid 49225:tid 49315] [client 104.207.39.95:28709] [client 104.207.39.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backup/.git/config"] [unique_id "aY7GIzwH8-zGxtAd3jvCzAAAAJU"]
[Fri Feb 13 14:35:16.430709 2026] [:error] [pid 46821:tid 46829] [client 209.50.184.221:33533] [client 209.50.184.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/site/.git/config"] [unique_id "aY7GJI6G1N5YSq0J0gfT3QAAAUY"]
[Fri Feb 13 14:35:16.987278 2026] [:error] [pid 47575:tid 47586] [client 65.111.28.72:26293] [client 65.111.28.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/site/.git/config"] [unique_id "aY7GJAIPBuXb07mA_mR9kwAAAsY"]
[Fri Feb 13 14:35:17.660635 2026] [:error] [pid 51243:tid 51264] [client 45.3.50.204:26887] [client 45.3.50.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.git/config"] [unique_id "aY7GJcim7ZTAHzi7xZuRbwAAARM"]
[Fri Feb 13 14:35:18.289988 2026] [:error] [pid 49335:tid 49341] [client 65.111.20.119:59819] [client 65.111.20.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.git/config"] [unique_id "aY7GJqp--SFY2nwOiqkqpwAAAMQ"]
[Fri Feb 13 14:35:18.850423 2026] [:error] [pid 46821:tid 46830] [client 65.111.27.185:40047] [client 65.111.27.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/new/.git/config"] [unique_id "aY7GJo6G1N5YSq0J0gfT3wAAAUc"]
[Fri Feb 13 14:35:19.602343 2026] [:error] [pid 46821:tid 46847] [client 216.26.238.191:19581] [client 216.26.238.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/new/.git/config"] [unique_id "aY7GJ46G1N5YSq0J0gfT4gAAAVg"]
[Fri Feb 13 14:43:08.054841 2026] [:error] [pid 47575:tid 47586] [client 43.140.247.223:59742] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aY7H_AIPBuXb07mA_mR_nAAAAsY"]
[Fri Feb 13 23:58:32.938180 2026] [:error] [pid 47358:tid 47363] [client 43.157.46.118:47826] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aY9KKMQFBuVVUQTESUw7mQAAAoI"]
[Sat Feb 14 03:15:35.811703 2026] [:error] [pid 49223:tid 49250] [client 170.106.160.90:34886] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aY94Vx8A_fZBamNLnfXBMAAAABI"]
[Sat Feb 14 06:39:48.791786 2026] [:error] [pid 21752:tid 21767] [client 195.178.110.33:46366] [client 195.178.110.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.svn/entries"] [unique_id "aY-oNBOc0bldMgpeu11x9AAAAQ0"]
[Sat Feb 14 10:23:22.299455 2026] [:error] [pid 21195:tid 21254] [client 120.71.59.24:33694] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aY_cmt_2sARdLQ6dpsVtRwAAAFc"]
[Sat Feb 14 12:32:17.682985 2026] [:error] [pid 28853:tid 28879] [client 43.159.128.155:43670] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aY_60bwdrXcA78tPzCiywwAAANg"]
[Sat Feb 14 17:58:52.188259 2026] [:error] [pid 50401:tid 50470] [client 103.214.61.25:54602] [client 103.214.61.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.61.25, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZBHXLOW7kXCx3N6fEifDAAAA0s"]
[Sat Feb 14 17:58:52.199594 2026] [proxy_fcgi:error] [pid 50401:tid 50470] [client 103.214.61.25:54602] AH01071: Got error 'Primary script unknown'
[Sat Feb 14 20:25:34.173784 2026] [:error] [pid 56720:tid 56790] [client 170.106.152.218:53808] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZBpvnjg3vzUoXJ19eAj0wAAA80"]
[Sat Feb 14 23:20:31.724505 2026] [autoindex:error] [pid 11705:tid 11724] [client 80.87.193.64:55616] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sun Feb 15 00:51:47.096060 2026] [proxy_fcgi:error] [pid 27251:tid 27446] [client 52.138.250.181:11003] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 00:51:47.350929 2026] [proxy_fcgi:error] [pid 27251:tid 27441] [client 52.138.250.181:11003] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 00:51:47.605386 2026] [proxy_fcgi:error] [pid 27251:tid 27453] [client 52.138.250.181:11003] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 00:51:47.860104 2026] [proxy_fcgi:error] [pid 27251:tid 27436] [client 52.138.250.181:11003] AH01071: Got error 'Primary script unknown'
[Sun Feb 15 00:51:48.111256 2026] [:error] [pid 27251:tid 27444] [client 52.138.250.181:11003] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aZCoJOmZvA7hw1HTD8h8tQAAAk4"]
[Sun Feb 15 00:51:48.612229 2026] [:error] [pid 27251:tid 27437] [client 52.138.250.181:11434] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aZCoJOmZvA7hw1HTD8h8twAAAkc"]
[Sun Feb 15 00:51:49.112411 2026] [:error] [pid 27514:tid 27642] [client 52.138.250.181:8735] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aZCoJQhbY0PM6Ox4PDTbnwAAAxc"]
[Sun Feb 15 00:51:49.613247 2026] [:error] [pid 27515:tid 27659] [client 52.138.250.181:11408] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "aZCoJVIvkRoe5SsSyWz3aAAAA8o"]
[Sun Feb 15 00:51:50.147180 2026] [:error] [pid 26742:tid 26754] [client 52.138.250.181:4060] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aZCoJqhZQ4eRM9eKYDJ0_gAAAEk"]
[Sun Feb 15 00:51:50.647200 2026] [:error] [pid 27514:tid 27619] [client 52.138.250.181:14342] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aZCoJghbY0PM6Ox4PDTbogAAAwE"]
[Sun Feb 15 00:51:51.146740 2026] [:error] [pid 26742:tid 26752] [client 52.138.250.181:5793] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aZCoJ6hZQ4eRM9eKYDJ1BQAAAEc"]
[Sun Feb 15 00:51:51.646624 2026] [:error] [pid 27515:tid 27670] [client 52.138.250.181:5817] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aZCoJ1IvkRoe5SsSyWz3aQAAA9U"]
[Sun Feb 15 00:51:52.148497 2026] [:error] [pid 26742:tid 26768] [client 52.138.250.181:4182] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aer.php"] [unique_id "aZCoKKhZQ4eRM9eKYDJ1CQAAAFc"]
[Sun Feb 15 00:51:52.657473 2026] [:error] [pid 26742:tid 26761] [client 52.138.250.181:10360] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aer.php"] [unique_id "aZCoKKhZQ4eRM9eKYDJ1DAAAAFA"]
[Sun Feb 15 00:51:53.158330 2026] [:error] [pid 15954:tid 15992] [client 52.138.250.181:8738] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aer.php"] [unique_id "aZCoKe2YplA3pz7MAbWEiwAAAcg"]
[Sun Feb 15 00:51:53.658834 2026] [:error] [pid 53980:tid 54020] [client 52.138.250.181:14431] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aer.php"] [unique_id "aZCoKdposYBT7xU8oxTrxQAAAso"]
[Sun Feb 15 00:51:54.157918 2026] [:error] [pid 28479:tid 28494] [client 52.138.250.181:8826] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZCoKoyrlZ0IAq0j37ja5gAAAA0"]
[Sun Feb 15 00:51:54.657990 2026] [:error] [pid 27514:tid 27620] [client 52.138.250.181:4373] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZCoKghbY0PM6Ox4PDTbowAAAwI"]
[Sun Feb 15 00:51:55.157539 2026] [:error] [pid 28479:tid 28488] [client 52.138.250.181:4640] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZCoK4yrlZ0IAq0j37ja6gAAAAc"]
[Sun Feb 15 00:51:55.656937 2026] [:error] [pid 28479:tid 28484] [client 52.138.250.181:9229] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZCoK4yrlZ0IAq0j37ja7QAAAAM"]
[Sun Feb 15 00:51:56.174721 2026] [:error] [pid 27515:tid 27668] [client 52.138.250.181:8901] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aZCoLFIvkRoe5SsSyWz3bgAAA9M"]
[Sun Feb 15 00:51:56.692050 2026] [:error] [pid 11800:tid 11858] [client 52.138.250.181:4065] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aZCoLHFcWMbg_UEt9SEvBgAAA1U"]
[Sun Feb 15 00:51:57.191572 2026] [:error] [pid 27515:tid 27647] [client 52.138.250.181:11424] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aZCoLVIvkRoe5SsSyWz3cQAAA8A"]
[Sun Feb 15 00:51:57.691983 2026] [:error] [pid 11800:tid 11814] [client 52.138.250.181:7950] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aZCoLXFcWMbg_UEt9SEvCQAAA0M"]
[Sun Feb 15 00:51:58.192412 2026] [:error] [pid 11800:tid 11851] [client 52.138.250.181:11864] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aZCoLnFcWMbg_UEt9SEvCwAAA1M"]
[Sun Feb 15 00:51:58.691865 2026] [:error] [pid 27251:tid 27436] [client 52.138.250.181:10969] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aZCoLumZvA7hw1HTD8h8wwAAAkY"]
[Sun Feb 15 00:51:59.192189 2026] [:error] [pid 26742:tid 26749] [client 52.138.250.181:8905] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aZCoL6hZQ4eRM9eKYDJ1GAAAAEQ"]
[Sun Feb 15 00:51:59.692483 2026] [:error] [pid 28512:tid 28552] [client 52.138.250.181:10355] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aZCoLzzHOANQDtWwQYqZ9gAAAYs"]
[Sun Feb 15 04:35:56.010825 2026] [:error] [pid 54015:tid 54025] [client 170.106.11.141:37478] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZDcrKpo2V_xmMbamFHoLAAAAAE"]
[Sun Feb 15 13:46:05.697401 2026] [:error] [pid 14577:tid 14585] [client 43.166.226.57:34536] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZFdnXTqrkuce6u39HvqNAAAAQU"]
[Sun Feb 15 18:20:42.695753 2026] [:error] [pid 35560:tid 35627] [client 182.44.10.67:59158] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZGd-gZSChHPc3occZ47rgAAAwo"]
[Mon Feb 16 06:00:59.065713 2026] [:error] [pid 4347:tid 4377] [client 43.154.127.188:33930] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZJCGzFcjv6pEAnSEiedoAAAAAk"]
[Mon Feb 16 09:09:24.311799 2026] [:error] [pid 4349:tid 4424] [client 177.10.226.192:10020] [client 177.10.226.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.226.192, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZJuRMrbZYafUL_3Qfw-QQAAAII"]
[Mon Feb 16 09:09:24.323279 2026] [proxy_fcgi:error] [pid 4349:tid 4424] [client 177.10.226.192:10020] AH01071: Got error 'Primary script unknown'
[Mon Feb 16 11:53:49.822369 2026] [:error] [pid 4349:tid 4434] [client 43.130.15.147:35870] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZKUzcrbZYafUL_3QfxxVgAAAIw"]
[Mon Feb 16 13:30:05.497336 2026] [:error] [pid 4348:tid 4398] [client 43.157.20.63:57284] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZKrXXxbK-cCGKg9aysl2AAAAEM"]
[Mon Feb 16 13:46:01.476807 2026] [:error] [pid 4455:tid 4470] [client 43.140.247.223:50480] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZKvGQNa-4dvQCL0ruocrwAAAM0"]
[Mon Feb 16 20:04:11.810651 2026] [:error] [pid 4349:tid 4444] [client 43.159.139.164:33010] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZMHu8rbZYafUL_3Qfz05gAAAJY"]
[Mon Feb 16 20:06:10.955940 2026] [:error] [pid 38888:tid 38904] [client 119.96.24.54:47322] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZMIMqmDoBJWPvV4pcNTMQAAAU0"]
[Tue Feb 17 02:48:29.693463 2026] [:error] [pid 38888:tid 38895] [client 20.111.62.157:29983] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZNmfamDoBJWPvV4pcOubQAAAUQ"]
[Tue Feb 17 04:58:45.688546 2026] [proxy_fcgi:error] [pid 58558:tid 58641] [client 40.112.95.11:14704] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:58:45.957616 2026] [proxy_fcgi:error] [pid 58558:tid 58632] [client 40.112.95.11:14704] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:58:46.213011 2026] [proxy_fcgi:error] [pid 58558:tid 58629] [client 40.112.95.11:14704] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:58:46.482800 2026] [proxy_fcgi:error] [pid 58558:tid 58627] [client 40.112.95.11:14704] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:58:46.735194 2026] [proxy_fcgi:error] [pid 58558:tid 58646] [client 40.112.95.11:14704] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:58:47.013810 2026] [:error] [pid 58558:tid 58626] [client 40.112.95.11:14704] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/str.php"] [unique_id "aZOFBymIxlfUL2nViZyZwgAAAIQ"]
[Tue Feb 17 04:58:49.330672 2026] [:error] [pid 58659:tid 58685] [client 40.112.95.11:16659] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/str.php"] [unique_id "aZOFCcDX32iTEO4jt2_PoAAAANg"]
[Tue Feb 17 04:58:50.439602 2026] [:error] [pid 32790:tid 32817] [client 40.112.95.11:14705] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/str.php"] [unique_id "aZOFCns3HJP9ozPHsN60XQAAARc"]
[Tue Feb 17 04:58:51.371356 2026] [:error] [pid 32790:tid 32813] [client 40.112.95.11:49369] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/str.php"] [unique_id "aZOFC3s3HJP9ozPHsN60YgAAARM"]
[Tue Feb 17 04:58:55.077281 2026] [:error] [pid 58551:tid 58567] [client 40.112.95.11:8583] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aZOFD61t8eWr-MgFsppQhgAAAAc"]
[Tue Feb 17 04:58:56.249772 2026] [:error] [pid 32790:tid 32800] [client 40.112.95.11:16421] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aZOFEHs3HJP9ozPHsN60agAAAQY"]
[Tue Feb 17 04:59:01.923735 2026] [:error] [pid 58551:tid 58580] [client 40.112.95.11:16432] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aZOFFa1t8eWr-MgFsppQkwAAABQ"]
[Tue Feb 17 04:59:02.754229 2026] [:error] [pid 58659:tid 58682] [client 40.112.95.11:19849] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aZOFFsDX32iTEO4jt2_PuQAAANU"]
[Tue Feb 17 04:59:03.635663 2026] [:error] [pid 58552:tid 58603] [client 40.112.95.11:8577] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aZOFFzBHVJP2Oz3yR5fMFQAAAEg"]
[Tue Feb 17 04:59:05.150747 2026] [:error] [pid 58552:tid 58599] [client 40.112.95.11:14697] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aZOFGTBHVJP2Oz3yR5fMGQAAAEQ"]
[Tue Feb 17 04:59:06.828698 2026] [:error] [pid 58659:tid 58676] [client 40.112.95.11:49391] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aZOFGsDX32iTEO4jt2_PwQAAAM8"]
[Tue Feb 17 04:59:08.035963 2026] [:error] [pid 32790:tid 32812] [client 40.112.95.11:21768] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aZOFHHs3HJP9ozPHsN60dAAAARI"]
[Tue Feb 17 04:59:09.249226 2026] [:error] [pid 32790:tid 32797] [client 40.112.95.11:3031] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZOFHXs3HJP9ozPHsN60ewAAAQM"]
[Tue Feb 17 04:59:11.192533 2026] [:error] [pid 58552:tid 58600] [client 40.112.95.11:16405] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZOFHzBHVJP2Oz3yR5fMHAAAAEU"]
[Tue Feb 17 04:59:15.105926 2026] [:error] [pid 58551:tid 58573] [client 40.112.95.11:13096] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZOFI61t8eWr-MgFsppQoAAAAA0"]
[Tue Feb 17 04:59:16.122335 2026] [:error] [pid 32790:tid 32794] [client 40.112.95.11:2934] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZOFJHs3HJP9ozPHsN60jQAAAQA"]
[Tue Feb 17 04:59:17.529997 2026] [:error] [pid 58552:tid 58598] [client 40.112.95.11:22471] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tanjiro.php"] [unique_id "aZOFJTBHVJP2Oz3yR5fMJQAAAEM"]
[Tue Feb 17 04:59:22.518754 2026] [:error] [pid 58659:tid 58676] [client 40.112.95.11:13109] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tanjiro.php"] [unique_id "aZOFKsDX32iTEO4jt2_P3AAAAM8"]
[Tue Feb 17 04:59:26.956239 2026] [:error] [pid 58659:tid 58662] [client 40.112.95.11:22488] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tanjiro.php"] [unique_id "aZOFLsDX32iTEO4jt2_P5gAAAME"]
[Tue Feb 17 04:59:28.932524 2026] [:error] [pid 58552:tid 58605] [client 40.112.95.11:11208] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tanjiro.php"] [unique_id "aZOFMDBHVJP2Oz3yR5fMNQAAAEo"]
[Tue Feb 17 04:59:30.553858 2026] [:error] [pid 58552:tid 58611] [client 40.112.95.11:2238] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aZOFMjBHVJP2Oz3yR5fMOgAAAFA"]
[Tue Feb 17 04:59:44.152282 2026] [:error] [pid 32790:tid 32796] [client 40.112.95.11:6453] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aZOFQHs3HJP9ozPHsN60xAAAAQI"]
[Tue Feb 17 04:59:47.182004 2026] [proxy_fcgi:error] [pid 58659:tid 58675] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:47.438226 2026] [proxy_fcgi:error] [pid 58659:tid 58668] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:47.697184 2026] [proxy_fcgi:error] [pid 58659:tid 58685] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:47.950981 2026] [proxy_fcgi:error] [pid 58659:tid 58676] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:48.206476 2026] [proxy_fcgi:error] [pid 58659:tid 58661] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:48.468972 2026] [proxy_fcgi:error] [pid 58659:tid 58664] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:48.726317 2026] [proxy_fcgi:error] [pid 58659:tid 58667] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:48.980868 2026] [proxy_fcgi:error] [pid 58659:tid 58669] [client 40.112.95.11:46954] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 04:59:49.696936 2026] [:error] [pid 58659:tid 58683] [client 40.112.95.11:46954] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aZOFRcDX32iTEO4jt2_QHQAAANY"]
[Tue Feb 17 04:59:51.819117 2026] [:error] [pid 58552:tid 58597] [client 40.112.95.11:21463] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aZOFRzBHVJP2Oz3yR5fMVAAAAEI"]
[Tue Feb 17 04:59:53.565138 2026] [:error] [pid 58659:tid 58679] [client 40.112.95.11:18403] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aZOFScDX32iTEO4jt2_QJAAAANI"]
[Tue Feb 17 04:59:55.899766 2026] [:error] [pid 32790:tid 32809] [client 40.112.95.11:9301] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aZOFS3s3HJP9ozPHsN604AAAAQ8"]
[Tue Feb 17 04:59:56.948223 2026] [:error] [pid 58558:tid 58623] [client 40.112.95.11:18371] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fan.php"] [unique_id "aZOFTCmIxlfUL2nViZyaCQAAAIE"]
[Tue Feb 17 04:59:57.733014 2026] [:error] [pid 32790:tid 32801] [client 40.112.95.11:13332] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fan.php"] [unique_id "aZOFTXs3HJP9ozPHsN605wAAAQc"]
[Tue Feb 17 05:00:04.573743 2026] [:error] [pid 58551:tid 58578] [client 40.112.95.11:13124] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fan.php"] [unique_id "aZOFVK1t8eWr-MgFsppQ0wAAABI"]
[Tue Feb 17 05:00:05.376350 2026] [:error] [pid 32790:tid 32811] [client 40.112.95.11:2684] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fan.php"] [unique_id "aZOFVXs3HJP9ozPHsN608gAAARE"]
[Tue Feb 17 05:00:07.267573 2026] [:error] [pid 58659:tid 58662] [client 40.112.95.11:13123] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ztv.php"] [unique_id "aZOFV8DX32iTEO4jt2_QRwAAAME"]
[Tue Feb 17 05:00:08.041363 2026] [:error] [pid 58659:tid 58685] [client 40.112.95.11:2651] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ztv.php"] [unique_id "aZOFWMDX32iTEO4jt2_QTQAAANg"]
[Tue Feb 17 05:00:17.382183 2026] [:error] [pid 32790:tid 32802] [client 40.112.95.11:20294] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ztv.php"] [unique_id "aZOFYXs3HJP9ozPHsN61AgAAAQg"]
[Tue Feb 17 05:00:31.444344 2026] [:error] [pid 58551:tid 58574] [client 40.112.95.11:9016] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bras.php"] [unique_id "aZOFb61t8eWr-MgFsppQ-AAAAA4"]
[Tue Feb 17 05:00:35.483917 2026] [:error] [pid 32790:tid 32811] [client 40.112.95.11:8963] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bras.php"] [unique_id "aZOFc3s3HJP9ozPHsN61IAAAARE"]
[Tue Feb 17 05:00:38.609700 2026] [:error] [pid 32790:tid 32815] [client 40.112.95.11:28415] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar.php"] [unique_id "aZOFdns3HJP9ozPHsN61JAAAARU"]
[Tue Feb 17 05:00:39.364451 2026] [:error] [pid 58659:tid 58667] [client 40.112.95.11:18034] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar.php"] [unique_id "aZOFd8DX32iTEO4jt2_QigAAAMY"]
[Tue Feb 17 05:00:47.407742 2026] [:error] [pid 58659:tid 58663] [client 40.112.95.11:2564] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar.php"] [unique_id "aZOFf8DX32iTEO4jt2_QowAAAMI"]
[Tue Feb 17 05:00:49.216087 2026] [proxy_fcgi:error] [pid 58551:tid 58581] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:49.471309 2026] [proxy_fcgi:error] [pid 58551:tid 58572] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:49.756730 2026] [proxy_fcgi:error] [pid 58551:tid 58569] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:50.264485 2026] [proxy_fcgi:error] [pid 58551:tid 58570] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:50.518003 2026] [proxy_fcgi:error] [pid 58551:tid 58582] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:51.174540 2026] [proxy_fcgi:error] [pid 58551:tid 58563] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:51.431710 2026] [proxy_fcgi:error] [pid 58551:tid 58566] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:51.706606 2026] [proxy_fcgi:error] [pid 58551:tid 58580] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:52.017070 2026] [proxy_fcgi:error] [pid 58551:tid 58578] [client 40.112.95.11:20313] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:00:52.268035 2026] [:error] [pid 58551:tid 58561] [client 40.112.95.11:20313] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aZOFhK1t8eWr-MgFsppREgAAAAE"]
[Tue Feb 17 05:00:53.614607 2026] [:error] [pid 58552:tid 58595] [client 40.112.95.11:29586] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aZOFhTBHVJP2Oz3yR5fMpwAAAEA"]
[Tue Feb 17 05:00:56.300460 2026] [:error] [pid 58659:tid 58682] [client 40.112.95.11:23175] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aZOFiMDX32iTEO4jt2_QtwAAANU"]
[Tue Feb 17 05:00:57.534735 2026] [:error] [pid 58552:tid 58619] [client 40.112.95.11:18326] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aZOFiTBHVJP2Oz3yR5fMrQAAAFg"]
[Tue Feb 17 05:01:00.749153 2026] [:error] [pid 58659:tid 58673] [client 40.112.95.11:17255] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/v3.php"] [unique_id "aZOFjMDX32iTEO4jt2_QvwAAAMw"]
[Tue Feb 17 05:01:01.638530 2026] [:error] [pid 32790:tid 32801] [client 40.112.95.11:47956] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/v3.php"] [unique_id "aZOFjXs3HJP9ozPHsN61VQAAAQc"]
[Tue Feb 17 05:01:02.485792 2026] [:error] [pid 58558:tid 58632] [client 40.112.95.11:17629] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/v3.php"] [unique_id "aZOFjimIxlfUL2nViZyaYQAAAIo"]
[Tue Feb 17 05:01:10.173532 2026] [:error] [pid 58551:tid 58562] [client 40.112.95.11:2301] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/v3.php"] [unique_id "aZOFlq1t8eWr-MgFsppRKwAAAAI"]
[Tue Feb 17 05:01:11.926149 2026] [:error] [pid 58551:tid 58570] [client 40.112.95.11:5166] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xse25.php"] [unique_id "aZOFl61t8eWr-MgFsppRMAAAAAo"]
[Tue Feb 17 05:01:13.678771 2026] [:error] [pid 58551:tid 58576] [client 40.112.95.11:9029] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xse25.php"] [unique_id "aZOFma1t8eWr-MgFsppRNgAAABA"]
[Tue Feb 17 05:01:15.150225 2026] [:error] [pid 58551:tid 58572] [client 40.112.95.11:23243] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xse25.php"] [unique_id "aZOFm61t8eWr-MgFsppROgAAAAw"]
[Tue Feb 17 05:01:18.657418 2026] [:error] [pid 58558:tid 58636] [client 40.112.95.11:12557] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xse25.php"] [unique_id "aZOFnimIxlfUL2nViZyagQAAAI4"]
[Tue Feb 17 05:01:20.674895 2026] [:error] [pid 58558:tid 58637] [client 40.112.95.11:48356] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf9.php"] [unique_id "aZOFoCmIxlfUL2nViZyagwAAAI8"]
[Tue Feb 17 05:01:21.789986 2026] [:error] [pid 58552:tid 58601] [client 40.112.95.11:17626] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf9.php"] [unique_id "aZOFoTBHVJP2Oz3yR5fMwwAAAEY"]
[Tue Feb 17 05:01:23.508301 2026] [:error] [pid 58551:tid 58569] [client 40.112.95.11:19474] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf9.php"] [unique_id "aZOFo61t8eWr-MgFsppRTQAAAAk"]
[Tue Feb 17 05:01:25.200696 2026] [:error] [pid 58558:tid 58628] [client 40.112.95.11:48329] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf9.php"] [unique_id "aZOFpSmIxlfUL2nViZyakwAAAIY"]
[Tue Feb 17 05:01:30.213159 2026] [:error] [pid 58551:tid 58582] [client 40.112.95.11:2074] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "aZOFqq1t8eWr-MgFsppRXAAAABY"]
[Tue Feb 17 05:01:35.822264 2026] [:error] [pid 58558:tid 58631] [client 40.112.95.11:48359] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "aZOFrymIxlfUL2nViZyapwAAAIk"]
[Tue Feb 17 05:01:37.339903 2026] [:error] [pid 58552:tid 58609] [client 40.112.95.11:2099] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "aZOFsTBHVJP2Oz3yR5fM2gAAAE4"]
[Tue Feb 17 05:01:38.789292 2026] [:error] [pid 58552:tid 58595] [client 40.112.95.11:18754] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "aZOFsjBHVJP2Oz3yR5fM3wAAAEA"]
[Tue Feb 17 05:01:41.696159 2026] [:error] [pid 58659:tid 58674] [client 40.112.95.11:15390] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZOFtcDX32iTEO4jt2_REgAAAM0"]
[Tue Feb 17 05:01:49.500097 2026] [:error] [pid 58558:tid 58622] [client 40.112.95.11:16766] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZOFvSmIxlfUL2nViZyaugAAAIA"]
[Tue Feb 17 05:01:50.516722 2026] [:error] [pid 58551:tid 58561] [client 40.112.95.11:47573] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZOFvq1t8eWr-MgFsppReQAAAAE"]
[Tue Feb 17 05:01:51.810364 2026] [:error] [pid 58558:tid 58643] [client 40.112.95.11:16757] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aZOFvymIxlfUL2nViZyawwAAAJU"]
[Tue Feb 17 05:01:52.918626 2026] [proxy_fcgi:error] [pid 58558:tid 58646] [client 40.112.95.11:11854] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:01:53.186335 2026] [proxy_fcgi:error] [pid 58558:tid 58644] [client 40.112.95.11:11854] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:01:53.514217 2026] [proxy_fcgi:error] [pid 58558:tid 58636] [client 40.112.95.11:11854] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:01:53.791674 2026] [proxy_fcgi:error] [pid 58558:tid 58625] [client 40.112.95.11:11854] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:01:54.210577 2026] [proxy_fcgi:error] [pid 58558:tid 58623] [client 40.112.95.11:11854] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:01:54.478521 2026] [proxy_fcgi:error] [pid 58558:tid 58632] [client 40.112.95.11:11854] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:01:54.743856 2026] [:error] [pid 58558:tid 58640] [client 40.112.95.11:11854] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aZOFwimIxlfUL2nViZya1gAAAJI"]
[Tue Feb 17 05:01:59.432217 2026] [:error] [pid 58659:tid 58663] [client 40.112.95.11:11152] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aZOFx8DX32iTEO4jt2_RJgAAAMI"]
[Tue Feb 17 05:02:01.430461 2026] [:error] [pid 32790:tid 32796] [client 40.112.95.11:8566] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aZOFyXs3HJP9ozPHsN61zAAAAQI"]
[Tue Feb 17 05:02:06.742050 2026] [:error] [pid 58551:tid 58580] [client 40.112.95.11:7496] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aZOFzq1t8eWr-MgFsppRgwAAABQ"]
[Tue Feb 17 05:02:09.623346 2026] [:error] [pid 32790:tid 32812] [client 40.112.95.11:13608] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/np.php"] [unique_id "aZOF0Xs3HJP9ozPHsN613QAAARI"]
[Tue Feb 17 05:02:10.967804 2026] [:error] [pid 58659:tid 58669] [client 40.112.95.11:12383] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/np.php"] [unique_id "aZOF0sDX32iTEO4jt2_RPAAAAMg"]
[Tue Feb 17 05:02:14.511157 2026] [:error] [pid 58558:tid 58622] [client 40.112.95.11:17940] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/np.php"] [unique_id "aZOF1imIxlfUL2nViZya8wAAAIA"]
[Tue Feb 17 05:02:15.832667 2026] [:error] [pid 58552:tid 58597] [client 40.112.95.11:20268] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/np.php"] [unique_id "aZOF1zBHVJP2Oz3yR5fNHQAAAEI"]
[Tue Feb 17 05:02:23.729503 2026] [:error] [pid 58552:tid 58619] [client 40.112.95.11:15460] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aZOF3zBHVJP2Oz3yR5fNNQAAAFg"]
[Tue Feb 17 05:02:26.149089 2026] [:error] [pid 58551:tid 58563] [client 40.112.95.11:20622] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aZOF4q1t8eWr-MgFsppRpgAAAAM"]
[Tue Feb 17 05:02:29.454972 2026] [:error] [pid 32790:tid 32817] [client 40.112.95.11:20247] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aZOF5Xs3HJP9ozPHsN62BQAAARc"]
[Tue Feb 17 05:02:30.687434 2026] [:error] [pid 32790:tid 32815] [client 40.112.95.11:9842] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx1.php"] [unique_id "aZOF5ns3HJP9ozPHsN62CwAAARU"]
[Tue Feb 17 05:04:08.402817 2026] [proxy_fcgi:error] [pid 58551:tid 58561] [client 20.100.191.215:58487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:04:08.833360 2026] [proxy_fcgi:error] [pid 58551:tid 58573] [client 20.100.191.215:58487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:04:09.099651 2026] [proxy_fcgi:error] [pid 58551:tid 58562] [client 20.100.191.215:58487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:04:09.409779 2026] [proxy_fcgi:error] [pid 58551:tid 58567] [client 20.100.191.215:58487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:04:09.734826 2026] [proxy_fcgi:error] [pid 58551:tid 58566] [client 20.100.191.215:58487] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:04:09.994189 2026] [:error] [pid 58551:tid 58583] [client 20.100.191.215:58487] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aZOGSa1t8eWr-MgFsppSMAAAABc"]
[Tue Feb 17 05:04:15.527094 2026] [:error] [pid 58659:tid 58671] [client 20.100.191.215:54894] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aZOGT8DX32iTEO4jt2_SMQAAAMo"]
[Tue Feb 17 05:04:17.983620 2026] [:error] [pid 58659:tid 58661] [client 20.100.191.215:45736] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aZOGUcDX32iTEO4jt2_SNgAAAMA"]
[Tue Feb 17 05:04:22.351089 2026] [:error] [pid 58558:tid 58630] [client 20.100.191.215:45738] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aZOGVimIxlfUL2nViZybkwAAAIg"]
[Tue Feb 17 05:04:24.233407 2026] [:error] [pid 32790:tid 32802] [client 20.100.191.215:45737] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aZOGWHs3HJP9ozPHsN62-wAAAQg"]
[Tue Feb 17 05:04:29.589682 2026] [:error] [pid 32790:tid 32801] [client 20.100.191.215:61129] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aZOGXXs3HJP9ozPHsN63CwAAAQc"]
[Tue Feb 17 05:04:33.241828 2026] [:error] [pid 32790:tid 32811] [client 20.100.191.215:61146] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aZOGYXs3HJP9ozPHsN63FwAAARE"]
[Tue Feb 17 05:04:35.063602 2026] [:error] [pid 58558:tid 58630] [client 20.100.191.215:56421] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aZOGYymIxlfUL2nViZybqAAAAIg"]
[Tue Feb 17 05:04:37.154621 2026] [:error] [pid 58551:tid 58562] [client 20.100.191.215:59784] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aZOGZa1t8eWr-MgFsppSQwAAAAI"]
[Tue Feb 17 05:04:39.642717 2026] [:error] [pid 58558:tid 58635] [client 20.100.191.215:48159] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aZOGZymIxlfUL2nViZybsgAAAI0"]
[Tue Feb 17 05:04:41.212511 2026] [:error] [pid 32790:tid 32813] [client 20.100.191.215:60235] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aZOGaXs3HJP9ozPHsN63GwAAARM"]
[Tue Feb 17 05:04:44.034455 2026] [:error] [pid 58558:tid 58627] [client 20.100.191.215:63669] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aZOGbCmIxlfUL2nViZybvQAAAIU"]
[Tue Feb 17 05:04:46.193932 2026] [:error] [pid 58551:tid 58566] [client 20.100.191.215:41312] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aZOGbq1t8eWr-MgFsppSUQAAAAY"]
[Tue Feb 17 05:04:48.117980 2026] [:error] [pid 32790:tid 32809] [client 20.100.191.215:63652] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aZOGcHs3HJP9ozPHsN63IgAAAQ8"]
[Tue Feb 17 05:04:49.379034 2026] [:error] [pid 32790:tid 32810] [client 20.100.191.215:63661] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aZOGcXs3HJP9ozPHsN63KAAAARA"]
[Tue Feb 17 05:04:52.326608 2026] [:error] [pid 32790:tid 32818] [client 20.100.191.215:1146] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "aZOGdHs3HJP9ozPHsN63MQAAARg"]
[Tue Feb 17 05:04:54.050921 2026] [:error] [pid 58552:tid 58614] [client 20.100.191.215:54953] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acfdr.php"] [unique_id "aZOGdjBHVJP2Oz3yR5fOHQAAAFM"]
[Tue Feb 17 05:04:56.797985 2026] [:error] [pid 58659:tid 58662] [client 20.100.191.215:63628] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acfdr.php"] [unique_id "aZOGeMDX32iTEO4jt2_SYAAAAME"]
[Tue Feb 17 05:05:03.857401 2026] [:error] [pid 58551:tid 58583] [client 20.100.191.215:41926] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acfdr.php"] [unique_id "aZOGf61t8eWr-MgFsppSZgAAABc"]
[Tue Feb 17 05:05:12.705534 2026] [proxy_fcgi:error] [pid 58558:tid 58634] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:12.968845 2026] [proxy_fcgi:error] [pid 58558:tid 58635] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:13.231934 2026] [proxy_fcgi:error] [pid 58558:tid 58624] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:13.494353 2026] [proxy_fcgi:error] [pid 58558:tid 58625] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:13.757108 2026] [proxy_fcgi:error] [pid 58558:tid 58633] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:14.021862 2026] [proxy_fcgi:error] [pid 58558:tid 58636] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:14.285477 2026] [proxy_fcgi:error] [pid 58558:tid 58642] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:14.552435 2026] [proxy_fcgi:error] [pid 58558:tid 58623] [client 20.100.191.215:54932] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 05:05:14.822331 2026] [:error] [pid 58558:tid 58644] [client 20.100.191.215:54932] [client 20.100.191.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/about.php"] [unique_id "aZOGiimIxlfUL2nViZyb8QAAAJY"]
[Tue Feb 17 05:05:17.313963 2026] [proxy_fcgi:error] [pid 58551:tid 58582] [client 20.100.191.215:49355] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 06:25:03.212902 2026] [:error] [pid 58659:tid 58662] [client 4.232.88.90:55620] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZP8DX32iTEO4jt2_3bAAAAME"]
[Tue Feb 17 06:25:04.526804 2026] [:error] [pid 58558:tid 58639] [client 4.232.88.90:56301] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZQCmIxlfUL2nViZy6rAAAAJE"]
[Tue Feb 17 06:25:07.825505 2026] [:error] [pid 58659:tid 58664] [client 4.232.88.90:8943] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZQ8DX32iTEO4jt2_3egAAAMM"]
[Tue Feb 17 06:25:09.431429 2026] [:error] [pid 58552:tid 58613] [client 4.232.88.90:24392] [client 4.232.88.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOZRTBHVJP2Oz3yR5fsqQAAAFI"]
[Tue Feb 17 12:18:43.257464 2026] [:error] [pid 32790:tid 32817] [client 167.71.244.81:52516] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsI3s3HJP9ozPHsN7BZQAAARc"]
[Tue Feb 17 14:44:14.225682 2026] [:error] [pid 58659:tid 58667] [client 43.166.134.47:33200] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZQOPsDX32iTEO4jt2_x2gAAAMY"]
[Tue Feb 17 16:19:26.824445 2026] [:error] [pid 32790:tid 32794] [client 43.156.156.96:54072] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZQkjns3HJP9ozPHsN47dgAAAQA"]
[Tue Feb 17 20:31:45.681677 2026] [:error] [pid 58558:tid 58645] [client 182.71.123.174:61550] [client 182.71.123.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.71.123.174, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZRfsSmIxlfUL2nViZz7hQAAAJc"]
[Tue Feb 17 20:31:45.692730 2026] [proxy_fcgi:error] [pid 58558:tid 58645] [client 182.71.123.174:61550] AH01071: Got error 'Primary script unknown'
[Tue Feb 17 21:24:10.392848 2026] [:error] [pid 58558:tid 58635] [client 120.71.59.24:41937] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZRr-imIxlfUL2nViZwJ4QAAAI0"]
[Wed Feb 18 01:16:04.352443 2026] [:error] [pid 58552:tid 58602] [client 104.28.235.59:55758] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZSiVDBHVJP2Oz3yR5d5jAAAAEc"]
[Wed Feb 18 01:16:05.254948 2026] [:error] [pid 13106:tid 13120] [client 104.28.235.59:44664] [client 104.28.235.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/style.php"] [unique_id "aZSiVbBEWrYCV-0FRdpZWwAAAUo"]
[Wed Feb 18 04:03:59.537014 2026] [:error] [pid 21849:tid 21939] [client 182.44.2.148:33476] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZTJr7x9a1XrfTYnuzJOEgAAAJc"]
[Wed Feb 18 10:42:13.915240 2026] [:error] [pid 21961:tid 21970] [client 165.245.187.140:62517] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnBcUBDt_-H0ms3gW9YwAAAMc"]
[Wed Feb 18 11:10:46.454246 2026] [:error] [pid 57014:tid 57029] [client 43.153.107.22:37182] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZUtthNZnhS5qKtVIMJ0lgAAAQw"]
[Wed Feb 18 16:03:28.987995 2026] [:error] [pid 21847:tid 21863] [client 190.95.10.196:56467] [client 190.95.10.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.95.10.196, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZVyUPy9A5wy4LuXmJ3TjgAAAAU"]
[Wed Feb 18 16:03:29.399207 2026] [proxy_fcgi:error] [pid 21847:tid 21863] [client 190.95.10.196:56467] AH01071: Got error 'Primary script unknown'
[Wed Feb 18 18:35:44.528369 2026] [:error] [pid 11609:tid 11666] [client 103.82.21.232:61717] [client 103.82.21.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.82.21.232, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZWWAMhm3UjgaKO2Na8drgAAApY"], referer: https://measureyourbrand.com/wp-admin/
[Wed Feb 18 18:35:44.541105 2026] [proxy_fcgi:error] [pid 11609:tid 11666] [client 103.82.21.232:61717] AH01071: Got error 'Primary script unknown', referer: https://measureyourbrand.com/wp-admin/
[Wed Feb 18 23:05:39.579307 2026] [:error] [pid 11607:tid 11637] [client 114.96.103.33:48077] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZXVQxw91ggRx3FA7BcJ8QAAAlY"]
[Wed Feb 18 23:44:42.120213 2026] [:error] [pid 11611:tid 11707] [client 64.247.196.28:43652] [client 64.247.196.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aZXeau2m6IPN_aBZuKaMdQAAAwk"]
[Thu Feb 19 01:51:03.274198 2026] [:error] [pid 11548:tid 11578] [client 43.153.67.21:41164] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZX8BzSFZiBIZZvmIlNiJgAAAgA"]
[Thu Feb 19 02:16:38.069126 2026] [:error] [pid 57014:tid 57019] [client 103.65.236.149:64363] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aZYCBhNZnhS5qKtVIMJliQAAAQI"]
[Thu Feb 19 06:39:31.378826 2026] [proxy_fcgi:error] [pid 48902:tid 48947] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:31.546364 2026] [proxy_fcgi:error] [pid 48902:tid 48939] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:32.185692 2026] [proxy_fcgi:error] [pid 48902:tid 48959] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:32.346413 2026] [proxy_fcgi:error] [pid 48902:tid 48962] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:32.939958 2026] [proxy_fcgi:error] [pid 48902:tid 48951] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:33.081389 2026] [proxy_fcgi:error] [pid 48902:tid 48956] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:33.241432 2026] [:error] [pid 48902:tid 48944] [client 20.214.159.60:7019] [client 20.214.159.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.159.60, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZY_pWcJ-6aYRpRRFsVUMgAAAEY"]
[Thu Feb 19 06:39:33.246663 2026] [proxy_fcgi:error] [pid 48902:tid 48944] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:33.424961 2026] [proxy_fcgi:error] [pid 48902:tid 48942] [client 20.214.159.60:7019] AH01071: Got error 'Primary script unknown'
[Thu Feb 19 06:39:33.581145 2026] [:error] [pid 48902:tid 48960] [client 20.214.159.60:7019] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aZY_pWcJ-6aYRpRRFsVUNAAAAFY"]
[Thu Feb 19 06:39:34.184472 2026] [:error] [pid 15513:tid 15526] [client 20.214.159.60:9108] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aZY_psGTRTE022JWg1-wfQAAAQs"]
[Thu Feb 19 06:39:34.814252 2026] [:error] [pid 48902:tid 48945] [client 20.214.159.60:9116] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aZY_pmcJ-6aYRpRRFsVUNwAAAEc"]
[Thu Feb 19 06:39:35.486619 2026] [:error] [pid 48901:tid 48922] [client 20.214.159.60:9130] [client 20.214.159.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aZY_p8ixYz-lHbN0WBLRvAAAAAw"]
[Thu Feb 19 12:38:53.091815 2026] [:error] [pid 48901:tid 48929] [client 216.81.248.151:55190] [client 216.81.248.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aZaT3cixYz-lHbN0WBI_5QAAABM"]
[Thu Feb 19 13:24:49.598327 2026] [:error] [pid 48902:tid 48943] [client 104.28.153.120:29107] [client 104.28.153.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZaeoWcJ-6aYRpRRFsXdsQAAAEU"]
[Thu Feb 19 16:18:28.079509 2026] [:error] [pid 5581:tid 5613] [client 43.128.156.124:47660] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZbHVHIfW0xlXmrVd3qb2QAAAgI"]
[Thu Feb 19 18:11:19.275995 2026] [:error] [pid 48903:tid 48982] [client 43.140.247.223:58322] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZbhx46aTgKrpAR115vRbgAAAJE"]
[Thu Feb 19 21:13:26.807255 2026] [:error] [pid 48903:tid 48969] [client 43.135.133.241:43570] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZcMdo6aTgKrpAR115v46AAAAIQ"]
[Thu Feb 19 22:45:43.857775 2026] [:error] [pid 5548:tid 5574] [client 43.133.139.6:38172] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZciF5MpsAkdKxbTbsPQ5gAAAZc"]
[Thu Feb 19 23:30:48.347863 2026] [:error] [pid 48901:tid 48923] [client 193.37.32.175:30565] [client 193.37.32.175] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZcsqMixYz-lHbN0WBLvWwAAAA0"]
[Thu Feb 19 23:30:48.708961 2026] [:error] [pid 24048:tid 24066] [client 193.37.32.154:20093] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZcsqGug6wHHqU0QyDYgUQAAAVA"]
[Fri Feb 20 00:35:20.630302 2026] [:error] [pid 24048:tid 24072] [client 106.227.49.113:48915] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZc7yGug6wHHqU0QyDYsNwAAAVY"]
[Fri Feb 20 02:19:16.962560 2026] [proxy_fcgi:error] [pid 5581:tid 5634] [client 172.177.66.108:24528] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:19:17.372260 2026] [proxy_fcgi:error] [pid 5581:tid 5631] [client 172.177.66.108:24528] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:19:18.130797 2026] [:error] [pid 5581:tid 5621] [client 172.177.66.108:24528] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-get.php"] [unique_id "aZdUJnIfW0xlXmrVd3oadgAAAgo"]
[Fri Feb 20 02:19:18.975443 2026] [proxy_fcgi:error] [pid 5580:tid 5587] [client 172.177.66.108:24462] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:19:19.713935 2026] [proxy_fcgi:error] [pid 5580:tid 5589] [client 172.177.66.108:24462] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:19:20.392952 2026] [:error] [pid 5580:tid 5590] [client 172.177.66.108:24462] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/favicon.php"] [unique_id "aZdUKIV24kZpmf6nh3BDlwAAAcc"]
[Fri Feb 20 02:19:21.616474 2026] [:error] [pid 5581:tid 5622] [client 172.177.66.108:24519] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/favicon.php"] [unique_id "aZdUKXIfW0xlXmrVd3oafAAAAgs"]
[Fri Feb 20 02:19:22.629677 2026] [:error] [pid 24048:tid 24062] [client 172.177.66.108:24534] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/favicon.php"] [unique_id "aZdUKmug6wHHqU0QyDZCJgAAAUw"]
[Fri Feb 20 02:19:23.544774 2026] [:error] [pid 5548:tid 5565] [client 172.177.66.108:24529] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/favicon.php"] [unique_id "aZdUK5MpsAkdKxbTbsPzAAAAAY4"]
[Fri Feb 20 02:19:24.652677 2026] [:error] [pid 48902:tid 48948] [client 172.177.66.108:24450] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdULGcJ-6aYRpRRFsVpEAAAAEo"]
[Fri Feb 20 02:19:26.741119 2026] [:error] [pid 48903:tid 48988] [client 172.177.66.108:24455] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdULo6aTgKrpAR115sx1gAAAJc"]
[Fri Feb 20 02:19:28.381868 2026] [:error] [pid 49002:tid 49027] [client 172.177.66.108:24562] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdUMFfcBtQ6hSJuEQmgrgAAAM0"]
[Fri Feb 20 02:19:29.286841 2026] [:error] [pid 5580:tid 5592] [client 172.177.66.108:24449] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdUMYV24kZpmf6nh3BDmQAAAcg"]
[Fri Feb 20 02:19:31.084809 2026] [:error] [pid 48902:tid 48943] [client 172.177.66.108:24561] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZdUM2cJ-6aYRpRRFsVpGAAAAEU"]
[Fri Feb 20 02:19:32.066591 2026] [:error] [pid 24048:tid 24065] [client 172.177.66.108:24565] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uplozyu.php"] [unique_id "aZdUNGug6wHHqU0QyDZCKAAAAU8"]
[Fri Feb 20 02:19:32.852481 2026] [:error] [pid 48902:tid 48955] [client 172.177.66.108:24572] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uplozyu.php"] [unique_id "aZdUNGcJ-6aYRpRRFsVpGQAAAFE"]
[Fri Feb 20 02:19:34.111886 2026] [:error] [pid 5548:tid 5556] [client 172.177.66.108:24513] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uplozyu.php"] [unique_id "aZdUNpMpsAkdKxbTbsPzBAAAAYU"]
[Fri Feb 20 02:19:35.176533 2026] [:error] [pid 5548:tid 5561] [client 172.177.66.108:24558] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZdUN5MpsAkdKxbTbsPzBQAAAYo"]
[Fri Feb 20 02:19:36.305319 2026] [:error] [pid 48902:tid 48944] [client 172.177.66.108:24568] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZdUOGcJ-6aYRpRRFsVpHgAAAEY"]
[Fri Feb 20 02:19:37.380075 2026] [:error] [pid 48903:tid 48984] [client 172.177.66.108:24564] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZdUOY6aTgKrpAR115sx4wAAAJM"]
[Fri Feb 20 02:19:38.019162 2026] [:error] [pid 48901:tid 48913] [client 172.177.66.108:24531] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZdUOsixYz-lHbN0WBIeEwAAAAM"]
[Fri Feb 20 02:19:38.849297 2026] [:error] [pid 49002:tid 49029] [client 172.177.66.108:24549] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aZdUOlfcBtQ6hSJuEQmgugAAAM8"]
[Fri Feb 20 02:19:39.474580 2026] [:error] [pid 5581:tid 5615] [client 172.177.66.108:24525] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aZdUO3IfW0xlXmrVd3oakwAAAgQ"]
[Fri Feb 20 02:19:41.055477 2026] [:error] [pid 49002:tid 49030] [client 172.177.66.108:24491] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aZdUPVfcBtQ6hSJuEQmgvQAAANA"]
[Fri Feb 20 02:19:42.219522 2026] [:error] [pid 5548:tid 5555] [client 172.177.66.108:24457] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/click.php"] [unique_id "aZdUPpMpsAkdKxbTbsPzDAAAAYQ"]
[Fri Feb 20 02:19:43.105482 2026] [:error] [pid 48901:tid 48932] [client 172.177.66.108:24478] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aZdUP8ixYz-lHbN0WBIeFwAAABY"]
[Fri Feb 20 02:19:43.708751 2026] [:error] [pid 48901:tid 48919] [client 172.177.66.108:24554] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aZdUP8ixYz-lHbN0WBIeGAAAAAk"]
[Fri Feb 20 02:19:44.462038 2026] [:error] [pid 49002:tid 49034] [client 172.177.66.108:24556] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aZdUQFfcBtQ6hSJuEQmgvwAAANQ"]
[Fri Feb 20 02:19:45.281054 2026] [:error] [pid 24048:tid 24055] [client 172.177.66.108:24575] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aZdUQWug6wHHqU0QyDZCMAAAAUU"]
[Fri Feb 20 02:19:46.008410 2026] [:error] [pid 24048:tid 24069] [client 172.177.66.108:24573] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aZdUQmug6wHHqU0QyDZCMwAAAVM"]
[Fri Feb 20 02:19:46.902467 2026] [:error] [pid 48902:tid 48942] [client 172.177.66.108:24452] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aZdUQmcJ-6aYRpRRFsVpJwAAAEQ"]
[Fri Feb 20 02:19:47.910867 2026] [:error] [pid 24048:tid 24071] [client 172.177.66.108:24453] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aZdUQ2ug6wHHqU0QyDZCNgAAAVU"]
[Fri Feb 20 02:19:48.580391 2026] [:error] [pid 5548:tid 5562] [client 172.177.66.108:24515] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aZdURJMpsAkdKxbTbsPzDwAAAYs"]
[Fri Feb 20 02:19:49.313305 2026] [:error] [pid 24048:tid 24059] [client 172.177.66.108:24459] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aZdURWug6wHHqU0QyDZCOQAAAUk"]
[Fri Feb 20 02:19:49.987021 2026] [:error] [pid 5580:tid 5600] [client 172.177.66.108:24512] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aZdURYV24kZpmf6nh3BDsQAAAdA"]
[Fri Feb 20 02:19:50.735138 2026] [:error] [pid 24048:tid 24063] [client 172.177.66.108:24563] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aZdURmug6wHHqU0QyDZCOwAAAU0"]
[Fri Feb 20 02:19:51.748010 2026] [:error] [pid 49002:tid 49014] [client 172.177.66.108:24456] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aZdUR1fcBtQ6hSJuEQmgxwAAAMA"]
[Fri Feb 20 02:19:54.108958 2026] [:error] [pid 24048:tid 24059] [client 172.177.66.108:24395] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZdUSmug6wHHqU0QyDZCQQAAAUk"]
[Fri Feb 20 02:19:55.086820 2026] [:error] [pid 24048:tid 24051] [client 172.177.66.108:24524] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZdUS2ug6wHHqU0QyDZCQwAAAUE"]
[Fri Feb 20 02:19:55.597303 2026] [:error] [pid 5548:tid 5563] [client 172.177.66.108:24465] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZdUS5MpsAkdKxbTbsPzEwAAAYw"]
[Fri Feb 20 02:19:56.545514 2026] [:error] [pid 5581:tid 5620] [client 172.177.66.108:24539] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZdUTHIfW0xlXmrVd3oangAAAgk"]
[Fri Feb 20 02:19:57.251923 2026] [:error] [pid 5581:tid 5614] [client 172.177.66.108:24390] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdUTXIfW0xlXmrVd3oaogAAAgM"]
[Fri Feb 20 02:19:58.054323 2026] [:error] [pid 48901:tid 48933] [client 172.177.66.108:24569] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdUTsixYz-lHbN0WBIeIQAAABc"]
[Fri Feb 20 02:19:58.928507 2026] [:error] [pid 48903:tid 48967] [client 172.177.66.108:24466] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdUTo6aTgKrpAR115sx6gAAAII"]
[Fri Feb 20 02:20:00.196393 2026] [:error] [pid 48903:tid 48974] [client 172.177.66.108:24461] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aZdUUI6aTgKrpAR115sx6wAAAIk"]
[Fri Feb 20 02:20:01.814390 2026] [:error] [pid 24048:tid 24052] [client 172.177.66.108:24535] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/ramsey/uuid/about.php"] [unique_id "aZdUUWug6wHHqU0QyDZCSQAAAUI"]
[Fri Feb 20 02:20:03.623882 2026] [:error] [pid 15513:tid 15527] [client 172.177.66.108:24503] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/ramsey/uuid/about.php"] [unique_id "aZdUU8GTRTE022JWg19CzgAAAQw"]
[Fri Feb 20 02:20:04.743308 2026] [:error] [pid 48902:tid 48950] [client 172.177.66.108:24521] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/ramsey/uuid/about.php"] [unique_id "aZdUVGcJ-6aYRpRRFsVpMQAAAEw"]
[Fri Feb 20 02:20:05.794219 2026] [:error] [pid 5580:tid 5601] [client 172.177.66.108:24484] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/ramsey/uuid/about.php"] [unique_id "aZdUVYV24kZpmf6nh3BDvwAAAdE"]
[Fri Feb 20 02:20:07.336654 2026] [:error] [pid 48902:tid 48953] [client 172.177.66.108:24546] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/font/cache.php"] [unique_id "aZdUV2cJ-6aYRpRRFsVpNQAAAE8"]
[Fri Feb 20 02:20:08.613840 2026] [:error] [pid 48902:tid 48946] [client 172.177.66.108:24474] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/font/cache.php"] [unique_id "aZdUWGcJ-6aYRpRRFsVpOQAAAEg"]
[Fri Feb 20 02:20:09.553698 2026] [:error] [pid 15513:tid 15533] [client 172.177.66.108:24570] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/font/cache.php"] [unique_id "aZdUWcGTRTE022JWg19C1AAAARI"]
[Fri Feb 20 02:20:10.895730 2026] [:error] [pid 15513:tid 15529] [client 172.177.66.108:24514] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/font/cache.php"] [unique_id "aZdUWsGTRTE022JWg19C1QAAAQ4"]
[Fri Feb 20 02:20:11.684129 2026] [:error] [pid 15513:tid 15526] [client 172.177.66.108:24460] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aZdUW8GTRTE022JWg19C1gAAAQs"]
[Fri Feb 20 02:20:12.737241 2026] [:error] [pid 48903:tid 48981] [client 172.177.66.108:24467] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aZdUXI6aTgKrpAR115sx-gAAAJA"]
[Fri Feb 20 02:20:13.304168 2026] [:error] [pid 48903:tid 48965] [client 172.177.66.108:24476] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aZdUXY6aTgKrpAR115sx-wAAAIA"]
[Fri Feb 20 02:20:13.961967 2026] [:error] [pid 5581:tid 5618] [client 172.177.66.108:24477] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "aZdUXXIfW0xlXmrVd3oatwAAAgc"]
[Fri Feb 20 02:20:15.198248 2026] [:error] [pid 48901:tid 48932] [client 172.177.66.108:24574] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/wp-casper.php"] [unique_id "aZdUX8ixYz-lHbN0WBIeKgAAABY"]
[Fri Feb 20 02:20:15.782947 2026] [:error] [pid 48903:tid 48987] [client 172.177.66.108:24557] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/wp-casper.php"] [unique_id "aZdUX46aTgKrpAR115sx_QAAAJY"]
[Fri Feb 20 02:20:16.591491 2026] [:error] [pid 5580:tid 5599] [client 172.177.66.108:24524] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/wp-casper.php"] [unique_id "aZdUYIV24kZpmf6nh3BDzAAAAc8"]
[Fri Feb 20 02:20:17.455946 2026] [:error] [pid 5581:tid 5625] [client 172.177.66.108:24438] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/wp-casper.php"] [unique_id "aZdUYXIfW0xlXmrVd3oavQAAAg4"]
[Fri Feb 20 02:20:18.566591 2026] [:error] [pid 48902:tid 48955] [client 172.177.66.108:24541] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aZdUYmcJ-6aYRpRRFsVpPwAAAFE"]
[Fri Feb 20 02:20:19.871473 2026] [:error] [pid 24048:tid 24056] [client 172.177.66.108:24489] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "aZdUY2ug6wHHqU0QyDZCVQAAAUY"]
[Fri Feb 20 02:20:21.338853 2026] [proxy_fcgi:error] [pid 48902:tid 48956] [client 172.177.66.108:24566] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:20:21.552711 2026] [proxy_fcgi:error] [pid 48902:tid 48952] [client 172.177.66.108:24566] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:20:21.772445 2026] [proxy_fcgi:error] [pid 48902:tid 48950] [client 172.177.66.108:24566] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:20:21.982523 2026] [proxy_fcgi:error] [pid 48902:tid 48944] [client 172.177.66.108:24566] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:20:22.191754 2026] [proxy_fcgi:error] [pid 48902:tid 48949] [client 172.177.66.108:24566] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:20:22.614589 2026] [proxy_fcgi:error] [pid 48902:tid 48951] [client 172.177.66.108:24566] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:20:23.533704 2026] [:error] [pid 48902:tid 48956] [client 172.177.66.108:24566] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/indes.php"] [unique_id "aZdUZ2cJ-6aYRpRRFsVpVAAAAFI"]
[Fri Feb 20 02:20:24.937589 2026] [:error] [pid 48903:tid 48988] [client 172.177.66.108:24435] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/indes.php"] [unique_id "aZdUaI6aTgKrpAR115syBwAAAJc"]
[Fri Feb 20 02:20:26.454644 2026] [:error] [pid 48901:tid 48928] [client 172.177.66.108:24483] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/indes.php"] [unique_id "aZdUasixYz-lHbN0WBIeNAAAABI"]
[Fri Feb 20 02:20:27.380800 2026] [:error] [pid 48903:tid 48978] [client 172.177.66.108:24397] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/indes.php"] [unique_id "aZdUa46aTgKrpAR115syCgAAAI0"]
[Fri Feb 20 02:20:27.976679 2026] [:error] [pid 15513:tid 15531] [client 172.177.66.108:24468] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aZdUa8GTRTE022JWg19C3gAAARA"]
[Fri Feb 20 02:20:28.505231 2026] [:error] [pid 49002:tid 49035] [client 172.177.66.108:24487] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aZdUbFfcBtQ6hSJuEQmg4wAAANU"]
[Fri Feb 20 02:20:30.296058 2026] [:error] [pid 24048:tid 24056] [client 172.177.66.108:24536] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aZdUbmug6wHHqU0QyDZCYQAAAUY"]
[Fri Feb 20 02:20:31.895662 2026] [:error] [pid 48903:tid 48969] [client 172.177.66.108:24550] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aZdUb46aTgKrpAR115syDwAAAIQ"]
[Fri Feb 20 02:20:32.827621 2026] [:error] [pid 5581:tid 5634] [client 172.177.66.108:24479] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/credits-all.php"] [unique_id "aZdUcHIfW0xlXmrVd3oaygAAAhc"]
[Fri Feb 20 02:20:35.990227 2026] [:error] [pid 5581:tid 5626] [client 172.177.66.108:24532] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/credits-all.php"] [unique_id "aZdUc3IfW0xlXmrVd3oa0gAAAg8"]
[Fri Feb 20 02:20:36.512003 2026] [:error] [pid 48901:tid 48914] [client 172.177.66.108:24488] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/credits-all.php"] [unique_id "aZdUdMixYz-lHbN0WBIeQgAAAAQ"]
[Fri Feb 20 02:20:37.271727 2026] [:error] [pid 48901:tid 48918] [client 172.177.66.108:24517] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/credits-all.php"] [unique_id "aZdUdcixYz-lHbN0WBIeRgAAAAg"]
[Fri Feb 20 02:20:38.769119 2026] [:error] [pid 5580:tid 5602] [client 172.177.66.108:24454] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aZdUdoV24kZpmf6nh3BD0wAAAdI"]
[Fri Feb 20 02:20:39.797149 2026] [:error] [pid 15513:tid 15517] [client 172.177.66.108:24485] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aZdUd8GTRTE022JWg19C7QAAAQI"]
[Fri Feb 20 02:20:40.667630 2026] [:error] [pid 15513:tid 15522] [client 172.177.66.108:24538] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aZdUeMGTRTE022JWg19C7gAAAQc"]
[Fri Feb 20 02:20:42.234106 2026] [:error] [pid 15513:tid 15520] [client 172.177.66.108:24544] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "aZdUesGTRTE022JWg19C8QAAAQU"]
[Fri Feb 20 02:20:43.010109 2026] [:error] [pid 48901:tid 48924] [client 172.177.66.108:24385] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aZdUe8ixYz-lHbN0WBIeUAAAAA4"]
[Fri Feb 20 02:20:43.821609 2026] [:error] [pid 48903:tid 48972] [client 172.177.66.108:24571] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aZdUe46aTgKrpAR115syEgAAAIc"]
[Fri Feb 20 02:20:44.959220 2026] [:error] [pid 5548:tid 5563] [client 172.177.66.108:24486] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aZdUfJMpsAkdKxbTbsPzJQAAAYw"]
[Fri Feb 20 02:20:46.031882 2026] [:error] [pid 5581:tid 5619] [client 172.177.66.108:24384] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "aZdUfnIfW0xlXmrVd3oa3gAAAgg"]
[Fri Feb 20 02:20:47.176944 2026] [:error] [pid 5548:tid 5567] [client 172.177.66.108:24407] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aZdUf5MpsAkdKxbTbsPzKAAAAZA"]
[Fri Feb 20 02:20:48.361585 2026] [:error] [pid 5581:tid 5618] [client 172.177.66.108:24404] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aZdUgHIfW0xlXmrVd3oa4wAAAgc"]
[Fri Feb 20 02:20:49.349095 2026] [:error] [pid 48903:tid 48966] [client 172.177.66.108:24470] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aZdUgY6aTgKrpAR115syFQAAAIE"]
[Fri Feb 20 02:20:50.278335 2026] [:error] [pid 24048:tid 24062] [client 172.177.66.108:24523] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/dodo.php"] [unique_id "aZdUgmug6wHHqU0QyDZCagAAAUw"]
[Fri Feb 20 02:20:50.982602 2026] [:error] [pid 48903:tid 48973] [client 172.177.66.108:24471] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main3/capcha/font/favicon.php"] [unique_id "aZdUgo6aTgKrpAR115syFgAAAIg"]
[Fri Feb 20 02:20:52.829727 2026] [:error] [pid 48903:tid 48969] [client 172.177.66.108:24509] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main3/capcha/font/favicon.php"] [unique_id "aZdUhI6aTgKrpAR115syGAAAAIQ"]
[Fri Feb 20 02:20:54.452562 2026] [:error] [pid 5581:tid 5616] [client 172.177.66.108:24508] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main3/capcha/font/favicon.php"] [unique_id "aZdUhnIfW0xlXmrVd3oa6AAAAgU"]
[Fri Feb 20 02:20:55.614511 2026] [:error] [pid 5581:tid 5623] [client 172.177.66.108:24548] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main3/capcha/font/favicon.php"] [unique_id "aZdUh3IfW0xlXmrVd3oa7AAAAgw"]
[Fri Feb 20 02:20:57.505162 2026] [:error] [pid 48903:tid 48977] [client 172.177.66.108:24502] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/class-wp-privacy-requests-table-method.php"] [unique_id "aZdUiY6aTgKrpAR115syHAAAAIw"]
[Fri Feb 20 02:20:58.489248 2026] [:error] [pid 15513:tid 15517] [client 172.177.66.108:24507] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/class-wp-privacy-requests-table-method.php"] [unique_id "aZdUisGTRTE022JWg19C9wAAAQI"]
[Fri Feb 20 02:20:59.590981 2026] [:error] [pid 24048:tid 24051] [client 172.177.66.108:24473] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/class-wp-privacy-requests-table-method.php"] [unique_id "aZdUi2ug6wHHqU0QyDZCcAAAAUE"]
[Fri Feb 20 02:21:00.509674 2026] [:error] [pid 5548:tid 5567] [client 172.177.66.108:24448] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/class-wp-privacy-requests-table-method.php"] [unique_id "aZdUjJMpsAkdKxbTbsPzMQAAAZA"]
[Fri Feb 20 02:21:01.752788 2026] [:error] [pid 5581:tid 5633] [client 172.177.66.108:24567] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/autoconfig/atomlib.php"] [unique_id "aZdUjXIfW0xlXmrVd3oa9QAAAhY"]
[Fri Feb 20 02:21:02.772210 2026] [:error] [pid 5548:tid 5575] [client 172.177.66.108:24431] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/autoconfig/atomlib.php"] [unique_id "aZdUjpMpsAkdKxbTbsPzNQAAAZg"]
[Fri Feb 20 02:21:04.025212 2026] [:error] [pid 5580:tid 5598] [client 172.177.66.108:24463] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/autoconfig/atomlib.php"] [unique_id "aZdUkIV24kZpmf6nh3BD5wAAAc4"]
[Fri Feb 20 02:21:06.652274 2026] [:error] [pid 5580:tid 5596] [client 172.177.66.108:24495] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/autoconfig/atomlib.php"] [unique_id "aZdUkoV24kZpmf6nh3BD8AAAAcw"]
[Fri Feb 20 02:21:08.621172 2026] [:error] [pid 15513:tid 15532] [client 172.177.66.108:24500] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aZdUlMGTRTE022JWg19DAgAAARE"]
[Fri Feb 20 02:21:10.050785 2026] [:error] [pid 24048:tid 24070] [client 172.177.66.108:24516] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aZdUlmug6wHHqU0QyDZCdgAAAVQ"]
[Fri Feb 20 02:21:12.716870 2026] [:error] [pid 5580:tid 5584] [client 172.177.66.108:24402] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aZdUmIV24kZpmf6nh3BD9QAAAcE"]
[Fri Feb 20 02:21:14.210132 2026] [:error] [pid 15513:tid 15531] [client 172.177.66.108:24504] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aZdUmsGTRTE022JWg19DCAAAARA"]
[Fri Feb 20 02:21:15.267680 2026] [:error] [pid 48903:tid 48982] [client 172.177.66.108:24552] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xss/about.php7"] [unique_id "aZdUm46aTgKrpAR115syKAAAAJE"]
[Fri Feb 20 02:21:16.325266 2026] [:error] [pid 48901:tid 48913] [client 172.177.66.108:24398] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xss/about.php7"] [unique_id "aZdUnMixYz-lHbN0WBIeZQAAAAM"]
[Fri Feb 20 02:21:17.627847 2026] [:error] [pid 48902:tid 48952] [client 172.177.66.108:24386] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xss/about.php7"] [unique_id "aZdUnWcJ-6aYRpRRFsVpeAAAAE4"]
[Fri Feb 20 02:21:18.783771 2026] [:error] [pid 49002:tid 49036] [client 172.177.66.108:24537] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xss/about.php7"] [unique_id "aZdUnlfcBtQ6hSJuEQmg-QAAANY"]
[Fri Feb 20 02:21:20.001988 2026] [:error] [pid 48902:tid 48944] [client 172.177.66.108:24439] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aZdUoGcJ-6aYRpRRFsVpeQAAAEY"]
[Fri Feb 20 02:21:22.295459 2026] [:error] [pid 49002:tid 49032] [client 172.177.66.108:24323] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "aZdUolfcBtQ6hSJuEQmg_AAAANI"]
[Fri Feb 20 02:21:23.388983 2026] [proxy_fcgi:error] [pid 48903:tid 48989] [client 172.177.66.108:24393] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:21:23.593754 2026] [proxy_fcgi:error] [pid 48903:tid 48977] [client 172.177.66.108:24393] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:21:24.913689 2026] [proxy_fcgi:error] [pid 48903:tid 48980] [client 172.177.66.108:24393] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:21:25.117760 2026] [proxy_fcgi:error] [pid 48903:tid 48982] [client 172.177.66.108:24393] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:21:25.545014 2026] [proxy_fcgi:error] [pid 48903:tid 48984] [client 172.177.66.108:24393] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:21:25.950630 2026] [:error] [pid 48903:tid 48966] [client 172.177.66.108:24393] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/buy.php"] [unique_id "aZdUpY6aTgKrpAR115syOgAAAIE"]
[Fri Feb 20 02:21:27.033481 2026] [proxy_fcgi:error] [pid 49002:tid 49014] [client 172.177.66.108:24475] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:21:28.070507 2026] [:error] [pid 49002:tid 49025] [client 172.177.66.108:24475] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo//wp-includes/pomo/about.php"] [unique_id "aZdUqFfcBtQ6hSJuEQmhBQAAAMs"]
[Fri Feb 20 02:21:30.252265 2026] [:error] [pid 48902:tid 48954] [client 172.177.66.108:24533] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/client-dashboard.php"] [unique_id "aZdUqmcJ-6aYRpRRFsVpfQAAAFA"]
[Fri Feb 20 02:21:31.512986 2026] [:error] [pid 48903:tid 48974] [client 172.177.66.108:24551] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wpr-addons/forms/copypaths.php"] [unique_id "aZdUq46aTgKrpAR115syQAAAAIk"]
[Fri Feb 20 02:21:32.449047 2026] [:error] [pid 15513:tid 15518] [client 172.177.66.108:24540] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wpr-addons/forms/copypaths.php"] [unique_id "aZdUrMGTRTE022JWg19DDgAAAQM"]
[Fri Feb 20 02:21:35.007212 2026] [:error] [pid 24048:tid 24054] [client 172.177.66.108:24472] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wpr-addons/forms/copypaths.php"] [unique_id "aZdUr2ug6wHHqU0QyDZCgQAAAUQ"]
[Fri Feb 20 02:21:38.983017 2026] [:error] [pid 48901:tid 48910] [client 172.177.66.108:24510] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wpr-addons/forms/copypaths.php"] [unique_id "aZdUssixYz-lHbN0WBIeeAAAAAA"]
[Fri Feb 20 02:21:41.634645 2026] [:error] [pid 49002:tid 49014] [client 172.177.66.108:24442] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZdUtVfcBtQ6hSJuEQmhHAAAAMA"]
[Fri Feb 20 02:21:43.196612 2026] [:error] [pid 48901:tid 48922] [client 172.177.66.108:24469] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/getid3s.php"] [unique_id "aZdUt8ixYz-lHbN0WBIegwAAAAw"]
[Fri Feb 20 02:21:45.147327 2026] [:error] [pid 24048:tid 24062] [client 172.177.66.108:24547] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aZdUuWug6wHHqU0QyDZChQAAAUw"]
[Fri Feb 20 02:21:46.536522 2026] [:error] [pid 48903:tid 48987] [client 172.177.66.108:24388] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aZdUuo6aTgKrpAR115sySQAAAJY"]
[Fri Feb 20 02:21:47.963002 2026] [:error] [pid 49002:tid 49033] [client 172.177.66.108:24415] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aZdUu1fcBtQ6hSJuEQmhJwAAANM"]
[Fri Feb 20 02:21:49.944729 2026] [:error] [pid 48901:tid 48914] [client 172.177.66.108:24493] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aZdUvcixYz-lHbN0WBIejAAAAAQ"]
[Fri Feb 20 02:21:50.795673 2026] [:error] [pid 5580:tid 5602] [client 172.177.66.108:24426] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/lufix.php"] [unique_id "aZdUvoV24kZpmf6nh3BEEAAAAdI"]
[Fri Feb 20 02:21:52.705438 2026] [:error] [pid 24048:tid 24064] [client 172.177.66.108:24408] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/lufix.php"] [unique_id "aZdUwGug6wHHqU0QyDZCkAAAAU4"]
[Fri Feb 20 02:21:54.767730 2026] [:error] [pid 15513:tid 15530] [client 172.177.66.108:24451] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/lufix.php"] [unique_id "aZdUwsGTRTE022JWg19DGAAAAQ8"]
[Fri Feb 20 02:21:57.806996 2026] [:error] [pid 5581:tid 5622] [client 172.177.66.108:24507] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/lufix.php"] [unique_id "aZdUxXIfW0xlXmrVd3obGQAAAgs"]
[Fri Feb 20 02:21:59.024400 2026] [:error] [pid 48901:tid 48931] [client 172.177.66.108:24392] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdUx8ixYz-lHbN0WBIemgAAABU"]
[Fri Feb 20 02:21:59.708034 2026] [:error] [pid 24048:tid 24066] [client 172.177.66.108:24497] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdUx2ug6wHHqU0QyDZCmQAAAVA"]
[Fri Feb 20 02:22:00.688401 2026] [:error] [pid 5580:tid 5601] [client 172.177.66.108:24458] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdUyIV24kZpmf6nh3BEGgAAAdE"]
[Fri Feb 20 02:22:01.968219 2026] [:error] [pid 5581:tid 5624] [client 172.177.66.108:24399] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdUyXIfW0xlXmrVd3obHwAAAg0"]
[Fri Feb 20 02:22:02.708083 2026] [:error] [pid 24048:tid 24057] [client 172.177.66.108:24506] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/wp-login.php"] [unique_id "aZdUymug6wHHqU0QyDZCngAAAUc"]
[Fri Feb 20 02:22:03.824971 2026] [:error] [pid 48902:tid 48941] [client 172.177.66.108:24482] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/wp-login.php"] [unique_id "aZdUy2cJ-6aYRpRRFsVphwAAAEM"]
[Fri Feb 20 02:22:05.027914 2026] [:error] [pid 5548:tid 5564] [client 172.177.66.108:24511] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/wp-login.php"] [unique_id "aZdUzZMpsAkdKxbTbsPzVgAAAY0"]
[Fri Feb 20 02:22:06.813813 2026] [:error] [pid 5581:tid 5634] [client 172.177.66.108:24423] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/wp-login.php"] [unique_id "aZdUznIfW0xlXmrVd3obKQAAAhc"]
[Fri Feb 20 02:22:07.420861 2026] [:error] [pid 49002:tid 49021] [client 172.177.66.108:24321] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen/function.php"] [unique_id "aZdUz1fcBtQ6hSJuEQmhMQAAAMc"]
[Fri Feb 20 02:22:08.244126 2026] [:error] [pid 5581:tid 5614] [client 172.177.66.108:24498] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen/function.php"] [unique_id "aZdU0HIfW0xlXmrVd3obLAAAAgM"]
[Fri Feb 20 02:22:09.497921 2026] [:error] [pid 5548:tid 5574] [client 172.177.66.108:24437] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen/function.php"] [unique_id "aZdU0ZMpsAkdKxbTbsPzWgAAAZc"]
[Fri Feb 20 02:22:10.088077 2026] [:error] [pid 48901:tid 48912] [client 172.177.66.108:24480] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen/function.php"] [unique_id "aZdU0sixYz-lHbN0WBIeogAAAAI"]
[Fri Feb 20 02:22:11.713499 2026] [:error] [pid 15513:tid 15524] [client 172.177.66.108:24446] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.bod/.ll/ss.php"] [unique_id "aZdU08GTRTE022JWg19DMAAAAQk"]
[Fri Feb 20 02:22:12.388751 2026] [:error] [pid 15513:tid 15521] [client 172.177.66.108:24436] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.bod/.ll/ss.php"] [unique_id "aZdU1MGTRTE022JWg19DMgAAAQY"]
[Fri Feb 20 02:22:13.254013 2026] [:error] [pid 49002:tid 49032] [client 172.177.66.108:24364] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.bod/.ll/ss.php"] [unique_id "aZdU1VfcBtQ6hSJuEQmhOgAAANI"]
[Fri Feb 20 02:22:14.983089 2026] [:error] [pid 24048:tid 24060] [client 172.177.66.108:24412] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.bod/.ll/ss.php"] [unique_id "aZdU1mug6wHHqU0QyDZCogAAAUo"]
[Fri Feb 20 02:22:15.600906 2026] [:error] [pid 48901:tid 48929] [client 172.177.66.108:24403] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aZdU18ixYz-lHbN0WBIepQAAABM"]
[Fri Feb 20 02:22:16.584987 2026] [:error] [pid 15513:tid 15525] [client 172.177.66.108:24194] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aZdU2MGTRTE022JWg19DNwAAAQo"]
[Fri Feb 20 02:22:17.210871 2026] [:error] [pid 49002:tid 49028] [client 172.177.66.108:24346] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aZdU2VfcBtQ6hSJuEQmhPgAAAM4"]
[Fri Feb 20 02:22:19.075438 2026] [:error] [pid 48901:tid 48914] [client 172.177.66.108:24518] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aZdU28ixYz-lHbN0WBIerwAAAAQ"]
[Fri Feb 20 02:22:20.501368 2026] [:error] [pid 48901:tid 48931] [client 172.177.66.108:24202] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZdU3MixYz-lHbN0WBIesgAAABU"]
[Fri Feb 20 02:22:21.383992 2026] [:error] [pid 48902:tid 48951] [client 172.177.66.108:24409] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZdU3WcJ-6aYRpRRFsVpkAAAAE0"]
[Fri Feb 20 02:22:22.342455 2026] [:error] [pid 15513:tid 15519] [client 172.177.66.108:24411] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZdU3sGTRTE022JWg19DOQAAAQQ"]
[Fri Feb 20 02:22:22.866178 2026] [:error] [pid 5581:tid 5612] [client 172.177.66.108:24526] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZdU3nIfW0xlXmrVd3obOwAAAgE"]
[Fri Feb 20 02:22:24.796428 2026] [:error] [pid 15513:tid 15530] [client 172.177.66.108:24422] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aZdU4MGTRTE022JWg19DPAAAAQ8"]
[Fri Feb 20 02:22:26.360492 2026] [:error] [pid 48903:tid 48972] [client 172.177.66.108:24329] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aZdU4o6aTgKrpAR115syYQAAAIc"]
[Fri Feb 20 02:22:27.432907 2026] [proxy_fcgi:error] [pid 48903:tid 48970] [client 172.177.66.108:24401] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:22:27.641121 2026] [:error] [pid 48903:tid 48965] [client 172.177.66.108:24401] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Decode/admin.php"] [unique_id "aZdU446aTgKrpAR115syZgAAAIA"]
[Fri Feb 20 02:22:29.203646 2026] [proxy_fcgi:error] [pid 5581:tid 5630] [client 172.177.66.108:24375] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:22:29.421314 2026] [proxy_fcgi:error] [pid 5581:tid 5611] [client 172.177.66.108:24375] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:22:30.043838 2026] [proxy_fcgi:error] [pid 5581:tid 5634] [client 172.177.66.108:24375] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:22:31.470795 2026] [:error] [pid 5581:tid 5619] [client 172.177.66.108:24375] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aZdU53IfW0xlXmrVd3obUQAAAgg"]
[Fri Feb 20 02:22:32.503206 2026] [:error] [pid 5580:tid 5599] [client 172.177.66.108:24410] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aZdU6IV24kZpmf6nh3BEKgAAAc8"]
[Fri Feb 20 02:22:33.408112 2026] [:error] [pid 5581:tid 5633] [client 172.177.66.108:24413] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aZdU6XIfW0xlXmrVd3obVQAAAhY"]
[Fri Feb 20 02:22:34.168842 2026] [:error] [pid 5581:tid 5621] [client 172.177.66.108:24545] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aZdU6nIfW0xlXmrVd3obVwAAAgo"]
[Fri Feb 20 02:22:35.050029 2026] [:error] [pid 15513:tid 15533] [client 172.177.66.108:24372] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/contacto.php"] [unique_id "aZdU68GTRTE022JWg19DSwAAARI"]
[Fri Feb 20 02:22:35.913209 2026] [:error] [pid 15513:tid 15520] [client 172.177.66.108:24432] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/contacto.php"] [unique_id "aZdU68GTRTE022JWg19DTAAAAQU"]
[Fri Feb 20 02:22:37.944170 2026] [:error] [pid 5580:tid 5592] [client 172.177.66.108:24444] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/contacto.php"] [unique_id "aZdU7YV24kZpmf6nh3BELgAAAcg"]
[Fri Feb 20 02:22:38.404856 2026] [:error] [pid 24048:tid 24066] [client 172.177.66.108:24559] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/contacto.php"] [unique_id "aZdU7mug6wHHqU0QyDZCrQAAAVA"]
[Fri Feb 20 02:22:38.968623 2026] [:error] [pid 5581:tid 5635] [client 172.177.66.108:24324] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/aboud.php"] [unique_id "aZdU7nIfW0xlXmrVd3obYgAAAhg"]
[Fri Feb 20 02:22:39.545471 2026] [:error] [pid 5548:tid 5552] [client 172.177.66.108:24505] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/aboud.php"] [unique_id "aZdU75MpsAkdKxbTbsPzaQAAAYE"]
[Fri Feb 20 02:22:40.225135 2026] [:error] [pid 48903:tid 48977] [client 172.177.66.108:24560] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/aboud.php"] [unique_id "aZdU8I6aTgKrpAR115syawAAAIw"]
[Fri Feb 20 02:22:41.009421 2026] [:error] [pid 48901:tid 48920] [client 172.177.66.108:24355] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/aboud.php"] [unique_id "aZdU8cixYz-lHbN0WBIewwAAAAo"]
[Fri Feb 20 02:22:41.796367 2026] [:error] [pid 48903:tid 48981] [client 172.177.66.108:24499] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aZdU8Y6aTgKrpAR115sybQAAAJA"]
[Fri Feb 20 02:22:42.477645 2026] [:error] [pid 5580:tid 5603] [client 172.177.66.108:24530] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aZdU8oV24kZpmf6nh3BEMAAAAdM"]
[Fri Feb 20 02:22:43.320261 2026] [:error] [pid 48903:tid 48970] [client 172.177.66.108:24564] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aZdU846aTgKrpAR115sybgAAAIU"]
[Fri Feb 20 02:22:44.290192 2026] [:error] [pid 49002:tid 49036] [client 172.177.66.108:24433] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aZdU9FfcBtQ6hSJuEQmhUAAAANY"]
[Fri Feb 20 02:22:45.055043 2026] [:error] [pid 48901:tid 48919] [client 172.177.66.108:24405] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi002.PhP"] [unique_id "aZdU9cixYz-lHbN0WBIeyQAAAAk"]
[Fri Feb 20 02:22:46.057621 2026] [:error] [pid 5548:tid 5551] [client 172.177.66.108:24464] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi002.PhP"] [unique_id "aZdU9pMpsAkdKxbTbsPzbQAAAYA"]
[Fri Feb 20 02:22:46.807164 2026] [:error] [pid 24048:tid 24072] [client 172.177.66.108:24320] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi002.PhP"] [unique_id "aZdU9mug6wHHqU0QyDZCtQAAAVY"]
[Fri Feb 20 02:22:48.266972 2026] [:error] [pid 5581:tid 5634] [client 172.177.66.108:24208] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi002.PhP"] [unique_id "aZdU-HIfW0xlXmrVd3obawAAAhc"]
[Fri Feb 20 02:22:49.293333 2026] [:error] [pid 48901:tid 48917] [client 172.177.66.108:24418] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/index.php"] [unique_id "aZdU-cixYz-lHbN0WBIezQAAAAc"]
[Fri Feb 20 02:22:49.954953 2026] [:error] [pid 5580:tid 5593] [client 172.177.66.108:24424] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/lint-branch.php"] [unique_id "aZdU-YV24kZpmf6nh3BEOAAAAck"]
[Fri Feb 20 02:22:51.094037 2026] [:error] [pid 48902:tid 48948] [client 172.177.66.108:24331] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/lint-branch.php"] [unique_id "aZdU-2cJ-6aYRpRRFsVpoAAAAEo"]
[Fri Feb 20 02:22:51.821513 2026] [:error] [pid 48903:tid 48987] [client 172.177.66.108:24231] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/lint-branch.php"] [unique_id "aZdU-46aTgKrpAR115syfQAAAJY"]
[Fri Feb 20 02:22:52.495787 2026] [:error] [pid 48902:tid 48949] [client 172.177.66.108:24555] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/lint-branch.php"] [unique_id "aZdU_GcJ-6aYRpRRFsVppQAAAEs"]
[Fri Feb 20 02:22:53.647581 2026] [:error] [pid 48901:tid 48928] [client 172.177.66.108:24343] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/upload.php"] [unique_id "aZdU_cixYz-lHbN0WBIezwAAABI"]
[Fri Feb 20 02:22:55.240829 2026] [:error] [pid 5580:tid 5602] [client 172.177.66.108:24429] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/upload.php"] [unique_id "aZdU_4V24kZpmf6nh3BERAAAAdI"]
[Fri Feb 20 02:22:56.079459 2026] [:error] [pid 48901:tid 48934] [client 172.177.66.108:24332] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/upload.php"] [unique_id "aZdVAMixYz-lHbN0WBIe1gAAABg"]
[Fri Feb 20 02:22:57.201001 2026] [:error] [pid 5580:tid 5586] [client 172.177.66.108:24440] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/upload.php"] [unique_id "aZdVAYV24kZpmf6nh3BESgAAAcM"]
[Fri Feb 20 02:22:58.263933 2026] [:error] [pid 24048:tid 24069] [client 172.177.66.108:24501] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2018/03/ab.php"] [unique_id "aZdVAmug6wHHqU0QyDZCtwAAAVM"]
[Fri Feb 20 02:22:59.070930 2026] [:error] [pid 15513:tid 15520] [client 172.177.66.108:24340] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2018/03/ab.php"] [unique_id "aZdVA8GTRTE022JWg19DVQAAAQU"]
[Fri Feb 20 02:22:59.890269 2026] [:error] [pid 24048:tid 24068] [client 172.177.66.108:24441] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2018/03/ab.php"] [unique_id "aZdVA2ug6wHHqU0QyDZCugAAAVI"]
[Fri Feb 20 02:23:00.634227 2026] [:error] [pid 48903:tid 48972] [client 172.177.66.108:24542] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2018/03/ab.php"] [unique_id "aZdVBI6aTgKrpAR115sygwAAAIc"]
[Fri Feb 20 02:23:01.614602 2026] [:error] [pid 48901:tid 48922] [client 172.177.66.108:24417] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aZdVBcixYz-lHbN0WBIe3QAAAAw"]
[Fri Feb 20 02:23:02.622147 2026] [:error] [pid 5580:tid 5586] [client 172.177.66.108:24330] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aZdVBoV24kZpmf6nh3BEUQAAAcM"]
[Fri Feb 20 02:23:03.256973 2026] [:error] [pid 5580:tid 5605] [client 172.177.66.108:24356] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aZdVB4V24kZpmf6nh3BEUgAAAdU"]
[Fri Feb 20 02:23:04.422289 2026] [:error] [pid 48902:tid 48953] [client 172.177.66.108:24339] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "aZdVCGcJ-6aYRpRRFsVprAAAAE8"]
[Fri Feb 20 02:23:05.943235 2026] [:error] [pid 24048:tid 24059] [client 172.177.66.108:24394] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/wp-blog.php"] [unique_id "aZdVCWug6wHHqU0QyDZCvQAAAUk"]
[Fri Feb 20 02:23:07.382051 2026] [:error] [pid 24048:tid 24066] [client 172.177.66.108:24328] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/wp-blog.php"] [unique_id "aZdVC2ug6wHHqU0QyDZCvwAAAVA"]
[Fri Feb 20 02:23:08.606884 2026] [:error] [pid 24048:tid 24067] [client 172.177.66.108:24215] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/wp-blog.php"] [unique_id "aZdVDGug6wHHqU0QyDZCwwAAAVE"]
[Fri Feb 20 02:23:09.349799 2026] [:error] [pid 5548:tid 5567] [client 172.177.66.108:24420] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/wp-blog.php"] [unique_id "aZdVDZMpsAkdKxbTbsPzdQAAAZA"]
[Fri Feb 20 02:23:10.192312 2026] [:error] [pid 48902:tid 48946] [client 172.177.66.108:24522] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/gaukingo/db.php"] [unique_id "aZdVDmcJ-6aYRpRRFsVpsQAAAEg"]
[Fri Feb 20 02:23:10.951197 2026] [:error] [pid 5548:tid 5564] [client 172.177.66.108:24326] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/gaukingo/db.php"] [unique_id "aZdVDpMpsAkdKxbTbsPzdwAAAY0"]
[Fri Feb 20 02:23:12.866209 2026] [:error] [pid 5581:tid 5629] [client 172.177.66.108:24428] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/gaukingo/db.php"] [unique_id "aZdVEHIfW0xlXmrVd3obqgAAAhI"]
[Fri Feb 20 02:23:14.365923 2026] [:error] [pid 15513:tid 15518] [client 172.177.66.108:24228] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/gaukingo/db.php"] [unique_id "aZdVEsGTRTE022JWg19DZwAAAQM"]
[Fri Feb 20 02:23:15.547585 2026] [:error] [pid 48903:tid 48975] [client 172.177.66.108:24196] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aZdVE46aTgKrpAR115sylAAAAIo"]
[Fri Feb 20 02:23:17.265354 2026] [:error] [pid 5580:tid 5592] [client 172.177.66.108:24337] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aZdVFYV24kZpmf6nh3BEYwAAAcg"]
[Fri Feb 20 02:23:17.749027 2026] [:error] [pid 15513:tid 15538] [client 172.177.66.108:24376] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aZdVFcGTRTE022JWg19DbgAAARc"]
[Fri Feb 20 02:23:18.890737 2026] [:error] [pid 49002:tid 49017] [client 172.177.66.108:24447] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aZdVFlfcBtQ6hSJuEQmhZgAAAMM"]
[Fri Feb 20 02:23:20.077646 2026] [:error] [pid 48902:tid 48960] [client 172.177.66.108:24396] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resources/cache.php"] [unique_id "aZdVGGcJ-6aYRpRRFsVpugAAAFY"]
[Fri Feb 20 02:23:20.897914 2026] [:error] [pid 5581:tid 5631] [client 172.177.66.108:24362] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resources/cache.php"] [unique_id "aZdVGHIfW0xlXmrVd3obswAAAhQ"]
[Fri Feb 20 02:23:22.094295 2026] [:error] [pid 48901:tid 48922] [client 172.177.66.108:24425] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resources/cache.php"] [unique_id "aZdVGsixYz-lHbN0WBIe8QAAAAw"]
[Fri Feb 20 02:23:22.845842 2026] [:error] [pid 48902:tid 48961] [client 172.177.66.108:24282] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resources/cache.php"] [unique_id "aZdVGmcJ-6aYRpRRFsVpwAAAAFc"]
[Fri Feb 20 02:23:23.783031 2026] [:error] [pid 48901:tid 48911] [client 172.177.66.108:24200] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aZdVG8ixYz-lHbN0WBIe9QAAAAE"]
[Fri Feb 20 02:23:24.845575 2026] [:error] [pid 5581:tid 5634] [client 172.177.66.108:24553] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aZdVHHIfW0xlXmrVd3obvQAAAhc"]
[Fri Feb 20 02:23:25.693332 2026] [:error] [pid 48901:tid 48929] [client 172.177.66.108:24527] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aZdVHcixYz-lHbN0WBIe-QAAABM"]
[Fri Feb 20 02:23:26.544661 2026] [:error] [pid 48901:tid 48922] [client 172.177.66.108:24391] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aZdVHsixYz-lHbN0WBIe_gAAAAw"]
[Fri Feb 20 02:23:27.257796 2026] [:error] [pid 5548:tid 5554] [client 172.177.66.108:24389] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZdVH5MpsAkdKxbTbsPzhgAAAYM"]
[Fri Feb 20 02:23:28.020517 2026] [:error] [pid 48903:tid 48975] [client 172.177.66.108:24250] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZdVII6aTgKrpAR115synQAAAIo"]
[Fri Feb 20 02:23:28.662355 2026] [:error] [pid 48903:tid 48971] [client 172.177.66.108:24207] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZdVII6aTgKrpAR115synwAAAIY"]
[Fri Feb 20 02:23:29.991687 2026] [:error] [pid 48902:tid 48950] [client 172.177.66.108:24445] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZdVIWcJ-6aYRpRRFsVpzAAAAEw"]
[Fri Feb 20 02:23:30.971627 2026] [:error] [pid 5548:tid 5560] [client 172.177.66.108:24216] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/g3.php"] [unique_id "aZdVIpMpsAkdKxbTbsPzjgAAAYk"]
[Fri Feb 20 02:23:32.220150 2026] [:error] [pid 15513:tid 15521] [client 172.177.66.108:24347] [client 172.177.66.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.177.66.108, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.well-known/wp-login.php"] [unique_id "aZdVJMGTRTE022JWg19DewAAAQY"]
[Fri Feb 20 02:23:32.229678 2026] [proxy_fcgi:error] [pid 15513:tid 15521] [client 172.177.66.108:24347] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:23:33.174708 2026] [proxy_fcgi:error] [pid 15513:tid 15531] [client 172.177.66.108:24347] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:23:33.587495 2026] [:error] [pid 15513:tid 15533] [client 172.177.66.108:24347] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/cs.php"] [unique_id "aZdVJcGTRTE022JWg19DgQAAARI"]
[Fri Feb 20 02:23:35.911129 2026] [proxy_fcgi:error] [pid 5580:tid 5596] [client 172.177.66.108:24341] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:23:36.114166 2026] [proxy_fcgi:error] [pid 5580:tid 5595] [client 172.177.66.108:24341] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:23:36.317128 2026] [:error] [pid 5580:tid 5602] [client 172.177.66.108:24341] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/data.php"] [unique_id "aZdVKIV24kZpmf6nh3BEeAAAAdI"]
[Fri Feb 20 02:23:39.809712 2026] [:error] [pid 5581:tid 5619] [client 172.177.66.108:24358] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/index.php"] [unique_id "aZdVK3IfW0xlXmrVd3obzAAAAgg"]
[Fri Feb 20 02:23:40.990244 2026] [:error] [pid 49002:tid 49025] [client 172.177.66.108:24353] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/index.php"] [unique_id "aZdVLFfcBtQ6hSJuEQmhcAAAAMs"]
[Fri Feb 20 02:23:41.623997 2026] [:error] [pid 24048:tid 24050] [client 172.177.66.108:24193] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/index.php"] [unique_id "aZdVLWug6wHHqU0QyDZC1AAAAUA"]
[Fri Feb 20 02:23:42.666271 2026] [:error] [pid 5581:tid 5616] [client 172.177.66.108:24365] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aZdVLnIfW0xlXmrVd3ob1QAAAgU"]
[Fri Feb 20 02:23:43.684055 2026] [:error] [pid 5580:tid 5603] [client 172.177.66.108:24342] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/about.php"] [unique_id "aZdVL4V24kZpmf6nh3BEfgAAAdM"]
[Fri Feb 20 02:23:44.289629 2026] [:error] [pid 5581:tid 5620] [client 172.177.66.108:24387] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/about.php"] [unique_id "aZdVMHIfW0xlXmrVd3ob2AAAAgk"]
[Fri Feb 20 02:23:45.652396 2026] [:error] [pid 5548:tid 5561] [client 172.177.66.108:24348] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/about.php"] [unique_id "aZdVMZMpsAkdKxbTbsPzlQAAAYo"]
[Fri Feb 20 02:23:46.362000 2026] [:error] [pid 24048:tid 24074] [client 172.177.66.108:24197] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/index.php"] [unique_id "aZdVMmug6wHHqU0QyDZC1gAAAVg"]
[Fri Feb 20 02:23:46.960095 2026] [:error] [pid 48901:tid 48912] [client 172.177.66.108:24213] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/index.php"] [unique_id "aZdVMsixYz-lHbN0WBIfEQAAAAI"]
[Fri Feb 20 02:23:47.467018 2026] [:error] [pid 48903:tid 48974] [client 172.177.66.108:24427] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/index.php"] [unique_id "aZdVM46aTgKrpAR115sypwAAAIk"]
[Fri Feb 20 02:23:48.083784 2026] [:error] [pid 48901:tid 48921] [client 172.177.66.108:24434] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/index.php"] [unique_id "aZdVNMixYz-lHbN0WBIfFQAAAAs"]
[Fri Feb 20 02:23:48.791274 2026] [:error] [pid 15513:tid 15525] [client 172.177.66.108:24418] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aZdVNMGTRTE022JWg19DhwAAAQo"]
[Fri Feb 20 02:23:49.937651 2026] [:error] [pid 15513:tid 15533] [client 172.177.66.108:24350] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aZdVNcGTRTE022JWg19DigAAARI"]
[Fri Feb 20 02:23:50.769309 2026] [:error] [pid 48901:tid 48920] [client 172.177.66.108:24478] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aZdVNsixYz-lHbN0WBIfHQAAAAo"]
[Fri Feb 20 02:23:51.935705 2026] [:error] [pid 48902:tid 48951] [client 172.177.66.108:24198] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aZdVN2cJ-6aYRpRRFsVp4wAAAE0"]
[Fri Feb 20 02:23:52.739743 2026] [:error] [pid 15513:tid 15523] [client 172.177.66.108:24561] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aZdVOMGTRTE022JWg19DjAAAAQg"]
[Fri Feb 20 02:23:53.866175 2026] [:error] [pid 49002:tid 49030] [client 172.177.66.108:24556] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aZdVOVfcBtQ6hSJuEQmhdwAAANA"]
[Fri Feb 20 02:23:55.014006 2026] [:error] [pid 5581:tid 5621] [client 172.177.66.108:24400] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aZdVO3IfW0xlXmrVd3ob4wAAAgo"]
[Fri Feb 20 02:23:56.167417 2026] [:error] [pid 48903:tid 48988] [client 172.177.66.108:24199] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aZdVPI6aTgKrpAR115syqwAAAJc"]
[Fri Feb 20 02:23:57.191097 2026] [:error] [pid 24048:tid 24050] [client 172.177.66.108:24345] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/index2.php"] [unique_id "aZdVPWug6wHHqU0QyDZC2QAAAUA"]
[Fri Feb 20 02:23:57.753627 2026] [:error] [pid 5580:tid 5602] [client 172.177.66.108:24462] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/index2.php"] [unique_id "aZdVPYV24kZpmf6nh3BEigAAAdI"]
[Fri Feb 20 02:23:58.350194 2026] [:error] [pid 24048:tid 24070] [client 172.177.66.108:24494] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/index2.php"] [unique_id "aZdVPmug6wHHqU0QyDZC2wAAAVQ"]
[Fri Feb 20 02:23:59.089648 2026] [:error] [pid 48901:tid 48918] [client 172.177.66.108:24459] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main1/index2.php"] [unique_id "aZdVP8ixYz-lHbN0WBIfIgAAAAg"]
[Fri Feb 20 02:24:00.869887 2026] [:error] [pid 5548:tid 5568] [client 172.177.66.108:24406] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/2008.php"] [unique_id "aZdVQJMpsAkdKxbTbsPzlwAAAZE"]
[Fri Feb 20 02:24:02.081448 2026] [:error] [pid 5581:tid 5617] [client 172.177.66.108:24382] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/2008.php"] [unique_id "aZdVQnIfW0xlXmrVd3ob6QAAAgY"]
[Fri Feb 20 02:24:03.990230 2026] [:error] [pid 5581:tid 5634] [client 172.177.66.108:24367] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/2008.php"] [unique_id "aZdVQ3IfW0xlXmrVd3ob7AAAAhc"]
[Fri Feb 20 02:24:04.474344 2026] [:error] [pid 48902:tid 48961] [client 172.177.66.108:24344] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/2008.php"] [unique_id "aZdVRGcJ-6aYRpRRFsVp7AAAAFc"]
[Fri Feb 20 02:24:05.450680 2026] [:error] [pid 15513:tid 15528] [client 172.177.66.108:24569] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aZdVRcGTRTE022JWg19DmwAAAQ0"]
[Fri Feb 20 02:24:06.339143 2026] [:error] [pid 5581:tid 5613] [client 172.177.66.108:24361] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aZdVRnIfW0xlXmrVd3ob7wAAAgI"]
[Fri Feb 20 02:24:06.973883 2026] [:error] [pid 5580:tid 5604] [client 172.177.66.108:24481] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aZdVRoV24kZpmf6nh3BEjgAAAdQ"]
[Fri Feb 20 02:24:07.810863 2026] [:error] [pid 5581:tid 5628] [client 172.177.66.108:24531] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aZdVR3IfW0xlXmrVd3ob8gAAAhE"]
[Fri Feb 20 02:24:09.489810 2026] [:error] [pid 15513:tid 15523] [client 172.177.66.108:24395] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nam.php"] [unique_id "aZdVScGTRTE022JWg19DoAAAAQg"]
[Fri Feb 20 02:24:11.011181 2026] [:error] [pid 15513:tid 15538] [client 172.177.66.108:24322] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nam.php"] [unique_id "aZdVS8GTRTE022JWg19DpAAAARc"]
[Fri Feb 20 02:24:11.879331 2026] [:error] [pid 48903:tid 48980] [client 172.177.66.108:24549] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nam.php"] [unique_id "aZdVS46aTgKrpAR115sytQAAAI8"]
[Fri Feb 20 02:24:12.968249 2026] [:error] [pid 48901:tid 48915] [client 172.177.66.108:24363] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nam.php"] [unique_id "aZdVTMixYz-lHbN0WBIfKwAAAAU"]
[Fri Feb 20 02:24:13.583074 2026] [:error] [pid 48903:tid 48966] [client 172.177.66.108:24443] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aZdVTY6aTgKrpAR115sytwAAAIE"]
[Fri Feb 20 02:24:14.917543 2026] [:error] [pid 5581:tid 5628] [client 172.177.66.108:24496] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aZdVTnIfW0xlXmrVd3ob_QAAAhE"]
[Fri Feb 20 02:24:16.369870 2026] [:error] [pid 24048:tid 24069] [client 172.177.66.108:24466] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aZdVUGug6wHHqU0QyDZC4wAAAVM"]
[Fri Feb 20 02:24:17.311923 2026] [:error] [pid 49002:tid 49014] [client 172.177.66.108:24570] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aZdVUVfcBtQ6hSJuEQmhhwAAAMA"]
[Fri Feb 20 02:24:18.514928 2026] [:error] [pid 5581:tid 5628] [client 172.177.66.108:24195] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aZdVUnIfW0xlXmrVd3ocAwAAAhE"]
[Fri Feb 20 02:24:19.432320 2026] [:error] [pid 5580:tid 5583] [client 172.177.66.108:24220] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aZdVU4V24kZpmf6nh3BEkwAAAcA"]
[Fri Feb 20 02:24:20.468614 2026] [:error] [pid 48901:tid 48915] [client 172.177.66.108:24476] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aZdVVMixYz-lHbN0WBIfNAAAAAU"]
[Fri Feb 20 02:24:21.258981 2026] [:error] [pid 5581:tid 5626] [client 172.177.66.108:24273] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aZdVVXIfW0xlXmrVd3ocCQAAAg8"]
[Fri Feb 20 02:24:22.076547 2026] [:error] [pid 49002:tid 49023] [client 172.177.66.108:24528] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aZdVVlfcBtQ6hSJuEQmhiwAAAMk"]
[Fri Feb 20 02:24:23.031431 2026] [:error] [pid 15513:tid 15523] [client 172.177.66.108:24525] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aZdVV8GTRTE022JWg19DqQAAAQg"]
[Fri Feb 20 02:24:24.829630 2026] [:error] [pid 5580:tid 5594] [client 172.177.66.108:24366] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aZdVWIV24kZpmf6nh3BEmAAAAco"]
[Fri Feb 20 02:24:27.171669 2026] [:error] [pid 5580:tid 5589] [client 172.177.66.108:24467] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aZdVW4V24kZpmf6nh3BEmgAAAcY"]
[Fri Feb 20 02:24:28.143135 2026] [:error] [pid 24048:tid 24057] [client 172.177.66.108:24563] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/cflsintdaf.php"] [unique_id "aZdVXGug6wHHqU0QyDZC6QAAAUc"]
[Fri Feb 20 02:24:29.632069 2026] [:error] [pid 15513:tid 15532] [client 172.177.66.108:24452] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/cflsintdaf.php"] [unique_id "aZdVXcGTRTE022JWg19DrQAAARE"]
[Fri Feb 20 02:24:30.717248 2026] [:error] [pid 5580:tid 5583] [client 172.177.66.108:24565] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/cflsintdaf.php"] [unique_id "aZdVXoV24kZpmf6nh3BEnwAAAcA"]
[Fri Feb 20 02:24:31.801471 2026] [:error] [pid 5548:tid 5573] [client 172.177.66.108:24573] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/cflsintdaf.php"] [unique_id "aZdVX5MpsAkdKxbTbsPzqgAAAZY"]
[Fri Feb 20 02:24:33.729124 2026] [:error] [pid 48901:tid 48926] [client 172.177.66.108:24513] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdVYcixYz-lHbN0WBIfPQAAABA"]
[Fri Feb 20 02:24:35.194749 2026] [:error] [pid 5580:tid 5594] [client 172.177.66.108:24491] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdVY4V24kZpmf6nh3BEowAAAco"]
[Fri Feb 20 02:24:35.951831 2026] [:error] [pid 48902:tid 48955] [client 172.177.66.108:24327] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "aZdVY2cJ-6aYRpRRFsVqAAAAAFE"]
[Fri Feb 20 02:24:37.679162 2026] [proxy_fcgi:error] [pid 48903:tid 48980] [client 172.177.66.108:24562] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:24:38.311443 2026] [:error] [pid 48903:tid 48975] [client 172.177.66.108:24562] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZdVZo6aTgKrpAR115syxgAAAIo"]
[Fri Feb 20 02:24:40.592454 2026] [:error] [pid 48903:tid 48971] [client 172.177.66.108:24568] [client 172.177.66.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/author-template-less.php"] [unique_id "aZdVaI6aTgKrpAR115syxwAAAIY"]
[Fri Feb 20 02:24:41.397878 2026] [proxy_fcgi:error] [pid 5581:tid 5632] [client 172.177.66.108:24521] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:24:43.711766 2026] [proxy_fcgi:error] [pid 5581:tid 5612] [client 172.177.66.108:24521] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:24:43.922001 2026] [proxy_fcgi:error] [pid 5581:tid 5630] [client 172.177.66.108:24521] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 02:24:44.431644 2026] [:error] [pid 5581:tid 5628] [client 172.177.66.108:24521] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/c99.php"] [unique_id "aZdVbHIfW0xlXmrVd3ocIAAAAhE"]
[Fri Feb 20 02:24:45.083239 2026] [:error] [pid 15513:tid 15526] [client 172.177.66.108:24343] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/c99.php"] [unique_id "aZdVbcGTRTE022JWg19DuQAAAQs"]
[Fri Feb 20 02:24:46.048923 2026] [:error] [pid 15513:tid 15531] [client 172.177.66.108:24377] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/c99.php"] [unique_id "aZdVbsGTRTE022JWg19DvgAAARA"]
[Fri Feb 20 02:24:48.300257 2026] [:error] [pid 49002:tid 49018] [client 172.177.66.108:24414] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/c99.php"] [unique_id "aZdVcFfcBtQ6hSJuEQmhlgAAAMQ"]
[Fri Feb 20 02:24:49.758822 2026] [:error] [pid 48903:tid 48987] [client 172.177.66.108:24487] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/db.php"] [unique_id "aZdVcY6aTgKrpAR115syzgAAAJY"]
[Fri Feb 20 02:24:50.611580 2026] [:error] [pid 5581:tid 5625] [client 172.177.66.108:24554] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/db.php"] [unique_id "aZdVcnIfW0xlXmrVd3ocJwAAAg4"]
[Fri Feb 20 02:24:51.670859 2026] [:error] [pid 48902:tid 48957] [client 172.177.66.108:24558] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/db.php"] [unique_id "aZdVc2cJ-6aYRpRRFsVqDQAAAFM"]
[Fri Feb 20 02:24:53.243886 2026] [:error] [pid 48902:tid 48948] [client 172.177.66.108:24538] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/db.php"] [unique_id "aZdVdWcJ-6aYRpRRFsVqEQAAAEo"]
[Fri Feb 20 02:24:55.139971 2026] [:error] [pid 5581:tid 5627] [client 172.177.66.108:24534] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aZdVd3IfW0xlXmrVd3ocLgAAAhA"]
[Fri Feb 20 02:24:57.146266 2026] [:error] [pid 49002:tid 49017] [client 172.177.66.108:24461] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aZdVeVfcBtQ6hSJuEQmhngAAAMM"]
[Fri Feb 20 02:24:59.475132 2026] [:error] [pid 15513:tid 15538] [client 172.177.66.108:24566] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aZdVe8GTRTE022JWg19D3wAAARc"]
[Fri Feb 20 02:25:01.938037 2026] [:error] [pid 48903:tid 48980] [client 172.177.66.108:24477] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aZdVfY6aTgKrpAR115sy1QAAAI8"]
[Fri Feb 20 02:25:03.145637 2026] [:error] [pid 48902:tid 48961] [client 172.177.66.108:24514] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aZdVf2cJ-6aYRpRRFsVqFgAAAFc"]
[Fri Feb 20 02:25:04.704000 2026] [:error] [pid 5581:tid 5629] [client 172.177.66.108:24229] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aZdVgHIfW0xlXmrVd3ocMQAAAhI"]
[Fri Feb 20 02:25:06.708790 2026] [:error] [pid 24048:tid 24059] [client 172.177.66.108:24352] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aZdVgmug6wHHqU0QyDZDAQAAAUk"]
[Fri Feb 20 02:25:07.787195 2026] [:error] [pid 48902:tid 48951] [client 172.177.66.108:24457] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aZdVg2cJ-6aYRpRRFsVqGAAAAE0"]
[Fri Feb 20 02:25:09.642787 2026] [:error] [pid 49002:tid 49024] [client 172.177.66.108:24453] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mod/assign/favicon.php"] [unique_id "aZdVhVfcBtQ6hSJuEQmhpQAAAMo"]
[Fri Feb 20 02:25:11.229765 2026] [:error] [pid 49002:tid 49017] [client 172.177.66.108:24450] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mod/assign/favicon.php"] [unique_id "aZdVh1fcBtQ6hSJuEQmhpwAAAMM"]
[Fri Feb 20 02:25:12.682579 2026] [:error] [pid 5580:tid 5585] [client 172.177.66.108:24567] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mod/assign/favicon.php"] [unique_id "aZdViIV24kZpmf6nh3BErAAAAcI"]
[Fri Feb 20 02:25:13.810827 2026] [:error] [pid 48901:tid 48934] [client 172.177.66.108:24430] [client 172.177.66.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mod/assign/favicon.php"] [unique_id "aZdVicixYz-lHbN0WBIfYQAAABg"]
[Fri Feb 20 04:17:12.580100 2026] [:error] [pid 64405:tid 64484] [client 49.51.47.100:42336] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZdvyNSgDnQB5OAbOuSZuQAAAJE"]
[Fri Feb 20 04:30:44.713312 2026] [:error] [pid 64403:tid 64425] [client 123.56.235.1:34370] [client 123.56.235.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aZdy9GsY-w3EIXaNGw5bRAAAAAw"]
[Fri Feb 20 04:30:44.828840 2026] [:error] [pid 417:tid 425] [client 123.56.235.1:34372] [client 123.56.235.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "aZdy9GZ8vv9H56paZ2C6yQAAAQY"]
[Fri Feb 20 04:30:47.894374 2026] [:error] [pid 417:tid 442] [client 123.56.235.1:59104] [client 123.56.235.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "aZdy92Z8vv9H56paZ2C60wAAARc"]
[Fri Feb 20 04:30:48.015523 2026] [:error] [pid 417:tid 432] [client 123.56.235.1:59114] [client 123.56.235.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aZdy-GZ8vv9H56paZ2C61AAAAQ0"]
[Fri Feb 20 04:34:39.369457 2026] [:error] [pid 417:tid 422] [client 193.36.225.23:38009] [client 193.36.225.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.23, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZdz32Z8vv9H56paZ2C9LQAAAQM"]
[Fri Feb 20 04:34:39.379752 2026] [proxy_fcgi:error] [pid 417:tid 422] [client 193.36.225.23:38009] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 06:52:44.453610 2026] [ssl:error] [pid 64405:tid 64475] [client 91.243.22.180:47878] AH02032: Hostname measureyourbrand.com.au provided via SNI and hostname measureyourbrand.com provided via HTTP have no compatible SSL setup, referer: https://google.com/
[Fri Feb 20 08:29:29.785309 2026] [:error] [pid 22083:tid 22102] [client 218.146.244.189:51061] [client 218.146.244.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 218.146.244.189, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZeq6fK5OtWAzFVJ_9KUGgAAAVE"]
[Fri Feb 20 08:29:29.797414 2026] [proxy_fcgi:error] [pid 22083:tid 22102] [client 218.146.244.189:51061] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 08:31:22.565430 2026] [:error] [pid 22386:tid 22401] [client 124.217.18.34:27500] [client 124.217.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.18.34, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZerWlx0Mpd-hTXwU6KXNgAAAg0"]
[Fri Feb 20 08:31:22.575814 2026] [proxy_fcgi:error] [pid 22386:tid 22401] [client 124.217.18.34:27500] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 11:51:44.877437 2026] [:error] [pid 54552:tid 54563] [client 49.51.36.179:40350] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZfaUMe4t0F-_sbWepaPxQAAAMg"]
[Fri Feb 20 13:04:37.696314 2026] [:error] [pid 54461:tid 54493] [client 180.110.203.108:50187] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZfrZS372fkN0w39NDM1twAAAEE"]
[Fri Feb 20 19:23:24.488456 2026] [:error] [pid 59127:tid 59131] [client 49.235.136.28:52370] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZhELHSltzl55Qz-09gwIwAAAQI"]
[Fri Feb 20 22:42:58.166342 2026] [:error] [pid 54460:tid 54467] [client 112.196.183.151:10825] [client 112.196.183.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.183.151, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZhy8soUiaZ-Z7V-F9-vbQAAAAI"]
[Fri Feb 20 22:42:58.177773 2026] [proxy_fcgi:error] [pid 54460:tid 54467] [client 112.196.183.151:10825] AH01071: Got error 'Primary script unknown'
[Fri Feb 20 22:45:43.120406 2026] [:error] [pid 59127:tid 59131] [client 103.239.173.6:63534] [client 103.239.173.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.239.173.6, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZhzl3Sltzl55Qz-09hmwQAAAQI"]
[Fri Feb 20 22:45:43.131702 2026] [proxy_fcgi:error] [pid 59127:tid 59131] [client 103.239.173.6:63534] AH01071: Got error 'Primary script unknown'
[Sat Feb 21 02:06:00.783750 2026] [:error] [pid 54520:tid 54541] [client 43.153.123.4:40782] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZiiiGQaQX7QUBqXcyFRKgAAAJM"]
[Sat Feb 21 02:31:23.665445 2026] [:error] [pid 54520:tid 54527] [client 103.65.237.124:59673] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aZioe2QaQX7QUBqXcyFXVwAAAIU"]
[Sat Feb 21 02:31:23.948410 2026] [:error] [pid 54520:tid 54534] [client 103.65.237.124:59745] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aZioe2QaQX7QUBqXcyFXWAAAAIw"]
[Sat Feb 21 08:03:08.017991 2026] [:error] [pid 40871:tid 40879] [client 117.33.163.216:53236] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZj2PDqDikjdiOZeJyX5QAAAAMY"]
[Sat Feb 21 12:34:17.719556 2026] [:error] [pid 40871:tid 40879] [client 49.37.42.230:51433] [client 49.37.42.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.42.230, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZk1yTqDikjdiOZeJyU-GwAAAMY"]
[Sat Feb 21 12:34:17.732312 2026] [proxy_fcgi:error] [pid 40871:tid 40879] [client 49.37.42.230:51433] AH01071: Got error 'Primary script unknown'
[Sat Feb 21 14:03:00.145039 2026] [:error] [pid 11941:tid 11945] [client 43.130.102.223:35960] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZlKlHTUkHs3EVWllKlVAQAAAYI"]
[Sat Feb 21 21:04:34.124666 2026] [:error] [pid 40758:tid 40836] [client 170.106.72.178:54168] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZmtYkBAHxvBM3i9iKGG-wAAAI4"]
[Sun Feb 22 02:25:14.448135 2026] [:error] [pid 3204:tid 3474] [client 193.34.33.10:7413] [client 193.34.33.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.34.33.10, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZn4inAwnUMG8727rz4jCQAAAIg"]
[Sun Feb 22 02:25:14.463930 2026] [proxy_fcgi:error] [pid 3204:tid 3474] [client 193.34.33.10:7413] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 05:13:06.344105 2026] [:error] [pid 9589:tid 9656] [client 43.135.185.59:45380] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZof4tr-1mylR_FoXQUXuAAAAIU"]
[Sun Feb 22 14:12:21.436221 2026] [:error] [pid 9695:tid 9717] [client 170.106.192.208:52732] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZqeRVpPqolBNLmJ4er2cAAAANQ"]
[Sun Feb 22 15:23:44.080883 2026] [:error] [pid 9588:tid 9633] [client 182.42.111.213:59485] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZqvAGjNBsxseiTcElkVdgAAAEk"]
[Sun Feb 22 16:02:36.326890 2026] [:error] [pid 9589:tid 9651] [client 43.153.107.22:54576] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZq4HNr-1mylR_FoXQX4DAAAAIA"]
[Sun Feb 22 21:52:35.930860 2026] [:error] [pid 3103:tid 3124] [client 175.6.217.4:35799] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZsKI5fzX5hBIaQY93NSZQAAAZI"]
[Sun Feb 22 22:51:09.196559 2026] [:error] [pid 2475:tid 2557] [client 43.130.3.120:34288] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZsX3Sdme8TSKYpXujddxQAAAJE"]
[Sun Feb 22 23:32:17.647102 2026] [proxy_fcgi:error] [pid 2473:tid 2490] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:17.916980 2026] [proxy_fcgi:error] [pid 2473:tid 2492] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:18.223986 2026] [proxy_fcgi:error] [pid 2473:tid 2495] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:18.545330 2026] [proxy_fcgi:error] [pid 2473:tid 2484] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:18.919843 2026] [proxy_fcgi:error] [pid 2473:tid 2485] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:19.192969 2026] [proxy_fcgi:error] [pid 2473:tid 2490] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:19.480971 2026] [proxy_fcgi:error] [pid 2473:tid 2492] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:20.087454 2026] [proxy_fcgi:error] [pid 2473:tid 2491] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:20.431990 2026] [proxy_fcgi:error] [pid 2473:tid 2485] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:20.718187 2026] [proxy_fcgi:error] [pid 2473:tid 2488] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:21.412973 2026] [proxy_fcgi:error] [pid 2473:tid 2491] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:21.675189 2026] [proxy_fcgi:error] [pid 2473:tid 2485] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:21.937983 2026] [proxy_fcgi:error] [pid 2473:tid 2501] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:22.214966 2026] [proxy_fcgi:error] [pid 2473:tid 2495] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:22.601971 2026] [proxy_fcgi:error] [pid 2473:tid 2496] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:22.959482 2026] [proxy_fcgi:error] [pid 2473:tid 2494] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:23.296156 2026] [proxy_fcgi:error] [pid 2473:tid 2479] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:23.608211 2026] [proxy_fcgi:error] [pid 2473:tid 2491] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:23.877832 2026] [proxy_fcgi:error] [pid 2473:tid 2494] [client 185.137.164.13:63741] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:28.156971 2026] [:error] [pid 2473:tid 2498] [client 185.137.164.13:63741] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZshjHptAeV7-XzzNzg4UgAAABU"]
[Sun Feb 22 23:32:29.648599 2026] [:error] [pid 2574:tid 2581] [client 185.137.164.15:21455] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZshjckPV7h4nTf-jiTipgAAAMA"]
[Sun Feb 22 23:32:31.087262 2026] [proxy_fcgi:error] [pid 3103:tid 3126] [client 185.137.164.13:47923] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:31.926069 2026] [:error] [pid 3103:tid 3112] [client 185.137.164.13:47923] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aZshj5fzX5hBIaQY93N65AAAAYY"]
[Sun Feb 22 23:32:33.028647 2026] [proxy_fcgi:error] [pid 2475:tid 2558] [client 185.137.164.15:36355] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:33.291654 2026] [:error] [pid 2475:tid 2555] [client 185.137.164.15:36355] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aZshkSdme8TSKYpXujdsygAAAI8"]
[Sun Feb 22 23:32:34.215972 2026] [proxy_fcgi:error] [pid 2574:tid 2581] [client 185.137.164.15:54849] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:35.877852 2026] [:error] [pid 2574:tid 2588] [client 185.137.164.15:54849] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZshk8kPV7h4nTf-jiTi7QAAAMc"]
[Sun Feb 22 23:32:36.859937 2026] [:error] [pid 2473:tid 2500] [client 185.137.164.14:28825] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZshlHptAeV7-XzzNzg4yAAAABc"]
[Sun Feb 22 23:32:37.387147 2026] [:error] [pid 3103:tid 3129] [client 185.137.164.13:62055] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZshlZfzX5hBIaQY93N7IwAAAZc"]
[Sun Feb 22 23:32:38.065037 2026] [:error] [pid 2473:tid 2484] [client 185.137.164.14:36049] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZshlnptAeV7-XzzNzg46QAAAAc"]
[Sun Feb 22 23:32:38.631259 2026] [:error] [pid 2574:tid 2594] [client 185.137.164.17:57901] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZshlskPV7h4nTf-jiTi_QAAAM0"]
[Sun Feb 22 23:32:39.208869 2026] [:error] [pid 3103:tid 3108] [client 185.137.164.15:38833] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZshl5fzX5hBIaQY93N7NwAAAYI"]
[Sun Feb 22 23:32:40.127231 2026] [:error] [pid 2629:tid 2666] [client 185.137.164.21:20469] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZshmAlsXSV5M4mfwZ9WsAAAAUg"]
[Sun Feb 22 23:32:40.650112 2026] [proxy_fcgi:error] [pid 2475:tid 2550] [client 185.137.164.16:21739] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:41.286546 2026] [:error] [pid 2475:tid 2559] [client 185.137.164.16:21739] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aZshmSdme8TSKYpXujdtNwAAAJM"]
[Sun Feb 22 23:32:41.931636 2026] [proxy_fcgi:error] [pid 2475:tid 2554] [client 185.137.164.14:28889] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:42.551999 2026] [:error] [pid 2475:tid 2557] [client 185.137.164.14:28889] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZshmidme8TSKYpXujdtTQAAAJE"]
[Sun Feb 22 23:32:43.530868 2026] [:error] [pid 2629:tid 2669] [client 185.137.164.15:24875] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZshmwlsXSV5M4mfwZ9W0AAAAUs"]
[Sun Feb 22 23:32:44.111487 2026] [proxy_fcgi:error] [pid 2574:tid 2590] [client 185.137.164.15:51059] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:44.392071 2026] [:error] [pid 2574:tid 2603] [client 185.137.164.15:51059] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZshnMkPV7h4nTf-jiTjbAAAANY"]
[Sun Feb 22 23:32:45.043046 2026] [proxy_fcgi:error] [pid 2629:tid 2664] [client 185.137.164.16:57339] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:46.035000 2026] [proxy_fcgi:error] [pid 2629:tid 2669] [client 185.137.164.16:57339] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:46.870086 2026] [:error] [pid 2629:tid 2672] [client 185.137.164.16:57339] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZshnglsXSV5M4mfwZ9XCQAAAU4"]
[Sun Feb 22 23:32:47.472985 2026] [proxy_fcgi:error] [pid 2473:tid 2490] [client 185.137.164.14:46355] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:47.756964 2026] [:error] [pid 2473:tid 2495] [client 185.137.164.14:46355] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZshn3ptAeV7-XzzNzg5lwAAABI"]
[Sun Feb 22 23:32:48.299993 2026] [proxy_fcgi:error] [pid 3103:tid 3122] [client 185.137.164.12:56405] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:48.917933 2026] [:error] [pid 3103:tid 3124] [client 185.137.164.12:56405] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aZshoJfzX5hBIaQY93N7qQAAAZI"]
[Sun Feb 22 23:32:50.028290 2026] [:error] [pid 2475:tid 2564] [client 185.137.164.17:55605] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZshoidme8TSKYpXujdtvQAAAJg"]
[Sun Feb 22 23:32:50.841019 2026] [proxy_fcgi:error] [pid 2628:tid 2636] [client 185.137.164.12:38711] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:51.106088 2026] [proxy_fcgi:error] [pid 2628:tid 2640] [client 185.137.164.12:38711] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:51.739748 2026] [:error] [pid 2628:tid 2640] [client 185.137.164.12:38711] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZsho7K4woMTeUPH2ns47gAAAQk"]
[Sun Feb 22 23:32:52.617588 2026] [:error] [pid 2474:tid 2520] [client 185.137.164.16:25283] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZshpPhvE7P5hX_xKnS1CgAAAEg"]
[Sun Feb 22 23:32:53.608607 2026] [:error] [pid 2574:tid 2599] [client 185.137.164.16:33173] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZshpckPV7h4nTf-jiTjxQAAANI"]
[Sun Feb 22 23:32:54.119008 2026] [:error] [pid 2629:tid 2680] [client 185.137.164.17:62595] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZshpglsXSV5M4mfwZ9XTAAAAVY"]
[Sun Feb 22 23:32:54.651224 2026] [:error] [pid 2574:tid 2597] [client 185.137.164.15:44985] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZshpskPV7h4nTf-jiTj0gAAANA"]
[Sun Feb 22 23:32:55.744976 2026] [proxy_fcgi:error] [pid 2475:tid 2521] [client 185.137.164.20:54071] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:56.010346 2026] [:error] [pid 2475:tid 2538] [client 185.137.164.20:54071] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aZshqCdme8TSKYpXujduAQAAAIY"]
[Sun Feb 22 23:32:56.740245 2026] [:error] [pid 2574:tid 2605] [client 185.137.164.16:39891] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aZshqMkPV7h4nTf-jiTj_AAAANg"]
[Sun Feb 22 23:32:57.350140 2026] [:error] [pid 2475:tid 2538] [client 185.137.164.15:64397] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZshqSdme8TSKYpXujduFAAAAIY"]
[Sun Feb 22 23:32:58.507325 2026] [proxy_fcgi:error] [pid 2473:tid 2487] [client 185.137.164.12:28025] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:32:59.146338 2026] [proxy_fcgi:error] [pid 2473:tid 2497] [client 185.137.164.12:28025] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:00.455965 2026] [:error] [pid 2473:tid 2489] [client 185.137.164.12:28025] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aZshrHptAeV7-XzzNzg6VAAAAAw"]
[Sun Feb 22 23:33:01.940292 2026] [:error] [pid 3103:tid 3121] [client 185.137.164.14:37591] [client 185.137.164.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.14, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZshrZfzX5hBIaQY93N8PQAAAY8"]
[Sun Feb 22 23:33:02.371606 2026] [proxy_fcgi:error] [pid 3103:tid 3124] [client 185.137.164.14:37591] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:03.800257 2026] [proxy_fcgi:error] [pid 3103:tid 3123] [client 185.137.164.14:37591] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:04.082986 2026] [proxy_fcgi:error] [pid 3103:tid 3119] [client 185.137.164.14:37591] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:05.546258 2026] [:error] [pid 3103:tid 3128] [client 185.137.164.14:37591] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZshsZfzX5hBIaQY93N8fwAAAZY"]
[Sun Feb 22 23:33:06.470180 2026] [proxy_fcgi:error] [pid 2473:tid 2492] [client 185.137.164.21:28547] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:06.732609 2026] [:error] [pid 2473:tid 2490] [client 185.137.164.21:28547] [client 185.137.164.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZshsnptAeV7-XzzNzg6swAAAA0"]
[Sun Feb 22 23:33:07.476096 2026] [:error] [pid 2473:tid 2499] [client 185.137.164.21:28547] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aZshs3ptAeV7-XzzNzg6xQAAABY"]
[Sun Feb 22 23:33:09.335987 2026] [proxy_fcgi:error] [pid 3103:tid 3112] [client 185.137.164.16:29171] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:10.278024 2026] [proxy_fcgi:error] [pid 3103:tid 3126] [client 185.137.164.16:29171] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:10.798867 2026] [:error] [pid 3103:tid 3108] [client 185.137.164.16:29171] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZshtpfzX5hBIaQY93N8yQAAAYI"]
[Sun Feb 22 23:33:11.304977 2026] [proxy_fcgi:error] [pid 2629:tid 2667] [client 185.137.164.15:22993] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:12.280099 2026] [proxy_fcgi:error] [pid 2629:tid 2675] [client 185.137.164.15:22993] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:12.903550 2026] [proxy_fcgi:error] [pid 2629:tid 2670] [client 185.137.164.15:22993] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:13.521991 2026] [proxy_fcgi:error] [pid 2629:tid 2664] [client 185.137.164.15:22993] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:13.858272 2026] [:error] [pid 2629:tid 2660] [client 185.137.164.15:22993] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZshuQlsXSV5M4mfwZ9YaAAAAUI"]
[Sun Feb 22 23:33:14.551007 2026] [proxy_fcgi:error] [pid 2475:tid 2561] [client 185.137.164.21:46731] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:14.818693 2026] [proxy_fcgi:error] [pid 2475:tid 2559] [client 185.137.164.21:46731] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:15.388825 2026] [:error] [pid 2475:tid 2548] [client 185.137.164.21:46731] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZshuydme8TSKYpXujdvSAAAAIg"]
[Sun Feb 22 23:33:16.317007 2026] [proxy_fcgi:error] [pid 2473:tid 2477] [client 185.137.164.15:53821] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:16.881599 2026] [:error] [pid 2473:tid 2501] [client 185.137.164.15:53821] [client 185.137.164.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.15, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aZshvHptAeV7-XzzNzg7YgAAABg"]
[Sun Feb 22 23:33:17.139644 2026] [:error] [pid 2473:tid 2501] [client 185.137.164.15:53821] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZshvXptAeV7-XzzNzg7agAAABg"]
[Sun Feb 22 23:33:18.313489 2026] [:error] [pid 2574:tid 2593] [client 185.137.164.20:27257] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/up/main.php"] [unique_id "aZshvskPV7h4nTf-jiTlFAAAAMw"]
[Sun Feb 22 23:33:19.096013 2026] [:error] [pid 2475:tid 2564] [client 185.137.164.14:30431] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fonts/fontawesome-webfont.php"] [unique_id "aZshvydme8TSKYpXujdvlwAAAJg"]
[Sun Feb 22 23:33:20.403587 2026] [:error] [pid 2574:tid 2588] [client 185.137.164.15:33967] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/about.php"] [unique_id "aZshwMkPV7h4nTf-jiTlOwAAAMc"]
[Sun Feb 22 23:33:20.990277 2026] [:error] [pid 2473:tid 2495] [client 185.137.164.15:30963] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/about.php"] [unique_id "aZshwHptAeV7-XzzNzg7twAAABI"]
[Sun Feb 22 23:33:23.203139 2026] [:error] [pid 2628:tid 2638] [client 185.137.164.16:37597] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/web.php"] [unique_id "aZshw7K4woMTeUPH2ns6_AAAAQc"]
[Sun Feb 22 23:33:23.754961 2026] [proxy_fcgi:error] [pid 2474:tid 2520] [client 185.137.164.18:59813] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:24.618138 2026] [:error] [pid 2474:tid 2515] [client 185.137.164.18:59813] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/bypass.php"] [unique_id "aZshxPhvE7P5hX_xKnS2-AAAAEY"]
[Sun Feb 22 23:33:25.520978 2026] [proxy_fcgi:error] [pid 3103:tid 3110] [client 185.137.164.16:43341] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:26.091036 2026] [proxy_fcgi:error] [pid 3103:tid 3126] [client 185.137.164.16:43341] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:26.444932 2026] [:error] [pid 3103:tid 3108] [client 185.137.164.16:43341] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZshxpfzX5hBIaQY93N9ywAAAYI"]
[Sun Feb 22 23:33:26.982993 2026] [proxy_fcgi:error] [pid 2474:tid 2540] [client 185.137.164.21:62437] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:27.922868 2026] [:error] [pid 2474:tid 2526] [client 185.137.164.21:62437] [client 185.137.164.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZshx_hvE7P5hX_xKnS3LQAAAEs"]
[Sun Feb 22 23:33:28.215998 2026] [proxy_fcgi:error] [pid 2474:tid 2515] [client 185.137.164.21:62437] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:28.503031 2026] [proxy_fcgi:error] [pid 2474:tid 2520] [client 185.137.164.21:62437] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:28.794553 2026] [:error] [pid 2474:tid 2522] [client 185.137.164.21:62437] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-themes.php"] [unique_id "aZshyPhvE7P5hX_xKnS3PgAAAEk"]
[Sun Feb 22 23:33:29.541997 2026] [proxy_fcgi:error] [pid 2473:tid 2487] [client 185.137.164.16:50423] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:29.828407 2026] [:error] [pid 2473:tid 2495] [client 185.137.164.16:50423] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aZshyXptAeV7-XzzNzg8QQAAABI"]
[Sun Feb 22 23:33:30.384982 2026] [proxy_fcgi:error] [pid 2474:tid 2541] [client 185.137.164.15:23767] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:30.943952 2026] [:error] [pid 2474:tid 2530] [client 185.137.164.15:23767] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aZshyvhvE7P5hX_xKnS3XQAAAE0"]
[Sun Feb 22 23:33:31.859470 2026] [proxy_fcgi:error] [pid 2473:tid 2500] [client 185.137.164.14:61249] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:32.152608 2026] [:error] [pid 2473:tid 2487] [client 185.137.164.14:61249] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZshzHptAeV7-XzzNzg8cgAAAAo"]
[Sun Feb 22 23:33:32.688599 2026] [:error] [pid 2629:tid 2660] [client 185.137.164.14:32511] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aZshzAlsXSV5M4mfwZ9ZkgAAAUI"]
[Sun Feb 22 23:33:33.302178 2026] [:error] [pid 2474:tid 2522] [client 185.137.164.14:48533] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aZshzfhvE7P5hX_xKnS3ewAAAEk"]
[Sun Feb 22 23:33:34.435105 2026] [proxy_fcgi:error] [pid 2629:tid 2677] [client 185.137.164.20:44341] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:34.753809 2026] [:error] [pid 2629:tid 2671] [client 185.137.164.20:44341] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZshzglsXSV5M4mfwZ9ZsgAAAU0"]
[Sun Feb 22 23:33:35.269379 2026] [:error] [pid 26033:tid 26053] [client 185.137.164.19:64395] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZshz0TRRZdhkkS8ouSH5wAAAdI"]
[Sun Feb 22 23:33:35.799969 2026] [proxy_fcgi:error] [pid 26033:tid 26038] [client 185.137.164.19:27239] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:36.079633 2026] [:error] [pid 26033:tid 26035] [client 185.137.164.19:27239] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aZsh0ETRRZdhkkS8ouSH8AAAAcA"]
[Sun Feb 22 23:33:36.686993 2026] [proxy_fcgi:error] [pid 2574:tid 2582] [client 185.137.164.12:49707] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:37.603069 2026] [:error] [pid 2574:tid 2602] [client 185.137.164.12:49707] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/colors_95.php"] [unique_id "aZsh0ckPV7h4nTf-jiTmBQAAANU"]
[Sun Feb 22 23:33:38.515666 2026] [:error] [pid 26033:tid 26035] [client 185.137.164.13:20463] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZsh0kTRRZdhkkS8ouSIGQAAAcA"]
[Sun Feb 22 23:33:39.027428 2026] [:error] [pid 2474:tid 2539] [client 185.137.164.15:35935] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aZsh0_hvE7P5hX_xKnS30QAAAFI"]
[Sun Feb 22 23:33:39.743040 2026] [:error] [pid 2629:tid 2666] [client 185.137.164.16:52023] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aZsh0wlsXSV5M4mfwZ9Z8AAAAUg"]
[Sun Feb 22 23:33:40.283523 2026] [:error] [pid 2474:tid 2535] [client 185.137.164.18:29485] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp.php"] [unique_id "aZsh1PhvE7P5hX_xKnS34wAAAFA"]
[Sun Feb 22 23:33:41.182693 2026] [:error] [pid 2574:tid 2592] [client 185.137.164.13:60985] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZsh1ckPV7h4nTf-jiTmMwAAAMs"]
[Sun Feb 22 23:33:41.849172 2026] [proxy_fcgi:error] [pid 2474:tid 2544] [client 185.137.164.12:28903] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:42.164689 2026] [:error] [pid 2474:tid 2532] [client 185.137.164.12:28903] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/index.php"] [unique_id "aZsh1vhvE7P5hX_xKnS4BgAAAE4"]
[Sun Feb 22 23:33:42.665878 2026] [:error] [pid 26033:tid 26054] [client 185.137.164.12:24743] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cache/index.php"] [unique_id "aZsh1kTRRZdhkkS8ouSIVAAAAdM"]
[Sun Feb 22 23:33:43.620596 2026] [:error] [pid 3103:tid 3125] [client 185.137.164.15:38565] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aZsh15fzX5hBIaQY93N-0AAAAZM"]
[Sun Feb 22 23:33:44.412066 2026] [:error] [pid 2629:tid 2681] [client 185.137.164.12:30759] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aZsh2AlsXSV5M4mfwZ9aRgAAAVc"]
[Sun Feb 22 23:33:44.971861 2026] [:error] [pid 3103:tid 3123] [client 185.137.164.18:57353] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webdb.php"] [unique_id "aZsh2JfzX5hBIaQY93N-6wAAAZE"]
[Sun Feb 22 23:33:45.522462 2026] [proxy_fcgi:error] [pid 2629:tid 2658] [client 185.137.164.16:24871] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:46.169235 2026] [proxy_fcgi:error] [pid 2629:tid 2679] [client 185.137.164.16:24871] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:46.440236 2026] [:error] [pid 2629:tid 2658] [client 185.137.164.16:24871] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZsh2glsXSV5M4mfwZ9aaAAAAUA"]
[Sun Feb 22 23:33:47.064016 2026] [proxy_fcgi:error] [pid 2473:tid 2487] [client 185.137.164.15:33245] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:47.957934 2026] [:error] [pid 2473:tid 2479] [client 185.137.164.15:33245] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aZsh23ptAeV7-XzzNzg9YAAAAAI"]
[Sun Feb 22 23:33:48.544565 2026] [:error] [pid 2474:tid 2544] [client 185.137.164.12:35659] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/wp-conflg.php"] [unique_id "aZsh3PhvE7P5hX_xKnS4VAAAAFc"]
[Sun Feb 22 23:33:49.255972 2026] [proxy_fcgi:error] [pid 2473:tid 2500] [client 185.137.164.18:54457] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:49.799603 2026] [:error] [pid 2473:tid 2493] [client 185.137.164.18:54457] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/bypass.php"] [unique_id "aZsh3XptAeV7-XzzNzg9hwAAABA"]
[Sun Feb 22 23:33:50.310163 2026] [:error] [pid 2628:tid 2641] [client 185.137.164.18:38461] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/bypass.php"] [unique_id "aZsh3rK4woMTeUPH2ns8JAAAAQo"]
[Sun Feb 22 23:33:51.024291 2026] [:error] [pid 2574:tid 2602] [client 185.137.164.14:24041] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/bypass.php"] [unique_id "aZsh38kPV7h4nTf-jiTmvQAAANU"]
[Sun Feb 22 23:33:51.550877 2026] [:error] [pid 2629:tid 2659] [client 185.137.164.21:54185] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/bypass.php"] [unique_id "aZsh3wlsXSV5M4mfwZ9angAAAUE"]
[Sun Feb 22 23:33:52.477605 2026] [:error] [pid 26033:tid 26057] [client 185.137.164.16:60855] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZsh4ETRRZdhkkS8ouSIxwAAAdY"]
[Sun Feb 22 23:33:53.352764 2026] [:error] [pid 2473:tid 2484] [client 185.137.164.15:62793] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZsh4XptAeV7-XzzNzg9qgAAAAc"]
[Sun Feb 22 23:33:53.885026 2026] [:error] [pid 2629:tid 2681] [client 185.137.164.18:49517] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZsh4QlsXSV5M4mfwZ9azQAAAVc"]
[Sun Feb 22 23:33:54.652228 2026] [:error] [pid 2474:tid 2545] [client 185.137.164.14:33865] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZsh4vhvE7P5hX_xKnS4iAAAAFg"]
[Sun Feb 22 23:33:55.878987 2026] [proxy_fcgi:error] [pid 3103:tid 3128] [client 185.137.164.21:35423] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:56.255144 2026] [:error] [pid 3103:tid 3116] [client 185.137.164.21:35423] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/WordPressCore/index.php"] [unique_id "aZsh5JfzX5hBIaQY93N_jQAAAYo"]
[Sun Feb 22 23:33:57.138014 2026] [proxy_fcgi:error] [pid 2629:tid 2671] [client 185.137.164.18:21681] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:57.438001 2026] [proxy_fcgi:error] [pid 2629:tid 2678] [client 185.137.164.18:21681] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:33:57.709786 2026] [:error] [pid 2629:tid 2676] [client 185.137.164.18:21681] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/network.php"] [unique_id "aZsh5QlsXSV5M4mfwZ9a-AAAAVI"]
[Sun Feb 22 23:33:58.253084 2026] [:error] [pid 3103:tid 3126] [client 185.137.164.16:52419] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/network.php"] [unique_id "aZsh5pfzX5hBIaQY93N_sgAAAZQ"]
[Sun Feb 22 23:33:59.881069 2026] [:error] [pid 2574:tid 2591] [client 185.137.164.19:21967] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/network.php"] [unique_id "aZsh58kPV7h4nTf-jiTnFQAAAMo"]
[Sun Feb 22 23:34:00.753009 2026] [:error] [pid 2629:tid 2664] [client 185.137.164.17:64981] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aZsh6AlsXSV5M4mfwZ9bFAAAAUY"]
[Sun Feb 22 23:34:01.409704 2026] [:error] [pid 2474:tid 2513] [client 185.137.164.17:22877] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aZsh6fhvE7P5hX_xKnS44AAAAEQ"]
[Sun Feb 22 23:34:02.124575 2026] [:error] [pid 2574:tid 2591] [client 185.137.164.16:28891] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aZsh6skPV7h4nTf-jiTnHwAAAMo"]
[Sun Feb 22 23:34:02.770098 2026] [proxy_fcgi:error] [pid 2628:tid 2652] [client 185.137.164.13:47313] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:34:03.121988 2026] [:error] [pid 2628:tid 2654] [client 185.137.164.13:47313] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZsh67K4woMTeUPH2ns8xAAAARc"]
[Sun Feb 22 23:34:03.625637 2026] [:error] [pid 2474:tid 2513] [client 185.137.164.19:59559] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aZsh6_hvE7P5hX_xKnS4-AAAAEQ"]
[Sun Feb 22 23:34:04.311332 2026] [:error] [pid 2474:tid 2544] [client 185.137.164.19:46659] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZsh7PhvE7P5hX_xKnS4_wAAAFc"]
[Sun Feb 22 23:34:04.843817 2026] [:error] [pid 2475:tid 2561] [client 185.137.164.20:33261] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZsh7Cdme8TSKYpXujdxtQAAAJU"]
[Sun Feb 22 23:34:05.417001 2026] [proxy_fcgi:error] [pid 26033:tid 26049] [client 185.137.164.14:52781] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:34:05.698142 2026] [:error] [pid 26033:tid 26049] [client 185.137.164.14:52781] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZsh7UTRRZdhkkS8ouSJgQAAAc4"]
[Sun Feb 22 23:34:06.234963 2026] [:error] [pid 2475:tid 2550] [client 185.137.164.14:37525] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZsh7idme8TSKYpXujdxvAAAAIo"]
[Sun Feb 22 23:34:06.927153 2026] [proxy_fcgi:error] [pid 2474:tid 2513] [client 185.137.164.15:54025] AH01071: Got error 'Primary script unknown'
[Sun Feb 22 23:34:07.263154 2026] [:error] [pid 2474:tid 2511] [client 185.137.164.15:54025] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aZsh7_hvE7P5hX_xKnS5IgAAAEI"]
[Sun Feb 22 23:34:07.793453 2026] [:error] [pid 26033:tid 26052] [client 185.137.164.13:34475] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aZsh70TRRZdhkkS8ouSJngAAAdE"]
[Sun Feb 22 23:34:08.302344 2026] [:error] [pid 2474:tid 2510] [client 185.137.164.14:46915] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aZsh8PhvE7P5hX_xKnS5LgAAAEE"]
[Sun Feb 22 23:34:08.885780 2026] [:error] [pid 2628:tid 2636] [client 185.137.164.14:24001] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aZsh8LK4woMTeUPH2ns89QAAAQU"]
[Sun Feb 22 23:34:09.504512 2026] [:error] [pid 2574:tid 2588] [client 185.137.164.13:36401] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aZsh8ckPV7h4nTf-jiTnUAAAAMc"]
[Sun Feb 22 23:34:10.716324 2026] [:error] [pid 2473:tid 2500] [client 185.137.164.17:26399] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aZsh8nptAeV7-XzzNzg-hgAAABc"]
[Sun Feb 22 23:34:11.572621 2026] [:error] [pid 2475:tid 2556] [client 185.137.164.18:60013] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh8ydme8TSKYpXujdx3QAAAJA"]
[Sun Feb 22 23:34:12.075880 2026] [:error] [pid 2629:tid 2670] [client 185.137.164.12:51511] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh9AlsXSV5M4mfwZ9bjQAAAUw"]
[Sun Feb 22 23:34:12.610758 2026] [:error] [pid 3103:tid 3123] [client 185.137.164.19:40365] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh9JfzX5hBIaQY93OAWgAAAZE"]
[Sun Feb 22 23:34:13.223762 2026] [:error] [pid 3103:tid 3130] [client 185.137.164.19:24513] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh9ZfzX5hBIaQY93OAYQAAAZg"]
[Sun Feb 22 23:34:13.764006 2026] [:error] [pid 2473:tid 2480] [client 185.137.164.12:57591] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh9XptAeV7-XzzNzg-ugAAAAM"]
[Mon Feb 23 00:51:41.757856 2026] [proxy_fcgi:error] [pid 28426:tid 28532] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:41.884662 2026] [proxy_fcgi:error] [pid 28426:tid 28536] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.009193 2026] [proxy_fcgi:error] [pid 28426:tid 28546] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.134137 2026] [proxy_fcgi:error] [pid 28426:tid 28537] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.254673 2026] [:error] [pid 28426:tid 28535] [client 20.78.146.86:6350] [client 20.78.146.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.78.146.86, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZs0HmgbPVf4pO12NZnHWgAAAI0"]
[Mon Feb 23 00:51:42.258594 2026] [proxy_fcgi:error] [pid 28426:tid 28535] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.383997 2026] [proxy_fcgi:error] [pid 28426:tid 28529] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.513244 2026] [proxy_fcgi:error] [pid 28426:tid 28521] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.639847 2026] [proxy_fcgi:error] [pid 28426:tid 28545] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.767117 2026] [proxy_fcgi:error] [pid 28426:tid 28528] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:42.892693 2026] [proxy_fcgi:error] [pid 28426:tid 28522] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:43.018157 2026] [proxy_fcgi:error] [pid 28426:tid 28538] [client 20.78.146.86:6350] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 00:51:43.139111 2026] [:error] [pid 28426:tid 28543] [client 20.78.146.86:6350] [client 20.78.146.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aZs0H2gbPVf4pO12NZnHYgAAAJU"]
[Mon Feb 23 00:51:43.654989 2026] [:error] [pid 28426:tid 28526] [client 20.78.146.86:6337] [client 20.78.146.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aZs0H2gbPVf4pO12NZnHZQAAAIU"]
[Mon Feb 23 00:51:44.147980 2026] [:error] [pid 4806:tid 4819] [client 20.78.146.86:6149] [client 20.78.146.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aZs0IPFTHI_ud-cTYbTnewAAAQs"]
[Mon Feb 23 00:51:44.677401 2026] [:error] [pid 28558:tid 28580] [client 20.78.146.86:6158] [client 20.78.146.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aZs0ICdFHR5e1Gd10vd1bAAAANQ"]
[Mon Feb 23 02:12:35.118027 2026] [proxy_fcgi:error] [pid 4806:tid 4808] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:35.283869 2026] [proxy_fcgi:error] [pid 4806:tid 4830] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:35.520635 2026] [proxy_fcgi:error] [pid 4806:tid 4822] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:36.079120 2026] [proxy_fcgi:error] [pid 4806:tid 4819] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:38.410769 2026] [proxy_fcgi:error] [pid 4806:tid 4816] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:38.537226 2026] [proxy_fcgi:error] [pid 4806:tid 4822] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:38.662147 2026] [proxy_fcgi:error] [pid 4806:tid 4828] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:38.787730 2026] [proxy_fcgi:error] [pid 4806:tid 4825] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:39.039346 2026] [proxy_fcgi:error] [pid 4806:tid 4809] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:39.162877 2026] [proxy_fcgi:error] [pid 4806:tid 4821] [client 20.24.198.93:23783] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:12:39.283043 2026] [:error] [pid 4806:tid 4819] [client 20.24.198.93:23783] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sty.php"] [unique_id "aZtHF_FTHI_ud-cTYbQQkgAAAQs"]
[Mon Feb 23 02:12:40.289135 2026] [:error] [pid 4806:tid 4812] [client 20.24.198.93:20440] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sty.php"] [unique_id "aZtHGPFTHI_ud-cTYbQQkwAAAQQ"]
[Mon Feb 23 02:12:42.092803 2026] [:error] [pid 28424:tid 28445] [client 20.24.198.93:20464] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sty.php"] [unique_id "aZtHGgBAZT_BJOxE-Z49QAAAABE"]
[Mon Feb 23 02:12:42.622496 2026] [:error] [pid 28425:tid 28518] [client 20.24.198.93:46407] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sty.php"] [unique_id "aZtHGjO7QIkwG1UqFGz9UQAAAFg"]
[Mon Feb 23 02:12:43.444428 2026] [:error] [pid 4806:tid 4810] [client 20.24.198.93:23771] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aZtHG_FTHI_ud-cTYbQQmQAAAQI"]
[Mon Feb 23 02:12:44.298198 2026] [:error] [pid 28426:tid 28529] [client 20.24.198.93:30764] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aZtHHGgbPVf4pO12NZnlUQAAAIc"]
[Mon Feb 23 02:12:45.477420 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:53528] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aZtHHQBAZT_BJOxE-Z49TgAAABg"]
[Mon Feb 23 02:12:46.129052 2026] [:error] [pid 28424:tid 28451] [client 20.24.198.93:27361] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aZtHHgBAZT_BJOxE-Z49TwAAABc"]
[Mon Feb 23 02:12:47.189105 2026] [:error] [pid 28558:tid 28575] [client 20.24.198.93:46411] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tevkb.php"] [unique_id "aZtHHydFHR5e1Gd10veWgwAAAM8"]
[Mon Feb 23 02:12:47.952518 2026] [:error] [pid 4806:tid 4825] [client 20.24.198.93:46408] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tevkb.php"] [unique_id "aZtHH_FTHI_ud-cTYbQQqAAAARE"]
[Mon Feb 23 02:12:48.671779 2026] [:error] [pid 4806:tid 4822] [client 20.24.198.93:53515] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tevkb.php"] [unique_id "aZtHIPFTHI_ud-cTYbQQqgAAAQ4"]
[Mon Feb 23 02:12:49.604033 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:27359] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tevkb.php"] [unique_id "aZtHIWgbPVf4pO12NZnlWAAAAIM"]
[Mon Feb 23 02:12:50.020322 2026] [:error] [pid 28426:tid 28546] [client 20.24.198.93:57792] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atmaca.php"] [unique_id "aZtHImgbPVf4pO12NZnlWgAAAJg"]
[Mon Feb 23 02:12:50.587225 2026] [:error] [pid 28558:tid 28576] [client 20.24.198.93:46413] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atmaca.php"] [unique_id "aZtHIidFHR5e1Gd10veWigAAANA"]
[Mon Feb 23 02:12:51.012232 2026] [:error] [pid 28558:tid 28568] [client 20.24.198.93:37502] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atmaca.php"] [unique_id "aZtHIydFHR5e1Gd10veWjAAAAMg"]
[Mon Feb 23 02:12:51.762824 2026] [:error] [pid 4806:tid 4808] [client 20.24.198.93:23788] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atmaca.php"] [unique_id "aZtHI_FTHI_ud-cTYbQQsQAAAQA"]
[Mon Feb 23 02:12:52.963303 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:20798] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aZtHJABAZT_BJOxE-Z49WQAAAAc"]
[Mon Feb 23 02:12:55.606548 2026] [:error] [pid 28426:tid 28529] [client 20.24.198.93:37476] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aZtHJ2gbPVf4pO12NZnlZgAAAIc"]
[Mon Feb 23 02:12:56.526151 2026] [:error] [pid 28558:tid 28574] [client 20.24.198.93:46440] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aZtHKCdFHR5e1Gd10veWkgAAAM4"]
[Mon Feb 23 02:12:59.173480 2026] [:error] [pid 28558:tid 28564] [client 20.24.198.93:57810] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aZtHKydFHR5e1Gd10veWmAAAAMQ"]
[Mon Feb 23 02:13:00.978721 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:46412] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aZtHLABAZT_BJOxE-Z49YAAAAAc"]
[Mon Feb 23 02:13:01.565655 2026] [:error] [pid 28558:tid 28565] [client 20.24.198.93:27337] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aZtHLSdFHR5e1Gd10veWoAAAAMU"]
[Mon Feb 23 02:13:03.893083 2026] [:error] [pid 28426:tid 28526] [client 20.24.198.93:46426] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aZtHL2gbPVf4pO12NZnlbgAAAIU"]
[Mon Feb 23 02:13:04.976326 2026] [:error] [pid 4806:tid 4826] [client 20.24.198.93:20449] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aZtHMPFTHI_ud-cTYbQQ0gAAARI"]
[Mon Feb 23 02:13:06.594177 2026] [:error] [pid 28558:tid 28582] [client 20.24.198.93:20754] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aZtHMidFHR5e1Gd10veWrgAAANY"]
[Mon Feb 23 02:13:07.495180 2026] [:error] [pid 28426:tid 28533] [client 20.24.198.93:48850] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aZtHM2gbPVf4pO12NZnlcwAAAIs"]
[Mon Feb 23 02:13:09.249464 2026] [:error] [pid 28426:tid 28540] [client 20.24.198.93:55420] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aZtHNWgbPVf4pO12NZnldwAAAJI"]
[Mon Feb 23 02:13:10.626642 2026] [:error] [pid 28424:tid 28441] [client 20.24.198.93:57833] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aZtHNgBAZT_BJOxE-Z49awAAAA0"]
[Mon Feb 23 02:13:11.821867 2026] [:error] [pid 28426:tid 28537] [client 20.24.198.93:20433] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aZtHN2gbPVf4pO12NZnleQAAAI8"]
[Mon Feb 23 02:13:12.502841 2026] [:error] [pid 28426:tid 28546] [client 20.24.198.93:37440] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aZtHOGgbPVf4pO12NZnlfAAAAJg"]
[Mon Feb 23 02:13:13.130173 2026] [:error] [pid 28558:tid 28562] [client 20.24.198.93:47539] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aZtHOSdFHR5e1Gd10veWuQAAAMI"]
[Mon Feb 23 02:13:14.103972 2026] [:error] [pid 28424:tid 28438] [client 20.24.198.93:37442] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aZtHOgBAZT_BJOxE-Z49cgAAAAo"]
[Mon Feb 23 02:13:14.680421 2026] [:error] [pid 28558:tid 28583] [client 20.24.198.93:57824] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aZtHOidFHR5e1Gd10veWuwAAANc"]
[Mon Feb 23 02:13:15.439997 2026] [:error] [pid 28424:tid 28447] [client 20.24.198.93:47494] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aZtHOwBAZT_BJOxE-Z49dwAAABM"]
[Mon Feb 23 02:13:16.510899 2026] [:error] [pid 28558:tid 28570] [client 20.24.198.93:55417] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aZtHPCdFHR5e1Gd10veWvwAAAMo"]
[Mon Feb 23 02:13:18.251754 2026] [:error] [pid 28426:tid 28535] [client 20.24.198.93:47489] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aZtHPmgbPVf4pO12NZnliAAAAI0"]
[Mon Feb 23 02:13:19.204292 2026] [:error] [pid 28425:tid 28498] [client 20.24.198.93:46424] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aZtHPzO7QIkwG1UqFGz9nwAAAEU"]
[Mon Feb 23 02:13:20.261812 2026] [:error] [pid 28558:tid 28578] [client 20.24.198.93:37459] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aZtHQCdFHR5e1Gd10veWxQAAANI"]
[Mon Feb 23 02:13:21.677643 2026] [:error] [pid 28425:tid 28506] [client 20.24.198.93:55396] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aZtHQTO7QIkwG1UqFGz9owAAAE0"]
[Mon Feb 23 02:13:22.542935 2026] [:error] [pid 28425:tid 28499] [client 20.24.198.93:23759] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aZtHQjO7QIkwG1UqFGz9pwAAAEY"]
[Mon Feb 23 02:13:24.956608 2026] [:error] [pid 28424:tid 28436] [client 20.24.198.93:23789] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aZtHRABAZT_BJOxE-Z49hAAAAAg"]
[Mon Feb 23 02:13:26.134769 2026] [:error] [pid 28424:tid 28433] [client 20.24.198.93:55363] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aZtHRgBAZT_BJOxE-Z49hgAAAAU"]
[Mon Feb 23 02:13:27.562274 2026] [:error] [pid 28425:tid 28499] [client 20.24.198.93:27346] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aZtHRzO7QIkwG1UqFGz9rwAAAEY"]
[Mon Feb 23 02:13:28.503606 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:23787] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aZtHSPFTHI_ud-cTYbQREAAAAQw"]
[Mon Feb 23 02:13:29.213271 2026] [:error] [pid 28425:tid 28507] [client 20.24.198.93:37465] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aZtHSTO7QIkwG1UqFGz9sAAAAE4"]
[Mon Feb 23 02:13:29.676522 2026] [:error] [pid 28425:tid 28508] [client 20.24.198.93:57850] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aZtHSTO7QIkwG1UqFGz9sgAAAE8"]
[Mon Feb 23 02:13:30.226754 2026] [:error] [pid 4806:tid 4826] [client 20.24.198.93:46414] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aZtHSvFTHI_ud-cTYbQREgAAARI"]
[Mon Feb 23 02:13:30.702457 2026] [:error] [pid 28426:tid 28546] [client 20.24.198.93:27363] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aZtHSmgbPVf4pO12NZnlmQAAAJg"]
[Mon Feb 23 02:13:31.359672 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:48875] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aZtHSwBAZT_BJOxE-Z49jQAAAAA"]
[Mon Feb 23 02:13:34.696323 2026] [:error] [pid 28558:tid 28567] [client 20.24.198.93:53548] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aZtHTidFHR5e1Gd10veW1wAAAMc"]
[Mon Feb 23 02:13:35.240122 2026] [:error] [pid 28425:tid 28500] [client 20.24.198.93:30729] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aZtHTzO7QIkwG1UqFGz9uQAAAEc"]
[Mon Feb 23 02:13:36.096411 2026] [:error] [pid 28425:tid 28495] [client 20.24.198.93:57803] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "aZtHUDO7QIkwG1UqFGz9uwAAAEI"]
[Mon Feb 23 02:13:37.466306 2026] [:error] [pid 28426:tid 28526] [client 20.24.198.93:55408] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aZtHUWgbPVf4pO12NZnlpQAAAIU"]
[Mon Feb 23 02:13:38.418790 2026] [:error] [pid 28426:tid 28535] [client 20.24.198.93:23803] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aZtHUmgbPVf4pO12NZnlqAAAAI0"]
[Mon Feb 23 02:13:38.948838 2026] [:error] [pid 28425:tid 28513] [client 20.24.198.93:48888] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aZtHUjO7QIkwG1UqFGz9wgAAAFQ"]
[Mon Feb 23 02:13:39.809512 2026] [proxy_fcgi:error] [pid 4806:tid 4814] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:40.065447 2026] [proxy_fcgi:error] [pid 4806:tid 4827] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:40.189846 2026] [proxy_fcgi:error] [pid 4806:tid 4821] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:40.317591 2026] [proxy_fcgi:error] [pid 4806:tid 4809] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:40.442793 2026] [proxy_fcgi:error] [pid 4806:tid 4832] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:40.674531 2026] [proxy_fcgi:error] [pid 4806:tid 4824] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:41.031691 2026] [proxy_fcgi:error] [pid 4806:tid 4829] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:41.365733 2026] [proxy_fcgi:error] [pid 4806:tid 4818] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:41.626139 2026] [proxy_fcgi:error] [pid 4806:tid 4831] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:41.796013 2026] [proxy_fcgi:error] [pid 4806:tid 4819] [client 20.24.198.93:27376] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:13:41.916812 2026] [:error] [pid 4806:tid 4823] [client 20.24.198.93:27376] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aZtHVfFTHI_ud-cTYbQRMAAAAQ8"]
[Mon Feb 23 02:13:43.308114 2026] [:error] [pid 28558:tid 28578] [client 20.24.198.93:46455] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aZtHVydFHR5e1Gd10veW5gAAANI"]
[Mon Feb 23 02:13:44.282055 2026] [:error] [pid 28425:tid 28518] [client 20.24.198.93:53526] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aZtHWDO7QIkwG1UqFGz9xwAAAFg"]
[Mon Feb 23 02:13:44.989544 2026] [:error] [pid 28425:tid 28496] [client 20.24.198.93:23745] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aZtHWDO7QIkwG1UqFGz9yQAAAEM"]
[Mon Feb 23 02:13:45.798332 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:57849] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aZtHWWgbPVf4pO12NZnlsQAAAIM"]
[Mon Feb 23 02:13:47.209994 2026] [:error] [pid 28426:tid 28534] [client 20.24.198.93:27370] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aZtHW2gbPVf4pO12NZnltAAAAIw"]
[Mon Feb 23 02:13:47.696191 2026] [:error] [pid 28558:tid 28566] [client 20.24.198.93:53561] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aZtHWydFHR5e1Gd10veW8gAAAMY"]
[Mon Feb 23 02:13:48.019263 2026] [:error] [pid 4806:tid 4817] [client 20.24.198.93:21198] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aZtHXPFTHI_ud-cTYbQRPQAAAQk"]
[Mon Feb 23 02:13:48.454369 2026] [:error] [pid 28558:tid 28562] [client 20.24.198.93:47531] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aZtHXCdFHR5e1Gd10veW9AAAAMI"]
[Mon Feb 23 02:13:49.061418 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:23806] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aZtHXQBAZT_BJOxE-Z49qQAAABg"]
[Mon Feb 23 02:13:49.628314 2026] [:error] [pid 28426:tid 28537] [client 20.24.198.93:46452] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aZtHXWgbPVf4pO12NZnltwAAAI8"]
[Mon Feb 23 02:13:49.985524 2026] [:error] [pid 28558:tid 28571] [client 20.24.198.93:47496] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aZtHXSdFHR5e1Gd10veW9wAAAMs"]
[Mon Feb 23 02:13:50.845440 2026] [:error] [pid 4806:tid 4830] [client 20.24.198.93:23764] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aZtHXvFTHI_ud-cTYbQRRAAAARY"]
[Mon Feb 23 02:13:51.471037 2026] [:error] [pid 28426:tid 28523] [client 20.24.198.93:53535] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aZtHX2gbPVf4pO12NZnluQAAAII"]
[Mon Feb 23 02:13:51.966111 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:27332] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aZtHX2gbPVf4pO12NZnluwAAAIM"]
[Mon Feb 23 02:13:52.493248 2026] [:error] [pid 4806:tid 4823] [client 20.24.198.93:41222] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aZtHYPFTHI_ud-cTYbQRRwAAAQ8"]
[Mon Feb 23 02:13:52.989240 2026] [:error] [pid 28425:tid 28518] [client 20.24.198.93:37469] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aZtHYDO7QIkwG1UqFGz90wAAAFg"]
[Mon Feb 23 02:13:53.414178 2026] [:error] [pid 28426:tid 28532] [client 20.24.198.93:53527] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aZtHYWgbPVf4pO12NZnlwAAAAIo"]
[Mon Feb 23 02:13:53.779313 2026] [:error] [pid 28424:tid 28438] [client 20.24.198.93:53525] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aZtHYQBAZT_BJOxE-Z49sQAAAAo"]
[Mon Feb 23 02:13:54.342496 2026] [:error] [pid 28425:tid 28513] [client 20.24.198.93:57814] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aZtHYjO7QIkwG1UqFGz91gAAAFQ"]
[Mon Feb 23 02:13:54.804068 2026] [:error] [pid 28425:tid 28512] [client 20.24.198.93:21193] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login5.php"] [unique_id "aZtHYjO7QIkwG1UqFGz92gAAAFM"]
[Mon Feb 23 02:13:55.525351 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:23796] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login5.php"] [unique_id "aZtHY_FTHI_ud-cTYbQRTgAAAQE"]
[Mon Feb 23 02:13:56.662803 2026] [:error] [pid 28426:tid 28530] [client 20.24.198.93:37482] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login5.php"] [unique_id "aZtHZGgbPVf4pO12NZnlyAAAAIg"]
[Mon Feb 23 02:13:57.553744 2026] [:error] [pid 28426:tid 28534] [client 20.24.198.93:53550] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/login5.php"] [unique_id "aZtHZWgbPVf4pO12NZnlzAAAAIw"]
[Mon Feb 23 02:13:58.055002 2026] [:error] [pid 28424:tid 28451] [client 20.24.198.93:55380] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aZtHZgBAZT_BJOxE-Z49uQAAABc"]
[Mon Feb 23 02:13:58.498797 2026] [:error] [pid 4806:tid 4813] [client 20.24.198.93:47516] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aZtHZvFTHI_ud-cTYbQRVgAAAQU"]
[Mon Feb 23 02:13:59.172878 2026] [:error] [pid 28558:tid 28566] [client 20.24.198.93:57835] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aZtHZydFHR5e1Gd10veXDAAAAMY"]
[Mon Feb 23 02:14:00.207009 2026] [:error] [pid 4806:tid 4830] [client 20.24.198.93:21190] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aZtHaPFTHI_ud-cTYbQRWgAAARY"]
[Mon Feb 23 02:14:00.808829 2026] [:error] [pid 4806:tid 4818] [client 20.24.198.93:53562] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aZtHaPFTHI_ud-cTYbQRXQAAAQo"]
[Mon Feb 23 02:14:02.122674 2026] [:error] [pid 28558:tid 28568] [client 20.24.198.93:35506] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aZtHaidFHR5e1Gd10veXEgAAAMg"]
[Mon Feb 23 02:14:02.719253 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:37479] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aZtHaidFHR5e1Gd10veXFQAAANQ"]
[Mon Feb 23 02:14:03.752989 2026] [:error] [pid 28424:tid 28444] [client 20.24.198.93:46458] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lul.php"] [unique_id "aZtHawBAZT_BJOxE-Z49vQAAABA"]
[Mon Feb 23 02:14:04.404215 2026] [:error] [pid 28426:tid 28521] [client 20.24.198.93:46448] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aZtHbGgbPVf4pO12NZnl0wAAAIA"]
[Mon Feb 23 02:14:05.274861 2026] [:error] [pid 28425:tid 28502] [client 20.24.198.93:43270] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aZtHbTO7QIkwG1UqFGz97QAAAEk"]
[Mon Feb 23 02:14:05.795575 2026] [:error] [pid 28424:tid 28448] [client 20.24.198.93:55414] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aZtHbQBAZT_BJOxE-Z49wAAAABQ"]
[Mon Feb 23 02:14:06.437647 2026] [:error] [pid 28424:tid 28451] [client 20.24.198.93:23705] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aZtHbgBAZT_BJOxE-Z49wQAAABc"]
[Mon Feb 23 02:14:06.888706 2026] [:error] [pid 28425:tid 28507] [client 20.24.198.93:55377] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aZtHbjO7QIkwG1UqFGz99gAAAE4"]
[Mon Feb 23 02:14:07.352647 2026] [:error] [pid 28425:tid 28494] [client 20.24.198.93:43318] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aZtHbzO7QIkwG1UqFGz99wAAAEE"]
[Mon Feb 23 02:14:07.969706 2026] [:error] [pid 28425:tid 28509] [client 20.24.198.93:56118] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aZtHbzO7QIkwG1UqFGz9_AAAAFA"]
[Mon Feb 23 02:14:08.412132 2026] [:error] [pid 28424:tid 28442] [client 20.24.198.93:30777] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aZtHcABAZT_BJOxE-Z49xAAAAA4"]
[Mon Feb 23 02:14:09.098796 2026] [:error] [pid 28426:tid 28544] [client 20.24.198.93:43290] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aZtHcWgbPVf4pO12NZnl1wAAAJY"]
[Mon Feb 23 02:14:09.616991 2026] [:error] [pid 4806:tid 4817] [client 20.24.198.93:35508] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aZtHcfFTHI_ud-cTYbQRaAAAAQk"]
[Mon Feb 23 02:14:10.115774 2026] [:error] [pid 4806:tid 4825] [client 20.24.198.93:56113] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aZtHcvFTHI_ud-cTYbQRaQAAARE"]
[Mon Feb 23 02:14:11.096881 2026] [:error] [pid 28558:tid 28562] [client 20.24.198.93:43266] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aZtHcydFHR5e1Gd10veXIQAAAMI"]
[Mon Feb 23 02:14:11.772652 2026] [:error] [pid 28426:tid 28521] [client 20.24.198.93:47522] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aZtHc2gbPVf4pO12NZnl3wAAAIA"]
[Mon Feb 23 02:14:12.324782 2026] [:error] [pid 28426:tid 28536] [client 20.24.198.93:20751] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aZtHdGgbPVf4pO12NZnl4gAAAI4"]
[Mon Feb 23 02:14:12.903206 2026] [:error] [pid 28425:tid 28509] [client 20.24.198.93:23690] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aZtHdDO7QIkwG1UqFGz-AQAAAFA"]
[Mon Feb 23 02:14:13.459355 2026] [:error] [pid 28426:tid 28530] [client 20.24.198.93:56081] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aZtHdWgbPVf4pO12NZnl5wAAAIg"]
[Mon Feb 23 02:14:14.228304 2026] [:error] [pid 28425:tid 28501] [client 20.24.198.93:23699] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aZtHdjO7QIkwG1UqFGz-AwAAAEg"]
[Mon Feb 23 02:14:15.009282 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:52986] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aZtHdwBAZT_BJOxE-Z49ywAAAAc"]
[Mon Feb 23 02:14:15.560932 2026] [:error] [pid 28558:tid 28572] [client 20.24.198.93:55412] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aZtHdydFHR5e1Gd10veXKAAAAMw"]
[Mon Feb 23 02:14:16.134035 2026] [:error] [pid 28425:tid 28503] [client 20.24.198.93:48832] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aZtHeDO7QIkwG1UqFGz-BQAAAEo"]
[Mon Feb 23 02:14:16.571693 2026] [:error] [pid 28425:tid 28516] [client 20.24.198.93:56109] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aZtHeDO7QIkwG1UqFGz-BgAAAFc"]
[Mon Feb 23 02:14:17.434299 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:20527] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aZtHeSdFHR5e1Gd10veXKwAAANQ"]
[Mon Feb 23 02:14:18.248883 2026] [:error] [pid 28424:tid 28433] [client 20.24.198.93:20542] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aZtHegBAZT_BJOxE-Z49zAAAAAU"]
[Mon Feb 23 02:14:19.409699 2026] [:error] [pid 28424:tid 28438] [client 20.24.198.93:25602] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aZtHewBAZT_BJOxE-Z49zgAAAAo"]
[Mon Feb 23 02:14:20.117696 2026] [:error] [pid 28425:tid 28494] [client 20.24.198.93:31426] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aZtHfDO7QIkwG1UqFGz-DQAAAEE"]
[Mon Feb 23 02:14:20.694745 2026] [:error] [pid 28424:tid 28439] [client 20.24.198.93:51713] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aZtHfABAZT_BJOxE-Z490QAAAAs"]
[Mon Feb 23 02:14:21.305781 2026] [:error] [pid 28558:tid 28569] [client 20.24.198.93:25653] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aZtHfSdFHR5e1Gd10veXMwAAAMk"]
[Mon Feb 23 02:14:22.393595 2026] [:error] [pid 28425:tid 28510] [client 20.24.198.93:31470] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aZtHfjO7QIkwG1UqFGz-EQAAAFE"]
[Mon Feb 23 02:14:22.893036 2026] [:error] [pid 28424:tid 28451] [client 20.24.198.93:48816] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aZtHfgBAZT_BJOxE-Z492AAAABc"]
[Mon Feb 23 02:14:23.517932 2026] [:error] [pid 4806:tid 4825] [client 20.24.198.93:40801] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aZtHf_FTHI_ud-cTYbQRdAAAARE"]
[Mon Feb 23 02:14:25.479443 2026] [:error] [pid 28424:tid 28443] [client 20.24.198.93:40784] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aZtHgQBAZT_BJOxE-Z493AAAAA8"]
[Mon Feb 23 02:14:26.742522 2026] [:error] [pid 28558:tid 28583] [client 20.24.198.93:44370] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aZtHgidFHR5e1Gd10veXOwAAANc"]
[Mon Feb 23 02:14:28.717075 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:25643] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aZtHhABAZT_BJOxE-Z493wAAAAA"]
[Mon Feb 23 02:14:30.736120 2026] [:error] [pid 28558:tid 28577] [client 20.24.198.93:25637] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aZtHhidFHR5e1Gd10veXQQAAANE"]
[Mon Feb 23 02:14:33.847418 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:25666] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aZtHifFTHI_ud-cTYbQRgwAAAQE"]
[Mon Feb 23 02:14:35.124489 2026] [:error] [pid 28425:tid 28502] [client 20.24.198.93:64700] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aZtHizO7QIkwG1UqFGz-GgAAAEk"]
[Mon Feb 23 02:14:36.315394 2026] [:error] [pid 28424:tid 28430] [client 20.24.198.93:52315] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aZtHjABAZT_BJOxE-Z496wAAAAI"]
[Mon Feb 23 02:14:36.990010 2026] [:error] [pid 28424:tid 28449] [client 20.24.198.93:52307] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aZtHjABAZT_BJOxE-Z497QAAABU"]
[Mon Feb 23 02:14:38.409263 2026] [:error] [pid 4806:tid 4828] [client 20.24.198.93:40757] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aZtHjvFTHI_ud-cTYbQRjgAAARQ"]
[Mon Feb 23 02:14:41.635241 2026] [proxy_fcgi:error] [pid 28426:tid 28532] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:42.959155 2026] [proxy_fcgi:error] [pid 28426:tid 28531] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:43.208239 2026] [proxy_fcgi:error] [pid 28426:tid 28540] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:43.467437 2026] [proxy_fcgi:error] [pid 28426:tid 28524] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:43.942800 2026] [proxy_fcgi:error] [pid 28426:tid 28530] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:44.069102 2026] [proxy_fcgi:error] [pid 28426:tid 28533] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:44.194558 2026] [proxy_fcgi:error] [pid 28426:tid 28538] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:44.332788 2026] [proxy_fcgi:error] [pid 28426:tid 28539] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:44.460134 2026] [proxy_fcgi:error] [pid 28426:tid 28525] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:44.597877 2026] [proxy_fcgi:error] [pid 28426:tid 28529] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:44.999459 2026] [proxy_fcgi:error] [pid 28426:tid 28542] [client 20.24.198.93:40741] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:14:45.121092 2026] [:error] [pid 28426:tid 28535] [client 20.24.198.93:40741] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aZtHlWgbPVf4pO12NZnmHwAAAI0"]
[Mon Feb 23 02:14:45.699538 2026] [:error] [pid 28424:tid 28441] [client 20.24.198.93:55343] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aZtHlQBAZT_BJOxE-Z49-wAAAA0"]
[Mon Feb 23 02:14:46.402701 2026] [:error] [pid 28425:tid 28504] [client 20.24.198.93:25719] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aZtHljO7QIkwG1UqFGz-LgAAAEs"]
[Mon Feb 23 02:14:47.703004 2026] [:error] [pid 4806:tid 4824] [client 20.24.198.93:21069] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aZtHl_FTHI_ud-cTYbQRpQAAARA"]
[Mon Feb 23 02:14:50.943718 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:61437] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aZtHmmgbPVf4pO12NZnmJwAAAIM"]
[Mon Feb 23 02:14:51.786024 2026] [:error] [pid 28558:tid 28563] [client 20.24.198.93:48183] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aZtHmydFHR5e1Gd10veXWwAAAMM"]
[Mon Feb 23 02:14:52.590025 2026] [:error] [pid 28558:tid 28578] [client 20.24.198.93:28608] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aZtHnCdFHR5e1Gd10veXXQAAANI"]
[Mon Feb 23 02:14:53.211635 2026] [:error] [pid 28558:tid 28574] [client 20.24.198.93:28638] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aZtHnSdFHR5e1Gd10veXYAAAAM4"]
[Mon Feb 23 02:14:54.007491 2026] [:error] [pid 4806:tid 4819] [client 20.24.198.93:21093] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aZtHnvFTHI_ud-cTYbQRvwAAAQs"]
[Mon Feb 23 02:14:54.946935 2026] [:error] [pid 28558:tid 28571] [client 20.24.198.93:42526] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aZtHnidFHR5e1Gd10veXZAAAAMs"]
[Mon Feb 23 02:14:55.913049 2026] [:error] [pid 28424:tid 28450] [client 20.24.198.93:42523] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aZtHnwBAZT_BJOxE-Z4-CQAAABY"]
[Mon Feb 23 02:14:56.438778 2026] [:error] [pid 28426:tid 28545] [client 20.24.198.93:53603] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aZtHoGgbPVf4pO12NZnmMQAAAJc"]
[Mon Feb 23 02:14:57.389896 2026] [:error] [pid 28426:tid 28532] [client 20.24.198.93:32099] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aZtHoWgbPVf4pO12NZnmMgAAAIo"]
[Mon Feb 23 02:14:58.738439 2026] [:error] [pid 28426:tid 28540] [client 20.24.198.93:37386] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aZtHomgbPVf4pO12NZnmNQAAAJI"]
[Mon Feb 23 02:15:00.181553 2026] [:error] [pid 28426:tid 28533] [client 20.24.198.93:57305] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aZtHpGgbPVf4pO12NZnmNwAAAIs"]
[Mon Feb 23 02:15:01.517835 2026] [:error] [pid 28424:tid 28446] [client 20.24.198.93:49413] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aZtHpQBAZT_BJOxE-Z4-EwAAABI"]
[Mon Feb 23 02:15:02.333441 2026] [:error] [pid 4806:tid 4831] [client 20.24.198.93:53586] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aZtHpvFTHI_ud-cTYbQRygAAARc"]
[Mon Feb 23 02:15:03.539083 2026] [:error] [pid 28426:tid 28528] [client 20.24.198.93:37437] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aZtHp2gbPVf4pO12NZnmPQAAAIY"]
[Mon Feb 23 02:15:05.139464 2026] [:error] [pid 28558:tid 28566] [client 20.24.198.93:57328] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aZtHqSdFHR5e1Gd10veXcwAAAMY"]
[Mon Feb 23 02:15:06.242866 2026] [:error] [pid 28558:tid 28582] [client 20.24.198.93:57338] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aZtHqidFHR5e1Gd10veXdAAAANY"]
[Mon Feb 23 02:15:07.437994 2026] [:error] [pid 4806:tid 4819] [client 20.24.198.93:44957] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZtHq_FTHI_ud-cTYbQRzwAAAQs"]
[Mon Feb 23 02:15:08.245823 2026] [:error] [pid 28426:tid 28540] [client 20.24.198.93:24430] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZtHrGgbPVf4pO12NZnmSAAAAJI"]
[Mon Feb 23 02:15:09.912121 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:27959] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZtHrQBAZT_BJOxE-Z4-HwAAAAA"]
[Mon Feb 23 02:15:11.822186 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:47009] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZtHr_FTHI_ud-cTYbQR1wAAAQw"]
[Mon Feb 23 02:15:13.074863 2026] [:error] [pid 28425:tid 28514] [client 20.24.198.93:46979] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aZtHsTO7QIkwG1UqFGz-QQAAAFU"]
[Mon Feb 23 02:15:14.748203 2026] [:error] [pid 28424:tid 28448] [client 20.24.198.93:47033] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aZtHsgBAZT_BJOxE-Z4-JgAAABQ"]
[Mon Feb 23 02:15:17.611414 2026] [:error] [pid 28424:tid 28444] [client 20.24.198.93:27271] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aZtHtQBAZT_BJOxE-Z4-LAAAABA"]
[Mon Feb 23 02:15:21.561188 2026] [:error] [pid 28424:tid 28448] [client 20.24.198.93:48232] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aZtHuQBAZT_BJOxE-Z4-MQAAABQ"]
[Mon Feb 23 02:15:24.087028 2026] [:error] [pid 28558:tid 28571] [client 20.24.198.93:43817] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aZtHvCdFHR5e1Gd10veXhwAAAMs"]
[Mon Feb 23 02:15:26.134336 2026] [:error] [pid 28558:tid 28581] [client 20.24.198.93:47035] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aZtHvidFHR5e1Gd10veXjAAAANU"]
[Mon Feb 23 02:15:27.357630 2026] [:error] [pid 28558:tid 28573] [client 20.24.198.93:36224] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aZtHvydFHR5e1Gd10veXjQAAAM0"]
[Mon Feb 23 02:15:28.561909 2026] [:error] [pid 28425:tid 28516] [client 20.24.198.93:43820] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aZtHwDO7QIkwG1UqFGz-VAAAAFc"]
[Mon Feb 23 02:15:30.053504 2026] [:error] [pid 28425:tid 28500] [client 20.24.198.93:47000] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aZtHwjO7QIkwG1UqFGz-WgAAAEc"]
[Mon Feb 23 02:15:32.335864 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:43801] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aZtHxPFTHI_ud-cTYbQSAwAAAQw"]
[Mon Feb 23 02:15:34.803338 2026] [:error] [pid 28424:tid 28430] [client 20.24.198.93:65291] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aZtHxgBAZT_BJOxE-Z4-RgAAAAI"]
[Mon Feb 23 02:15:35.939083 2026] [:error] [pid 28558:tid 28572] [client 20.24.198.93:41321] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aZtHxydFHR5e1Gd10veXlwAAAMw"]
[Mon Feb 23 02:15:36.866055 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:60811] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aZtHyPFTHI_ud-cTYbQSDAAAAQE"]
[Mon Feb 23 02:15:37.577474 2026] [:error] [pid 28558:tid 28565] [client 20.24.198.93:58900] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aZtHySdFHR5e1Gd10veXmAAAAMU"]
[Mon Feb 23 02:15:39.820588 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:20986] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aZtHywBAZT_BJOxE-Z4-SgAAAAc"]
[Mon Feb 23 02:15:41.302623 2026] [:error] [pid 28424:tid 28450] [client 20.24.198.93:56770] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aZtHzQBAZT_BJOxE-Z4-UAAAABY"]
[Mon Feb 23 02:15:41.944841 2026] [:error] [pid 28558:tid 28561] [client 20.24.198.93:56736] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aZtHzSdFHR5e1Gd10veXogAAAME"]
[Mon Feb 23 02:15:42.737033 2026] [:error] [pid 28426:tid 28534] [client 20.24.198.93:56809] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aZtHzmgbPVf4pO12NZnmgQAAAIw"]
[Mon Feb 23 02:15:43.518703 2026] [:error] [pid 28426:tid 28544] [client 20.24.198.93:24984] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i.php"] [unique_id "aZtHz2gbPVf4pO12NZnmhQAAAJY"]
[Mon Feb 23 02:15:44.725644 2026] [proxy_fcgi:error] [pid 28426:tid 28523] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.184988 2026] [proxy_fcgi:error] [pid 28426:tid 28529] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.306297 2026] [:error] [pid 28426:tid 28532] [client 20.24.198.93:65328] [client 20.24.198.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.24.198.93, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZtH0WgbPVf4pO12NZnmiwAAAIo"]
[Mon Feb 23 02:15:45.311001 2026] [proxy_fcgi:error] [pid 28426:tid 28532] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.453165 2026] [proxy_fcgi:error] [pid 28426:tid 28531] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.578755 2026] [proxy_fcgi:error] [pid 28426:tid 28522] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.705332 2026] [proxy_fcgi:error] [pid 28426:tid 28530] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.831064 2026] [proxy_fcgi:error] [pid 28426:tid 28524] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:45.974408 2026] [proxy_fcgi:error] [pid 28426:tid 28534] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:46.230968 2026] [proxy_fcgi:error] [pid 28426:tid 28533] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:46.357078 2026] [proxy_fcgi:error] [pid 28426:tid 28525] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:46.483600 2026] [proxy_fcgi:error] [pid 28426:tid 28528] [client 20.24.198.93:65328] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:15:46.605170 2026] [:error] [pid 28426:tid 28538] [client 20.24.198.93:65328] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtH0mgbPVf4pO12NZnmlgAAAJA"]
[Mon Feb 23 02:15:47.619885 2026] [:error] [pid 28426:tid 28521] [client 20.24.198.93:38671] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtH02gbPVf4pO12NZnmlwAAAIA"]
[Mon Feb 23 02:15:48.802678 2026] [:error] [pid 4806:tid 4811] [client 20.24.198.93:42605] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtH1PFTHI_ud-cTYbQSLAAAAQM"]
[Mon Feb 23 02:15:52.370553 2026] [:error] [pid 28426:tid 28535] [client 20.24.198.93:27999] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtH2GgbPVf4pO12NZnmoAAAAI0"]
[Mon Feb 23 02:15:53.599874 2026] [:error] [pid 28426:tid 28536] [client 20.24.198.93:50148] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aZtH2WgbPVf4pO12NZnmowAAAI4"]
[Mon Feb 23 02:15:54.649344 2026] [:error] [pid 4806:tid 4808] [client 20.24.198.93:28024] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aZtH2vFTHI_ud-cTYbQSNwAAAQA"]
[Mon Feb 23 02:15:55.385927 2026] [:error] [pid 28424:tid 28429] [client 20.24.198.93:24327] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aZtH2wBAZT_BJOxE-Z4-bgAAAAE"]
[Mon Feb 23 02:15:56.906437 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:24360] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aZtH3PFTHI_ud-cTYbQSPgAAAQw"]
[Mon Feb 23 02:15:57.951783 2026] [:error] [pid 4806:tid 4830] [client 20.24.198.93:25078] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aZtH3fFTHI_ud-cTYbQSQgAAARY"]
[Mon Feb 23 02:15:59.349213 2026] [:error] [pid 28424:tid 28440] [client 20.24.198.93:39963] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aZtH3wBAZT_BJOxE-Z4-cQAAAAw"]
[Mon Feb 23 02:16:00.110579 2026] [:error] [pid 28425:tid 28511] [client 20.24.198.93:42607] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aZtH4DO7QIkwG1UqFGz-zgAAAFI"]
[Mon Feb 23 02:16:01.849849 2026] [:error] [pid 28424:tid 28429] [client 20.24.198.93:52915] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ov.php"] [unique_id "aZtH4QBAZT_BJOxE-Z4-dwAAAAE"]
[Mon Feb 23 02:16:02.564494 2026] [:error] [pid 28425:tid 28497] [client 20.24.198.93:24380] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZtH4jO7QIkwG1UqFGz-3AAAAEQ"]
[Mon Feb 23 02:16:03.788865 2026] [:error] [pid 4806:tid 4831] [client 20.24.198.93:36852] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZtH4_FTHI_ud-cTYbQSUgAAARc"]
[Mon Feb 23 02:16:05.119869 2026] [:error] [pid 28424:tid 28437] [client 20.24.198.93:24356] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZtH5QBAZT_BJOxE-Z4-fQAAAAk"]
[Mon Feb 23 02:16:07.326184 2026] [:error] [pid 28558:tid 28577] [client 20.24.198.93:36821] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aZtH5ydFHR5e1Gd10veXvgAAANE"]
[Mon Feb 23 02:16:11.694196 2026] [:error] [pid 28558:tid 28571] [client 20.24.198.93:25061] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aZtH6ydFHR5e1Gd10veXxQAAAMs"]
[Mon Feb 23 02:16:13.448134 2026] [:error] [pid 28425:tid 28499] [client 20.24.198.93:35543] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aZtH7TO7QIkwG1UqFGz-7AAAAEY"]
[Mon Feb 23 02:16:14.879779 2026] [:error] [pid 28426:tid 28522] [client 20.24.198.93:35534] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aZtH7mgbPVf4pO12NZnmxQAAAIE"]
[Mon Feb 23 02:16:16.218345 2026] [:error] [pid 4806:tid 4819] [client 20.24.198.93:24330] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aZtH8PFTHI_ud-cTYbQSZAAAAQs"]
[Mon Feb 23 02:16:17.847034 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:35565] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aZtH8QBAZT_BJOxE-Z4-jQAAAAc"]
[Mon Feb 23 02:16:20.253233 2026] [:error] [pid 28425:tid 28501] [client 20.24.198.93:47556] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aZtH9DO7QIkwG1UqFGz-9AAAAEg"]
[Mon Feb 23 02:16:21.171783 2026] [:error] [pid 4806:tid 4831] [client 20.24.198.93:54267] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aZtH9fFTHI_ud-cTYbQSbAAAARc"]
[Mon Feb 23 02:16:24.047443 2026] [:error] [pid 4806:tid 4815] [client 20.24.198.93:24363] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aZtH-PFTHI_ud-cTYbQSegAAAQc"]
[Mon Feb 23 02:16:25.259140 2026] [:error] [pid 28558:tid 28570] [client 20.24.198.93:38774] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aZtH-SdFHR5e1Gd10veX1AAAAMo"]
[Mon Feb 23 02:16:26.449745 2026] [:error] [pid 28426:tid 28528] [client 20.24.198.93:47587] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aZtH-mgbPVf4pO12NZnm0wAAAIY"]
[Mon Feb 23 02:16:28.218949 2026] [:error] [pid 28426:tid 28541] [client 20.24.198.93:54241] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aZtH_GgbPVf4pO12NZnm2AAAAJM"]
[Mon Feb 23 02:16:29.865141 2026] [:error] [pid 28424:tid 28432] [client 20.24.198.93:52901] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aZtH_QBAZT_BJOxE-Z4-owAAAAQ"]
[Mon Feb 23 02:16:34.083475 2026] [:error] [pid 28558:tid 28562] [client 20.24.198.93:55021] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aZtIAidFHR5e1Gd10veX3wAAAMI"]
[Mon Feb 23 02:16:35.960155 2026] [:error] [pid 4806:tid 4828] [client 20.24.198.93:54218] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aZtIA_FTHI_ud-cTYbQSlgAAARQ"]
[Mon Feb 23 02:16:38.801061 2026] [:error] [pid 4806:tid 4821] [client 20.24.198.93:20727] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aZtIBvFTHI_ud-cTYbQSnwAAAQ0"]
[Mon Feb 23 02:16:41.199738 2026] [:error] [pid 28558:tid 28582] [client 20.24.198.93:28592] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.1.php"] [unique_id "aZtICSdFHR5e1Gd10veX5wAAANY"]
[Mon Feb 23 02:16:47.746206 2026] [proxy_fcgi:error] [pid 28558:tid 28574] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:47.870559 2026] [proxy_fcgi:error] [pid 28558:tid 28570] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:47.995474 2026] [proxy_fcgi:error] [pid 28558:tid 28565] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:48.263275 2026] [proxy_fcgi:error] [pid 28558:tid 28579] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:48.395991 2026] [proxy_fcgi:error] [pid 28558:tid 28575] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:48.536748 2026] [proxy_fcgi:error] [pid 28558:tid 28564] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:49.038742 2026] [proxy_fcgi:error] [pid 28558:tid 28576] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:49.163955 2026] [proxy_fcgi:error] [pid 28558:tid 28560] [client 20.24.198.93:62979] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:57.701179 2026] [proxy_fcgi:error] [pid 28425:tid 28503] [client 20.24.198.93:20811] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:57.876782 2026] [proxy_fcgi:error] [pid 28425:tid 28502] [client 20.24.198.93:20811] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:58.032409 2026] [proxy_fcgi:error] [pid 28425:tid 28501] [client 20.24.198.93:20811] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:16:58.180861 2026] [:error] [pid 28425:tid 28507] [client 20.24.198.93:20811] [client 20.24.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aZtIGjO7QIkwG1UqFGz_RAAAAE4"]
[Mon Feb 23 02:16:59.759155 2026] [:error] [pid 4806:tid 4814] [client 20.24.198.93:36313] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aZtIG_FTHI_ud-cTYbQS2QAAAQY"]
[Mon Feb 23 02:17:00.382124 2026] [:error] [pid 28426:tid 28526] [client 20.24.198.93:52271] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aZtIHGgbPVf4pO12NZnnCQAAAIU"]
[Mon Feb 23 02:17:03.124098 2026] [:error] [pid 28558:tid 28565] [client 20.24.198.93:36329] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aZtIHydFHR5e1Gd10veYCgAAAMU"]
[Mon Feb 23 02:17:04.752458 2026] [:error] [pid 28424:tid 28438] [client 20.24.198.93:52257] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aZtIIABAZT_BJOxE-Z4-zwAAAAo"]
[Mon Feb 23 02:17:05.742077 2026] [:error] [pid 28426:tid 28535] [client 20.24.198.93:43336] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aZtIIWgbPVf4pO12NZnnFAAAAI0"]
[Mon Feb 23 02:17:06.866592 2026] [:error] [pid 28424:tid 28437] [client 20.24.198.93:43358] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aZtIIgBAZT_BJOxE-Z4-1AAAAAk"]
[Mon Feb 23 02:17:07.651894 2026] [:error] [pid 28426:tid 28528] [client 20.24.198.93:63024] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aZtII2gbPVf4pO12NZnnGgAAAIY"]
[Mon Feb 23 02:17:09.598455 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:52279] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aZtIJfFTHI_ud-cTYbQS8gAAAQE"]
[Mon Feb 23 02:17:10.213447 2026] [:error] [pid 28558:tid 28583] [client 20.24.198.93:32719] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aZtIJidFHR5e1Gd10veYFgAAANc"]
[Mon Feb 23 02:17:11.132170 2026] [:error] [pid 28558:tid 28581] [client 20.24.198.93:21321] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aZtIJydFHR5e1Gd10veYFwAAANU"]
[Mon Feb 23 02:17:11.646403 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:30109] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aZtIJwBAZT_BJOxE-Z4-2wAAAAA"]
[Mon Feb 23 02:17:13.505909 2026] [:error] [pid 4806:tid 4828] [client 20.24.198.93:32752] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aZtIKfFTHI_ud-cTYbQTAAAAARQ"]
[Mon Feb 23 02:17:14.250694 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:42020] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aZtIKvFTHI_ud-cTYbQTBAAAAQE"]
[Mon Feb 23 02:17:15.059220 2026] [:error] [pid 28558:tid 28576] [client 20.24.198.93:20365] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aZtIKydFHR5e1Gd10veYHwAAANA"]
[Mon Feb 23 02:17:17.295539 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:43368] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aZtILSdFHR5e1Gd10veYIgAAANQ"]
[Mon Feb 23 02:17:18.090670 2026] [:error] [pid 28425:tid 28503] [client 20.24.198.93:21034] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aZtILjO7QIkwG1UqFGz_ewAAAEo"]
[Mon Feb 23 02:17:19.511848 2026] [:error] [pid 28558:tid 28564] [client 20.24.198.93:20862] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aZtILydFHR5e1Gd10veYJwAAAMQ"]
[Mon Feb 23 02:17:20.720019 2026] [:error] [pid 28424:tid 28436] [client 20.24.198.93:21069] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aZtIMABAZT_BJOxE-Z4-6gAAAAg"]
[Mon Feb 23 02:17:21.508903 2026] [:error] [pid 28558:tid 28572] [client 20.24.198.93:21012] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aZtIMSdFHR5e1Gd10veYLwAAAMw"]
[Mon Feb 23 02:17:27.506501 2026] [:error] [pid 28558:tid 28562] [client 20.24.198.93:36343] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aZtINydFHR5e1Gd10veYPgAAAMI"]
[Mon Feb 23 02:17:29.397173 2026] [:error] [pid 28424:tid 28446] [client 20.24.198.93:59593] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aZtIOQBAZT_BJOxE-Z4-_AAAABI"]
[Mon Feb 23 02:17:29.933164 2026] [:error] [pid 28558:tid 28572] [client 20.24.198.93:30117] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aZtIOSdFHR5e1Gd10veYQwAAAMw"]
[Mon Feb 23 02:17:30.970191 2026] [:error] [pid 28558:tid 28582] [client 20.24.198.93:59602] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aZtIOidFHR5e1Gd10veYRQAAANY"]
[Mon Feb 23 02:17:31.582018 2026] [:error] [pid 28558:tid 28577] [client 20.24.198.93:36316] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aZtIOydFHR5e1Gd10veYSAAAANE"]
[Mon Feb 23 02:17:32.405532 2026] [:error] [pid 28558:tid 28581] [client 20.24.198.93:32737] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aZtIPCdFHR5e1Gd10veYTQAAANU"]
[Mon Feb 23 02:17:33.455068 2026] [:error] [pid 4806:tid 4814] [client 20.24.198.93:36344] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aZtIPfFTHI_ud-cTYbQTSgAAAQY"]
[Mon Feb 23 02:17:34.973650 2026] [:error] [pid 28425:tid 28494] [client 20.24.198.93:59613] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aZtIPjO7QIkwG1UqFGz_vwAAAEE"]
[Mon Feb 23 02:17:36.202149 2026] [:error] [pid 4806:tid 4826] [client 20.24.198.93:62997] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aZtIQPFTHI_ud-cTYbQTUAAAARI"]
[Mon Feb 23 02:17:37.055624 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:59617] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aZtIQWgbPVf4pO12NZnnRgAAAIM"]
[Mon Feb 23 02:17:37.792087 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:21052] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aZtIQSdFHR5e1Gd10veYWwAAANQ"]
[Mon Feb 23 02:17:38.595002 2026] [:error] [pid 4806:tid 4808] [client 20.24.198.93:32720] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aZtIQvFTHI_ud-cTYbQTWgAAAQA"]
[Mon Feb 23 02:17:39.550044 2026] [:error] [pid 28558:tid 28562] [client 20.24.198.93:36331] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aZtIQydFHR5e1Gd10veYXwAAAMI"]
[Mon Feb 23 02:17:40.073980 2026] [:error] [pid 28424:tid 28437] [client 20.24.198.93:41986] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aZtIRABAZT_BJOxE-Z4_BwAAAAk"]
[Mon Feb 23 02:17:40.805122 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:32725] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aZtIRABAZT_BJOxE-Z4_CwAAAAc"]
[Mon Feb 23 02:17:41.745041 2026] [:error] [pid 28426:tid 28536] [client 20.24.198.93:20819] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aZtIRWgbPVf4pO12NZnnTAAAAI4"]
[Mon Feb 23 02:17:42.403716 2026] [:error] [pid 28424:tid 28438] [client 20.24.198.93:32761] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aZtIRgBAZT_BJOxE-Z4_DwAAAAo"]
[Mon Feb 23 02:17:43.489747 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:42042] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aZtIR2gbPVf4pO12NZnnUwAAAIM"]
[Mon Feb 23 02:17:44.462842 2026] [:error] [pid 28424:tid 28436] [client 20.24.198.93:20854] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aZtISABAZT_BJOxE-Z4_EQAAAAg"]
[Mon Feb 23 02:17:46.078470 2026] [:error] [pid 4806:tid 4827] [client 20.24.198.93:36305] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aZtISvFTHI_ud-cTYbQTcwAAARM"]
[Mon Feb 23 02:17:46.752969 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:41998] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aZtISvFTHI_ud-cTYbQTdwAAAQE"]
[Mon Feb 23 02:17:47.910473 2026] [:error] [pid 4806:tid 4825] [client 20.24.198.93:36295] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aZtIS_FTHI_ud-cTYbQTfAAAARE"]
[Mon Feb 23 02:17:48.958511 2026] [:error] [pid 28558:tid 28568] [client 20.24.198.93:54265] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aZtITCdFHR5e1Gd10veYbwAAAMg"]
[Mon Feb 23 02:17:49.527440 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:21051] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aZtITfFTHI_ud-cTYbQTgwAAAQw"]
[Mon Feb 23 02:17:50.149204 2026] [:error] [pid 28426:tid 28525] [client 20.24.198.93:59620] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "aZtITmgbPVf4pO12NZnnYAAAAIQ"]
[Mon Feb 23 02:17:50.853159 2026] [:error] [pid 4806:tid 4822] [client 20.24.198.93:52274] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtITvFTHI_ud-cTYbQThgAAAQ4"]
[Mon Feb 23 02:17:51.419112 2026] [:error] [pid 28425:tid 28503] [client 20.24.198.93:20803] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtITzO7QIkwG1UqFGz_9AAAAEo"]
[Mon Feb 23 02:17:52.558074 2026] [:error] [pid 28558:tid 28575] [client 20.24.198.93:62987] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtIUCdFHR5e1Gd10veYdQAAAM8"]
[Mon Feb 23 02:17:53.220622 2026] [:error] [pid 28425:tid 28502] [client 20.24.198.93:20801] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aZtIUTO7QIkwG1UqFGz_-QAAAEk"]
[Mon Feb 23 02:17:53.722151 2026] [:error] [pid 28558:tid 28579] [client 20.24.198.93:52269] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aZtIUSdFHR5e1Gd10veYeQAAANM"]
[Mon Feb 23 02:17:54.565545 2026] [:error] [pid 28424:tid 28437] [client 20.24.198.93:30138] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aZtIUgBAZT_BJOxE-Z4_GQAAAAk"]
[Mon Feb 23 02:17:55.341308 2026] [:error] [pid 28426:tid 28525] [client 20.24.198.93:32748] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aZtIU2gbPVf4pO12NZnnbQAAAIQ"]
[Mon Feb 23 02:17:55.917119 2026] [:error] [pid 28424:tid 28433] [client 20.24.198.93:52231] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aZtIUwBAZT_BJOxE-Z4_HgAAAAU"]
[Mon Feb 23 02:17:56.458628 2026] [:error] [pid 28558:tid 28584] [client 20.24.198.93:42023] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIVCdFHR5e1Gd10veYgAAAANg"]
[Mon Feb 23 02:17:56.992287 2026] [:error] [pid 4806:tid 4830] [client 20.24.198.93:30092] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIVPFTHI_ud-cTYbQTlQAAARY"]
[Mon Feb 23 02:17:57.457265 2026] [:error] [pid 4806:tid 4825] [client 20.24.198.93:63020] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIVfFTHI_ud-cTYbQTlgAAARE"]
[Mon Feb 23 02:17:57.889470 2026] [:error] [pid 28425:tid 28495] [client 20.24.198.93:21053] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIVTO7QIkwG1UqFGwACAAAAEI"]
[Mon Feb 23 02:17:58.424534 2026] [proxy_fcgi:error] [pid 4806:tid 4832] [client 20.24.198.93:52243] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:17:58.672258 2026] [proxy_fcgi:error] [pid 4806:tid 4808] [client 20.24.198.93:52243] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:17:59.098008 2026] [proxy_fcgi:error] [pid 4806:tid 4820] [client 20.24.198.93:52243] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:17:59.225859 2026] [proxy_fcgi:error] [pid 4806:tid 4822] [client 20.24.198.93:52243] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:17:59.475508 2026] [proxy_fcgi:error] [pid 4806:tid 4829] [client 20.24.198.93:52243] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:17:59.610082 2026] [proxy_fcgi:error] [pid 4806:tid 4825] [client 20.24.198.93:52243] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:17:59.850393 2026] [:error] [pid 4806:tid 4827] [client 20.24.198.93:52243] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aZtIV_FTHI_ud-cTYbQTqwAAARM"]
[Mon Feb 23 02:18:00.300695 2026] [:error] [pid 28425:tid 28518] [client 20.24.198.93:41990] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aZtIWDO7QIkwG1UqFGwAEAAAAFg"]
[Mon Feb 23 02:18:00.819055 2026] [:error] [pid 28558:tid 28565] [client 20.24.198.93:21038] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aZtIWCdFHR5e1Gd10veYhQAAAMU"]
[Mon Feb 23 02:18:01.494696 2026] [:error] [pid 4806:tid 4808] [client 20.24.198.93:30093] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aZtIWfFTHI_ud-cTYbQTrwAAAQA"]
[Mon Feb 23 02:18:02.073974 2026] [:error] [pid 28425:tid 28505] [client 20.24.198.93:52258] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZtIWjO7QIkwG1UqFGwAFwAAAEw"]
[Mon Feb 23 02:18:02.675542 2026] [:error] [pid 28424:tid 28430] [client 20.24.198.93:54233] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZtIWgBAZT_BJOxE-Z4_LwAAAAI"]
[Mon Feb 23 02:18:03.417878 2026] [:error] [pid 28424:tid 28450] [client 20.24.198.93:42016] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZtIWwBAZT_BJOxE-Z4_MQAAABY"]
[Mon Feb 23 02:18:03.997131 2026] [:error] [pid 28558:tid 28570] [client 20.24.198.93:63025] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZtIWydFHR5e1Gd10veYjQAAAMo"]
[Mon Feb 23 02:18:04.706658 2026] [:error] [pid 28424:tid 28445] [client 20.24.198.93:42018] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aZtIXABAZT_BJOxE-Z4_OAAAABE"]
[Mon Feb 23 02:18:05.534958 2026] [:error] [pid 28425:tid 28518] [client 20.24.198.93:20550] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aZtIXTO7QIkwG1UqFGwAIgAAAFg"]
[Mon Feb 23 02:18:06.547568 2026] [:error] [pid 28425:tid 28503] [client 20.24.198.93:20558] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aZtIXjO7QIkwG1UqFGwAJAAAAEo"]
[Mon Feb 23 02:18:07.942657 2026] [:error] [pid 28425:tid 28511] [client 20.24.198.93:21006] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aZtIXzO7QIkwG1UqFGwAKQAAAFI"]
[Mon Feb 23 02:18:08.890873 2026] [:error] [pid 28426:tid 28531] [client 20.24.198.93:36303] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aZtIYGgbPVf4pO12NZnniwAAAIk"]
[Mon Feb 23 02:18:09.472187 2026] [:error] [pid 4806:tid 4812] [client 20.24.198.93:21028] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aZtIYfFTHI_ud-cTYbQTwwAAAQQ"]
[Mon Feb 23 02:18:10.084094 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:62998] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aZtIYgBAZT_BJOxE-Z4_QAAAABg"]
[Mon Feb 23 02:18:10.610972 2026] [:error] [pid 28424:tid 28438] [client 20.24.198.93:52263] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aZtIYgBAZT_BJOxE-Z4_QQAAAAo"]
[Mon Feb 23 02:18:11.549738 2026] [:error] [pid 28425:tid 28509] [client 20.24.198.93:30107] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZtIYzO7QIkwG1UqFGwAMwAAAFA"]
[Mon Feb 23 02:18:12.264732 2026] [:error] [pid 28424:tid 28448] [client 20.24.198.93:59600] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZtIZABAZT_BJOxE-Z4_QgAAABQ"]
[Mon Feb 23 02:18:13.195417 2026] [:error] [pid 28424:tid 28436] [client 20.24.198.93:43338] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZtIZQBAZT_BJOxE-Z4_QwAAAAg"]
[Mon Feb 23 02:18:14.692787 2026] [:error] [pid 4806:tid 4812] [client 20.24.198.93:30128] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aZtIZvFTHI_ud-cTYbQT0gAAAQQ"]
[Mon Feb 23 02:18:15.384808 2026] [:error] [pid 28558:tid 28560] [client 20.24.198.93:57238] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZtIZydFHR5e1Gd10veYpgAAAMA"]
[Mon Feb 23 02:18:15.724959 2026] [:error] [pid 28425:tid 28516] [client 20.24.198.93:20840] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZtIZzO7QIkwG1UqFGwAPQAAAFc"]
[Mon Feb 23 02:18:16.944322 2026] [:error] [pid 28425:tid 28507] [client 20.24.198.93:51822] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZtIaDO7QIkwG1UqFGwAQwAAAE4"]
[Mon Feb 23 02:18:18.096752 2026] [:error] [pid 28424:tid 28437] [client 20.24.198.93:20839] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aZtIagBAZT_BJOxE-Z4_TgAAAAk"]
[Mon Feb 23 02:18:29.957930 2026] [:error] [pid 28558:tid 28567] [client 20.24.198.93:21049] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZtIdSdFHR5e1Gd10veYvwAAAMc"]
[Mon Feb 23 02:18:31.530373 2026] [:error] [pid 28424:tid 28429] [client 20.24.198.93:42006] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aZtIdwBAZT_BJOxE-Z4_bAAAAAE"]
[Mon Feb 23 02:18:34.225643 2026] [:error] [pid 28558:tid 28578] [client 20.24.198.93:63035] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aZtIeidFHR5e1Gd10veY0AAAANI"]
[Mon Feb 23 02:18:34.818682 2026] [:error] [pid 4806:tid 4814] [client 20.24.198.93:59634] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aZtIevFTHI_ud-cTYbQUBgAAAQY"]
[Mon Feb 23 02:18:39.867215 2026] [:error] [pid 28425:tid 28502] [client 20.24.198.93:32734] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aZtIfzO7QIkwG1UqFGwAoAAAAEk"]
[Mon Feb 23 02:18:40.824228 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:36335] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aZtIgGgbPVf4pO12NZnnyAAAAIM"]
[Mon Feb 23 02:18:42.562063 2026] [:error] [pid 28424:tid 28448] [client 20.24.198.93:63026] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aZtIggBAZT_BJOxE-Z4_gAAAABQ"]
[Mon Feb 23 02:18:43.084948 2026] [:error] [pid 28424:tid 28431] [client 20.24.198.93:52233] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aZtIgwBAZT_BJOxE-Z4_ggAAAAM"]
[Mon Feb 23 02:18:43.530148 2026] [:error] [pid 4806:tid 4819] [client 20.24.198.93:20563] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aZtIg_FTHI_ud-cTYbQUHwAAAQs"]
[Mon Feb 23 02:18:43.827977 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:63010] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aZtIgydFHR5e1Gd10veY2gAAANQ"]
[Mon Feb 23 02:18:44.379879 2026] [:error] [pid 28558:tid 28561] [client 20.24.198.93:32762] [client 20.24.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZtIhCdFHR5e1Gd10veY3AAAAME"]
[Mon Feb 23 02:18:45.189040 2026] [:error] [pid 28424:tid 28440] [client 20.24.198.93:52229] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aZtIhQBAZT_BJOxE-Z4_hwAAAAw"]
[Mon Feb 23 02:18:45.731614 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:59637] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aZtIhQBAZT_BJOxE-Z4_igAAAAA"]
[Mon Feb 23 02:18:46.264571 2026] [:error] [pid 28424:tid 28449] [client 20.24.198.93:20580] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aZtIhgBAZT_BJOxE-Z4_iwAAABU"]
[Mon Feb 23 02:18:47.015470 2026] [:error] [pid 28425:tid 28505] [client 20.24.198.93:59598] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsd.php"] [unique_id "aZtIhzO7QIkwG1UqFGwAvQAAAEw"]
[Mon Feb 23 02:18:47.708638 2026] [:error] [pid 28558:tid 28574] [client 20.24.198.93:30096] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aZtIhydFHR5e1Gd10veY4gAAAM4"]
[Mon Feb 23 02:18:48.728298 2026] [:error] [pid 4806:tid 4826] [client 20.24.198.93:36311] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aZtIiPFTHI_ud-cTYbQUMgAAARI"]
[Mon Feb 23 02:18:49.766842 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:20836] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aZtIiSdFHR5e1Gd10veY5wAAANQ"]
[Mon Feb 23 02:18:50.688813 2026] [:error] [pid 4806:tid 4809] [client 20.24.198.93:43332] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jane.php"] [unique_id "aZtIivFTHI_ud-cTYbQUNgAAAQE"]
[Mon Feb 23 02:18:51.663261 2026] [:error] [pid 28426:tid 28525] [client 20.24.198.93:50062] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aZtIi2gbPVf4pO12NZnn3QAAAIQ"]
[Mon Feb 23 02:18:53.180041 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:20590] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aZtIjQBAZT_BJOxE-Z4_kQAAABg"]
[Mon Feb 23 02:18:54.481384 2026] [:error] [pid 4806:tid 4823] [client 20.24.198.93:20596] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aZtIjvFTHI_ud-cTYbQUQwAAAQ8"]
[Mon Feb 23 02:18:56.517019 2026] [:error] [pid 28558:tid 28567] [client 20.24.198.93:30087] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css.php"] [unique_id "aZtIkCdFHR5e1Gd10veY9QAAAMc"]
[Mon Feb 23 02:18:59.201019 2026] [proxy_fcgi:error] [pid 28426:tid 28543] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:18:59.347023 2026] [proxy_fcgi:error] [pid 28426:tid 28544] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:18:59.495650 2026] [proxy_fcgi:error] [pid 28426:tid 28536] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:19:00.715853 2026] [proxy_fcgi:error] [pid 28426:tid 28545] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:19:00.844125 2026] [proxy_fcgi:error] [pid 28426:tid 28541] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:19:00.980194 2026] [proxy_fcgi:error] [pid 28426:tid 28523] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:19:01.589599 2026] [proxy_fcgi:error] [pid 28426:tid 28521] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:19:01.738621 2026] [proxy_fcgi:error] [pid 28426:tid 28525] [client 20.24.198.93:59589] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 02:19:01.857798 2026] [:error] [pid 28426:tid 28532] [client 20.24.198.93:59589] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZtIlWgbPVf4pO12NZnn9wAAAIo"]
[Mon Feb 23 02:19:03.901154 2026] [:error] [pid 28424:tid 28446] [client 20.24.198.93:21001] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZtIlwBAZT_BJOxE-Z4_ogAAABI"]
[Mon Feb 23 02:19:04.499080 2026] [:error] [pid 28424:tid 28429] [client 20.24.198.93:57274] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZtImABAZT_BJOxE-Z4_pAAAAAE"]
[Mon Feb 23 02:19:05.273354 2026] [:error] [pid 4806:tid 4812] [client 20.24.198.93:42063] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZtImfFTHI_ud-cTYbQUaAAAAQQ"]
[Mon Feb 23 02:19:06.451302 2026] [:error] [pid 28424:tid 28443] [client 20.24.198.93:30121] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZtImgBAZT_BJOxE-Z4_qwAAAA8"]
[Mon Feb 23 02:19:07.537153 2026] [:error] [pid 28425:tid 28496] [client 20.24.198.93:30110] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZtImzO7QIkwG1UqFGwBCAAAAEM"]
[Mon Feb 23 02:19:08.393475 2026] [:error] [pid 4806:tid 4811] [client 20.24.198.93:20821] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZtInPFTHI_ud-cTYbQUcgAAAQM"]
[Mon Feb 23 02:19:08.833153 2026] [:error] [pid 28426:tid 28532] [client 20.24.198.93:52274] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aZtInGgbPVf4pO12NZnoAgAAAIo"]
[Mon Feb 23 02:19:09.156146 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:20815] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aZtInfFTHI_ud-cTYbQUdgAAAQw"]
[Mon Feb 23 02:19:09.523567 2026] [:error] [pid 28426:tid 28543] [client 20.24.198.93:21014] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aZtInWgbPVf4pO12NZnoBAAAAJU"]
[Mon Feb 23 02:19:10.592159 2026] [:error] [pid 28426:tid 28533] [client 20.24.198.93:20826] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aZtInmgbPVf4pO12NZnoBwAAAIs"]
[Mon Feb 23 02:19:11.235731 2026] [:error] [pid 28424:tid 28444] [client 20.24.198.93:52261] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aZtInwBAZT_BJOxE-Z4_tAAAABA"]
[Mon Feb 23 02:19:11.778882 2026] [:error] [pid 4806:tid 4822] [client 20.24.198.93:43385] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZtIn_FTHI_ud-cTYbQUfQAAAQ4"]
[Mon Feb 23 02:19:12.260399 2026] [:error] [pid 28426:tid 28526] [client 20.24.198.93:42044] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZtIoGgbPVf4pO12NZnoCQAAAIU"]
[Mon Feb 23 02:19:12.859640 2026] [:error] [pid 28426:tid 28528] [client 20.24.198.93:52275] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZtIoGgbPVf4pO12NZnoDAAAAIY"]
[Mon Feb 23 02:19:13.275098 2026] [:error] [pid 4806:tid 4820] [client 20.24.198.93:30126] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aZtIofFTHI_ud-cTYbQUgwAAAQw"]
[Mon Feb 23 02:19:14.267842 2026] [:error] [pid 28558:tid 28570] [client 20.24.198.93:41993] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZtIoidFHR5e1Gd10veZGQAAAMo"]
[Mon Feb 23 02:19:14.878124 2026] [:error] [pid 28424:tid 28445] [client 20.24.198.93:21022] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZtIogBAZT_BJOxE-Z4_uAAAABE"]
[Mon Feb 23 02:19:15.292853 2026] [:error] [pid 28424:tid 28431] [client 20.24.198.93:32713] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZtIowBAZT_BJOxE-Z4_ugAAAAM"]
[Mon Feb 23 02:19:15.677762 2026] [:error] [pid 28558:tid 28581] [client 20.24.198.93:20574] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZtIoydFHR5e1Gd10veZHgAAANU"]
[Mon Feb 23 02:19:16.237967 2026] [:error] [pid 28424:tid 28436] [client 20.24.198.93:41987] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aZtIpABAZT_BJOxE-Z4_vwAAAAg"]
[Mon Feb 23 02:19:16.549645 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:63014] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aZtIpABAZT_BJOxE-Z4_wAAAABg"]
[Mon Feb 23 02:19:16.963310 2026] [:error] [pid 4806:tid 4812] [client 20.24.198.93:43344] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aZtIpPFTHI_ud-cTYbQUjgAAAQQ"]
[Mon Feb 23 02:19:17.379196 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:20863] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aZtIpQBAZT_BJOxE-Z4_wgAAAAA"]
[Mon Feb 23 02:19:18.071734 2026] [:error] [pid 28424:tid 28439] [client 20.24.198.93:20559] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aZtIpgBAZT_BJOxE-Z4_xQAAAAs"]
[Mon Feb 23 02:19:18.897989 2026] [:error] [pid 28558:tid 28583] [client 20.24.198.93:41994] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aZtIpidFHR5e1Gd10veZIwAAANc"]
[Mon Feb 23 02:19:19.584544 2026] [:error] [pid 28558:tid 28565] [client 20.24.198.93:62983] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aZtIpydFHR5e1Gd10veZJgAAAMU"]
[Mon Feb 23 02:19:20.265142 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:30090] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless11.php"] [unique_id "aZtIqABAZT_BJOxE-Z4_zgAAAAA"]
[Mon Feb 23 02:19:20.893277 2026] [:error] [pid 28558:tid 28561] [client 20.24.198.93:51838] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aZtIqCdFHR5e1Gd10veZKgAAAME"]
[Mon Feb 23 02:19:21.670030 2026] [:error] [pid 28424:tid 28429] [client 20.24.198.93:33932] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aZtIqQBAZT_BJOxE-Z4_1QAAAAE"]
[Mon Feb 23 02:19:21.964977 2026] [:error] [pid 28558:tid 28584] [client 20.24.198.93:20577] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aZtIqSdFHR5e1Gd10veZLAAAANg"]
[Mon Feb 23 02:19:22.420570 2026] [:error] [pid 4806:tid 4821] [client 20.24.198.93:57223] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aZtIqvFTHI_ud-cTYbQUnwAAAQ0"]
[Mon Feb 23 02:19:22.806398 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:21000] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZtIqgBAZT_BJOxE-Z4_2AAAABg"]
[Mon Feb 23 02:19:23.472840 2026] [:error] [pid 4806:tid 4822] [client 20.24.198.93:21013] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZtIq_FTHI_ud-cTYbQUogAAAQ4"]
[Mon Feb 23 02:19:25.038975 2026] [:error] [pid 28424:tid 28432] [client 20.24.198.93:21024] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZtIrQBAZT_BJOxE-Z4_2gAAAAQ"]
[Mon Feb 23 02:19:25.617518 2026] [:error] [pid 28424:tid 28442] [client 20.24.198.93:43879] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZtIrQBAZT_BJOxE-Z4_3QAAAA4"]
[Mon Feb 23 02:19:25.920122 2026] [:error] [pid 28426:tid 28525] [client 20.24.198.93:43331] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aZtIrWgbPVf4pO12NZnoFgAAAIQ"]
[Mon Feb 23 02:19:26.218270 2026] [:error] [pid 28424:tid 28431] [client 20.24.198.93:59626] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aZtIrgBAZT_BJOxE-Z4_3gAAAAM"]
[Mon Feb 23 02:19:26.694758 2026] [:error] [pid 28558:tid 28576] [client 20.24.198.93:33936] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aZtIridFHR5e1Gd10veZOAAAANA"]
[Mon Feb 23 02:19:27.039194 2026] [:error] [pid 28425:tid 28494] [client 20.24.198.93:62977] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aZtIrzO7QIkwG1UqFGwBRgAAAEE"]
[Mon Feb 23 02:19:27.584615 2026] [:error] [pid 28425:tid 28509] [client 20.24.198.93:32760] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aZtIrzO7QIkwG1UqFGwBSAAAAFA"]
[Mon Feb 23 02:19:28.504093 2026] [:error] [pid 28426:tid 28534] [client 20.24.198.93:42039] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aZtIsGgbPVf4pO12NZnoHgAAAIw"]
[Mon Feb 23 02:19:28.893108 2026] [:error] [pid 28425:tid 28514] [client 20.24.198.93:36314] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aZtIsDO7QIkwG1UqFGwBTwAAAFU"]
[Mon Feb 23 02:19:29.425039 2026] [:error] [pid 28425:tid 28495] [client 20.24.198.93:41992] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aZtIsTO7QIkwG1UqFGwBUwAAAEI"]
[Mon Feb 23 02:19:30.082604 2026] [:error] [pid 28426:tid 28525] [client 20.24.198.93:63022] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aZtIsmgbPVf4pO12NZnoIgAAAIQ"]
[Mon Feb 23 02:19:30.857283 2026] [:error] [pid 28426:tid 28540] [client 20.24.198.93:62976] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aZtIsmgbPVf4pO12NZnoJQAAAJI"]
[Mon Feb 23 02:19:31.585496 2026] [:error] [pid 4806:tid 4828] [client 20.24.198.93:32728] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aZtIs_FTHI_ud-cTYbQUsQAAARQ"]
[Mon Feb 23 02:19:31.976592 2026] [:error] [pid 28425:tid 28511] [client 20.24.198.93:43343] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aZtIszO7QIkwG1UqFGwBXAAAAFI"]
[Mon Feb 23 02:19:32.498563 2026] [:error] [pid 28426:tid 28545] [client 20.24.198.93:30123] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aZtItGgbPVf4pO12NZnoKgAAAJc"]
[Mon Feb 23 02:19:32.800565 2026] [:error] [pid 28425:tid 28500] [client 20.24.198.93:43335] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aZtItDO7QIkwG1UqFGwBXgAAAEc"]
[Mon Feb 23 02:19:33.713741 2026] [:error] [pid 28425:tid 28495] [client 20.24.198.93:20829] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aZtItTO7QIkwG1UqFGwBYAAAAEI"]
[Mon Feb 23 02:19:34.751695 2026] [:error] [pid 28425:tid 28506] [client 20.24.198.93:43377] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aZtItjO7QIkwG1UqFGwBYwAAAE0"]
[Mon Feb 23 02:19:35.360765 2026] [:error] [pid 4806:tid 4817] [client 20.24.198.93:32709] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aZtIt_FTHI_ud-cTYbQUuQAAAQk"]
[Mon Feb 23 02:19:35.898976 2026] [:error] [pid 28426:tid 28544] [client 20.24.198.93:20588] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aZtIt2gbPVf4pO12NZnoMQAAAJY"]
[Mon Feb 23 02:19:36.620205 2026] [:error] [pid 4806:tid 4831] [client 20.24.198.93:42041] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aZtIuPFTHI_ud-cTYbQUuwAAARc"]
[Mon Feb 23 02:19:37.116195 2026] [:error] [pid 28425:tid 28511] [client 20.24.198.93:52227] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aZtIuTO7QIkwG1UqFGwBZwAAAFI"]
[Mon Feb 23 02:19:37.540687 2026] [:error] [pid 28425:tid 28508] [client 20.24.198.93:52266] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZtIuTO7QIkwG1UqFGwBaAAAAE8"]
[Mon Feb 23 02:19:38.212460 2026] [:error] [pid 4806:tid 4818] [client 20.24.198.93:63039] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZtIuvFTHI_ud-cTYbQUwwAAAQo"]
[Mon Feb 23 02:19:39.691982 2026] [:error] [pid 4806:tid 4826] [client 20.24.198.93:42027] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZtIu_FTHI_ud-cTYbQUxwAAARI"]
[Mon Feb 23 02:19:40.438931 2026] [:error] [pid 28426:tid 28525] [client 20.24.198.93:63031] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aZtIvGgbPVf4pO12NZnoOAAAAIQ"]
[Mon Feb 23 02:19:41.927168 2026] [:error] [pid 28558:tid 28560] [client 20.24.198.93:52273] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aZtIvSdFHR5e1Gd10veZYwAAAMA"]
[Mon Feb 23 02:19:42.424323 2026] [:error] [pid 28558:tid 28580] [client 20.24.198.93:43329] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aZtIvidFHR5e1Gd10veZZgAAANQ"]
[Mon Feb 23 02:19:43.287008 2026] [:error] [pid 28558:tid 28570] [client 20.24.198.93:20564] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aZtIvydFHR5e1Gd10veZbQAAAMo"]
[Mon Feb 23 02:19:44.505265 2026] [:error] [pid 4806:tid 4812] [client 20.24.198.93:32706] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aZtIwPFTHI_ud-cTYbQU7gAAAQQ"]
[Mon Feb 23 02:19:45.187037 2026] [:error] [pid 28424:tid 28451] [client 20.24.198.93:43845] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aZtIwQBAZT_BJOxE-Z4__QAAABc"]
[Mon Feb 23 02:19:46.140652 2026] [:error] [pid 28424:tid 28431] [client 20.24.198.93:20545] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aZtIwgBAZT_BJOxE-Z4__wAAAAM"]
[Mon Feb 23 02:19:46.729016 2026] [:error] [pid 28425:tid 28506] [client 20.24.198.93:21348] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aZtIwjO7QIkwG1UqFGwBegAAAE0"]
[Mon Feb 23 02:19:47.075083 2026] [:error] [pid 28558:tid 28572] [client 20.24.198.93:30085] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aZtIwydFHR5e1Gd10veZfQAAAMw"]
[Mon Feb 23 02:19:47.530100 2026] [:error] [pid 28424:tid 28435] [client 20.24.198.93:30082] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aZtIwwBAZT_BJOxE-Z5AAgAAAAc"]
[Mon Feb 23 02:19:48.472022 2026] [:error] [pid 28424:tid 28445] [client 20.24.198.93:43845] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aZtIxABAZT_BJOxE-Z5AAwAAABE"]
[Mon Feb 23 02:19:48.827688 2026] [:error] [pid 28426:tid 28531] [client 20.24.198.93:42005] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aZtIxGgbPVf4pO12NZnoQgAAAIk"]
[Mon Feb 23 02:19:49.205200 2026] [:error] [pid 28424:tid 28439] [client 20.24.198.93:20837] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aZtIxQBAZT_BJOxE-Z5ABAAAAAs"]
[Mon Feb 23 02:19:50.148697 2026] [:error] [pid 28425:tid 28494] [client 20.24.198.93:43391] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aZtIxjO7QIkwG1UqFGwBgwAAAEE"]
[Mon Feb 23 02:19:50.737443 2026] [:error] [pid 28424:tid 28428] [client 20.24.198.93:52256] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aZtIxgBAZT_BJOxE-Z5ACAAAAAA"]
[Mon Feb 23 02:19:51.672795 2026] [:error] [pid 28426:tid 28524] [client 20.24.198.93:36292] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aZtIx2gbPVf4pO12NZnoRAAAAIM"]
[Mon Feb 23 02:19:52.037702 2026] [:error] [pid 28424:tid 28452] [client 20.24.198.93:36351] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aZtIyABAZT_BJOxE-Z5ADAAAABg"]
[Mon Feb 23 02:19:52.363224 2026] [:error] [pid 28425:tid 28515] [client 20.24.198.93:36327] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIyDO7QIkwG1UqFGwBigAAAFY"]
[Mon Feb 23 02:19:53.107049 2026] [:error] [pid 4806:tid 4827] [client 20.24.198.93:42083] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIyfFTHI_ud-cTYbQU9wAAARM"]
[Mon Feb 23 02:19:53.941139 2026] [:error] [pid 28425:tid 28500] [client 20.24.198.93:43380] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIyTO7QIkwG1UqFGwBiwAAAEc"]
[Mon Feb 23 02:19:54.484041 2026] [:error] [pid 28425:tid 28513] [client 20.24.198.93:63036] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aZtIyjO7QIkwG1UqFGwBjQAAAFQ"]
[Mon Feb 23 02:19:55.140825 2026] [:error] [pid 28558:tid 28573] [client 20.24.198.93:63008] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aZtIyydFHR5e1Gd10veZkwAAAM0"]
[Mon Feb 23 02:19:55.754777 2026] [:error] [pid 28424:tid 28431] [client 20.24.198.93:36334] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aZtIywBAZT_BJOxE-Z5AHQAAAAM"]
[Mon Feb 23 02:19:56.653633 2026] [:error] [pid 28425:tid 28516] [client 20.24.198.93:30131] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aZtIzDO7QIkwG1UqFGwBkQAAAFc"]
[Mon Feb 23 02:19:57.304591 2026] [:error] [pid 4806:tid 4831] [client 20.24.198.93:20583] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aZtIzfFTHI_ud-cTYbQVEwAAARc"]
[Mon Feb 23 02:19:57.585625 2026] [:error] [pid 4806:tid 4823] [client 20.24.198.93:20592] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aZtIzfFTHI_ud-cTYbQVFwAAAQ8"]
[Mon Feb 23 02:19:57.979704 2026] [:error] [pid 28426:tid 28540] [client 20.24.198.93:63015] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aZtIzWgbPVf4pO12NZnoUQAAAJI"]
[Mon Feb 23 02:19:58.287486 2026] [:error] [pid 4806:tid 4827] [client 20.24.198.93:32750] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aZtIzvFTHI_ud-cTYbQVGQAAARM"]
[Mon Feb 23 02:19:59.015456 2026] [:error] [pid 4806:tid 4818] [client 20.24.198.93:43372] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aZtIz_FTHI_ud-cTYbQVIwAAAQo"]
[Mon Feb 23 02:19:59.491972 2026] [:error] [pid 28425:tid 28504] [client 20.24.198.93:42031] [client 20.24.198.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZtIzzO7QIkwG1UqFGwBlgAAAEs"]
[Mon Feb 23 02:20:00.113203 2026] [:error] [pid 28425:tid 28496] [client 20.24.198.93:62993] [client 20.24.198.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aZtI0DO7QIkwG1UqFGwBmAAAAEM"]
[Mon Feb 23 02:20:01.036149 2026] [proxy_fcgi:error] [pid 28426:tid 28534] [client 20.24.198.93:20820] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 04:16:55.096244 2026] [:error] [pid 54482:tid 54507] [client 43.159.145.149:41236] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZtkNz8bYINguLe1hWc4PgAAANc"]
[Mon Feb 23 07:11:14.917321 2026] [:error] [pid 2446:tid 2511] [client 41.56.65.1:13250] [client 41.56.65.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.56.65.1, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZuNEtMqX9gYEfsYvri-eQAAAIk"]
[Mon Feb 23 07:11:14.937077 2026] [proxy_fcgi:error] [pid 2446:tid 2511] [client 41.56.65.1:13250] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 08:10:46.153512 2026] [:error] [pid 29909:tid 29929] [client 218.145.31.95:65024] [client 218.145.31.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aZubBj9oc2QzltksUk6ajwAAARI"]
[Mon Feb 23 08:10:49.695013 2026] [:error] [pid 29909:tid 29912] [client 218.145.31.95:12666] [client 218.145.31.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aZubCT9oc2QzltksUk6alQAAAQE"]
[Mon Feb 23 11:19:03.739178 2026] [:error] [pid 39538:tid 39566] [client 170.106.37.134:43908] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZvHJy4Zk8-cQOG3ZnouAgAAAZg"]
[Mon Feb 23 11:31:22.791484 2026] [:error] [pid 25294:tid 25341] [client 49.235.136.28:54268] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZvKCiRCFB3CqIo_jfaJegAAAEQ"]
[Mon Feb 23 12:51:44.466183 2026] [:error] [pid 25294:tid 25356] [client 43.153.119.119:50888] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZvc4CRCFB3CqIo_jfaV-AAAAEs"]
[Mon Feb 23 17:55:31.223820 2026] [:error] [pid 39640:tid 39692] [client 170.106.35.137:48198] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZwkE9sK--eVCgzvvufHrgAAApY"]
[Mon Feb 23 19:29:31.701817 2026] [:error] [pid 25380:tid 25398] [client 43.130.47.33:46686] [client 43.130.47.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZw6G6Krc8yFQ8fy78ooYwAAANA"]
[Tue Feb 24 00:18:16.683700 2026] [:error] [pid 25294:tid 25351] [client 43.130.37.243:42110] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZx9yCRCFB3CqIo_jfYHxgAAAEk"]
[Tue Feb 24 01:52:27.700964 2026] [:error] [pid 60063:tid 60085] [client 122.51.236.174:46106] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZyT20_6t1uQomVVdUNi-QAAARQ"]
[Tue Feb 24 01:56:02.302535 2026] [:error] [pid 29291:tid 29402] [client 43.166.136.202:49942] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZyUsj2gdpbMAXIIRb1wSAAAAI4"]
[Tue Feb 24 04:43:00.140231 2026] [:error] [pid 37538:tid 37556] [client 195.178.110.109:31498] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aZy71CynTiHZ9J0Y2nZW7wAAAAg"]
[Tue Feb 24 07:05:22.962400 2026] [:error] [pid 11672:tid 11696] [client 49.51.196.42:45022] [client 49.51.196.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZzdMva0fhnmfPYq92u_bwAAARY"]
[Tue Feb 24 07:36:22.412738 2026] [proxy_fcgi:error] [pid 41188:tid 41203] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:22.739267 2026] [proxy_fcgi:error] [pid 41188:tid 41200] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:23.051863 2026] [proxy_fcgi:error] [pid 41188:tid 41215] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:23.359316 2026] [proxy_fcgi:error] [pid 41188:tid 41199] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:23.697457 2026] [proxy_fcgi:error] [pid 41188:tid 41198] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:24.016619 2026] [proxy_fcgi:error] [pid 41188:tid 41201] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:24.400547 2026] [proxy_fcgi:error] [pid 41188:tid 41196] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:24.813000 2026] [proxy_fcgi:error] [pid 41188:tid 41205] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:25.129360 2026] [proxy_fcgi:error] [pid 41188:tid 41210] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:25.432942 2026] [proxy_fcgi:error] [pid 41188:tid 41208] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:26.081765 2026] [proxy_fcgi:error] [pid 41188:tid 41197] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:26.545879 2026] [proxy_fcgi:error] [pid 41188:tid 41203] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:26.876883 2026] [proxy_fcgi:error] [pid 41188:tid 41200] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:27.290040 2026] [proxy_fcgi:error] [pid 41188:tid 41207] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:27.670138 2026] [proxy_fcgi:error] [pid 41188:tid 41206] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:27.992135 2026] [proxy_fcgi:error] [pid 41188:tid 41215] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:28.364727 2026] [proxy_fcgi:error] [pid 41188:tid 41202] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:28.690911 2026] [proxy_fcgi:error] [pid 41188:tid 41204] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:29.007223 2026] [proxy_fcgi:error] [pid 41188:tid 41192] [client 85.203.47.219:27961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:34.820296 2026] [:error] [pid 41188:tid 41206] [client 85.203.47.219:27961] [client 85.203.47.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZzkggWRg7szIRhA0WiNOAAAAU8"]
[Tue Feb 24 07:36:37.558795 2026] [:error] [pid 37540:tid 37624] [client 85.203.47.224:28037] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZzkhSahRAUBJS8hpJWJ4gAAAJY"]
[Tue Feb 24 07:36:39.166957 2026] [proxy_fcgi:error] [pid 41188:tid 41192] [client 85.203.47.217:51405] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:40.211635 2026] [:error] [pid 41188:tid 41205] [client 85.203.47.217:51405] [client 85.203.47.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aZzkiAWRg7szIRhA0WiNQwAAAU4"]
[Tue Feb 24 07:36:42.635405 2026] [proxy_fcgi:error] [pid 37540:tid 37613] [client 85.203.47.222:20461] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:42.982731 2026] [:error] [pid 37540:tid 37605] [client 85.203.47.222:20461] [client 85.203.47.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aZzkiiahRAUBJS8hpJWJ8gAAAIM"]
[Tue Feb 24 07:36:43.910597 2026] [proxy_fcgi:error] [pid 41188:tid 41213] [client 157.97.120.8:30283] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:45.563438 2026] [:error] [pid 41188:tid 41205] [client 157.97.120.8:30283] [client 157.97.120.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZzkjQWRg7szIRhA0WiNUwAAAU4"]
[Tue Feb 24 07:36:46.964615 2026] [:error] [pid 37538:tid 37569] [client 85.203.47.34:20671] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZzkjiynTiHZ9J0Y2nZ09gAAABU"]
[Tue Feb 24 07:36:47.592607 2026] [:error] [pid 37644:tid 37652] [client 85.203.47.245:60277] [client 85.203.47.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZzkj0LaEhVDwBRydH18dgAAAMY"]
[Tue Feb 24 07:36:48.232514 2026] [:error] [pid 37538:tid 37567] [client 85.203.47.243:62529] [client 85.203.47.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZzkkCynTiHZ9J0Y2nZ09wAAABM"]
[Tue Feb 24 07:36:48.969708 2026] [:error] [pid 41188:tid 41213] [client 85.203.47.20:60265] [client 85.203.47.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZzkkAWRg7szIRhA0WiNWgAAAVY"]
[Tue Feb 24 07:36:50.156825 2026] [:error] [pid 37538:tid 37559] [client 85.203.47.34:28429] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZzkkiynTiHZ9J0Y2nZ0-gAAAAs"]
[Tue Feb 24 07:36:51.134397 2026] [:error] [pid 37538:tid 37570] [client 85.203.47.254:30157] [client 85.203.47.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZzkkyynTiHZ9J0Y2nZ0_gAAABY"]
[Tue Feb 24 07:36:51.828380 2026] [proxy_fcgi:error] [pid 41188:tid 41210] [client 157.97.120.8:42143] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:52.483890 2026] [:error] [pid 41188:tid 41203] [client 157.97.120.8:42143] [client 157.97.120.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aZzklAWRg7szIRhA0WiNYgAAAUw"]
[Tue Feb 24 07:36:53.593455 2026] [proxy_fcgi:error] [pid 41188:tid 41194] [client 85.203.47.237:63211] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:54.212920 2026] [:error] [pid 41188:tid 41195] [client 85.203.47.237:63211] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZzklgWRg7szIRhA0WiNZgAAAUQ"]
[Tue Feb 24 07:36:55.175105 2026] [:error] [pid 11672:tid 11687] [client 85.203.47.237:54457] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZzkl_a0fhnmfPYq92vH7wAAAQ0"]
[Tue Feb 24 07:36:55.852990 2026] [proxy_fcgi:error] [pid 37540:tid 37607] [client 85.203.47.21:22729] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:56.211493 2026] [:error] [pid 37540:tid 37614] [client 85.203.47.21:22729] [client 85.203.47.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZzkmCahRAUBJS8hpJWKAwAAAIw"]
[Tue Feb 24 07:36:56.821795 2026] [proxy_fcgi:error] [pid 37540:tid 37619] [client 85.203.47.36:56403] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:58.148299 2026] [proxy_fcgi:error] [pid 37540:tid 37611] [client 85.203.47.36:56403] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:36:59.071038 2026] [:error] [pid 37540:tid 37603] [client 85.203.47.36:56403] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZzkmyahRAUBJS8hpJWKFQAAAIE"]
[Tue Feb 24 07:37:01.299912 2026] [proxy_fcgi:error] [pid 41188:tid 41211] [client 85.203.47.215:39065] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:01.641328 2026] [:error] [pid 41188:tid 41201] [client 85.203.47.215:39065] [client 85.203.47.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZzknQWRg7szIRhA0WiNdgAAAUo"]
[Tue Feb 24 07:37:02.248794 2026] [proxy_fcgi:error] [pid 41188:tid 41209] [client 85.203.47.249:64685] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:02.946726 2026] [:error] [pid 41188:tid 41211] [client 85.203.47.249:64685] [client 85.203.47.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aZzkngWRg7szIRhA0WiNfgAAAVQ"]
[Tue Feb 24 07:37:03.966822 2026] [:error] [pid 37644:tid 37648] [client 157.97.120.5:63485] [client 157.97.120.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aZzkn0LaEhVDwBRydH18fwAAAMI"]
[Tue Feb 24 07:37:04.944299 2026] [proxy_fcgi:error] [pid 37644:tid 37657] [client 85.203.47.237:36759] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:05.352710 2026] [proxy_fcgi:error] [pid 37644:tid 37654] [client 85.203.47.237:36759] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:06.026636 2026] [:error] [pid 37644:tid 37666] [client 85.203.47.237:36759] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZzkokLaEhVDwBRydH18hAAAANQ"]
[Tue Feb 24 07:37:06.988719 2026] [:error] [pid 37540:tid 37604] [client 85.203.47.247:60389] [client 85.203.47.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZzkoiahRAUBJS8hpJWKKgAAAII"]
[Tue Feb 24 07:37:07.935353 2026] [:error] [pid 37540:tid 37624] [client 85.203.47.237:25213] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZzkoyahRAUBJS8hpJWKMQAAAJY"]
[Tue Feb 24 07:37:08.769667 2026] [:error] [pid 37540:tid 37626] [client 85.203.47.244:41005] [client 85.203.47.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZzkpCahRAUBJS8hpJWKNwAAAJg"]
[Tue Feb 24 07:37:11.263147 2026] [:error] [pid 11672:tid 11694] [client 85.203.47.232:65379] [client 85.203.47.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZzkp_a0fhnmfPYq92vIEwAAARQ"]
[Tue Feb 24 07:37:12.595656 2026] [proxy_fcgi:error] [pid 37540:tid 37602] [client 85.203.47.218:55751] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:13.000141 2026] [:error] [pid 37540:tid 37610] [client 85.203.47.218:55751] [client 85.203.47.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aZzkqCahRAUBJS8hpJWKWwAAAIg"]
[Tue Feb 24 07:37:13.607571 2026] [:error] [pid 37539:tid 37583] [client 85.203.47.34:63225] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aZzkqXEnr46jUQep9z_inwAAAEg"]
[Tue Feb 24 07:37:14.241358 2026] [:error] [pid 37539:tid 37589] [client 85.203.47.243:32381] [client 85.203.47.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZzkqnEnr46jUQep9z_ioAAAAE4"]
[Tue Feb 24 07:37:15.943326 2026] [proxy_fcgi:error] [pid 41188:tid 41203] [client 157.97.120.2:20391] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:16.697149 2026] [proxy_fcgi:error] [pid 41188:tid 41199] [client 157.97.120.2:20391] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:18.115737 2026] [:error] [pid 41188:tid 41214] [client 157.97.120.2:20391] [client 157.97.120.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aZzkrgWRg7szIRhA0WiNkwAAAVc"]
[Tue Feb 24 07:37:19.732105 2026] [:error] [pid 41188:tid 41199] [client 85.203.47.237:52559] [client 85.203.47.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.237, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZzkrwWRg7szIRhA0WiNngAAAUg"]
[Tue Feb 24 07:37:20.049963 2026] [proxy_fcgi:error] [pid 41188:tid 41198] [client 85.203.47.237:52559] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:21.632263 2026] [proxy_fcgi:error] [pid 41188:tid 41208] [client 85.203.47.237:52559] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:21.947709 2026] [proxy_fcgi:error] [pid 41188:tid 41202] [client 85.203.47.237:52559] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:23.620698 2026] [:error] [pid 41188:tid 41203] [client 85.203.47.237:52559] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZzkswWRg7szIRhA0WiNqgAAAUw"]
[Tue Feb 24 07:37:25.877711 2026] [proxy_fcgi:error] [pid 37644:tid 37660] [client 85.203.47.230:49953] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:26.176418 2026] [:error] [pid 37644:tid 37655] [client 85.203.47.230:49953] [client 85.203.47.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.230, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZzktkLaEhVDwBRydH18ngAAAMk"]
[Tue Feb 24 07:37:26.794054 2026] [:error] [pid 37644:tid 37649] [client 85.203.47.230:49953] [client 85.203.47.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aZzktkLaEhVDwBRydH18pAAAAMM"]
[Tue Feb 24 07:37:29.975924 2026] [proxy_fcgi:error] [pid 41188:tid 41196] [client 157.97.120.3:22429] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:30.644978 2026] [proxy_fcgi:error] [pid 41188:tid 41195] [client 157.97.120.3:22429] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:31.334169 2026] [:error] [pid 41188:tid 41200] [client 157.97.120.3:22429] [client 157.97.120.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZzkuwWRg7szIRhA0WiNvgAAAUk"]
[Tue Feb 24 07:37:33.042810 2026] [proxy_fcgi:error] [pid 37538:tid 37553] [client 85.203.47.20:35153] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:34.100268 2026] [proxy_fcgi:error] [pid 37538:tid 37549] [client 85.203.47.20:35153] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:34.755813 2026] [proxy_fcgi:error] [pid 37538:tid 37554] [client 85.203.47.20:35153] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:35.399000 2026] [proxy_fcgi:error] [pid 37538:tid 37561] [client 85.203.47.20:35153] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:35.694891 2026] [:error] [pid 37538:tid 37548] [client 85.203.47.20:35153] [client 85.203.47.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZzkvyynTiHZ9J0Y2nZ1GwAAAAA"]
[Tue Feb 24 07:37:37.410470 2026] [proxy_fcgi:error] [pid 41188:tid 41209] [client 85.203.47.234:60651] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:37.725977 2026] [proxy_fcgi:error] [pid 41188:tid 41197] [client 85.203.47.234:60651] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:38.031498 2026] [:error] [pid 41188:tid 41192] [client 85.203.47.234:60651] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZzkwgWRg7szIRhA0WiNyQAAAUE"]
[Tue Feb 24 07:37:40.208032 2026] [proxy_fcgi:error] [pid 37540:tid 37617] [client 85.203.47.250:60151] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:40.931204 2026] [:error] [pid 37540:tid 37615] [client 85.203.47.250:60151] [client 85.203.47.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.250, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aZzkxCahRAUBJS8hpJWKmgAAAI0"]
[Tue Feb 24 07:37:41.299181 2026] [:error] [pid 37540:tid 37626] [client 85.203.47.250:60151] [client 85.203.47.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZzkxSahRAUBJS8hpJWKnwAAAJg"]
[Tue Feb 24 07:37:45.262922 2026] [proxy_fcgi:error] [pid 37644:tid 37653] [client 85.203.47.240:42669] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:46.656233 2026] [proxy_fcgi:error] [pid 37644:tid 37668] [client 85.203.47.240:42669] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:47.365074 2026] [proxy_fcgi:error] [pid 37644:tid 37662] [client 85.203.47.240:42669] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:47.737323 2026] [:error] [pid 37644:tid 37656] [client 85.203.47.240:42669] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZzky0LaEhVDwBRydH18xwAAAMo"]
[Tue Feb 24 07:37:49.516924 2026] [proxy_fcgi:error] [pid 11672:tid 11680] [client 85.203.47.241:61365] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:50.480253 2026] [:error] [pid 11672:tid 11679] [client 85.203.47.241:61365] [client 85.203.47.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.241, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZzkzva0fhnmfPYq92vILgAAAQU"]
[Tue Feb 24 07:37:50.787892 2026] [proxy_fcgi:error] [pid 11672:tid 11683] [client 85.203.47.241:61365] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:51.102354 2026] [proxy_fcgi:error] [pid 11672:tid 11682] [client 85.203.47.241:61365] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:51.457128 2026] [proxy_fcgi:error] [pid 11672:tid 11698] [client 85.203.47.241:61365] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:51.876516 2026] [:error] [pid 11672:tid 11681] [client 85.203.47.241:61365] [client 85.203.47.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aZzkz_a0fhnmfPYq92vIMwAAAQc"]
[Tue Feb 24 07:37:52.563033 2026] [proxy_fcgi:error] [pid 37644:tid 37651] [client 85.203.47.210:28509] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:52.925986 2026] [:error] [pid 37644:tid 37667] [client 85.203.47.210:28509] [client 85.203.47.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aZzk0ELaEhVDwBRydH180wAAANU"]
[Tue Feb 24 07:37:54.229812 2026] [proxy_fcgi:error] [pid 37644:tid 37648] [client 85.203.47.238:53805] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:54.577957 2026] [:error] [pid 37644:tid 37654] [client 85.203.47.238:53805] [client 85.203.47.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZzk0kLaEhVDwBRydH182wAAAMg"]
[Tue Feb 24 07:37:55.880186 2026] [proxy_fcgi:error] [pid 11672:tid 11684] [client 85.203.47.225:49377] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:56.296226 2026] [:error] [pid 11672:tid 11686] [client 85.203.47.225:49377] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZzk1Pa0fhnmfPYq92vIOgAAAQw"]
[Tue Feb 24 07:37:57.040657 2026] [:error] [pid 37538:tid 37555] [client 157.97.120.7:59347] [client 157.97.120.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZzk1SynTiHZ9J0Y2nZ1JQAAAAc"]
[Tue Feb 24 07:37:57.704804 2026] [proxy_fcgi:error] [pid 37538:tid 37556] [client 85.203.47.251:32987] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:58.020369 2026] [proxy_fcgi:error] [pid 37538:tid 37569] [client 85.203.47.251:32987] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:37:59.333682 2026] [:error] [pid 37538:tid 37553] [client 85.203.47.251:32987] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZzk1yynTiHZ9J0Y2nZ1LwAAAAU"]
[Tue Feb 24 07:38:00.284832 2026] [:error] [pid 37540:tid 37615] [client 85.203.47.230:43903] [client 85.203.47.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZzk2CahRAUBJS8hpJWKywAAAI0"]
[Tue Feb 24 07:38:00.946098 2026] [proxy_fcgi:error] [pid 37538:tid 37557] [client 85.203.47.236:62603] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:01.957672 2026] [:error] [pid 37538:tid 37565] [client 85.203.47.236:62603] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aZzk2SynTiHZ9J0Y2nZ1NQAAABE"]
[Tue Feb 24 07:38:02.631447 2026] [proxy_fcgi:error] [pid 11672:tid 11685] [client 85.203.47.217:50153] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:03.284275 2026] [proxy_fcgi:error] [pid 11672:tid 11688] [client 85.203.47.217:50153] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:03.633480 2026] [:error] [pid 11672:tid 11675] [client 85.203.47.217:50153] [client 85.203.47.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZzk2_a0fhnmfPYq92vISAAAAQE"]
[Tue Feb 24 07:38:04.336102 2026] [proxy_fcgi:error] [pid 37538:tid 37569] [client 85.203.47.253:54099] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:04.965210 2026] [:error] [pid 37538:tid 37572] [client 85.203.47.253:54099] [client 85.203.47.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aZzk3CynTiHZ9J0Y2nZ1OwAAABg"]
[Tue Feb 24 07:38:05.602725 2026] [proxy_fcgi:error] [pid 37540:tid 37624] [client 157.97.120.2:20467] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:06.566101 2026] [:error] [pid 37540:tid 37613] [client 157.97.120.2:20467] [client 157.97.120.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZzk3iahRAUBJS8hpJWK0gAAAIs"]
[Tue Feb 24 07:38:07.544308 2026] [proxy_fcgi:error] [pid 11672:tid 11696] [client 85.203.47.251:55195] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:08.447462 2026] [proxy_fcgi:error] [pid 11672:tid 11678] [client 85.203.47.251:55195] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:08.787784 2026] [proxy_fcgi:error] [pid 11672:tid 11674] [client 85.203.47.251:55195] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:10.568731 2026] [proxy_fcgi:error] [pid 11672:tid 11679] [client 85.203.47.251:55195] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:10.905341 2026] [:error] [pid 11672:tid 11675] [client 85.203.47.251:55195] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZzk4va0fhnmfPYq92vIdQAAAQE"]
[Tue Feb 24 07:38:11.629746 2026] [:error] [pid 11672:tid 11680] [client 85.203.47.240:24025] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aZzk4_a0fhnmfPYq92vIiQAAAQY"]
[Tue Feb 24 07:38:12.313861 2026] [:error] [pid 37540:tid 37602] [client 85.203.47.244:21823] [client 85.203.47.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZzk5CahRAUBJS8hpJWK1gAAAIA"]
[Tue Feb 24 07:38:12.939201 2026] [:error] [pid 37538:tid 37561] [client 157.97.120.8:46075] [client 157.97.120.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZzk5CynTiHZ9J0Y2nZ1WgAAAA0"]
[Tue Feb 24 07:38:13.624085 2026] [proxy_fcgi:error] [pid 41188:tid 41192] [client 85.203.47.35:51777] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:13.960204 2026] [:error] [pid 41188:tid 41194] [client 85.203.47.35:51777] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZzk5QWRg7szIRhA0WiN7QAAAUM"]
[Tue Feb 24 07:38:15.658832 2026] [:error] [pid 37540:tid 37606] [client 85.203.47.222:27155] [client 85.203.47.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aZzk5yahRAUBJS8hpJWK5QAAAIQ"]
[Tue Feb 24 07:38:17.367502 2026] [proxy_fcgi:error] [pid 37539:tid 37589] [client 85.203.47.230:25775] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:17.999935 2026] [:error] [pid 37539:tid 37580] [client 85.203.47.230:25775] [client 85.203.47.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aZzk6XEnr46jUQep9z_izwAAAEU"]
[Tue Feb 24 07:38:19.765863 2026] [:error] [pid 37539:tid 37597] [client 157.97.120.3:33569] [client 157.97.120.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZzk63Enr46jUQep9z_i0AAAAFY"]
[Tue Feb 24 07:38:20.420923 2026] [:error] [pid 37644:tid 37653] [client 85.203.47.225:35805] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZzk7ELaEhVDwBRydH19DgAAAMc"]
[Tue Feb 24 07:38:21.148457 2026] [:error] [pid 41188:tid 41204] [client 85.203.47.252:46737] [client 85.203.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZzk7QWRg7szIRhA0WiN_wAAAU0"]
[Tue Feb 24 07:38:22.121955 2026] [:error] [pid 41188:tid 41192] [client 85.203.47.224:21503] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZzk7gWRg7szIRhA0WiOBAAAAUE"]
[Tue Feb 24 07:38:23.388011 2026] [:error] [pid 37540:tid 37604] [client 157.97.120.4:37107] [client 157.97.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZzk7yahRAUBJS8hpJWK-gAAAII"]
[Tue Feb 24 07:38:24.037362 2026] [proxy_fcgi:error] [pid 37644:tid 37648] [client 85.203.47.238:45733] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:25.125274 2026] [proxy_fcgi:error] [pid 37644:tid 37652] [client 85.203.47.238:45733] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:25.494636 2026] [:error] [pid 37644:tid 37665] [client 85.203.47.238:45733] [client 85.203.47.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZzk8ULaEhVDwBRydH19HAAAANM"]
[Tue Feb 24 07:38:26.579928 2026] [proxy_fcgi:error] [pid 37539:tid 37596] [client 85.203.47.236:53941] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:26.902294 2026] [proxy_fcgi:error] [pid 37539:tid 37587] [client 85.203.47.236:53941] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:28.330220 2026] [proxy_fcgi:error] [pid 37539:tid 37581] [client 85.203.47.236:53941] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:28.666473 2026] [:error] [pid 37539:tid 37588] [client 85.203.47.236:53941] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aZzk9HEnr46jUQep9z_i2wAAAE0"]
[Tue Feb 24 07:38:29.284930 2026] [proxy_fcgi:error] [pid 11672:tid 11676] [client 85.203.47.248:62345] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:30.308608 2026] [:error] [pid 11672:tid 11683] [client 85.203.47.248:62345] [client 85.203.47.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZzk9va0fhnmfPYq92vIowAAAQk"]
[Tue Feb 24 07:38:32.053805 2026] [:error] [pid 41188:tid 41193] [client 85.203.47.35:57269] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZzk-AWRg7szIRhA0WiOEQAAAUI"]
[Tue Feb 24 07:38:34.072889 2026] [:error] [pid 41188:tid 41194] [client 85.203.47.243:26637] [client 85.203.47.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZzk-gWRg7szIRhA0WiOHwAAAUM"]
[Tue Feb 24 07:38:35.424125 2026] [proxy_fcgi:error] [pid 37540:tid 37603] [client 85.203.47.233:62179] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:35.791054 2026] [proxy_fcgi:error] [pid 37540:tid 37614] [client 85.203.47.233:62179] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:36.158149 2026] [proxy_fcgi:error] [pid 37540:tid 37604] [client 85.203.47.233:62179] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:36.468813 2026] [proxy_fcgi:error] [pid 37540:tid 37621] [client 85.203.47.233:62179] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:39.502588 2026] [:error] [pid 37540:tid 37603] [client 85.203.47.233:62179] [client 85.203.47.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZzk_yahRAUBJS8hpJWLIAAAAIE"]
[Tue Feb 24 07:38:40.261401 2026] [:error] [pid 37644:tid 37652] [client 85.203.47.225:46341] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZzlAELaEhVDwBRydH19MQAAAMY"]
[Tue Feb 24 07:38:40.908940 2026] [:error] [pid 41188:tid 41199] [client 85.203.47.235:53251] [client 85.203.47.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZzlAAWRg7szIRhA0WiOIgAAAUg"]
[Tue Feb 24 07:38:41.571865 2026] [:error] [pid 37644:tid 37646] [client 157.97.120.6:47155] [client 157.97.120.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZzlAULaEhVDwBRydH19MgAAAMA"]
[Tue Feb 24 07:38:43.324845 2026] [:error] [pid 37540:tid 37624] [client 85.203.47.231:64847] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZzlAyahRAUBJS8hpJWLKAAAAJY"]
[Tue Feb 24 07:38:43.924734 2026] [:error] [pid 11672:tid 11689] [client 85.203.47.34:35121] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZzlA_a0fhnmfPYq92vIrwAAAQ8"]
[Tue Feb 24 07:38:44.816532 2026] [:error] [pid 37644:tid 37647] [client 85.203.47.235:48647] [client 85.203.47.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZzlBELaEhVDwBRydH19NwAAAME"]
[Tue Feb 24 07:38:45.424048 2026] [:error] [pid 37539:tid 37577] [client 85.203.47.36:64243] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZzlBXEnr46jUQep9z_i6QAAAEI"]
[Tue Feb 24 07:38:46.023879 2026] [:error] [pid 37539:tid 37595] [client 85.203.47.235:44539] [client 85.203.47.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZzlBnEnr46jUQep9z_i7QAAAFQ"]
[Tue Feb 24 07:38:47.637101 2026] [:error] [pid 11672:tid 11684] [client 157.97.120.4:23959] [client 157.97.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZzlB_a0fhnmfPYq92vIswAAAQo"]
[Tue Feb 24 07:38:48.880927 2026] [:error] [pid 37538:tid 37571] [client 85.203.47.225:56107] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZzlCCynTiHZ9J0Y2nZ1cgAAABc"]
[Tue Feb 24 07:38:49.796204 2026] [:error] [pid 37644:tid 37650] [client 85.203.47.253:34321] [client 85.203.47.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZzlCULaEhVDwBRydH19RQAAAMQ"]
[Tue Feb 24 07:38:50.438215 2026] [proxy_fcgi:error] [pid 11672:tid 11682] [client 85.203.47.231:41587] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:51.064636 2026] [:error] [pid 11672:tid 11681] [client 85.203.47.231:41587] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZzlC_a0fhnmfPYq92vIuwAAAQc"]
[Tue Feb 24 07:38:53.342098 2026] [:error] [pid 37644:tid 37665] [client 85.203.47.220:51177] [client 85.203.47.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aZzlDULaEhVDwBRydH19XAAAANM"]
[Tue Feb 24 07:38:53.954181 2026] [proxy_fcgi:error] [pid 37540:tid 37607] [client 85.203.47.220:55175] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:54.575326 2026] [proxy_fcgi:error] [pid 37540:tid 37626] [client 85.203.47.220:55175] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:55.006376 2026] [:error] [pid 37540:tid 37611] [client 85.203.47.220:55175] [client 85.203.47.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZzlDyahRAUBJS8hpJWLOgAAAIk"]
[Tue Feb 24 07:38:56.093896 2026] [proxy_fcgi:error] [pid 41188:tid 41211] [client 157.97.120.4:57961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:56.524625 2026] [proxy_fcgi:error] [pid 41188:tid 41203] [client 157.97.120.4:57961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:56.847220 2026] [proxy_fcgi:error] [pid 41188:tid 41200] [client 157.97.120.4:57961] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:57.209235 2026] [:error] [pid 41188:tid 41213] [client 157.97.120.4:57961] [client 157.97.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZzlEQWRg7szIRhA0WiOMgAAAVY"]
[Tue Feb 24 07:38:58.945694 2026] [proxy_fcgi:error] [pid 37539:tid 37598] [client 157.97.120.8:61703] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:38:59.255497 2026] [:error] [pid 37539:tid 37589] [client 157.97.120.8:61703] [client 157.97.120.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aZzlE3Enr46jUQep9z_i9wAAAE4"]
[Tue Feb 24 07:39:01.735904 2026] [proxy_fcgi:error] [pid 37540:tid 37620] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:02.111344 2026] [proxy_fcgi:error] [pid 37540:tid 37611] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:02.453651 2026] [proxy_fcgi:error] [pid 37540:tid 37625] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:03.191450 2026] [proxy_fcgi:error] [pid 37540:tid 37608] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:04.218516 2026] [proxy_fcgi:error] [pid 37540:tid 37620] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:04.562615 2026] [proxy_fcgi:error] [pid 37540:tid 37618] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:04.922068 2026] [proxy_fcgi:error] [pid 37540:tid 37625] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:05.345867 2026] [proxy_fcgi:error] [pid 37540:tid 37607] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:06.315852 2026] [proxy_fcgi:error] [pid 37540:tid 37606] [client 85.203.47.240:54205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:06.648100 2026] [:error] [pid 37540:tid 37614] [client 85.203.47.240:54205] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZzlGiahRAUBJS8hpJWLkwAAAIw"]
[Tue Feb 24 07:39:07.300007 2026] [:error] [pid 37538:tid 37560] [client 85.203.47.231:54557] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZzlGyynTiHZ9J0Y2nZ1eQAAAAw"]
[Tue Feb 24 07:39:07.910681 2026] [:error] [pid 11672:tid 11675] [client 85.203.47.217:48209] [client 85.203.47.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.217, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aZzlG_a0fhnmfPYq92vIxAAAAQE"]
[Tue Feb 24 07:39:07.914589 2026] [proxy_fcgi:error] [pid 11672:tid 11675] [client 85.203.47.217:48209] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:08.524671 2026] [proxy_fcgi:error] [pid 11672:tid 11693] [client 85.203.47.217:48209] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:08.826503 2026] [:error] [pid 11672:tid 11681] [client 85.203.47.217:48209] [client 85.203.47.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZzlHPa0fhnmfPYq92vIxgAAAQc"]
[Tue Feb 24 07:39:09.746320 2026] [proxy_fcgi:error] [pid 41188:tid 41192] [client 85.203.47.238:51735] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:10.070078 2026] [:error] [pid 41188:tid 41206] [client 85.203.47.238:51735] [client 85.203.47.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZzlHgWRg7szIRhA0WiOPAAAAU8"]
[Tue Feb 24 07:39:10.748636 2026] [:error] [pid 37644:tid 37658] [client 85.203.47.20:26981] [client 85.203.47.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZzlHkLaEhVDwBRydH19cQAAAMw"]
[Tue Feb 24 07:39:14.035203 2026] [:error] [pid 37540:tid 37622] [client 85.203.47.231:38479] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZzlIiahRAUBJS8hpJWLpgAAAJQ"]
[Tue Feb 24 07:39:14.805146 2026] [:error] [pid 37644:tid 37665] [client 85.203.47.36:23509] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aZzlIkLaEhVDwBRydH19dgAAANM"]
[Tue Feb 24 07:39:16.522144 2026] [proxy_fcgi:error] [pid 37644:tid 37660] [client 85.203.47.22:34061] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:17.171039 2026] [:error] [pid 37644:tid 37654] [client 85.203.47.22:34061] [client 85.203.47.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZzlJULaEhVDwBRydH19hgAAAMg"]
[Tue Feb 24 07:39:18.420569 2026] [proxy_fcgi:error] [pid 11672:tid 11675] [client 85.203.47.218:36091] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:19.133119 2026] [:error] [pid 11672:tid 11693] [client 85.203.47.218:36091] [client 85.203.47.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "aZzlJ_a0fhnmfPYq92vI0wAAARM"]
[Tue Feb 24 07:39:20.783250 2026] [:error] [pid 37538:tid 37555] [client 157.97.120.4:49353] [client 157.97.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugins.php"] [unique_id "aZzlKCynTiHZ9J0Y2nZ1fgAAAAc"]
[Tue Feb 24 07:39:22.053049 2026] [proxy_fcgi:error] [pid 37644:tid 37669] [client 85.203.47.233:33205] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:22.430753 2026] [:error] [pid 37644:tid 37659] [client 85.203.47.233:33205] [client 85.203.47.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZzlKkLaEhVDwBRydH19lAAAAM0"]
[Tue Feb 24 07:39:23.072224 2026] [:error] [pid 37644:tid 37654] [client 85.203.47.240:47725] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZzlK0LaEhVDwBRydH19lQAAAMg"]
[Tue Feb 24 07:39:24.413933 2026] [proxy_fcgi:error] [pid 41188:tid 41205] [client 85.203.47.243:40987] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:24.721578 2026] [proxy_fcgi:error] [pid 41188:tid 41209] [client 85.203.47.243:40987] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:25.433278 2026] [proxy_fcgi:error] [pid 41188:tid 41212] [client 85.203.47.243:40987] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:26.114754 2026] [:error] [pid 41188:tid 41196] [client 85.203.47.243:40987] [client 85.203.47.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aZzlLgWRg7szIRhA0WiOUwAAAUU"]
[Tue Feb 24 07:39:26.830911 2026] [:error] [pid 37539:tid 37577] [client 85.203.47.34:38945] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZzlLnEnr46jUQep9z_jBAAAAEI"]
[Tue Feb 24 07:39:28.541728 2026] [proxy_fcgi:error] [pid 37540:tid 37618] [client 157.97.120.5:50327] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:28.904752 2026] [proxy_fcgi:error] [pid 37540:tid 37625] [client 157.97.120.5:50327] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:29.507849 2026] [proxy_fcgi:error] [pid 37540:tid 37613] [client 157.97.120.5:50327] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:29.815501 2026] [:error] [pid 37540:tid 37618] [client 157.97.120.5:50327] [client 157.97.120.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "aZzlMSahRAUBJS8hpJWLxAAAAJA"]
[Tue Feb 24 07:39:30.503843 2026] [:error] [pid 37538:tid 37549] [client 85.203.47.240:23049] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZzlMiynTiHZ9J0Y2nZ1iAAAAAE"]
[Tue Feb 24 07:39:32.228969 2026] [:error] [pid 37540:tid 37608] [client 85.203.47.211:63623] [client 85.203.47.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZzlNCahRAUBJS8hpJWL0QAAAIY"]
[Tue Feb 24 07:39:34.359605 2026] [proxy_fcgi:error] [pid 37538:tid 37553] [client 85.203.47.224:55829] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:34.665972 2026] [:error] [pid 37538:tid 37551] [client 85.203.47.224:55829] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZzlNiynTiHZ9J0Y2nZ1jwAAAAM"]
[Tue Feb 24 07:39:36.677881 2026] [:error] [pid 37540:tid 37606] [client 85.203.47.231:51193] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZzlOCahRAUBJS8hpJWL3wAAAIQ"]
[Tue Feb 24 07:39:37.323580 2026] [proxy_fcgi:error] [pid 37540:tid 37604] [client 85.203.47.247:30955] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:37.636445 2026] [proxy_fcgi:error] [pid 37540:tid 37624] [client 85.203.47.247:30955] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:38.374163 2026] [proxy_fcgi:error] [pid 37540:tid 37621] [client 85.203.47.247:30955] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:39.893424 2026] [:error] [pid 37540:tid 37623] [client 85.203.47.247:30955] [client 85.203.47.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.247, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/js/wp-login.php"] [unique_id "aZzlOyahRAUBJS8hpJWL7wAAAJU"]
[Tue Feb 24 07:39:40.567114 2026] [:error] [pid 37540:tid 37617] [client 85.203.47.247:30955] File does not exist: /home/measureyourbrand/public_html/measureyourbrand.com/worm.PhP
[Tue Feb 24 07:39:41.015019 2026] [proxy_fcgi:error] [pid 37540:tid 37626] [client 85.203.47.247:30955] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:41.332074 2026] [proxy_fcgi:error] [pid 37540:tid 37624] [client 85.203.47.247:30955] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:42.048497 2026] [:error] [pid 37540:tid 37612] [client 85.203.47.247:30955] [client 85.203.47.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aZzlPiahRAUBJS8hpJWL-AAAAIo"]
[Tue Feb 24 07:39:42.766510 2026] [:error] [pid 41188:tid 41197] [client 85.203.47.253:23003] [client 85.203.47.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.253, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZzlPgWRg7szIRhA0WiOZQAAAUY"]
[Tue Feb 24 07:39:43.817629 2026] [proxy_fcgi:error] [pid 41188:tid 41191] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:44.162892 2026] [proxy_fcgi:error] [pid 41188:tid 41214] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:44.867258 2026] [proxy_fcgi:error] [pid 41188:tid 41212] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:45.572239 2026] [proxy_fcgi:error] [pid 41188:tid 41201] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:46.642461 2026] [proxy_fcgi:error] [pid 41188:tid 41210] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:49.103206 2026] [proxy_fcgi:error] [pid 41188:tid 41200] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:49.446094 2026] [proxy_fcgi:error] [pid 41188:tid 41211] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:51.101947 2026] [proxy_fcgi:error] [pid 41188:tid 41201] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:51.411398 2026] [proxy_fcgi:error] [pid 41188:tid 41204] [client 85.203.47.253:23003] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:51.718409 2026] [:error] [pid 41188:tid 41213] [client 85.203.47.253:23003] [client 85.203.47.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aZzlRwWRg7szIRhA0WiOhAAAAVY"]
[Tue Feb 24 07:39:54.168932 2026] [proxy_fcgi:error] [pid 37540:tid 37603] [client 85.203.47.217:65009] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:54.709559 2026] [proxy_fcgi:error] [pid 37540:tid 37612] [client 85.203.47.217:65009] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:55.122367 2026] [:error] [pid 37540:tid 37626] [client 85.203.47.217:65009] [client 85.203.47.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZzlSyahRAUBJS8hpJWMKgAAAJg"]
[Tue Feb 24 07:39:56.210796 2026] [proxy_fcgi:error] [pid 41188:tid 41192] [client 85.203.47.224:30831] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:39:56.572556 2026] [:error] [pid 41188:tid 41205] [client 85.203.47.224:30831] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZzlTAWRg7szIRhA0WiOngAAAU4"]
[Tue Feb 24 07:40:00.060685 2026] [proxy_fcgi:error] [pid 37538:tid 37550] [client 85.203.47.222:20045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:00.678318 2026] [proxy_fcgi:error] [pid 37538:tid 37566] [client 85.203.47.222:20045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:01.365402 2026] [proxy_fcgi:error] [pid 37538:tid 37565] [client 85.203.47.222:20045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:02.844055 2026] [proxy_fcgi:error] [pid 37538:tid 37565] [client 85.203.47.222:20045] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:03.528804 2026] [:error] [pid 37538:tid 37570] [client 85.203.47.222:20045] [client 85.203.47.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZzlUyynTiHZ9J0Y2nZ1qwAAABY"]
[Tue Feb 24 07:40:05.239988 2026] [proxy_fcgi:error] [pid 37540:tid 37622] [client 85.203.47.219:49475] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:05.578992 2026] [proxy_fcgi:error] [pid 37540:tid 37610] [client 85.203.47.219:49475] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:05.899544 2026] [:error] [pid 37540:tid 37624] [client 85.203.47.219:49475] [client 85.203.47.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZzlVSahRAUBJS8hpJWMSQAAAJY"]
[Tue Feb 24 07:40:06.826954 2026] [:error] [pid 11672:tid 11676] [client 85.203.47.249:42421] [client 85.203.47.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZzlVva0fhnmfPYq92vI9QAAAQI"]
[Tue Feb 24 07:40:07.895039 2026] [proxy_fcgi:error] [pid 41188:tid 41206] [client 85.203.47.245:25277] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:08.943021 2026] [proxy_fcgi:error] [pid 41188:tid 41197] [client 85.203.47.245:25277] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:09.255042 2026] [proxy_fcgi:error] [pid 41188:tid 41191] [client 85.203.47.245:25277] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:09.596439 2026] [:error] [pid 41188:tid 41198] [client 85.203.47.245:25277] [client 85.203.47.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZzlWQWRg7szIRhA0WiOwwAAAUc"]
[Tue Feb 24 07:40:10.210730 2026] [:error] [pid 41188:tid 41204] [client 85.203.47.252:48885] [client 85.203.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZzlWgWRg7szIRhA0WiOxwAAAU0"]
[Tue Feb 24 07:40:13.653465 2026] [proxy_fcgi:error] [pid 37540:tid 37619] [client 85.203.47.234:30549] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:14.270830 2026] [:error] [pid 37540:tid 37608] [client 85.203.47.234:30549] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aZzlXiahRAUBJS8hpJWMXwAAAIY"]
[Tue Feb 24 07:40:16.274485 2026] [:error] [pid 41188:tid 41208] [client 85.203.47.223:42909] [client 85.203.47.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aZzlYAWRg7szIRhA0WiO9gAAAVE"]
[Tue Feb 24 07:40:17.241290 2026] [proxy_fcgi:error] [pid 37540:tid 37620] [client 85.203.47.22:62099] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:17.560806 2026] [proxy_fcgi:error] [pid 37540:tid 37616] [client 85.203.47.22:62099] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:17.880481 2026] [:error] [pid 37540:tid 37603] [client 85.203.47.22:62099] [client 85.203.47.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZzlYSahRAUBJS8hpJWMbAAAAIE"]
[Tue Feb 24 07:40:18.959998 2026] [proxy_fcgi:error] [pid 37539:tid 37578] [client 85.203.47.220:39243] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:19.329859 2026] [proxy_fcgi:error] [pid 37539:tid 37593] [client 85.203.47.220:39243] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:20.012747 2026] [proxy_fcgi:error] [pid 37539:tid 37585] [client 85.203.47.220:39243] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:20.951989 2026] [:error] [pid 37539:tid 37590] [client 85.203.47.220:39243] [client 85.203.47.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aZzlZHEnr46jUQep9z_jNAAAAE8"]
[Tue Feb 24 07:40:21.774291 2026] [proxy_fcgi:error] [pid 37539:tid 37584] [client 85.203.47.211:55545] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:22.745752 2026] [:error] [pid 37539:tid 37599] [client 85.203.47.211:55545] [client 85.203.47.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aZzlZnEnr46jUQep9z_jOwAAAFg"]
[Tue Feb 24 07:40:23.817256 2026] [proxy_fcgi:error] [pid 37540:tid 37606] [client 85.203.47.233:55059] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:24.856863 2026] [proxy_fcgi:error] [pid 37540:tid 37618] [client 85.203.47.233:55059] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:25.201858 2026] [proxy_fcgi:error] [pid 37540:tid 37623] [client 85.203.47.233:55059] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:25.812763 2026] [:error] [pid 37540:tid 37621] [client 85.203.47.233:55059] [client 85.203.47.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.233, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aZzlaSahRAUBJS8hpJWMhAAAAJM"]
[Tue Feb 24 07:40:26.477122 2026] [proxy_fcgi:error] [pid 37540:tid 37616] [client 85.203.47.233:55059] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:27.574632 2026] [:error] [pid 37540:tid 37622] [client 85.203.47.233:55059] [client 85.203.47.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aZzlayahRAUBJS8hpJWMiwAAAJQ"]
[Tue Feb 24 07:40:28.289827 2026] [proxy_fcgi:error] [pid 37540:tid 37617] [client 157.97.120.6:27771] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:28.602226 2026] [:error] [pid 37540:tid 37602] [client 157.97.120.6:27771] [client 157.97.120.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZzlbCahRAUBJS8hpJWMjQAAAIA"]
[Tue Feb 24 07:40:29.222398 2026] [proxy_fcgi:error] [pid 41188:tid 41191] [client 85.203.47.244:58225] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:29.942900 2026] [proxy_fcgi:error] [pid 41188:tid 41207] [client 85.203.47.244:58225] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:30.816480 2026] [:error] [pid 41188:tid 41213] [client 85.203.47.244:58225] [client 85.203.47.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aZzlbgWRg7szIRhA0WiPDQAAAVY"]
[Tue Feb 24 07:40:31.781239 2026] [proxy_fcgi:error] [pid 41188:tid 41193] [client 85.203.47.219:47641] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:32.123513 2026] [proxy_fcgi:error] [pid 41188:tid 41195] [client 85.203.47.219:47641] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:32.863115 2026] [:error] [pid 41188:tid 41210] [client 85.203.47.219:47641] [client 85.203.47.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aZzlcAWRg7szIRhA0WiPFAAAAVM"]
[Tue Feb 24 07:40:33.978541 2026] [:error] [pid 37539:tid 37581] [client 85.203.47.253:41203] [client 85.203.47.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZzlcXEnr46jUQep9z_jRwAAAEY"]
[Tue Feb 24 07:40:36.783311 2026] [proxy_fcgi:error] [pid 37644:tid 37655] [client 85.203.47.252:45733] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:37.137427 2026] [proxy_fcgi:error] [pid 37644:tid 37651] [client 85.203.47.252:45733] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:37.814368 2026] [:error] [pid 37644:tid 37663] [client 85.203.47.252:45733] [client 85.203.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aZzldULaEhVDwBRydH194gAAANE"]
[Tue Feb 24 07:40:38.482471 2026] [proxy_fcgi:error] [pid 37540:tid 37616] [client 85.203.47.230:35923] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:39.225586 2026] [proxy_fcgi:error] [pid 37540:tid 37622] [client 85.203.47.230:35923] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:39.563378 2026] [:error] [pid 37540:tid 37609] [client 85.203.47.230:35923] [client 85.203.47.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aZzldyahRAUBJS8hpJWMqAAAAIc"]
[Tue Feb 24 07:40:40.554898 2026] [:error] [pid 37540:tid 37614] [client 85.203.47.251:31581] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/db.php"] [unique_id "aZzleCahRAUBJS8hpJWMqgAAAIw"]
[Tue Feb 24 07:40:41.228632 2026] [:error] [pid 37540:tid 37621] [client 157.97.120.4:38287] [client 157.97.120.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aZzleSahRAUBJS8hpJWMrwAAAJM"]
[Tue Feb 24 07:40:41.837211 2026] [:error] [pid 41188:tid 41200] [client 85.203.47.220:51441] [client 85.203.47.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZzleQWRg7szIRhA0WiPJAAAAUk"]
[Tue Feb 24 07:40:42.465125 2026] [:error] [pid 11672:tid 11676] [client 85.203.47.242:54281] [client 85.203.47.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aZzleva0fhnmfPYq92vJFAAAAQI"]
[Tue Feb 24 07:40:43.218295 2026] [:error] [pid 37540:tid 37611] [client 85.203.47.211:64551] [client 85.203.47.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aZzleyahRAUBJS8hpJWMsgAAAIk"]
[Tue Feb 24 07:40:43.869382 2026] [:error] [pid 37644:tid 37668] [client 85.203.47.246:39339] [client 85.203.47.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aZzle0LaEhVDwBRydH195wAAANY"]
[Tue Feb 24 07:40:46.325321 2026] [:error] [pid 41188:tid 41211] [client 85.203.47.218:29867] [client 85.203.47.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aZzlfgWRg7szIRhA0WiPLgAAAVQ"]
[Tue Feb 24 07:40:48.224292 2026] [:error] [pid 11672:tid 11681] [client 85.203.47.223:31617] [client 85.203.47.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aZzlgPa0fhnmfPYq92vJGwAAAQc"]
[Tue Feb 24 07:40:48.941181 2026] [:error] [pid 37540:tid 37625] [client 85.203.47.247:53277] [client 85.203.47.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aZzlgCahRAUBJS8hpJWMvAAAAJc"]
[Tue Feb 24 07:40:50.976760 2026] [:error] [pid 37540:tid 37617] [client 85.203.47.224:57275] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aZzlgiahRAUBJS8hpJWMxAAAAI8"]
[Tue Feb 24 07:40:52.347312 2026] [:error] [pid 37540:tid 37622] [client 85.203.47.242:51587] [client 85.203.47.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aZzlhCahRAUBJS8hpJWMzAAAAJQ"]
[Tue Feb 24 07:40:54.144087 2026] [proxy_fcgi:error] [pid 37539:tid 37590] [client 85.203.47.22:57923] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:55.443829 2026] [:error] [pid 37539:tid 37581] [client 85.203.47.22:57923] [client 85.203.47.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.22, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZzlh3Enr46jUQep9z_jVAAAAEY"]
[Tue Feb 24 07:40:58.370030 2026] [proxy_fcgi:error] [pid 37539:tid 37586] [client 85.203.47.22:57923] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:40:58.672578 2026] [:error] [pid 37539:tid 37583] [client 85.203.47.22:57923] [client 85.203.47.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aZzlinEnr46jUQep9z_jWgAAAEg"]
[Tue Feb 24 07:40:59.387634 2026] [:error] [pid 37540:tid 37606] [client 85.203.47.237:28003] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aZzliyahRAUBJS8hpJWM3wAAAIQ"]
[Tue Feb 24 07:41:01.124255 2026] [proxy_fcgi:error] [pid 37539:tid 37593] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:01.550345 2026] [proxy_fcgi:error] [pid 37539:tid 37589] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:02.893896 2026] [proxy_fcgi:error] [pid 37539:tid 37577] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:03.287853 2026] [proxy_fcgi:error] [pid 37539:tid 37584] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:04.889897 2026] [proxy_fcgi:error] [pid 37539:tid 37578] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:05.282448 2026] [proxy_fcgi:error] [pid 37539:tid 37595] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:05.619792 2026] [proxy_fcgi:error] [pid 37539:tid 37580] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:05.940840 2026] [proxy_fcgi:error] [pid 37539:tid 37597] [client 157.97.120.8:29635] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:06.252681 2026] [:error] [pid 37539:tid 37586] [client 157.97.120.8:29635] [client 157.97.120.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZzlknEnr46jUQep9z_jbgAAAEs"]
[Tue Feb 24 07:41:08.006165 2026] [:error] [pid 41188:tid 41207] [client 157.97.120.7:21623] [client 157.97.120.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aZzllAWRg7szIRhA0WiPRgAAAVA"]
[Tue Feb 24 07:41:09.231125 2026] [:error] [pid 11672:tid 11689] [client 85.203.47.22:46759] [client 85.203.47.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZzllfa0fhnmfPYq92vJKgAAAQ8"]
[Tue Feb 24 07:41:10.184006 2026] [proxy_fcgi:error] [pid 37540:tid 37616] [client 85.203.47.232:32989] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:10.583837 2026] [proxy_fcgi:error] [pid 37540:tid 37619] [client 85.203.47.232:32989] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:11.350467 2026] [proxy_fcgi:error] [pid 37540:tid 37623] [client 85.203.47.232:32989] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:12.067305 2026] [:error] [pid 37540:tid 37613] [client 85.203.47.232:32989] [client 85.203.47.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aZzlmCahRAUBJS8hpJWNBQAAAIs"]
[Tue Feb 24 07:41:13.873733 2026] [:error] [pid 37539:tid 37591] [client 85.203.47.248:29147] [client 85.203.47.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aZzlmXEnr46jUQep9z_jcAAAAFA"]
[Tue Feb 24 07:41:14.511153 2026] [:error] [pid 37539:tid 37593] [client 85.203.47.35:42565] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aZzlmnEnr46jUQep9z_jcQAAAFI"]
[Tue Feb 24 07:41:16.442156 2026] [:error] [pid 41188:tid 41199] [client 85.203.47.241:47165] [client 85.203.47.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aZzlnAWRg7szIRhA0WiPTQAAAUg"]
[Tue Feb 24 07:41:17.576246 2026] [:error] [pid 41188:tid 41195] [client 85.203.47.234:48855] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aZzlnQWRg7szIRhA0WiPTwAAAUQ"]
[Tue Feb 24 07:41:19.582972 2026] [:error] [pid 37538:tid 37557] [client 85.203.47.231:36869] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aZzlnyynTiHZ9J0Y2nZ1zAAAAAk"]
[Tue Feb 24 07:41:22.151184 2026] [proxy_fcgi:error] [pid 37539:tid 37597] [client 85.203.47.245:24725] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:25.255268 2026] [:error] [pid 37539:tid 37587] [client 85.203.47.245:24725] [client 85.203.47.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aZzlpXEnr46jUQep9z_jhAAAAEw"]
[Tue Feb 24 07:41:25.900900 2026] [proxy_fcgi:error] [pid 37538:tid 37571] [client 85.203.47.233:64499] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:26.543893 2026] [:error] [pid 37538:tid 37548] [client 85.203.47.233:64499] [client 85.203.47.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "aZzlpiynTiHZ9J0Y2nZ10gAAAAA"]
[Tue Feb 24 07:41:27.876280 2026] [proxy_fcgi:error] [pid 41188:tid 41195] [client 85.203.47.240:54345] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:28.871907 2026] [proxy_fcgi:error] [pid 41188:tid 41210] [client 85.203.47.240:54345] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:29.172664 2026] [:error] [pid 41188:tid 41205] [client 85.203.47.240:54345] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aZzlqQWRg7szIRhA0WiPagAAAU4"]
[Tue Feb 24 07:41:30.494931 2026] [:error] [pid 37644:tid 37661] [client 85.203.47.241:60137] [client 85.203.47.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aZzlqkLaEhVDwBRydH1-JAAAAM8"]
[Tue Feb 24 07:41:31.522007 2026] [proxy_fcgi:error] [pid 37644:tid 37657] [client 85.203.47.211:59695] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:32.523243 2026] [:error] [pid 37644:tid 37662] [client 85.203.47.211:59695] [client 85.203.47.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aZzlrELaEhVDwBRydH1-LQAAANA"]
[Tue Feb 24 07:41:35.192935 2026] [:error] [pid 41188:tid 41191] [client 85.203.47.231:21869] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aZzlrwWRg7szIRhA0WiPeAAAAUA"]
[Tue Feb 24 07:41:36.137679 2026] [proxy_fcgi:error] [pid 37540:tid 37613] [client 85.203.47.237:28247] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:36.509093 2026] [:error] [pid 37540:tid 37612] [client 85.203.47.237:28247] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aZzlsCahRAUBJS8hpJWNMgAAAIo"]
[Tue Feb 24 07:41:37.139905 2026] [:error] [pid 37540:tid 37603] [client 85.203.47.219:30879] [client 85.203.47.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aZzlsSahRAUBJS8hpJWNOAAAAIE"]
[Tue Feb 24 07:41:39.507630 2026] [:error] [pid 37644:tid 37659] [client 85.203.47.252:63389] [client 85.203.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aZzls0LaEhVDwBRydH1-OQAAAM0"]
[Tue Feb 24 07:41:41.267344 2026] [proxy_fcgi:error] [pid 37540:tid 37606] [client 85.203.47.231:30029] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:42.593305 2026] [proxy_fcgi:error] [pid 37540:tid 37625] [client 85.203.47.231:30029] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:42.920415 2026] [:error] [pid 37540:tid 37623] [client 85.203.47.231:30029] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aZzltiahRAUBJS8hpJWNQgAAAJU"]
[Tue Feb 24 07:41:44.368793 2026] [proxy_fcgi:error] [pid 37539:tid 37597] [client 85.203.47.225:63653] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:45.122568 2026] [:error] [pid 37539:tid 37586] [client 85.203.47.225:63653] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZzluXEnr46jUQep9z_jkAAAAEs"]
[Tue Feb 24 07:41:45.803138 2026] [:error] [pid 37540:tid 37605] [client 85.203.47.21:47177] [client 85.203.47.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aZzluSahRAUBJS8hpJWNRgAAAIM"]
[Tue Feb 24 07:41:47.117083 2026] [:error] [pid 37644:tid 37668] [client 85.203.47.237:33557] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aZzlu0LaEhVDwBRydH1-PQAAANY"]
[Tue Feb 24 07:41:49.915950 2026] [:error] [pid 37644:tid 37669] [client 85.203.47.216:60213] [client 85.203.47.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/install.php"] [unique_id "aZzlvULaEhVDwBRydH1-QQAAANc"]
[Tue Feb 24 07:41:50.533495 2026] [:error] [pid 41188:tid 41193] [client 85.203.47.36:60849] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aZzlvgWRg7szIRhA0WiPkwAAAUI"]
[Tue Feb 24 07:41:51.660808 2026] [proxy_fcgi:error] [pid 37540:tid 37617] [client 85.203.47.226:34569] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:53.227321 2026] [:error] [pid 37540:tid 37618] [client 85.203.47.226:34569] [client 85.203.47.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/category-double.php"] [unique_id "aZzlwSahRAUBJS8hpJWNUwAAAJA"]
[Tue Feb 24 07:41:54.425546 2026] [:error] [pid 37539:tid 37577] [client 85.203.47.240:60009] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aZzlwnEnr46jUQep9z_jlwAAAEI"]
[Tue Feb 24 07:41:55.020367 2026] [:error] [pid 37539:tid 37580] [client 85.203.47.234:64855] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aZzlw3Enr46jUQep9z_jmgAAAEU"]
[Tue Feb 24 07:41:55.930306 2026] [proxy_fcgi:error] [pid 37539:tid 37582] [client 85.203.47.236:37897] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:41:56.238773 2026] [:error] [pid 37539:tid 37579] [client 85.203.47.236:37897] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aZzlxHEnr46jUQep9z_joQAAAEQ"]
[Tue Feb 24 07:41:57.161533 2026] [:error] [pid 11672:tid 11674] [client 157.97.120.2:32701] [client 157.97.120.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aZzlxfa0fhnmfPYq92vJVwAAAQA"]
[Tue Feb 24 07:41:59.264857 2026] [:error] [pid 11672:tid 11678] [client 85.203.47.251:42803] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aZzlx_a0fhnmfPYq92vJXQAAAQQ"]
[Tue Feb 24 07:42:00.197627 2026] [proxy_fcgi:error] [pid 37539:tid 37594] [client 85.203.47.251:30385] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:00.495211 2026] [:error] [pid 37539:tid 37586] [client 85.203.47.251:30385] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aZzlyHEnr46jUQep9z_jpwAAAEs"]
[Tue Feb 24 07:42:01.768060 2026] [:error] [pid 37540:tid 37606] [client 85.203.47.231:35787] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aZzlySahRAUBJS8hpJWNXQAAAIQ"]
[Tue Feb 24 07:42:02.692345 2026] [:error] [pid 41188:tid 41213] [client 85.203.47.237:27313] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/as.php"] [unique_id "aZzlygWRg7szIRhA0WiPpQAAAVY"]
[Tue Feb 24 07:42:03.588965 2026] [:error] [pid 37540:tid 37623] [client 85.203.47.248:51815] [client 85.203.47.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aZzlyyahRAUBJS8hpJWNYAAAAJU"]
[Tue Feb 24 07:42:04.201299 2026] [:error] [pid 41188:tid 41199] [client 85.203.47.244:40177] [client 85.203.47.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "aZzlzAWRg7szIRhA0WiPpgAAAUg"]
[Tue Feb 24 07:42:07.312050 2026] [:error] [pid 41188:tid 41212] [client 85.203.47.243:37835] [client 85.203.47.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aZzlzwWRg7szIRhA0WiPsAAAAVU"]
[Tue Feb 24 07:42:09.771531 2026] [:error] [pid 37539:tid 37598] [client 85.203.47.253:35681] [client 85.203.47.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aZzl0XEnr46jUQep9z_jswAAAFc"]
[Tue Feb 24 07:42:11.628361 2026] [:error] [pid 41188:tid 41210] [client 157.97.120.3:42649] [client 157.97.120.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "aZzl0wWRg7szIRhA0WiPwwAAAVM"]
[Tue Feb 24 07:42:12.539361 2026] [proxy_fcgi:error] [pid 41188:tid 41199] [client 85.203.47.235:31135] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:12.853467 2026] [proxy_fcgi:error] [pid 41188:tid 41215] [client 85.203.47.235:31135] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:13.158108 2026] [:error] [pid 41188:tid 41202] [client 85.203.47.235:31135] [client 85.203.47.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aZzl1QWRg7szIRhA0WiPyAAAAUs"]
[Tue Feb 24 07:42:15.676015 2026] [:error] [pid 37644:tid 37665] [client 157.97.120.7:31867] [client 157.97.120.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aZzl10LaEhVDwBRydH1-WAAAANM"]
[Tue Feb 24 07:42:17.373905 2026] [proxy_fcgi:error] [pid 37540:tid 37623] [client 85.203.47.234:65463] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:19.169217 2026] [:error] [pid 37540:tid 37615] [client 85.203.47.234:65463] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aZzl2yahRAUBJS8hpJWNegAAAI0"]
[Tue Feb 24 07:42:20.063062 2026] [:error] [pid 37540:tid 37617] [client 85.203.47.247:42339] [client 85.203.47.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aZzl3CahRAUBJS8hpJWNfQAAAI8"]
[Tue Feb 24 07:42:22.068328 2026] [:error] [pid 37644:tid 37652] [client 85.203.47.34:24889] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aZzl3kLaEhVDwBRydH1-ZwAAAMY"]
[Tue Feb 24 07:42:24.418581 2026] [:error] [pid 41188:tid 41197] [client 85.203.47.218:57465] [client 85.203.47.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aZzl4AWRg7szIRhA0WiP0gAAAUY"]
[Tue Feb 24 07:42:27.476466 2026] [:error] [pid 37644:tid 37655] [client 85.203.47.225:28731] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aZzl40LaEhVDwBRydH1-fwAAAMk"]
[Tue Feb 24 07:42:28.092359 2026] [:error] [pid 37540:tid 37603] [client 85.203.47.236:51695] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aZzl5CahRAUBJS8hpJWNlgAAAIE"]
[Tue Feb 24 07:42:29.724407 2026] [:error] [pid 37539:tid 37579] [client 85.203.47.226:53545] [client 85.203.47.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aZzl5XEnr46jUQep9z_jyQAAAEQ"]
[Tue Feb 24 07:42:31.474823 2026] [:error] [pid 41188:tid 41194] [client 85.203.47.210:45249] [client 85.203.47.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZzl5wWRg7szIRhA0WiP4AAAAUM"]
[Tue Feb 24 07:42:32.832021 2026] [:error] [pid 41188:tid 41206] [client 85.203.47.218:43351] [client 85.203.47.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aZzl6AWRg7szIRhA0WiP7gAAAU8"]
[Tue Feb 24 07:42:34.559079 2026] [:error] [pid 41188:tid 41204] [client 85.203.47.237:49977] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aZzl6gWRg7szIRhA0WiP9AAAAU0"]
[Tue Feb 24 07:42:36.272804 2026] [:error] [pid 41188:tid 41208] [client 85.203.47.245:31741] [client 85.203.47.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.245, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZzl7AWRg7szIRhA0WiP-QAAAVE"]
[Tue Feb 24 07:42:36.283404 2026] [proxy_fcgi:error] [pid 41188:tid 41208] [client 85.203.47.245:31741] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:36.581165 2026] [:error] [pid 41188:tid 41206] [client 85.203.47.245:31741] [client 85.203.47.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aZzl7AWRg7szIRhA0WiP-wAAAU8"]
[Tue Feb 24 07:42:37.931156 2026] [proxy_fcgi:error] [pid 41188:tid 41196] [client 85.203.47.243:62029] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:38.450772 2026] [:error] [pid 41188:tid 41201] [client 85.203.47.243:62029] [client 85.203.47.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZzl7gWRg7szIRhA0WiQBQAAAUo"]
[Tue Feb 24 07:42:40.159608 2026] [:error] [pid 37540:tid 37610] [client 85.203.47.226:42929] [client 85.203.47.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/network.php"] [unique_id "aZzl8CahRAUBJS8hpJWNrQAAAIg"]
[Tue Feb 24 07:42:41.969200 2026] [proxy_fcgi:error] [pid 37644:tid 37670] [client 85.203.47.225:38385] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:44.528972 2026] [:error] [pid 37644:tid 37651] [client 85.203.47.225:38385] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aZzl9ELaEhVDwBRydH1-jwAAAMU"]
[Tue Feb 24 07:42:46.266575 2026] [:error] [pid 37644:tid 37647] [client 157.97.120.3:59417] [client 157.97.120.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aZzl9kLaEhVDwBRydH1-kgAAAME"]
[Tue Feb 24 07:42:47.737208 2026] [:error] [pid 37644:tid 37649] [client 85.203.47.35:25229] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aZzl90LaEhVDwBRydH1-mAAAAMM"]
[Tue Feb 24 07:42:49.554513 2026] [:error] [pid 41188:tid 41195] [client 85.203.47.249:62461] [client 85.203.47.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aZzl-QWRg7szIRhA0WiQDQAAAUQ"]
[Tue Feb 24 07:42:50.232802 2026] [proxy_fcgi:error] [pid 41188:tid 41200] [client 85.203.47.240:62751] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:50.543916 2026] [:error] [pid 41188:tid 41208] [client 85.203.47.240:62751] [client 85.203.47.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.47.240, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZzl-gWRg7szIRhA0WiQEwAAAVE"]
[Tue Feb 24 07:42:51.271345 2026] [:error] [pid 41188:tid 41215] [client 85.203.47.240:62751] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aZzl-wWRg7szIRhA0WiQFwAAAVg"]
[Tue Feb 24 07:42:53.264797 2026] [:error] [pid 37539:tid 37593] [client 85.203.47.34:20781] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aZzl_XEnr46jUQep9z_j5wAAAFI"]
[Tue Feb 24 07:42:54.263638 2026] [proxy_fcgi:error] [pid 37539:tid 37584] [client 85.203.47.21:42251] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:54.625946 2026] [:error] [pid 37539:tid 37589] [client 85.203.47.21:42251] [client 85.203.47.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aZzl_nEnr46jUQep9z_j6wAAAE4"]
[Tue Feb 24 07:42:55.312869 2026] [:error] [pid 41188:tid 41193] [client 157.97.120.2:60897] [client 157.97.120.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aZzl_wWRg7szIRhA0WiQGAAAAUI"]
[Tue Feb 24 07:42:55.959185 2026] [proxy_fcgi:error] [pid 37539:tid 37588] [client 85.203.47.240:59333] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:42:56.935022 2026] [:error] [pid 37539:tid 37583] [client 85.203.47.240:59333] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aZzmAHEnr46jUQep9z_j8QAAAEg"]
[Tue Feb 24 07:42:59.163194 2026] [:error] [pid 11672:tid 11688] [client 85.203.47.225:39505] [client 85.203.47.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZzmA_a0fhnmfPYq92vJdgAAAQ4"]
[Tue Feb 24 07:42:59.833305 2026] [proxy_fcgi:error] [pid 37540:tid 37609] [client 85.203.47.254:29981] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:00.571641 2026] [proxy_fcgi:error] [pid 37540:tid 37607] [client 85.203.47.254:29981] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:01.293282 2026] [:error] [pid 37540:tid 37626] [client 85.203.47.254:29981] [client 85.203.47.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aZzmBSahRAUBJS8hpJWNwwAAAJg"]
[Tue Feb 24 07:43:02.037184 2026] [:error] [pid 37644:tid 37668] [client 85.203.47.238:23549] [client 85.203.47.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bypass.php"] [unique_id "aZzmBkLaEhVDwBRydH1-sgAAANY"]
[Tue Feb 24 07:43:03.143162 2026] [:error] [pid 37644:tid 37658] [client 85.203.47.222:50227] [client 85.203.47.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/count.php"] [unique_id "aZzmB0LaEhVDwBRydH1-uAAAAMw"]
[Tue Feb 24 07:43:03.880545 2026] [proxy_fcgi:error] [pid 37540:tid 37617] [client 85.203.47.36:31613] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:06.264320 2026] [:error] [pid 37540:tid 37618] [client 85.203.47.36:31613] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZzmCiahRAUBJS8hpJWNzgAAAJA"]
[Tue Feb 24 07:43:07.714286 2026] [:error] [pid 37644:tid 37647] [client 157.97.120.2:42253] [client 157.97.120.2] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com"] [uri "/images/stories/themes.php"] [unique_id "aZzmC0LaEhVDwBRydH1-wwAAAME"]
[Tue Feb 24 07:43:08.035677 2026] [:error] [pid 37644:tid 37660] [client 157.97.120.2:42253] [client 157.97.120.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aZzmDELaEhVDwBRydH1-xAAAAM4"]
[Tue Feb 24 07:43:09.384436 2026] [:error] [pid 37538:tid 37566] [client 85.203.47.248:37105] [client 85.203.47.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aZzmDSynTiHZ9J0Y2nZ18gAAABI"]
[Tue Feb 24 07:43:10.017906 2026] [:error] [pid 11672:tid 11681] [client 157.97.120.8:55025] [client 157.97.120.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aZzmDva0fhnmfPYq92vJfwAAAQc"]
[Tue Feb 24 07:43:11.279534 2026] [proxy_fcgi:error] [pid 11672:tid 11678] [client 85.203.47.215:23147] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:12.604672 2026] [:error] [pid 11672:tid 11689] [client 85.203.47.215:23147] [client 85.203.47.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aZzmEPa0fhnmfPYq92vJiQAAAQ8"]
[Tue Feb 24 07:43:15.147883 2026] [:error] [pid 37540:tid 37604] [client 85.203.47.236:56597] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aZzmEyahRAUBJS8hpJWN1gAAAII"]
[Tue Feb 24 07:43:16.192500 2026] [:error] [pid 37644:tid 37656] [client 85.203.47.254:61693] [client 85.203.47.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aZzmFELaEhVDwBRydH1-zgAAAMo"]
[Tue Feb 24 07:43:16.887613 2026] [proxy_fcgi:error] [pid 41188:tid 41194] [client 85.203.47.220:33377] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:18.620919 2026] [:error] [pid 41188:tid 41193] [client 85.203.47.220:33377] [client 85.203.47.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aZzmFgWRg7szIRhA0WiQJgAAAUI"]
[Tue Feb 24 07:43:19.941541 2026] [:error] [pid 37644:tid 37659] [client 157.97.120.5:52741] [client 157.97.120.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/colour.php"] [unique_id "aZzmF0LaEhVDwBRydH1-0wAAAM0"]
[Tue Feb 24 07:43:20.695358 2026] [proxy_fcgi:error] [pid 41188:tid 41200] [client 85.203.47.36:27633] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:21.029001 2026] [:error] [pid 41188:tid 41201] [client 85.203.47.36:27633] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aZzmGQWRg7szIRhA0WiQMAAAAUo"]
[Tue Feb 24 07:43:21.718293 2026] [:error] [pid 37539:tid 37595] [client 85.203.47.210:64243] [client 85.203.47.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/include.php"] [unique_id "aZzmGXEnr46jUQep9z_kAwAAAFQ"]
[Tue Feb 24 07:43:23.121466 2026] [:error] [pid 41188:tid 41214] [client 85.203.47.247:25431] [client 85.203.47.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aZzmGwWRg7szIRhA0WiQNQAAAVc"]
[Tue Feb 24 07:43:25.925661 2026] [proxy_fcgi:error] [pid 37539:tid 37599] [client 85.203.47.234:43151] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:26.296141 2026] [:error] [pid 37539:tid 37597] [client 85.203.47.234:43151] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aZzmHnEnr46jUQep9z_kDQAAAFY"]
[Tue Feb 24 07:43:26.908428 2026] [:error] [pid 37540:tid 37624] [client 85.203.47.245:45533] [client 85.203.47.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aZzmHiahRAUBJS8hpJWN4QAAAJY"]
[Tue Feb 24 07:43:28.615286 2026] [proxy_fcgi:error] [pid 37540:tid 37613] [client 85.203.47.251:20493] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:29.546314 2026] [:error] [pid 37540:tid 37604] [client 85.203.47.251:20493] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aZzmISahRAUBJS8hpJWN7gAAAII"]
[Tue Feb 24 07:43:32.143360 2026] [:error] [pid 37540:tid 37617] [client 85.203.47.241:35867] [client 85.203.47.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aZzmJCahRAUBJS8hpJWN9QAAAI8"]
[Tue Feb 24 07:43:32.764730 2026] [proxy_fcgi:error] [pid 37644:tid 37663] [client 85.203.47.232:23677] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:33.859553 2026] [:error] [pid 37644:tid 37662] [client 85.203.47.232:23677] [client 85.203.47.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aZzmJULaEhVDwBRydH1-4gAAANA"]
[Tue Feb 24 07:43:35.517675 2026] [:error] [pid 41188:tid 41193] [client 85.203.47.234:30775] [client 85.203.47.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aZzmJwWRg7szIRhA0WiQQQAAAUI"]
[Tue Feb 24 07:43:36.431042 2026] [:error] [pid 11672:tid 11684] [client 85.203.47.242:37629] [client 85.203.47.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aZzmKPa0fhnmfPYq92vJpgAAAQo"]
[Tue Feb 24 07:43:37.049726 2026] [proxy_fcgi:error] [pid 37538:tid 37558] [client 85.203.47.240:44141] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:37.724011 2026] [:error] [pid 37538:tid 37556] [client 85.203.47.240:44141] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aZzmKSynTiHZ9J0Y2nZ2AwAAAAg"]
[Tue Feb 24 07:43:38.409590 2026] [proxy_fcgi:error] [pid 11672:tid 11693] [client 85.203.47.21:36199] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:39.072065 2026] [:error] [pid 11672:tid 11686] [client 85.203.47.21:36199] [client 85.203.47.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZzmK_a0fhnmfPYq92vJqQAAAQw"]
[Tue Feb 24 07:43:39.906800 2026] [:error] [pid 37540:tid 37622] [client 85.203.47.242:27817] [client 85.203.47.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aZzmKyahRAUBJS8hpJWN_gAAAJQ"]
[Tue Feb 24 07:43:42.106099 2026] [:error] [pid 37540:tid 37624] [client 85.203.47.230:49661] [client 85.203.47.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aZzmLiahRAUBJS8hpJWOBQAAAJY"]
[Tue Feb 24 07:43:42.733872 2026] [:error] [pid 37540:tid 37611] [client 85.203.47.239:22085] [client 85.203.47.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/simi.php"] [unique_id "aZzmLiahRAUBJS8hpJWOCQAAAIk"]
[Tue Feb 24 07:43:44.134946 2026] [:error] [pid 11672:tid 11696] [client 85.203.47.244:50367] [client 85.203.47.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZzmMPa0fhnmfPYq92vJrQAAARY"]
[Tue Feb 24 07:43:47.779027 2026] [:error] [pid 37644:tid 37669] [client 85.203.47.248:42883] [client 85.203.47.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aZzmM0LaEhVDwBRydH1-_QAAANc"]
[Tue Feb 24 07:43:48.437444 2026] [:error] [pid 11672:tid 11694] [client 85.203.47.218:21419] [client 85.203.47.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aZzmNPa0fhnmfPYq92vJsAAAARQ"]
[Tue Feb 24 07:43:50.227508 2026] [:error] [pid 37539:tid 37599] [client 85.203.47.241:48241] [client 85.203.47.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aZzmNnEnr46jUQep9z_kFQAAAFg"]
[Tue Feb 24 07:43:51.825791 2026] [:error] [pid 37644:tid 37648] [client 85.203.47.226:36557] [client 85.203.47.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aZzmN0LaEhVDwBRydH1_BwAAAMI"]
[Tue Feb 24 07:43:53.153350 2026] [:error] [pid 41188:tid 41203] [client 85.203.47.236:38253] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aZzmOQWRg7szIRhA0WiQTAAAAUw"]
[Tue Feb 24 07:43:55.278623 2026] [:error] [pid 37540:tid 37610] [client 85.203.47.21:45997] [client 85.203.47.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aZzmOyahRAUBJS8hpJWOHwAAAIg"]
[Tue Feb 24 07:43:56.259821 2026] [:error] [pid 37539:tid 37590] [client 85.203.47.224:24555] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aZzmPHEnr46jUQep9z_kHwAAAE8"]
[Tue Feb 24 07:43:57.581491 2026] [proxy_fcgi:error] [pid 37538:tid 37569] [client 85.203.47.36:50453] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:43:58.949035 2026] [:error] [pid 37538:tid 37554] [client 85.203.47.36:50453] [client 85.203.47.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugin.php"] [unique_id "aZzmPiynTiHZ9J0Y2nZ2EwAAAAY"]
[Tue Feb 24 07:43:59.623823 2026] [:error] [pid 37540:tid 37612] [client 85.203.47.216:61713] [client 85.203.47.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aZzmPyahRAUBJS8hpJWOJQAAAIo"]
[Tue Feb 24 07:44:00.611443 2026] [proxy_fcgi:error] [pid 37540:tid 37623] [client 85.203.47.232:56375] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:01.934627 2026] [:error] [pid 37540:tid 37621] [client 85.203.47.232:56375] [client 85.203.47.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aZzmQSahRAUBJS8hpJWOLgAAAJM"]
[Tue Feb 24 07:44:03.936104 2026] [:error] [pid 37539:tid 37575] [client 85.203.47.231:63707] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aZzmQ3Enr46jUQep9z_kMQAAAEA"]
[Tue Feb 24 07:44:05.067325 2026] [proxy_fcgi:error] [pid 41188:tid 41193] [client 85.203.47.35:29623] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:05.365279 2026] [:error] [pid 41188:tid 41209] [client 85.203.47.35:29623] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aZzmRQWRg7szIRhA0WiQUAAAAVI"]
[Tue Feb 24 07:44:06.645340 2026] [:error] [pid 37540:tid 37606] [client 85.203.47.223:63059] [client 85.203.47.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aZzmRiahRAUBJS8hpJWONQAAAIQ"]
[Tue Feb 24 07:44:08.466921 2026] [proxy_fcgi:error] [pid 37539:tid 37589] [client 85.203.47.232:43317] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:08.822340 2026] [:error] [pid 37539:tid 37590] [client 85.203.47.232:43317] [client 85.203.47.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aZzmSHEnr46jUQep9z_kNwAAAE8"]
[Tue Feb 24 07:44:09.752770 2026] [:error] [pid 37538:tid 37570] [client 85.203.47.34:59095] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aZzmSSynTiHZ9J0Y2nZ2GAAAABY"]
[Tue Feb 24 07:44:11.725382 2026] [proxy_fcgi:error] [pid 37644:tid 37652] [client 85.203.47.244:20653] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:12.057481 2026] [:error] [pid 37644:tid 37668] [client 85.203.47.244:20653] [client 85.203.47.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZzmTELaEhVDwBRydH1_GAAAANY"]
[Tue Feb 24 07:44:15.130342 2026] [:error] [pid 37644:tid 37661] [client 85.203.47.34:29293] [client 85.203.47.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aZzmT0LaEhVDwBRydH1_IQAAAM8"]
[Tue Feb 24 07:44:16.886005 2026] [proxy_fcgi:error] [pid 37644:tid 37648] [client 85.203.47.242:24875] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:17.226525 2026] [:error] [pid 37644:tid 37664] [client 85.203.47.242:24875] [client 85.203.47.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aZzmUULaEhVDwBRydH1_JAAAANI"]
[Tue Feb 24 07:44:17.932409 2026] [:error] [pid 41188:tid 41200] [client 85.203.47.239:58599] [client 85.203.47.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aZzmUQWRg7szIRhA0WiQYAAAAUk"]
[Tue Feb 24 07:44:18.623864 2026] [proxy_fcgi:error] [pid 11672:tid 11695] [client 85.203.47.237:49547] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:19.280299 2026] [:error] [pid 11672:tid 11676] [client 85.203.47.237:49547] [client 85.203.47.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aZzmU_a0fhnmfPYq92vJygAAAQI"]
[Tue Feb 24 07:44:19.921332 2026] [:error] [pid 41188:tid 41198] [client 85.203.47.250:52351] [client 85.203.47.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aZzmUwWRg7szIRhA0WiQYgAAAUc"]
[Tue Feb 24 07:44:22.531949 2026] [:error] [pid 37644:tid 37652] [client 85.203.47.233:39341] [client 85.203.47.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-2019.php"] [unique_id "aZzmVkLaEhVDwBRydH1_MwAAAMY"]
[Tue Feb 24 07:44:23.206361 2026] [:error] [pid 37540:tid 37605] [client 85.203.47.217:42413] [client 85.203.47.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aZzmVyahRAUBJS8hpJWOQgAAAIM"]
[Tue Feb 24 07:44:24.145040 2026] [:error] [pid 37540:tid 37609] [client 85.203.47.220:56209] [client 85.203.47.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/log.php"] [unique_id "aZzmWCahRAUBJS8hpJWORQAAAIc"]
[Tue Feb 24 07:44:25.786200 2026] [:error] [pid 37539:tid 37597] [client 85.203.47.240:33275] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aZzmWXEnr46jUQep9z_kPgAAAFY"]
[Tue Feb 24 07:44:27.633853 2026] [:error] [pid 37644:tid 37658] [client 85.203.47.215:54477] [client 85.203.47.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aZzmW0LaEhVDwBRydH1_OAAAAMw"]
[Tue Feb 24 07:44:28.311674 2026] [:error] [pid 37540:tid 37616] [client 85.203.47.224:62229] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/aw.php"] [unique_id "aZzmXCahRAUBJS8hpJWORwAAAI4"]
[Tue Feb 24 07:44:30.287637 2026] [:error] [pid 37539:tid 37589] [client 85.203.47.231:32333] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/db.php"] [unique_id "aZzmXnEnr46jUQep9z_kRQAAAE4"]
[Tue Feb 24 07:44:31.017891 2026] [:error] [pid 37644:tid 37656] [client 85.203.47.239:46405] [client 85.203.47.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/install.php"] [unique_id "aZzmX0LaEhVDwBRydH1_PgAAAMo"]
[Tue Feb 24 07:44:31.981368 2026] [proxy_fcgi:error] [pid 37644:tid 37668] [client 85.203.47.240:33973] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:32.321373 2026] [:error] [pid 37644:tid 37657] [client 85.203.47.240:33973] [client 85.203.47.240] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aZzmYELaEhVDwBRydH1_QQAAAMs"]
[Tue Feb 24 07:44:33.045189 2026] [:error] [pid 41188:tid 41195] [client 85.203.47.245:37915] [client 85.203.47.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aZzmYQWRg7szIRhA0WiQawAAAUQ"]
[Tue Feb 24 07:44:34.439547 2026] [:error] [pid 37540:tid 37611] [client 157.97.120.7:60005] [client 157.97.120.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/template-less.php"] [unique_id "aZzmYiahRAUBJS8hpJWOUQAAAIk"]
[Tue Feb 24 07:44:35.045587 2026] [:error] [pid 37539:tid 37588] [client 85.203.47.250:59791] [client 85.203.47.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aZzmY3Enr46jUQep9z_kSAAAAE0"]
[Tue Feb 24 07:44:38.313923 2026] [:error] [pid 37540:tid 37608] [client 85.203.47.35:39993] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/min.php"] [unique_id "aZzmZiahRAUBJS8hpJWObQAAAIY"]
[Tue Feb 24 07:44:39.308095 2026] [:error] [pid 37644:tid 37664] [client 85.203.47.248:40891] [client 85.203.47.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aZzmZ0LaEhVDwBRydH1_RwAAANI"]
[Tue Feb 24 07:44:41.485492 2026] [:error] [pid 37538:tid 37556] [client 85.203.47.252:31407] [client 85.203.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/file.php"] [unique_id "aZzmaSynTiHZ9J0Y2nZ2LgAAAAg"]
[Tue Feb 24 07:44:42.481297 2026] [:error] [pid 41188:tid 41201] [client 85.203.47.236:37663] [client 85.203.47.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZzmagWRg7szIRhA0WiQeAAAAUo"]
[Tue Feb 24 07:44:43.427375 2026] [:error] [pid 41188:tid 41206] [client 85.203.47.251:33537] [client 85.203.47.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/load.php"] [unique_id "aZzmawWRg7szIRhA0WiQewAAAU8"]
[Tue Feb 24 07:44:44.117324 2026] [:error] [pid 37540:tid 37610] [client 85.203.47.35:65131] [client 85.203.47.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aZzmbCahRAUBJS8hpJWOdQAAAIg"]
[Tue Feb 24 07:44:44.740629 2026] [:error] [pid 37538:tid 37548] [client 85.203.47.231:28587] [client 85.203.47.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aZzmbCynTiHZ9J0Y2nZ2MAAAAAA"]
[Tue Feb 24 07:44:47.426275 2026] [:error] [pid 37540:tid 37617] [client 85.203.47.253:32325] [client 85.203.47.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aZzmbyahRAUBJS8hpJWOgQAAAI8"]
[Tue Feb 24 07:44:49.254006 2026] [proxy_fcgi:error] [pid 37540:tid 37609] [client 85.203.47.224:38995] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:49.615454 2026] [:error] [pid 37540:tid 37602] [client 85.203.47.224:38995] [client 85.203.47.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aZzmcSahRAUBJS8hpJWOiAAAAIA"]
[Tue Feb 24 07:44:51.021233 2026] [proxy_fcgi:error] [pid 37538:tid 37568] [client 85.203.47.210:39467] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 07:44:51.395098 2026] [:error] [pid 37538:tid 37552] [client 85.203.47.210:39467] [client 85.203.47.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aZzmcyynTiHZ9J0Y2nZ2NQAAAAQ"]
[Tue Feb 24 07:44:52.015079 2026] [:error] [pid 41188:tid 41209] [client 85.203.47.226:40815] [client 85.203.47.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aZzmdAWRg7szIRhA0WiQgAAAAVI"]
[Tue Feb 24 08:47:11.701005 2026] [:error] [pid 41188:tid 41198] [client 43.159.143.190:57648] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZz1DwWRg7szIRhA0WisTgAAAUc"]
[Tue Feb 24 11:16:26.038705 2026] [:error] [pid 11672:tid 11688] [client 104.28.222.75:52560] [client 104.28.222.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.75, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZ0YCva0fhnmfPYq92sJXAAAAQ4"]
[Tue Feb 24 11:16:26.050854 2026] [proxy_fcgi:error] [pid 11672:tid 11688] [client 104.28.222.75:52560] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 11:16:37.636472 2026] [:error] [pid 41188:tid 41205] [client 103.103.138.162:63593] [client 103.103.138.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.103.138.162, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZ0YFQWRg7szIRhA0WjwkwAAAU4"]
[Tue Feb 24 11:16:37.643025 2026] [proxy_fcgi:error] [pid 41188:tid 41205] [client 103.103.138.162:63593] AH01071: Got error 'Primary script unknown'
[Tue Feb 24 13:53:35.280405 2026] [:error] [pid 34175:tid 34196] [client 43.159.144.16:43582] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ0833NLnkJcHQ-bNtWLtAAAAZI"]
[Tue Feb 24 15:09:28.257479 2026] [:error] [pid 23678:tid 23741] [client 43.138.68.113:48288] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ1OqEjfX6zv05Y7fF6AUQAAAUc"]
[Tue Feb 24 16:22:58.602185 2026] [:error] [pid 34749:tid 34758] [client 98.93.135.156:52358] [client 98.93.135.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ1f4oDERuV6HM3T9KmqOAAAAEQ"]
[Tue Feb 24 16:22:59.025530 2026] [:error] [pid 34749:tid 34755] [client 98.93.135.156:52716] [client 98.93.135.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aZ1f44DERuV6HM3T9KmqOQAAAEE"]
[Tue Feb 24 16:22:59.437385 2026] [:error] [pid 34749:tid 34760] [client 98.93.135.156:53087] [client 98.93.135.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "aZ1f44DERuV6HM3T9KmqOgAAAEY"]
[Tue Feb 24 19:48:09.960449 2026] [:error] [pid 16868:tid 16911] [client 103.77.107.57:51273] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aZ2P-SdEecEcYKsh8PTlXgAAA84"]
[Tue Feb 24 19:48:10.174079 2026] [:error] [pid 16867:tid 16873] [client 103.77.107.57:51299] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aZ2P-tTc72Oc9LHzeyJ0twAAA4M"]
[Tue Feb 24 20:43:05.836773 2026] [:error] [pid 16867:tid 16884] [client 196.249.229.22:53625] [client 196.249.229.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.249.229.22, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZ2c2dTc72Oc9LHzeyKIHQAAA44"]
[Tue Feb 24 20:43:05.848080 2026] [proxy_fcgi:error] [pid 16867:tid 16884] [client 196.249.229.22:53625] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 01:23:12.016232 2026] [proxy_fcgi:error] [pid 18447:tid 18763] [client 84.20.25.19:28597] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/archivarix.cms.php
[Wed Feb 25 02:38:09.625886 2026] [:error] [pid 26872:tid 26885] [client 43.156.202.34:59818] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ3wEXxLbzvRGuzwKjkOHgAAAEs"]
[Wed Feb 25 03:52:34.795119 2026] [proxy_fcgi:error] [pid 20659:tid 20707] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:34.937123 2026] [proxy_fcgi:error] [pid 20659:tid 20714] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.079908 2026] [proxy_fcgi:error] [pid 20659:tid 20718] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.242703 2026] [proxy_fcgi:error] [pid 20659:tid 20708] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.384136 2026] [proxy_fcgi:error] [pid 20659:tid 20715] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.526013 2026] [proxy_fcgi:error] [pid 20659:tid 20696] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.668316 2026] [proxy_fcgi:error] [pid 20659:tid 20701] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.810209 2026] [proxy_fcgi:error] [pid 20659:tid 20707] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:35.951916 2026] [proxy_fcgi:error] [pid 20659:tid 20700] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:36.096336 2026] [proxy_fcgi:error] [pid 20659:tid 20698] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:36.238454 2026] [proxy_fcgi:error] [pid 20659:tid 20695] [client 40.80.89.74:4545] AH01071: Got error 'Primary script unknown'
[Wed Feb 25 03:52:36.375912 2026] [:error] [pid 20659:tid 20702] [client 40.80.89.74:4545] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cookie.php"] [unique_id "aZ4BhD_THK_HtK-Q44LHPgAAAEc"]
[Wed Feb 25 03:52:36.978149 2026] [:error] [pid 20658:tid 20668] [client 40.80.89.74:4765] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cookie.php"] [unique_id "aZ4BhOu8cohhPfsAIFmThgAAAAE"]
[Wed Feb 25 03:52:37.537113 2026] [:error] [pid 20660:tid 20728] [client 40.80.89.74:4570] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cookie.php"] [unique_id "aZ4Bhf6o0bjbSJXjrpHJyQAAAIY"]
[Wed Feb 25 03:52:38.100198 2026] [:error] [pid 20660:tid 20730] [client 40.80.89.74:4739] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cookie.php"] [unique_id "aZ4Bhv6o0bjbSJXjrpHJzgAAAIg"]
[Wed Feb 25 04:35:48.690876 2026] [:error] [pid 60501:tid 60625] [client 60.188.57.0:42401] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ4LpEx4pzY-iMYBCAELVgAAA4s"]
[Wed Feb 25 11:02:54.514056 2026] [:error] [pid 60498:tid 60505] [client 182.44.10.67:38105] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ5mXiFCVhQ3ffus0uK1WAAAAsA"]
[Wed Feb 25 11:16:41.378740 2026] [:error] [pid 60290:tid 60310] [client 43.157.156.190:45454] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ5pmTPwSUztcPyiofqYigAAARI"]
[Wed Feb 25 17:49:51.217691 2026] [:error] [pid 60387:tid 60491] [client 117.33.163.216:45850] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ7Fv4HL0QH7Sr13X0I1YwAAApM"]
[Wed Feb 25 17:50:31.636699 2026] [:error] [pid 60387:tid 60496] [client 43.130.3.122:36158] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ7F54HL0QH7Sr13X0I1zgAAApg"]
[Wed Feb 25 21:19:32.096949 2026] [proxy_fcgi:error] [pid 20659:tid 20704] [client 87.106.209.183:58540] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Wed Feb 25 21:19:45.804155 2026] [:error] [pid 60387:tid 60483] [client 87.106.209.183:52351] [client 87.106.209.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aZ728YHL0QH7Sr13X0KICwAAAos"], referer: www.google.com
[Thu Feb 26 00:02:07.313645 2026] [:error] [pid 20658:tid 20681] [client 119.28.89.249:53028] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ8c_-u8cohhPfsAIFkNcgAAAA4"]
[Thu Feb 26 04:04:49.364812 2026] [:error] [pid 9589:tid 9655] [client 104.28.161.70:49094] [client 104.28.161.70] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aZ9V4aBuBxYiI1p-njSb-QAAAII"]
[Thu Feb 26 07:00:55.434544 2026] [:error] [pid 9589:tid 9674] [client 182.44.8.254:48079] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ9_J6BuBxYiI1p-njTwewAAAJU"]
[Thu Feb 26 07:46:24.856044 2026] [:error] [pid 3883:tid 3902] [client 124.156.179.141:45424] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ-J0OA33x90V6yYHaiCNwAAAVA"]
[Thu Feb 26 09:19:51.225953 2026] [:error] [pid 3883:tid 3903] [client 188.176.19.135:3176] [client 188.176.19.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.176.19.135, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aZ-ft-A33x90V6yYHajOmQAAAVE"]
[Thu Feb 26 09:19:51.237617 2026] [proxy_fcgi:error] [pid 3883:tid 3903] [client 188.176.19.135:3176] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:50.918700 2026] [proxy_fcgi:error] [pid 55618:tid 55623] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.009695 2026] [proxy_fcgi:error] [pid 55618:tid 55639] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.101751 2026] [proxy_fcgi:error] [pid 55618:tid 55641] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.193629 2026] [proxy_fcgi:error] [pid 55618:tid 55637] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.285465 2026] [proxy_fcgi:error] [pid 55618:tid 55636] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.377197 2026] [proxy_fcgi:error] [pid 55618:tid 55640] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.469353 2026] [proxy_fcgi:error] [pid 55618:tid 55631] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.561283 2026] [proxy_fcgi:error] [pid 55618:tid 55627] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.670059 2026] [proxy_fcgi:error] [pid 55618:tid 55638] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.761904 2026] [proxy_fcgi:error] [pid 55618:tid 55633] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.853866 2026] [proxy_fcgi:error] [pid 55618:tid 55635] [client 20.205.227.70:4600] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 11:17:51.953850 2026] [:error] [pid 55618:tid 55622] [client 20.205.227.70:4600] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-editor.php"] [unique_id "aZ-7Xx61Vrh12f_8oWREsgAAAQE"]
[Thu Feb 26 11:17:52.326351 2026] [:error] [pid 3883:tid 3908] [client 20.205.227.70:22946] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-editor.php"] [unique_id "aZ-7YOA33x90V6yYHagYhwAAAVY"]
[Thu Feb 26 11:17:52.679643 2026] [:error] [pid 25311:tid 25316] [client 20.205.227.70:18801] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-editor.php"] [unique_id "aZ-7YNfdM__yZAgJFStpEAAAAYI"]
[Thu Feb 26 11:17:53.039514 2026] [:error] [pid 3883:tid 3899] [client 20.205.227.70:22927] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-editor.php"] [unique_id "aZ-7YeA33x90V6yYHagYiAAAAU0"]
[Thu Feb 26 12:54:58.539162 2026] [:error] [pid 25311:tid 25324] [client 141.98.11.171:59122] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aZ_SItfdM__yZAgJFSu_PwAAAYo"]
[Thu Feb 26 12:54:59.654456 2026] [:error] [pid 25311:tid 25314] [client 141.98.11.171:59441] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aZ_SI9fdM__yZAgJFSu_WgAAAYA"]
[Thu Feb 26 12:57:25.553182 2026] [:error] [pid 55051:tid 55068] [client 43.157.82.252:38442] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aZ_StQmK1w2kZvh5eLHdlQAAAI4"]
[Thu Feb 26 14:34:28.770778 2026] [:error] [pid 25311:tid 25326] [client 43.130.9.111:44848] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aZ_pdNfdM__yZAgJFSsJhgAAAYw"]
[Thu Feb 26 18:49:33.611088 2026] [:error] [pid 54991:tid 55034] [client 94.124.162.12:57329] [client 94.124.162.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.124.162.12, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaAlPd4Zx-mJ8gbRB2jCFgAAAE4"]
[Thu Feb 26 18:49:33.643345 2026] [proxy_fcgi:error] [pid 54991:tid 55034] [client 94.124.162.12:57329] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:55:31.656331 2026] [:error] [pid 55122:tid 55146] [client 45.132.115.218:40835] [client 45.132.115.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.218, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaAmo4LiR0OfjFxvcN8N2gAAANY"]
[Thu Feb 26 18:55:31.690912 2026] [proxy_fcgi:error] [pid 55122:tid 55146] [client 45.132.115.218:40835] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 19:19:13.671010 2026] [:error] [pid 3883:tid 3896] [client 43.156.109.53:41758] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaAsMeA33x90V6yYHaiTIwAAAUo"]
[Thu Feb 26 20:01:58.214577 2026] [:error] [pid 3883:tid 3892] [client 194.32.120.101:32751] [client 194.32.120.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.32.120.101, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaA2NuA33x90V6yYHai4aQAAAUY"]
[Thu Feb 26 20:01:58.218660 2026] [proxy_fcgi:error] [pid 3883:tid 3892] [client 194.32.120.101:32751] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:15:36.292631 2026] [:error] [pid 3883:tid 3909] [client 36.111.67.189:34085] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaA5aOA33x90V6yYHajBUQAAAVc"]
[Thu Feb 26 20:48:55.765666 2026] [:error] [pid 55051:tid 55054] [client 43.130.60.195:53840] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaBBNwmK1w2kZvh5eLGitwAAAIA"]
[Thu Feb 26 20:57:30.919531 2026] [proxy_fcgi:error] [pid 55122:tid 55125] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:31.101555 2026] [proxy_fcgi:error] [pid 55122:tid 55147] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:31.289593 2026] [proxy_fcgi:error] [pid 55122:tid 55145] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:31.475324 2026] [proxy_fcgi:error] [pid 55122:tid 55127] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:31.658988 2026] [:error] [pid 55122:tid 55126] [client 20.41.98.49:1501] [client 20.41.98.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.41.98.49, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaBDO4LiR0OfjFxvcN8sxQAAAMI"]
[Thu Feb 26 20:57:31.663645 2026] [proxy_fcgi:error] [pid 55122:tid 55126] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:31.833286 2026] [proxy_fcgi:error] [pid 55122:tid 55134] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:32.013852 2026] [proxy_fcgi:error] [pid 55122:tid 55144] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:32.180916 2026] [proxy_fcgi:error] [pid 55122:tid 55130] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:32.345624 2026] [proxy_fcgi:error] [pid 55122:tid 55133] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:32.518453 2026] [proxy_fcgi:error] [pid 55122:tid 55124] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:32.694025 2026] [proxy_fcgi:error] [pid 55122:tid 55137] [client 20.41.98.49:1501] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 20:57:32.869515 2026] [:error] [pid 55122:tid 55139] [client 20.41.98.49:1501] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaBDPILiR0OfjFxvcN8szAAAAM8"]
[Thu Feb 26 20:57:33.595496 2026] [:error] [pid 25311:tid 25331] [client 20.41.98.49:1024] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaBDPdfdM__yZAgJFSvabgAAAZE"]
[Thu Feb 26 20:57:34.273808 2026] [:error] [pid 44444:tid 44466] [client 20.41.98.49:17743] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaBDPm2sMNmj-yekUk0SjQAAAhA"]
[Thu Feb 26 20:57:34.941835 2026] [:error] [pid 25311:tid 25317] [client 20.41.98.49:9358] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaBDPtfdM__yZAgJFSvadgAAAYM"]
[Thu Feb 26 21:06:35.420403 2026] [autoindex:error] [pid 20419:tid 20425] [client 20.78.169.245:1491] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 21:06:35.673358 2026] [proxy_fcgi:error] [pid 20419:tid 20433] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:35.797263 2026] [proxy_fcgi:error] [pid 20419:tid 20423] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:35.920219 2026] [proxy_fcgi:error] [pid 20419:tid 20429] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:36.044328 2026] [proxy_fcgi:error] [pid 20419:tid 20438] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:36.167148 2026] [proxy_fcgi:error] [pid 20419:tid 20432] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:36.291598 2026] [proxy_fcgi:error] [pid 20419:tid 20446] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:36.415534 2026] [proxy_fcgi:error] [pid 20419:tid 20442] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:36.662943 2026] [proxy_fcgi:error] [pid 20419:tid 20443] [client 20.78.169.245:1491] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 21:06:36.782486 2026] [:error] [pid 20419:tid 20437] [client 20.78.169.245:1491] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaBFXO3DVDvMfTYYUBVTPQAAAc8"]
[Thu Feb 26 21:06:37.299668 2026] [:error] [pid 55051:tid 55065] [client 20.78.169.245:1530] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaBFXQmK1w2kZvh5eLGn-AAAAIs"]
[Thu Feb 26 21:06:37.807132 2026] [:error] [pid 3883:tid 3908] [client 20.78.169.245:1985] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaBFXeA33x90V6yYHajhiwAAAVY"]
[Thu Feb 26 21:06:38.328576 2026] [:error] [pid 3883:tid 3897] [client 20.78.169.245:30732] [client 20.78.169.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2021/01/16/upload-and-download-file-using-multipart-form-over-http/"] [unique_id "aaBFXuA33x90V6yYHajhjQAAAUs"]
[Thu Feb 26 22:01:08.513273 2026] [:error] [pid 44444:tid 44461] [client 157.245.196.99:49909] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSJG2sMNmj-yekUk09AQAAAgs"]
[Thu Feb 26 22:07:33.663111 2026] [proxy_fcgi:error] [pid 25311:tid 25314] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:33.875725 2026] [proxy_fcgi:error] [pid 25311:tid 25330] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:34.320874 2026] [proxy_fcgi:error] [pid 25311:tid 25318] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:34.597305 2026] [proxy_fcgi:error] [pid 25311:tid 25323] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:35.086998 2026] [proxy_fcgi:error] [pid 25311:tid 25328] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:35.297421 2026] [proxy_fcgi:error] [pid 25311:tid 25332] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:35.510653 2026] [proxy_fcgi:error] [pid 25311:tid 25329] [client 20.151.107.14:47186] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 22:07:35.928758 2026] [:error] [pid 25311:tid 25331] [client 20.151.107.14:47186] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaBTp9fdM__yZAgJFSvo5AAAAZE"]
[Thu Feb 26 22:07:37.463263 2026] [:error] [pid 55051:tid 55069] [client 20.151.107.14:48008] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaBTqQmK1w2kZvh5eLHFzgAAAI8"]
[Thu Feb 26 22:07:38.980419 2026] [:error] [pid 20419:tid 20441] [client 20.151.107.14:47226] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaBTqu3DVDvMfTYYUBVjnQAAAdM"]
[Thu Feb 26 22:07:40.286594 2026] [:error] [pid 55618:tid 55628] [client 20.151.107.14:47180] [client 20.151.107.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaBTrB61Vrh12f_8oWQR_AAAAQc"]
[Fri Feb 27 00:59:45.171404 2026] [proxy_fcgi:error] [pid 18831:tid 18930] [client 4.205.37.160:44938] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 00:59:45.417861 2026] [proxy_fcgi:error] [pid 18831:tid 18923] [client 4.205.37.160:44938] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 01:39:03.197810 2026] [:error] [pid 20059:tid 20104] [client 43.135.138.128:52912] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaCFN5ZBS5wIa_NsqsgLeAAAAcI"]
[Fri Feb 27 02:10:21.472262 2026] [proxy_fcgi:error] [pid 19020:tid 19041] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:21.782304 2026] [proxy_fcgi:error] [pid 19020:tid 19028] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:21.991038 2026] [proxy_fcgi:error] [pid 19020:tid 19025] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:22.200586 2026] [proxy_fcgi:error] [pid 19020:tid 19033] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:22.410133 2026] [proxy_fcgi:error] [pid 19020:tid 19026] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:22.618785 2026] [proxy_fcgi:error] [pid 19020:tid 19040] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:22.914635 2026] [proxy_fcgi:error] [pid 19020:tid 19045] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:23.140195 2026] [proxy_fcgi:error] [pid 19020:tid 19039] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:23.365475 2026] [proxy_fcgi:error] [pid 19020:tid 19034] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:23.594164 2026] [proxy_fcgi:error] [pid 19020:tid 19042] [client 20.48.148.227:20479] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:10:23.798758 2026] [:error] [pid 19020:tid 19027] [client 20.48.148.227:20479] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123.php"] [unique_id "aaCMj7N3kp7wL6QzPnU3xwAAAUU"]
[Fri Feb 27 02:10:24.966212 2026] [:error] [pid 19020:tid 19025] [client 20.48.148.227:20368] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123.php"] [unique_id "aaCMkLN3kp7wL6QzPnU3zwAAAUM"]
[Fri Feb 27 02:10:26.310553 2026] [:error] [pid 18831:tid 18931] [client 20.48.148.227:20362] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123.php"] [unique_id "aaCMkv5KHTHUIuWRG2bVmQAAAFI"]
[Fri Feb 27 02:10:28.449258 2026] [:error] [pid 20059:tid 20107] [client 20.48.148.227:20369] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123.php"] [unique_id "aaCMlJZBS5wIa_NsqsgoEQAAAcU"]
[Fri Feb 27 02:10:30.348306 2026] [:error] [pid 18843:tid 18942] [client 20.48.148.227:20433] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaCMliuD2bhSYSowPs0MdgAAAQI"]
[Fri Feb 27 02:10:34.825636 2026] [:error] [pid 20059:tid 20115] [client 20.48.148.227:20352] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaCMmpZBS5wIa_NsqsgoIwAAAc0"]
[Fri Feb 27 02:10:36.370745 2026] [:error] [pid 20059:tid 20122] [client 20.48.148.227:20359] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaCMnJZBS5wIa_NsqsgoKAAAAdQ"]
[Fri Feb 27 02:10:40.286810 2026] [:error] [pid 20059:tid 20110] [client 20.48.148.227:20442] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaCMoJZBS5wIa_NsqsgoPgAAAcg"]
[Fri Feb 27 02:10:41.630104 2026] [:error] [pid 18831:tid 18934] [client 20.48.148.227:20447] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "aaCMof5KHTHUIuWRG2bVogAAAFU"]
[Fri Feb 27 02:10:43.173844 2026] [:error] [pid 18843:tid 18958] [client 20.48.148.227:20367] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "aaCMoyuD2bhSYSowPs0MhAAAARI"]
[Fri Feb 27 02:10:45.069194 2026] [:error] [pid 18818:tid 18887] [client 20.48.148.227:20455] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "aaCMpRhPgqk2SeS_W83LgAAAAAM"]
[Fri Feb 27 02:10:46.418319 2026] [:error] [pid 20059:tid 20116] [client 20.48.148.227:20355] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "aaCMppZBS5wIa_NsqsgoTwAAAc4"]
[Fri Feb 27 02:10:47.131375 2026] [:error] [pid 19020:tid 19044] [client 20.48.148.227:20463] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaCMp7N3kp7wL6QzPnU4DgAAAVY"]
[Fri Feb 27 02:10:48.737923 2026] [:error] [pid 20059:tid 20118] [client 20.48.148.227:20302] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaCMqJZBS5wIa_NsqsgoWgAAAdA"]
[Fri Feb 27 02:10:49.930592 2026] [:error] [pid 20059:tid 20113] [client 20.48.148.227:20458] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaCMqZZBS5wIa_NsqsgoYAAAAcs"]
[Fri Feb 27 02:10:50.666687 2026] [:error] [pid 19020:tid 19037] [client 20.48.148.227:20456] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaCMqrN3kp7wL6QzPnU4GwAAAU8"]
[Fri Feb 27 02:10:53.290625 2026] [:error] [pid 18818:tid 18894] [client 20.48.148.227:20477] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dom.php"] [unique_id "aaCMrRhPgqk2SeS_W83LlQAAAAo"]
[Fri Feb 27 02:10:58.377180 2026] [:error] [pid 18818:tid 18903] [client 20.48.148.227:20356] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dom.php"] [unique_id "aaCMshhPgqk2SeS_W83LpwAAABM"]
[Fri Feb 27 02:10:58.988991 2026] [:error] [pid 20059:tid 20118] [client 20.48.148.227:20353] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dom.php"] [unique_id "aaCMspZBS5wIa_NsqsgofwAAAdA"]
[Fri Feb 27 02:11:00.504383 2026] [:error] [pid 18831:tid 18932] [client 20.48.148.227:20431] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dom.php"] [unique_id "aaCMtP5KHTHUIuWRG2bVtQAAAFM"]
[Fri Feb 27 02:11:01.663205 2026] [:error] [pid 18818:tid 18904] [client 20.48.148.227:20435] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaCMtRhPgqk2SeS_W83LrgAAABQ"]
[Fri Feb 27 02:11:03.150737 2026] [:error] [pid 18843:tid 18953] [client 20.48.148.227:20382] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaCMtyuD2bhSYSowPs0MnwAAAQ0"]
[Fri Feb 27 02:11:04.701773 2026] [:error] [pid 18843:tid 18949] [client 20.48.148.227:20419] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaCMuCuD2bhSYSowPs0MpQAAAQk"]
[Fri Feb 27 02:11:05.888936 2026] [:error] [pid 18843:tid 18954] [client 20.48.148.227:20365] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaCMuSuD2bhSYSowPs0MqAAAAQ4"]
[Fri Feb 27 02:11:10.565646 2026] [:error] [pid 18831:tid 18919] [client 20.48.148.227:20476] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samiri.php"] [unique_id "aaCMvv5KHTHUIuWRG2bVxwAAAEY"]
[Fri Feb 27 02:11:11.842201 2026] [:error] [pid 18831:tid 18916] [client 20.48.148.227:20377] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samiri.php"] [unique_id "aaCMv_5KHTHUIuWRG2bVzAAAAEM"]
[Fri Feb 27 02:11:13.116058 2026] [:error] [pid 20059:tid 20107] [client 20.48.148.227:20375] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samiri.php"] [unique_id "aaCMwZZBS5wIa_NsqsgokgAAAcU"]
[Fri Feb 27 02:11:16.243204 2026] [:error] [pid 18831:tid 18926] [client 20.48.148.227:20432] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samiri.php"] [unique_id "aaCMxP5KHTHUIuWRG2bV2wAAAE0"]
[Fri Feb 27 02:11:20.955097 2026] [:error] [pid 20059:tid 20106] [client 20.48.148.227:20460] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaCMyJZBS5wIa_NsqsgowwAAAcQ"]
[Fri Feb 27 02:11:21.511903 2026] [:error] [pid 20059:tid 20117] [client 20.48.148.227:20301] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaCMyZZBS5wIa_NsqsgoyQAAAc8"]
[Fri Feb 27 02:11:23.046123 2026] [proxy_fcgi:error] [pid 19020:tid 19027] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:23.253443 2026] [proxy_fcgi:error] [pid 19020:tid 19043] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:23.462140 2026] [proxy_fcgi:error] [pid 19020:tid 19030] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:23.686921 2026] [proxy_fcgi:error] [pid 19020:tid 19037] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:23.892989 2026] [proxy_fcgi:error] [pid 19020:tid 19045] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:24.654542 2026] [proxy_fcgi:error] [pid 19020:tid 19022] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:24.861975 2026] [proxy_fcgi:error] [pid 19020:tid 19027] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:25.072181 2026] [proxy_fcgi:error] [pid 19020:tid 19024] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:25.282513 2026] [proxy_fcgi:error] [pid 19020:tid 19039] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:25.491562 2026] [proxy_fcgi:error] [pid 19020:tid 19037] [client 20.48.148.227:20410] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:11:25.788523 2026] [:error] [pid 19020:tid 19038] [client 20.48.148.227:20410] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaCMzbN3kp7wL6QzPnU4YwAAAVA"]
[Fri Feb 27 02:11:27.485892 2026] [:error] [pid 20059:tid 20110] [client 20.48.148.227:20357] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaCMz5ZBS5wIa_Nsqsgo1gAAAcg"]
[Fri Feb 27 02:11:28.963209 2026] [:error] [pid 20059:tid 20118] [client 20.48.148.227:20366] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaCM0JZBS5wIa_Nsqsgo4QAAAdA"]
[Fri Feb 27 02:11:31.997774 2026] [:error] [pid 19020:tid 19038] [client 20.48.148.227:20441] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaCM07N3kp7wL6QzPnU4cQAAAVA"]
[Fri Feb 27 02:11:33.355070 2026] [:error] [pid 18843:tid 18942] [client 20.48.148.227:20467] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaCM1SuD2bhSYSowPs0MzgAAAQI"]
[Fri Feb 27 02:11:36.056233 2026] [:error] [pid 20059:tid 20120] [client 20.48.148.227:20372] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaCM2JZBS5wIa_Nsqsgo5wAAAdI"]
[Fri Feb 27 02:11:39.276250 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:20321] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaCM25ZBS5wIa_Nsqsgo-QAAAcI"]
[Fri Feb 27 02:11:46.306866 2026] [:error] [pid 19020:tid 19026] [client 20.48.148.227:20438] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaCM4rN3kp7wL6QzPnU4pQAAAUQ"]
[Fri Feb 27 02:11:46.994561 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:20417] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaCM4pZBS5wIa_NsqsgpFAAAAcI"]
[Fri Feb 27 02:11:51.589584 2026] [:error] [pid 20059:tid 20103] [client 20.48.148.227:20459] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaCM55ZBS5wIa_NsqsgpOAAAAcE"]
[Fri Feb 27 02:11:53.618970 2026] [:error] [pid 18843:tid 18950] [client 20.48.148.227:20430] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaCM6SuD2bhSYSowPs0M8AAAAQo"]
[Fri Feb 27 02:11:54.637462 2026] [:error] [pid 19020:tid 19039] [client 20.48.148.227:20440] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaCM6rN3kp7wL6QzPnU4yAAAAVE"]
[Fri Feb 27 02:11:55.581011 2026] [:error] [pid 19020:tid 19044] [client 20.48.148.227:20432] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaCM67N3kp7wL6QzPnU4zgAAAVY"]
[Fri Feb 27 02:12:01.483079 2026] [:error] [pid 19020:tid 19043] [client 20.48.148.227:20380] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaCM8bN3kp7wL6QzPnU44wAAAVU"]
[Fri Feb 27 02:12:05.215269 2026] [:error] [pid 18831:tid 18913] [client 20.48.148.227:20384] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaCM9f5KHTHUIuWRG2bWHQAAAEA"]
[Fri Feb 27 02:12:06.930294 2026] [:error] [pid 18843:tid 18947] [client 20.48.148.227:20373] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaCM9iuD2bhSYSowPs0NBAAAAQc"]
[Fri Feb 27 02:12:09.229945 2026] [:error] [pid 19020:tid 19034] [client 20.48.148.227:20411] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaCM-bN3kp7wL6QzPnU48wAAAUw"]
[Fri Feb 27 02:12:12.199431 2026] [:error] [pid 20059:tid 20102] [client 20.48.148.227:20363] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaCM_JZBS5wIa_NsqsgpUwAAAcA"]
[Fri Feb 27 02:12:13.443363 2026] [:error] [pid 19020:tid 19036] [client 20.48.148.227:20466] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaCM_bN3kp7wL6QzPnU5BwAAAU4"]
[Fri Feb 27 02:12:17.807568 2026] [:error] [pid 19020:tid 19042] [client 20.48.148.227:20332] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaCNAbN3kp7wL6QzPnU5CwAAAVQ"]
[Fri Feb 27 02:12:18.830912 2026] [:error] [pid 19020:tid 19031] [client 20.48.148.227:20439] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaCNArN3kp7wL6QzPnU5DwAAAUk"]
[Fri Feb 27 02:12:20.412289 2026] [:error] [pid 18818:tid 18901] [client 20.48.148.227:20475] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaCNBBhPgqk2SeS_W83MAgAAABE"]
[Fri Feb 27 02:12:24.260211 2026] [:error] [pid 18843:tid 18949] [client 20.48.148.227:20469] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaCNCCuD2bhSYSowPs0NIAAAAQk"]
[Fri Feb 27 02:12:26.908893 2026] [proxy_fcgi:error] [pid 20059:tid 20107] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:27.122924 2026] [proxy_fcgi:error] [pid 20059:tid 20125] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:27.577310 2026] [proxy_fcgi:error] [pid 20059:tid 20122] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:27.792526 2026] [proxy_fcgi:error] [pid 20059:tid 20105] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:28.021483 2026] [proxy_fcgi:error] [pid 20059:tid 20113] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:28.230290 2026] [proxy_fcgi:error] [pid 20059:tid 20104] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:28.451065 2026] [proxy_fcgi:error] [pid 20059:tid 20114] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:28.669150 2026] [proxy_fcgi:error] [pid 20059:tid 20110] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:28.910291 2026] [proxy_fcgi:error] [pid 20059:tid 20117] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:29.560537 2026] [proxy_fcgi:error] [pid 20059:tid 20106] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:29.790941 2026] [proxy_fcgi:error] [pid 20059:tid 20120] [client 20.48.148.227:20461] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:12:29.996871 2026] [:error] [pid 20059:tid 20112] [client 20.48.148.227:20461] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaCNDZZBS5wIa_NsqsgpkwAAAco"]
[Fri Feb 27 02:12:31.427614 2026] [:error] [pid 18843:tid 18964] [client 20.48.148.227:20437] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaCNDyuD2bhSYSowPs0NKgAAARg"]
[Fri Feb 27 02:12:35.098976 2026] [:error] [pid 19020:tid 19025] [client 20.48.148.227:20473] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaCNE7N3kp7wL6QzPnU5MQAAAUM"]
[Fri Feb 27 02:12:50.329438 2026] [:error] [pid 20059:tid 20116] [client 20.48.148.227:20406] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaCNIpZBS5wIa_Nsqsgp7QAAAc4"]
[Fri Feb 27 02:12:51.838016 2026] [:error] [pid 18818:tid 18884] [client 20.48.148.227:20413] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaCNIxhPgqk2SeS_W83MGQAAAAA"]
[Fri Feb 27 02:12:52.563002 2026] [:error] [pid 20059:tid 20121] [client 20.48.148.227:20354] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaCNJJZBS5wIa_Nsqsgp_wAAAdM"]
[Fri Feb 27 02:12:54.871832 2026] [:error] [pid 19020:tid 19033] [client 20.48.148.227:20349] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaCNJrN3kp7wL6QzPnU5TAAAAUs"]
[Fri Feb 27 02:12:57.992791 2026] [:error] [pid 20059:tid 20115] [client 20.48.148.227:20478] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aaCNKZZBS5wIa_NsqsgqLQAAAc0"]
[Fri Feb 27 02:13:01.994990 2026] [:error] [pid 18831:tid 18919] [client 20.48.148.227:20420] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aaCNLf5KHTHUIuWRG2bWcgAAAEY"]
[Fri Feb 27 02:13:05.378372 2026] [:error] [pid 20059:tid 20107] [client 20.48.148.227:20446] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aaCNMZZBS5wIa_NsqsgqUgAAAcU"]
[Fri Feb 27 02:13:09.214501 2026] [:error] [pid 18843:tid 18940] [client 20.48.148.227:20393] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ya.php"] [unique_id "aaCNNSuD2bhSYSowPs0NXgAAAQA"]
[Fri Feb 27 02:13:11.609441 2026] [:error] [pid 20059:tid 20104] [client 20.48.148.227:20385] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aaCNN5ZBS5wIa_NsqsgqbQAAAcI"]
[Fri Feb 27 02:13:13.813601 2026] [:error] [pid 19020:tid 19023] [client 20.48.148.227:20364] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aaCNObN3kp7wL6QzPnU5gQAAAUE"]
[Fri Feb 27 02:13:15.370709 2026] [:error] [pid 20059:tid 20124] [client 20.48.148.227:20424] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aaCNO5ZBS5wIa_NsqsgqiwAAAdY"]
[Fri Feb 27 02:13:18.040049 2026] [:error] [pid 18831:tid 18921] [client 20.48.148.227:20425] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aaCNPv5KHTHUIuWRG2bWdwAAAEg"]
[Fri Feb 27 02:13:19.327790 2026] [:error] [pid 20059:tid 20122] [client 20.48.148.227:20361] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaCNP5ZBS5wIa_NsqsgqoQAAAdQ"]
[Fri Feb 27 02:13:23.761469 2026] [:error] [pid 18831:tid 18915] [client 20.48.148.227:20412] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaCNQ_5KHTHUIuWRG2bWfAAAAEI"]
[Fri Feb 27 02:13:24.798500 2026] [:error] [pid 20059:tid 20103] [client 20.48.148.227:20397] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaCNRJZBS5wIa_NsqsgqtQAAAcE"]
[Fri Feb 27 02:13:30.320699 2026] [proxy_fcgi:error] [pid 18831:tid 18925] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:30.548172 2026] [proxy_fcgi:error] [pid 18831:tid 18928] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:30.833454 2026] [proxy_fcgi:error] [pid 18831:tid 18924] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:31.042060 2026] [proxy_fcgi:error] [pid 18831:tid 18929] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:31.252875 2026] [proxy_fcgi:error] [pid 18831:tid 18922] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:31.465748 2026] [proxy_fcgi:error] [pid 18831:tid 18917] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:31.777972 2026] [proxy_fcgi:error] [pid 18831:tid 18923] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:32.148907 2026] [proxy_fcgi:error] [pid 18831:tid 18927] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:32.374097 2026] [proxy_fcgi:error] [pid 18831:tid 18932] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:32.744758 2026] [proxy_fcgi:error] [pid 18831:tid 18933] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:32.959518 2026] [proxy_fcgi:error] [pid 18831:tid 18931] [client 20.48.148.227:20288] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:13:33.419116 2026] [:error] [pid 18831:tid 18918] [client 20.48.148.227:20288] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaCNTf5KHTHUIuWRG2bWlQAAAEU"]
[Fri Feb 27 02:13:34.505683 2026] [:error] [pid 18843:tid 18959] [client 20.48.148.227:20291] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaCNTiuD2bhSYSowPs0NfQAAARM"]
[Fri Feb 27 02:13:35.234019 2026] [:error] [pid 19020:tid 19034] [client 20.48.148.227:20427] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaCNT7N3kp7wL6QzPnU5nQAAAUw"]
[Fri Feb 27 02:13:40.685476 2026] [:error] [pid 20059:tid 20121] [client 20.48.148.227:20399] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaCNVJZBS5wIa_Nsqsgq5wAAAdM"]
[Fri Feb 27 02:13:41.711367 2026] [:error] [pid 20059:tid 20118] [client 20.48.148.227:20434] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaCNVZZBS5wIa_Nsqsgq7QAAAdA"]
[Fri Feb 27 02:13:44.568692 2026] [:error] [pid 20059:tid 20115] [client 20.48.148.227:20296] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaCNWJZBS5wIa_Nsqsgq_wAAAc0"]
[Fri Feb 27 02:13:45.318259 2026] [:error] [pid 20059:tid 20120] [client 20.48.148.227:20378] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaCNWZZBS5wIa_NsqsgrBAAAAdI"]
[Fri Feb 27 02:13:48.055294 2026] [:error] [pid 20059:tid 20103] [client 20.48.148.227:20316] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaCNXJZBS5wIa_NsqsgrDQAAAcE"]
[Fri Feb 27 02:19:42.029808 2026] [proxy_fcgi:error] [pid 20059:tid 20103] [client 4.205.37.160:52115] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 02:19:42.245056 2026] [proxy_fcgi:error] [pid 20059:tid 20118] [client 4.205.37.160:52115] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:18:41.843598 2026] [proxy_fcgi:error] [pid 18818:tid 18893] [client 20.220.165.49:40847] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 03:28:49.692671 2026] [:error] [pid 20059:tid 20116] [client 119.96.24.54:55394] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaCe8ZZBS5wIa_NsqshscgAAAc4"]
[Fri Feb 27 03:34:17.999544 2026] [:error] [pid 18843:tid 18949] [client 43.130.47.33:44762] [client 43.130.47.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaCgOSuD2bhSYSowPs0xkAAAAQk"]
[Fri Feb 27 04:27:02.997508 2026] [proxy_fcgi:error] [pid 21329:tid 21393] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:03.327740 2026] [proxy_fcgi:error] [pid 21329:tid 21397] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:03.633625 2026] [proxy_fcgi:error] [pid 21329:tid 21383] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:03.938842 2026] [proxy_fcgi:error] [pid 21329:tid 21390] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:04.226287 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:04.572195 2026] [proxy_fcgi:error] [pid 21329:tid 21387] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:04.876727 2026] [proxy_fcgi:error] [pid 21329:tid 21404] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:05.154979 2026] [proxy_fcgi:error] [pid 21329:tid 21383] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:05.434325 2026] [proxy_fcgi:error] [pid 21329:tid 21391] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:05.706965 2026] [proxy_fcgi:error] [pid 21329:tid 21402] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:06.227622 2026] [proxy_fcgi:error] [pid 21329:tid 21388] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:06.512471 2026] [proxy_fcgi:error] [pid 21329:tid 21400] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:06.782455 2026] [proxy_fcgi:error] [pid 21329:tid 21387] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:07.030184 2026] [proxy_fcgi:error] [pid 21329:tid 21398] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:07.270197 2026] [proxy_fcgi:error] [pid 21329:tid 21386] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:07.519475 2026] [proxy_fcgi:error] [pid 21329:tid 21395] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:07.785066 2026] [proxy_fcgi:error] [pid 21329:tid 21397] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:08.106732 2026] [proxy_fcgi:error] [pid 21329:tid 21392] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:08.327804 2026] [proxy_fcgi:error] [pid 21329:tid 21404] [client 209.87.169.175:62491] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:11.974777 2026] [:error] [pid 21329:tid 21406] [client 209.87.169.175:62491] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaCsn5vQWnde-MjcQ1E9egAAAVc"]
[Fri Feb 27 04:27:13.228076 2026] [:error] [pid 5365:tid 5389] [client 185.198.240.150:20457] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaCsoZYAa8J3tYxdG3zg3QAAARY"]
[Fri Feb 27 04:27:14.543509 2026] [proxy_fcgi:error] [pid 3973:tid 3991] [client 185.198.240.136:48955] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:15.337327 2026] [:error] [pid 3973:tid 3986] [client 185.198.240.136:48955] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaCso4JZsftwqmUaaLPqUAAAAAM"]
[Fri Feb 27 04:27:16.400927 2026] [proxy_fcgi:error] [pid 5365:tid 5371] [client 173.239.214.26:55855] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:16.637063 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.26:55855] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaCspJYAa8J3tYxdG3zhCQAAARQ"]
[Fri Feb 27 04:27:17.382968 2026] [proxy_fcgi:error] [pid 3974:tid 4038] [client 173.239.214.10:64345] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:18.706334 2026] [:error] [pid 3974:tid 4047] [client 173.239.214.10:64345] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaCspnp-fQtdOYjkuFvIvwAAAEo"]
[Fri Feb 27 04:27:19.531501 2026] [:error] [pid 3974:tid 4033] [client 185.198.240.156:51403] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaCsp3p-fQtdOYjkuFvIyQAAAEA"]
[Fri Feb 27 04:27:20.101864 2026] [:error] [pid 21329:tid 21405] [client 173.239.214.17:23533] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaCsqJvQWnde-MjcQ1E90QAAAVY"]
[Fri Feb 27 04:27:20.629948 2026] [:error] [pid 3974:tid 4033] [client 173.239.214.6:49913] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaCsqHp-fQtdOYjkuFvI2gAAAEA"]
[Fri Feb 27 04:27:21.111523 2026] [:error] [pid 21329:tid 21400] [client 185.198.240.140:49545] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaCsqZvQWnde-MjcQ1E93QAAAVE"]
[Fri Feb 27 04:27:21.604731 2026] [:error] [pid 5365:tid 5384] [client 173.239.214.14:35241] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaCsqZYAa8J3tYxdG3zhTQAAARE"]
[Fri Feb 27 04:27:22.296372 2026] [:error] [pid 3973:tid 4001] [client 209.87.169.175:36209] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaCsqoJZsftwqmUaaLPqkAAAABI"]
[Fri Feb 27 04:27:22.798771 2026] [proxy_fcgi:error] [pid 5365:tid 5391] [client 185.198.240.138:47757] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:23.319501 2026] [:error] [pid 5365:tid 5384] [client 185.198.240.138:47757] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aaCsq5YAa8J3tYxdG3zhZwAAARE"]
[Fri Feb 27 04:27:23.860772 2026] [proxy_fcgi:error] [pid 5365:tid 5380] [client 173.239.214.27:29215] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:24.337830 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.27:29215] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaCsrJYAa8J3tYxdG3zhiAAAAQI"]
[Fri Feb 27 04:27:25.075575 2026] [:error] [pid 4081:tid 4088] [client 173.239.214.2:61941] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaCsrQ55mnr35z8h7t3LxAAAAMU"]
[Fri Feb 27 04:27:25.615252 2026] [proxy_fcgi:error] [pid 4081:tid 4085] [client 173.239.214.15:51235] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:25.854307 2026] [:error] [pid 4081:tid 4083] [client 173.239.214.15:51235] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaCsrQ55mnr35z8h7t3L2QAAAMA"]
[Fri Feb 27 04:27:26.332773 2026] [proxy_fcgi:error] [pid 5365:tid 5370] [client 173.239.214.19:37579] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:27.072174 2026] [proxy_fcgi:error] [pid 5365:tid 5367] [client 173.239.214.19:37579] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:27.839919 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.19:37579] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaCsr5YAa8J3tYxdG3zhzwAAARc"]
[Fri Feb 27 04:27:28.331542 2026] [proxy_fcgi:error] [pid 5365:tid 5390] [client 173.239.214.24:57111] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:28.592766 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.24:57111] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaCssJYAa8J3tYxdG3zh3wAAARg"]
[Fri Feb 27 04:27:29.221471 2026] [proxy_fcgi:error] [pid 4081:tid 4095] [client 173.239.214.16:50345] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:29.806900 2026] [:error] [pid 4081:tid 4086] [client 173.239.214.16:50345] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaCssQ55mnr35z8h7t3MEwAAAMM"]
[Fri Feb 27 04:27:30.595981 2026] [:error] [pid 3975:tid 4037] [client 173.239.214.24:57479] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaCsshMVp0-T2hD76b2sOgAAAJg"]
[Fri Feb 27 04:27:31.548463 2026] [proxy_fcgi:error] [pid 3974:tid 4047] [client 173.239.214.15:32503] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:31.780444 2026] [proxy_fcgi:error] [pid 3974:tid 4050] [client 173.239.214.15:32503] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:32.294786 2026] [:error] [pid 3974:tid 4038] [client 173.239.214.15:32503] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaCstHp-fQtdOYjkuFvJDQAAAEI"]
[Fri Feb 27 04:27:33.085925 2026] [:error] [pid 21329:tid 21398] [client 185.198.240.151:57073] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaCstZvQWnde-MjcQ1E-cgAAAU8"]
[Fri Feb 27 04:27:33.797820 2026] [:error] [pid 5365:tid 5367] [client 185.198.240.144:47993] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaCstZYAa8J3tYxdG3zigAAAAQA"]
[Fri Feb 27 04:27:34.283330 2026] [:error] [pid 21329:tid 21386] [client 185.198.240.154:42579] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaCstpvQWnde-MjcQ1E-hQAAAUM"]
[Fri Feb 27 04:27:34.778530 2026] [:error] [pid 3973:tid 3987] [client 185.198.240.139:63199] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCstoJZsftwqmUaaLPrIwAAAAQ"]
[Fri Feb 27 04:27:35.883461 2026] [proxy_fcgi:error] [pid 3974:tid 4054] [client 173.239.214.21:42587] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:36.127221 2026] [:error] [pid 3974:tid 4040] [client 173.239.214.21:42587] [client 173.239.214.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaCsuHp-fQtdOYjkuFvJJwAAAEM"]
[Fri Feb 27 04:27:39.872924 2026] [:error] [pid 3973:tid 3994] [client 173.239.214.9:35705] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaCsu4JZsftwqmUaaLPrYgAAAAs"]
[Fri Feb 27 04:27:40.319353 2026] [:error] [pid 5365:tid 5373] [client 185.198.240.139:36769] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCsvJYAa8J3tYxdG3zi5gAAAQY"]
[Fri Feb 27 04:27:41.268780 2026] [proxy_fcgi:error] [pid 4081:tid 4106] [client 185.198.240.147:59741] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:41.851499 2026] [proxy_fcgi:error] [pid 4081:tid 4087] [client 185.198.240.147:59741] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:42.793785 2026] [:error] [pid 4081:tid 4103] [client 185.198.240.147:59741] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aaCsvg55mnr35z8h7t3MpQAAANQ"]
[Fri Feb 27 04:27:44.007572 2026] [:error] [pid 4081:tid 4093] [client 173.239.214.14:65053] [client 173.239.214.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.14, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaCswA55mnr35z8h7t3MsgAAAMo"]
[Fri Feb 27 04:27:44.270485 2026] [proxy_fcgi:error] [pid 4081:tid 4088] [client 173.239.214.14:65053] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:45.472441 2026] [proxy_fcgi:error] [pid 4081:tid 4101] [client 173.239.214.14:65053] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:45.734445 2026] [proxy_fcgi:error] [pid 4081:tid 4104] [client 173.239.214.14:65053] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:47.106826 2026] [:error] [pid 4081:tid 4100] [client 173.239.214.14:65053] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaCsww55mnr35z8h7t3M3QAAANE"]
[Fri Feb 27 04:27:47.964974 2026] [proxy_fcgi:error] [pid 5365:tid 5391] [client 173.239.214.24:49015] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:48.217160 2026] [:error] [pid 5365:tid 5368] [client 173.239.214.24:49015] [client 173.239.214.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.24, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaCsxJYAa8J3tYxdG3zj5wAAAQE"]
[Fri Feb 27 04:27:48.849959 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.24:49015] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aaCsxJYAa8J3tYxdG3zkBAAAARc"]
[Fri Feb 27 04:27:50.504283 2026] [proxy_fcgi:error] [pid 5365:tid 5386] [client 185.198.240.153:55693] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:51.063074 2026] [proxy_fcgi:error] [pid 5365:tid 5386] [client 185.198.240.153:55693] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:51.604131 2026] [:error] [pid 5365:tid 5372] [client 185.198.240.153:55693] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaCsx5YAa8J3tYxdG3zkfAAAAQU"]
[Fri Feb 27 04:27:52.181452 2026] [proxy_fcgi:error] [pid 5365:tid 5372] [client 45.131.195.210:62531] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:52.944469 2026] [proxy_fcgi:error] [pid 5365:tid 5379] [client 45.131.195.210:62531] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:53.433445 2026] [proxy_fcgi:error] [pid 5365:tid 5367] [client 45.131.195.210:62531] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:53.950470 2026] [proxy_fcgi:error] [pid 5365:tid 5388] [client 45.131.195.210:62531] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:54.181689 2026] [:error] [pid 5365:tid 5384] [client 45.131.195.210:62531] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaCsypYAa8J3tYxdG3zk-gAAARE"]
[Fri Feb 27 04:27:54.656459 2026] [proxy_fcgi:error] [pid 4081:tid 4098] [client 45.131.195.208:40117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:54.965465 2026] [proxy_fcgi:error] [pid 4081:tid 4091] [client 45.131.195.208:40117] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:55.209333 2026] [:error] [pid 4081:tid 4092] [client 45.131.195.208:40117] [client 45.131.195.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaCsyw55mnr35z8h7t3NOwAAAMk"]
[Fri Feb 27 04:27:56.379443 2026] [proxy_fcgi:error] [pid 21329:tid 21397] [client 173.239.214.198:50269] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:27:56.847098 2026] [:error] [pid 21329:tid 21383] [client 173.239.214.198:50269] [client 173.239.214.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.198, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaCszJvQWnde-MjcQ1E_nwAAAUA"]
[Fri Feb 27 04:27:57.085629 2026] [:error] [pid 21329:tid 21389] [client 173.239.214.198:50269] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaCszZvQWnde-MjcQ1E_ogAAAUY"]
[Fri Feb 27 04:28:00.267824 2026] [proxy_fcgi:error] [pid 5365:tid 5383] [client 173.239.214.28:50473] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:01.548469 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 173.239.214.28:50473] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:02.119460 2026] [proxy_fcgi:error] [pid 5365:tid 5382] [client 173.239.214.28:50473] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:02.365677 2026] [:error] [pid 5365:tid 5377] [client 173.239.214.28:50473] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaCs0pYAa8J3tYxdG3zmcwAAAQo"]
[Fri Feb 27 04:28:02.838747 2026] [proxy_fcgi:error] [pid 4081:tid 4088] [client 185.198.240.154:20165] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:03.638490 2026] [:error] [pid 4081:tid 4087] [client 185.198.240.154:20165] [client 185.198.240.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.154, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaCs0w55mnr35z8h7t3NeAAAAMQ"]
[Fri Feb 27 04:28:03.887112 2026] [proxy_fcgi:error] [pid 4081:tid 4104] [client 185.198.240.154:20165] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:04.128436 2026] [proxy_fcgi:error] [pid 4081:tid 4083] [client 185.198.240.154:20165] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:04.396476 2026] [proxy_fcgi:error] [pid 4081:tid 4098] [client 185.198.240.154:20165] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:04.670656 2026] [:error] [pid 4081:tid 4092] [client 185.198.240.154:20165] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaCs1A55mnr35z8h7t3NjQAAAMk"]
[Fri Feb 27 04:28:05.180687 2026] [proxy_fcgi:error] [pid 3973:tid 3992] [client 185.198.240.150:56383] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:05.429761 2026] [:error] [pid 3973:tid 3989] [client 185.198.240.150:56383] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aaCs1YJZsftwqmUaaLPsUQAAAAY"]
[Fri Feb 27 04:28:09.954447 2026] [proxy_fcgi:error] [pid 5365:tid 5369] [client 173.239.214.15:46895] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:10.182335 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.15:46895] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaCs2pYAa8J3tYxdG3znUwAAARQ"]
[Fri Feb 27 04:28:11.118114 2026] [proxy_fcgi:error] [pid 3973:tid 4002] [client 185.198.240.147:60843] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:11.360274 2026] [:error] [pid 3973:tid 4001] [client 185.198.240.147:60843] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaCs24JZsftwqmUaaLPs1gAAABI"]
[Fri Feb 27 04:28:11.844515 2026] [:error] [pid 3975:tid 4013] [client 185.198.240.155:30013] [client 185.198.240.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaCs2xMVp0-T2hD76b2udQAAAIM"]
[Fri Feb 27 04:28:12.358450 2026] [proxy_fcgi:error] [pid 4081:tid 4095] [client 173.239.214.27:26997] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:12.583464 2026] [proxy_fcgi:error] [pid 4081:tid 4083] [client 173.239.214.27:26997] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:13.539433 2026] [:error] [pid 4081:tid 4092] [client 173.239.214.27:26997] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaCs3Q55mnr35z8h7t3OOgAAAMk"]
[Fri Feb 27 04:28:14.298235 2026] [:error] [pid 4081:tid 4093] [client 185.198.240.154:46105] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaCs3g55mnr35z8h7t3OTgAAAMo"]
[Fri Feb 27 04:28:14.834466 2026] [proxy_fcgi:error] [pid 21329:tid 21401] [client 185.198.240.153:41245] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:15.548473 2026] [:error] [pid 21329:tid 21386] [client 185.198.240.153:41245] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aaCs35vQWnde-MjcQ1FA5gAAAUM"]
[Fri Feb 27 04:28:16.058439 2026] [proxy_fcgi:error] [pid 5365:tid 5367] [client 185.198.240.145:25495] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:16.552497 2026] [proxy_fcgi:error] [pid 5365:tid 5370] [client 185.198.240.145:25495] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:16.785285 2026] [:error] [pid 5365:tid 5375] [client 185.198.240.145:25495] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaCs4JYAa8J3tYxdG3zn2gAAAQg"]
[Fri Feb 27 04:28:17.321465 2026] [proxy_fcgi:error] [pid 21329:tid 21384] [client 173.239.214.21:49069] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:17.930531 2026] [:error] [pid 21329:tid 21387] [client 173.239.214.21:49069] [client 173.239.214.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aaCs4ZvQWnde-MjcQ1FBIwAAAUQ"]
[Fri Feb 27 04:28:18.438974 2026] [proxy_fcgi:error] [pid 5365:tid 5380] [client 185.198.240.150:24285] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:19.203880 2026] [:error] [pid 5365:tid 5387] [client 185.198.240.150:24285] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaCs45YAa8J3tYxdG3zn-gAAARQ"]
[Fri Feb 27 04:28:23.901474 2026] [proxy_fcgi:error] [pid 3973:tid 3996] [client 173.239.214.17:56105] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:24.366438 2026] [proxy_fcgi:error] [pid 3973:tid 3990] [client 173.239.214.17:56105] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:24.640048 2026] [proxy_fcgi:error] [pid 3973:tid 4004] [client 173.239.214.17:56105] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:25.177790 2026] [proxy_fcgi:error] [pid 3973:tid 3991] [client 173.239.214.17:56105] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:25.412895 2026] [:error] [pid 3973:tid 3987] [client 173.239.214.17:56105] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaCs6YJZsftwqmUaaLPtxwAAAAQ"]
[Fri Feb 27 04:28:25.914153 2026] [:error] [pid 5365:tid 5382] [client 173.239.214.25:56277] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaCs6ZYAa8J3tYxdG3zo6AAAAQ8"]
[Fri Feb 27 04:28:26.451288 2026] [:error] [pid 5365:tid 5376] [client 173.239.214.7:29171] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaCs6pYAa8J3tYxdG3zpEgAAAQk"]
[Fri Feb 27 04:28:26.904565 2026] [:error] [pid 5365:tid 5388] [client 209.87.169.175:43787] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaCs6pYAa8J3tYxdG3zpOAAAARU"]
[Fri Feb 27 04:28:27.437879 2026] [proxy_fcgi:error] [pid 3975:tid 4017] [client 185.198.240.145:53785] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:27.719239 2026] [:error] [pid 3975:tid 4014] [client 185.198.240.145:53785] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaCs6xMVp0-T2hD76b2vegAAAIQ"]
[Fri Feb 27 04:28:28.192869 2026] [:error] [pid 5365:tid 5377] [client 173.239.214.9:59427] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCs7JYAa8J3tYxdG3zpbQAAAQo"]
[Fri Feb 27 04:28:28.728458 2026] [proxy_fcgi:error] [pid 5365:tid 5388] [client 173.239.214.15:49727] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:29.252304 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.15:49727] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaCs7ZYAa8J3tYxdG3zphwAAAQA"]
[Fri Feb 27 04:28:29.852797 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.14:26455] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaCs7ZYAa8J3tYxdG3zpkgAAARg"]
[Fri Feb 27 04:28:30.397888 2026] [:error] [pid 5365:tid 5378] [client 173.239.214.16:41993] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaCs7pYAa8J3tYxdG3zpsQAAAQs"]
[Fri Feb 27 04:28:30.887187 2026] [:error] [pid 5365:tid 5377] [client 173.239.214.18:20655] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaCs7pYAa8J3tYxdG3zpywAAAQo"]
[Fri Feb 27 04:28:31.759500 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.25:20433] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaCs75YAa8J3tYxdG3zqAgAAARg"]
[Fri Feb 27 04:28:32.762486 2026] [:error] [pid 3974:tid 4050] [client 185.198.240.156:33459] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaCs8Hp-fQtdOYjkuFvMlwAAAE0"]
[Fri Feb 27 04:28:33.322581 2026] [proxy_fcgi:error] [pid 21329:tid 21387] [client 173.239.214.25:48429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:34.096455 2026] [proxy_fcgi:error] [pid 21329:tid 21392] [client 173.239.214.25:48429] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:34.331782 2026] [:error] [pid 21329:tid 21396] [client 173.239.214.25:48429] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaCs8pvQWnde-MjcQ1FCsQAAAU0"]
[Fri Feb 27 04:28:35.102465 2026] [proxy_fcgi:error] [pid 5365:tid 5371] [client 185.198.240.155:62411] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:35.416082 2026] [proxy_fcgi:error] [pid 5365:tid 5386] [client 185.198.240.155:62411] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:36.443953 2026] [proxy_fcgi:error] [pid 5365:tid 5379] [client 185.198.240.155:62411] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:37.046149 2026] [:error] [pid 5365:tid 5387] [client 185.198.240.141:20195] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaCs9ZYAa8J3tYxdG3zrCAAAARQ"]
[Fri Feb 27 04:28:37.574209 2026] [proxy_fcgi:error] [pid 4081:tid 4090] [client 185.198.240.138:35155] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:38.632758 2026] [:error] [pid 4081:tid 4090] [client 185.198.240.138:35155] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaCs9g55mnr35z8h7t3P0QAAAMc"]
[Fri Feb 27 04:28:39.161622 2026] [:error] [pid 4081:tid 4099] [client 185.198.240.142:62329] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaCs9w55mnr35z8h7t3P1wAAANA"]
[Fri Feb 27 04:28:40.847274 2026] [:error] [pid 4081:tid 4104] [client 173.239.214.2:22679] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCs-A55mnr35z8h7t3P7AAAANU"]
[Fri Feb 27 04:28:41.919629 2026] [proxy_fcgi:error] [pid 3975:tid 4025] [client 185.198.240.147:65315] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:42.203488 2026] [proxy_fcgi:error] [pid 3975:tid 4037] [client 185.198.240.147:65315] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:42.442439 2026] [proxy_fcgi:error] [pid 3975:tid 4022] [client 185.198.240.147:65315] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:42.723336 2026] [proxy_fcgi:error] [pid 3975:tid 4011] [client 185.198.240.147:65315] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:44.034876 2026] [:error] [pid 3975:tid 4014] [client 185.198.240.147:65315] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaCs_BMVp0-T2hD76b2wXAAAAIQ"]
[Fri Feb 27 04:28:44.491078 2026] [:error] [pid 3973:tid 3992] [client 185.198.240.135:38573] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaCs_IJZsftwqmUaaLPuVAAAAAk"]
[Fri Feb 27 04:28:44.978136 2026] [:error] [pid 3974:tid 4049] [client 173.239.214.10:62623] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaCs_Hp-fQtdOYjkuFvNOQAAAEw"]
[Fri Feb 27 04:28:45.512070 2026] [:error] [pid 5365:tid 5377] [client 185.198.240.138:47901] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaCs_ZYAa8J3tYxdG3zsGQAAAQo"]
[Fri Feb 27 04:28:46.026912 2026] [:error] [pid 3974:tid 4054] [client 173.239.214.24:58707] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaCs_np-fQtdOYjkuFvNSQAAAFE"]
[Fri Feb 27 04:28:46.552653 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.16:52347] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaCs_pYAa8J3tYxdG3zsRAAAARg"]
[Fri Feb 27 04:28:48.438451 2026] [:error] [pid 5365:tid 5389] [client 173.239.214.14:59079] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaCtAJYAa8J3tYxdG3zstAAAARY"]
[Fri Feb 27 04:28:48.954605 2026] [:error] [pid 21329:tid 21404] [client 173.239.214.17:42779] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaCtAJvQWnde-MjcQ1FELAAAAVU"]
[Fri Feb 27 04:28:49.527859 2026] [:error] [pid 21329:tid 21404] [client 173.239.214.15:44065] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaCtAZvQWnde-MjcQ1FENAAAAVU"]
[Fri Feb 27 04:28:50.118151 2026] [:error] [pid 5365:tid 5367] [client 185.198.240.155:47501] [client 185.198.240.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaCtApYAa8J3tYxdG3ztBwAAAQA"]
[Fri Feb 27 04:28:51.210609 2026] [:error] [pid 21329:tid 21397] [client 173.239.214.21:45811] [client 173.239.214.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaCtA5vQWnde-MjcQ1FEYAAAAU4"]
[Fri Feb 27 04:28:52.077174 2026] [:error] [pid 3974:tid 4057] [client 173.239.214.12:20187] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaCtBHp-fQtdOYjkuFvNngAAAFQ"]
[Fri Feb 27 04:28:52.598496 2026] [proxy_fcgi:error] [pid 5365:tid 5390] [client 173.239.214.12:53563] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:53.196052 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.12:53563] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaCtBZYAa8J3tYxdG3zteAAAARg"]
[Fri Feb 27 04:28:54.269982 2026] [:error] [pid 4081:tid 4101] [client 185.198.240.154:42945] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaCtBg55mnr35z8h7t3QtgAAANI"]
[Fri Feb 27 04:28:54.758139 2026] [proxy_fcgi:error] [pid 3975:tid 4017] [client 173.239.214.14:27143] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:55.279463 2026] [proxy_fcgi:error] [pid 3975:tid 4016] [client 173.239.214.14:27143] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:55.513487 2026] [:error] [pid 3975:tid 4017] [client 173.239.214.14:27143] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaCtBxMVp0-T2hD76b2w9wAAAIc"]
[Fri Feb 27 04:28:56.437459 2026] [proxy_fcgi:error] [pid 3973:tid 3984] [client 185.198.240.156:52337] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:56.688453 2026] [proxy_fcgi:error] [pid 3973:tid 4007] [client 185.198.240.156:52337] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:56.977444 2026] [proxy_fcgi:error] [pid 3973:tid 3994] [client 185.198.240.156:52337] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:57.274901 2026] [:error] [pid 3973:tid 3988] [client 185.198.240.156:52337] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaCtCYJZsftwqmUaaLPvBwAAAAU"]
[Fri Feb 27 04:29:35.902053 2026] [:error] [pid 5365:tid 5385] [client 185.198.240.142:25789] [client 185.198.240.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaCtL5YAa8J3tYxdG3z1SAAAARI"]
[Fri Feb 27 04:29:46.093300 2026] [:error] [pid 3973:tid 3987] [client 185.198.240.138:22149] [client 185.198.240.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aaCtOoJZsftwqmUaaLPxfQAAAAQ"]
[Fri Feb 27 04:29:46.634998 2026] [:error] [pid 5365:tid 5369] [client 185.198.240.138:51871] [client 185.198.240.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aaCtOpYAa8J3tYxdG3z20gAAAQI"]
[Fri Feb 27 07:05:05.022562 2026] [proxy_fcgi:error] [pid 3974:tid 4052] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:05.167210 2026] [proxy_fcgi:error] [pid 3974:tid 4061] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:05.461847 2026] [proxy_fcgi:error] [pid 3974:tid 4040] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:05.608083 2026] [proxy_fcgi:error] [pid 3974:tid 4053] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:05.896968 2026] [proxy_fcgi:error] [pid 3974:tid 4042] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:06.052425 2026] [proxy_fcgi:error] [pid 3974:tid 4047] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:06.196798 2026] [proxy_fcgi:error] [pid 3974:tid 4051] [client 40.80.89.74:18237] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:05:06.480876 2026] [:error] [pid 3974:tid 4049] [client 40.80.89.74:18237] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaDRonp-fQtdOYjkuFvoywAAAEw"]
[Fri Feb 27 07:05:07.056557 2026] [:error] [pid 42563:tid 42590] [client 40.80.89.74:9883] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaDRo3KL5BclZy73IRHltgAAAdQ"]
[Fri Feb 27 07:05:07.657075 2026] [:error] [pid 42435:tid 42458] [client 40.80.89.74:18181] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaDRox5hHLnaukp_y9-h8gAAAZI"]
[Fri Feb 27 07:05:08.260931 2026] [:error] [pid 5365:tid 5375] [client 40.80.89.74:18198] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaDRpJYAa8J3tYxdG3xzjQAAAQg"]
[Fri Feb 27 08:03:03.628916 2026] [:error] [pid 5365:tid 5377] [client 42.117.234.103:29859] [client 42.117.234.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.117.234.103, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaDfN5YAa8J3tYxdG3ydkAAAAQo"]
[Fri Feb 27 08:03:03.641424 2026] [proxy_fcgi:error] [pid 5365:tid 5377] [client 42.117.234.103:29859] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 09:13:52.338224 2026] [:error] [pid 54231:tid 54244] [client 43.159.128.237:33648] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaDv0OTvb5AeyJCdY7As5AAAAEo"]
[Fri Feb 27 09:47:24.205592 2026] [:error] [pid 62998:tid 63021] [client 106.54.62.156:60278] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaD3rFQeueXZDUmoLonxEwAAARM"]
[Fri Feb 27 10:57:40.613131 2026] [:error] [pid 56075:tid 56095] [client 43.157.188.74:60038] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaEIJMKBhrfI6KNv9RhllQAAABE"]
[Fri Feb 27 11:00:29.690314 2026] [proxy_fcgi:error] [pid 54231:tid 54239] [client 64.64.108.52:53765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:30.564289 2026] [proxy_fcgi:error] [pid 54231:tid 54238] [client 64.64.108.52:53765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:31.151500 2026] [proxy_fcgi:error] [pid 54231:tid 54241] [client 64.64.108.52:53765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:31.659945 2026] [proxy_fcgi:error] [pid 54231:tid 54237] [client 64.64.108.52:53765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:32.472472 2026] [proxy_fcgi:error] [pid 54231:tid 54254] [client 64.64.108.52:53765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:32.967545 2026] [proxy_fcgi:error] [pid 54231:tid 54236] [client 64.64.108.52:53765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:33.556484 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.52:53765] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEI0eTvb5AeyJCdY7BZgQAAAE0"]
[Fri Feb 27 11:00:34.485998 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.30:32985] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEI0lQeueXZDUmoLokulQAAAQ8"]
[Fri Feb 27 11:00:35.481514 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.30:56129] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEI0_nSUDZue59Px9tJLgAAAVA"]
[Fri Feb 27 11:00:37.049402 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.27:26205] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEI1cKBhrfI6KNv9Rhn9QAAABM"]
[Fri Feb 27 11:00:37.980014 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.39:25039] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEI1VQeueXZDUmoLokuqQAAARI"]
[Fri Feb 27 11:00:39.957852 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 64.64.108.58:23293] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:41.438955 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.58:23293] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:41.935502 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.58:23293] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEI2fnSUDZue59Px9tJfgAAAU8"]
[Fri Feb 27 11:00:43.097227 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.29:63041] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEI28KBhrfI6KNv9RhoCgAAAAQ"]
[Fri Feb 27 11:00:44.560504 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:45.042590 2026] [proxy_fcgi:error] [pid 54103:tid 54187] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:45.543498 2026] [proxy_fcgi:error] [pid 54103:tid 54177] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:46.042486 2026] [proxy_fcgi:error] [pid 54103:tid 54183] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:46.546305 2026] [proxy_fcgi:error] [pid 54103:tid 54176] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:48.624659 2026] [proxy_fcgi:error] [pid 54103:tid 54190] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:49.159492 2026] [proxy_fcgi:error] [pid 54103:tid 54193] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:49.650441 2026] [proxy_fcgi:error] [pid 54103:tid 54182] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:50.145456 2026] [proxy_fcgi:error] [pid 54103:tid 54187] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:50.646757 2026] [proxy_fcgi:error] [pid 54103:tid 54183] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:51.153197 2026] [proxy_fcgi:error] [pid 54103:tid 54191] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:51.744053 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:52.279518 2026] [proxy_fcgi:error] [pid 54103:tid 54184] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:52.859464 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:53.359406 2026] [proxy_fcgi:error] [pid 54103:tid 54194] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:53.974453 2026] [proxy_fcgi:error] [pid 54103:tid 54179] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:54.452460 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:54.953870 2026] [proxy_fcgi:error] [pid 54103:tid 54183] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:55.446688 2026] [proxy_fcgi:error] [pid 54103:tid 54191] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:55.944607 2026] [proxy_fcgi:error] [pid 54103:tid 54184] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:56.458028 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:57.042649 2026] [proxy_fcgi:error] [pid 54103:tid 54181] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:57.551472 2026] [proxy_fcgi:error] [pid 54103:tid 54187] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:58.046506 2026] [proxy_fcgi:error] [pid 54103:tid 54189] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:58.545477 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:59.044890 2026] [proxy_fcgi:error] [pid 54103:tid 54180] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:00:59.556455 2026] [proxy_fcgi:error] [pid 54103:tid 54175] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:00.044480 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:00.639842 2026] [proxy_fcgi:error] [pid 54103:tid 54190] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:01.148828 2026] [proxy_fcgi:error] [pid 54103:tid 54185] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:01.565464 2026] [proxy_fcgi:error] [pid 54103:tid 54188] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:02.087205 2026] [proxy_fcgi:error] [pid 54103:tid 54189] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:02.554911 2026] [proxy_fcgi:error] [pid 54103:tid 54176] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:03.055919 2026] [:error] [pid 54103:tid 54193] [client 64.64.108.49:21283] [client 64.64.108.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.49, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaEI7-vG4MPCmE0B2sAVFQAAANY"]
[Fri Feb 27 11:01:03.059878 2026] [proxy_fcgi:error] [pid 54103:tid 54193] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:04.057285 2026] [proxy_fcgi:error] [pid 54103:tid 54182] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:04.539001 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 64.64.108.49:21283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:05.041197 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.49:21283] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aaEI8evG4MPCmE0B2sAVHQAAAMc"]
[Fri Feb 27 11:01:05.996787 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:06.538582 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:07.441812 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:07.951466 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:08.437602 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:08.852960 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:09.445871 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:09.947859 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:10.456577 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:11.055468 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:11.549357 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:13.454810 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:13.937721 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:14.354480 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:15.753456 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:16.250955 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:16.745149 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:17.276496 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:17.740439 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:18.243163 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:18.751431 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:19.635229 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:20.143151 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:20.651450 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:21.060114 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:21.544030 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:22.049464 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:22.543450 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:23.043893 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 64.64.108.37:26033] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:23.555517 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.37:26033] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/lx.php"] [unique_id "aaEJA_nSUDZue59Px9tLQgAAAUQ"]
[Fri Feb 27 11:01:25.739756 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:26.241461 2026] [proxy_fcgi:error] [pid 54101:tid 54128] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:26.660622 2026] [proxy_fcgi:error] [pid 54101:tid 54127] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:27.239602 2026] [proxy_fcgi:error] [pid 54101:tid 54121] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:27.654452 2026] [proxy_fcgi:error] [pid 54101:tid 54126] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:28.148491 2026] [proxy_fcgi:error] [pid 54101:tid 54117] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:28.663366 2026] [proxy_fcgi:error] [pid 54101:tid 54124] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:29.256323 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:29.742490 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:30.245017 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:30.745453 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:31.254449 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:31.742478 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:32.813380 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:33.258154 2026] [proxy_fcgi:error] [pid 54101:tid 54129] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:33.748486 2026] [proxy_fcgi:error] [pid 54101:tid 54119] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:34.157256 2026] [proxy_fcgi:error] [pid 54101:tid 54121] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:34.656403 2026] [proxy_fcgi:error] [pid 54101:tid 54122] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:35.069982 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:35.539827 2026] [proxy_fcgi:error] [pid 54101:tid 54124] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:36.339464 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:36.877498 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:37.354876 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:37.856488 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:38.260677 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:38.744851 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:39.168456 2026] [proxy_fcgi:error] [pid 54101:tid 54114] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:39.735487 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:40.257738 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:41.142208 2026] [proxy_fcgi:error] [pid 54101:tid 54129] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:41.760832 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:42.154539 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:43.148454 2026] [proxy_fcgi:error] [pid 54101:tid 54128] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:45.959454 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:46.358432 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:46.853840 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:47.343901 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.53:29595] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:47.835636 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.53:29595] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaEJG1Y5qgRktcYTGFvQqAAAAcY"]
[Fri Feb 27 11:01:48.892699 2026] [:error] [pid 56075:tid 56099] [client 64.64.108.45:29823] [client 64.64.108.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.64.108.45, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaEJHMKBhrfI6KNv9RhqSAAAABU"]
[Fri Feb 27 11:01:48.900456 2026] [proxy_fcgi:error] [pid 56075:tid 56099] [client 64.64.108.45:29823] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:49.348489 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.45:29823] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:50.355744 2026] [:error] [pid 56075:tid 56079] [client 64.64.108.45:29823] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaEJHsKBhrfI6KNv9RhqagAAAAI"]
[Fri Feb 27 11:01:51.302614 2026] [proxy_fcgi:error] [pid 54231:tid 54245] [client 64.64.108.58:56871] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:53.746572 2026] [proxy_fcgi:error] [pid 54231:tid 54236] [client 64.64.108.58:56871] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:54.562494 2026] [proxy_fcgi:error] [pid 54231:tid 54244] [client 64.64.108.58:56871] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:55.039800 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.58:56871] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEJI-Tvb5AeyJCdY7BbeQAAAEk"]
[Fri Feb 27 11:01:56.094240 2026] [proxy_fcgi:error] [pid 54101:tid 54124] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:56.559446 2026] [proxy_fcgi:error] [pid 54101:tid 54117] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:57.054966 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:58.949481 2026] [proxy_fcgi:error] [pid 54101:tid 54119] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:01:59.544827 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:00.049466 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:00.650482 2026] [proxy_fcgi:error] [pid 54101:tid 54122] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:02.836603 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.43:48377] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:03.939881 2026] [:error] [pid 54101:tid 54125] [client 64.64.108.43:48377] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaEJK1Y5qgRktcYTGFvQ8wAAAdE"]
[Fri Feb 27 11:02:04.979286 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.22:53099] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaEJLPnSUDZue59Px9tMMgAAAVM"]
[Fri Feb 27 11:02:05.901468 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.32:22593] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaEJLcKBhrfI6KNv9Rhq_AAAAAw"]
[Fri Feb 27 11:02:06.979968 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.29:39963] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaEJLvnSUDZue59Px9tMQQAAAVM"]
[Fri Feb 27 11:02:07.884448 2026] [proxy_fcgi:error] [pid 54101:tid 54126] [client 64.64.108.22:38765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:08.357482 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.22:38765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:09.338889 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.22:38765] [client 64.64.108.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.22, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aaEJMVY5qgRktcYTGFvRIgAAAc8"]
[Fri Feb 27 11:02:10.765468 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 64.64.108.22:38765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:12.445207 2026] [proxy_fcgi:error] [pid 54101:tid 54128] [client 64.64.108.22:38765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:13.446711 2026] [proxy_fcgi:error] [pid 54101:tid 54122] [client 64.64.108.22:38765] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:16.753841 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.22:38765] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaEJOFY5qgRktcYTGFvRUQAAAdM"]
[Fri Feb 27 11:02:17.781601 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 64.64.108.48:22849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:19.253283 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.48:22849] [client 64.64.108.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.48, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaEJO-vG4MPCmE0B2sAWPAAAAM4"]
[Fri Feb 27 11:02:20.097456 2026] [proxy_fcgi:error] [pid 54103:tid 54191] [client 64.64.108.48:22849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:21.347441 2026] [proxy_fcgi:error] [pid 54103:tid 54194] [client 64.64.108.48:22849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:21.860488 2026] [proxy_fcgi:error] [pid 54103:tid 54174] [client 64.64.108.48:22849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:22.946477 2026] [proxy_fcgi:error] [pid 54103:tid 54178] [client 64.64.108.48:22849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:23.436593 2026] [proxy_fcgi:error] [pid 54103:tid 54175] [client 64.64.108.48:22849] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:24.051140 2026] [:error] [pid 54103:tid 54187] [client 64.64.108.48:22849] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEJQOvG4MPCmE0B2sAWSwAAANA"]
[Fri Feb 27 11:02:25.094859 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.31:43541] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "aaEJQfnSUDZue59Px9tNDwAAAUo"]
[Fri Feb 27 11:02:26.114481 2026] [proxy_fcgi:error] [pid 62998:tid 63005] [client 64.64.108.56:42375] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:26.659460 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 64.64.108.56:42375] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:27.168451 2026] [proxy_fcgi:error] [pid 62998:tid 63008] [client 64.64.108.56:42375] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:28.289468 2026] [proxy_fcgi:error] [pid 62998:tid 63022] [client 64.64.108.56:42375] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:33.752700 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.56:42375] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aaEJSVQeueXZDUmoLokzQwAAAQs"]
[Fri Feb 27 11:02:34.813468 2026] [proxy_fcgi:error] [pid 56075:tid 56092] [client 64.64.108.58:55021] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:35.365515 2026] [proxy_fcgi:error] [pid 56075:tid 56092] [client 64.64.108.58:55021] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:36.442727 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.58:55021] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaEJTMKBhrfI6KNv9RhsfAAAAAc"]
[Fri Feb 27 11:02:39.354408 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.24:25349] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bak.php"] [unique_id "aaEJT1QeueXZDUmoLokzbwAAAQs"]
[Fri Feb 27 11:02:40.406852 2026] [proxy_fcgi:error] [pid 54102:tid 54163] [client 64.64.108.51:37463] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:41.043515 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.51:37463] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaEJUXi74D4fiYUm_GfzQAAAAIY"]
[Fri Feb 27 11:02:43.052459 2026] [proxy_fcgi:error] [pid 54103:tid 54190] [client 64.64.108.45:50483] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:46.297476 2026] [proxy_fcgi:error] [pid 54103:tid 54177] [client 64.64.108.45:50483] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:46.845705 2026] [:error] [pid 54103:tid 54172] [client 64.64.108.45:50483] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aaEJVuvG4MPCmE0B2sAWrQAAAME"]
[Fri Feb 27 11:02:47.812970 2026] [:error] [pid 56075:tid 56092] [client 64.64.108.44:58559] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaEJV8KBhrfI6KNv9RhtAwAAAA4"]
[Fri Feb 27 11:02:48.772138 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.49:38189] [client 64.64.108.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.49, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aaEJWFQeueXZDUmoLokzrQAAAQM"]
[Fri Feb 27 11:02:49.252463 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.49:38189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:50.451297 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.49:38189] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/themes.php"] [unique_id "aaEJWlQeueXZDUmoLokzuwAAAQk"]
[Fri Feb 27 11:02:51.393850 2026] [proxy_fcgi:error] [pid 54103:tid 54177] [client 64.64.108.30:48379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:52.259472 2026] [proxy_fcgi:error] [pid 54103:tid 54181] [client 64.64.108.30:48379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:54.253177 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.30:48379] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aaEJXuvG4MPCmE0B2sAW7wAAANI"]
[Fri Feb 27 11:02:55.225511 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 64.64.108.36:24541] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:56.156552 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.36:24541] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/about.php"] [unique_id "aaEJYFY5qgRktcYTGFvSIQAAAdA"]
[Fri Feb 27 11:02:57.754469 2026] [proxy_fcgi:error] [pid 54231:tid 54249] [client 64.64.108.28:46641] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:02:58.237314 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.28:46641] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aaEJYuTvb5AeyJCdY7Bc6wAAAEI"]
[Fri Feb 27 11:03:00.251485 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.54:31007] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:00.760519 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.54:31007] [client 64.64.108.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.54, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aaEJZFQeueXZDUmoLok0AQAAAQo"]
[Fri Feb 27 11:03:02.265837 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.54:31007] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaEJZlQeueXZDUmoLok0HQAAAQ4"]
[Fri Feb 27 11:03:03.213284 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.20:57831] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaEJZ-Tvb5AeyJCdY7BdDwAAAFY"]
[Fri Feb 27 11:03:07.659491 2026] [proxy_fcgi:error] [pid 62998:tid 63015] [client 64.64.108.57:49051] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:09.064439 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.57:49051] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:09.983455 2026] [proxy_fcgi:error] [pid 62998:tid 63010] [client 64.64.108.57:49051] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:10.477507 2026] [proxy_fcgi:error] [pid 62998:tid 63001] [client 64.64.108.57:49051] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:11.462534 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.57:49051] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaEJb1QeueXZDUmoLok0pQAAAQI"]
[Fri Feb 27 11:03:13.451699 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.51:63143] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaEJcfnSUDZue59Px9tOggAAAVU"]
[Fri Feb 27 11:03:14.288039 2026] [:error] [pid 54102:tid 54155] [client 64.64.108.49:27591] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaEJcni74D4fiYUm_Gf0ZQAAAIs"]
[Fri Feb 27 11:03:15.284559 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.64:44945] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aaEJc1QeueXZDUmoLok01wAAARI"]
[Fri Feb 27 11:03:16.309434 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.64:23285] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaEJdPnSUDZue59Px9tOoQAAAU0"]
[Fri Feb 27 11:03:19.237888 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 64.64.108.40:40911] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:19.856358 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.40:40911] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aaEJd_nSUDZue59Px9tO4wAAAU0"]
[Fri Feb 27 11:03:20.699448 2026] [proxy_fcgi:error] [pid 56075:tid 56099] [client 64.64.108.31:42351] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:21.273472 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 64.64.108.31:42351] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:21.765459 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 64.64.108.31:42351] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:22.156428 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.31:42351] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaEJesKBhrfI6KNv9RhuFQAAAAk"]
[Fri Feb 27 11:03:23.184470 2026] [proxy_fcgi:error] [pid 54101:tid 54117] [client 64.64.108.23:30413] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:23.645443 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 64.64.108.23:30413] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:24.139788 2026] [:error] [pid 54101:tid 54125] [client 64.64.108.23:30413] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaEJfFY5qgRktcYTGFvS4QAAAdE"]
[Fri Feb 27 11:03:25.188464 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.38:40663] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:25.640533 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.38:40663] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aaEJfcKBhrfI6KNv9RhuPAAAAAk"]
[Fri Feb 27 11:03:27.957245 2026] [:error] [pid 54231:tid 54252] [client 64.64.108.47:50915] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaEJf-Tvb5AeyJCdY7BdzQAAAFI"]
[Fri Feb 27 11:03:28.870089 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.31:43755] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aaEJgPnSUDZue59Px9tPWgAAAVY"]
[Fri Feb 27 11:03:30.441076 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.64:46391] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaEJglQeueXZDUmoLok1jgAAAQU"]
[Fri Feb 27 11:03:31.397837 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.48:42059] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:32.352369 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 64.64.108.48:42059] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:32.848717 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.48:42059] [client 64.64.108.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.48, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aaEJhFQeueXZDUmoLok1ugAAAQQ"]
[Fri Feb 27 11:03:32.853528 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 64.64.108.48:42059] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:33.866609 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.48:42059] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aaEJhVQeueXZDUmoLok1xQAAAQU"]
[Fri Feb 27 11:03:34.816072 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.52:61251] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaEJhlQeueXZDUmoLok1ywAAAQQ"]
[Fri Feb 27 11:03:35.797473 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.61:51889] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:36.378462 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.61:51889] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:38.367338 2026] [proxy_fcgi:error] [pid 49306:tid 49329] [client 64.64.108.61:51889] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:40.000871 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.61:51889] [client 64.64.108.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.61, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aaEJjPnSUDZue59Px9tP_wAAAU0"]
[Fri Feb 27 11:03:40.479909 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.61:51889] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaEJjPnSUDZue59Px9tQBwAAAUI"]
[Fri Feb 27 11:03:41.571599 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.63:50757] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aaEJjcKBhrfI6KNv9RhuugAAAAU"]
[Fri Feb 27 11:03:42.587941 2026] [:error] [pid 54102:tid 54163] [client 64.64.108.42:30415] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "aaEJjni74D4fiYUm_Gf1jQAAAJM"]
[Fri Feb 27 11:03:45.056469 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.45:64563] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:45.635786 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.45:64563] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aaEJkcKBhrfI6KNv9RhvGgAAAAQ"]
[Fri Feb 27 11:03:47.066476 2026] [proxy_fcgi:error] [pid 54102:tid 54154] [client 64.64.108.39:37771] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:49.140436 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.39:37771] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaEJlXi74D4fiYUm_Gf1uQAAAJA"]
[Fri Feb 27 11:03:51.147503 2026] [proxy_fcgi:error] [pid 62998:tid 63022] [client 64.64.108.47:30165] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:52.758469 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.47:30165] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:53.451505 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.47:30165] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaEJmVQeueXZDUmoLok21gAAAQo"]
[Fri Feb 27 11:03:55.234004 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.19:41751] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:03:56.258471 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.19:41751] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaEJnFY5qgRktcYTGFvTzAAAAdA"]
[Fri Feb 27 11:03:57.812800 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 64.64.108.47:59195] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:00.836267 2026] [:error] [pid 54231:tid 54237] [client 64.64.108.17:25545] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaEJoOTvb5AeyJCdY7Be0QAAAEM"]
[Fri Feb 27 11:04:02.362451 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.38:23991] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaEJolQeueXZDUmoLok3fgAAARU"]
[Fri Feb 27 11:04:03.300126 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.26:50955] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEJo3i74D4fiYUm_Gf2LAAAAIY"]
[Fri Feb 27 11:04:04.399975 2026] [:error] [pid 54102:tid 54161] [client 64.64.108.42:53123] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaEJpHi74D4fiYUm_Gf2PgAAAJE"]
[Fri Feb 27 11:04:05.740375 2026] [:error] [pid 54101:tid 54129] [client 64.64.108.38:31435] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaEJpVY5qgRktcYTGFvUDgAAAdU"]
[Fri Feb 27 11:04:07.150823 2026] [:error] [pid 54101:tid 54116] [client 64.64.108.38:62573] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaEJp1Y5qgRktcYTGFvUHAAAAcg"]
[Fri Feb 27 11:04:09.243098 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.30:21553] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaEJqXi74D4fiYUm_Gf2dAAAAIw"]
[Fri Feb 27 11:04:10.638470 2026] [proxy_fcgi:error] [pid 54101:tid 54126] [client 64.64.108.22:30917] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:11.639291 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.22:30917] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaEJq1Y5qgRktcYTGFvUTgAAAcY"]
[Fri Feb 27 11:04:12.495458 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 64.64.108.32:63099] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:12.955439 2026] [proxy_fcgi:error] [pid 49306:tid 49318] [client 64.64.108.32:63099] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:13.456116 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 64.64.108.32:63099] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:13.943109 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.32:63099] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaEJrfnSUDZue59Px9tRHgAAAUo"]
[Fri Feb 27 11:04:15.849892 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.36:42039] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaEJr3i74D4fiYUm_Gf2oAAAAIA"]
[Fri Feb 27 11:04:16.785454 2026] [proxy_fcgi:error] [pid 54231:tid 54238] [client 64.64.108.23:57913] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:17.748453 2026] [proxy_fcgi:error] [pid 54231:tid 54239] [client 64.64.108.23:57913] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:18.162450 2026] [proxy_fcgi:error] [pid 54231:tid 54241] [client 64.64.108.23:57913] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:18.642159 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.23:57913] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aaEJsuTvb5AeyJCdY7BfbQAAAFc"]
[Fri Feb 27 11:04:20.364544 2026] [proxy_fcgi:error] [pid 62998:tid 63013] [client 64.64.108.49:58317] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:21.437668 2026] [proxy_fcgi:error] [pid 62998:tid 63010] [client 64.64.108.49:58317] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:21.953463 2026] [proxy_fcgi:error] [pid 62998:tid 63015] [client 64.64.108.49:58317] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:25.765827 2026] [proxy_fcgi:error] [pid 62998:tid 63023] [client 64.64.108.49:58317] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:26.229528 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.49:58317] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaEJulQeueXZDUmoLok42AAAAQQ"]
[Fri Feb 27 11:04:28.239468 2026] [proxy_fcgi:error] [pid 54231:tid 54247] [client 64.64.108.23:52743] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:28.753458 2026] [proxy_fcgi:error] [pid 54231:tid 54241] [client 64.64.108.23:52743] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:29.230462 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.23:52743] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aaEJveTvb5AeyJCdY7BfzAAAAEk"]
[Fri Feb 27 11:04:30.081406 2026] [:error] [pid 54102:tid 54166] [client 64.64.108.24:34495] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaEJvni74D4fiYUm_Gf3TgAAAJY"]
[Fri Feb 27 11:04:31.106799 2026] [proxy_fcgi:error] [pid 54103:tid 54183] [client 64.64.108.31:35061] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:31.556317 2026] [proxy_fcgi:error] [pid 54103:tid 54170] [client 64.64.108.31:35061] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:32.071437 2026] [proxy_fcgi:error] [pid 54103:tid 54189] [client 64.64.108.31:35061] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:32.536504 2026] [:error] [pid 54103:tid 54175] [client 64.64.108.31:35061] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aaEJwOvG4MPCmE0B2sAZ2gAAAMQ"]
[Fri Feb 27 11:04:33.491934 2026] [:error] [pid 54231:tid 54255] [client 64.64.108.47:45931] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaEJweTvb5AeyJCdY7Bf9gAAAFU"]
[Fri Feb 27 11:04:34.388500 2026] [proxy_fcgi:error] [pid 62998:tid 63008] [client 64.64.108.50:49615] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:34.955537 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.50:49615] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:35.457456 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 64.64.108.50:49615] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:35.850529 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.50:49615] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aaEJw1QeueXZDUmoLok5hAAAARQ"]
[Fri Feb 27 11:04:37.246092 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.41:39021] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:37.671462 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.41:39021] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:38.138617 2026] [:error] [pid 54101:tid 54121] [client 64.64.108.41:39021] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaEJxlY5qgRktcYTGFvU1QAAAc0"]
[Fri Feb 27 11:04:39.731662 2026] [:error] [pid 54103:tid 54184] [client 64.64.108.30:41093] [client 64.64.108.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.30, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaEJx-vG4MPCmE0B2sAaPgAAAM0"]
[Fri Feb 27 11:04:40.246906 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 64.64.108.30:41093] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:40.855268 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.30:41093] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaEJyOvG4MPCmE0B2sAaUAAAANI"]
[Fri Feb 27 11:04:41.693912 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.43:22689] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaEJycKBhrfI6KNv9RhxowAAAAc"]
[Fri Feb 27 11:04:43.448465 2026] [proxy_fcgi:error] [pid 56075:tid 56101] [client 64.64.108.46:52725] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:43.948484 2026] [proxy_fcgi:error] [pid 56075:tid 56080] [client 64.64.108.46:52725] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:44.353578 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.46:52725] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aaEJzMKBhrfI6KNv9RhxugAAABM"]
[Fri Feb 27 11:04:45.289490 2026] [proxy_fcgi:error] [pid 62998:tid 63001] [client 64.64.108.54:58161] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:45.837624 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.54:58161] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaEJzVQeueXZDUmoLok6KQAAARE"]
[Fri Feb 27 11:04:47.453442 2026] [proxy_fcgi:error] [pid 54231:tid 54247] [client 64.64.108.19:58925] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:47.974495 2026] [proxy_fcgi:error] [pid 54231:tid 54254] [client 64.64.108.19:58925] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:48.375464 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 64.64.108.19:58925] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:50.294472 2026] [proxy_fcgi:error] [pid 54231:tid 54254] [client 64.64.108.19:58925] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:51.358516 2026] [:error] [pid 54231:tid 54249] [client 64.64.108.19:58925] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugin.php"] [unique_id "aaEJ0-Tvb5AeyJCdY7BgmQAAAE8"]
[Fri Feb 27 11:04:52.488110 2026] [proxy_fcgi:error] [pid 56075:tid 56101] [client 64.64.108.26:40119] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:53.446483 2026] [proxy_fcgi:error] [pid 56075:tid 56080] [client 64.64.108.26:40119] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:53.961831 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 64.64.108.26:40119] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:55.554452 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.26:40119] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:56.033586 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 64.64.108.26:40119] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:04:57.140027 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.26:40119] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/mah.php"] [unique_id "aaEJ2cKBhrfI6KNv9RhyTwAAABI"]
[Fri Feb 27 11:04:58.292986 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.34:46109] [client 64.64.108.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.34, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aaEJ2lQeueXZDUmoLok6ygAAARQ"]
[Fri Feb 27 11:04:58.738043 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.34:46109] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aaEJ2lQeueXZDUmoLok60gAAARg"]
[Fri Feb 27 11:05:01.162590 2026] [proxy_fcgi:error] [pid 56075:tid 56080] [client 64.64.108.21:54193] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:02.756455 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.21:54193] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:03.758685 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.21:54193] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aaEJ38KBhrfI6KNv9RhyngAAABI"]
[Fri Feb 27 11:05:05.253728 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.27:36013] [client 64.64.108.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.27, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aaEJ4Xi74D4fiYUm_Gf4wQAAAIw"]
[Fri Feb 27 11:05:06.853458 2026] [proxy_fcgi:error] [pid 54102:tid 54164] [client 64.64.108.27:36013] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:07.355484 2026] [proxy_fcgi:error] [pid 54102:tid 54159] [client 64.64.108.27:36013] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:07.843475 2026] [proxy_fcgi:error] [pid 54102:tid 54145] [client 64.64.108.27:36013] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:08.860449 2026] [proxy_fcgi:error] [pid 54102:tid 54159] [client 64.64.108.27:36013] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:09.347766 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.27:36013] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaEJ5Xi74D4fiYUm_Gf47QAAAIE"]
[Fri Feb 27 11:05:10.754797 2026] [:error] [pid 54103:tid 54188] [client 64.64.108.27:59247] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/packed.php"] [unique_id "aaEJ5uvG4MPCmE0B2sAbtAAAANE"]
[Fri Feb 27 11:05:11.687480 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 64.64.108.45:49217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:12.269813 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.45:49217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:13.839457 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 64.64.108.45:49217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:14.344477 2026] [proxy_fcgi:error] [pid 62998:tid 63001] [client 64.64.108.45:49217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:14.848785 2026] [proxy_fcgi:error] [pid 62998:tid 63004] [client 64.64.108.45:49217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:15.357484 2026] [proxy_fcgi:error] [pid 62998:tid 63012] [client 64.64.108.45:49217] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:15.847503 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.45:49217] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/file.php"] [unique_id "aaEJ61QeueXZDUmoLok76AAAARU"]
[Fri Feb 27 11:05:17.251500 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.28:57825] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaEJ7fnSUDZue59Px9tTngAAAU0"]
[Fri Feb 27 11:05:18.636707 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.66:34275] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aaEJ7sKBhrfI6KNv9RhzJgAAAAk"]
[Fri Feb 27 11:05:19.684994 2026] [proxy_fcgi:error] [pid 56075:tid 56097] [client 64.64.108.49:33177] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:24.635361 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.49:33177] [client 64.64.108.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.49, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaEJ9MKBhrfI6KNv9RhzbAAAAAA"]
[Fri Feb 27 11:05:25.170504 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.49:33177] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaEJ9cKBhrfI6KNv9RhzcQAAABA"]
[Fri Feb 27 11:05:27.854000 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 64.64.108.16:43927] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:28.342564 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 64.64.108.16:43927] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:29.340672 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.16:43927] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaEJ-fnSUDZue59Px9tUFAAAAUw"]
[Fri Feb 27 11:05:30.185119 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.15:42591] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aaEJ-lQeueXZDUmoLok82gAAARc"]
[Fri Feb 27 11:05:31.206727 2026] [proxy_fcgi:error] [pid 49306:tid 49309] [client 64.64.108.15:53829] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:34.455943 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.15:53829] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "aaEJ_vnSUDZue59Px9tUQwAAAVg"]
[Fri Feb 27 11:05:35.412500 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 64.64.108.50:28959] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:36.008465 2026] [proxy_fcgi:error] [pid 62998:tid 63001] [client 64.64.108.50:28959] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:37.658638 2026] [:error] [pid 54102:tid 54158] [client 64.64.108.50:43031] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aaEKAXi74D4fiYUm_Gf6KgAAAI4"]
[Fri Feb 27 11:05:40.850479 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 64.64.108.17:60705] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:42.340003 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.17:60705] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aaEKBvnSUDZue59Px9tUowAAAUc"]
[Fri Feb 27 11:05:44.562405 2026] [proxy_fcgi:error] [pid 54102:tid 54158] [client 64.64.108.35:33977] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:45.757822 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.35:33977] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aaEKCXi74D4fiYUm_Gf6dAAAAIY"]
[Fri Feb 27 11:05:48.255461 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 64.64.108.25:58371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:49.876457 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.25:58371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:50.357864 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.25:58371] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:50.843214 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.25:58371] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aaEKDlY5qgRktcYTGFvYHwAAAdg"]
[Fri Feb 27 11:05:51.781479 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 64.64.108.58:26163] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:53.263966 2026] [proxy_fcgi:error] [pid 62998:tid 63024] [client 64.64.108.58:26163] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:53.747447 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.58:26163] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaEKEVQeueXZDUmoLok-iwAAARM"]
[Fri Feb 27 11:05:54.775517 2026] [proxy_fcgi:error] [pid 54231:tid 54240] [client 64.64.108.22:47713] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:55.271847 2026] [proxy_fcgi:error] [pid 54231:tid 54244] [client 64.64.108.22:47713] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:55.751566 2026] [proxy_fcgi:error] [pid 54231:tid 54257] [client 64.64.108.22:47713] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:56.856450 2026] [proxy_fcgi:error] [pid 54231:tid 54244] [client 64.64.108.22:47713] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:05:58.361052 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.22:47713] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/item.php"] [unique_id "aaEKFuTvb5AeyJCdY7BjjwAAAFc"]
[Fri Feb 27 11:06:02.837289 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.59:52545] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aaEKGvnSUDZue59Px9tVqQAAAUI"]
[Fri Feb 27 11:06:03.339929 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.59:52545] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEKG_nSUDZue59Px9tVvAAAAUk"]
[Fri Feb 27 11:06:03.851524 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.59:52545] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/mani.php"] [unique_id "aaEKG_nSUDZue59Px9tVzAAAAUI"]
[Fri Feb 27 11:06:04.902447 2026] [proxy_fcgi:error] [pid 54231:tid 54242] [client 64.64.108.39:33915] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:05.454462 2026] [proxy_fcgi:error] [pid 54231:tid 54245] [client 64.64.108.39:33915] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:05.975413 2026] [proxy_fcgi:error] [pid 54231:tid 54235] [client 64.64.108.39:33915] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:07.045721 2026] [proxy_fcgi:error] [pid 54231:tid 54256] [client 64.64.108.39:33915] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:09.068947 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.39:33915] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/network.php"] [unique_id "aaEKIeTvb5AeyJCdY7Bj3gAAAEg"]
[Fri Feb 27 11:06:10.176749 2026] [proxy_fcgi:error] [pid 54102:tid 54157] [client 64.64.108.61:24723] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:10.653462 2026] [proxy_fcgi:error] [pid 54102:tid 54161] [client 64.64.108.61:24723] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:11.261097 2026] [:error] [pid 54102:tid 54158] [client 64.64.108.61:24723] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaEKI3i74D4fiYUm_Gf7fQAAAI4"]
[Fri Feb 27 11:06:12.293533 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.61:34057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:13.858471 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 64.64.108.61:34057] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:16.050959 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.61:34057] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aaEKKFQeueXZDUmoLok_tgAAAQo"]
[Fri Feb 27 11:06:18.941458 2026] [proxy_fcgi:error] [pid 56075:tid 56086] [client 64.64.108.45:52901] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:24.001162 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.45:52901] [client 64.64.108.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.45, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/wp-login.php"] [unique_id "aaEKL8KBhrfI6KNv9Rh2LwAAAA0"]
[Fri Feb 27 11:06:24.582450 2026] [proxy_fcgi:error] [pid 56075:tid 56097] [client 64.64.108.45:52901] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:25.659454 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 64.64.108.45:52901] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:26.150206 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.45:52901] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aaEKMsKBhrfI6KNv9Rh2SQAAABY"]
[Fri Feb 27 11:06:27.087480 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 64.64.108.58:27459] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:27.752218 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.58:27459] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aaEKM8KBhrfI6KNv9Rh2XQAAABY"]
[Fri Feb 27 11:06:28.784293 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.33:28867] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaEKNHi74D4fiYUm_Gf8OwAAAIA"]
[Fri Feb 27 11:06:30.341741 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.45:36643] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaEKNvnSUDZue59Px9tXdAAAAVM"]
[Fri Feb 27 11:06:34.358502 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.20:43173] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aaEKOsKBhrfI6KNv9Rh2tgAAAA8"]
[Fri Feb 27 11:06:35.688184 2026] [proxy_fcgi:error] [pid 54103:tid 54194] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:36.180519 2026] [proxy_fcgi:error] [pid 54103:tid 54182] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:38.171461 2026] [proxy_fcgi:error] [pid 54103:tid 54184] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:38.755474 2026] [proxy_fcgi:error] [pid 54103:tid 54191] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:39.342139 2026] [proxy_fcgi:error] [pid 54103:tid 54179] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:39.764482 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:40.750455 2026] [proxy_fcgi:error] [pid 54103:tid 54186] [client 64.64.108.66:25969] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:42.243442 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.66:25969] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/radio.php"] [unique_id "aaEKQuvG4MPCmE0B2sAfdQAAAMU"]
[Fri Feb 27 11:06:44.789619 2026] [proxy_fcgi:error] [pid 54101:tid 54119] [client 64.64.108.64:61607] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:45.339453 2026] [proxy_fcgi:error] [pid 54101:tid 54110] [client 64.64.108.64:61607] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:46.099065 2026] [proxy_fcgi:error] [pid 54101:tid 54127] [client 64.64.108.64:61607] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:46.562490 2026] [proxy_fcgi:error] [pid 54101:tid 54121] [client 64.64.108.64:61607] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:47.648891 2026] [proxy_fcgi:error] [pid 54101:tid 54114] [client 64.64.108.64:61607] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:48.275797 2026] [proxy_fcgi:error] [pid 54101:tid 54121] [client 64.64.108.64:61607] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:49.334676 2026] [:error] [pid 54101:tid 54116] [client 64.64.108.64:61607] [client 64.64.108.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aaEKSVY5qgRktcYTGFvaDQAAAcg"]
[Fri Feb 27 11:06:55.154255 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.59:64797] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaEKT-Tvb5AeyJCdY7BlqgAAAFQ"]
[Fri Feb 27 11:06:56.738469 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 64.64.108.32:43189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:57.202544 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 64.64.108.32:43189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:57.779469 2026] [proxy_fcgi:error] [pid 54103:tid 54181] [client 64.64.108.32:43189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:58.967453 2026] [proxy_fcgi:error] [pid 54103:tid 54191] [client 64.64.108.32:43189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:06:59.562492 2026] [proxy_fcgi:error] [pid 54103:tid 54191] [client 64.64.108.32:43189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:00.144822 2026] [proxy_fcgi:error] [pid 54103:tid 54192] [client 64.64.108.32:43189] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:00.658672 2026] [:error] [pid 54103:tid 54191] [client 64.64.108.32:43189] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaEKVOvG4MPCmE0B2sAgEgAAANQ"]
[Fri Feb 27 11:07:03.161443 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.30:20775] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aaEKV1QeueXZDUmoLolCWQAAAQ8"]
[Fri Feb 27 11:07:04.944476 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:05.458864 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:05.896780 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:06.356077 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:06.838506 2026] [proxy_fcgi:error] [pid 52073:tid 52096] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:07.271450 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:07.753459 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:08.266150 2026] [proxy_fcgi:error] [pid 52073:tid 52080] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:08.745453 2026] [proxy_fcgi:error] [pid 52073:tid 52100] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:09.544451 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:10.059973 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:10.554162 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:11.045435 2026] [proxy_fcgi:error] [pid 52073:tid 52092] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:11.536457 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:12.070495 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:12.661462 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:13.167472 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:13.638494 2026] [proxy_fcgi:error] [pid 52073:tid 52084] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:14.279488 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:14.760497 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:15.252443 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:15.766467 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:16.372448 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:16.941473 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:17.474460 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:17.956813 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:18.456448 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:19.085464 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 64.64.108.36:59683] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:19.539004 2026] [:error] [pid 52073:tid 52082] [client 64.64.108.36:59683] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaEKZ4a650YPyxXVeRZQsAAAAYY"]
[Fri Feb 27 11:07:20.598457 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:21.146905 2026] [proxy_fcgi:error] [pid 52073:tid 52095] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:21.647455 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:22.256498 2026] [proxy_fcgi:error] [pid 52073:tid 52082] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:22.761460 2026] [proxy_fcgi:error] [pid 52073:tid 52086] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:23.346088 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:23.957405 2026] [proxy_fcgi:error] [pid 52073:tid 52077] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:24.538401 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:25.538405 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 64.64.108.41:38939] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:26.232956 2026] [:error] [pid 52073:tid 52089] [client 64.64.108.41:38939] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/css.php"] [unique_id "aaEKboa650YPyxXVeRZQ4AAAAY0"]
[Fri Feb 27 11:07:28.956456 2026] [proxy_fcgi:error] [pid 62998:tid 63013] [client 64.64.108.20:27777] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:30.162440 2026] [proxy_fcgi:error] [pid 62998:tid 63010] [client 64.64.108.20:27777] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:38.247442 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.20:27777] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wso112233.php"] [unique_id "aaEKelQeueXZDUmoLolFVQAAAQs"]
[Fri Feb 27 11:07:40.483238 2026] [:error] [pid 49306:tid 49328] [client 64.64.108.18:39021] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/shell20211028.php"] [unique_id "aaEKfPnSUDZue59Px9ta7AAAAVQ"]
[Fri Feb 27 11:07:41.587471 2026] [proxy_fcgi:error] [pid 54102:tid 54160] [client 64.64.108.17:20267] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:42.656450 2026] [:error] [pid 54102:tid 54162] [client 64.64.108.17:20267] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/dropdown.php"] [unique_id "aaEKfni74D4fiYUm_Gf_ZwAAAJI"]
[Fri Feb 27 11:07:44.246546 2026] [:error] [pid 54101:tid 54115] [client 64.64.108.56:41493] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/repeater.php"] [unique_id "aaEKgFY5qgRktcYTGFvcLQAAAcc"]
[Fri Feb 27 11:07:47.260480 2026] [proxy_fcgi:error] [pid 54101:tid 54110] [client 64.64.108.21:34075] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:47.781476 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.21:34075] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:48.778655 2026] [proxy_fcgi:error] [pid 54101:tid 54130] [client 64.64.108.21:34075] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:53.053134 2026] [:error] [pid 54101:tid 54118] [client 64.64.108.21:34075] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aaEKiVY5qgRktcYTGFvcqgAAAco"]
[Fri Feb 27 11:07:54.091309 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.45:39407] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aaEKiuTvb5AeyJCdY7BnmwAAAEg"]
[Fri Feb 27 11:07:55.130570 2026] [proxy_fcgi:error] [pid 54101:tid 54130] [client 64.64.108.45:36599] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:55.652271 2026] [:error] [pid 54101:tid 54115] [client 64.64.108.45:36599] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/options.php"] [unique_id "aaEKi1Y5qgRktcYTGFvcwwAAAcc"]
[Fri Feb 27 11:07:56.621821 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 64.64.108.66:34651] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:07:57.742749 2026] [:error] [pid 52073:tid 52076] [client 64.64.108.66:34651] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aaEKjYa650YPyxXVeRZSLQAAAYA"]
[Fri Feb 27 11:07:58.889719 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.35:48699] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aaEKjlQeueXZDUmoLolHNwAAAQ0"]
[Fri Feb 27 11:08:00.655473 2026] [proxy_fcgi:error] [pid 54101:tid 54130] [client 64.64.108.37:64283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:01.150702 2026] [:error] [pid 54101:tid 54122] [client 64.64.108.37:64283] [client 64.64.108.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.37, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/images/wp-login.php"] [unique_id "aaEKkVY5qgRktcYTGFvc_gAAAc4"]
[Fri Feb 27 11:08:01.750227 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 64.64.108.37:64283] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:03.337250 2026] [:error] [pid 54101:tid 54131] [client 64.64.108.37:64283] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aaEKk1Y5qgRktcYTGFvdCwAAAdc"]
[Fri Feb 27 11:08:04.402488 2026] [proxy_fcgi:error] [pid 49306:tid 49321] [client 64.64.108.45:51513] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:06.555313 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.45:51513] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aaEKlvnSUDZue59Px9tcUQAAAUE"]
[Fri Feb 27 11:08:07.674741 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.50:60813] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aaEKl4a650YPyxXVeRZSyAAAAYw"]
[Fri Feb 27 11:08:09.308238 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.51:65077] [client 64.64.108.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.51, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaEKmeTvb5AeyJCdY7BoTgAAAEc"]
[Fri Feb 27 11:08:09.759915 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.51:65077] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aaEKmeTvb5AeyJCdY7BoVAAAAEE"]
[Fri Feb 27 11:08:10.888769 2026] [proxy_fcgi:error] [pid 54231:tid 54237] [client 64.64.108.47:57897] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:11.365054 2026] [proxy_fcgi:error] [pid 54231:tid 54236] [client 64.64.108.47:57897] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:12.852951 2026] [:error] [pid 54231:tid 54258] [client 64.64.108.47:57897] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aaEKnOTvb5AeyJCdY7BomwAAAFg"]
[Fri Feb 27 11:08:13.892452 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:14.973731 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:15.738943 2026] [proxy_fcgi:error] [pid 54101:tid 54131] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:16.365569 2026] [proxy_fcgi:error] [pid 54101:tid 54114] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:17.046360 2026] [proxy_fcgi:error] [pid 54101:tid 54119] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:17.554456 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:18.352447 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:18.867014 2026] [proxy_fcgi:error] [pid 54101:tid 54110] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:19.372475 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:19.960490 2026] [proxy_fcgi:error] [pid 54101:tid 54110] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:20.472470 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:21.080768 2026] [proxy_fcgi:error] [pid 54101:tid 54117] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:21.650464 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:22.158459 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:22.682469 2026] [proxy_fcgi:error] [pid 54101:tid 54117] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:23.260950 2026] [proxy_fcgi:error] [pid 54101:tid 54118] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:23.850451 2026] [proxy_fcgi:error] [pid 54101:tid 54131] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:24.377122 2026] [proxy_fcgi:error] [pid 54101:tid 54117] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:29.470830 2026] [proxy_fcgi:error] [pid 54101:tid 54120] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:30.047453 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:30.568438 2026] [proxy_fcgi:error] [pid 54101:tid 54124] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:31.051487 2026] [proxy_fcgi:error] [pid 54101:tid 54125] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:31.551450 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:32.051440 2026] [proxy_fcgi:error] [pid 54101:tid 54119] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:33.151508 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:33.839259 2026] [proxy_fcgi:error] [pid 54101:tid 54128] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:34.357449 2026] [proxy_fcgi:error] [pid 54101:tid 54129] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:34.854441 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:35.457470 2026] [proxy_fcgi:error] [pid 54101:tid 54113] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:36.052655 2026] [proxy_fcgi:error] [pid 54101:tid 54112] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:36.556483 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:37.657464 2026] [proxy_fcgi:error] [pid 54101:tid 54131] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:38.157487 2026] [proxy_fcgi:error] [pid 54101:tid 54129] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:40.042496 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.48:47379] [client 64.64.108.48] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "measureyourbrand.com"] [uri "/ioxi002.PhP7"] [unique_id "aaEKt1Y5qgRktcYTGFveQwAAAdM"]
[Fri Feb 27 11:08:40.361983 2026] [proxy_fcgi:error] [pid 54101:tid 54121] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:41.350456 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:43.045462 2026] [proxy_fcgi:error] [pid 54101:tid 54127] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:43.638358 2026] [:error] [pid 54101:tid 54121] [client 64.64.108.48:47379] [client 64.64.108.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.48, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEKu1Y5qgRktcYTGFveWQAAAc0"]
[Fri Feb 27 11:08:44.138460 2026] [proxy_fcgi:error] [pid 54101:tid 54111] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:46.139499 2026] [:error] [pid 54101:tid 54120] [client 64.64.108.48:47379] [client 64.64.108.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.48, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.tmb/wp-login.php"] [unique_id "aaEKvlY5qgRktcYTGFvecAAAAcw"]
[Fri Feb 27 11:08:47.453062 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 64.64.108.48:47379] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:08:48.045089 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.48:47379] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaEKwFY5qgRktcYTGFvegwAAAdA"]
[Fri Feb 27 11:08:49.193685 2026] [:error] [pid 52073:tid 52091] [client 64.64.108.36:60393] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aaEKwYa650YPyxXVeRZUrAAAAY8"]
[Fri Feb 27 11:08:50.314645 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.62:65253] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "aaEKwlQeueXZDUmoLolK6gAAAQA"]
[Fri Feb 27 11:08:51.703493 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 64.64.108.26:63331] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:03.142497 2026] [proxy_fcgi:error] [pid 62998:tid 63009] [client 64.64.108.26:63331] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:03.665510 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 64.64.108.26:63331] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:05.955323 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.26:63331] [client 64.64.108.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.26, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaEK0VQeueXZDUmoLolMqQAAAQc"]
[Fri Feb 27 11:09:06.434493 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.26:63331] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEK0lQeueXZDUmoLolMsQAAARA"]
[Fri Feb 27 11:09:07.956834 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:08.530622 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.23:34989] [client 64.64.108.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.23, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaEK1MKBhrfI6KNv9Rh8xwAAABI"]
[Fri Feb 27 11:09:10.556475 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:12.254461 2026] [proxy_fcgi:error] [pid 56075:tid 56097] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:12.750501 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:13.343448 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:13.852872 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:14.471885 2026] [proxy_fcgi:error] [pid 56075:tid 56090] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:14.958048 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:15.456457 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:15.952557 2026] [proxy_fcgi:error] [pid 56075:tid 56091] [client 64.64.108.23:34989] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:18.348508 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.23:34989] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aaEK3sKBhrfI6KNv9Rh9uQAAABM"]
[Fri Feb 27 11:09:19.605461 2026] [proxy_fcgi:error] [pid 54231:tid 54241] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:20.068471 2026] [proxy_fcgi:error] [pid 54231:tid 54257] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:20.547895 2026] [proxy_fcgi:error] [pid 54231:tid 54251] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:20.970448 2026] [proxy_fcgi:error] [pid 54231:tid 54242] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:21.463662 2026] [proxy_fcgi:error] [pid 54231:tid 54251] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:21.867469 2026] [proxy_fcgi:error] [pid 54231:tid 54234] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:22.976462 2026] [proxy_fcgi:error] [pid 54231:tid 54252] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:23.557919 2026] [proxy_fcgi:error] [pid 54231:tid 54257] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:24.052481 2026] [proxy_fcgi:error] [pid 54231:tid 54254] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:24.563925 2026] [proxy_fcgi:error] [pid 54231:tid 54248] [client 64.64.108.43:52637] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:25.180191 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.43:52637] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaEK5eTvb5AeyJCdY7BrSQAAAFc"]
[Fri Feb 27 11:09:26.316453 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:27.973986 2026] [proxy_fcgi:error] [pid 52073:tid 52090] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:28.585473 2026] [proxy_fcgi:error] [pid 52073:tid 52095] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:29.287457 2026] [proxy_fcgi:error] [pid 52073:tid 52080] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:29.814501 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:30.376951 2026] [proxy_fcgi:error] [pid 52073:tid 52080] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:30.995458 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:31.661464 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:32.850504 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:33.464993 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:33.947334 2026] [:error] [pid 52073:tid 52093] [client 64.64.108.41:56803] [client 64.64.108.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.41, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaEK7Ya650YPyxXVeRZWwwAAAZE"]
[Fri Feb 27 11:09:34.392453 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:35.584453 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:36.077569 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:37.158450 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:38.897461 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:09:39.465518 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 64.64.108.41:56803] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 11:10:30.854630 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.60:26079] [client 64.64.108.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/prenota/"] [unique_id "aaELJsKBhrfI6KNv9RiAtAAAABM"]
[Fri Feb 27 12:31:04.569999 2026] [:error] [pid 56075:tid 56087] [client 151.0.80.150:9228] [client 151.0.80.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.0.80.150, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaEeCMKBhrfI6KNv9RjQ1gAAAAo"]
[Fri Feb 27 12:31:04.586463 2026] [proxy_fcgi:error] [pid 56075:tid 56087] [client 151.0.80.150:9228] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:27:30.557434 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 4.204.192.31:57490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:29:25.619767 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 4.204.192.31:23510] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:46.378630 2026] [proxy_fcgi:error] [pid 49306:tid 49319] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:46.517722 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:46.656265 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:46.794969 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:46.929995 2026] [:error] [pid 49306:tid 49331] [client 20.41.98.49:17735] [client 20.41.98.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.41.98.49, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaFR_vnSUDZue59Px9t25wAAAVc"]
[Fri Feb 27 16:12:46.936232 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:47.075442 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:48.409490 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:48.548013 2026] [proxy_fcgi:error] [pid 49306:tid 49311] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:48.695151 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:48.833444 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:48.973331 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 20.41.98.49:17735] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 16:12:49.108461 2026] [:error] [pid 49306:tid 49325] [client 20.41.98.49:17735] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaFSAfnSUDZue59Px9t27gAAAVE"]
[Fri Feb 27 16:12:49.660247 2026] [:error] [pid 54103:tid 54179] [client 20.41.98.49:16883] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaFSAevG4MPCmE0B2sB0CAAAAMg"]
[Fri Feb 27 16:12:50.227365 2026] [:error] [pid 62998:tid 63011] [client 20.41.98.49:17733] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaFSAlQeueXZDUmoLontjAAAAQk"]
[Fri Feb 27 16:12:50.790489 2026] [:error] [pid 54102:tid 54168] [client 20.41.98.49:16854] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaFSAni74D4fiYUm_GdG_wAAAJc"]
[Fri Feb 27 16:54:51.931600 2026] [:error] [pid 52073:tid 52094] [client 49.51.243.95:56334] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaFb24a650YPyxXVeRaB3QAAAZI"]
[Fri Feb 27 16:58:06.258402 2026] [:error] [pid 62998:tid 63017] [client 175.6.217.4:54571] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaFcnlQeueXZDUmoLon2jwAAAQ8"]
[Fri Feb 27 17:21:08.470380 2026] [:error] [pid 49306:tid 49309] [client 149.88.30.53:53515] [client 149.88.30.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaFiBPnSUDZue59Px9uWtAAAAUE"]
[Fri Feb 27 17:21:11.997630 2026] [:error] [pid 56075:tid 56078] [client 149.88.30.53:47997] [client 149.88.30.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaFiB8KBhrfI6KNv9Rg97wAAAAE"]
[Fri Feb 27 18:36:45.648676 2026] [:error] [pid 49306:tid 49331] [client 43.164.197.209:33506] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaFzvfnSUDZue59Px9u-qgAAAVc"]
[Fri Feb 27 19:00:58.840525 2026] [proxy_fcgi:error] [pid 62998:tid 63008] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:00:59.608346 2026] [proxy_fcgi:error] [pid 62998:tid 63013] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:00:59.853482 2026] [proxy_fcgi:error] [pid 62998:tid 63002] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:01:00.101520 2026] [proxy_fcgi:error] [pid 62998:tid 63011] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:01:01.563805 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:01:01.809140 2026] [proxy_fcgi:error] [pid 62998:tid 63018] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:01:02.022233 2026] [proxy_fcgi:error] [pid 62998:tid 63026] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:01:02.866095 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 20.151.2.242:59662] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:01:03.530843 2026] [:error] [pid 62998:tid 63004] [client 20.151.2.242:59662] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aaF5b1QeueXZDUmoLokVvgAAAQI"]
[Fri Feb 27 19:01:05.549727 2026] [:error] [pid 54231:tid 54252] [client 20.151.2.242:45323] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aaF5ceTvb5AeyJCdY7Dr0AAAAFI"]
[Fri Feb 27 19:01:07.121879 2026] [:error] [pid 49306:tid 49313] [client 20.151.2.242:59556] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aaF5c_nSUDZue59Px9vLVAAAAUU"]
[Fri Feb 27 19:01:08.565169 2026] [:error] [pid 54103:tid 54180] [client 20.151.2.242:16498] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aaF5dOvG4MPCmE0B2sCKOQAAAMk"]
[Fri Feb 27 19:01:09.558809 2026] [:error] [pid 52073:tid 52080] [client 20.151.2.242:45325] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aaF5dYa650YPyxXVeRbgNQAAAYQ"]
[Fri Feb 27 19:01:10.426670 2026] [:error] [pid 54101:tid 54122] [client 20.151.2.242:17065] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aaF5dlY5qgRktcYTGFswbgAAAc4"]
[Fri Feb 27 19:01:12.505536 2026] [:error] [pid 56075:tid 56101] [client 20.151.2.242:17026] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aaF5eMKBhrfI6KNv9RhfAQAAABc"]
[Fri Feb 27 19:01:13.689335 2026] [:error] [pid 54231:tid 54247] [client 20.151.2.242:45350] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "aaF5eeTvb5AeyJCdY7Dr1QAAAE0"]
[Fri Feb 27 19:01:15.890671 2026] [:error] [pid 49306:tid 49315] [client 20.151.2.242:19886] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aaF5e_nSUDZue59Px9vLYwAAAUc"]
[Fri Feb 27 19:01:18.809482 2026] [:error] [pid 52073:tid 52087] [client 20.151.2.242:44748] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aaF5foa650YPyxXVeRbgSAAAAYs"]
[Fri Feb 27 19:01:24.755692 2026] [:error] [pid 54231:tid 54252] [client 20.151.2.242:24350] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aaF5hOTvb5AeyJCdY7Dr5AAAAFI"]
[Fri Feb 27 19:01:25.488130 2026] [:error] [pid 54231:tid 54239] [client 20.151.2.242:24327] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aaF5heTvb5AeyJCdY7Dr6AAAAEU"]
[Fri Feb 27 19:01:27.469932 2026] [:error] [pid 49306:tid 49327] [client 20.151.2.242:54437] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaF5h_nSUDZue59Px9vLiQAAAVM"]
[Fri Feb 27 19:01:28.625785 2026] [:error] [pid 54231:tid 54250] [client 20.151.2.242:16460] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaF5iOTvb5AeyJCdY7Dr9gAAAFA"]
[Fri Feb 27 19:01:30.274737 2026] [:error] [pid 49306:tid 49308] [client 20.151.2.242:19847] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaF5ivnSUDZue59Px9vLngAAAUA"]
[Fri Feb 27 19:01:32.913531 2026] [:error] [pid 62998:tid 63012] [client 20.151.2.242:41834] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaF5jFQeueXZDUmoLokV-QAAAQo"]
[Fri Feb 27 19:01:37.224260 2026] [:error] [pid 52073:tid 52080] [client 20.151.2.242:55392] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/advanc.php"] [unique_id "aaF5kYa650YPyxXVeRbgaAAAAYQ"]
[Fri Feb 27 19:01:38.932250 2026] [:error] [pid 62998:tid 63026] [client 20.151.2.242:24334] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/advanc.php"] [unique_id "aaF5klQeueXZDUmoLokWCQAAARg"]
[Fri Feb 27 19:01:40.483515 2026] [:error] [pid 54101:tid 54108] [client 20.151.2.242:55881] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/advanc.php"] [unique_id "aaF5lFY5qgRktcYTGFsweAAAAcA"]
[Fri Feb 27 19:01:42.436558 2026] [:error] [pid 56075:tid 56097] [client 20.151.2.242:55928] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/advanc.php"] [unique_id "aaF5lsKBhrfI6KNv9RhfVAAAABM"]
[Fri Feb 27 19:01:43.949431 2026] [:error] [pid 54231:tid 54253] [client 20.151.2.242:24348] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaF5l-Tvb5AeyJCdY7DsCgAAAFM"]
[Fri Feb 27 19:01:45.308692 2026] [:error] [pid 52073:tid 52086] [client 20.151.2.242:60812] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaF5mYa650YPyxXVeRbgjAAAAYo"]
[Fri Feb 27 19:01:47.435887 2026] [:error] [pid 52073:tid 52088] [client 20.151.2.242:55909] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaF5m4a650YPyxXVeRbgoAAAAYw"]
[Fri Feb 27 19:01:50.178621 2026] [:error] [pid 52073:tid 52098] [client 20.151.2.242:58903] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaF5noa650YPyxXVeRbgtQAAAZY"]
[Fri Feb 27 19:01:51.410733 2026] [:error] [pid 52073:tid 52088] [client 20.151.2.242:19716] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftyude.php"] [unique_id "aaF5n4a650YPyxXVeRbgwQAAAYw"]
[Fri Feb 27 19:01:52.583550 2026] [:error] [pid 52073:tid 52076] [client 20.151.2.242:60801] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftyude.php"] [unique_id "aaF5oIa650YPyxXVeRbgywAAAYA"]
[Fri Feb 27 19:01:53.862315 2026] [:error] [pid 52073:tid 52096] [client 20.151.2.242:52582] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftyude.php"] [unique_id "aaF5oYa650YPyxXVeRbg1wAAAZQ"]
[Fri Feb 27 19:01:55.693818 2026] [:error] [pid 52073:tid 52086] [client 20.151.2.242:30137] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftyude.php"] [unique_id "aaF5o4a650YPyxXVeRbg2AAAAYo"]
[Fri Feb 27 19:01:56.726490 2026] [:error] [pid 49306:tid 49320] [client 20.151.2.242:54364] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aaF5pPnSUDZue59Px9vLzgAAAUw"]
[Fri Feb 27 19:01:58.865537 2026] [:error] [pid 52073:tid 52090] [client 20.151.2.242:30038] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aaF5poa650YPyxXVeRbg5gAAAY4"]
[Fri Feb 27 19:02:00.073593 2026] [:error] [pid 54101:tid 54122] [client 20.151.2.242:17256] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aaF5qFY5qgRktcYTGFswfwAAAc4"]
[Fri Feb 27 19:02:02.289192 2026] [proxy_fcgi:error] [pid 49306:tid 49327] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:03.137608 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:03.347002 2026] [proxy_fcgi:error] [pid 49306:tid 49311] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:03.830383 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:04.295045 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:04.502759 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:04.710767 2026] [proxy_fcgi:error] [pid 49306:tid 49314] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:05.325275 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:05.546795 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:06.168900 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:06.378635 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 20.151.2.242:25490] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:02:06.582481 2026] [:error] [pid 49306:tid 49312] [client 20.151.2.242:25490] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leu.php"] [unique_id "aaF5rvnSUDZue59Px9vMEwAAAUQ"]
[Fri Feb 27 19:02:11.135710 2026] [:error] [pid 49306:tid 49310] [client 20.151.2.242:63698] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leu.php"] [unique_id "aaF5s_nSUDZue59Px9vMNAAAAUI"]
[Fri Feb 27 19:02:18.995621 2026] [:error] [pid 56075:tid 56102] [client 20.151.2.242:52917] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leu.php"] [unique_id "aaF5usKBhrfI6KNv9RhfhwAAABg"]
[Fri Feb 27 19:02:26.451226 2026] [:error] [pid 62998:tid 63012] [client 20.151.2.242:30734] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leu.php"] [unique_id "aaF5wlQeueXZDUmoLokWLwAAAQo"]
[Fri Feb 27 19:02:39.744595 2026] [:error] [pid 52073:tid 52081] [client 20.151.2.242:17719] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aaF5z4a650YPyxXVeRbhxAAAAYU"]
[Fri Feb 27 19:02:46.567803 2026] [:error] [pid 49306:tid 49310] [client 20.151.2.242:16852] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaF51vnSUDZue59Px9vM8wAAAUI"]
[Fri Feb 27 19:03:12.571508 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:12.827325 2026] [proxy_fcgi:error] [pid 49306:tid 49311] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:13.039771 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:13.291986 2026] [proxy_fcgi:error] [pid 49306:tid 49312] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:13.542426 2026] [proxy_fcgi:error] [pid 49306:tid 49332] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:13.754603 2026] [proxy_fcgi:error] [pid 49306:tid 49316] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:14.010709 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:14.255544 2026] [proxy_fcgi:error] [pid 49306:tid 49319] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:14.497123 2026] [proxy_fcgi:error] [pid 49306:tid 49308] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:14.746515 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:17.483417 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 20.151.2.242:39623] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:03:17.692185 2026] [:error] [pid 49306:tid 49309] [client 20.151.2.242:39623] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kaduu.php"] [unique_id "aaF59fnSUDZue59Px9vNiQAAAUE"]
[Fri Feb 27 19:03:29.532498 2026] [:error] [pid 62998:tid 63012] [client 20.151.2.242:54293] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kaduu.php"] [unique_id "aaF6AVQeueXZDUmoLokWhwAAAQo"]
[Fri Feb 27 19:03:43.689971 2026] [:error] [pid 52073:tid 52091] [client 20.151.2.242:30844] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rdf.php"] [unique_id "aaF6D4a650YPyxXVeRbivQAAAY8"]
[Fri Feb 27 19:03:45.085910 2026] [:error] [pid 52073:tid 52076] [client 20.151.2.242:31489] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rdf.php"] [unique_id "aaF6EYa650YPyxXVeRbiwAAAAYA"]
[Fri Feb 27 19:03:47.251734 2026] [:error] [pid 62998:tid 63017] [client 20.151.2.242:53356] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rdf.php"] [unique_id "aaF6E1QeueXZDUmoLokWpQAAAQ8"]
[Fri Feb 27 19:03:53.731639 2026] [:error] [pid 52073:tid 52078] [client 20.151.2.242:34952] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-rdf.php"] [unique_id "aaF6GYa650YPyxXVeRbi1QAAAYI"]
[Fri Feb 27 19:03:55.622079 2026] [:error] [pid 56075:tid 56096] [client 20.151.2.242:30817] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/fot.php"] [unique_id "aaF6G8KBhrfI6KNv9RhgWwAAABI"]
[Fri Feb 27 19:03:58.970243 2026] [:error] [pid 49306:tid 49326] [client 20.151.2.242:53459] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/fot.php"] [unique_id "aaF6HvnSUDZue59Px9vN9gAAAVI"]
[Fri Feb 27 19:04:13.023463 2026] [:error] [pid 54231:tid 54236] [client 20.151.2.242:27258] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/fot.php"] [unique_id "aaF6LeTvb5AeyJCdY7Ds3wAAAEI"]
[Fri Feb 27 19:04:19.056400 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:19.266348 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:19.496959 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:19.742644 2026] [proxy_fcgi:error] [pid 52073:tid 52086] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:20.529666 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:20.741805 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:21.003718 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:21.244160 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:21.495796 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:21.737056 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:21.948672 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 20.151.2.242:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:04:22.162766 2026] [:error] [pid 52073:tid 52093] [client 20.151.2.242:31359] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaigu.php"] [unique_id "aaF6Noa650YPyxXVeRbjIwAAAZE"]
[Fri Feb 27 19:04:29.953467 2026] [:error] [pid 54103:tid 54184] [client 20.151.2.242:40715] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaigu.php"] [unique_id "aaF6PevG4MPCmE0B2sCKoAAAAM0"]
[Fri Feb 27 19:04:35.616640 2026] [:error] [pid 49306:tid 49309] [client 20.151.2.242:58982] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaigu.php"] [unique_id "aaF6Q_nSUDZue59Px9vOYQAAAUE"]
[Fri Feb 27 19:04:38.960491 2026] [:error] [pid 52073:tid 52096] [client 20.151.2.242:59341] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad2.php"] [unique_id "aaF6Roa650YPyxXVeRbjRgAAAZQ"]
[Fri Feb 27 19:04:39.983975 2026] [:error] [pid 52073:tid 52090] [client 20.151.2.242:56280] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad2.php"] [unique_id "aaF6R4a650YPyxXVeRbjTQAAAY4"]
[Fri Feb 27 19:04:41.337478 2026] [:error] [pid 62998:tid 63008] [client 20.151.2.242:28640] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad2.php"] [unique_id "aaF6SVQeueXZDUmoLokXLwAAAQY"]
[Fri Feb 27 19:04:42.204348 2026] [:error] [pid 56075:tid 56095] [client 20.151.2.242:27260] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad2.php"] [unique_id "aaF6SsKBhrfI6KNv9Rhg0wAAABE"]
[Fri Feb 27 19:04:43.205297 2026] [:error] [pid 52073:tid 52097] [client 20.151.2.242:40794] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sad8rd1.php"] [unique_id "aaF6S4a650YPyxXVeRbjZQAAAZU"]
[Fri Feb 27 19:04:44.049605 2026] [:error] [pid 49306:tid 49321] [client 20.151.2.242:27246] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sad8rd1.php"] [unique_id "aaF6TPnSUDZue59Px9vOgQAAAU0"]
[Fri Feb 27 19:04:45.157671 2026] [:error] [pid 52073:tid 52094] [client 20.151.2.242:20861] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sad8rd1.php"] [unique_id "aaF6TYa650YPyxXVeRbjdQAAAZI"]
[Fri Feb 27 19:04:47.426937 2026] [:error] [pid 52073:tid 52081] [client 20.151.2.242:28639] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sad8rd1.php"] [unique_id "aaF6T4a650YPyxXVeRbjegAAAYU"]
[Fri Feb 27 19:04:48.991597 2026] [:error] [pid 49306:tid 49320] [client 20.151.2.242:59388] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaF6UPnSUDZue59Px9vOkwAAAUw"]
[Fri Feb 27 19:04:51.743282 2026] [:error] [pid 52073:tid 52084] [client 20.151.2.242:58954] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaF6U4a650YPyxXVeRbjhQAAAYg"]
[Fri Feb 27 19:04:58.688463 2026] [:error] [pid 52073:tid 52082] [client 20.151.2.242:57285] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaF6Woa650YPyxXVeRbjjQAAAYY"]
[Fri Feb 27 19:05:03.212144 2026] [:error] [pid 62998:tid 63007] [client 20.151.2.242:58986] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asix.php"] [unique_id "aaF6X1QeueXZDUmoLokXbQAAAQU"]
[Fri Feb 27 19:05:11.026256 2026] [:error] [pid 52073:tid 52099] [client 20.151.2.242:57065] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asix.php"] [unique_id "aaF6Z4a650YPyxXVeRbjwwAAAZc"]
[Fri Feb 27 19:05:32.912484 2026] [proxy_fcgi:error] [pid 52073:tid 52084] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:33.147531 2026] [proxy_fcgi:error] [pid 52073:tid 52098] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:33.385989 2026] [proxy_fcgi:error] [pid 52073:tid 52090] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:33.625248 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:33.833217 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:34.040189 2026] [proxy_fcgi:error] [pid 52073:tid 52100] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:34.283662 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:34.516774 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:34.725911 2026] [proxy_fcgi:error] [pid 52073:tid 52085] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:34.951725 2026] [proxy_fcgi:error] [pid 52073:tid 52076] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:35.175901 2026] [proxy_fcgi:error] [pid 52073:tid 52088] [client 20.151.2.242:57830] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:05:35.412964 2026] [:error] [pid 52073:tid 52092] [client 20.151.2.242:57830] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aaF6f4a650YPyxXVeRbkKgAAAZA"]
[Fri Feb 27 19:05:43.832756 2026] [:error] [pid 52073:tid 52081] [client 20.151.2.242:28478] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aaF6h4a650YPyxXVeRbkXQAAAYU"]
[Fri Feb 27 19:06:24.449306 2026] [:error] [pid 52073:tid 52078] [client 20.151.2.242:57750] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaF6sIa650YPyxXVeRbk6QAAAYI"]
[Fri Feb 27 19:06:29.006741 2026] [:error] [pid 56075:tid 56092] [client 20.151.2.242:45324] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user-new.php"] [unique_id "aaF6tcKBhrfI6KNv9RhhbAAAAA4"]
[Fri Feb 27 19:06:31.428824 2026] [:error] [pid 49306:tid 49311] [client 20.151.2.242:40960] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user-new.php"] [unique_id "aaF6t_nSUDZue59Px9vPhwAAAUM"]
[Fri Feb 27 19:06:36.441999 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 20.151.2.242:41015] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:06:39.994938 2026] [:error] [pid 49306:tid 49331] [client 20.151.2.242:41015] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaF6v_nSUDZue59Px9vPngAAAVc"]
[Fri Feb 27 19:06:43.804877 2026] [:error] [pid 56075:tid 56100] [client 20.151.2.242:39828] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaF6w8KBhrfI6KNv9RhhfgAAABY"]
[Fri Feb 27 19:06:45.989636 2026] [:error] [pid 56075:tid 56102] [client 20.151.2.242:33159] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaF6xcKBhrfI6KNv9RhhhgAAABg"]
[Fri Feb 27 19:06:50.029659 2026] [:error] [pid 56075:tid 56087] [client 20.151.2.242:33197] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaF6ysKBhrfI6KNv9RhhjQAAAAo"]
[Fri Feb 27 19:06:57.936222 2026] [:error] [pid 56075:tid 56098] [client 20.151.2.242:55357] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaF60cKBhrfI6KNv9RhhlQAAABQ"]
[Fri Feb 27 19:07:00.957741 2026] [:error] [pid 49306:tid 49325] [client 20.151.2.242:55308] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaF61PnSUDZue59Px9vPzwAAAVE"]
[Fri Feb 27 19:07:02.587195 2026] [:error] [pid 52073:tid 52082] [client 20.151.2.242:17040] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaF61oa650YPyxXVeRblywAAAYY"]
[Fri Feb 27 19:07:04.985219 2026] [:error] [pid 52073:tid 52086] [client 20.151.2.242:27147] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaF62Ia650YPyxXVeRbl8QAAAYo"]
[Fri Feb 27 19:07:06.796335 2026] [:error] [pid 49306:tid 49313] [client 20.151.2.242:22100] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaF62vnSUDZue59Px9vP4QAAAUU"]
[Fri Feb 27 19:07:08.144034 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 20.151.2.242:30775] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:07:08.383290 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 20.151.2.242:30775] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:07:08.792843 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 20.151.2.242:30775] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:07:09.178193 2026] [:error] [pid 49306:tid 49322] [client 20.151.2.242:30775] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aaF63fnSUDZue59Px9vP6QAAAU4"]
[Fri Feb 27 19:07:10.209630 2026] [:error] [pid 49306:tid 49329] [client 20.151.2.242:17704] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aaF63vnSUDZue59Px9vP8AAAAVU"]
[Fri Feb 27 19:07:11.826242 2026] [:error] [pid 52073:tid 52076] [client 20.151.2.242:17723] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aaF634a650YPyxXVeRbmAgAAAYA"]
[Fri Feb 27 19:07:13.474112 2026] [:error] [pid 52073:tid 52083] [client 20.151.2.242:27166] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aaF64Ya650YPyxXVeRbmDAAAAYc"]
[Fri Feb 27 19:07:15.820343 2026] [:error] [pid 54231:tid 54244] [client 20.151.2.242:16687] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aaF64-Tvb5AeyJCdY7DtSgAAAEo"]
[Fri Feb 27 19:07:17.031209 2026] [:error] [pid 52073:tid 52086] [client 20.151.2.242:28567] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aaF65Ya650YPyxXVeRbmMQAAAYo"]
[Fri Feb 27 19:07:19.147175 2026] [:error] [pid 52073:tid 52090] [client 20.151.2.242:22125] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aaF654a650YPyxXVeRbmRgAAAY4"]
[Fri Feb 27 19:07:20.963623 2026] [:error] [pid 52073:tid 52092] [client 20.151.2.242:35522] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aaF66Ia650YPyxXVeRbmUwAAAZA"]
[Fri Feb 27 19:07:29.293373 2026] [:error] [pid 52073:tid 52080] [client 20.151.2.242:28562] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aaF68Ya650YPyxXVeRbmlAAAAYQ"]
[Fri Feb 27 19:07:34.004844 2026] [:error] [pid 49306:tid 49316] [client 20.151.2.242:60106] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aaF69vnSUDZue59Px9vQFwAAAUg"]
[Fri Feb 27 19:07:36.262823 2026] [:error] [pid 52073:tid 52086] [client 20.151.2.242:54388] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "aaF6-Ia650YPyxXVeRbmmgAAAYo"]
[Fri Feb 27 19:07:37.336765 2026] [:error] [pid 54102:tid 54169] [client 20.151.2.242:52971] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aaF6-Xi74D4fiYUm_GdaHwAAAJg"]
[Fri Feb 27 19:07:39.626286 2026] [:error] [pid 56075:tid 56092] [client 20.151.2.242:51637] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aaF6-8KBhrfI6KNv9RhiBwAAAA4"]
[Fri Feb 27 19:07:42.058793 2026] [:error] [pid 54231:tid 54254] [client 20.151.2.242:45427] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aaF6_uTvb5AeyJCdY7DtYQAAAFQ"]
[Fri Feb 27 19:07:42.891585 2026] [:error] [pid 54101:tid 54130] [client 20.151.2.242:25569] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "aaF6_lY5qgRktcYTGFsw9QAAAdY"]
[Fri Feb 27 19:07:44.280630 2026] [:error] [pid 52073:tid 52079] [client 20.151.2.242:28530] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaF7AIa650YPyxXVeRbmvwAAAYM"]
[Fri Feb 27 19:07:45.771793 2026] [:error] [pid 52073:tid 52084] [client 20.151.2.242:30157] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaF7AYa650YPyxXVeRbmyAAAAYg"]
[Fri Feb 27 19:08:08.540286 2026] [proxy_fcgi:error] [pid 52073:tid 52084] [client 20.151.2.242:16442] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:08.971981 2026] [:error] [pid 52073:tid 52099] [client 20.151.2.242:16442] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aaF7GIa650YPyxXVeRbnQAAAAZc"]
[Fri Feb 27 19:08:28.580273 2026] [proxy_fcgi:error] [pid 56075:tid 56086] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:28.832407 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:29.075839 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:29.300701 2026] [proxy_fcgi:error] [pid 56075:tid 56085] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:29.556560 2026] [proxy_fcgi:error] [pid 56075:tid 56093] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:29.762628 2026] [proxy_fcgi:error] [pid 56075:tid 56099] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:29.984632 2026] [proxy_fcgi:error] [pid 56075:tid 56081] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:30.202101 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:30.410964 2026] [proxy_fcgi:error] [pid 56075:tid 56082] [client 20.151.2.242:33291] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:08:30.615971 2026] [:error] [pid 56075:tid 56077] [client 20.151.2.242:33291] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/my.php"] [unique_id "aaF7LsKBhrfI6KNv9RhicAAAAAA"]
[Fri Feb 27 19:08:42.385984 2026] [:error] [pid 49306:tid 49323] [client 20.151.2.242:39649] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/my.php"] [unique_id "aaF7OvnSUDZue59Px9vQtgAAAU8"]
[Fri Feb 27 19:08:43.934687 2026] [:error] [pid 52073:tid 52097] [client 20.151.2.242:52526] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/my.php"] [unique_id "aaF7O4a650YPyxXVeRbn4wAAAZU"]
[Fri Feb 27 19:08:46.912287 2026] [:error] [pid 52073:tid 52089] [client 20.151.2.242:31548] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaF7Poa650YPyxXVeRbn_AAAAY0"]
[Fri Feb 27 19:08:48.248741 2026] [:error] [pid 54102:tid 54169] [client 20.151.2.242:17302] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaF7QHi74D4fiYUm_GdaUgAAAJg"]
[Fri Feb 27 19:08:49.876257 2026] [:error] [pid 49306:tid 49321] [client 20.151.2.242:16934] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaF7QfnSUDZue59Px9vQzwAAAU0"]
[Fri Feb 27 19:08:54.084476 2026] [:error] [pid 54102:tid 54168] [client 20.151.2.242:25675] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaF7Rni74D4fiYUm_GdaWgAAAJc"]
[Fri Feb 27 19:08:55.960527 2026] [:error] [pid 62998:tid 63006] [client 20.151.2.242:36351] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp6.php"] [unique_id "aaF7R1QeueXZDUmoLokY0QAAAQQ"]
[Fri Feb 27 19:09:39.530246 2026] [proxy_fcgi:error] [pid 54231:tid 54243] [client 20.151.2.242:22017] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:09:39.739491 2026] [proxy_fcgi:error] [pid 54231:tid 54245] [client 20.151.2.242:22017] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:09:39.952474 2026] [proxy_fcgi:error] [pid 54231:tid 54256] [client 20.151.2.242:22017] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 19:09:40.166492 2026] [proxy_fcgi:error] [pid 54231:tid 54253] [client 20.151.2.242:22017] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:36.554427 2026] [proxy_fcgi:error] [pid 49306:tid 49328] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:36.762271 2026] [proxy_fcgi:error] [pid 49306:tid 49331] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:36.968703 2026] [proxy_fcgi:error] [pid 49306:tid 49325] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:37.175518 2026] [proxy_fcgi:error] [pid 49306:tid 49322] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:37.385614 2026] [proxy_fcgi:error] [pid 49306:tid 49330] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:37.592252 2026] [proxy_fcgi:error] [pid 49306:tid 49320] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:37.802284 2026] [proxy_fcgi:error] [pid 49306:tid 49313] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:38.010404 2026] [proxy_fcgi:error] [pid 49306:tid 49310] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:38.218864 2026] [proxy_fcgi:error] [pid 49306:tid 49324] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:38.436192 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 20.220.196.236:61472] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:00:38.640731 2026] [:error] [pid 49306:tid 49316] [client 20.220.196.236:61472] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGHZvnSUDZue59Px9vvGAAAAUg"]
[Fri Feb 27 20:00:39.055191 2026] [:error] [pid 56075:tid 56080] [client 20.220.196.236:61531] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGHZ8KBhrfI6KNv9Rh6UwAAAAM"]
[Fri Feb 27 20:00:39.468577 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:59334] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGHZ-Tvb5AeyJCdY7D5zgAAAEE"]
[Fri Feb 27 20:00:39.878048 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:61495] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGHZ8KBhrfI6KNv9Rh6YQAAABE"]
[Fri Feb 27 20:00:40.286484 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:61475] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGHaMKBhrfI6KNv9Rh6ZgAAABI"]
[Fri Feb 27 20:00:40.695965 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:61477] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGHaMKBhrfI6KNv9Rh6bQAAAA8"]
[Fri Feb 27 20:00:41.106642 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:61452] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGHacKBhrfI6KNv9Rh6cQAAAAk"]
[Fri Feb 27 20:00:41.518733 2026] [:error] [pid 62998:tid 63010] [client 20.220.196.236:59367] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGHaVQeueXZDUmoLoko5QAAAQg"]
[Fri Feb 27 20:00:41.929799 2026] [:error] [pid 54231:tid 54236] [client 20.220.196.236:61460] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGHaeTvb5AeyJCdY7D50AAAAEI"]
[Fri Feb 27 20:00:42.343629 2026] [:error] [pid 54103:tid 54185] [client 20.220.196.236:61529] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGHauvG4MPCmE0B2sCUswAAAM4"]
[Fri Feb 27 20:00:42.775570 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:61502] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGHaoa650YPyxXVeRYT7gAAAY8"]
[Fri Feb 27 20:00:43.206571 2026] [:error] [pid 54102:tid 54150] [client 20.220.196.236:59352] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGHa3i74D4fiYUm_GdicAAAAIY"]
[Fri Feb 27 20:00:43.621060 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:61521] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGHa1QeueXZDUmoLoko7QAAAQU"]
[Fri Feb 27 20:00:44.034144 2026] [:error] [pid 54101:tid 54110] [client 20.220.196.236:61467] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGHbFY5qgRktcYTGFs29gAAAcI"]
[Fri Feb 27 20:00:44.475148 2026] [:error] [pid 54101:tid 54117] [client 20.220.196.236:61559] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGHbFY5qgRktcYTGFs29wAAAck"]
[Fri Feb 27 20:00:44.888180 2026] [:error] [pid 62998:tid 63021] [client 20.220.196.236:61515] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGHbFQeueXZDUmoLoko8AAAARM"]
[Fri Feb 27 20:00:45.296824 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:61512] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGHbYa650YPyxXVeRYT9QAAAZY"]
[Fri Feb 27 20:00:45.709770 2026] [:error] [pid 62998:tid 63015] [client 20.220.196.236:61552] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGHbVQeueXZDUmoLoko8gAAAQ0"]
[Fri Feb 27 20:00:46.127833 2026] [:error] [pid 54231:tid 54256] [client 20.220.196.236:61558] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGHbuTvb5AeyJCdY7D53gAAAFY"]
[Fri Feb 27 20:00:46.542364 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:61541] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGHbvnSUDZue59Px9vvKAAAAUY"]
[Fri Feb 27 20:00:46.952443 2026] [:error] [pid 49306:tid 49316] [client 20.220.196.236:61463] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGHbvnSUDZue59Px9vvKQAAAUg"]
[Fri Feb 27 20:00:47.365769 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:61470] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGHb4a650YPyxXVeRYT_QAAAZQ"]
[Fri Feb 27 20:00:47.780426 2026] [:error] [pid 54102:tid 54144] [client 20.220.196.236:61480] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGHb3i74D4fiYUm_GdidQAAAIA"]
[Fri Feb 27 20:00:48.194096 2026] [:error] [pid 54103:tid 54185] [client 20.220.196.236:61462] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGHcOvG4MPCmE0B2sCUyQAAAM4"]
[Fri Feb 27 20:00:48.606892 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:59350] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGHcOTvb5AeyJCdY7D55wAAAFU"]
[Fri Feb 27 20:00:49.019469 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:61498] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGHcYa650YPyxXVeRYUAgAAAY8"]
[Fri Feb 27 20:00:49.433072 2026] [:error] [pid 54103:tid 54187] [client 20.220.196.236:61540] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGHcevG4MPCmE0B2sCUzQAAANA"]
[Fri Feb 27 20:00:49.845780 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:61487] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGHccKBhrfI6KNv9Rh6qAAAAAw"]
[Fri Feb 27 20:00:50.264078 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:59285] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGHcsKBhrfI6KNv9Rh6rQAAABY"]
[Fri Feb 27 20:00:50.682661 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:61453] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGHcvnSUDZue59Px9vvNAAAAVE"]
[Fri Feb 27 20:00:51.097193 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:61539] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGHc_nSUDZue59Px9vvOwAAAUE"]
[Fri Feb 27 20:00:51.509893 2026] [:error] [pid 54102:tid 54159] [client 20.220.196.236:61493] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGHc3i74D4fiYUm_GdieAAAAI8"]
[Fri Feb 27 20:00:51.918822 2026] [:error] [pid 54231:tid 54243] [client 20.220.196.236:61511] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGHc-Tvb5AeyJCdY7D57QAAAEk"]
[Fri Feb 27 20:00:52.328953 2026] [:error] [pid 62998:tid 63018] [client 20.220.196.236:61464] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGHdFQeueXZDUmoLoko-wAAARA"]
[Fri Feb 27 20:00:52.739453 2026] [:error] [pid 54102:tid 54147] [client 20.220.196.236:61469] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGHdHi74D4fiYUm_GdiggAAAIM"]
[Fri Feb 27 20:00:53.151509 2026] [:error] [pid 54102:tid 54162] [client 20.220.196.236:61557] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGHdXi74D4fiYUm_GdihQAAAJI"]
[Fri Feb 27 20:00:53.568319 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:61518] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGHdfnSUDZue59Px9vvQwAAAU0"]
[Fri Feb 27 20:00:53.993004 2026] [:error] [pid 54103:tid 54177] [client 20.220.196.236:61544] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGHdevG4MPCmE0B2sCU3wAAAMY"]
[Fri Feb 27 20:00:54.407204 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:61528] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGHdvnSUDZue59Px9vvSAAAAVc"]
[Fri Feb 27 20:00:54.816738 2026] [:error] [pid 54231:tid 54254] [client 20.220.196.236:61516] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGHduTvb5AeyJCdY7D59QAAAFQ"]
[Fri Feb 27 20:00:55.231581 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:59330] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGHd_nSUDZue59Px9vvTAAAAUI"]
[Fri Feb 27 20:00:55.647228 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:61465] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGHd_nSUDZue59Px9vvUAAAAUk"]
[Fri Feb 27 20:00:56.059581 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:59371] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGHeOTvb5AeyJCdY7D59wAAAEE"]
[Fri Feb 27 20:00:56.469133 2026] [:error] [pid 54101:tid 54129] [client 20.220.196.236:59376] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGHeFY5qgRktcYTGFs3BAAAAdU"]
[Fri Feb 27 20:00:56.877310 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:59332] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGHeFQeueXZDUmoLokpAwAAARI"]
[Fri Feb 27 20:00:57.291664 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:61486] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGHeVQeueXZDUmoLokpBwAAAQk"]
[Fri Feb 27 20:00:57.711070 2026] [:error] [pid 62998:tid 63008] [client 20.220.196.236:61536] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGHeVQeueXZDUmoLokpCgAAAQY"]
[Fri Feb 27 20:00:58.125356 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:61489] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGHelQeueXZDUmoLokpDQAAAQw"]
[Fri Feb 27 20:00:58.537820 2026] [:error] [pid 62998:tid 63022] [client 20.220.196.236:61546] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGHelQeueXZDUmoLokpDgAAARQ"]
[Fri Feb 27 20:00:58.947812 2026] [:error] [pid 49306:tid 49329] [client 20.220.196.236:61533] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGHevnSUDZue59Px9vvVwAAAVU"]
[Fri Feb 27 20:00:59.360803 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:61537] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGHe_nSUDZue59Px9vvWQAAAUY"]
[Fri Feb 27 20:00:59.774249 2026] [:error] [pid 54101:tid 54110] [client 20.220.196.236:59362] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGHe1Y5qgRktcYTGFs3CwAAAcI"]
[Fri Feb 27 20:01:00.188515 2026] [:error] [pid 54231:tid 54244] [client 20.220.196.236:61483] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGHfOTvb5AeyJCdY7D5-QAAAEo"]
[Fri Feb 27 20:01:00.596685 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:61555] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGHfPnSUDZue59Px9vvXQAAAVI"]
[Fri Feb 27 20:01:01.012113 2026] [:error] [pid 54103:tid 54176] [client 20.220.196.236:61549] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGHfevG4MPCmE0B2sCU8AAAAMU"]
[Fri Feb 27 20:01:01.424857 2026] [:error] [pid 54101:tid 54108] [client 20.220.196.236:59331] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGHfVY5qgRktcYTGFs3EQAAAcA"]
[Fri Feb 27 20:01:01.835501 2026] [:error] [pid 54103:tid 54184] [client 20.220.196.236:61520] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGHfevG4MPCmE0B2sCU9QAAAM0"]
[Fri Feb 27 20:01:02.254095 2026] [:error] [pid 54231:tid 54242] [client 20.220.196.236:61525] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGHfuTvb5AeyJCdY7D5_QAAAEg"]
[Fri Feb 27 20:01:02.706003 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:61455] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGHfvnSUDZue59Px9vvYQAAAUk"]
[Fri Feb 27 20:01:03.120730 2026] [:error] [pid 49306:tid 49316] [client 20.220.196.236:59333] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGHf_nSUDZue59Px9vvYgAAAUg"]
[Fri Feb 27 20:01:03.535282 2026] [:error] [pid 54103:tid 54182] [client 20.220.196.236:61561] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGHf-vG4MPCmE0B2sCU_gAAAMs"]
[Fri Feb 27 20:01:03.947890 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:61532] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGHf_nSUDZue59Px9vvZQAAAVg"]
[Fri Feb 27 20:01:04.357457 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:61505] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGHgPnSUDZue59Px9vvaAAAAUw"]
[Fri Feb 27 20:01:04.768665 2026] [:error] [pid 49306:tid 49329] [client 20.220.196.236:61534] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGHgPnSUDZue59Px9vvagAAAVU"]
[Fri Feb 27 20:01:05.178831 2026] [:error] [pid 54102:tid 54149] [client 20.220.196.236:61530] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGHgXi74D4fiYUm_GdilAAAAIU"]
[Fri Feb 27 20:01:05.589409 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:61450] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGHgfnSUDZue59Px9vvbgAAAUI"]
[Fri Feb 27 20:01:05.999251 2026] [:error] [pid 54101:tid 54117] [client 20.220.196.236:61567] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGHgVY5qgRktcYTGFs3HwAAAck"]
[Fri Feb 27 20:01:06.414650 2026] [:error] [pid 54231:tid 54256] [client 20.220.196.236:59360] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGHguTvb5AeyJCdY7D6BgAAAFY"]
[Fri Feb 27 20:01:06.828033 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:61542] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGHgsKBhrfI6KNv9Rh68wAAAA8"]
[Fri Feb 27 20:01:07.242022 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:61547] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGHg4a650YPyxXVeRYUDgAAAZQ"]
[Fri Feb 27 20:01:07.658710 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:61524] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGHg8KBhrfI6KNv9Rh69gAAAAE"]
[Fri Feb 27 20:01:08.079077 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:61451] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGHhMKBhrfI6KNv9Rh6-QAAABc"]
[Fri Feb 27 20:01:08.488362 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:61468] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGHhMKBhrfI6KNv9Rh6_gAAABA"]
[Fri Feb 27 20:01:08.902812 2026] [:error] [pid 54103:tid 54174] [client 20.220.196.236:61500] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGHhOvG4MPCmE0B2sCVCwAAAMM"]
[Fri Feb 27 20:01:09.320666 2026] [:error] [pid 49306:tid 49323] [client 20.220.196.236:61496] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGHhfnSUDZue59Px9vveAAAAU8"]
[Fri Feb 27 20:01:09.736980 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:59345] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGHhVQeueXZDUmoLokpEwAAAQU"]
[Fri Feb 27 20:01:10.155353 2026] [:error] [pid 62998:tid 63004] [client 20.220.196.236:61466] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGHhlQeueXZDUmoLokpFQAAAQI"]
[Fri Feb 27 20:01:10.571438 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:61476] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGHhoa650YPyxXVeRYUFAAAAYs"]
[Fri Feb 27 20:01:10.983981 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:61514] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGHhoa650YPyxXVeRYUFwAAAYY"]
[Fri Feb 27 20:01:11.397069 2026] [:error] [pid 54101:tid 54124] [client 20.220.196.236:61508] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGHh1Y5qgRktcYTGFs3IAAAAdA"]
[Fri Feb 27 20:01:11.816240 2026] [:error] [pid 54102:tid 54158] [client 20.220.196.236:61551] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGHh3i74D4fiYUm_GdimwAAAI4"]
[Fri Feb 27 20:01:12.261562 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:61440] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGHiOTvb5AeyJCdY7D6CQAAAEE"]
[Fri Feb 27 20:01:12.678267 2026] [:error] [pid 54101:tid 54127] [client 20.220.196.236:59287] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGHiFY5qgRktcYTGFs3IQAAAdM"]
[Fri Feb 27 20:01:13.095580 2026] [:error] [pid 54231:tid 54252] [client 20.220.196.236:61550] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGHieTvb5AeyJCdY7D6DAAAAFI"]
[Fri Feb 27 20:01:13.509855 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:59361] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGHicKBhrfI6KNv9Rh7AQAAABY"]
[Fri Feb 27 20:01:13.919578 2026] [:error] [pid 54231:tid 54253] [client 20.220.196.236:61510] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGHieTvb5AeyJCdY7D6DgAAAFM"]
[Fri Feb 27 20:01:14.330181 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:61457] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGHisKBhrfI6KNv9Rh7BgAAABg"]
[Fri Feb 27 20:01:14.741751 2026] [:error] [pid 54102:tid 54161] [client 20.220.196.236:59328] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGHini74D4fiYUm_GdioQAAAJE"]
[Fri Feb 27 20:01:15.151964 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:61504] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGHi4a650YPyxXVeRYUHgAAAZY"]
[Fri Feb 27 20:01:15.560881 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:61560] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGHi-Tvb5AeyJCdY7D6EAAAAFU"]
[Fri Feb 27 20:01:15.975804 2026] [:error] [pid 62998:tid 63009] [client 20.220.196.236:61548] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGHi1QeueXZDUmoLokpHAAAAQc"]
[Fri Feb 27 20:01:16.393322 2026] [:error] [pid 54231:tid 54239] [client 20.220.196.236:61473] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGHjOTvb5AeyJCdY7D6EQAAAEU"]
[Fri Feb 27 20:01:16.809981 2026] [:error] [pid 54231:tid 54242] [client 20.220.196.236:61554] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGHjOTvb5AeyJCdY7D6EwAAAEg"]
[Fri Feb 27 20:01:17.224683 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:61522] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGHjYa650YPyxXVeRYUIQAAAYQ"]
[Fri Feb 27 20:01:17.653345 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:61543] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGHjYa650YPyxXVeRYUJAAAAZE"]
[Fri Feb 27 20:01:18.065129 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:61491] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGHjoa650YPyxXVeRYUJgAAAZg"]
[Fri Feb 27 20:01:18.486138 2026] [:error] [pid 62998:tid 63001] [client 20.220.196.236:61488] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGHjlQeueXZDUmoLokpHwAAAQA"]
[Fri Feb 27 20:01:18.900692 2026] [:error] [pid 62998:tid 63006] [client 20.220.196.236:59335] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGHjlQeueXZDUmoLokpIAAAAQQ"]
[Fri Feb 27 20:01:19.341631 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:59271] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGHj8KBhrfI6KNv9Rh7DQAAABI"]
[Fri Feb 27 20:01:19.750467 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:59363] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGHj4a650YPyxXVeRYULAAAAYI"]
[Fri Feb 27 20:01:20.163591 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:59386] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGHkFQeueXZDUmoLokpIwAAARE"]
[Fri Feb 27 20:01:20.578524 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:59385] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGHkPnSUDZue59Px9vvowAAAUk"]
[Fri Feb 27 20:01:20.993254 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:61471] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGHkOTvb5AeyJCdY7D6FgAAAFc"]
[Fri Feb 27 20:01:21.411135 2026] [:error] [pid 62998:tid 63004] [client 20.220.196.236:61519] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGHkVQeueXZDUmoLokpJwAAAQI"]
[Fri Feb 27 20:01:21.823456 2026] [:error] [pid 62998:tid 63005] [client 20.220.196.236:61501] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGHkVQeueXZDUmoLokpKgAAAQM"]
[Fri Feb 27 20:01:22.248621 2026] [:error] [pid 62998:tid 63012] [client 20.220.196.236:61445] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGHklQeueXZDUmoLokpLAAAAQo"]
[Fri Feb 27 20:01:22.659316 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:59299] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGHkuTvb5AeyJCdY7D6GAAAAEw"]
[Fri Feb 27 20:01:23.070498 2026] [:error] [pid 54101:tid 54121] [client 20.220.196.236:59365] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGHk1Y5qgRktcYTGFs3KgAAAc0"]
[Fri Feb 27 20:01:23.482834 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:61545] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGHk8KBhrfI6KNv9Rh7EgAAAAs"]
[Fri Feb 27 20:01:23.899815 2026] [:error] [pid 54101:tid 54110] [client 20.220.196.236:61517] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGHk1Y5qgRktcYTGFs3LAAAAcI"]
[Fri Feb 27 20:01:24.314903 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:59291] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGHlMKBhrfI6KNv9Rh7FAAAAAc"]
[Fri Feb 27 20:01:24.740659 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:59278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGHlMKBhrfI6KNv9Rh7FQAAABg"]
[Fri Feb 27 20:01:25.150466 2026] [:error] [pid 49306:tid 49308] [client 20.220.196.236:59381] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGHlfnSUDZue59Px9vvsAAAAUA"]
[Fri Feb 27 20:01:25.561708 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:56051] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGHlfnSUDZue59Px9vvsgAAAVA"]
[Fri Feb 27 20:01:25.970513 2026] [:error] [pid 54231:tid 54237] [client 20.220.196.236:59364] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGHleTvb5AeyJCdY7D6GgAAAEM"]
[Fri Feb 27 20:01:26.382487 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:61523] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGHlvnSUDZue59Px9vvtwAAAUk"]
[Fri Feb 27 20:01:26.799141 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:59316] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGHlvnSUDZue59Px9vvvAAAAU4"]
[Fri Feb 27 20:01:27.211281 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:59294] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGHl1QeueXZDUmoLokpSgAAAQw"]
[Fri Feb 27 20:01:27.622227 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:59378] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGHl_nSUDZue59Px9vvwgAAAUw"]
[Fri Feb 27 20:01:28.036541 2026] [:error] [pid 54101:tid 54124] [client 20.220.196.236:61503] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGHmFY5qgRktcYTGFs3LwAAAdA"]
[Fri Feb 27 20:01:28.445445 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:56031] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGHmMKBhrfI6KNv9Rh7GQAAABQ"]
[Fri Feb 27 20:01:28.865563 2026] [:error] [pid 62998:tid 63012] [client 20.220.196.236:59380] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGHmFQeueXZDUmoLokpWAAAAQo"]
[Fri Feb 27 20:01:29.283048 2026] [:error] [pid 62998:tid 63016] [client 20.220.196.236:61564] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGHmVQeueXZDUmoLokpXAAAAQ4"]
[Fri Feb 27 20:01:29.701854 2026] [:error] [pid 62998:tid 63018] [client 20.220.196.236:61527] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGHmVQeueXZDUmoLokpYAAAARA"]
[Fri Feb 27 20:01:30.116473 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:61497] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGHmoa650YPyxXVeRYUNwAAAYo"]
[Fri Feb 27 20:01:30.526411 2026] [:error] [pid 54101:tid 54108] [client 20.220.196.236:59284] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGHmlY5qgRktcYTGFs3MAAAAcA"]
[Fri Feb 27 20:01:30.939087 2026] [:error] [pid 54101:tid 54132] [client 20.220.196.236:61494] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGHmlY5qgRktcYTGFs3MgAAAdg"]
[Fri Feb 27 20:01:31.353714 2026] [:error] [pid 54231:tid 54253] [client 20.220.196.236:61461] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGHm-Tvb5AeyJCdY7D6HwAAAFM"]
[Fri Feb 27 20:01:31.767543 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:59343] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGHm4a650YPyxXVeRYUOwAAAY8"]
[Fri Feb 27 20:01:32.181774 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:61535] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGHnMKBhrfI6KNv9Rh7GwAAAA4"]
[Fri Feb 27 20:01:32.597505 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:59374] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGHnMKBhrfI6KNv9Rh7HgAAAA0"]
[Fri Feb 27 20:01:33.012433 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:61556] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGHncKBhrfI6KNv9Rh7IQAAAAw"]
[Fri Feb 27 20:01:33.432437 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:61565] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGHncKBhrfI6KNv9Rh7JQAAABg"]
[Fri Feb 27 20:01:33.847292 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:55938] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGHncKBhrfI6KNv9Rh7KQAAAAA"]
[Fri Feb 27 20:01:34.259378 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:56011] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGHnsKBhrfI6KNv9Rh7LAAAAAg"]
[Fri Feb 27 20:01:34.672743 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:61490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGHnsKBhrfI6KNv9Rh7MwAAABI"]
[Fri Feb 27 20:01:35.117120 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:59354] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGHn8KBhrfI6KNv9Rh7NQAAAAs"]
[Fri Feb 27 20:01:35.541189 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:59338] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGHn8KBhrfI6KNv9Rh7OAAAAAo"]
[Fri Feb 27 20:01:35.952932 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:61566] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGHn8KBhrfI6KNv9Rh7OwAAAAU"]
[Fri Feb 27 20:01:36.366679 2026] [:error] [pid 54231:tid 54238] [client 20.220.196.236:59286] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGHoOTvb5AeyJCdY7D6JgAAAEQ"]
[Fri Feb 27 20:01:36.783024 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:61526] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.wp/wso.php"] [unique_id "aaGHoIa650YPyxXVeRYUPgAAAZU"]
[Fri Feb 27 20:01:37.197644 2026] [:error] [pid 54101:tid 54109] [client 20.220.196.236:61446] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.wp/wso.php"] [unique_id "aaGHoVY5qgRktcYTGFs3NgAAAcE"]
[Fri Feb 27 20:01:37.611243 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:59300] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.wp/wso.php"] [unique_id "aaGHoeTvb5AeyJCdY7D6KgAAAEA"]
[Fri Feb 27 20:01:38.655657 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:59306] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaGHouTvb5AeyJCdY7D6MQAAAEE"]
[Fri Feb 27 20:01:39.081845 2026] [proxy_fcgi:error] [pid 54101:tid 54123] [client 20.220.196.236:59324] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:01:41.206361 2026] [proxy_fcgi:error] [pid 54101:tid 54108] [client 20.220.196.236:59324] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:01:41.415152 2026] [:error] [pid 54101:tid 54132] [client 20.220.196.236:59324] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGHpVY5qgRktcYTGFs3RQAAAdg"]
[Fri Feb 27 20:01:41.829703 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:61444] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGHpcKBhrfI6KNv9Rh7YgAAAAY"]
[Fri Feb 27 20:01:42.238127 2026] [:error] [pid 54231:tid 54249] [client 20.220.196.236:59304] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGHpuTvb5AeyJCdY7D6NAAAAE8"]
[Fri Feb 27 20:01:42.649085 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:59389] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGHpsKBhrfI6KNv9Rh7bwAAABU"]
[Fri Feb 27 20:01:43.064459 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:59388] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGHp8KBhrfI6KNv9Rh7cgAAABY"]
[Fri Feb 27 20:01:43.492967 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:59382] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGHp8KBhrfI6KNv9Rh7dgAAAAc"]
[Fri Feb 27 20:01:43.909425 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:59308] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGHp8KBhrfI6KNv9Rh7fgAAABU"]
[Fri Feb 27 20:01:44.318513 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:59372] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGHqIa650YPyxXVeRYUTwAAAYc"]
[Fri Feb 27 20:01:44.726766 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:59384] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGHqIa650YPyxXVeRYUUgAAAYY"]
[Fri Feb 27 20:01:45.138482 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:61507] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGHqYa650YPyxXVeRYUUwAAAZg"]
[Fri Feb 27 20:01:45.548213 2026] [:error] [pid 54102:tid 54161] [client 20.220.196.236:59267] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGHqXi74D4fiYUm_GdisgAAAJE"]
[Fri Feb 27 20:01:45.961616 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:59358] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGHqYa650YPyxXVeRYUVgAAAZU"]
[Fri Feb 27 20:01:46.372022 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:56037] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGHqsKBhrfI6KNv9Rh7pwAAABg"]
[Fri Feb 27 20:01:46.785159 2026] [:error] [pid 54102:tid 54156] [client 20.220.196.236:59341] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGHqni74D4fiYUm_GditAAAAIw"]
[Fri Feb 27 20:01:47.194191 2026] [:error] [pid 54231:tid 54245] [client 20.220.196.236:61481] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGHq-Tvb5AeyJCdY7D6OgAAAEs"]
[Fri Feb 27 20:01:47.605219 2026] [:error] [pid 54103:tid 54192] [client 20.220.196.236:59295] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGHq-vG4MPCmE0B2sCVQQAAANU"]
[Fri Feb 27 20:01:48.025051 2026] [:error] [pid 62998:tid 63025] [client 20.220.196.236:59276] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGHrFQeueXZDUmoLokpjwAAARc"]
[Fri Feb 27 20:01:48.437299 2026] [:error] [pid 54102:tid 54165] [client 20.220.196.236:59293] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGHrHi74D4fiYUm_GditgAAAJU"]
[Fri Feb 27 20:01:48.847485 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:61509] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGHrIa650YPyxXVeRYUYwAAAZg"]
[Fri Feb 27 20:01:49.257245 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:59289] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGHrYa650YPyxXVeRYUaQAAAYg"]
[Fri Feb 27 20:01:49.669609 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:59269] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGHrVQeueXZDUmoLokpkAAAAQU"]
[Fri Feb 27 20:01:50.082070 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:59274] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGHrvnSUDZue59Px9vv5QAAAUk"]
[Fri Feb 27 20:01:50.492596 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:59326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGHroa650YPyxXVeRYUcAAAAYQ"]
[Fri Feb 27 20:01:50.906947 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:61474] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGHroa650YPyxXVeRYUcwAAAZI"]
[Fri Feb 27 20:01:51.320117 2026] [:error] [pid 54231:tid 54240] [client 20.220.196.236:59303] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGHr-Tvb5AeyJCdY7D6PgAAAEY"]
[Fri Feb 27 20:01:51.734332 2026] [:error] [pid 49306:tid 49318] [client 20.220.196.236:59390] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGHr_nSUDZue59Px9vv6AAAAUo"]
[Fri Feb 27 20:01:52.158163 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:61506] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGHsPnSUDZue59Px9vv6QAAAU4"]
[Fri Feb 27 20:01:52.577656 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:61482] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGHsMKBhrfI6KNv9Rh7wgAAAA8"]
[Fri Feb 27 20:01:52.988039 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:59288] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGHsIa650YPyxXVeRYUfgAAAYA"]
[Fri Feb 27 20:01:53.397641 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:61449] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGHscKBhrfI6KNv9Rh7xwAAAA4"]
[Fri Feb 27 20:01:53.806239 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:56058] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGHsVQeueXZDUmoLokpmAAAARY"]
[Fri Feb 27 20:01:54.215698 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:59366] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGHsoa650YPyxXVeRYUiAAAAYk"]
[Fri Feb 27 20:01:54.625652 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:59348] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGHsvnSUDZue59Px9vv8gAAAVc"]
[Fri Feb 27 20:01:55.037715 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:59297] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGHs4a650YPyxXVeRYUkAAAAYE"]
[Fri Feb 27 20:01:55.451935 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:55948] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGHs4a650YPyxXVeRYUlAAAAYM"]
[Fri Feb 27 20:01:55.865275 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:59305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGHs8KBhrfI6KNv9Rh7zgAAAAA"]
[Fri Feb 27 20:01:56.279520 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:59347] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGHtMKBhrfI6KNv9Rh70QAAABM"]
[Fri Feb 27 20:01:56.697664 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:61479] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGHtMKBhrfI6KNv9Rh71QAAABY"]
[Fri Feb 27 20:01:57.124895 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:56034] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGHtYa650YPyxXVeRYUoAAAAYE"]
[Fri Feb 27 20:01:57.535534 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:59273] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGHtYa650YPyxXVeRYUpAAAAYM"]
[Fri Feb 27 20:01:57.944109 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:59321] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGHtcKBhrfI6KNv9Rh72wAAAAo"]
[Fri Feb 27 20:01:58.355629 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:59340] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGHtoa650YPyxXVeRYUrAAAAZI"]
[Fri Feb 27 20:01:58.770303 2026] [:error] [pid 62998:tid 63006] [client 20.220.196.236:59373] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGHtlQeueXZDUmoLokpnAAAAQQ"]
[Fri Feb 27 20:01:59.186266 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:61441] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGHt8KBhrfI6KNv9Rh74gAAAAk"]
[Fri Feb 27 20:01:59.605131 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:56053] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGHt_nSUDZue59Px9vv-gAAAUk"]
[Fri Feb 27 20:02:00.019205 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:59311] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGHuOTvb5AeyJCdY7D6PwAAAFc"]
[Fri Feb 27 20:02:00.430334 2026] [:error] [pid 54103:tid 54175] [client 20.220.196.236:56004] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGHuOvG4MPCmE0B2sCVSgAAAMQ"]
[Fri Feb 27 20:02:00.837977 2026] [:error] [pid 54101:tid 54116] [client 20.220.196.236:56000] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGHuFY5qgRktcYTGFs3UgAAAcg"]
[Fri Feb 27 20:02:01.258331 2026] [:error] [pid 54101:tid 54124] [client 20.220.196.236:59370] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGHuVY5qgRktcYTGFs3UwAAAdA"]
[Fri Feb 27 20:02:01.667646 2026] [:error] [pid 54101:tid 54108] [client 20.220.196.236:59356] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGHuVY5qgRktcYTGFs3VAAAAcA"]
[Fri Feb 27 20:02:02.083506 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:59351] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGHulQeueXZDUmoLokpoQAAAQw"]
[Fri Feb 27 20:02:02.508171 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:61563] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGHuoa650YPyxXVeRYUwwAAAYE"]
[Fri Feb 27 20:02:02.921909 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:56045] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGHusKBhrfI6KNv9Rh78AAAABM"]
[Fri Feb 27 20:02:03.341861 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:59375] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGHu8KBhrfI6KNv9Rh78gAAABI"]
[Fri Feb 27 20:02:03.763480 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:59353] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGHu1QeueXZDUmoLokpowAAAQU"]
[Fri Feb 27 20:02:04.181673 2026] [:error] [pid 54101:tid 54132] [client 20.220.196.236:56022] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGHvFY5qgRktcYTGFs3VQAAAdg"]
[Fri Feb 27 20:02:04.597319 2026] [:error] [pid 54103:tid 54172] [client 20.220.196.236:59379] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGHvOvG4MPCmE0B2sCVUAAAAME"]
[Fri Feb 27 20:02:05.016523 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:61485] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGHvcKBhrfI6KNv9Rh7_AAAAAg"]
[Fri Feb 27 20:02:05.434361 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:59387] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGHvYa650YPyxXVeRYUzwAAAYw"]
[Fri Feb 27 20:02:05.848638 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:59357] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGHvYa650YPyxXVeRYU1AAAAYI"]
[Fri Feb 27 20:02:06.259098 2026] [:error] [pid 54103:tid 54191] [client 20.220.196.236:56027] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGHvuvG4MPCmE0B2sCVVQAAANQ"]
[Fri Feb 27 20:02:06.684951 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:59323] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGHvsKBhrfI6KNv9Rh8CQAAAAI"]
[Fri Feb 27 20:02:07.096110 2026] [:error] [pid 54101:tid 54127] [client 20.220.196.236:56030] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGHv1Y5qgRktcYTGFs3WQAAAdM"]
[Fri Feb 27 20:02:07.507967 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:61562] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGHv8KBhrfI6KNv9Rh8GAAAAAo"]
[Fri Feb 27 20:02:07.924741 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:56017] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGHv8KBhrfI6KNv9Rh8JgAAAAA"]
[Fri Feb 27 20:02:08.368564 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:59301] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGHwPnSUDZue59Px9vwAwAAAUw"]
[Fri Feb 27 20:02:08.781595 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:59313] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGHwIa650YPyxXVeRYU3QAAAYo"]
[Fri Feb 27 20:02:09.199652 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:56003] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGHwYa650YPyxXVeRYU4gAAAYA"]
[Fri Feb 27 20:02:09.625943 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:61513] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGHwYa650YPyxXVeRYU6AAAAZc"]
[Fri Feb 27 20:02:10.036575 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:59318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGHwvnSUDZue59Px9vwCQAAAVA"]
[Fri Feb 27 20:02:10.446518 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:61492] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGHwoa650YPyxXVeRYU6QAAAZY"]
[Fri Feb 27 20:02:10.859295 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:55993] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGHwoa650YPyxXVeRYU8AAAAYc"]
[Fri Feb 27 20:02:11.271347 2026] [:error] [pid 54231:tid 54258] [client 20.220.196.236:56016] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGHw-Tvb5AeyJCdY7D6SAAAAFg"]
[Fri Feb 27 20:02:11.685488 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:56046] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGHw8KBhrfI6KNv9Rh8QQAAAAc"]
[Fri Feb 27 20:02:12.099732 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:59359] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGHxMKBhrfI6KNv9Rh8RAAAAA0"]
[Fri Feb 27 20:02:12.509310 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:59292] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGHxIa650YPyxXVeRYU-QAAAY4"]
[Fri Feb 27 20:02:12.922742 2026] [:error] [pid 54231:tid 54238] [client 20.220.196.236:56007] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGHxOTvb5AeyJCdY7D6TAAAAEQ"]
[Fri Feb 27 20:02:13.345731 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:61458] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGHxfnSUDZue59Px9vwGgAAAVg"]
[Fri Feb 27 20:02:13.767600 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:55995] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGHxYa650YPyxXVeRYU_gAAAYM"]
[Fri Feb 27 20:02:14.191505 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:61484] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGHxsKBhrfI6KNv9Rh8VQAAABg"]
[Fri Feb 27 20:02:14.601829 2026] [:error] [pid 54231:tid 54251] [client 20.220.196.236:55936] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGHxuTvb5AeyJCdY7D6TwAAAFE"]
[Fri Feb 27 20:02:15.018205 2026] [:error] [pid 62998:tid 63023] [client 20.220.196.236:59290] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGHx1QeueXZDUmoLokprgAAARU"]
[Fri Feb 27 20:02:15.442460 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:56059] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGHx8KBhrfI6KNv9Rh8XQAAAA8"]
[Fri Feb 27 20:02:15.856644 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:59298] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGHx8KBhrfI6KNv9Rh8YwAAAAI"]
[Fri Feb 27 20:02:16.275938 2026] [:error] [pid 54231:tid 54243] [client 20.220.196.236:59369] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGHyOTvb5AeyJCdY7D6UQAAAEk"]
[Fri Feb 27 20:02:16.690959 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:56043] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGHyMKBhrfI6KNv9Rh8bAAAAA4"]
[Fri Feb 27 20:02:17.100698 2026] [:error] [pid 54103:tid 54178] [client 20.220.196.236:55971] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGHyevG4MPCmE0B2sCVXwAAAMc"]
[Fri Feb 27 20:02:17.510890 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:56061] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGHyYa650YPyxXVeRYVDgAAAZc"]
[Fri Feb 27 20:02:17.926600 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:59314] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGHyYa650YPyxXVeRYVEwAAAZA"]
[Fri Feb 27 20:02:18.342635 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:59315] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGHyoa650YPyxXVeRYVGAAAAYQ"]
[Fri Feb 27 20:02:18.796433 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:56008] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGHyoa650YPyxXVeRYVGwAAAYw"]
[Fri Feb 27 20:02:19.206900 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:56012] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGHy-Tvb5AeyJCdY7D6UgAAAFc"]
[Fri Feb 27 20:02:19.620288 2026] [:error] [pid 54103:tid 54182] [client 20.220.196.236:59339] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGHy-vG4MPCmE0B2sCVZgAAAMs"]
[Fri Feb 27 20:02:20.032194 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:59368] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGHzMKBhrfI6KNv9Rh8fgAAAAs"]
[Fri Feb 27 20:02:20.442291 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:59337] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGHzMKBhrfI6KNv9Rh8hAAAABc"]
[Fri Feb 27 20:02:20.855700 2026] [:error] [pid 49306:tid 49313] [client 20.220.196.236:55999] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGHzPnSUDZue59Px9vwNgAAAUU"]
[Fri Feb 27 20:02:21.266811 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:59280] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGHzcKBhrfI6KNv9Rh8iwAAABM"]
[Fri Feb 27 20:02:21.686678 2026] [:error] [pid 49306:tid 49312] [client 20.220.196.236:61448] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGHzfnSUDZue59Px9vwOwAAAUQ"]
[Fri Feb 27 20:02:22.112779 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:56063] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGHzoa650YPyxXVeRYVIwAAAZE"]
[Fri Feb 27 20:02:22.528926 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:59265] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGHzvnSUDZue59Px9vwQQAAAUY"]
[Fri Feb 27 20:02:22.939724 2026] [:error] [pid 54231:tid 54248] [client 20.220.196.236:59317] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGHzuTvb5AeyJCdY7D6WQAAAE4"]
[Fri Feb 27 20:02:23.354612 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:56035] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGHz4a650YPyxXVeRYVMgAAAZM"]
[Fri Feb 27 20:02:23.768369 2026] [:error] [pid 54102:tid 54153] [client 20.220.196.236:59336] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGHz3i74D4fiYUm_GdiygAAAIk"]
[Fri Feb 27 20:02:24.185300 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:59270] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGH0MKBhrfI6KNv9Rh8pwAAAA0"]
[Fri Feb 27 20:02:24.594971 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:56060] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGH0MKBhrfI6KNv9Rh8sAAAAAk"]
[Fri Feb 27 20:02:25.005405 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:59391] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGH0cKBhrfI6KNv9Rh8uAAAAA4"]
[Fri Feb 27 20:02:25.419973 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:61442] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGH0cKBhrfI6KNv9Rh8wAAAABE"]
[Fri Feb 27 20:02:25.842140 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:56010] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGH0fnSUDZue59Px9vwUQAAAU4"]
[Fri Feb 27 20:02:26.255930 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:56001] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGH0vnSUDZue59Px9vwVAAAAUw"]
[Fri Feb 27 20:02:26.668159 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:55432] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGH0sKBhrfI6KNv9Rh81AAAAA8"]
[Fri Feb 27 20:02:27.081324 2026] [:error] [pid 54231:tid 54236] [client 20.220.196.236:56048] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGH0-Tvb5AeyJCdY7D6XAAAAEI"]
[Fri Feb 27 20:02:27.494224 2026] [:error] [pid 54102:tid 54151] [client 20.220.196.236:61478] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGH03i74D4fiYUm_GdizQAAAIc"]
[Fri Feb 27 20:02:27.903999 2026] [:error] [pid 54231:tid 54245] [client 20.220.196.236:59322] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGH0-Tvb5AeyJCdY7D6XgAAAEs"]
[Fri Feb 27 20:02:28.321961 2026] [:error] [pid 54101:tid 54119] [client 20.220.196.236:59307] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGH1FY5qgRktcYTGFs3XwAAAcs"]
[Fri Feb 27 20:02:28.741155 2026] [:error] [pid 62998:tid 63013] [client 20.220.196.236:56009] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGH1FQeueXZDUmoLokpvQAAAQs"]
[Fri Feb 27 20:02:29.160766 2026] [:error] [pid 62998:tid 63026] [client 20.220.196.236:55937] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGH1VQeueXZDUmoLokpvgAAARg"]
[Fri Feb 27 20:02:29.571072 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:55978] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGH1eTvb5AeyJCdY7D6YwAAAFU"]
[Fri Feb 27 20:02:29.988718 2026] [:error] [pid 54231:tid 54251] [client 20.220.196.236:59326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGH1eTvb5AeyJCdY7D6ZAAAAFE"]
[Fri Feb 27 20:02:30.405331 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:56042] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGH1sKBhrfI6KNv9Rh88QAAAAU"]
[Fri Feb 27 20:02:30.817729 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:55941] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGH1lQeueXZDUmoLokpwQAAAQU"]
[Fri Feb 27 20:02:31.230628 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:59320] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGH1-Tvb5AeyJCdY7D6ZwAAAEA"]
[Fri Feb 27 20:02:31.647019 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:59264] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGH14a650YPyxXVeRYVSwAAAYs"]
[Fri Feb 27 20:02:32.063607 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:56018] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGH2MKBhrfI6KNv9Rh8_wAAAAs"]
[Fri Feb 27 20:02:32.475684 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:61443] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGH2MKBhrfI6KNv9Rh9BAAAAAI"]
[Fri Feb 27 20:02:32.890651 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:55964] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGH2MKBhrfI6KNv9Rh9DQAAAAo"]
[Fri Feb 27 20:02:33.310283 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:55952] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGH2fnSUDZue59Px9vwbAAAAUY"]
[Fri Feb 27 20:02:33.728797 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:56026] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGH2cKBhrfI6KNv9Rh9FAAAAA4"]
[Fri Feb 27 20:02:34.142579 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:59377] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGH2oa650YPyxXVeRYVVAAAAZg"]
[Fri Feb 27 20:02:34.556155 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:55940] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGH2sKBhrfI6KNv9Rh9GQAAABY"]
[Fri Feb 27 20:02:34.976063 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:59268] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGH2lQeueXZDUmoLokpyQAAARY"]
[Fri Feb 27 20:02:35.391594 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:59282] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGH28KBhrfI6KNv9Rh9GwAAAAo"]
[Fri Feb 27 20:02:35.801513 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:55490] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGH28KBhrfI6KNv9Rh9HwAAAAs"]
[Fri Feb 27 20:02:36.238300 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:59344] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGH3MKBhrfI6KNv9Rh9IgAAAAE"]
[Fri Feb 27 20:02:36.649359 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:61456] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGH3MKBhrfI6KNv9Rh9JwAAABI"]
[Fri Feb 27 20:02:37.058647 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:56029] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGH3cKBhrfI6KNv9Rh9KAAAABY"]
[Fri Feb 27 20:02:37.467838 2026] [:error] [pid 62998:tid 63001] [client 20.220.196.236:55991] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGH3VQeueXZDUmoLokp1QAAAQA"]
[Fri Feb 27 20:02:37.886662 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:55942] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGH3cKBhrfI6KNv9Rh9KwAAABM"]
[Fri Feb 27 20:02:38.303501 2026] [:error] [pid 54103:tid 54178] [client 20.220.196.236:59266] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGH3uvG4MPCmE0B2sCVcAAAAMc"]
[Fri Feb 27 20:02:38.724529 2026] [:error] [pid 62998:tid 63018] [client 20.220.196.236:55532] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGH3lQeueXZDUmoLokp3QAAARA"]
[Fri Feb 27 20:02:39.142176 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:55475] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGH34a650YPyxXVeRYVWwAAAZU"]
[Fri Feb 27 20:02:39.557607 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:59272] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaGH38KBhrfI6KNv9Rh9LgAAABE"]
[Fri Feb 27 20:02:39.986939 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:55519] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaGH34a650YPyxXVeRYVYQAAAZM"]
[Fri Feb 27 20:02:40.401304 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:55997] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaGH4MKBhrfI6KNv9Rh9MQAAAAQ"]
[Fri Feb 27 20:02:40.815638 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:55493] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaGH4FQeueXZDUmoLokp5wAAAQU"]
[Fri Feb 27 20:02:41.233291 2026] [proxy_fcgi:error] [pid 54102:tid 54166] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:41.445149 2026] [proxy_fcgi:error] [pid 54102:tid 54161] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:41.657582 2026] [proxy_fcgi:error] [pid 54102:tid 54145] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:41.869158 2026] [proxy_fcgi:error] [pid 54102:tid 54156] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:42.081362 2026] [proxy_fcgi:error] [pid 54102:tid 54144] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:42.293313 2026] [proxy_fcgi:error] [pid 54102:tid 54159] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:42.505535 2026] [proxy_fcgi:error] [pid 54102:tid 54148] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:42.726100 2026] [proxy_fcgi:error] [pid 54102:tid 54150] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:42.937767 2026] [proxy_fcgi:error] [pid 54102:tid 54147] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:43.149631 2026] [proxy_fcgi:error] [pid 54102:tid 54162] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:43.363375 2026] [proxy_fcgi:error] [pid 54102:tid 54152] [client 20.220.196.236:56005] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:02:43.571891 2026] [:error] [pid 54102:tid 54155] [client 20.220.196.236:56005] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGH43i74D4fiYUm_Gdi5QAAAIs"]
[Fri Feb 27 20:02:43.984106 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:56019] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGH48KBhrfI6KNv9Rh9PgAAABU"]
[Fri Feb 27 20:02:44.393606 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:59383] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGH5MKBhrfI6KNv9Rh9QgAAABM"]
[Fri Feb 27 20:02:44.802834 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:55495] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGH5MKBhrfI6KNv9Rh9RQAAAAc"]
[Fri Feb 27 20:02:45.215656 2026] [:error] [pid 54101:tid 54132] [client 20.220.196.236:61553] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGH5VY5qgRktcYTGFs3ZgAAAdg"]
[Fri Feb 27 20:02:45.629666 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:59275] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGH5fnSUDZue59Px9vwlgAAAVg"]
[Fri Feb 27 20:02:46.040701 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:55958] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGH5vnSUDZue59Px9vwlwAAAU4"]
[Fri Feb 27 20:02:46.451585 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:61447] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGH5oa650YPyxXVeRYVawAAAYQ"]
[Fri Feb 27 20:02:46.877139 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:59329] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGH5oa650YPyxXVeRYVbwAAAY0"]
[Fri Feb 27 20:02:47.288377 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:55951] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGH54a650YPyxXVeRYVcwAAAYs"]
[Fri Feb 27 20:02:47.699512 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:55528] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGH54a650YPyxXVeRYVdQAAAYo"]
[Fri Feb 27 20:02:48.109979 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:56047] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGH6MKBhrfI6KNv9Rh9VwAAAA0"]
[Fri Feb 27 20:02:48.550736 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:56021] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGH6FQeueXZDUmoLokqBgAAARI"]
[Fri Feb 27 20:02:48.965205 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:59277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGH6MKBhrfI6KNv9Rh9WQAAABc"]
[Fri Feb 27 20:02:49.389866 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:56041] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGH6VQeueXZDUmoLokqCgAAARY"]
[Fri Feb 27 20:02:49.808522 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:56052] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGH6Ya650YPyxXVeRYVegAAAYU"]
[Fri Feb 27 20:02:50.220764 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:59355] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGH6sKBhrfI6KNv9Rh9YAAAABM"]
[Fri Feb 27 20:02:50.634015 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:55973] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGH6oa650YPyxXVeRYVgQAAAZM"]
[Fri Feb 27 20:02:51.046109 2026] [:error] [pid 62998:tid 63017] [client 20.220.196.236:59325] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGH61QeueXZDUmoLokqEwAAAQ8"]
[Fri Feb 27 20:02:51.460906 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:55943] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGH64a650YPyxXVeRYVhQAAAZA"]
[Fri Feb 27 20:02:51.880516 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:55537] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGH64a650YPyxXVeRYVigAAAYc"]
[Fri Feb 27 20:02:52.295224 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:55970] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGH7Ia650YPyxXVeRYVjQAAAZE"]
[Fri Feb 27 20:02:52.705106 2026] [:error] [pid 54103:tid 54182] [client 20.220.196.236:55957] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGH7OvG4MPCmE0B2sCVcwAAAMs"]
[Fri Feb 27 20:02:53.121884 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:55551] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGH7cKBhrfI6KNv9Rh9bAAAABI"]
[Fri Feb 27 20:02:53.536673 2026] [:error] [pid 54231:tid 54253] [client 20.220.196.236:61499] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGH7eTvb5AeyJCdY7D6cAAAAFM"]
[Fri Feb 27 20:02:53.947233 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:56002] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGH7Ya650YPyxXVeRYVlAAAAYY"]
[Fri Feb 27 20:02:54.359718 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:61456] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGH7oa650YPyxXVeRYVmwAAAZE"]
[Fri Feb 27 20:02:54.775081 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:56032] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGH7vnSUDZue59Px9vwqQAAAUE"]
[Fri Feb 27 20:02:55.190632 2026] [:error] [pid 49306:tid 49311] [client 20.220.196.236:55986] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGH7_nSUDZue59Px9vwrAAAAUM"]
[Fri Feb 27 20:02:55.607007 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:56040] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGH74a650YPyxXVeRYVnwAAAYQ"]
[Fri Feb 27 20:02:56.022065 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:59349] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGH8Ia650YPyxXVeRYVpAAAAZI"]
[Fri Feb 27 20:02:56.433258 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:55962] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGH8Ia650YPyxXVeRYVqQAAAYA"]
[Fri Feb 27 20:02:56.847228 2026] [:error] [pid 54102:tid 54166] [client 20.220.196.236:55438] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGH8Hi74D4fiYUm_Gdi6wAAAJY"]
[Fri Feb 27 20:02:57.264252 2026] [:error] [pid 54103:tid 54193] [client 20.220.196.236:59296] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGH8evG4MPCmE0B2sCVdgAAANY"]
[Fri Feb 27 20:02:57.677545 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:55463] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGH8cKBhrfI6KNv9Rh9gQAAAAk"]
[Fri Feb 27 20:02:58.093787 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:56033] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGH8sKBhrfI6KNv9Rh9hgAAABc"]
[Fri Feb 27 20:02:58.506919 2026] [:error] [pid 62998:tid 63012] [client 20.220.196.236:56055] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGH8lQeueXZDUmoLokqNgAAAQo"]
[Fri Feb 27 20:02:58.922917 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:55960] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGH8sKBhrfI6KNv9Rh9iQAAAAs"]
[Fri Feb 27 20:02:59.337938 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:61538] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGH88KBhrfI6KNv9Rh9kAAAAAk"]
[Fri Feb 27 20:02:59.757272 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:55518] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGH8_nSUDZue59Px9vwtgAAAUk"]
[Fri Feb 27 20:03:00.168098 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:55953] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGH9PnSUDZue59Px9vwuQAAAVI"]
[Fri Feb 27 20:03:00.578604 2026] [:error] [pid 62998:tid 63015] [client 20.220.196.236:59283] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGH9FQeueXZDUmoLokqPgAAAQ0"]
[Fri Feb 27 20:03:00.997580 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:56056] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGH9Ia650YPyxXVeRYVuAAAAYM"]
[Fri Feb 27 20:03:01.407469 2026] [:error] [pid 49306:tid 49323] [client 20.220.196.236:55523] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGH9fnSUDZue59Px9vwvAAAAU8"]
[Fri Feb 27 20:03:01.830471 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:61454] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGH9cKBhrfI6KNv9Rh9nAAAABA"]
[Fri Feb 27 20:03:02.243526 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:55521] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGH9sKBhrfI6KNv9Rh9nQAAABc"]
[Fri Feb 27 20:03:02.653555 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:55946] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGH9sKBhrfI6KNv9Rh9oQAAABM"]
[Fri Feb 27 20:03:03.070186 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:55527] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGH98KBhrfI6KNv9Rh9pQAAAAY"]
[Fri Feb 27 20:03:03.487203 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:56024] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGH98KBhrfI6KNv9Rh9rAAAABY"]
[Fri Feb 27 20:03:03.898967 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:55965] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGH94a650YPyxXVeRYVxQAAAYc"]
[Fri Feb 27 20:03:04.308483 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:55511] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGH-MKBhrfI6KNv9Rh9sAAAAAU"]
[Fri Feb 27 20:03:04.719410 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:61503] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGH-OTvb5AeyJCdY7D6dgAAAEw"]
[Fri Feb 27 20:03:05.130145 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:55977] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGH-cKBhrfI6KNv9Rh9vQAAAAE"]
[Fri Feb 27 20:03:05.542678 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:59346] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGH-Ya650YPyxXVeRYV2QAAAYY"]
[Fri Feb 27 20:03:05.958691 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:59312] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGH-cKBhrfI6KNv9Rh9zwAAABg"]
[Fri Feb 27 20:03:06.391678 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:55966] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGH-oa650YPyxXVeRYV6wAAAYg"]
[Fri Feb 27 20:03:06.807092 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:56023] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGH-sKBhrfI6KNv9Rh93QAAABM"]
[Fri Feb 27 20:03:07.216638 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:55939] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGH-8KBhrfI6KNv9Rh94gAAAAA"]
[Fri Feb 27 20:03:07.632663 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:55441] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGH-8KBhrfI6KNv9Rh96wAAAAA"]
[Fri Feb 27 20:03:08.068812 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:59319] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGH_MKBhrfI6KNv9Rh98QAAAA0"]
[Fri Feb 27 20:03:08.484425 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:55516] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGH_MKBhrfI6KNv9Rh9-AAAAAY"]
[Fri Feb 27 20:03:08.898914 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:56044] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGH_PnSUDZue59Px9vw0QAAAVc"]
[Fri Feb 27 20:03:09.311257 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:56013] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGH_fnSUDZue59Px9vw0wAAAUY"]
[Fri Feb 27 20:03:09.722323 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:55974] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGH_cKBhrfI6KNv9Rh-CQAAAA8"]
[Fri Feb 27 20:03:10.137196 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:55494] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGH_oa650YPyxXVeRYWFgAAAY0"]
[Fri Feb 27 20:03:10.550647 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:55947] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGH_oa650YPyxXVeRYWHAAAAZE"]
[Fri Feb 27 20:03:10.961386 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:55451] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGH_vnSUDZue59Px9vw1wAAAVE"]
[Fri Feb 27 20:03:11.375347 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:55980] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGH_4a650YPyxXVeRYWLQAAAZU"]
[Fri Feb 27 20:03:11.787903 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:56062] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGH__nSUDZue59Px9vw2gAAAUs"]
[Fri Feb 27 20:03:12.202585 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:56057] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGIAIa650YPyxXVeRYWNwAAAZM"]
[Fri Feb 27 20:03:12.617377 2026] [:error] [pid 62998:tid 63018] [client 20.220.196.236:55530] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGIAFQeueXZDUmoLokqXwAAARA"]
[Fri Feb 27 20:03:13.030357 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:55514] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGIAYa650YPyxXVeRYWOgAAAYA"]
[Fri Feb 27 20:03:13.448909 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:55972] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGIAYa650YPyxXVeRYWPgAAAYg"]
[Fri Feb 27 20:03:13.865457 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:61494] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGIAYa650YPyxXVeRYWQQAAAYI"]
[Fri Feb 27 20:03:14.286576 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:55989] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGIAvnSUDZue59Px9vw4QAAAUE"]
[Fri Feb 27 20:03:14.705984 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:55440] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGIAsKBhrfI6KNv9Rh-PAAAAAg"]
[Fri Feb 27 20:03:15.116514 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:55958] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGIA1QeueXZDUmoLokqYgAAAQw"]
[Fri Feb 27 20:03:15.530147 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:55510] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGIA8KBhrfI6KNv9Rh-TQAAAA0"]
[Fri Feb 27 20:03:15.949215 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:55981] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGIA8KBhrfI6KNv9Rh-UwAAAA4"]
[Fri Feb 27 20:03:16.367133 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:55426] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGIBIa650YPyxXVeRYWVwAAAZc"]
[Fri Feb 27 20:03:16.781476 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:55990] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGIBIa650YPyxXVeRYWWgAAAYQ"]
[Fri Feb 27 20:03:17.190000 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:55983] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGIBYa650YPyxXVeRYWXgAAAZA"]
[Fri Feb 27 20:03:17.599018 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:55963] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGIBYa650YPyxXVeRYWYgAAAYM"]
[Fri Feb 27 20:03:18.008404 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:56028] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGIBsKBhrfI6KNv9Rh-ZQAAAAs"]
[Fri Feb 27 20:03:18.420105 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:54762] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGIBsKBhrfI6KNv9Rh-aQAAABM"]
[Fri Feb 27 20:03:18.842719 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:56050] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGIBoa650YPyxXVeRYWaQAAAZA"]
[Fri Feb 27 20:03:19.255897 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:55950] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGIB4a650YPyxXVeRYWawAAAY4"]
[Fri Feb 27 20:03:19.668829 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:55503] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGIB1QeueXZDUmoLokqaQAAAQU"]
[Fri Feb 27 20:03:20.085735 2026] [:error] [pid 62998:tid 63009] [client 20.220.196.236:55428] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGICFQeueXZDUmoLokqagAAAQc"]
[Fri Feb 27 20:03:20.502180 2026] [:error] [pid 62998:tid 63021] [client 20.220.196.236:55985] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGICFQeueXZDUmoLokqbAAAARM"]
[Fri Feb 27 20:03:20.913071 2026] [:error] [pid 54231:tid 54245] [client 20.220.196.236:56039] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGICOTvb5AeyJCdY7D6fgAAAEs"]
[Fri Feb 27 20:03:21.330743 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:55541] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGICfnSUDZue59Px9vw6QAAAU4"]
[Fri Feb 27 20:03:21.752277 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:55488] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGICVQeueXZDUmoLokqcgAAARY"]
[Fri Feb 27 20:03:22.167828 2026] [:error] [pid 62998:tid 63015] [client 20.220.196.236:55507] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGIClQeueXZDUmoLokqdQAAAQ0"]
[Fri Feb 27 20:03:22.585750 2026] [:error] [pid 62998:tid 63010] [client 20.220.196.236:55945] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGIClQeueXZDUmoLokqdgAAAQg"]
[Fri Feb 27 20:03:23.000030 2026] [:error] [pid 62998:tid 63005] [client 20.220.196.236:56038] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGIClQeueXZDUmoLokqeQAAAQM"]
[Fri Feb 27 20:03:23.410913 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:55949] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGIC1QeueXZDUmoLokqewAAAQU"]
[Fri Feb 27 20:03:23.823965 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:55526] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGIC8KBhrfI6KNv9Rh-nAAAAAo"]
[Fri Feb 27 20:03:24.243076 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:55544] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGIDMKBhrfI6KNv9Rh-pAAAABY"]
[Fri Feb 27 20:03:24.658796 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:55478] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGIDMKBhrfI6KNv9Rh-rAAAAAk"]
[Fri Feb 27 20:03:25.072139 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:55539] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGIDcKBhrfI6KNv9Rh-uAAAAAI"]
[Fri Feb 27 20:03:25.488925 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:55465] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGIDcKBhrfI6KNv9Rh-vwAAABU"]
[Fri Feb 27 20:03:25.904807 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:54687] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGIDcKBhrfI6KNv9Rh-yQAAABc"]
[Fri Feb 27 20:03:26.316464 2026] [:error] [pid 54231:tid 54241] [client 20.220.196.236:55459] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGIDuTvb5AeyJCdY7D6hQAAAEc"]
[Fri Feb 27 20:03:26.739463 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:55499] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGIDsKBhrfI6KNv9Rh-2wAAAAA"]
[Fri Feb 27 20:03:27.152826 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:54744] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGID8KBhrfI6KNv9Rh-4QAAAAo"]
[Fri Feb 27 20:03:27.562459 2026] [:error] [pid 54103:tid 54194] [client 20.220.196.236:59366] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGID-vG4MPCmE0B2sCVhAAAANc"]
[Fri Feb 27 20:03:27.972324 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:59302] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGID8KBhrfI6KNv9Rh-9QAAAAk"]
[Fri Feb 27 20:03:28.390835 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:59281] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGIEMKBhrfI6KNv9Rh_AQAAAA4"]
[Fri Feb 27 20:03:28.803665 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:55998] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGIEMKBhrfI6KNv9Rh_CQAAAAI"]
[Fri Feb 27 20:03:29.215167 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:56006] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGIEcKBhrfI6KNv9Rh_DwAAAAI"]
[Fri Feb 27 20:03:29.647941 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:55506] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGIEVQeueXZDUmoLokqgQAAARI"]
[Fri Feb 27 20:03:30.062242 2026] [:error] [pid 62998:tid 63023] [client 20.220.196.236:54760] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGIElQeueXZDUmoLokqggAAARU"]
[Fri Feb 27 20:03:30.474858 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:55487] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGIEsKBhrfI6KNv9Rh_JwAAAAg"]
[Fri Feb 27 20:03:30.885260 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:55961] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGIEsKBhrfI6KNv9Rh_LAAAAAk"]
[Fri Feb 27 20:03:31.298650 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:55975] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGIE8KBhrfI6KNv9Rh_MQAAABU"]
[Fri Feb 27 20:03:31.714558 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:59327] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGIE8KBhrfI6KNv9Rh_OgAAAAg"]
[Fri Feb 27 20:03:32.123837 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:59342] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGIFMKBhrfI6KNv9Rh_QAAAABg"]
[Fri Feb 27 20:03:32.539876 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:55968] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGIFMKBhrfI6KNv9Rh_SAAAAAU"]
[Fri Feb 27 20:03:32.953886 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:55982] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGIFMKBhrfI6KNv9Rh_UQAAAAo"]
[Fri Feb 27 20:03:33.368223 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:54728] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGIFcKBhrfI6KNv9Rh_VwAAABc"]
[Fri Feb 27 20:03:33.777986 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:55509] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGIFcKBhrfI6KNv9Rh_YAAAAAo"]
[Fri Feb 27 20:03:34.186405 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:59279] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGIFoa650YPyxXVeRYWegAAAZQ"]
[Fri Feb 27 20:03:34.597572 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:55460] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGIFuTvb5AeyJCdY7D6iQAAAEE"]
[Fri Feb 27 20:03:35.007135 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:55967] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGIF4a650YPyxXVeRYWfAAAAZE"]
[Fri Feb 27 20:03:35.419964 2026] [:error] [pid 62998:tid 63005] [client 20.220.196.236:55435] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGIF1QeueXZDUmoLokqhgAAAQM"]
[Fri Feb 27 20:03:35.837309 2026] [:error] [pid 62998:tid 63009] [client 20.220.196.236:56049] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGIF1QeueXZDUmoLokqigAAAQc"]
[Fri Feb 27 20:03:36.248154 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:54750] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGIGIa650YPyxXVeRYWggAAAY4"]
[Fri Feb 27 20:03:36.658821 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:54739] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGIGIa650YPyxXVeRYWhAAAAYo"]
[Fri Feb 27 20:03:37.069329 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:55540] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGIGYa650YPyxXVeRYWhwAAAZg"]
[Fri Feb 27 20:03:37.478978 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:55504] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGIGYa650YPyxXVeRYWjQAAAYQ"]
[Fri Feb 27 20:03:37.900264 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:55482] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGIGYa650YPyxXVeRYWlwAAAZg"]
[Fri Feb 27 20:03:38.310637 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:55500] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGIGoa650YPyxXVeRYWmwAAAYg"]
[Fri Feb 27 20:03:38.725898 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:54730] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGIGsKBhrfI6KNv9Rh_igAAABg"]
[Fri Feb 27 20:03:39.143064 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:55433] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGIG4a650YPyxXVeRYWogAAAY0"]
[Fri Feb 27 20:03:39.561852 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:55994] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGIG_nSUDZue59Px9vxCgAAAVY"]
[Fri Feb 27 20:03:39.980267 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:54721] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIG1QeueXZDUmoLokqjwAAARI"]
[Fri Feb 27 20:03:40.393222 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:55449] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIHFQeueXZDUmoLokqkwAAARY"]
[Fri Feb 27 20:03:40.807006 2026] [:error] [pid 54231:tid 54242] [client 20.220.196.236:55954] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIHOTvb5AeyJCdY7D6lAAAAEg"]
[Fri Feb 27 20:03:41.220789 2026] [:error] [pid 54231:tid 54241] [client 20.220.196.236:55454] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIHeTvb5AeyJCdY7D6lwAAAEc"]
[Fri Feb 27 20:03:41.632686 2026] [:error] [pid 54102:tid 54155] [client 20.220.196.236:54736] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aaGIHXi74D4fiYUm_GdjCwAAAIs"]
[Fri Feb 27 20:03:42.042891 2026] [:error] [pid 54231:tid 54252] [client 20.220.196.236:55548] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aaGIHuTvb5AeyJCdY7D6nQAAAFI"]
[Fri Feb 27 20:03:42.452244 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:55473] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aaGIHvnSUDZue59Px9vxEAAAAU4"]
[Fri Feb 27 20:03:42.862277 2026] [:error] [pid 54231:tid 54244] [client 20.220.196.236:55502] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aaGIHuTvb5AeyJCdY7D6pAAAAEo"]
[Fri Feb 27 20:03:43.286639 2026] [proxy_fcgi:error] [pid 54103:tid 54174] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:43.706581 2026] [proxy_fcgi:error] [pid 54103:tid 54173] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:43.916516 2026] [proxy_fcgi:error] [pid 54103:tid 54172] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:44.126568 2026] [proxy_fcgi:error] [pid 54103:tid 54175] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:44.339194 2026] [proxy_fcgi:error] [pid 54103:tid 54181] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:44.565918 2026] [proxy_fcgi:error] [pid 54103:tid 54189] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:44.776646 2026] [proxy_fcgi:error] [pid 54103:tid 54194] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:44.986316 2026] [proxy_fcgi:error] [pid 54103:tid 54182] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:45.200511 2026] [proxy_fcgi:error] [pid 54103:tid 54184] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:45.409631 2026] [proxy_fcgi:error] [pid 54103:tid 54170] [client 20.220.196.236:55525] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:03:45.615945 2026] [:error] [pid 54103:tid 54193] [client 20.220.196.236:55525] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGIIevG4MPCmE0B2sCVnAAAANY"]
[Fri Feb 27 20:03:46.030664 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:55474] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGIIsKBhrfI6KNv9Rh_ugAAAA8"]
[Fri Feb 27 20:03:46.447052 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:55470] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGIIsKBhrfI6KNv9Rh_wgAAAAE"]
[Fri Feb 27 20:03:46.874161 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:59310] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGIIsKBhrfI6KNv9Rh_xwAAAAA"]
[Fri Feb 27 20:03:47.289804 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:59309] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGII8KBhrfI6KNv9Rh_ywAAABA"]
[Fri Feb 27 20:03:47.700741 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:55988] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGII8KBhrfI6KNv9Rh_0QAAAAU"]
[Fri Feb 27 20:03:48.115194 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:55543] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGIJMKBhrfI6KNv9Rh_2AAAABY"]
[Fri Feb 27 20:03:48.529837 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:55535] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGIJIa650YPyxXVeRYWrQAAAYo"]
[Fri Feb 27 20:03:48.948430 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:55485] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGIJPnSUDZue59Px9vxIAAAAUw"]
[Fri Feb 27 20:03:49.363129 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:54724] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGIJYa650YPyxXVeRYWswAAAZg"]
[Fri Feb 27 20:03:49.793354 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:54740] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGIJcKBhrfI6KNv9Rh_4wAAABU"]
[Fri Feb 27 20:03:50.210934 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:56036] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGIJoa650YPyxXVeRYWtQAAAYk"]
[Fri Feb 27 20:03:50.627706 2026] [:error] [pid 49306:tid 49318] [client 20.220.196.236:55469] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGIJvnSUDZue59Px9vxKQAAAUo"]
[Fri Feb 27 20:03:51.040974 2026] [:error] [pid 62998:tid 63013] [client 20.220.196.236:55524] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGIJ1QeueXZDUmoLokqqgAAAQs"]
[Fri Feb 27 20:03:51.454627 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:54757] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGIJ8KBhrfI6KNv9Rh_8AAAABA"]
[Fri Feb 27 20:03:51.875974 2026] [:error] [pid 54102:tid 54148] [client 20.220.196.236:54758] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGIJ3i74D4fiYUm_GdjFgAAAIQ"]
[Fri Feb 27 20:03:52.288234 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:55464] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGIKMKBhrfI6KNv9Rh_-gAAAAc"]
[Fri Feb 27 20:03:52.701199 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:55956] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGIKPnSUDZue59Px9vxLgAAAUk"]
[Fri Feb 27 20:03:53.113537 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:54692] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGIKfnSUDZue59Px9vxLwAAAUw"]
[Fri Feb 27 20:03:53.520966 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:59376] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGIKfnSUDZue59Px9vxMQAAAUs"]
[Fri Feb 27 20:03:53.930100 2026] [:error] [pid 62998:tid 63002] [client 20.220.196.236:55446] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGIKVQeueXZDUmoLokqsAAAAQE"]
[Fri Feb 27 20:03:54.340054 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:55987] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGIKvnSUDZue59Px9vxNwAAAUE"]
[Fri Feb 27 20:03:54.753775 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:55505] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGIKoa650YPyxXVeRYWvgAAAZA"]
[Fri Feb 27 20:03:55.166688 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:55429] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGIK4a650YPyxXVeRYWwgAAAYc"]
[Fri Feb 27 20:03:55.578290 2026] [:error] [pid 62998:tid 63018] [client 20.220.196.236:56025] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaGIK1QeueXZDUmoLokqtQAAARA"]
[Fri Feb 27 20:03:55.991853 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:61485] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaGIK8KBhrfI6KNv9RiAGQAAAA8"]
[Fri Feb 27 20:03:56.406095 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:55492] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaGILPnSUDZue59Px9vxOwAAAVY"]
[Fri Feb 27 20:03:56.817047 2026] [:error] [pid 54231:tid 54242] [client 20.220.196.236:55458] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaGILOTvb5AeyJCdY7D6tAAAAEg"]
[Fri Feb 27 20:03:57.225808 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:54741] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGILcKBhrfI6KNv9RiAKQAAABc"]
[Fri Feb 27 20:03:57.634196 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:54712] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGILcKBhrfI6KNv9RiALwAAAAo"]
[Fri Feb 27 20:03:58.046635 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:55520] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGILsKBhrfI6KNv9RiANQAAAAg"]
[Fri Feb 27 20:03:58.456815 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:55456] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGILvnSUDZue59Px9vxPQAAAVE"]
[Fri Feb 27 20:03:58.865189 2026] [:error] [pid 56075:tid 56080] [client 20.220.196.236:55996] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGILsKBhrfI6KNv9RiAPQAAAAM"]
[Fri Feb 27 20:03:59.273883 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:55486] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGIL8KBhrfI6KNv9RiAQgAAAAs"]
[Fri Feb 27 20:03:59.684331 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:55992] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGIL8KBhrfI6KNv9RiARQAAAA4"]
[Fri Feb 27 20:04:00.101794 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:55443] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGIMPnSUDZue59Px9vxPwAAAUk"]
[Fri Feb 27 20:04:00.514655 2026] [:error] [pid 54101:tid 54126] [client 20.220.196.236:54735] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGIMFY5qgRktcYTGFs3ngAAAdI"]
[Fri Feb 27 20:04:00.928525 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:55515] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGIMIa650YPyxXVeRYWzQAAAZU"]
[Fri Feb 27 20:04:01.339567 2026] [:error] [pid 62998:tid 63016] [client 20.220.196.236:55430] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGIMVQeueXZDUmoLokqxAAAAQ4"]
[Fri Feb 27 20:04:01.750585 2026] [:error] [pid 49306:tid 49313] [client 20.220.196.236:54726] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGIMfnSUDZue59Px9vxQQAAAUU"]
[Fri Feb 27 20:04:02.160630 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:55517] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGIMsKBhrfI6KNv9RiAWQAAAAU"]
[Fri Feb 27 20:04:02.571517 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:55496] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGIMvnSUDZue59Px9vxQgAAAUs"]
[Fri Feb 27 20:04:02.988005 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:54690] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGIMoa650YPyxXVeRYW1gAAAZg"]
[Fri Feb 27 20:04:03.407334 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:54770] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGIM8KBhrfI6KNv9RiAaQAAAAA"]
[Fri Feb 27 20:04:03.836202 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:55508] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGIM8KBhrfI6KNv9RiAbAAAAA0"]
[Fri Feb 27 20:04:04.281478 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:55955] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGINIa650YPyxXVeRYW2AAAAY0"]
[Fri Feb 27 20:04:04.693883 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:54659] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGINMKBhrfI6KNv9RiAdwAAABU"]
[Fri Feb 27 20:04:05.106382 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:54773] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGINcKBhrfI6KNv9RiAfwAAAAo"]
[Fri Feb 27 20:04:05.525480 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:54695] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGINcKBhrfI6KNv9RiAhQAAAAg"]
[Fri Feb 27 20:04:05.943270 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:61459] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGINcKBhrfI6KNv9RiAigAAABc"]
[Fri Feb 27 20:04:06.364504 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:54751] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGINsKBhrfI6KNv9RiAkAAAAAA"]
[Fri Feb 27 20:04:06.778060 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:55501] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGINsKBhrfI6KNv9RiAmAAAAAc"]
[Fri Feb 27 20:04:07.193213 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:55452] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGIN4a650YPyxXVeRYW2gAAAZY"]
[Fri Feb 27 20:04:07.605114 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:54657] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGIN8KBhrfI6KNv9RiAnQAAABM"]
[Fri Feb 27 20:04:08.015026 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:55477] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGIOIa650YPyxXVeRYW3wAAAZU"]
[Fri Feb 27 20:04:08.429991 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:54725] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGIOIa650YPyxXVeRYW5AAAAY8"]
[Fri Feb 27 20:04:08.846045 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:54671] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGIOIa650YPyxXVeRYW5wAAAZM"]
[Fri Feb 27 20:04:09.263555 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:56014] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGIOYa650YPyxXVeRYW6gAAAYM"]
[Fri Feb 27 20:04:09.680920 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:54679] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGIOcKBhrfI6KNv9RiAqAAAAAw"]
[Fri Feb 27 20:04:10.095908 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:54742] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGIOvnSUDZue59Px9vxSAAAAUE"]
[Fri Feb 27 20:04:10.504870 2026] [:error] [pid 49306:tid 49318] [client 20.220.196.236:54707] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIOvnSUDZue59Px9vxSQAAAUo"]
[Fri Feb 27 20:04:10.915236 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:54761] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIOsKBhrfI6KNv9RiAtQAAAAU"]
[Fri Feb 27 20:04:11.325059 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:55445] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIO_nSUDZue59Px9vxSwAAAUY"]
[Fri Feb 27 20:04:11.737297 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:54743] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGIO_nSUDZue59Px9vxTQAAAVA"]
[Fri Feb 27 20:04:12.150763 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:56020] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGIPOTvb5AeyJCdY7D6vAAAAFc"]
[Fri Feb 27 20:04:12.564046 2026] [:error] [pid 54103:tid 54186] [client 20.220.196.236:55468] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGIPOvG4MPCmE0B2sCVuAAAAM8"]
[Fri Feb 27 20:04:12.977279 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:55538] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGIPPnSUDZue59Px9vxVAAAAUw"]
[Fri Feb 27 20:04:13.390182 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:55522] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGIPYa650YPyxXVeRYW-AAAAZc"]
[Fri Feb 27 20:04:13.804961 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:54694] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIPcKBhrfI6KNv9RiAxQAAABQ"]
[Fri Feb 27 20:04:14.217696 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:54693] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIPsKBhrfI6KNv9RiAyAAAAAA"]
[Fri Feb 27 20:04:14.628600 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:54676] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIPsKBhrfI6KNv9RiAzAAAAAs"]
[Fri Feb 27 20:04:15.040267 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:54753] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIP8KBhrfI6KNv9RiA0AAAAAc"]
[Fri Feb 27 20:04:15.449772 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:55536] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGIP_nSUDZue59Px9vxWwAAAVA"]
[Fri Feb 27 20:04:15.858779 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:54759] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGIP_nSUDZue59Px9vxXgAAAVE"]
[Fri Feb 27 20:04:16.267854 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:54696] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGIQPnSUDZue59Px9vxXwAAAUw"]
[Fri Feb 27 20:04:16.678621 2026] [:error] [pid 54101:tid 54121] [client 20.220.196.236:55489] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGIQFY5qgRktcYTGFs3rwAAAc0"]
[Fri Feb 27 20:04:17.088867 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:55533] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGIQcKBhrfI6KNv9RiA4QAAAAc"]
[Fri Feb 27 20:04:17.498333 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:55427] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGIQcKBhrfI6KNv9RiA4wAAABA"]
[Fri Feb 27 20:04:17.909606 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:54763] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGIQcKBhrfI6KNv9RiA6AAAAAU"]
[Fri Feb 27 20:04:18.319819 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:54686] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGIQoa650YPyxXVeRYXBAAAAZY"]
[Fri Feb 27 20:04:18.737586 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:55448] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGIQsKBhrfI6KNv9RiA9QAAAAQ"]
[Fri Feb 27 20:04:19.174440 2026] [:error] [pid 54231:tid 54258] [client 20.220.196.236:55979] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGIQ-Tvb5AeyJCdY7D6vwAAAFg"]
[Fri Feb 27 20:04:19.590816 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:55447] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGIQ4a650YPyxXVeRYXBgAAAYg"]
[Fri Feb 27 20:04:20.009521 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:54767] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGIRPnSUDZue59Px9vxaQAAAVI"]
[Fri Feb 27 20:04:20.425532 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:55437] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRIa650YPyxXVeRYXDAAAAZc"]
[Fri Feb 27 20:04:20.855229 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:55442] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRIa650YPyxXVeRYXDwAAAYU"]
[Fri Feb 27 20:04:21.275150 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:54731] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRYa650YPyxXVeRYXFgAAAYE"]
[Fri Feb 27 20:04:21.690533 2026] [:error] [pid 54103:tid 54179] [client 20.220.196.236:54713] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRevG4MPCmE0B2sCVugAAAMg"]
[Fri Feb 27 20:04:22.105955 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:55455] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRoa650YPyxXVeRYXHgAAAZI"]
[Fri Feb 27 20:04:22.518387 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:55436] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRsKBhrfI6KNv9RiBAQAAABc"]
[Fri Feb 27 20:04:22.931328 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:54752] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIRsKBhrfI6KNv9RiBBAAAAAA"]
[Fri Feb 27 20:04:23.345344 2026] [:error] [pid 62998:tid 63016] [client 20.220.196.236:54747] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGIR1QeueXZDUmoLokq0gAAAQ4"]
[Fri Feb 27 20:04:23.757069 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:54749] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGIR8KBhrfI6KNv9RiBCwAAAA4"]
[Fri Feb 27 20:04:24.167958 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:55969] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGISFQeueXZDUmoLokq0wAAARY"]
[Fri Feb 27 20:04:24.579117 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:8130] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGISMKBhrfI6KNv9RiBEwAAABQ"]
[Fri Feb 27 20:04:24.993614 2026] [:error] [pid 54103:tid 54195] [client 20.220.196.236:55512] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGISOvG4MPCmE0B2sCVuwAAANg"]
[Fri Feb 27 20:04:25.407265 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:8075] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGISfnSUDZue59Px9vxeQAAAUk"]
[Fri Feb 27 20:04:25.820321 2026] [:error] [pid 54101:tid 54126] [client 20.220.196.236:54771] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGISVY5qgRktcYTGFs3tQAAAdI"]
[Fri Feb 27 20:04:26.252685 2026] [:error] [pid 62998:tid 63013] [client 20.220.196.236:54783] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGISlQeueXZDUmoLokq2wAAAQs"]
[Fri Feb 27 20:04:26.669619 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:55498] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGISoa650YPyxXVeRYXJgAAAYE"]
[Fri Feb 27 20:04:27.089872 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:55453] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGIS4a650YPyxXVeRYXKgAAAYQ"]
[Fri Feb 27 20:04:27.534108 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:54705] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGIS4a650YPyxXVeRYXMAAAAZE"]
[Fri Feb 27 20:04:27.991762 2026] [:error] [pid 49306:tid 49311] [client 20.220.196.236:61488] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGIS_nSUDZue59Px9vxfQAAAUM"]
[Fri Feb 27 20:04:28.440578 2026] [:error] [pid 62998:tid 63026] [client 20.220.196.236:54674] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGITFQeueXZDUmoLokq3QAAARg"]
[Fri Feb 27 20:04:28.873109 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:54670] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGITPnSUDZue59Px9vxggAAAU0"]
[Fri Feb 27 20:04:29.284285 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:54661] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGITVQeueXZDUmoLokq4gAAAQw"]
[Fri Feb 27 20:04:29.698431 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:55491] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGITYa650YPyxXVeRYXNgAAAY8"]
[Fri Feb 27 20:04:30.117335 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:54746] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGITsKBhrfI6KNv9RiBIQAAABQ"]
[Fri Feb 27 20:04:30.524852 2026] [:error] [pid 54231:tid 54250] [client 20.220.196.236:54745] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGITuTvb5AeyJCdY7D6ywAAAFA"]
[Fri Feb 27 20:04:30.937536 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:8163] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGITsKBhrfI6KNv9RiBJgAAAAE"]
[Fri Feb 27 20:04:31.356029 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:54777] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGIT8KBhrfI6KNv9RiBKgAAAAA"]
[Fri Feb 27 20:04:31.771245 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:8124] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGIT4a650YPyxXVeRYXOgAAAYQ"]
[Fri Feb 27 20:04:32.180245 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:54748] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGIUMKBhrfI6KNv9RiBMgAAABQ"]
[Fri Feb 27 20:04:32.590482 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:54699] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGIUMKBhrfI6KNv9RiBMwAAABc"]
[Fri Feb 27 20:04:33.000151 2026] [:error] [pid 62998:tid 63002] [client 20.220.196.236:55484] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGIUFQeueXZDUmoLokq5QAAAQE"]
[Fri Feb 27 20:04:33.413943 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:56046] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGIUcKBhrfI6KNv9RiBOwAAAAA"]
[Fri Feb 27 20:04:33.828254 2026] [:error] [pid 49306:tid 49312] [client 20.220.196.236:54710] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGIUfnSUDZue59Px9vxhQAAAUQ"]
[Fri Feb 27 20:04:34.246417 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:54706] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGIUvnSUDZue59Px9vxiAAAAUw"]
[Fri Feb 27 20:04:34.656913 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:8143] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGIUoa650YPyxXVeRYXQAAAAZE"]
[Fri Feb 27 20:04:35.069372 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:55472] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGIU4a650YPyxXVeRYXQwAAAZM"]
[Fri Feb 27 20:04:35.481000 2026] [:error] [pid 62998:tid 63024] [client 20.220.196.236:55483] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGIU1QeueXZDUmoLokq6AAAARY"]
[Fri Feb 27 20:04:35.892657 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:54754] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGIU4a650YPyxXVeRYXRQAAAYo"]
[Fri Feb 27 20:04:36.305969 2026] [:error] [pid 49306:tid 49313] [client 20.220.196.236:8136] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGIVPnSUDZue59Px9vxjAAAAUU"]
[Fri Feb 27 20:04:36.720846 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:8152] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGIVIa650YPyxXVeRYXSAAAAYE"]
[Fri Feb 27 20:04:37.134905 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:8150] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGIVYa650YPyxXVeRYXTAAAAYQ"]
[Fri Feb 27 20:04:37.550630 2026] [:error] [pid 49306:tid 49329] [client 20.220.196.236:54727] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGIVfnSUDZue59Px9vxjQAAAVU"]
[Fri Feb 27 20:04:37.960502 2026] [:error] [pid 62998:tid 63022] [client 20.220.196.236:54689] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGIVVQeueXZDUmoLokq6wAAARQ"]
[Fri Feb 27 20:04:38.371911 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:54656] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGIVsKBhrfI6KNv9RiBQwAAABM"]
[Fri Feb 27 20:04:38.782639 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:55984] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aaGIVsKBhrfI6KNv9RiBRAAAAAU"]
[Fri Feb 27 20:04:39.192602 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:55424] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aaGIV4a650YPyxXVeRYXVQAAAYY"]
[Fri Feb 27 20:04:39.602837 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:55513] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aaGIV4a650YPyxXVeRYXVgAAAYM"]
[Fri Feb 27 20:04:40.014334 2026] [:error] [pid 54102:tid 54146] [client 20.220.196.236:55546] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aaGIWHi74D4fiYUm_GdjcQAAAII"]
[Fri Feb 27 20:04:40.423529 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:55522] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaGIWMKBhrfI6KNv9RiBTAAAAAQ"]
[Fri Feb 27 20:04:40.838814 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:54714] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaGIWIa650YPyxXVeRYXWAAAAY4"]
[Fri Feb 27 20:04:41.259524 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:55545] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaGIWVQeueXZDUmoLokq7AAAARI"]
[Fri Feb 27 20:04:41.680655 2026] [:error] [pid 54231:tid 54254] [client 20.220.196.236:55461] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaGIWeTvb5AeyJCdY7D6zwAAAFQ"]
[Fri Feb 27 20:04:42.094817 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:54703] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaGIWoa650YPyxXVeRYXXwAAAZY"]
[Fri Feb 27 20:04:42.509089 2026] [:error] [pid 49306:tid 49328] [client 20.220.196.236:54715] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaGIWvnSUDZue59Px9vxkAAAAVQ"]
[Fri Feb 27 20:04:42.924835 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:56054] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaGIWsKBhrfI6KNv9RiBWQAAAAU"]
[Fri Feb 27 20:04:43.336938 2026] [:error] [pid 54102:tid 54155] [client 20.220.196.236:55534] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaGIW3i74D4fiYUm_GdjfwAAAIs"]
[Fri Feb 27 20:04:43.748663 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:56015] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaGIW_nSUDZue59Px9vxlAAAAUc"]
[Fri Feb 27 20:04:44.160712 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:54722] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaGIXIa650YPyxXVeRYXYwAAAYs"]
[Fri Feb 27 20:04:44.575534 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:55431] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaGIXMKBhrfI6KNv9RiBXgAAAAE"]
[Fri Feb 27 20:04:44.999586 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:54666] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaGIXIa650YPyxXVeRYXZwAAAZM"]
[Fri Feb 27 20:04:45.619274 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:59383] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaGIXYa650YPyxXVeRYXawAAAYA"]
[Fri Feb 27 20:04:46.046603 2026] [proxy_fcgi:error] [pid 52073:tid 52084] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:47.589958 2026] [proxy_fcgi:error] [pid 52073:tid 52092] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:47.803267 2026] [proxy_fcgi:error] [pid 52073:tid 52080] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:48.016703 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:48.229779 2026] [proxy_fcgi:error] [pid 52073:tid 52093] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:48.442406 2026] [proxy_fcgi:error] [pid 52073:tid 52078] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:48.656113 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:48.871087 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 20.220.196.236:54720] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:04:49.513086 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:54720] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGIYYa650YPyxXVeRYXewAAAZM"]
[Fri Feb 27 20:04:49.926945 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:55497] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGIYcKBhrfI6KNv9RiBagAAAAc"]
[Fri Feb 27 20:04:50.342090 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:54766] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGIYsKBhrfI6KNv9RiBbQAAABY"]
[Fri Feb 27 20:04:50.763543 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:55547] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGIYsKBhrfI6KNv9RiBcAAAABM"]
[Fri Feb 27 20:04:51.177968 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:61521] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGIY8KBhrfI6KNv9RiBcwAAAAs"]
[Fri Feb 27 20:04:51.593876 2026] [:error] [pid 54102:tid 54166] [client 20.220.196.236:59304] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGIY3i74D4fiYUm_GdjhgAAAJY"]
[Fri Feb 27 20:04:52.010211 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:8128] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGIZMKBhrfI6KNv9RiBeQAAAAc"]
[Fri Feb 27 20:04:52.426664 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:8140] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGIZMKBhrfI6KNv9RiBfAAAAAI"]
[Fri Feb 27 20:04:52.840004 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:54683] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGIZMKBhrfI6KNv9RiBggAAAAw"]
[Fri Feb 27 20:04:53.254782 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:8171] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGIZYa650YPyxXVeRYXfQAAAYA"]
[Fri Feb 27 20:04:53.664331 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:54780] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGIZYa650YPyxXVeRYXfgAAAYo"]
[Fri Feb 27 20:04:54.079828 2026] [:error] [pid 54103:tid 54193] [client 20.220.196.236:8145] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGIZuvG4MPCmE0B2sCV4wAAANY"]
[Fri Feb 27 20:04:54.520541 2026] [:error] [pid 54231:tid 54240] [client 20.220.196.236:55479] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGIZuTvb5AeyJCdY7D6-wAAAEY"]
[Fri Feb 27 20:04:54.933878 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:54779] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGIZoa650YPyxXVeRYXgQAAAZY"]
[Fri Feb 27 20:04:55.348263 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:55959] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGIZ4a650YPyxXVeRYXgwAAAYQ"]
[Fri Feb 27 20:04:55.761929 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:54702] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGIZ_nSUDZue59Px9vxnAAAAVY"]
[Fri Feb 27 20:04:56.177074 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:54775] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGIaMKBhrfI6KNv9RiBiQAAAAo"]
[Fri Feb 27 20:04:56.587635 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:54662] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGIaPnSUDZue59Px9vxnwAAAU4"]
[Fri Feb 27 20:04:56.997983 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:8168] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGIaMKBhrfI6KNv9RiBjQAAAA8"]
[Fri Feb 27 20:04:57.415817 2026] [:error] [pid 54103:tid 54190] [client 20.220.196.236:8180] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGIaevG4MPCmE0B2sCV5QAAANM"]
[Fri Feb 27 20:04:57.832773 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:54734] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGIaeTvb5AeyJCdY7D7CQAAAFU"]
[Fri Feb 27 20:04:58.248959 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:55549] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGIauTvb5AeyJCdY7D7CwAAAEA"]
[Fri Feb 27 20:04:58.669838 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:59367] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGIaoa650YPyxXVeRYXiQAAAYU"]
[Fri Feb 27 20:04:59.078932 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:61463] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGIa_nSUDZue59Px9vxpAAAAVI"]
[Fri Feb 27 20:04:59.492228 2026] [:error] [pid 62998:tid 63022] [client 20.220.196.236:55476] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGIa1QeueXZDUmoLokq_wAAARQ"]
[Fri Feb 27 20:04:59.911474 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:61558] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGIa_nSUDZue59Px9vxpgAAAUI"]
[Fri Feb 27 20:05:00.330162 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:8164] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGIbPnSUDZue59Px9vxqQAAAUE"]
[Fri Feb 27 20:05:00.746749 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:59350] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGIbMKBhrfI6KNv9RiBlgAAAAk"]
[Fri Feb 27 20:05:01.235783 2026] [:error] [pid 54103:tid 54187] [client 20.220.196.236:54663] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGIbevG4MPCmE0B2sCV6gAAANA"]
[Fri Feb 27 20:05:01.716128 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:55542] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGIbYa650YPyxXVeRYXjQAAAZI"]
[Fri Feb 27 20:05:02.132123 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:54691] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGIboa650YPyxXVeRYXkAAAAYY"]
[Fri Feb 27 20:05:02.541933 2026] [:error] [pid 49306:tid 49313] [client 20.220.196.236:8073] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGIbvnSUDZue59Px9vxsAAAAUU"]
[Fri Feb 27 20:05:02.951895 2026] [:error] [pid 49306:tid 49329] [client 20.220.196.236:54733] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGIbvnSUDZue59Px9vxsQAAAVU"]
[Fri Feb 27 20:05:03.362783 2026] [:error] [pid 62998:tid 63015] [client 20.220.196.236:55425] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGIb1QeueXZDUmoLokrBAAAAQ0"]
[Fri Feb 27 20:05:03.771928 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:55550] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGIb8KBhrfI6KNv9RiBnQAAAAg"]
[Fri Feb 27 20:05:04.181128 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:8154] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGIcMKBhrfI6KNv9RiBoAAAAA0"]
[Fri Feb 27 20:05:04.591107 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:61480] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGIcIa650YPyxXVeRYXlAAAAYQ"]
[Fri Feb 27 20:05:05.001128 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:61475] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGIccKBhrfI6KNv9RiBpQAAAA4"]
[Fri Feb 27 20:05:05.410706 2026] [:error] [pid 54103:tid 54175] [client 20.220.196.236:54737] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGIcevG4MPCmE0B2sCV7gAAAMQ"]
[Fri Feb 27 20:05:05.829401 2026] [:error] [pid 54101:tid 54128] [client 20.220.196.236:61455] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGIcVY5qgRktcYTGFs3xAAAAdQ"]
[Fri Feb 27 20:05:06.240901 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:61493] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGIcsKBhrfI6KNv9RiBqgAAABI"]
[Fri Feb 27 20:05:06.651029 2026] [:error] [pid 54102:tid 54159] [client 20.220.196.236:54716] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGIcni74D4fiYUm_GdjigAAAI8"]
[Fri Feb 27 20:05:07.075773 2026] [:error] [pid 54102:tid 54153] [client 20.220.196.236:61487] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGIc3i74D4fiYUm_GdjiwAAAIk"]
[Fri Feb 27 20:05:07.489080 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:61467] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGIc_nSUDZue59Px9vxvQAAAVE"]
[Fri Feb 27 20:05:07.897826 2026] [:error] [pid 54103:tid 54194] [client 20.220.196.236:61512] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGIc-vG4MPCmE0B2sCV8gAAANc"]
[Fri Feb 27 20:05:08.311426 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:8170] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGIdFQeueXZDUmoLokrCAAAAQk"]
[Fri Feb 27 20:05:08.731199 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:61486] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGIdIa650YPyxXVeRYXoQAAAY8"]
[Fri Feb 27 20:05:09.146825 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:61472] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGIdYa650YPyxXVeRYXowAAAYA"]
[Fri Feb 27 20:05:09.557674 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:55987] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGIdfnSUDZue59Px9vxxwAAAUs"]
[Fri Feb 27 20:05:09.970096 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:61528] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGIdcKBhrfI6KNv9RiBugAAAAo"]
[Fri Feb 27 20:05:10.381449 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:54774] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGIduTvb5AeyJCdY7D7OwAAAFU"]
[Fri Feb 27 20:05:10.802901 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:8160] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGIduTvb5AeyJCdY7D7PQAAAEA"]
[Fri Feb 27 20:05:11.217319 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:61552] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGId8KBhrfI6KNv9RiBwQAAAAc"]
[Fri Feb 27 20:05:11.635749 2026] [:error] [pid 54103:tid 54184] [client 20.220.196.236:54718] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGId-vG4MPCmE0B2sCV8wAAAM0"]
[Fri Feb 27 20:05:12.051498 2026] [:error] [pid 62998:tid 63016] [client 20.220.196.236:54658] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGIeFQeueXZDUmoLokrDgAAAQ4"]
[Fri Feb 27 20:05:12.472775 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:55450] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGIeMKBhrfI6KNv9RiBxwAAAAE"]
[Fri Feb 27 20:05:12.913439 2026] [:error] [pid 49306:tid 49312] [client 20.220.196.236:55444] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGIePnSUDZue59Px9vxywAAAUQ"]
[Fri Feb 27 20:05:13.330017 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:8038] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGIefnSUDZue59Px9vxzgAAAVA"]
[Fri Feb 27 20:05:13.748266 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:59371] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGIecKBhrfI6KNv9RiByQAAAAA"]
[Fri Feb 27 20:05:14.163282 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:55976] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGIevnSUDZue59Px9vx0wAAAVg"]
[Fri Feb 27 20:05:14.578641 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:54672] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGIesKBhrfI6KNv9RiBzQAAABY"]
[Fri Feb 27 20:05:14.989332 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:61534] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGIesKBhrfI6KNv9RiBzgAAAAY"]
[Fri Feb 27 20:05:15.397350 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:59376] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGIe8KBhrfI6KNv9RiB0wAAABc"]
[Fri Feb 27 20:05:15.806548 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:61541] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGIe8KBhrfI6KNv9RiB1wAAAA4"]
[Fri Feb 27 20:05:16.216405 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:54664] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGIfMKBhrfI6KNv9RiB3AAAAAE"]
[Fri Feb 27 20:05:16.630466 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:61453] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGIfMKBhrfI6KNv9RiB4gAAAAU"]
[Fri Feb 27 20:05:17.048326 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:61547] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGIfcKBhrfI6KNv9RiB7QAAABg"]
[Fri Feb 27 20:05:17.465989 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:61498] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGIfcKBhrfI6KNv9RiB8wAAAAU"]
[Fri Feb 27 20:05:17.879474 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:54684] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGIfcKBhrfI6KNv9RiB-gAAABY"]
[Fri Feb 27 20:05:18.294671 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:55529] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGIfoa650YPyxXVeRYXrQAAAYU"]
[Fri Feb 27 20:05:18.715434 2026] [:error] [pid 54231:tid 54244] [client 20.220.196.236:8190] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGIfuTvb5AeyJCdY7D7TgAAAEo"]
[Fri Feb 27 20:05:19.130967 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:61530] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGIf-Tvb5AeyJCdY7D7UQAAAFU"]
[Fri Feb 27 20:05:19.542865 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:61561] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGIf4a650YPyxXVeRYXsAAAAZE"]
[Fri Feb 27 20:05:19.954114 2026] [:error] [pid 62998:tid 63004] [client 20.220.196.236:61468] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGIf1QeueXZDUmoLokrEAAAAQI"]
[Fri Feb 27 20:05:20.368491 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:59333] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGIgOTvb5AeyJCdY7D7XAAAAEE"]
[Fri Feb 27 20:05:20.786625 2026] [:error] [pid 54103:tid 54186] [client 20.220.196.236:61476] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGIgOvG4MPCmE0B2sCV-AAAAM8"]
[Fri Feb 27 20:05:21.198064 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:54680] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGIgcKBhrfI6KNv9RiCEgAAABM"]
[Fri Feb 27 20:05:21.612675 2026] [:error] [pid 62998:tid 63017] [client 20.220.196.236:55480] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGIgVQeueXZDUmoLokrEgAAAQ8"]
[Fri Feb 27 20:05:22.026643 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:61462] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGIgsKBhrfI6KNv9RiCFwAAABc"]
[Fri Feb 27 20:05:22.446023 2026] [:error] [pid 54101:tid 54122] [client 20.220.196.236:55531] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGIglY5qgRktcYTGFs3zAAAAc4"]
[Fri Feb 27 20:05:22.861335 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:61533] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIgoa650YPyxXVeRYXswAAAY8"]
[Fri Feb 27 20:05:23.271965 2026] [:error] [pid 54101:tid 54108] [client 20.220.196.236:61489] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIg1Y5qgRktcYTGFs3zQAAAcA"]
[Fri Feb 27 20:05:23.688131 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:59330] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIg4a650YPyxXVeRYXuAAAAYc"]
[Fri Feb 27 20:05:24.106447 2026] [:error] [pid 54102:tid 54152] [client 20.220.196.236:61440] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGIhHi74D4fiYUm_GdjlAAAAIg"]
[Fri Feb 27 20:05:24.520970 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:55467] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGIhOTvb5AeyJCdY7D7gQAAAEA"]
[Fri Feb 27 20:05:24.929522 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:61532] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGIhMKBhrfI6KNv9RiCKQAAAAE"]
[Fri Feb 27 20:05:25.339715 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:54681] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGIhcKBhrfI6KNv9RiCMgAAAAQ"]
[Fri Feb 27 20:05:25.758580 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:61539] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGIhcKBhrfI6KNv9RiCNgAAABM"]
[Fri Feb 27 20:05:26.175783 2026] [:error] [pid 49306:tid 49312] [client 20.220.196.236:61548] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGIhvnSUDZue59Px9vx2QAAAUQ"]
[Fri Feb 27 20:05:26.591234 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:8176] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGIhsKBhrfI6KNv9RiCPAAAAAU"]
[Fri Feb 27 20:05:27.001848 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:54732] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGIh_nSUDZue59Px9vx3QAAAVI"]
[Fri Feb 27 20:05:27.416932 2026] [:error] [pid 54103:tid 54173] [client 20.220.196.236:61470] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGIh-vG4MPCmE0B2sCWAAAAAMI"]
[Fri Feb 27 20:05:27.835267 2026] [:error] [pid 54102:tid 54146] [client 20.220.196.236:8088] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGIh3i74D4fiYUm_GdjmgAAAII"]
[Fri Feb 27 20:05:28.253919 2026] [:error] [pid 49306:tid 49328] [client 20.220.196.236:61529] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aaGIiPnSUDZue59Px9vx5AAAAVQ"]
[Fri Feb 27 20:05:28.668832 2026] [:error] [pid 54103:tid 54181] [client 20.220.196.236:61495] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aaGIiOvG4MPCmE0B2sCWAwAAAMo"]
[Fri Feb 27 20:05:29.083332 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:61466] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aaGIifnSUDZue59Px9vx5wAAAUc"]
[Fri Feb 27 20:05:29.501606 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:54668] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGIifnSUDZue59Px9vx6gAAAVc"]
[Fri Feb 27 20:05:29.916528 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:61460] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGIicKBhrfI6KNv9RiCTQAAAAU"]
[Fri Feb 27 20:05:30.339910 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:8165] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGIisKBhrfI6KNv9RiCUgAAABg"]
[Fri Feb 27 20:05:30.753797 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:59335] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGIisKBhrfI6KNv9RiCVQAAAAw"]
[Fri Feb 27 20:10:24.877366 2026] [proxy_fcgi:error] [pid 62998:tid 63016] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:25.084978 2026] [proxy_fcgi:error] [pid 62998:tid 63015] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:25.293157 2026] [proxy_fcgi:error] [pid 62998:tid 63023] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:25.502054 2026] [proxy_fcgi:error] [pid 62998:tid 63020] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:25.715288 2026] [proxy_fcgi:error] [pid 62998:tid 63008] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:25.923750 2026] [proxy_fcgi:error] [pid 62998:tid 63014] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:26.131078 2026] [proxy_fcgi:error] [pid 62998:tid 63019] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:26.339225 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:26.550817 2026] [proxy_fcgi:error] [pid 62998:tid 63007] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:26.758832 2026] [proxy_fcgi:error] [pid 62998:tid 63024] [client 20.220.196.236:65198] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:10:26.962336 2026] [:error] [pid 62998:tid 63009] [client 20.220.196.236:65198] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGJslQeueXZDUmoLoktOQAAAQc"]
[Fri Feb 27 20:10:27.376437 2026] [:error] [pid 54101:tid 54119] [client 20.220.196.236:65207] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGJs1Y5qgRktcYTGFs4SgAAAcs"]
[Fri Feb 27 20:10:27.790264 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:64733] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGJs8KBhrfI6KNv9RiHbgAAAAs"]
[Fri Feb 27 20:10:28.205476 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:65261] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGJtPnSUDZue59Px9vzzwAAAUI"]
[Fri Feb 27 20:10:28.636955 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:65279] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGJtIa650YPyxXVeRYbdQAAAYo"]
[Fri Feb 27 20:10:29.047812 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:64737] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGJtcKBhrfI6KNv9RiHcwAAABI"]
[Fri Feb 27 20:10:29.465836 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:64655] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGJtcKBhrfI6KNv9RiHdgAAAAw"]
[Fri Feb 27 20:10:29.881368 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:65177] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/css/index.php"] [unique_id "aaGJtcKBhrfI6KNv9RiHeAAAABQ"]
[Fri Feb 27 20:10:30.300821 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:65239] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGJtsKBhrfI6KNv9RiHewAAABc"]
[Fri Feb 27 20:10:30.735308 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:64711] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGJtoa650YPyxXVeRYbfQAAAYw"]
[Fri Feb 27 20:10:31.151975 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:65195] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGJt8KBhrfI6KNv9RiHfQAAABE"]
[Fri Feb 27 20:10:31.571554 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:64652] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaGJt8KBhrfI6KNv9RiHgAAAABU"]
[Fri Feb 27 20:10:31.984888 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:65274] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGJt8KBhrfI6KNv9RiHggAAAAI"]
[Fri Feb 27 20:10:32.417405 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:65173] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGJuMKBhrfI6KNv9RiHhQAAABA"]
[Fri Feb 27 20:10:32.830544 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:65221] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGJuMKBhrfI6KNv9RiHhwAAABY"]
[Fri Feb 27 20:10:33.265006 2026] [:error] [pid 54102:tid 54165] [client 20.220.196.236:64681] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaGJuXi74D4fiYUm_GdkbQAAAJU"]
[Fri Feb 27 20:10:33.678456 2026] [:error] [pid 54231:tid 54245] [client 20.220.196.236:65212] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGJueTvb5AeyJCdY7D-OAAAAEs"]
[Fri Feb 27 20:10:34.113991 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:64741] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGJusKBhrfI6KNv9RiHkQAAAAE"]
[Fri Feb 27 20:10:34.524554 2026] [:error] [pid 54231:tid 54241] [client 20.220.196.236:65221] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGJuuTvb5AeyJCdY7D-OQAAAEc"]
[Fri Feb 27 20:10:34.963009 2026] [:error] [pid 49306:tid 49323] [client 20.220.196.236:64658] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGJuvnSUDZue59Px9vz0QAAAU8"]
[Fri Feb 27 20:10:35.394900 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:63978] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGJu8KBhrfI6KNv9RiHmwAAABA"]
[Fri Feb 27 20:10:35.817158 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:65236] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGJu8KBhrfI6KNv9RiHnwAAABQ"]
[Fri Feb 27 20:10:36.230814 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:65234] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGJvIa650YPyxXVeRYbiQAAAZg"]
[Fri Feb 27 20:10:36.655546 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:65169] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaGJvMKBhrfI6KNv9RiHqAAAAAo"]
[Fri Feb 27 20:10:37.077872 2026] [:error] [pid 62998:tid 63026] [client 20.220.196.236:63984] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGJvVQeueXZDUmoLoktPgAAARg"]
[Fri Feb 27 20:10:37.498961 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:64763] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGJvcKBhrfI6KNv9RiHsQAAAAk"]
[Fri Feb 27 20:10:37.924254 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:64650] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGJvcKBhrfI6KNv9RiHtQAAABE"]
[Fri Feb 27 20:10:38.340189 2026] [:error] [pid 54101:tid 54108] [client 20.220.196.236:65272] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaGJvlY5qgRktcYTGFs4TQAAAcA"]
[Fri Feb 27 20:10:38.752534 2026] [:error] [pid 54102:tid 54145] [client 20.220.196.236:65235] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGJvni74D4fiYUm_GdkcQAAAIE"]
[Fri Feb 27 20:10:39.204218 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:64716] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGJv8KBhrfI6KNv9RiHwAAAABI"]
[Fri Feb 27 20:10:39.624933 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:64725] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGJv8KBhrfI6KNv9RiHwgAAAAQ"]
[Fri Feb 27 20:10:40.048608 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:64654] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGJwIa650YPyxXVeRYbkAAAAY4"]
[Fri Feb 27 20:10:40.466710 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:65158] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGJwMKBhrfI6KNv9RiHzAAAAA4"]
[Fri Feb 27 20:10:40.884908 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:64643] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGJwMKBhrfI6KNv9RiHzgAAABg"]
[Fri Feb 27 20:10:41.299938 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:65196] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGJwcKBhrfI6KNv9RiH0QAAAAI"]
[Fri Feb 27 20:10:41.711110 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:65155] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaGJwYa650YPyxXVeRYbkwAAAZI"]
[Fri Feb 27 20:10:42.123980 2026] [:error] [pid 54101:tid 54110] [client 20.220.196.236:64665] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGJwlY5qgRktcYTGFs4TgAAAcI"]
[Fri Feb 27 20:10:42.556457 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:64661] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGJwoa650YPyxXVeRYblQAAAY8"]
[Fri Feb 27 20:10:42.966770 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:64744] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGJwoa650YPyxXVeRYbmwAAAYo"]
[Fri Feb 27 20:10:43.412768 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:64662] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaGJw8KBhrfI6KNv9RiH3gAAABc"]
[Fri Feb 27 20:10:43.829443 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:65242] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGJw_nSUDZue59Px9vz0gAAAUs"]
[Fri Feb 27 20:10:44.249884 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:64688] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGJxIa650YPyxXVeRYbogAAAZA"]
[Fri Feb 27 20:10:44.688150 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:65200] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGJxIa650YPyxXVeRYbpwAAAZI"]
[Fri Feb 27 20:10:45.117293 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:64670] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez/index.php"] [unique_id "aaGJxYa650YPyxXVeRYbqwAAAYM"]
[Fri Feb 27 20:10:45.551874 2026] [:error] [pid 62998:tid 63015] [client 20.220.196.236:65182] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGJxVQeueXZDUmoLoktRQAAAQ0"]
[Fri Feb 27 20:10:45.968257 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:64757] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGJxfnSUDZue59Px9vz0wAAAVA"]
[Fri Feb 27 20:10:46.406850 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:65197] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGJxvnSUDZue59Px9vz1AAAAUY"]
[Fri Feb 27 20:10:46.818597 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:65231] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aaGJxsKBhrfI6KNv9RiH9AAAAAo"]
[Fri Feb 27 20:10:47.261962 2026] [:error] [pid 54103:tid 54176] [client 20.220.196.236:65159] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGJx-vG4MPCmE0B2sCXLQAAAMU"]
[Fri Feb 27 20:10:47.735699 2026] [:error] [pid 62998:tid 63008] [client 20.220.196.236:65175] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGJx1QeueXZDUmoLoktSAAAAQY"]
[Fri Feb 27 20:10:48.147462 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:65215] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGJyIa650YPyxXVeRYbsgAAAZA"]
[Fri Feb 27 20:10:48.564596 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:64714] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaGJyIa650YPyxXVeRYbtgAAAZc"]
[Fri Feb 27 20:10:48.978021 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:64663] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGJyIa650YPyxXVeRYbuAAAAYo"]
[Fri Feb 27 20:10:49.402658 2026] [:error] [pid 62998:tid 63006] [client 20.220.196.236:65201] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGJyVQeueXZDUmoLoktSgAAAQQ"]
[Fri Feb 27 20:10:49.830682 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:65255] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGJyYa650YPyxXVeRYbwgAAAZc"]
[Fri Feb 27 20:10:50.273290 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:64707] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaGJyoa650YPyxXVeRYbxgAAAYE"]
[Fri Feb 27 20:10:50.695658 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:64727] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGJysKBhrfI6KNv9RiIDQAAABY"]
[Fri Feb 27 20:10:51.120719 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:64765] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGJy8KBhrfI6KNv9RiIFAAAABU"]
[Fri Feb 27 20:10:51.543545 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:64735] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGJy8KBhrfI6KNv9RiIGgAAAAc"]
[Fri Feb 27 20:10:51.970433 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:64640] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaGJy1QeueXZDUmoLoktTQAAAQk"]
[Fri Feb 27 20:10:52.392677 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:65184] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGJzOTvb5AeyJCdY7D-RQAAAEw"]
[Fri Feb 27 20:10:52.841218 2026] [:error] [pid 54103:tid 54187] [client 20.220.196.236:64713] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGJzOvG4MPCmE0B2sCXLwAAANA"]
[Fri Feb 27 20:10:53.259780 2026] [:error] [pid 54231:tid 54256] [client 20.220.196.236:64720] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGJzeTvb5AeyJCdY7D-RgAAAFY"]
[Fri Feb 27 20:10:53.683053 2026] [:error] [pid 54103:tid 54186] [client 20.220.196.236:65229] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaGJzevG4MPCmE0B2sCXNQAAAM8"]
[Fri Feb 27 20:10:54.154665 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:65205] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGJzsKBhrfI6KNv9RiIMgAAABI"]
[Fri Feb 27 20:10:54.592831 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:65163] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGJzsKBhrfI6KNv9RiINQAAABM"]
[Fri Feb 27 20:10:55.029421 2026] [:error] [pid 54102:tid 54159] [client 20.220.196.236:65172] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGJz3i74D4fiYUm_GdkdQAAAI8"]
[Fri Feb 27 20:10:55.461029 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:63921] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaGJz8KBhrfI6KNv9RiIPAAAAAk"]
[Fri Feb 27 20:10:55.895004 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:65267] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGJz8KBhrfI6KNv9RiIQgAAAAQ"]
[Fri Feb 27 20:10:56.317960 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:64648] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGJ0MKBhrfI6KNv9RiISAAAABc"]
[Fri Feb 27 20:10:56.736220 2026] [:error] [pid 56075:tid 56080] [client 20.220.196.236:65153] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGJ0MKBhrfI6KNv9RiITgAAAAM"]
[Fri Feb 27 20:10:57.156316 2026] [:error] [pid 54103:tid 54190] [client 20.220.196.236:65194] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aaGJ0evG4MPCmE0B2sCXOAAAANM"]
[Fri Feb 27 20:10:57.572703 2026] [:error] [pid 54103:tid 54177] [client 20.220.196.236:65257] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGJ0evG4MPCmE0B2sCXOwAAAMY"]
[Fri Feb 27 20:10:57.995814 2026] [:error] [pid 54102:tid 54148] [client 20.220.196.236:64676] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGJ0Xi74D4fiYUm_GdkdwAAAIQ"]
[Fri Feb 27 20:10:58.420104 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:65199] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGJ0uTvb5AeyJCdY7D-RwAAAEE"]
[Fri Feb 27 20:10:58.832773 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:65256] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aaGJ0oa650YPyxXVeRYb1AAAAYI"]
[Fri Feb 27 20:10:59.263628 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:64705] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGJ08KBhrfI6KNv9RiIaAAAABI"]
[Fri Feb 27 20:10:59.682250 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:65209] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGJ08KBhrfI6KNv9RiIawAAAA4"]
[Fri Feb 27 20:11:00.098218 2026] [:error] [pid 62998:tid 63025] [client 20.220.196.236:64710] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGJ1FQeueXZDUmoLoktUQAAARc"]
[Fri Feb 27 20:11:00.570934 2026] [:error] [pid 54101:tid 54131] [client 20.220.196.236:64704] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "aaGJ1FY5qgRktcYTGFs4TwAAAdc"]
[Fri Feb 27 20:11:00.988990 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:65220] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGJ1Ia650YPyxXVeRYb1wAAAYs"]
[Fri Feb 27 20:11:01.454054 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:64715] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGJ1Ya650YPyxXVeRYb2gAAAYU"]
[Fri Feb 27 20:11:01.866752 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:65258] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGJ1Ya650YPyxXVeRYb3QAAAYM"]
[Fri Feb 27 20:11:02.284919 2026] [:error] [pid 49306:tid 49323] [client 20.220.196.236:65269] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bak.php"] [unique_id "aaGJ1vnSUDZue59Px9vz4wAAAU8"]
[Fri Feb 27 20:11:02.741285 2026] [:error] [pid 54102:tid 54168] [client 20.220.196.236:64745] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGJ1ni74D4fiYUm_GdkeAAAAJc"]
[Fri Feb 27 20:11:03.160176 2026] [:error] [pid 62998:tid 63008] [client 20.220.196.236:64679] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGJ11QeueXZDUmoLoktWAAAAQY"]
[Fri Feb 27 20:11:03.584332 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:65206] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGJ1_nSUDZue59Px9vz6AAAAUc"]
[Fri Feb 27 20:11:03.999071 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:63898] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaGJ1_nSUDZue59Px9vz6gAAAU4"]
[Fri Feb 27 20:11:04.429627 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:65160] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGJ2MKBhrfI6KNv9RiIdQAAABA"]
[Fri Feb 27 20:11:04.847656 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:64653] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGJ2MKBhrfI6KNv9RiIeQAAAAE"]
[Fri Feb 27 20:11:05.272945 2026] [:error] [pid 54103:tid 54194] [client 20.220.196.236:65251] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGJ2evG4MPCmE0B2sCXQwAAANc"]
[Fri Feb 27 20:11:05.692758 2026] [:error] [pid 54102:tid 54155] [client 20.220.196.236:65246] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaGJ2Xi74D4fiYUm_GdkfAAAAIs"]
[Fri Feb 27 20:11:06.109285 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:65161] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGJ2sKBhrfI6KNv9RiIfwAAAA4"]
[Fri Feb 27 20:11:06.523079 2026] [:error] [pid 54231:tid 54237] [client 20.220.196.236:64678] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGJ2uTvb5AeyJCdY7D-VwAAAEM"]
[Fri Feb 27 20:11:06.953084 2026] [:error] [pid 54102:tid 54162] [client 20.220.196.236:65179] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGJ2ni74D4fiYUm_GdkfQAAAJI"]
[Fri Feb 27 20:11:07.363576 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:64750] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGJ28KBhrfI6KNv9RiIgwAAAAU"]
[Fri Feb 27 20:11:07.779328 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:64751] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGJ2_nSUDZue59Px9vz8QAAAUw"]
[Fri Feb 27 20:11:08.194533 2026] [:error] [pid 54103:tid 54178] [client 20.220.196.236:65249] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGJ3OvG4MPCmE0B2sCXRQAAAMc"]
[Fri Feb 27 20:11:08.631921 2026] [:error] [pid 49306:tid 49328] [client 20.220.196.236:63939] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGJ3PnSUDZue59Px9vz9AAAAVQ"]
[Fri Feb 27 20:11:09.046588 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:63890] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-monamon.php"] [unique_id "aaGJ3cKBhrfI6KNv9RiIigAAAA0"]
[Fri Feb 27 20:11:09.458435 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:63994] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGJ3cKBhrfI6KNv9RiIjAAAAAI"]
[Fri Feb 27 20:11:09.873229 2026] [:error] [pid 54231:tid 54251] [client 20.220.196.236:64719] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGJ3eTvb5AeyJCdY7D-WQAAAFE"]
[Fri Feb 27 20:11:10.287365 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:65228] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGJ3uTvb5AeyJCdY7D-XAAAAEw"]
[Fri Feb 27 20:11:10.700381 2026] [:error] [pid 54103:tid 54185] [client 20.220.196.236:65203] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/"] [unique_id "aaGJ3uvG4MPCmE0B2sCXRgAAAM4"]
[Fri Feb 27 20:11:11.112933 2026] [:error] [pid 62998:tid 63012] [client 20.220.196.236:63965] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGJ31QeueXZDUmoLoktYgAAAQo"]
[Fri Feb 27 20:11:11.532763 2026] [:error] [pid 62998:tid 63005] [client 20.220.196.236:64726] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGJ31QeueXZDUmoLoktZgAAAQM"]
[Fri Feb 27 20:11:11.948467 2026] [:error] [pid 54101:tid 54115] [client 20.220.196.236:65233] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGJ31Y5qgRktcYTGFs4UgAAAcc"]
[Fri Feb 27 20:11:12.360949 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:65278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaGJ4Ia650YPyxXVeRYcEwAAAYI"]
[Fri Feb 27 20:11:12.770837 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:64690] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGJ4Ia650YPyxXVeRYcFgAAAZE"]
[Fri Feb 27 20:11:13.182607 2026] [:error] [pid 62998:tid 63008] [client 20.220.196.236:64755] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGJ4VQeueXZDUmoLoktaQAAAQY"]
[Fri Feb 27 20:11:13.601009 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:65253] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGJ4Ya650YPyxXVeRYcIAAAAY8"]
[Fri Feb 27 20:11:14.020513 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:64649] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core.php"] [unique_id "aaGJ4lQeueXZDUmoLoktbAAAARE"]
[Fri Feb 27 20:11:14.435206 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:65152] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGJ4oa650YPyxXVeRYcKQAAAYY"]
[Fri Feb 27 20:11:14.860787 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:65263] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGJ4vnSUDZue59Px9vz_gAAAVY"]
[Fri Feb 27 20:11:15.277237 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:64657] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGJ44a650YPyxXVeRYcMQAAAYA"]
[Fri Feb 27 20:11:15.697319 2026] [:error] [pid 49306:tid 49318] [client 20.220.196.236:64656] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGJ4_nSUDZue59Px9vz_wAAAUo"]
[Fri Feb 27 20:11:16.107712 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:63989] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGJ5Ia650YPyxXVeRYcNQAAAYg"]
[Fri Feb 27 20:11:16.523059 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:64689] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGJ5Ia650YPyxXVeRYcOAAAAYE"]
[Fri Feb 27 20:11:16.935811 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:65260] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGJ5Ia650YPyxXVeRYcOgAAAYY"]
[Fri Feb 27 20:11:17.352633 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:63875] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaGJ5Ya650YPyxXVeRYcPwAAAZQ"]
[Fri Feb 27 20:11:17.775636 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:63958] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGJ5Ya650YPyxXVeRYcQwAAAZc"]
[Fri Feb 27 20:11:18.191828 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:64699] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGJ5sKBhrfI6KNv9RiIqQAAAAg"]
[Fri Feb 27 20:11:18.603350 2026] [:error] [pid 54102:tid 54151] [client 20.220.196.236:65178] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGJ5ni74D4fiYUm_GdkfwAAAIc"]
[Fri Feb 27 20:11:19.011985 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:63996] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zsec.php"] [unique_id "aaGJ5_nSUDZue59Px9v0AgAAAUw"]
[Fri Feb 27 20:11:19.422621 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:65170] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGJ58KBhrfI6KNv9RiIswAAAAo"]
[Fri Feb 27 20:11:19.837463 2026] [:error] [pid 54103:tid 54174] [client 20.220.196.236:63988] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGJ5-vG4MPCmE0B2sCXTgAAAMM"]
[Fri Feb 27 20:11:20.252176 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:63874] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGJ6PnSUDZue59Px9v0FAAAAVY"]
[Fri Feb 27 20:11:20.664537 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:64709] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaGJ6PnSUDZue59Px9v0GAAAAUY"]
[Fri Feb 27 20:11:21.081997 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:63453] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGJ6fnSUDZue59Px9v0HQAAAUI"]
[Fri Feb 27 20:11:21.493653 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:64723] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGJ6Ya650YPyxXVeRYcUgAAAYw"]
[Fri Feb 27 20:11:21.914544 2026] [:error] [pid 62998:tid 63007] [client 20.220.196.236:63949] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGJ6VQeueXZDUmoLoktbgAAAQU"]
[Fri Feb 27 20:11:22.334404 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:64672] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hi.php"] [unique_id "aaGJ6vnSUDZue59Px9v0JgAAAUs"]
[Fri Feb 27 20:11:22.746516 2026] [:error] [pid 54231:tid 54244] [client 20.220.196.236:65222] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGJ6uTvb5AeyJCdY7D-YgAAAEo"]
[Fri Feb 27 20:11:23.161267 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:64700] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGJ68KBhrfI6KNv9RiIwwAAAAE"]
[Fri Feb 27 20:11:23.578466 2026] [:error] [pid 54231:tid 54250] [client 20.220.196.236:63470] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGJ6-Tvb5AeyJCdY7D-YwAAAFA"]
[Fri Feb 27 20:11:23.990113 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:65265] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/cong.php"] [unique_id "aaGJ68KBhrfI6KNv9RiIygAAAAc"]
[Fri Feb 27 20:11:24.411864 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:64686] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGJ7MKBhrfI6KNv9RiI0AAAAA0"]
[Fri Feb 27 20:11:24.832022 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:64647] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGJ7Ia650YPyxXVeRYcXwAAAY0"]
[Fri Feb 27 20:11:25.250584 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:63942] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGJ7cKBhrfI6KNv9RiI3AAAAAo"]
[Fri Feb 27 20:11:25.666856 2026] [:error] [pid 54103:tid 54172] [client 20.220.196.236:64697] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaGJ7evG4MPCmE0B2sCXYAAAAME"]
[Fri Feb 27 20:11:26.727092 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:64651] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaGJ7oa650YPyxXVeRYcaAAAAYs"]
[Fri Feb 27 20:11:27.152840 2026] [proxy_fcgi:error] [pid 62998:tid 63025] [client 20.220.196.236:63892] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:11:28.651332 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 20.220.196.236:63892] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:11:28.859015 2026] [:error] [pid 62998:tid 63025] [client 20.220.196.236:63892] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGJ8FQeueXZDUmoLoktjgAAARc"]
[Fri Feb 27 20:11:29.271147 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:64712] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGJ8fnSUDZue59Px9v0MAAAAUE"]
[Fri Feb 27 20:11:29.682574 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:63872] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGJ8cKBhrfI6KNv9RiI-AAAAAc"]
[Fri Feb 27 20:11:30.100646 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:65192] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/TL.php"] [unique_id "aaGJ8sKBhrfI6KNv9RiI_gAAAAQ"]
[Fri Feb 27 20:11:30.525260 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:65264] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGJ8sKBhrfI6KNv9RiJAwAAABc"]
[Fri Feb 27 20:11:30.937476 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:64748] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGJ8vnSUDZue59Px9v0MQAAAVA"]
[Fri Feb 27 20:11:31.357763 2026] [:error] [pid 62998:tid 63001] [client 20.220.196.236:64702] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGJ81QeueXZDUmoLoktmgAAAQA"]
[Fri Feb 27 20:11:31.779952 2026] [:error] [pid 54231:tid 54237] [client 20.220.196.236:65154] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aaGJ8-Tvb5AeyJCdY7D-aAAAAEM"]
[Fri Feb 27 20:11:32.191430 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:63960] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGJ9Ia650YPyxXVeRYcgAAAAYk"]
[Fri Feb 27 20:11:32.605330 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:65259] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGJ9Ia650YPyxXVeRYchQAAAYE"]
[Fri Feb 27 20:11:33.015891 2026] [:error] [pid 49306:tid 49308] [client 20.220.196.236:65247] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGJ9fnSUDZue59Px9v0MgAAAUA"]
[Fri Feb 27 20:11:33.430103 2026] [:error] [pid 54103:tid 54195] [client 20.220.196.236:64743] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fck.php"] [unique_id "aaGJ9evG4MPCmE0B2sCXYQAAANg"]
[Fri Feb 27 20:11:33.876605 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:65208] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGJ9eTvb5AeyJCdY7D-bAAAAEw"]
[Fri Feb 27 20:11:34.289116 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:64677] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGJ9sKBhrfI6KNv9RiJFwAAABc"]
[Fri Feb 27 20:11:34.697707 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:63896] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGJ9sKBhrfI6KNv9RiJGwAAAAw"]
[Fri Feb 27 20:11:35.108644 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:63945] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "aaGJ98KBhrfI6KNv9RiJHgAAABE"]
[Fri Feb 27 20:11:35.530811 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:63937] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGJ98KBhrfI6KNv9RiJIQAAABA"]
[Fri Feb 27 20:11:35.941094 2026] [:error] [pid 62998:tid 63026] [client 20.220.196.236:65275] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGJ91QeueXZDUmoLoktyQAAARg"]
[Fri Feb 27 20:11:36.349354 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:63993] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGJ-MKBhrfI6KNv9RiJKgAAAAo"]
[Fri Feb 27 20:11:36.765768 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:64767] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aaGJ-MKBhrfI6KNv9RiJMAAAABU"]
[Fri Feb 27 20:11:37.190714 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:63966] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGJ-cKBhrfI6KNv9RiJMwAAABA"]
[Fri Feb 27 20:11:37.603557 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:64743] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGJ-cKBhrfI6KNv9RiJOAAAAAs"]
[Fri Feb 27 20:11:38.041300 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:65156] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGJ-oa650YPyxXVeRYcmAAAAYI"]
[Fri Feb 27 20:11:38.458743 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:65171] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw2.php"] [unique_id "aaGJ-oa650YPyxXVeRYcnAAAAZA"]
[Fri Feb 27 20:11:38.878448 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:65216] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGJ-sKBhrfI6KNv9RiJQwAAABI"]
[Fri Feb 27 20:11:39.314140 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:63386] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGJ-8KBhrfI6KNv9RiJRgAAABc"]
[Fri Feb 27 20:11:39.725878 2026] [:error] [pid 54102:tid 54160] [client 20.220.196.236:63920] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGJ-3i74D4fiYUm_GdkiwAAAJA"]
[Fri Feb 27 20:11:40.139311 2026] [:error] [pid 54102:tid 54155] [client 20.220.196.236:65237] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaGJ_Hi74D4fiYUm_GdkjAAAAIs"]
[Fri Feb 27 20:11:40.556005 2026] [:error] [pid 54102:tid 54165] [client 20.220.196.236:64660] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGJ_Hi74D4fiYUm_GdkjgAAAJU"]
[Fri Feb 27 20:11:40.975051 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:64766] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGJ_Ia650YPyxXVeRYcoQAAAYs"]
[Fri Feb 27 20:11:41.386444 2026] [:error] [pid 54231:tid 54252] [client 20.220.196.236:64682] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGJ_eTvb5AeyJCdY7D-cAAAAFI"]
[Fri Feb 27 20:11:41.800252 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:65271] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaGJ_cKBhrfI6KNv9RiJWgAAAAQ"]
[Fri Feb 27 20:11:42.218187 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:64691] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGJ_oa650YPyxXVeRYcpAAAAYE"]
[Fri Feb 27 20:11:42.634537 2026] [:error] [pid 62998:tid 63022] [client 20.220.196.236:64747] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGJ_lQeueXZDUmoLokt1QAAARQ"]
[Fri Feb 27 20:11:43.045030 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:64752] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGJ_1QeueXZDUmoLokt1gAAAQk"]
[Fri Feb 27 20:11:43.468327 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:64694] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaGJ_8KBhrfI6KNv9RiJZQAAAA0"]
[Fri Feb 27 20:11:43.881665 2026] [:error] [pid 54103:tid 54176] [client 20.220.196.236:64760] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGJ_-vG4MPCmE0B2sCXZQAAAMU"]
[Fri Feb 27 20:11:44.294826 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:64641] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGKAPnSUDZue59Px9v0OwAAAU4"]
[Fri Feb 27 20:11:44.717367 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:65268] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGKAPnSUDZue59Px9v0PgAAAUc"]
[Fri Feb 27 20:11:45.130047 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:63909] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaGKAYa650YPyxXVeRYcsAAAAYY"]
[Fri Feb 27 20:11:45.545476 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:63986] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGKAYa650YPyxXVeRYcuAAAAYA"]
[Fri Feb 27 20:11:45.956330 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:65224] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGKAcKBhrfI6KNv9RiJbQAAABA"]
[Fri Feb 27 20:11:46.370441 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:63433] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGKAsKBhrfI6KNv9RiJbgAAABI"]
[Fri Feb 27 20:11:46.781989 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:64659] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaGKAsKBhrfI6KNv9RiJcAAAAA8"]
[Fri Feb 27 20:11:47.190476 2026] [:error] [pid 54103:tid 54192] [client 20.220.196.236:63953] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGKA-vG4MPCmE0B2sCXaAAAANU"]
[Fri Feb 27 20:11:47.607098 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:64761] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGKA8KBhrfI6KNv9RiJcQAAAA4"]
[Fri Feb 27 20:11:48.019585 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:63431] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGKBPnSUDZue59Px9v0QAAAAUE"]
[Fri Feb 27 20:11:48.443259 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:65165] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaGKBMKBhrfI6KNv9RiJdAAAABE"]
[Fri Feb 27 20:11:48.856325 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:65244] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGKBPnSUDZue59Px9v0RgAAAVg"]
[Fri Feb 27 20:11:49.280416 2026] [:error] [pid 54101:tid 54125] [client 20.220.196.236:64683] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGKBVY5qgRktcYTGFs4awAAAdE"]
[Fri Feb 27 20:11:49.690987 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:65211] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGKBYa650YPyxXVeRYc2QAAAZc"]
[Fri Feb 27 20:11:50.106593 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:63893] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaGKBoa650YPyxXVeRYc3gAAAZI"]
[Fri Feb 27 20:11:50.525110 2026] [:error] [pid 54101:tid 54121] [client 20.220.196.236:64717] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGKBlY5qgRktcYTGFs4bQAAAc0"]
[Fri Feb 27 20:11:50.939499 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:63941] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGKBsKBhrfI6KNv9RiJeAAAABM"]
[Fri Feb 27 20:11:51.351600 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:63885] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGKB8KBhrfI6KNv9RiJeQAAAAc"]
[Fri Feb 27 20:11:51.766979 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:64736] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaGKB8KBhrfI6KNv9RiJegAAAAY"]
[Fri Feb 27 20:11:52.212781 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:64703] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGKCMKBhrfI6KNv9RiJfAAAABI"]
[Fri Feb 27 20:11:52.630997 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:63899] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGKCMKBhrfI6KNv9RiJgAAAAA4"]
[Fri Feb 27 20:11:53.056841 2026] [:error] [pid 49306:tid 49313] [client 20.220.196.236:63927] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGKCfnSUDZue59Px9v0TQAAAUU"]
[Fri Feb 27 20:11:53.475303 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63873] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aaGKCcKBhrfI6KNv9RiJhwAAAAU"]
[Fri Feb 27 20:11:53.889853 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:65180] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGKCcKBhrfI6KNv9RiJjAAAABI"]
[Fri Feb 27 20:11:54.325767 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:64646] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGKCsKBhrfI6KNv9RiJlAAAAAI"]
[Fri Feb 27 20:11:54.746671 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:64758] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGKCsKBhrfI6KNv9RiJmAAAAAU"]
[Fri Feb 27 20:11:55.175266 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:65226] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aaGKC1QeueXZDUmoLokt4QAAARI"]
[Fri Feb 27 20:11:55.597443 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:63449] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGKC4a650YPyxXVeRYc-wAAAYM"]
[Fri Feb 27 20:11:56.042799 2026] [:error] [pid 62998:tid 63004] [client 20.220.196.236:62697] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGKDFQeueXZDUmoLokt4gAAAQI"]
[Fri Feb 27 20:11:56.483134 2026] [:error] [pid 54231:tid 54250] [client 20.220.196.236:63482] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGKDOTvb5AeyJCdY7D-cwAAAFA"]
[Fri Feb 27 20:11:56.902500 2026] [:error] [pid 54102:tid 54163] [client 20.220.196.236:64696] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zu.php"] [unique_id "aaGKDHi74D4fiYUm_GdklwAAAJM"]
[Fri Feb 27 20:11:57.312052 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:65277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGKDfnSUDZue59Px9v0UwAAAVE"]
[Fri Feb 27 20:11:57.733165 2026] [:error] [pid 54101:tid 54123] [client 20.220.196.236:63923] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGKDVY5qgRktcYTGFs4bwAAAc8"]
[Fri Feb 27 20:11:58.146234 2026] [:error] [pid 49306:tid 49308] [client 20.220.196.236:63483] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGKDvnSUDZue59Px9v0VgAAAUA"]
[Fri Feb 27 20:11:58.582744 2026] [:error] [pid 62998:tid 63001] [client 20.220.196.236:63944] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aaGKDlQeueXZDUmoLokt5QAAAQA"]
[Fri Feb 27 20:11:58.997582 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:65157] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGKDoa650YPyxXVeRYdDAAAAYM"]
[Fri Feb 27 20:11:59.427010 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:64668] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGKD4a650YPyxXVeRYdEwAAAZg"]
[Fri Feb 27 20:11:59.839999 2026] [:error] [pid 54231:tid 54237] [client 20.220.196.236:65230] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGKD-Tvb5AeyJCdY7D-dwAAAEM"]
[Fri Feb 27 20:12:00.259811 2026] [:error] [pid 62998:tid 63008] [client 20.220.196.236:63371] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/opts.php"] [unique_id "aaGKEFQeueXZDUmoLokt6gAAAQY"]
[Fri Feb 27 20:12:00.722764 2026] [:error] [pid 54103:tid 54185] [client 20.220.196.236:65162] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGKEOvG4MPCmE0B2sCXbQAAAM4"]
[Fri Feb 27 20:12:01.136305 2026] [:error] [pid 54103:tid 54181] [client 20.220.196.236:65202] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGKEevG4MPCmE0B2sCXbgAAAMo"]
[Fri Feb 27 20:12:01.574775 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:65176] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGKEYa650YPyxXVeRYdIQAAAYw"]
[Fri Feb 27 20:12:02.002953 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:64764] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaGKEsKBhrfI6KNv9RiJpgAAABA"]
[Fri Feb 27 20:12:02.425635 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:63935] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGKEsKBhrfI6KNv9RiJqAAAAAQ"]
[Fri Feb 27 20:12:02.839943 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:64655] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGKEsKBhrfI6KNv9RiJqwAAAAw"]
[Fri Feb 27 20:12:03.261502 2026] [:error] [pid 54103:tid 54190] [client 20.220.196.236:65185] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGKE-vG4MPCmE0B2sCXcAAAANM"]
[Fri Feb 27 20:12:03.687528 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:64667] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ze.php"] [unique_id "aaGKE8KBhrfI6KNv9RiJswAAAAU"]
[Fri Feb 27 20:12:04.152400 2026] [:error] [pid 54103:tid 54175] [client 20.220.196.236:65168] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGKFOvG4MPCmE0B2sCXcQAAAMQ"]
[Fri Feb 27 20:12:04.574060 2026] [:error] [pid 54231:tid 54249] [client 20.220.196.236:62664] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGKFOTvb5AeyJCdY7D-eAAAAE8"]
[Fri Feb 27 20:12:04.990469 2026] [:error] [pid 54102:tid 54160] [client 20.220.196.236:64760] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGKFHi74D4fiYUm_GdkngAAAJA"]
[Fri Feb 27 20:12:05.406961 2026] [:error] [pid 54102:tid 54149] [client 20.220.196.236:64708] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seetox.php"] [unique_id "aaGKFXi74D4fiYUm_GdknwAAAIU"]
[Fri Feb 27 20:12:05.824818 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:64684] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGKFYa650YPyxXVeRYdSgAAAYw"]
[Fri Feb 27 20:12:06.260219 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:63954] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGKFoa650YPyxXVeRYdTQAAAYc"]
[Fri Feb 27 20:12:06.683709 2026] [:error] [pid 54103:tid 54179] [client 20.220.196.236:64696] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGKFuvG4MPCmE0B2sCXdAAAAMg"]
[Fri Feb 27 20:12:07.110945 2026] [:error] [pid 54102:tid 54162] [client 20.220.196.236:64695] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aaGKF3i74D4fiYUm_GdkogAAAJI"]
[Fri Feb 27 20:12:07.528638 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:63968] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGKF8KBhrfI6KNv9RiJwwAAAAI"]
[Fri Feb 27 20:12:07.947269 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:63992] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGKF-Tvb5AeyJCdY7D-fAAAAFU"]
[Fri Feb 27 20:12:08.419074 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:63902] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGKGMKBhrfI6KNv9RiJxQAAAAA"]
[Fri Feb 27 20:12:08.843159 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:64687] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugins.php"] [unique_id "aaGKGMKBhrfI6KNv9RiJyAAAAAU"]
[Fri Feb 27 20:12:09.256023 2026] [:error] [pid 54231:tid 54254] [client 20.220.196.236:65214] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGKGeTvb5AeyJCdY7D-fQAAAFQ"]
[Fri Feb 27 20:12:09.671162 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:64739] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGKGcKBhrfI6KNv9RiJzAAAAA0"]
[Fri Feb 27 20:12:10.086558 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:63368] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGKGsKBhrfI6KNv9RiJzwAAAA4"]
[Fri Feb 27 20:12:10.504174 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:63418] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xoot.php"] [unique_id "aaGKGsKBhrfI6KNv9RiJ0QAAAAk"]
[Fri Feb 27 20:12:10.919918 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:63947] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGKGvnSUDZue59Px9v0YgAAAUc"]
[Fri Feb 27 20:12:11.347199 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:63948] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGKG8KBhrfI6KNv9RiJ1gAAAAI"]
[Fri Feb 27 20:12:11.758733 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63445] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGKG8KBhrfI6KNv9RiJ2QAAAAU"]
[Fri Feb 27 20:12:12.175055 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:65273] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaGKHMKBhrfI6KNv9RiJ2wAAAAg"]
[Fri Feb 27 20:12:12.623007 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:63439] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGKHMKBhrfI6KNv9RiJ4AAAABQ"]
[Fri Feb 27 20:12:13.036904 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:64746] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGKHfnSUDZue59Px9v0ZwAAAUE"]
[Fri Feb 27 20:12:13.469952 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:64749] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGKHcKBhrfI6KNv9RiJ5wAAAAc"]
[Fri Feb 27 20:12:13.892611 2026] [:error] [pid 49306:tid 49316] [client 20.220.196.236:64674] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaGKHfnSUDZue59Px9v0agAAAUg"]
[Fri Feb 27 20:12:14.309782 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:63999] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGKHvnSUDZue59Px9v0awAAAVA"]
[Fri Feb 27 20:12:14.726176 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:64762] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGKHvnSUDZue59Px9v0bAAAAVY"]
[Fri Feb 27 20:12:15.141139 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:65190] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGKH8KBhrfI6KNv9RiJ9wAAABM"]
[Fri Feb 27 20:12:15.571517 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:63916] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaGKH4a650YPyxXVeRYdcAAAAZQ"]
[Fri Feb 27 20:12:15.983585 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:65186] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGKH_nSUDZue59Px9v0bwAAAU0"]
[Fri Feb 27 20:12:16.407815 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:64730] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGKIPnSUDZue59Px9v0cQAAAUw"]
[Fri Feb 27 20:12:16.826270 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:63447] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGKIPnSUDZue59Px9v0dAAAAVc"]
[Fri Feb 27 20:12:17.241519 2026] [:error] [pid 54101:tid 54117] [client 20.220.196.236:64738] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaGKIVY5qgRktcYTGFs4hwAAAck"]
[Fri Feb 27 20:12:17.675857 2026] [:error] [pid 62998:tid 63004] [client 20.220.196.236:62676] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGKIVQeueXZDUmoLokt8wAAAQI"]
[Fri Feb 27 20:12:18.093151 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:63963] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGKIsKBhrfI6KNv9RiKBwAAABM"]
[Fri Feb 27 20:12:18.507338 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:63956] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGKIvnSUDZue59Px9v0eAAAAVI"]
[Fri Feb 27 20:12:18.941306 2026] [:error] [pid 62998:tid 63001] [client 20.220.196.236:63368] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/er.php"] [unique_id "aaGKIlQeueXZDUmoLokt9QAAAQA"]
[Fri Feb 27 20:12:19.365089 2026] [:error] [pid 54101:tid 54119] [client 20.220.196.236:63999] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGKI1Y5qgRktcYTGFs4iAAAAcs"]
[Fri Feb 27 20:12:19.783179 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:64754] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGKI4a650YPyxXVeRYddgAAAYs"]
[Fri Feb 27 20:12:20.194266 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:65227] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGKJFQeueXZDUmoLokt9gAAAQk"]
[Fri Feb 27 20:12:20.623925 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:64701] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fault.php"] [unique_id "aaGKJIa650YPyxXVeRYdegAAAZU"]
[Fri Feb 27 20:12:21.040091 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:63436] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGKJYa650YPyxXVeRYdfAAAAZM"]
[Fri Feb 27 20:12:21.452403 2026] [:error] [pid 54103:tid 54187] [client 20.220.196.236:65167] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGKJevG4MPCmE0B2sCXeAAAANA"]
[Fri Feb 27 20:12:21.865782 2026] [:error] [pid 54102:tid 54151] [client 20.220.196.236:63900] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGKJXi74D4fiYUm_GdkpwAAAIc"]
[Fri Feb 27 20:12:22.280404 2026] [:error] [pid 54102:tid 54152] [client 20.220.196.236:65245] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaGKJni74D4fiYUm_GdkqgAAAIg"]
[Fri Feb 27 20:12:22.702385 2026] [:error] [pid 54102:tid 54153] [client 20.220.196.236:63442] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGKJni74D4fiYUm_GdkrAAAAIk"]
[Fri Feb 27 20:12:23.111332 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:63401] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGKJ_nSUDZue59Px9v0egAAAUk"]
[Fri Feb 27 20:12:23.522578 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:63366] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGKJ8KBhrfI6KNv9RiKIAAAABc"]
[Fri Feb 27 20:12:23.932371 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:63935] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaGKJ4a650YPyxXVeRYdfwAAAY0"]
[Fri Feb 27 20:12:24.346712 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:65232] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGKKMKBhrfI6KNv9RiKJQAAAAw"]
[Fri Feb 27 20:12:24.761665 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:63889] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGKKIa650YPyxXVeRYdggAAAYo"]
[Fri Feb 27 20:12:25.240838 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:63895] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGKKYa650YPyxXVeRYdhQAAAYg"]
[Fri Feb 27 20:12:25.660813 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:65225] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/leuk.php"] [unique_id "aaGKKYa650YPyxXVeRYdhwAAAYk"]
[Fri Feb 27 20:12:26.087692 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:63933] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGKKsKBhrfI6KNv9RiKMwAAABE"]
[Fri Feb 27 20:12:26.525605 2026] [:error] [pid 49306:tid 49311] [client 20.220.196.236:63360] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGKKvnSUDZue59Px9v0ewAAAUM"]
[Fri Feb 27 20:12:26.952018 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:65223] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGKKvnSUDZue59Px9v0fAAAAVg"]
[Fri Feb 27 20:12:27.371097 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:63463] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaGKK8KBhrfI6KNv9RiKPgAAAAY"]
[Fri Feb 27 20:12:27.793800 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:62645] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "aaGKK8KBhrfI6KNv9RiKPwAAAAI"]
[Fri Feb 27 20:12:28.218259 2026] [proxy_fcgi:error] [pid 56075:tid 56085] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:28.427752 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:28.636994 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:28.847032 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:29.055997 2026] [proxy_fcgi:error] [pid 56075:tid 56088] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:29.306015 2026] [proxy_fcgi:error] [pid 56075:tid 56097] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:29.528448 2026] [proxy_fcgi:error] [pid 56075:tid 56078] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:29.741134 2026] [proxy_fcgi:error] [pid 56075:tid 56083] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:29.958809 2026] [proxy_fcgi:error] [pid 56075:tid 56086] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:30.168037 2026] [proxy_fcgi:error] [pid 56075:tid 56079] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:30.390701 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 20.220.196.236:63440] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:12:30.598660 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:63440] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaGKLsKBhrfI6KNv9RiKWAAAAA4"]
[Fri Feb 27 20:12:31.329084 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:65243] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaGKL8KBhrfI6KNv9RiKXgAAABQ"]
[Fri Feb 27 20:12:31.761548 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:65171] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaGKL4a650YPyxXVeRYdmwAAAYE"]
[Fri Feb 27 20:12:32.256986 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:63487] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaGKMIa650YPyxXVeRYdngAAAYs"]
[Fri Feb 27 20:12:32.686411 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:63904] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGKMMKBhrfI6KNv9RiKZgAAAAg"]
[Fri Feb 27 20:12:33.165666 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:63396] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGKMYa650YPyxXVeRYdogAAAZM"]
[Fri Feb 27 20:12:33.691551 2026] [:error] [pid 54102:tid 54169] [client 20.220.196.236:65164] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGKMXi74D4fiYUm_GdksAAAAJg"]
[Fri Feb 27 20:12:34.297063 2026] [:error] [pid 54102:tid 54160] [client 20.220.196.236:65183] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aaGKMni74D4fiYUm_GdksQAAAJA"]
[Fri Feb 27 20:12:34.790482 2026] [:error] [pid 56075:tid 56080] [client 20.220.196.236:63915] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGKMsKBhrfI6KNv9RiKeQAAAAM"]
[Fri Feb 27 20:12:35.234218 2026] [:error] [pid 62998:tid 63025] [client 20.220.196.236:64698] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGKM1QeueXZDUmoLokt_wAAARc"]
[Fri Feb 27 20:12:35.709188 2026] [:error] [pid 54231:tid 54251] [client 20.220.196.236:63997] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGKM-Tvb5AeyJCdY7D-hQAAAFE"]
[Fri Feb 27 20:12:36.257991 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:63385] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaGKNOTvb5AeyJCdY7D-hgAAAEA"]
[Fri Feb 27 20:12:36.697274 2026] [:error] [pid 54231:tid 54249] [client 20.220.196.236:63973] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGKNOTvb5AeyJCdY7D-hwAAAE8"]
[Fri Feb 27 20:12:37.241134 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:63460] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGKNYa650YPyxXVeRYdvgAAAYM"]
[Fri Feb 27 20:12:37.768874 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:64753] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGKNcKBhrfI6KNv9RiKiAAAABI"]
[Fri Feb 27 20:12:38.423688 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:63955] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaGKNsKBhrfI6KNv9RiKigAAAAc"]
[Fri Feb 27 20:12:38.883436 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:63903] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGKNsKBhrfI6KNv9RiKjQAAAAI"]
[Fri Feb 27 20:12:39.456189 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:63382] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGKN8KBhrfI6KNv9RiKkgAAABg"]
[Fri Feb 27 20:12:39.871942 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:64756] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGKN8KBhrfI6KNv9RiKlAAAAAY"]
[Fri Feb 27 20:12:40.287282 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:63878] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaGKOMKBhrfI6KNv9RiKlgAAABE"]
[Fri Feb 27 20:12:40.713633 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:63891] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGKOIa650YPyxXVeRYd0gAAAYM"]
[Fri Feb 27 20:12:41.127291 2026] [:error] [pid 54103:tid 54181] [client 20.220.196.236:64677] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGKOevG4MPCmE0B2sCXfgAAAMo"]
[Fri Feb 27 20:12:41.546366 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:63877] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGKOcKBhrfI6KNv9RiKmwAAAAk"]
[Fri Feb 27 20:12:41.954716 2026] [:error] [pid 54103:tid 54194] [client 20.220.196.236:63365] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaGKOevG4MPCmE0B2sCXfwAAANc"]
[Fri Feb 27 20:12:42.367631 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:63998] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGKOoa650YPyxXVeRYd3AAAAYU"]
[Fri Feb 27 20:12:42.786902 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:65187] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGKOlQeueXZDUmoLokuBQAAARE"]
[Fri Feb 27 20:12:43.203716 2026] [:error] [pid 54103:tid 54188] [client 20.220.196.236:63879] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGKO-vG4MPCmE0B2sCXggAAANE"]
[Fri Feb 27 20:12:43.616610 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:64671] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaGKO4a650YPyxXVeRYd4gAAAZI"]
[Fri Feb 27 20:12:44.031132 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:63922] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGKPIa650YPyxXVeRYd5AAAAZM"]
[Fri Feb 27 20:12:44.451087 2026] [:error] [pid 54102:tid 54162] [client 20.220.196.236:63967] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGKPHi74D4fiYUm_GdktAAAAJI"]
[Fri Feb 27 20:12:44.863569 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:64675] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGKPMKBhrfI6KNv9RiKogAAAAY"]
[Fri Feb 27 20:12:45.279704 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:63979] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fot.php"] [unique_id "aaGKPYa650YPyxXVeRYd7AAAAZY"]
[Fri Feb 27 20:12:45.694541 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:63455] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGKPYa650YPyxXVeRYd8AAAAYg"]
[Fri Feb 27 20:12:46.106637 2026] [:error] [pid 54102:tid 54164] [client 20.220.196.236:65270] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGKPni74D4fiYUm_GdktQAAAJQ"]
[Fri Feb 27 20:12:46.519327 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:63462] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGKPoa650YPyxXVeRYd-AAAAZU"]
[Fri Feb 27 20:12:46.931743 2026] [:error] [pid 54101:tid 54131] [client 20.220.196.236:63969] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaGKPlY5qgRktcYTGFs4jQAAAdc"]
[Fri Feb 27 20:12:47.345654 2026] [:error] [pid 49306:tid 49313] [client 20.220.196.236:62653] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGKP_nSUDZue59Px9v0kwAAAUU"]
[Fri Feb 27 20:12:47.762626 2026] [:error] [pid 62998:tid 63022] [client 20.220.196.236:63475] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGKP1QeueXZDUmoLokuCgAAARQ"]
[Fri Feb 27 20:12:48.191930 2026] [:error] [pid 62998:tid 63016] [client 20.220.196.236:63377] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGKQFQeueXZDUmoLokuDAAAAQ4"]
[Fri Feb 27 20:12:48.607173 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:63894] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaGKQPnSUDZue59Px9v0mQAAAUE"]
[Fri Feb 27 20:12:49.021823 2026] [:error] [pid 54103:tid 54195] [client 20.220.196.236:63388] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGKQevG4MPCmE0B2sCXiAAAANg"]
[Fri Feb 27 20:12:49.436251 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:65238] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGKQVQeueXZDUmoLokuEAAAAQw"]
[Fri Feb 27 20:12:49.848915 2026] [:error] [pid 54231:tid 54254] [client 20.220.196.236:64729] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGKQeTvb5AeyJCdY7D-jAAAAFQ"]
[Fri Feb 27 20:12:50.326287 2026] [:error] [pid 54102:tid 54154] [client 20.220.196.236:64759] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "aaGKQni74D4fiYUm_GdktwAAAIo"]
[Fri Feb 27 20:12:50.737593 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:63420] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGKQsKBhrfI6KNv9RiKqwAAAAc"]
[Fri Feb 27 20:12:51.149109 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:65240] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGKQ8KBhrfI6KNv9RiKrQAAAA4"]
[Fri Feb 27 20:12:51.557932 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:62701] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGKQ8KBhrfI6KNv9RiKrwAAABA"]
[Fri Feb 27 20:12:51.970251 2026] [:error] [pid 54102:tid 54151] [client 20.220.196.236:64692] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev1s.php"] [unique_id "aaGKQ3i74D4fiYUm_GdkuQAAAIc"]
[Fri Feb 27 20:12:52.389159 2026] [:error] [pid 54231:tid 54244] [client 20.220.196.236:63991] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGKROTvb5AeyJCdY7D-jwAAAEo"]
[Fri Feb 27 20:12:52.808339 2026] [:error] [pid 54103:tid 54170] [client 20.220.196.236:63467] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGKROvG4MPCmE0B2sCXiwAAAMA"]
[Fri Feb 27 20:12:53.232246 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:63410] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGKRYa650YPyxXVeRYeEwAAAY8"]
[Fri Feb 27 20:12:53.645031 2026] [:error] [pid 56075:tid 56088] [client 20.220.196.236:63980] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffd.php"] [unique_id "aaGKRcKBhrfI6KNv9RiKswAAAAs"]
[Fri Feb 27 20:12:54.055620 2026] [:error] [pid 54101:tid 54115] [client 20.220.196.236:65193] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGKRlY5qgRktcYTGFs4jwAAAcc"]
[Fri Feb 27 20:12:54.468634 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:65252] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGKRoa650YPyxXVeRYeGwAAAYA"]
[Fri Feb 27 20:12:54.887307 2026] [:error] [pid 54103:tid 54184] [client 20.220.196.236:62684] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGKRuvG4MPCmE0B2sCXjAAAAM0"]
[Fri Feb 27 20:12:55.302820 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:63913] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admiin.php"] [unique_id "aaGKR8KBhrfI6KNv9RiKuQAAAAo"]
[Fri Feb 27 20:12:55.715606 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:64645] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGKR_nSUDZue59Px9v0pQAAAUw"]
[Fri Feb 27 20:12:56.136215 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:63919] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGKSIa650YPyxXVeRYeIQAAAYs"]
[Fri Feb 27 20:12:56.554142 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:64740] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGKSPnSUDZue59Px9v0qAAAAVE"]
[Fri Feb 27 20:12:56.970874 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:63411] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aaGKSIa650YPyxXVeRYeKQAAAY8"]
[Fri Feb 27 20:12:57.398531 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:63961] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGKScKBhrfI6KNv9RiKvgAAABY"]
[Fri Feb 27 20:12:57.814080 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:63378] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGKSYa650YPyxXVeRYeMAAAAYA"]
[Fri Feb 27 20:12:58.223731 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:62206] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGKSoa650YPyxXVeRYeMwAAAYw"]
[Fri Feb 27 20:12:58.655595 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:62688] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aaGKSoa650YPyxXVeRYeNgAAAYs"]
[Fri Feb 27 20:12:59.069709 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:63463] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKS4a650YPyxXVeRYeOwAAAZM"]
[Fri Feb 27 20:12:59.484782 2026] [:error] [pid 54231:tid 54258] [client 20.220.196.236:63983] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKS-Tvb5AeyJCdY7D-lgAAAFg"]
[Fri Feb 27 20:12:59.898342 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:62635] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKS8KBhrfI6KNv9RiKxQAAAAQ"]
[Fri Feb 27 20:13:00.327100 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63897] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKTMKBhrfI6KNv9RiKxwAAAAU"]
[Fri Feb 27 20:13:00.740329 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:62665] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGKTMKBhrfI6KNv9RiKzAAAAAo"]
[Fri Feb 27 20:13:01.154963 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:64685] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGKTcKBhrfI6KNv9RiKzwAAAA0"]
[Fri Feb 27 20:13:01.569619 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:63938] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGKTcKBhrfI6KNv9RiK0gAAABg"]
[Fri Feb 27 20:13:01.990059 2026] [:error] [pid 62998:tid 63020] [client 20.220.196.236:63408] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaGKTVQeueXZDUmoLokuFgAAARI"]
[Fri Feb 27 20:13:02.406542 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:64734] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGKTlQeueXZDUmoLokuGAAAAQk"]
[Fri Feb 27 20:13:02.819510 2026] [:error] [pid 62998:tid 63022] [client 20.220.196.236:63372] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGKTlQeueXZDUmoLokuGgAAARQ"]
[Fri Feb 27 20:13:03.245454 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:65266] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGKT8KBhrfI6KNv9RiK2QAAAAo"]
[Fri Feb 27 20:13:03.657405 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:64664] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/num.php"] [unique_id "aaGKT4a650YPyxXVeRYeTgAAAZI"]
[Fri Feb 27 20:13:04.077734 2026] [:error] [pid 52073:tid 52079] [client 20.220.196.236:63936] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGKUIa650YPyxXVeRYeUAAAAYM"]
[Fri Feb 27 20:13:04.505485 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:63473] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGKUIa650YPyxXVeRYeVQAAAZc"]
[Fri Feb 27 20:13:04.925929 2026] [:error] [pid 52073:tid 52088] [client 20.220.196.236:64724] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGKUIa650YPyxXVeRYeWwAAAYw"]
[Fri Feb 27 20:13:05.366836 2026] [:error] [pid 54103:tid 54186] [client 20.220.196.236:62643] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaGKUevG4MPCmE0B2sCXkAAAAM8"]
[Fri Feb 27 20:13:05.783949 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:65262] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKUcKBhrfI6KNv9RiK4QAAABQ"]
[Fri Feb 27 20:13:06.203268 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:63881] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKUsKBhrfI6KNv9RiK4wAAAA4"]
[Fri Feb 27 20:13:06.624038 2026] [:error] [pid 49306:tid 49311] [client 20.220.196.236:64728] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKUvnSUDZue59Px9v0rAAAAUM"]
[Fri Feb 27 20:13:07.040558 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:63884] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vxrl.php"] [unique_id "aaGKU8KBhrfI6KNv9RiK5gAAABY"]
[Fri Feb 27 20:13:07.459461 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:63880] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGKU4a650YPyxXVeRYeawAAAZc"]
[Fri Feb 27 20:13:07.878235 2026] [:error] [pid 49306:tid 49312] [client 20.220.196.236:64673] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGKU_nSUDZue59Px9v0rwAAAUQ"]
[Fri Feb 27 20:13:08.293497 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:63394] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGKVMKBhrfI6KNv9RiK6AAAABI"]
[Fri Feb 27 20:13:08.705774 2026] [:error] [pid 49306:tid 49320] [client 20.220.196.236:64732] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aaGKVPnSUDZue59Px9v0sQAAAUw"]
[Fri Feb 27 20:13:09.120463 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:63444] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGKVcKBhrfI6KNv9RiK7AAAAAg"]
[Fri Feb 27 20:13:09.538061 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:65189] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGKVYa650YPyxXVeRYedQAAAZE"]
[Fri Feb 27 20:13:09.970063 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:62708] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGKVfnSUDZue59Px9v0tQAAAUc"]
[Fri Feb 27 20:13:10.407087 2026] [:error] [pid 54103:tid 54178] [client 20.220.196.236:62603] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aaGKVuvG4MPCmE0B2sCXkQAAAMc"]
[Fri Feb 27 20:13:10.821004 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:63479] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGKVoa650YPyxXVeRYeggAAAYs"]
[Fri Feb 27 20:13:11.238144 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:63363] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGKV4a650YPyxXVeRYehwAAAYE"]
[Fri Feb 27 20:13:11.651671 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:63469] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGKV4a650YPyxXVeRYejAAAAZQ"]
[Fri Feb 27 20:13:12.070010 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:63886] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaGKWMKBhrfI6KNv9RiK8QAAAAY"]
[Fri Feb 27 20:13:12.480792 2026] [:error] [pid 49306:tid 49308] [client 20.220.196.236:65217] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGKWPnSUDZue59Px9v0uwAAAUA"]
[Fri Feb 27 20:13:12.892862 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:63363] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGKWOTvb5AeyJCdY7D-ngAAAEw"]
[Fri Feb 27 20:13:13.306967 2026] [:error] [pid 54102:tid 54168] [client 20.220.196.236:62711] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGKWXi74D4fiYUm_GdkwAAAAJc"]
[Fri Feb 27 20:13:13.720996 2026] [:error] [pid 54103:tid 54180] [client 20.220.196.236:62660] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aaGKWevG4MPCmE0B2sCXlQAAAMk"]
[Fri Feb 27 20:13:14.132594 2026] [:error] [pid 54101:tid 54127] [client 20.220.196.236:64666] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGKWlY5qgRktcYTGFs4kQAAAdM"]
[Fri Feb 27 20:13:14.546410 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:63932] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGKWsKBhrfI6KNv9RiK9gAAABg"]
[Fri Feb 27 20:13:14.962461 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:63962] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGKWsKBhrfI6KNv9RiK-QAAAAg"]
[Fri Feb 27 20:13:15.383333 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:63370] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/karak.php"] [unique_id "aaGKW_nSUDZue59Px9v0wwAAAUc"]
[Fri Feb 27 20:13:15.801510 2026] [:error] [pid 54231:tid 54256] [client 20.220.196.236:63931] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGKW-Tvb5AeyJCdY7D-oAAAAFY"]
[Fri Feb 27 20:13:16.232132 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:63413] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGKXPnSUDZue59Px9v0xgAAAVc"]
[Fri Feb 27 20:13:16.666816 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:63990] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGKXMKBhrfI6KNv9RiK_wAAAAY"]
[Fri Feb 27 20:13:17.083928 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:63480] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aaGKXcKBhrfI6KNv9RiLAAAAAAk"]
[Fri Feb 27 20:13:17.500471 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:64680] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGKXYa650YPyxXVeRYeoQAAAZc"]
[Fri Feb 27 20:13:17.930630 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:62595] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGKXYa650YPyxXVeRYepAAAAYg"]
[Fri Feb 27 20:13:18.349207 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:62599] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGKXsKBhrfI6KNv9RiLBwAAAAw"]
[Fri Feb 27 20:13:18.794875 2026] [:error] [pid 54103:tid 54175] [client 20.220.196.236:62632] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaGKXuvG4MPCmE0B2sCXlwAAAMQ"]
[Fri Feb 27 20:13:19.229017 2026] [:error] [pid 54103:tid 54177] [client 20.220.196.236:63974] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGKX-vG4MPCmE0B2sCXmQAAAMY"]
[Fri Feb 27 20:13:19.663836 2026] [:error] [pid 54103:tid 54189] [client 20.220.196.236:63957] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGKX-vG4MPCmE0B2sCXmgAAANI"]
[Fri Feb 27 20:13:20.076306 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:63364] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGKYMKBhrfI6KNv9RiLDwAAABI"]
[Fri Feb 27 20:13:20.489587 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:64722] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGKYMKBhrfI6KNv9RiLEwAAABQ"]
[Fri Feb 27 20:13:20.924137 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:63387] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGKYMKBhrfI6KNv9RiLFAAAAAY"]
[Fri Feb 27 20:13:21.338435 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:65181] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGKYcKBhrfI6KNv9RiLGgAAAAk"]
[Fri Feb 27 20:13:21.760678 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:62640] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGKYcKBhrfI6KNv9RiLHAAAABY"]
[Fri Feb 27 20:13:22.169884 2026] [:error] [pid 54103:tid 54195] [client 20.220.196.236:63943] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aaGKYuvG4MPCmE0B2sCXmwAAANg"]
[Fri Feb 27 20:13:22.584479 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:62168] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGKYoa650YPyxXVeRYeugAAAZY"]
[Fri Feb 27 20:13:22.994887 2026] [:error] [pid 54231:tid 54234] [client 20.220.196.236:62679] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGKYuTvb5AeyJCdY7D-pwAAAEA"]
[Fri Feb 27 20:13:23.409359 2026] [:error] [pid 54231:tid 54248] [client 20.220.196.236:63406] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGKY-Tvb5AeyJCdY7D-qgAAAE4"]
[Fri Feb 27 20:13:23.834229 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:63422] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaGKY8KBhrfI6KNv9RiLIAAAABc"]
[Fri Feb 27 20:13:24.250000 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:65210] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGKZIa650YPyxXVeRYewAAAAYE"]
[Fri Feb 27 20:13:24.658112 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:64692] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGKZPnSUDZue59Px9v0zQAAAU0"]
[Fri Feb 27 20:13:25.069153 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:62593] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGKZeTvb5AeyJCdY7D-rQAAAFU"]
[Fri Feb 27 20:13:25.504323 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:63409] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaGKZYa650YPyxXVeRYexQAAAYA"]
[Fri Feb 27 20:13:25.927130 2026] [:error] [pid 54102:tid 54162] [client 20.220.196.236:63951] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGKZXi74D4fiYUm_GdkxQAAAJI"]
[Fri Feb 27 20:13:26.339974 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:63419] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGKZvnSUDZue59Px9v00AAAAVE"]
[Fri Feb 27 20:13:26.751120 2026] [:error] [pid 54231:tid 54253] [client 20.220.196.236:63383] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGKZuTvb5AeyJCdY7D-sgAAAFM"]
[Fri Feb 27 20:13:27.161004 2026] [:error] [pid 62998:tid 63025] [client 20.220.196.236:63907] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goat.php"] [unique_id "aaGKZ1QeueXZDUmoLokuMwAAARc"]
[Fri Feb 27 20:13:27.579074 2026] [:error] [pid 54103:tid 54173] [client 20.220.196.236:63441] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGKZ-vG4MPCmE0B2sCXoAAAAMI"]
[Fri Feb 27 20:13:27.988881 2026] [:error] [pid 49306:tid 49314] [client 20.220.196.236:63907] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGKZ_nSUDZue59Px9v01QAAAUY"]
[Fri Feb 27 20:13:28.404984 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:64731] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGKaIa650YPyxXVeRYe1AAAAYE"]
[Fri Feb 27 20:13:28.817685 2026] [:error] [pid 49306:tid 49319] [client 20.220.196.236:63389] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "aaGKaPnSUDZue59Px9v01wAAAUs"]
[Fri Feb 27 20:13:29.249991 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:63964] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGKafnSUDZue59Px9v02QAAAVA"]
[Fri Feb 27 20:13:29.677515 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:63977] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aaGKacKBhrfI6KNv9RiLJAAAABU"]
[Fri Feb 27 20:13:30.111711 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:30.323482 2026] [proxy_fcgi:error] [pid 52073:tid 52094] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:30.545484 2026] [proxy_fcgi:error] [pid 52073:tid 52082] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:30.758958 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:31.182760 2026] [proxy_fcgi:error] [pid 52073:tid 52100] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:31.400658 2026] [proxy_fcgi:error] [pid 52073:tid 52089] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:31.612372 2026] [proxy_fcgi:error] [pid 52073:tid 52086] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:31.823962 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:32.038264 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:32.254813 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 20.220.196.236:63457] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:13:32.466124 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:63457] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaGKbIa650YPyxXVeRYe_QAAAZE"]
[Fri Feb 27 20:13:32.887532 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:63446] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaGKbMKBhrfI6KNv9RiLJgAAABA"]
[Fri Feb 27 20:13:33.302122 2026] [:error] [pid 54231:tid 54248] [client 20.220.196.236:63427] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaGKbeTvb5AeyJCdY7D-wAAAAE4"]
[Fri Feb 27 20:13:33.740809 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:62668] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aaGKbcKBhrfI6KNv9RiLKAAAAAQ"]
[Fri Feb 27 20:13:34.151057 2026] [:error] [pid 49306:tid 49328] [client 20.220.196.236:63995] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaGKbvnSUDZue59Px9v03gAAAVQ"]
[Fri Feb 27 20:13:34.568004 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:65241] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaGKbuTvb5AeyJCdY7D-wgAAAFc"]
[Fri Feb 27 20:13:34.989444 2026] [:error] [pid 54231:tid 54252] [client 20.220.196.236:64706] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaGKbuTvb5AeyJCdY7D-wwAAAFI"]
[Fri Feb 27 20:13:35.429972 2026] [:error] [pid 62998:tid 63009] [client 20.220.196.236:63380] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaGKb1QeueXZDUmoLokuPQAAAQc"]
[Fri Feb 27 20:13:35.855714 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:64669] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aaGKb4a650YPyxXVeRYfEQAAAZQ"]
[Fri Feb 27 20:13:36.272908 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:62713] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aaGKcMKBhrfI6KNv9RiLLgAAAAg"]
[Fri Feb 27 20:13:36.688463 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:63414] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aaGKcMKBhrfI6KNv9RiLLwAAABQ"]
[Fri Feb 27 20:13:37.100653 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:63970] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aaGKcYa650YPyxXVeRYfFwAAAYg"]
[Fri Feb 27 20:13:37.530634 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:62115] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGKccKBhrfI6KNv9RiLNgAAAAQ"]
[Fri Feb 27 20:13:37.945689 2026] [:error] [pid 54231:tid 54239] [client 20.220.196.236:63981] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGKceTvb5AeyJCdY7D-xQAAAEU"]
[Fri Feb 27 20:13:38.367233 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:63425] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGKcoa650YPyxXVeRYfGwAAAYc"]
[Fri Feb 27 20:13:38.790075 2026] [:error] [pid 49306:tid 49323] [client 20.220.196.236:63461] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaGKcvnSUDZue59Px9v06AAAAU8"]
[Fri Feb 27 20:13:39.205787 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:63407] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGKc4a650YPyxXVeRYfIAAAAYk"]
[Fri Feb 27 20:13:39.620719 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:63465] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGKc8KBhrfI6KNv9RiLOgAAABY"]
[Fri Feb 27 20:13:40.034333 2026] [:error] [pid 54103:tid 54178] [client 20.220.196.236:65216] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGKdOvG4MPCmE0B2sCXowAAAMc"]
[Fri Feb 27 20:13:40.456565 2026] [:error] [pid 54103:tid 54183] [client 20.220.196.236:63400] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaGKdOvG4MPCmE0B2sCXpAAAAMw"]
[Fri Feb 27 20:13:40.868229 2026] [:error] [pid 54103:tid 54185] [client 20.220.196.236:63376] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGKdOvG4MPCmE0B2sCXpQAAAM4"]
[Fri Feb 27 20:13:41.348229 2026] [:error] [pid 54102:tid 54161] [client 20.220.196.236:63426] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGKdXi74D4fiYUm_GdkygAAAJE"]
[Fri Feb 27 20:13:41.777115 2026] [:error] [pid 54102:tid 54158] [client 20.220.196.236:63392] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGKdXi74D4fiYUm_GdkzAAAAI4"]
[Fri Feb 27 20:13:42.189625 2026] [:error] [pid 54231:tid 54250] [client 20.220.196.236:64742] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cbrfo.php"] [unique_id "aaGKduTvb5AeyJCdY7D-xgAAAFA"]
[Fri Feb 27 20:13:42.634715 2026] [:error] [pid 54102:tid 54153] [client 20.220.196.236:63950] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGKdni74D4fiYUm_GdkzgAAAIk"]
[Fri Feb 27 20:13:43.049321 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:62667] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGKd_nSUDZue59Px9v06gAAAVc"]
[Fri Feb 27 20:13:43.458984 2026] [:error] [pid 54102:tid 54168] [client 20.220.196.236:63458] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGKd3i74D4fiYUm_Gdk0AAAAJc"]
[Fri Feb 27 20:13:43.869057 2026] [:error] [pid 54231:tid 54241] [client 20.220.196.236:63432] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaGKd-Tvb5AeyJCdY7D-yAAAAEc"]
[Fri Feb 27 20:13:44.283858 2026] [:error] [pid 54103:tid 54180] [client 20.220.196.236:63971] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGKeOvG4MPCmE0B2sCXpgAAAMk"]
[Fri Feb 27 20:13:44.699096 2026] [:error] [pid 54103:tid 54193] [client 20.220.196.236:63464] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGKeOvG4MPCmE0B2sCXqQAAANY"]
[Fri Feb 27 20:13:45.112843 2026] [:error] [pid 54103:tid 54190] [client 20.220.196.236:63484] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGKeevG4MPCmE0B2sCXqgAAANM"]
[Fri Feb 27 20:13:45.532517 2026] [:error] [pid 56075:tid 56094] [client 20.220.196.236:62098] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaGKecKBhrfI6KNv9RiLQwAAABA"]
[Fri Feb 27 20:13:45.947838 2026] [:error] [pid 62998:tid 63017] [client 20.220.196.236:63428] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGKeVQeueXZDUmoLokuPwAAAQ8"]
[Fri Feb 27 20:13:46.364680 2026] [:error] [pid 54102:tid 54163] [client 20.220.196.236:62670] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGKeni74D4fiYUm_Gdk1QAAAJM"]
[Fri Feb 27 20:13:46.782102 2026] [:error] [pid 54231:tid 54245] [client 20.220.196.236:63452] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGKeuTvb5AeyJCdY7D-zgAAAEs"]
[Fri Feb 27 20:13:47.197220 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:63362] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miansha.php"] [unique_id "aaGKe8KBhrfI6KNv9RiLRwAAABM"]
[Fri Feb 27 20:13:47.622280 2026] [:error] [pid 54102:tid 54147] [client 20.220.196.236:63481] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaGKe3i74D4fiYUm_Gdk1wAAAIM"]
[Fri Feb 27 20:13:48.039687 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:63399] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaGKfMKBhrfI6KNv9RiLSgAAABI"]
[Fri Feb 27 20:13:48.467990 2026] [:error] [pid 54103:tid 54177] [client 20.220.196.236:63928] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaGKfOvG4MPCmE0B2sCXqwAAAMY"]
[Fri Feb 27 20:13:48.878291 2026] [:error] [pid 62998:tid 63012] [client 20.220.196.236:62106] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaGKfFQeueXZDUmoLokuRQAAAQo"]
[Fri Feb 27 20:13:49.306084 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:63914] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGKffnSUDZue59Px9v08wAAAUE"]
[Fri Feb 27 20:13:49.722061 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:63438] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGKfYa650YPyxXVeRYfVAAAAYg"]
[Fri Feb 27 20:13:50.139120 2026] [:error] [pid 62998:tid 63010] [client 20.220.196.236:62674] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGKflQeueXZDUmoLokuSAAAAQg"]
[Fri Feb 27 20:13:50.562439 2026] [:error] [pid 54231:tid 54236] [client 20.220.196.236:62705] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aaGKfuTvb5AeyJCdY7D-0QAAAEI"]
[Fri Feb 27 20:13:50.989202 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:63361] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGKfvnSUDZue59Px9v1BwAAAUc"]
[Fri Feb 27 20:13:51.405344 2026] [:error] [pid 62998:tid 63006] [client 20.220.196.236:65204] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGKf1QeueXZDUmoLokuSwAAAQQ"]
[Fri Feb 27 20:13:51.816662 2026] [:error] [pid 52073:tid 52093] [client 20.220.196.236:63940] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGKf4a650YPyxXVeRYfXwAAAZE"]
[Fri Feb 27 20:13:52.246996 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:63403] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/muzu.php"] [unique_id "aaGKgIa650YPyxXVeRYfYwAAAZg"]
[Fri Feb 27 20:13:52.663380 2026] [:error] [pid 54231:tid 54247] [client 20.220.196.236:62601] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGKgOTvb5AeyJCdY7D-0gAAAE0"]
[Fri Feb 27 20:13:53.079848 2026] [:error] [pid 49306:tid 49309] [client 20.220.196.236:62605] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGKgfnSUDZue59Px9v1GgAAAUE"]
[Fri Feb 27 20:13:53.492859 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:65218] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGKgcKBhrfI6KNv9RiLTwAAAAQ"]
[Fri Feb 27 20:13:53.903800 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:62669] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/reze.php"] [unique_id "aaGKgcKBhrfI6KNv9RiLUwAAAAc"]
[Fri Feb 27 20:13:54.347526 2026] [:error] [pid 62998:tid 63021] [client 20.220.196.236:63369] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGKglQeueXZDUmoLokuUQAAARM"]
[Fri Feb 27 20:13:54.786586 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:63972] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGKgsKBhrfI6KNv9RiLXAAAAAg"]
[Fri Feb 27 20:13:55.204251 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:62146] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGKg4a650YPyxXVeRYfZwAAAYY"]
[Fri Feb 27 20:13:55.638053 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:62095] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/styll.php"] [unique_id "aaGKg8KBhrfI6KNv9RiLYgAAAAk"]
[Fri Feb 27 20:13:56.050477 2026] [:error] [pid 54102:tid 54156] [client 20.220.196.236:62180] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGKhHi74D4fiYUm_Gdk3QAAAIw"]
[Fri Feb 27 20:13:56.479550 2026] [:error] [pid 54102:tid 54155] [client 20.220.196.236:63905] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGKhHi74D4fiYUm_Gdk4gAAAIs"]
[Fri Feb 27 20:13:56.898677 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:62649] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGKhIa650YPyxXVeRYfawAAAYc"]
[Fri Feb 27 20:13:57.312598 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:63412] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaGKhfnSUDZue59Px9v1NQAAAVc"]
[Fri Feb 27 20:13:57.727814 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:63910] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGKhYa650YPyxXVeRYfcAAAAY8"]
[Fri Feb 27 20:13:58.143218 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:62673] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGKhsKBhrfI6KNv9RiLdgAAAAQ"]
[Fri Feb 27 20:13:58.563022 2026] [:error] [pid 62998:tid 63002] [client 20.220.196.236:62151] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGKhlQeueXZDUmoLokuUgAAAQE"]
[Fri Feb 27 20:13:58.976426 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:62082] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thebe.php"] [unique_id "aaGKhsKBhrfI6KNv9RiLgAAAABE"]
[Fri Feb 27 20:13:59.430696 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:61376] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGKh4a650YPyxXVeRYfeQAAAZI"]
[Fri Feb 27 20:13:59.848708 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:62648] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGKh8KBhrfI6KNv9RiLiQAAAA8"]
[Fri Feb 27 20:14:00.269222 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:63430] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGKiFQeueXZDUmoLokuVQAAARE"]
[Fri Feb 27 20:14:00.694318 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:62641] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "aaGKiFQeueXZDUmoLokuVgAAAQk"]
[Fri Feb 27 20:14:01.109756 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:62710] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGKicKBhrfI6KNv9RiLlgAAABQ"]
[Fri Feb 27 20:14:01.532989 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63477] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGKicKBhrfI6KNv9RiLmAAAAAU"]
[Fri Feb 27 20:14:01.947882 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:62687] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGKicKBhrfI6KNv9RiLmwAAAAk"]
[Fri Feb 27 20:14:02.376321 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:63451] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aaGKivnSUDZue59Px9v1QwAAAUI"]
[Fri Feb 27 20:14:02.787187 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:63908] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGKioa650YPyxXVeRYffgAAAYo"]
[Fri Feb 27 20:14:03.203343 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:62595] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGKi8KBhrfI6KNv9RiLpAAAAAE"]
[Fri Feb 27 20:14:03.628754 2026] [:error] [pid 62998:tid 63010] [client 20.220.196.236:63397] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGKi1QeueXZDUmoLokuWAAAAQg"]
[Fri Feb 27 20:14:04.041754 2026] [:error] [pid 54102:tid 54164] [client 20.220.196.236:63367] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi.php"] [unique_id "aaGKjHi74D4fiYUm_Gdk8AAAAJQ"]
[Fri Feb 27 20:14:04.467258 2026] [:error] [pid 54102:tid 54162] [client 20.220.196.236:63952] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGKjHi74D4fiYUm_Gdk8QAAAJI"]
[Fri Feb 27 20:14:04.961058 2026] [:error] [pid 49306:tid 49331] [client 20.220.196.236:62706] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGKjPnSUDZue59Px9v1RAAAAVc"]
[Fri Feb 27 20:14:05.380225 2026] [:error] [pid 56075:tid 56093] [client 20.220.196.236:62677] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGKjcKBhrfI6KNv9RiLsAAAAA8"]
[Fri Feb 27 20:14:05.815871 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:62657] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "aaGKjcKBhrfI6KNv9RiLswAAABU"]
[Fri Feb 27 20:14:06.230823 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:61377] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGKjoa650YPyxXVeRYffwAAAY4"]
[Fri Feb 27 20:14:06.649912 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:62689] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGKjsKBhrfI6KNv9RiLuAAAABE"]
[Fri Feb 27 20:14:07.061989 2026] [:error] [pid 54103:tid 54176] [client 20.220.196.236:62696] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGKj-vG4MPCmE0B2sCXxAAAAMU"]
[Fri Feb 27 20:14:07.486053 2026] [:error] [pid 54101:tid 54111] [client 20.220.196.236:63423] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGKj1Y5qgRktcYTGFs4lgAAAcM"]
[Fri Feb 27 20:14:07.902448 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:63395] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKj8KBhrfI6KNv9RiLuwAAABg"]
[Fri Feb 27 20:14:08.325861 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:62165] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKkOTvb5AeyJCdY7D-4AAAAFc"]
[Fri Feb 27 20:14:08.744047 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:63424] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKkMKBhrfI6KNv9RiLwAAAAAo"]
[Fri Feb 27 20:14:09.163505 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:62666] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKkfnSUDZue59Px9v1WwAAAVI"]
[Fri Feb 27 20:14:09.594050 2026] [:error] [pid 54101:tid 54119] [client 20.220.196.236:62629] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGKkVY5qgRktcYTGFs4mAAAAcs"]
[Fri Feb 27 20:14:10.011652 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:62671] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGKksKBhrfI6KNv9RiLwwAAAA0"]
[Fri Feb 27 20:14:10.470220 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:62169] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGKksKBhrfI6KNv9RiLxQAAABY"]
[Fri Feb 27 20:14:10.897969 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63982] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaGKksKBhrfI6KNv9RiLxwAAAAU"]
[Fri Feb 27 20:14:11.364486 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:62190] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGKk8KBhrfI6KNv9RiLzQAAAAI"]
[Fri Feb 27 20:14:11.774824 2026] [:error] [pid 54231:tid 54240] [client 20.220.196.236:63443] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGKk-Tvb5AeyJCdY7D-5wAAAEY"]
[Fri Feb 27 20:14:12.191163 2026] [:error] [pid 54231:tid 54241] [client 20.220.196.236:61341] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGKlOTvb5AeyJCdY7D-6wAAAEc"]
[Fri Feb 27 20:14:12.619497 2026] [:error] [pid 54231:tid 54239] [client 20.220.196.236:63975] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aaGKlOTvb5AeyJCdY7D-7QAAAEU"]
[Fri Feb 27 20:14:13.034430 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:62594] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKlcKBhrfI6KNv9RiL4wAAAA0"]
[Fri Feb 27 20:14:13.491371 2026] [:error] [pid 56075:tid 56095] [client 20.220.196.236:63887] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKlcKBhrfI6KNv9RiL6AAAABE"]
[Fri Feb 27 20:14:13.904723 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:62656] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKlcKBhrfI6KNv9RiL8AAAAAg"]
[Fri Feb 27 20:14:14.323435 2026] [:error] [pid 54101:tid 54122] [client 20.220.196.236:62614] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKllY5qgRktcYTGFs4mQAAAc4"]
[Fri Feb 27 20:14:14.760881 2026] [:error] [pid 56075:tid 56079] [client 20.220.196.236:63384] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKlsKBhrfI6KNv9RiL9QAAAAI"]
[Fri Feb 27 20:14:15.194962 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:62185] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKl8KBhrfI6KNv9RiL9wAAAAE"]
[Fri Feb 27 20:14:15.627800 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:62712] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKl8KBhrfI6KNv9RiL-AAAAAc"]
[Fri Feb 27 20:14:16.055615 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63876] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaGKmMKBhrfI6KNv9RiL-wAAAAU"]
[Fri Feb 27 20:14:16.472448 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:63906] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGKmMKBhrfI6KNv9RiL_QAAABU"]
[Fri Feb 27 20:14:16.888872 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:63946] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGKmMKBhrfI6KNv9RiL_wAAABM"]
[Fri Feb 27 20:14:17.311008 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:65219] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGKmfnSUDZue59Px9v1XwAAAUk"]
[Fri Feb 27 20:14:17.724329 2026] [:error] [pid 54103:tid 54184] [client 20.220.196.236:62652] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaGKmevG4MPCmE0B2sCX8QAAAM0"]
[Fri Feb 27 20:14:18.137932 2026] [:error] [pid 54103:tid 54183] [client 20.220.196.236:64693] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKmuvG4MPCmE0B2sCX9wAAAMw"]
[Fri Feb 27 20:14:18.572115 2026] [:error] [pid 54101:tid 54110] [client 20.220.196.236:62718] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKmlY5qgRktcYTGFs4nAAAAcI"]
[Fri Feb 27 20:14:18.989494 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:62204] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKmoa650YPyxXVeRYfhwAAAZQ"]
[Fri Feb 27 20:14:19.427378 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:62592] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaGKm8KBhrfI6KNv9RiMBwAAAAQ"]
[Fri Feb 27 20:14:19.875984 2026] [:error] [pid 56075:tid 56086] [client 20.220.196.236:62124] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGKm8KBhrfI6KNv9RiMCwAAAAk"]
[Fri Feb 27 20:14:20.314123 2026] [:error] [pid 56075:tid 56080] [client 20.220.196.236:65166] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGKnMKBhrfI6KNv9RiMDgAAAAM"]
[Fri Feb 27 20:14:20.734917 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:63472] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGKnPnSUDZue59Px9v1ZwAAAVE"]
[Fri Feb 27 20:14:21.150775 2026] [:error] [pid 52073:tid 52094] [client 20.220.196.236:63468] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x/"] [unique_id "aaGKnYa650YPyxXVeRYfiQAAAZI"]
[Fri Feb 27 20:14:21.560211 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:63450] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGKncKBhrfI6KNv9RiMFwAAAA4"]
[Fri Feb 27 20:14:21.999853 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:62610] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGKnVQeueXZDUmoLokuYwAAARE"]
[Fri Feb 27 20:14:22.415304 2026] [:error] [pid 56075:tid 56084] [client 20.220.196.236:65250] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGKnsKBhrfI6KNv9RiMHQAAAAc"]
[Fri Feb 27 20:14:22.827747 2026] [:error] [pid 56075:tid 56080] [client 20.220.196.236:65174] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaGKnsKBhrfI6KNv9RiMHwAAAAM"]
[Fri Feb 27 20:14:23.242451 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63888] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGKn8KBhrfI6KNv9RiMIwAAAAU"]
[Fri Feb 27 20:14:23.665812 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:62633] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGKn8KBhrfI6KNv9RiMJwAAABM"]
[Fri Feb 27 20:14:24.077641 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:62158] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGKoMKBhrfI6KNv9RiMLAAAABQ"]
[Fri Feb 27 20:14:24.492709 2026] [:error] [pid 49306:tid 49327] [client 20.220.196.236:62628] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aaGKoPnSUDZue59Px9v1cAAAAVM"]
[Fri Feb 27 20:14:24.912592 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:63917] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGKoMKBhrfI6KNv9RiMMQAAABI"]
[Fri Feb 27 20:14:25.333752 2026] [:error] [pid 52073:tid 52086] [client 20.220.196.236:63416] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGKoYa650YPyxXVeRYfiwAAAYo"]
[Fri Feb 27 20:14:25.753413 2026] [:error] [pid 62998:tid 63011] [client 20.220.196.236:65191] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGKoVQeueXZDUmoLokuZAAAAQk"]
[Fri Feb 27 20:14:26.169121 2026] [:error] [pid 49306:tid 49308] [client 20.220.196.236:63918] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGKovnSUDZue59Px9v1dwAAAUA"]
[Fri Feb 27 20:14:26.602272 2026] [:error] [pid 62998:tid 63010] [client 20.220.196.236:62616] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGKolQeueXZDUmoLokuZgAAAQg"]
[Fri Feb 27 20:14:27.021063 2026] [:error] [pid 62998:tid 63006] [client 20.220.196.236:64718] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGKo1QeueXZDUmoLokuZwAAAQQ"]
[Fri Feb 27 20:14:27.436442 2026] [:error] [pid 62998:tid 63001] [client 20.220.196.236:62612] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGKo1QeueXZDUmoLokuaQAAAQA"]
[Fri Feb 27 20:14:27.853818 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:62698] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaGKo1QeueXZDUmoLokuawAAAQw"]
[Fri Feb 27 20:14:28.277007 2026] [:error] [pid 54103:tid 54193] [client 20.220.196.236:63959] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGKpOvG4MPCmE0B2sCYEAAAANY"]
[Fri Feb 27 20:14:28.687880 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:63429] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGKpIa650YPyxXVeRYfkgAAAZg"]
[Fri Feb 27 20:14:29.115935 2026] [:error] [pid 54102:tid 54160] [client 20.220.196.236:62157] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGKpXi74D4fiYUm_Gdk9wAAAJA"]
[Fri Feb 27 20:14:29.550602 2026] [:error] [pid 56075:tid 56082] [client 20.220.196.236:63466] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGKpcKBhrfI6KNv9RiMRgAAAAU"]
[Fri Feb 27 20:14:29.982278 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:65276] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGKpYa650YPyxXVeRYflgAAAZA"]
[Fri Feb 27 20:14:30.404975 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:62619] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGKpoa650YPyxXVeRYfmAAAAYA"]
[Fri Feb 27 20:14:30.820888 2026] [:error] [pid 54231:tid 54236] [client 20.220.196.236:61423] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGKpuTvb5AeyJCdY7D-8gAAAEI"]
[Fri Feb 27 20:14:31.240053 2026] [:error] [pid 56075:tid 56097] [client 20.220.196.236:63454] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "aaGKp8KBhrfI6KNv9RiMSwAAABM"]
[Fri Feb 27 20:14:31.674770 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:61414] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "aaGKp8KBhrfI6KNv9RiMUQAAAAo"]
[Fri Feb 27 20:14:32.097666 2026] [proxy_fcgi:error] [pid 56075:tid 56094] [client 20.220.196.236:63985] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:32.307023 2026] [proxy_fcgi:error] [pid 56075:tid 56095] [client 20.220.196.236:63985] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:32.523930 2026] [proxy_fcgi:error] [pid 56075:tid 56077] [client 20.220.196.236:63985] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:33.148157 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:63985] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaGKqcKBhrfI6KNv9RiMaAAAABc"]
[Fri Feb 27 20:14:33.577008 2026] [proxy_fcgi:error] [pid 52073:tid 52086] [client 20.220.196.236:64644] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:33.786493 2026] [proxy_fcgi:error] [pid 52073:tid 52097] [client 20.220.196.236:64644] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:33.995772 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 20.220.196.236:64644] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:34.204840 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 20.220.196.236:64644] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:34.414457 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 20.220.196.236:64644] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:34.626647 2026] [proxy_fcgi:error] [pid 52073:tid 52083] [client 20.220.196.236:64644] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 20:14:34.835948 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:64644] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aaGKqoa650YPyxXVeRYfpAAAAYE"]
[Fri Feb 27 20:14:35.268589 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:64723] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aaGKq4a650YPyxXVeRYfpgAAAZY"]
[Fri Feb 27 20:14:35.685042 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:62175] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aaGKq_nSUDZue59Px9v1gAAAAVY"]
[Fri Feb 27 20:14:36.104965 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:62094] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aaGKrMKBhrfI6KNv9RiMfgAAAAo"]
[Fri Feb 27 20:14:36.543918 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:62613] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaGKrMKBhrfI6KNv9RiMggAAABI"]
[Fri Feb 27 20:14:36.993040 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:62608] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaGKrIa650YPyxXVeRYfrQAAAZU"]
[Fri Feb 27 20:14:37.440459 2026] [:error] [pid 52073:tid 52095] [client 20.220.196.236:63404] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaGKrYa650YPyxXVeRYfsAAAAZM"]
[Fri Feb 27 20:14:37.858988 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:62631] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaGKrYa650YPyxXVeRYftQAAAZc"]
[Fri Feb 27 20:14:38.279456 2026] [:error] [pid 52073:tid 52087] [client 20.220.196.236:63929] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aaGKroa650YPyxXVeRYftwAAAYs"]
[Fri Feb 27 20:14:38.715646 2026] [:error] [pid 52073:tid 52084] [client 20.220.196.236:62615] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aaGKroa650YPyxXVeRYfuwAAAYg"]
[Fri Feb 27 20:14:39.137241 2026] [:error] [pid 54101:tid 54123] [client 20.220.196.236:62686] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aaGKr1Y5qgRktcYTGFs4owAAAc8"]
[Fri Feb 27 20:14:39.566045 2026] [:error] [pid 52073:tid 52078] [client 20.220.196.236:63379] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aaGKr4a650YPyxXVeRYfwQAAAYI"]
[Fri Feb 27 20:14:39.995611 2026] [:error] [pid 54103:tid 54186] [client 20.220.196.236:64721] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aaGKr-vG4MPCmE0B2sCYGQAAAM8"]
[Fri Feb 27 20:14:40.430982 2026] [:error] [pid 62998:tid 63005] [client 20.220.196.236:62607] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aaGKsFQeueXZDUmoLokucAAAAQM"]
[Fri Feb 27 20:14:40.843416 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:62173] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aaGKsMKBhrfI6KNv9RiMlwAAAAQ"]
[Fri Feb 27 20:14:41.265736 2026] [:error] [pid 56075:tid 56096] [client 20.220.196.236:62120] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aaGKscKBhrfI6KNv9RiMmgAAABI"]
[Fri Feb 27 20:14:41.678925 2026] [:error] [pid 49306:tid 49332] [client 20.220.196.236:65261] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGKsfnSUDZue59Px9v1hgAAAVg"]
[Fri Feb 27 20:14:42.093412 2026] [:error] [pid 49306:tid 49308] [client 20.220.196.236:63373] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGKsvnSUDZue59Px9v1hwAAAUA"]
[Fri Feb 27 20:14:42.510300 2026] [:error] [pid 54231:tid 54235] [client 20.220.196.236:65173] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGKsuTvb5AeyJCdY7D-_wAAAEE"]
[Fri Feb 27 20:14:42.923756 2026] [:error] [pid 54231:tid 54245] [client 20.220.196.236:64658] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaGKsuTvb5AeyJCdY7D_AAAAAEs"]
[Fri Feb 27 20:14:43.350909 2026] [:error] [pid 52073:tid 52099] [client 20.220.196.236:64711] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGKs4a650YPyxXVeRYf2wAAAZc"]
[Fri Feb 27 20:14:43.779703 2026] [:error] [pid 52073:tid 52076] [client 20.220.196.236:63374] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGKs4a650YPyxXVeRYf3wAAAYA"]
[Fri Feb 27 20:14:44.193697 2026] [:error] [pid 49306:tid 49324] [client 20.220.196.236:62703] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGKtPnSUDZue59Px9v1igAAAVA"]
[Fri Feb 27 20:14:44.608404 2026] [:error] [pid 54101:tid 54111] [client 20.220.196.236:62622] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aaGKtFY5qgRktcYTGFs4pQAAAcM"]
[Fri Feb 27 20:14:45.021642 2026] [:error] [pid 54101:tid 54119] [client 20.220.196.236:62636] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGKtVY5qgRktcYTGFs4pgAAAcs"]
[Fri Feb 27 20:14:45.431114 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:63417] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGKtcKBhrfI6KNv9RiMqwAAAAY"]
[Fri Feb 27 20:14:45.863162 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:62128] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGKtcKBhrfI6KNv9RiMrAAAAAo"]
[Fri Feb 27 20:14:46.277637 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:63391] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaGKtsKBhrfI6KNv9RiMrQAAABc"]
[Fri Feb 27 20:14:46.700152 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:62147] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGKtlQeueXZDUmoLokucwAAARE"]
[Fri Feb 27 20:14:47.113147 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:63912] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGKt8KBhrfI6KNv9RiMrwAAAAQ"]
[Fri Feb 27 20:14:47.524124 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:63390] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGKt8KBhrfI6KNv9RiMsAAAAAE"]
[Fri Feb 27 20:14:47.940245 2026] [:error] [pid 49306:tid 49327] [client 20.220.196.236:62081] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aaGKt_nSUDZue59Px9v1jAAAAVM"]
[Fri Feb 27 20:14:48.357366 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:63474] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGKuPnSUDZue59Px9v1kAAAAU0"]
[Fri Feb 27 20:14:48.771348 2026] [:error] [pid 52073:tid 52080] [client 20.220.196.236:65172] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGKuIa650YPyxXVeRYgAAAAAYQ"]
[Fri Feb 27 20:14:49.185638 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:63882] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGKueTvb5AeyJCdY7D_AwAAAEw"]
[Fri Feb 27 20:14:49.598641 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:62179] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaGKucKBhrfI6KNv9RiMtAAAABQ"]
[Fri Feb 27 20:14:50.020834 2026] [:error] [pid 56075:tid 56090] [client 20.220.196.236:62663] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGKusKBhrfI6KNv9RiMtgAAAAw"]
[Fri Feb 27 20:14:50.443431 2026] [:error] [pid 54231:tid 54255] [client 20.220.196.236:62693] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGKuuTvb5AeyJCdY7D_BAAAAFU"]
[Fri Feb 27 20:14:50.866670 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:62658] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGKusKBhrfI6KNv9RiMuQAAAAg"]
[Fri Feb 27 20:14:51.281999 2026] [:error] [pid 52073:tid 52081] [client 20.220.196.236:61422] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/setup-config.php"] [unique_id "aaGKu4a650YPyxXVeRYgDQAAAYU"]
[Fri Feb 27 20:14:51.693713 2026] [:error] [pid 52073:tid 52096] [client 20.220.196.236:63934] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGKu4a650YPyxXVeRYgEAAAAZQ"]
[Fri Feb 27 20:14:52.116610 2026] [:error] [pid 52073:tid 52077] [client 20.220.196.236:62119] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGKvIa650YPyxXVeRYgEwAAAYE"]
[Fri Feb 27 20:14:52.532835 2026] [:error] [pid 54231:tid 54236] [client 20.220.196.236:64670] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGKvOTvb5AeyJCdY7D_BQAAAEI"]
[Fri Feb 27 20:14:52.955255 2026] [:error] [pid 49306:tid 49330] [client 20.220.196.236:62166] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGKvPnSUDZue59Px9v1kgAAAVY"]
[Fri Feb 27 20:14:53.364111 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:62153] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGKvYa650YPyxXVeRYgGQAAAZU"]
[Fri Feb 27 20:14:53.776192 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:63486] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGKvYa650YPyxXVeRYgHAAAAZA"]
[Fri Feb 27 20:14:54.187058 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:62630] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGKvsKBhrfI6KNv9RiMvQAAABc"]
[Fri Feb 27 20:14:54.599624 2026] [:error] [pid 54231:tid 54257] [client 20.220.196.236:62159] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaGKvuTvb5AeyJCdY7D_BgAAAFc"]
[Fri Feb 27 20:14:55.013856 2026] [:error] [pid 56075:tid 56081] [client 20.220.196.236:64654] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGKv8KBhrfI6KNv9RiMvgAAAAQ"]
[Fri Feb 27 20:14:55.428300 2026] [:error] [pid 56075:tid 56078] [client 20.220.196.236:62596] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGKv8KBhrfI6KNv9RiMwAAAAAE"]
[Fri Feb 27 20:14:55.841685 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:61400] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGKv8KBhrfI6KNv9RiMwgAAAA4"]
[Fri Feb 27 20:14:56.264959 2026] [:error] [pid 49306:tid 49322] [client 20.220.196.236:62624] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "aaGKwPnSUDZue59Px9v1lQAAAU4"]
[Fri Feb 27 20:14:56.681310 2026] [:error] [pid 54231:tid 54244] [client 20.220.196.236:62647] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGKwOTvb5AeyJCdY7D_CAAAAEo"]
[Fri Feb 27 20:14:57.100677 2026] [:error] [pid 54101:tid 54122] [client 20.220.196.236:65201] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGKwVY5qgRktcYTGFs4qAAAAc4"]
[Fri Feb 27 20:14:57.519033 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:62195] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGKwfnSUDZue59Px9v1mQAAAU0"]
[Fri Feb 27 20:14:57.933542 2026] [:error] [pid 54102:tid 54146] [client 20.220.196.236:64735] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaGKwXi74D4fiYUm_Gdk_QAAAII"]
[Fri Feb 27 20:14:58.399336 2026] [:error] [pid 54103:tid 54177] [client 20.220.196.236:62704] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGKwuvG4MPCmE0B2sCYKQAAAMY"]
[Fri Feb 27 20:14:58.816671 2026] [:error] [pid 54231:tid 54253] [client 20.220.196.236:62602] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGKwuTvb5AeyJCdY7D_CQAAAFM"]
[Fri Feb 27 20:14:59.228240 2026] [:error] [pid 52073:tid 52091] [client 20.220.196.236:62692] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGKw4a650YPyxXVeRYgNgAAAY8"]
[Fri Feb 27 20:14:59.640464 2026] [:error] [pid 49306:tid 49310] [client 20.220.196.236:63405] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aaGKw_nSUDZue59Px9v1nwAAAUI"]
[Fri Feb 27 20:15:00.057115 2026] [:error] [pid 56075:tid 56091] [client 20.220.196.236:65205] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGKxMKBhrfI6KNv9RiMzAAAAA0"]
[Fri Feb 27 20:15:00.469039 2026] [:error] [pid 56075:tid 56098] [client 20.220.196.236:63925] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGKxMKBhrfI6KNv9RiM0AAAABQ"]
[Fri Feb 27 20:15:00.881577 2026] [:error] [pid 56075:tid 56087] [client 20.220.196.236:62170] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGKxMKBhrfI6KNv9RiM0wAAAAo"]
[Fri Feb 27 20:15:01.298622 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:65159] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "aaGKxcKBhrfI6KNv9RiM1QAAABY"]
[Fri Feb 27 20:15:01.719461 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:62154] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGKxcKBhrfI6KNv9RiM1gAAAAY"]
[Fri Feb 27 20:15:02.129632 2026] [:error] [pid 52073:tid 52090] [client 20.220.196.236:62131] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGKxoa650YPyxXVeRYgQwAAAY4"]
[Fri Feb 27 20:15:02.543786 2026] [:error] [pid 49306:tid 49326] [client 20.220.196.236:63984] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGKxvnSUDZue59Px9v1oAAAAVI"]
[Fri Feb 27 20:15:02.962756 2026] [:error] [pid 54231:tid 54252] [client 20.220.196.236:62197] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaGKxuTvb5AeyJCdY7D_CgAAAFI"]
[Fri Feb 27 20:15:03.374644 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:65196] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGKx4a650YPyxXVeRYgSQAAAYk"]
[Fri Feb 27 20:15:03.806441 2026] [:error] [pid 62998:tid 63014] [client 20.220.196.236:62187] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGKx1QeueXZDUmoLokudwAAAQw"]
[Fri Feb 27 20:15:04.215265 2026] [:error] [pid 52073:tid 52083] [client 20.220.196.236:63478] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGKyIa650YPyxXVeRYgTgAAAYc"]
[Fri Feb 27 20:15:04.637670 2026] [:error] [pid 56075:tid 56085] [client 20.220.196.236:63892] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaGKyMKBhrfI6KNv9RiM3gAAAAg"]
[Fri Feb 27 20:15:05.059226 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:65199] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGKycKBhrfI6KNv9RiM3wAAABg"]
[Fri Feb 27 20:15:05.473243 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:64763] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGKycKBhrfI6KNv9RiM5AAAAAY"]
[Fri Feb 27 20:15:05.889840 2026] [:error] [pid 54102:tid 54160] [client 20.220.196.236:62620] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGKyXi74D4fiYUm_GdlBAAAAJA"]
[Fri Feb 27 20:15:06.316907 2026] [:error] [pid 54102:tid 54150] [client 20.220.196.236:62702] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aaGKyni74D4fiYUm_GdlBQAAAIY"]
[Fri Feb 27 20:15:06.734118 2026] [:error] [pid 52073:tid 52092] [client 20.220.196.236:62181] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGKyoa650YPyxXVeRYgVwAAAZA"]
[Fri Feb 27 20:15:07.152521 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:64707] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGKy4a650YPyxXVeRYgWgAAAZY"]
[Fri Feb 27 20:15:07.587459 2026] [:error] [pid 56075:tid 56077] [client 20.220.196.236:64720] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGKy8KBhrfI6KNv9RiM6AAAAAA"]
[Fri Feb 27 20:15:08.001783 2026] [:error] [pid 62998:tid 63016] [client 20.220.196.236:62116] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/about.php"] [unique_id "aaGKzFQeueXZDUmoLokuegAAAQ4"]
[Fri Feb 27 20:15:08.435518 2026] [:error] [pid 52073:tid 52089] [client 20.220.196.236:62685] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGKzIa650YPyxXVeRYgZAAAAY0"]
[Fri Feb 27 20:15:08.864552 2026] [:error] [pid 49306:tid 49329] [client 20.220.196.236:64688] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGKzPnSUDZue59Px9v1pAAAAVU"]
[Fri Feb 27 20:15:09.310607 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:62651] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGKzfnSUDZue59Px9v1pgAAAU0"]
[Fri Feb 27 20:15:09.736795 2026] [:error] [pid 54101:tid 54114] [client 20.220.196.236:62096] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admins.php"] [unique_id "aaGKzVY5qgRktcYTGFs4qwAAAcY"]
[Fri Feb 27 20:15:10.184448 2026] [:error] [pid 49306:tid 49315] [client 20.220.196.236:64714] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGKzvnSUDZue59Px9v1qwAAAUc"]
[Fri Feb 27 20:15:10.599527 2026] [:error] [pid 62998:tid 63018] [client 20.220.196.236:64679] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGKzlQeueXZDUmoLokufAAAARA"]
[Fri Feb 27 20:15:11.014701 2026] [:error] [pid 54231:tid 54256] [client 20.220.196.236:64662] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGKz-Tvb5AeyJCdY7D_DQAAAFY"]
[Fri Feb 27 20:15:11.439428 2026] [:error] [pid 52073:tid 52085] [client 20.220.196.236:65258] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaGKz4a650YPyxXVeRYgcAAAAYk"]
[Fri Feb 27 20:15:11.857464 2026] [:error] [pid 56075:tid 56102] [client 20.220.196.236:65188] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGKz8KBhrfI6KNv9RiM7AAAABg"]
[Fri Feb 27 20:15:12.271587 2026] [:error] [pid 54103:tid 54176] [client 20.220.196.236:64714] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGK0OvG4MPCmE0B2sCYNAAAAMU"]
[Fri Feb 27 20:15:12.702436 2026] [:error] [pid 62998:tid 63017] [client 20.220.196.236:63930] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGK0FQeueXZDUmoLokufQAAAQ8"]
[Fri Feb 27 20:15:13.125840 2026] [:error] [pid 49306:tid 49317] [client 20.220.196.236:65213] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "aaGK0fnSUDZue59Px9v1tgAAAUk"]
[Fri Feb 27 20:15:13.568422 2026] [:error] [pid 54103:tid 54185] [client 20.220.196.236:62690] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGK0evG4MPCmE0B2sCYNgAAAM4"]
[Fri Feb 27 20:15:13.981148 2026] [:error] [pid 56075:tid 56101] [client 20.220.196.236:64710] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGK0cKBhrfI6KNv9RiM7gAAABc"]
[Fri Feb 27 20:15:14.422516 2026] [:error] [pid 52073:tid 52100] [client 20.220.196.236:65251] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGK0oa650YPyxXVeRYgfgAAAZg"]
[Fri Feb 27 20:15:14.837506 2026] [:error] [pid 52073:tid 52082] [client 20.220.196.236:62139] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aaGK0oa650YPyxXVeRYggQAAAYY"]
[Fri Feb 27 20:15:15.261520 2026] [:error] [pid 52073:tid 52097] [client 20.220.196.236:62644] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGK04a650YPyxXVeRYghQAAAZU"]
[Fri Feb 27 20:15:15.696450 2026] [:error] [pid 52073:tid 52098] [client 20.220.196.236:61328] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGK04a650YPyxXVeRYghwAAAZY"]
[Fri Feb 27 20:15:16.107096 2026] [:error] [pid 56075:tid 56083] [client 20.220.196.236:62196] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGK1MKBhrfI6KNv9RiM8AAAAAY"]
[Fri Feb 27 20:15:16.547404 2026] [:error] [pid 56075:tid 56099] [client 20.220.196.236:62087] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aaGK1MKBhrfI6KNv9RiM8QAAABU"]
[Fri Feb 27 20:15:16.970071 2026] [:error] [pid 62998:tid 63025] [client 20.220.196.236:62707] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGK1FQeueXZDUmoLokugQAAARc"]
[Fri Feb 27 20:15:17.397478 2026] [:error] [pid 49306:tid 49323] [client 20.220.196.236:64719] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGK1fnSUDZue59Px9v1uAAAAU8"]
[Fri Feb 27 20:15:17.819490 2026] [:error] [pid 54102:tid 54164] [client 20.220.196.236:63375] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGK1Xi74D4fiYUm_GdlDAAAAJQ"]
[Fri Feb 27 20:15:18.257218 2026] [:error] [pid 56075:tid 56092] [client 20.220.196.236:64765] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aaGK1sKBhrfI6KNv9RiM9wAAAA4"]
[Fri Feb 27 20:15:18.679722 2026] [:error] [pid 54103:tid 54173] [client 20.220.196.236:64652] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGK1uvG4MPCmE0B2sCYOgAAAMI"]
[Fri Feb 27 20:15:19.096248 2026] [:error] [pid 54231:tid 54243] [client 20.220.196.236:65246] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGK1-Tvb5AeyJCdY7D_EwAAAEk"]
[Fri Feb 27 20:15:19.546588 2026] [:error] [pid 54101:tid 54115] [client 20.220.196.236:64640] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGK11Y5qgRktcYTGFs4rgAAAcc"]
[Fri Feb 27 20:15:19.972229 2026] [:error] [pid 54102:tid 54158] [client 20.220.196.236:64744] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aaGK13i74D4fiYUm_GdlDgAAAI4"]
[Fri Feb 27 20:15:20.407565 2026] [:error] [pid 62998:tid 63019] [client 20.220.196.236:62200] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGK2FQeueXZDUmoLokuggAAARE"]
[Fri Feb 27 20:15:20.825375 2026] [:error] [pid 49306:tid 49325] [client 20.220.196.236:64705] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aaGK2PnSUDZue59Px9v1ugAAAVE"]
[Fri Feb 27 20:15:21.259640 2026] [:error] [pid 54103:tid 54172] [client 20.220.196.236:65169] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aaGK2evG4MPCmE0B2sCYPQAAAME"]
[Fri Feb 27 20:15:21.696242 2026] [:error] [pid 54103:tid 54193] [client 20.220.196.236:64741] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jsond.php"] [unique_id "aaGK2evG4MPCmE0B2sCYPwAAANY"]
[Fri Feb 27 20:15:22.115706 2026] [:error] [pid 54101:tid 54125] [client 20.220.196.236:65197] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGK2lY5qgRktcYTGFs4rwAAAdE"]
[Fri Feb 27 20:15:22.556203 2026] [:error] [pid 54231:tid 54246] [client 20.220.196.236:61388] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGK2uTvb5AeyJCdY7D_FgAAAEw"]
[Fri Feb 27 20:15:22.988808 2026] [:error] [pid 56075:tid 56100] [client 20.220.196.236:64726] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGK2sKBhrfI6KNv9RiM_QAAABY"]
[Fri Feb 27 20:15:23.404957 2026] [:error] [pid 49306:tid 49321] [client 20.220.196.236:63381] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aaGK2_nSUDZue59Px9v1vQAAAU0"]
[Fri Feb 27 21:06:04.495684 2026] [proxy_fcgi:error] [pid 56075:tid 56084] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:04.639525 2026] [proxy_fcgi:error] [pid 56075:tid 56082] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:04.949569 2026] [proxy_fcgi:error] [pid 56075:tid 56096] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:05.094133 2026] [proxy_fcgi:error] [pid 56075:tid 56083] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:05.382980 2026] [proxy_fcgi:error] [pid 56075:tid 56080] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:05.527332 2026] [proxy_fcgi:error] [pid 56075:tid 56079] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:05.673048 2026] [proxy_fcgi:error] [pid 56075:tid 56085] [client 40.80.89.74:5518] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:06:05.961430 2026] [:error] [pid 56075:tid 56097] [client 40.80.89.74:5518] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaGWvcKBhrfI6KNv9Ri4GgAAABM"]
[Fri Feb 27 21:06:06.515910 2026] [:error] [pid 56075:tid 56093] [client 40.80.89.74:5760] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaGWvsKBhrfI6KNv9Ri4IQAAAA8"]
[Fri Feb 27 21:06:07.086764 2026] [:error] [pid 56075:tid 56085] [client 40.80.89.74:5531] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaGWv8KBhrfI6KNv9Ri4JwAAAAg"]
[Fri Feb 27 21:06:07.656012 2026] [:error] [pid 56075:tid 56091] [client 40.80.89.74:5566] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaGWv8KBhrfI6KNv9Ri4KwAAAA0"]
[Fri Feb 27 21:37:18.824729 2026] [proxy_fcgi:error] [pid 62998:tid 63023] [client 20.220.8.221:51590] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:37:19.051792 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 20.220.8.221:51590] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:37:19.472570 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:51590] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGeD1QeueXZDUmoLolgNgAAARA"]
[Fri Feb 27 21:37:20.756532 2026] [proxy_fcgi:error] [pid 49306:tid 49326] [client 20.220.8.221:51658] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:37:21.192442 2026] [proxy_fcgi:error] [pid 49306:tid 49315] [client 20.220.8.221:51658] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:37:22.041669 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:51658] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGeEvnSUDZue59Px9szqwAAAUg"]
[Fri Feb 27 21:37:22.890470 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:51651] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGeEoa650YPyxXVeRZ5bwAAAYI"]
[Fri Feb 27 21:37:23.730756 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:51635] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGeE4a650YPyxXVeRZ5fwAAAYU"]
[Fri Feb 27 21:37:24.559602 2026] [:error] [pid 54101:tid 54122] [client 20.220.8.221:51628] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGeFFY5qgRktcYTGFtO6QAAAc4"]
[Fri Feb 27 22:39:14.788742 2026] [:error] [pid 54102:tid 54151] [client 93.118.41.99:33736] [client 93.118.41.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.118.41.99, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaGskni74D4fiYUm_GeLogAAAIc"]
[Fri Feb 27 22:39:14.801910 2026] [proxy_fcgi:error] [pid 54102:tid 54151] [client 93.118.41.99:33736] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 23:14:19.957528 2026] [:error] [pid 56075:tid 56088] [client 170.106.35.153:52992] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaG0y8KBhrfI6KNv9RhetwAAAAs"]
[Sat Feb 28 00:47:45.100900 2026] [proxy_fcgi:error] [pid 38620:tid 38645] [client 52.138.25.109:16353] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:47:45.311901 2026] [proxy_fcgi:error] [pid 38620:tid 38628] [client 52.138.25.109:16353] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:47:45.519863 2026] [:error] [pid 38620:tid 38639] [client 52.138.25.109:16353] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aaHKsQP6I7SRqrhh7RrW6wAAAVE"]
[Sat Feb 28 00:47:45.931403 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16365] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aaHKsQP6I7SRqrhh7RrW9AAAAUw"]
[Sat Feb 28 00:47:46.343660 2026] [:error] [pid 15098:tid 15118] [client 52.138.25.109:16348] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aaHKsskFqny8dQQbmTkbEAAAAIw"]
[Sat Feb 28 00:47:46.756309 2026] [:error] [pid 15098:tid 15119] [client 52.138.25.109:16332] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aaHKsskFqny8dQQbmTkbEgAAAI0"]
[Sat Feb 28 00:47:47.170560 2026] [:error] [pid 15100:tid 15183] [client 52.138.25.109:16354] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ultra.php"] [unique_id "aaHKs0OEbzcINan_ctKzpwAAAFc"]
[Sat Feb 28 00:47:47.580897 2026] [:error] [pid 38620:tid 38646] [client 52.138.25.109:16323] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ultra.php"] [unique_id "aaHKswP6I7SRqrhh7RrXCgAAAVg"]
[Sat Feb 28 00:47:47.990745 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16341] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ultra.php"] [unique_id "aaHKswP6I7SRqrhh7RrXDQAAAU4"]
[Sat Feb 28 00:47:48.403898 2026] [:error] [pid 15240:tid 15251] [client 52.138.25.109:16344] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ultra.php"] [unique_id "aaHKtC1iKL_41Rk9A9NekAAAAAk"]
[Sat Feb 28 00:47:48.819691 2026] [:error] [pid 15240:tid 15264] [client 52.138.25.109:16374] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aaHKtC1iKL_41Rk9A9NekgAAABY"]
[Sat Feb 28 00:47:49.234533 2026] [:error] [pid 38586:tid 38592] [client 52.138.25.109:16335] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aaHKtb_i6nvKNhjFW7Uj2wAAAQM"]
[Sat Feb 28 00:47:49.648143 2026] [:error] [pid 38586:tid 38612] [client 52.138.25.109:16362] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aaHKtb_i6nvKNhjFW7Uj3gAAARc"]
[Sat Feb 28 00:47:50.060658 2026] [:error] [pid 38586:tid 38607] [client 52.138.25.109:16374] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aaHKtr_i6nvKNhjFW7Uj5QAAARI"]
[Sat Feb 28 00:47:50.474462 2026] [:error] [pid 38620:tid 38629] [client 52.138.25.109:16372] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaHKtgP6I7SRqrhh7RrXGgAAAUc"]
[Sat Feb 28 00:47:50.886214 2026] [:error] [pid 15099:tid 15147] [client 52.138.25.109:16260] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaHKtunvP2vtPjYDq_gqngAAAM4"]
[Sat Feb 28 00:47:51.298995 2026] [:error] [pid 15100:tid 15162] [client 52.138.25.109:16256] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaHKt0OEbzcINan_ctKzqQAAAEI"]
[Sat Feb 28 00:47:51.711298 2026] [:error] [pid 15099:tid 15145] [client 52.138.25.109:16300] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaHKt-nvP2vtPjYDq_gqogAAAMw"]
[Sat Feb 28 00:47:52.125439 2026] [:error] [pid 15240:tid 15265] [client 52.138.25.109:16327] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaHKuC1iKL_41Rk9A9NemQAAABc"]
[Sat Feb 28 00:47:52.536812 2026] [:error] [pid 15240:tid 15259] [client 52.138.25.109:16375] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaHKuC1iKL_41Rk9A9NenAAAABE"]
[Sat Feb 28 00:47:52.953005 2026] [:error] [pid 15240:tid 15242] [client 52.138.25.109:16271] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaHKuC1iKL_41Rk9A9NeoAAAAAA"]
[Sat Feb 28 00:47:53.364739 2026] [:error] [pid 15100:tid 15176] [client 52.138.25.109:16339] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/log.php"] [unique_id "aaHKuUOEbzcINan_ctKzqgAAAFA"]
[Sat Feb 28 00:47:53.775568 2026] [:error] [pid 38620:tid 38637] [client 52.138.25.109:16381] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aaHKuQP6I7SRqrhh7RrXLwAAAU8"]
[Sat Feb 28 00:47:54.188501 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16378] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aaHKugP6I7SRqrhh7RrXMgAAAU4"]
[Sat Feb 28 00:47:54.597014 2026] [:error] [pid 15099:tid 15140] [client 52.138.25.109:16355] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aaHKuunvP2vtPjYDq_gqsQAAAMc"]
[Sat Feb 28 00:47:55.008425 2026] [:error] [pid 38620:tid 38643] [client 52.138.25.109:16258] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "aaHKuwP6I7SRqrhh7RrXOQAAAVU"]
[Sat Feb 28 00:47:55.419543 2026] [:error] [pid 15098:tid 15116] [client 52.138.25.109:16262] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaHKu8kFqny8dQQbmTkbGgAAAIo"]
[Sat Feb 28 00:47:55.830614 2026] [:error] [pid 15099:tid 15155] [client 52.138.25.109:16346] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaHKu-nvP2vtPjYDq_gqtAAAANY"]
[Sat Feb 28 00:47:56.240329 2026] [:error] [pid 15099:tid 15133] [client 52.138.25.109:16275] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaHKvOnvP2vtPjYDq_gquwAAAMA"]
[Sat Feb 28 00:47:56.648707 2026] [:error] [pid 15098:tid 15121] [client 52.138.25.109:16204] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aaHKvMkFqny8dQQbmTkbIQAAAI8"]
[Sat Feb 28 00:47:57.058679 2026] [:error] [pid 15099:tid 15138] [client 52.138.25.109:16293] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/check.php"] [unique_id "aaHKvenvP2vtPjYDq_gqvwAAAMU"]
[Sat Feb 28 00:47:57.484579 2026] [:error] [pid 15100:tid 15172] [client 52.138.25.109:16326] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/check.php"] [unique_id "aaHKvUOEbzcINan_ctKzsgAAAEw"]
[Sat Feb 28 00:47:57.895377 2026] [:error] [pid 38586:tid 38593] [client 52.138.25.109:16303] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/check.php"] [unique_id "aaHKvb_i6nvKNhjFW7UkAQAAAQQ"]
[Sat Feb 28 00:47:58.308043 2026] [:error] [pid 38586:tid 38607] [client 52.138.25.109:16270] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/check.php"] [unique_id "aaHKvr_i6nvKNhjFW7UkBgAAARI"]
[Sat Feb 28 00:47:58.717991 2026] [:error] [pid 38586:tid 38602] [client 52.138.25.109:16356] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aaHKvr_i6nvKNhjFW7UkCgAAAQ0"]
[Sat Feb 28 00:47:59.127016 2026] [:error] [pid 38586:tid 38613] [client 52.138.25.109:16278] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aaHKv7_i6nvKNhjFW7UkEAAAARg"]
[Sat Feb 28 00:47:59.542123 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16294] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aaHKvwP6I7SRqrhh7RrXQAAAAU4"]
[Sat Feb 28 00:47:59.954255 2026] [:error] [pid 15099:tid 15135] [client 52.138.25.109:16259] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aaHKv-nvP2vtPjYDq_gqwgAAAMI"]
[Sat Feb 28 00:48:00.374317 2026] [:error] [pid 15100:tid 15173] [client 52.138.25.109:16295] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inject.php"] [unique_id "aaHKwEOEbzcINan_ctKztwAAAE0"]
[Sat Feb 28 00:48:00.786296 2026] [:error] [pid 38620:tid 38645] [client 52.138.25.109:16379] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inject.php"] [unique_id "aaHKwAP6I7SRqrhh7RrXRQAAAVc"]
[Sat Feb 28 00:48:01.198194 2026] [:error] [pid 38620:tid 38637] [client 52.138.25.109:16380] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inject.php"] [unique_id "aaHKwQP6I7SRqrhh7RrXSgAAAU8"]
[Sat Feb 28 00:48:01.607427 2026] [:error] [pid 38620:tid 38635] [client 52.138.25.109:16276] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inject.php"] [unique_id "aaHKwQP6I7SRqrhh7RrXTQAAAU0"]
[Sat Feb 28 00:48:02.014907 2026] [:error] [pid 38620:tid 38641] [client 52.138.25.109:16255] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aaHKwgP6I7SRqrhh7RrXTwAAAVM"]
[Sat Feb 28 00:48:02.424156 2026] [:error] [pid 38620:tid 38629] [client 52.138.25.109:16347] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aaHKwgP6I7SRqrhh7RrXUgAAAUc"]
[Sat Feb 28 00:48:02.835708 2026] [:error] [pid 38586:tid 38590] [client 52.138.25.109:16328] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aaHKwr_i6nvKNhjFW7UkFgAAAQE"]
[Sat Feb 28 00:48:03.249064 2026] [:error] [pid 38586:tid 38602] [client 52.138.25.109:16280] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aaHKw7_i6nvKNhjFW7UkGAAAAQ0"]
[Sat Feb 28 00:48:03.660292 2026] [:error] [pid 15099:tid 15136] [client 52.138.25.109:16350] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pro.php"] [unique_id "aaHKw-nvP2vtPjYDq_gqyQAAAMM"]
[Sat Feb 28 00:48:04.076498 2026] [:error] [pid 15099:tid 15133] [client 52.138.25.109:16317] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pro.php"] [unique_id "aaHKxOnvP2vtPjYDq_gqzAAAAMA"]
[Sat Feb 28 00:48:04.487758 2026] [:error] [pid 15099:tid 15156] [client 52.138.25.109:16382] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pro.php"] [unique_id "aaHKxOnvP2vtPjYDq_gqzQAAANc"]
[Sat Feb 28 00:48:04.897308 2026] [:error] [pid 38586:tid 38597] [client 52.138.25.109:16377] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pro.php"] [unique_id "aaHKxL_i6nvKNhjFW7UkHwAAAQg"]
[Sat Feb 28 00:48:05.304814 2026] [:error] [pid 15098:tid 15130] [client 52.138.25.109:16274] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaHKxckFqny8dQQbmTkbLQAAAJg"]
[Sat Feb 28 00:48:05.714238 2026] [:error] [pid 15099:tid 15150] [client 52.138.25.109:16257] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaHKxenvP2vtPjYDq_gq0AAAANE"]
[Sat Feb 28 00:48:06.127674 2026] [:error] [pid 15100:tid 15167] [client 52.138.25.109:16227] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaHKxkOEbzcINan_ctKzyAAAAEc"]
[Sat Feb 28 00:48:06.540367 2026] [:error] [pid 15100:tid 15177] [client 52.138.25.109:16342] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaHKxkOEbzcINan_ctKzzwAAAFE"]
[Sat Feb 28 00:48:06.952925 2026] [:error] [pid 38620:tid 38633] [client 52.138.25.109:16247] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aaHKxgP6I7SRqrhh7RrXWwAAAUs"]
[Sat Feb 28 00:48:07.363685 2026] [:error] [pid 15099:tid 15157] [client 52.138.25.109:16371] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aaHKx-nvP2vtPjYDq_gq1AAAANg"]
[Sat Feb 28 00:48:07.780624 2026] [:error] [pid 15098:tid 15118] [client 52.138.25.109:16363] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aaHKx8kFqny8dQQbmTkbMwAAAIw"]
[Sat Feb 28 00:48:08.190648 2026] [:error] [pid 15240:tid 15249] [client 52.138.25.109:16373] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aaHKyC1iKL_41Rk9A9NewwAAAAc"]
[Sat Feb 28 00:48:08.602102 2026] [:error] [pid 15100:tid 15160] [client 52.138.25.109:16320] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php"] [unique_id "aaHKyEOEbzcINan_ctKz2gAAAEA"]
[Sat Feb 28 00:48:09.015322 2026] [:error] [pid 15240:tid 15244] [client 52.138.25.109:16352] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php"] [unique_id "aaHKyS1iKL_41Rk9A9NexgAAAAI"]
[Sat Feb 28 00:48:09.424820 2026] [:error] [pid 38620:tid 38624] [client 52.138.25.109:16286] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php"] [unique_id "aaHKyQP6I7SRqrhh7RrXawAAAUI"]
[Sat Feb 28 00:48:09.833069 2026] [:error] [pid 15100:tid 15168] [client 52.138.25.109:16359] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php"] [unique_id "aaHKyUOEbzcINan_ctKz3QAAAEg"]
[Sat Feb 28 00:48:10.244243 2026] [:error] [pid 15100:tid 15180] [client 52.138.25.109:16224] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaHKykOEbzcINan_ctKz3gAAAFQ"]
[Sat Feb 28 00:48:10.655968 2026] [:error] [pid 38586:tid 38603] [client 52.138.25.109:16361] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaHKyr_i6nvKNhjFW7UkLAAAAQ4"]
[Sat Feb 28 00:48:11.069984 2026] [:error] [pid 15100:tid 15163] [client 52.138.25.109:16331] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaHKy0OEbzcINan_ctKz5AAAAEM"]
[Sat Feb 28 00:48:11.481468 2026] [:error] [pid 15098:tid 15127] [client 52.138.25.109:16383] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaHKy8kFqny8dQQbmTkbOgAAAJU"]
[Sat Feb 28 00:48:11.893052 2026] [:error] [pid 38586:tid 38600] [client 52.138.25.109:16197] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "aaHKy7_i6nvKNhjFW7UkOQAAAQs"]
[Sat Feb 28 00:48:12.307133 2026] [:error] [pid 15098:tid 15124] [client 52.138.25.109:16298] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "aaHKzMkFqny8dQQbmTkbOwAAAJI"]
[Sat Feb 28 00:48:12.716036 2026] [:error] [pid 15100:tid 15167] [client 52.138.25.109:16269] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "aaHKzEOEbzcINan_ctKz5wAAAEc"]
[Sat Feb 28 00:48:13.125891 2026] [:error] [pid 38586:tid 38603] [client 52.138.25.109:16321] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "aaHKzb_i6nvKNhjFW7UkQAAAAQ4"]
[Sat Feb 28 00:48:13.535920 2026] [:error] [pid 15099:tid 15136] [client 52.138.25.109:16266] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aaHKzenvP2vtPjYDq_gq3gAAAMM"]
[Sat Feb 28 00:48:13.944681 2026] [:error] [pid 15099:tid 15152] [client 52.138.25.109:16333] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aaHKzenvP2vtPjYDq_gq4QAAANM"]
[Sat Feb 28 00:48:14.358318 2026] [:error] [pid 15099:tid 15138] [client 52.138.25.109:16193] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aaHKzunvP2vtPjYDq_gq5AAAAMU"]
[Sat Feb 28 00:48:14.770721 2026] [:error] [pid 38620:tid 38627] [client 52.138.25.109:16351] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aaHKzgP6I7SRqrhh7RrXdgAAAUU"]
[Sat Feb 28 00:48:15.183902 2026] [:error] [pid 38586:tid 38590] [client 52.138.25.109:16267] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aaHKz7_i6nvKNhjFW7UkRgAAAQE"]
[Sat Feb 28 00:48:15.595521 2026] [:error] [pid 38620:tid 38624] [client 52.138.25.109:16290] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aaHKzwP6I7SRqrhh7RrXeQAAAUI"]
[Sat Feb 28 00:48:16.006840 2026] [:error] [pid 38620:tid 38630] [client 52.138.25.109:16287] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aaHK0AP6I7SRqrhh7RrXfAAAAUg"]
[Sat Feb 28 00:48:16.423182 2026] [:error] [pid 38620:tid 38643] [client 52.138.25.109:16366] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aaHK0AP6I7SRqrhh7RrXgQAAAVU"]
[Sat Feb 28 00:48:16.834323 2026] [:error] [pid 15240:tid 15260] [client 52.138.25.109:16336] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaHK0C1iKL_41Rk9A9Ne1gAAABI"]
[Sat Feb 28 00:48:17.246676 2026] [:error] [pid 15099:tid 15145] [client 52.138.25.109:16287] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaHK0envP2vtPjYDq_gq7QAAAMw"]
[Sat Feb 28 00:48:17.658487 2026] [:error] [pid 38620:tid 38639] [client 52.138.25.109:16214] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaHK0QP6I7SRqrhh7RrXiQAAAVE"]
[Sat Feb 28 00:48:18.070702 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16290] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aaHK0gP6I7SRqrhh7RrXjQAAAU4"]
[Sat Feb 28 00:48:18.482727 2026] [:error] [pid 38586:tid 38592] [client 52.138.25.109:16206] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaHK0r_i6nvKNhjFW7UkTgAAAQM"]
[Sat Feb 28 00:48:18.891514 2026] [:error] [pid 38620:tid 38633] [client 52.138.25.109:16255] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaHK0gP6I7SRqrhh7RrXkwAAAUs"]
[Sat Feb 28 00:48:19.300189 2026] [:error] [pid 38586:tid 38611] [client 52.138.25.109:16301] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaHK07_i6nvKNhjFW7UkUQAAARY"]
[Sat Feb 28 00:48:19.708012 2026] [:error] [pid 38586:tid 38598] [client 52.138.25.109:16192] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a.php"] [unique_id "aaHK07_i6nvKNhjFW7UkVAAAAQk"]
[Sat Feb 28 00:48:20.118030 2026] [:error] [pid 15240:tid 15259] [client 52.138.25.109:16358] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/debug.php"] [unique_id "aaHK1C1iKL_41Rk9A9Ne3wAAABE"]
[Sat Feb 28 00:48:20.531378 2026] [:error] [pid 15240:tid 15257] [client 52.138.25.109:16208] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/debug.php"] [unique_id "aaHK1C1iKL_41Rk9A9Ne5AAAAA8"]
[Sat Feb 28 00:48:20.942516 2026] [:error] [pid 15240:tid 15244] [client 52.138.25.109:16289] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/debug.php"] [unique_id "aaHK1C1iKL_41Rk9A9Ne6AAAAAI"]
[Sat Feb 28 00:48:21.356054 2026] [:error] [pid 15240:tid 15251] [client 52.138.25.109:16330] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/debug.php"] [unique_id "aaHK1S1iKL_41Rk9A9Ne7AAAAAk"]
[Sat Feb 28 00:48:21.767025 2026] [:error] [pid 15099:tid 15152] [client 52.138.25.109:16283] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaHK1envP2vtPjYDq_gq7gAAANM"]
[Sat Feb 28 00:48:22.176340 2026] [:error] [pid 15099:tid 15138] [client 52.138.25.109:16272] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaHK1unvP2vtPjYDq_gq8AAAAMU"]
[Sat Feb 28 00:48:22.585333 2026] [:error] [pid 38620:tid 38638] [client 52.138.25.109:16212] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaHK1gP6I7SRqrhh7RrXnwAAAVA"]
[Sat Feb 28 00:48:22.994794 2026] [:error] [pid 38620:tid 38637] [client 52.138.25.109:16314] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "aaHK1gP6I7SRqrhh7RrXqwAAAU8"]
[Sat Feb 28 00:48:23.405775 2026] [:error] [pid 38586:tid 38593] [client 52.138.25.109:16284] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaHK17_i6nvKNhjFW7UkYAAAAQQ"]
[Sat Feb 28 00:48:23.816262 2026] [:error] [pid 38620:tid 38633] [client 52.138.25.109:16376] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaHK1wP6I7SRqrhh7RrXtwAAAUs"]
[Sat Feb 28 00:48:24.229125 2026] [:error] [pid 38620:tid 38632] [client 52.138.25.109:16309] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaHK2AP6I7SRqrhh7RrXuQAAAUo"]
[Sat Feb 28 00:48:24.642617 2026] [:error] [pid 38620:tid 38640] [client 52.138.25.109:16264] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/manager.php"] [unique_id "aaHK2AP6I7SRqrhh7RrXuwAAAVI"]
[Sat Feb 28 00:48:25.058856 2026] [:error] [pid 15100:tid 15181] [client 52.138.25.109:16369] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/999.php"] [unique_id "aaHK2UOEbzcINan_ctKz9wAAAFU"]
[Sat Feb 28 00:48:25.470840 2026] [:error] [pid 38620:tid 38637] [client 52.138.25.109:16232] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/999.php"] [unique_id "aaHK2QP6I7SRqrhh7RrXvgAAAU8"]
[Sat Feb 28 00:48:25.881898 2026] [:error] [pid 15240:tid 15255] [client 52.138.25.109:16285] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/999.php"] [unique_id "aaHK2S1iKL_41Rk9A9Ne-AAAAA0"]
[Sat Feb 28 00:48:26.296934 2026] [:error] [pid 15100:tid 15179] [client 52.138.25.109:16273] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/999.php"] [unique_id "aaHK2kOEbzcINan_ctKz_AAAAFM"]
[Sat Feb 28 00:48:26.707252 2026] [:error] [pid 15240:tid 15251] [client 52.138.25.109:16316] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaHK2i1iKL_41Rk9A9Ne-gAAAAk"]
[Sat Feb 28 00:48:27.116636 2026] [:error] [pid 15240:tid 15250] [client 52.138.25.109:16221] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaHK2y1iKL_41Rk9A9Ne_AAAAAg"]
[Sat Feb 28 00:48:27.527432 2026] [:error] [pid 38620:tid 38631] [client 52.138.25.109:16337] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaHK2wP6I7SRqrhh7RrXwwAAAUk"]
[Sat Feb 28 00:48:27.938962 2026] [:error] [pid 38620:tid 38646] [client 52.138.25.109:16265] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "aaHK2wP6I7SRqrhh7RrXyAAAAVg"]
[Sat Feb 28 00:48:28.350080 2026] [:error] [pid 38620:tid 38643] [client 52.138.25.109:16203] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/data.php"] [unique_id "aaHK3AP6I7SRqrhh7RrXzwAAAVU"]
[Sat Feb 28 00:48:28.760697 2026] [:error] [pid 15098:tid 15127] [client 52.138.25.109:16222] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/data.php"] [unique_id "aaHK3MkFqny8dQQbmTkbXQAAAJU"]
[Sat Feb 28 00:48:29.169678 2026] [:error] [pid 15099:tid 15140] [client 52.138.25.109:16244] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/data.php"] [unique_id "aaHK3envP2vtPjYDq_gq-QAAAMc"]
[Sat Feb 28 00:48:29.579956 2026] [:error] [pid 15099:tid 15149] [client 52.138.25.109:16209] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/data.php"] [unique_id "aaHK3envP2vtPjYDq_gq-gAAANA"]
[Sat Feb 28 00:48:29.990190 2026] [:error] [pid 38586:tid 38603] [client 52.138.25.109:16194] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaHK3b_i6nvKNhjFW7UkbgAAAQ4"]
[Sat Feb 28 00:48:30.397582 2026] [:error] [pid 15100:tid 15181] [client 52.138.25.109:16281] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaHK3kOEbzcINan_ctK0CAAAAFU"]
[Sat Feb 28 00:48:30.818492 2026] [:error] [pid 38620:tid 38625] [client 52.138.25.109:16297] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaHK3gP6I7SRqrhh7RrX2gAAAUM"]
[Sat Feb 28 00:48:31.230947 2026] [:error] [pid 15100:tid 15164] [client 52.138.25.109:16210] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "aaHK30OEbzcINan_ctK0DwAAAEQ"]
[Sat Feb 28 00:48:31.642289 2026] [:error] [pid 15100:tid 15163] [client 52.138.25.109:16367] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aaHK30OEbzcINan_ctK0FAAAAEM"]
[Sat Feb 28 00:48:32.053791 2026] [:error] [pid 15100:tid 15160] [client 52.138.25.109:16195] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aaHK4EOEbzcINan_ctK0FwAAAEA"]
[Sat Feb 28 00:48:32.462730 2026] [:error] [pid 15099:tid 15133] [client 52.138.25.109:16151] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aaHK4OnvP2vtPjYDq_grAAAAAMA"]
[Sat Feb 28 00:48:32.875867 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16205] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aaHK4AP6I7SRqrhh7RrX2wAAAU4"]
[Sat Feb 28 00:48:33.284996 2026] [:error] [pid 38620:tid 38623] [client 52.138.25.109:16315] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaHK4QP6I7SRqrhh7RrX4AAAAUE"]
[Sat Feb 28 00:48:33.694507 2026] [:error] [pid 15240:tid 15242] [client 52.138.25.109:16219] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaHK4S1iKL_41Rk9A9Ne_wAAAAA"]
[Sat Feb 28 00:48:34.105386 2026] [:error] [pid 15100:tid 15175] [client 52.138.25.109:16322] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaHK4kOEbzcINan_ctK0GgAAAE8"]
[Sat Feb 28 00:48:34.516998 2026] [:error] [pid 15098:tid 15116] [client 52.138.25.109:16217] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aaHK4skFqny8dQQbmTkbYQAAAIo"]
[Sat Feb 28 00:48:34.927760 2026] [:error] [pid 15240:tid 15252] [client 52.138.25.109:16207] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/backup.php"] [unique_id "aaHK4i1iKL_41Rk9A9NfAgAAAAo"]
[Sat Feb 28 00:48:35.340587 2026] [:error] [pid 15240:tid 15263] [client 52.138.25.109:16340] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/backup.php"] [unique_id "aaHK4y1iKL_41Rk9A9NfBQAAABU"]
[Sat Feb 28 00:48:35.750897 2026] [:error] [pid 15100:tid 15181] [client 52.138.25.109:16248] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/backup.php"] [unique_id "aaHK40OEbzcINan_ctK0GwAAAFU"]
[Sat Feb 28 00:48:36.160551 2026] [:error] [pid 38586:tid 38606] [client 52.138.25.109:16308] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/backup.php"] [unique_id "aaHK5L_i6nvKNhjFW7UkfAAAARE"]
[Sat Feb 28 00:48:36.570620 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16304] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaHK5AP6I7SRqrhh7RrX6wAAAUw"]
[Sat Feb 28 00:48:36.981678 2026] [:error] [pid 38620:tid 38628] [client 52.138.25.109:16241] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaHK5AP6I7SRqrhh7RrX8QAAAUY"]
[Sat Feb 28 00:48:37.394345 2026] [:error] [pid 38620:tid 38644] [client 52.138.25.109:16263] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaHK5QP6I7SRqrhh7RrX9gAAAVY"]
[Sat Feb 28 00:48:37.807509 2026] [:error] [pid 38620:tid 38627] [client 52.138.25.109:16196] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaHK5QP6I7SRqrhh7RrX_gAAAUU"]
[Sat Feb 28 00:48:38.218436 2026] [:error] [pid 38620:tid 38630] [client 52.138.25.109:16291] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aaHK5gP6I7SRqrhh7RrYBwAAAUg"]
[Sat Feb 28 00:48:38.640179 2026] [:error] [pid 15099:tid 15135] [client 52.138.25.109:16324] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aaHK5unvP2vtPjYDq_grBAAAAMI"]
[Sat Feb 28 00:48:39.050196 2026] [:error] [pid 38586:tid 38603] [client 52.138.25.109:16199] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aaHK57_i6nvKNhjFW7UkfwAAAQ4"]
[Sat Feb 28 00:48:39.459056 2026] [:error] [pid 15100:tid 15173] [client 52.138.25.109:16360] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/security.php"] [unique_id "aaHK50OEbzcINan_ctK0IQAAAE0"]
[Sat Feb 28 00:48:39.869421 2026] [:error] [pid 38586:tid 38591] [client 52.138.25.109:16082] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aaHK57_i6nvKNhjFW7UkhAAAAQI"]
[Sat Feb 28 00:48:40.281845 2026] [:error] [pid 15098:tid 15127] [client 52.138.25.109:16268] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aaHK6MkFqny8dQQbmTkbbgAAAJU"]
[Sat Feb 28 00:48:40.692572 2026] [:error] [pid 15240:tid 15253] [client 52.138.25.109:16368] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aaHK6C1iKL_41Rk9A9NfDwAAAAs"]
[Sat Feb 28 00:48:41.103694 2026] [:error] [pid 38620:tid 38641] [client 52.138.25.109:16135] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "aaHK6QP6I7SRqrhh7RrYHQAAAVM"]
[Sat Feb 28 00:48:41.512141 2026] [:error] [pid 38620:tid 38629] [client 52.138.25.109:16357] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aaHK6QP6I7SRqrhh7RrYJAAAAUc"]
[Sat Feb 28 00:48:41.921815 2026] [:error] [pid 15100:tid 15170] [client 52.138.25.109:16296] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aaHK6UOEbzcINan_ctK0JQAAAEo"]
[Sat Feb 28 00:48:42.335122 2026] [:error] [pid 15240:tid 15252] [client 52.138.25.109:16254] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aaHK6i1iKL_41Rk9A9NfEwAAAAo"]
[Sat Feb 28 00:48:42.744893 2026] [:error] [pid 15100:tid 15174] [client 52.138.25.109:16312] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aaHK6kOEbzcINan_ctK0KQAAAE4"]
[Sat Feb 28 00:48:43.155142 2026] [:error] [pid 15098:tid 15117] [client 52.138.25.109:16155] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aaHK68kFqny8dQQbmTkbggAAAIs"]
[Sat Feb 28 00:48:43.567773 2026] [:error] [pid 15240:tid 15244] [client 52.138.25.109:16202] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aaHK6y1iKL_41Rk9A9NfGAAAAAI"]
[Sat Feb 28 00:48:43.981122 2026] [:error] [pid 15240:tid 15249] [client 52.138.25.109:16288] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aaHK6y1iKL_41Rk9A9NfGwAAAAc"]
[Sat Feb 28 00:48:44.393502 2026] [:error] [pid 15100:tid 15160] [client 52.138.25.109:16253] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/up.php"] [unique_id "aaHK7EOEbzcINan_ctK0KwAAAEA"]
[Sat Feb 28 00:48:44.806463 2026] [:error] [pid 38620:tid 38643] [client 52.138.25.109:16225] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "aaHK7AP6I7SRqrhh7RrYQgAAAVU"]
[Sat Feb 28 00:48:45.225790 2026] [proxy_fcgi:error] [pid 15099:tid 15140] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:45.435848 2026] [proxy_fcgi:error] [pid 15099:tid 15142] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:45.647257 2026] [proxy_fcgi:error] [pid 15099:tid 15149] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:45.857454 2026] [proxy_fcgi:error] [pid 15099:tid 15151] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:46.067312 2026] [proxy_fcgi:error] [pid 15099:tid 15152] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:46.276704 2026] [proxy_fcgi:error] [pid 15099:tid 15145] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:46.488723 2026] [proxy_fcgi:error] [pid 15099:tid 15138] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:46.698258 2026] [proxy_fcgi:error] [pid 15099:tid 15146] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:46.907610 2026] [proxy_fcgi:error] [pid 15099:tid 15150] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:47.118199 2026] [proxy_fcgi:error] [pid 15099:tid 15157] [client 52.138.25.109:16165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:48:47.323794 2026] [:error] [pid 15099:tid 15147] [client 52.138.25.109:16165] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aaHK7-nvP2vtPjYDq_grFQAAAM4"]
[Sat Feb 28 00:48:47.737791 2026] [:error] [pid 38620:tid 38633] [client 52.138.25.109:16245] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aaHK7wP6I7SRqrhh7RrYUwAAAUs"]
[Sat Feb 28 00:48:48.152738 2026] [:error] [pid 38586:tid 38595] [client 52.138.25.109:16282] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aaHK8L_i6nvKNhjFW7UkiAAAAQY"]
[Sat Feb 28 00:48:48.564848 2026] [:error] [pid 15098:tid 15118] [client 52.138.25.109:16158] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "aaHK8MkFqny8dQQbmTkbiwAAAIw"]
[Sat Feb 28 00:48:48.976526 2026] [:error] [pid 15098:tid 15106] [client 52.138.25.109:16131] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aaHK8MkFqny8dQQbmTkbjAAAAIE"]
[Sat Feb 28 00:48:49.386763 2026] [:error] [pid 38620:tid 38641] [client 52.138.25.109:16177] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aaHK8QP6I7SRqrhh7RrYXAAAAVM"]
[Sat Feb 28 00:48:49.797226 2026] [:error] [pid 38586:tid 38589] [client 52.138.25.109:16238] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aaHK8b_i6nvKNhjFW7UkjgAAAQA"]
[Sat Feb 28 00:48:50.208054 2026] [:error] [pid 15099:tid 15144] [client 52.138.25.109:16128] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aaHK8unvP2vtPjYDq_grHAAAAMs"]
[Sat Feb 28 00:48:50.619759 2026] [:error] [pid 15240:tid 15261] [client 52.138.25.109:16233] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aaHK8i1iKL_41Rk9A9NfLQAAABM"]
[Sat Feb 28 00:48:51.032029 2026] [:error] [pid 15240:tid 15245] [client 52.138.25.109:16318] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aaHK8y1iKL_41Rk9A9NfLwAAAAM"]
[Sat Feb 28 00:48:51.448501 2026] [:error] [pid 15099:tid 15157] [client 52.138.25.109:16163] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aaHK8-nvP2vtPjYDq_grJQAAANg"]
[Sat Feb 28 00:48:51.862170 2026] [:error] [pid 15099:tid 15153] [client 52.138.25.109:16307] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file7.php"] [unique_id "aaHK8-nvP2vtPjYDq_grKgAAANQ"]
[Sat Feb 28 00:48:52.270592 2026] [:error] [pid 38620:tid 38632] [client 52.138.25.109:16279] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dejavu.php"] [unique_id "aaHK9AP6I7SRqrhh7RrYXgAAAUo"]
[Sat Feb 28 00:48:52.680886 2026] [:error] [pid 15099:tid 15152] [client 52.138.25.109:16364] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dejavu.php"] [unique_id "aaHK9OnvP2vtPjYDq_grLwAAANM"]
[Sat Feb 28 00:48:53.089361 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16201] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dejavu.php"] [unique_id "aaHK9QP6I7SRqrhh7RrYYAAAAUw"]
[Sat Feb 28 00:48:53.499948 2026] [:error] [pid 15240:tid 15244] [client 52.138.25.109:16345] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dejavu.php"] [unique_id "aaHK9S1iKL_41Rk9A9NfMwAAAAI"]
[Sat Feb 28 00:48:53.912219 2026] [:error] [pid 38620:tid 38626] [client 52.138.25.109:16370] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aaHK9QP6I7SRqrhh7RrYZAAAAUQ"]
[Sat Feb 28 00:48:54.324201 2026] [:error] [pid 15098:tid 15130] [client 52.138.25.109:16215] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aaHK9skFqny8dQQbmTkbjwAAAJg"]
[Sat Feb 28 00:48:54.738895 2026] [:error] [pid 15240:tid 15266] [client 52.138.25.109:16230] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aaHK9i1iKL_41Rk9A9NfNwAAABg"]
[Sat Feb 28 00:48:55.148979 2026] [:error] [pid 15240:tid 15254] [client 52.138.25.109:16198] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CLA.php"] [unique_id "aaHK9y1iKL_41Rk9A9NfOAAAAAw"]
[Sat Feb 28 00:48:55.556937 2026] [:error] [pid 15099:tid 15135] [client 52.138.25.109:16066] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaHK9-nvP2vtPjYDq_grNgAAAMI"]
[Sat Feb 28 00:48:55.964999 2026] [:error] [pid 15100:tid 15172] [client 52.138.25.109:16310] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaHK90OEbzcINan_ctK0NQAAAEw"]
[Sat Feb 28 00:48:56.376145 2026] [:error] [pid 38620:tid 38642] [client 52.138.25.109:16141] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaHK-AP6I7SRqrhh7RrYZQAAAVQ"]
[Sat Feb 28 00:48:56.786214 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16156] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aaHK-AP6I7SRqrhh7RrYaAAAAU4"]
[Sat Feb 28 00:48:57.196407 2026] [:error] [pid 38620:tid 38637] [client 52.138.25.109:16213] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aaHK-QP6I7SRqrhh7RrYawAAAU8"]
[Sat Feb 28 00:48:57.609292 2026] [:error] [pid 15098:tid 15113] [client 52.138.25.109:16067] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aaHK-ckFqny8dQQbmTkbkgAAAIc"]
[Sat Feb 28 00:48:58.031515 2026] [:error] [pid 38586:tid 38593] [client 52.138.25.109:16145] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aaHK-r_i6nvKNhjFW7UkpwAAAQQ"]
[Sat Feb 28 00:48:58.444013 2026] [:error] [pid 38586:tid 38598] [client 52.138.25.109:16319] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "aaHK-r_i6nvKNhjFW7UkqAAAAQk"]
[Sat Feb 28 00:48:58.856315 2026] [:error] [pid 38586:tid 38591] [client 52.138.25.109:16249] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aaHK-r_i6nvKNhjFW7UkrAAAAQI"]
[Sat Feb 28 00:48:59.282759 2026] [:error] [pid 38620:tid 38633] [client 52.138.25.109:16129] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aaHK-wP6I7SRqrhh7RrYcQAAAUs"]
[Sat Feb 28 00:48:59.694889 2026] [:error] [pid 38620:tid 38645] [client 52.138.25.109:16302] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aaHK-wP6I7SRqrhh7RrYdQAAAVc"]
[Sat Feb 28 00:49:00.108625 2026] [:error] [pid 38620:tid 38630] [client 52.138.25.109:16139] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "aaHK_AP6I7SRqrhh7RrYewAAAUg"]
[Sat Feb 28 00:49:00.519899 2026] [:error] [pid 38620:tid 38622] [client 52.138.25.109:16148] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/index.php"] [unique_id "aaHK_AP6I7SRqrhh7RrYfwAAAUA"]
[Sat Feb 28 00:49:00.931291 2026] [:error] [pid 38586:tid 38589] [client 52.138.25.109:16343] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/index.php"] [unique_id "aaHK_L_i6nvKNhjFW7UkrwAAAQA"]
[Sat Feb 28 00:49:01.346806 2026] [:error] [pid 15098:tid 15115] [client 52.138.25.109:16096] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/index.php"] [unique_id "aaHK_ckFqny8dQQbmTkbmAAAAIk"]
[Sat Feb 28 00:49:01.757280 2026] [:error] [pid 15100:tid 15167] [client 52.138.25.109:16329] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7309/index.php"] [unique_id "aaHK_UOEbzcINan_ctK0PwAAAEc"]
[Sat Feb 28 00:49:02.174778 2026] [:error] [pid 15240:tid 15265] [client 52.138.25.109:16305] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aaHK_i1iKL_41Rk9A9NfSgAAABc"]
[Sat Feb 28 00:49:02.587378 2026] [:error] [pid 38586:tid 38604] [client 52.138.25.109:16162] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aaHK_r_i6nvKNhjFW7UksQAAAQ8"]
[Sat Feb 28 00:49:02.998210 2026] [:error] [pid 38620:tid 38630] [client 52.138.25.109:16218] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aaHK_gP6I7SRqrhh7RrYjAAAAUg"]
[Sat Feb 28 00:49:03.424046 2026] [:error] [pid 38620:tid 38626] [client 52.138.25.109:16313] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mah.php"] [unique_id "aaHK_wP6I7SRqrhh7RrYkAAAAUQ"]
[Sat Feb 28 00:49:03.833156 2026] [:error] [pid 15240:tid 15258] [client 52.138.25.109:16283] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaHK_y1iKL_41Rk9A9NfSwAAABA"]
[Sat Feb 28 00:49:04.288074 2026] [:error] [pid 15098:tid 15118] [client 52.138.25.109:16146] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaHLAMkFqny8dQQbmTkbnQAAAIw"]
[Sat Feb 28 00:49:04.701653 2026] [:error] [pid 38620:tid 38645] [client 52.138.25.109:16073] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaHLAAP6I7SRqrhh7RrYmwAAAVc"]
[Sat Feb 28 00:49:05.114670 2026] [:error] [pid 38620:tid 38630] [client 52.138.25.109:16242] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "aaHLAQP6I7SRqrhh7RrYoAAAAUg"]
[Sat Feb 28 00:49:05.558543 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16157] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aaHLAQP6I7SRqrhh7RrYpgAAAU4"]
[Sat Feb 28 00:49:05.997938 2026] [:error] [pid 38586:tid 38593] [client 52.138.25.109:16147] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aaHLAb_i6nvKNhjFW7UktwAAAQQ"]
[Sat Feb 28 00:49:06.438516 2026] [:error] [pid 15240:tid 15259] [client 52.138.25.109:16143] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aaHLAi1iKL_41Rk9A9NfTQAAABE"]
[Sat Feb 28 00:49:06.849897 2026] [:error] [pid 15098:tid 15106] [client 52.138.25.109:16250] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file17.php"] [unique_id "aaHLAskFqny8dQQbmTkbnwAAAIE"]
[Sat Feb 28 00:49:07.266855 2026] [:error] [pid 38586:tid 38607] [client 52.138.25.109:16168] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aaHLA7_i6nvKNhjFW7UkvQAAARI"]
[Sat Feb 28 00:49:07.677231 2026] [:error] [pid 38586:tid 38605] [client 52.138.25.109:16251] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aaHLA7_i6nvKNhjFW7UkwgAAARA"]
[Sat Feb 28 00:49:08.086855 2026] [:error] [pid 15100:tid 15161] [client 52.138.25.109:16084] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aaHLBEOEbzcINan_ctK0SgAAAEE"]
[Sat Feb 28 00:49:08.498318 2026] [:error] [pid 38620:tid 38637] [client 52.138.25.109:16211] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aaHLBAP6I7SRqrhh7RrYrgAAAU8"]
[Sat Feb 28 00:49:08.911610 2026] [:error] [pid 15240:tid 15266] [client 52.138.25.109:16234] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file8.php"] [unique_id "aaHLBC1iKL_41Rk9A9NfUgAAABg"]
[Sat Feb 28 00:49:09.320740 2026] [:error] [pid 15240:tid 15263] [client 52.138.25.109:16137] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file8.php"] [unique_id "aaHLBS1iKL_41Rk9A9NfVQAAABU"]
[Sat Feb 28 00:49:09.730644 2026] [:error] [pid 15240:tid 15264] [client 52.138.25.109:16075] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file8.php"] [unique_id "aaHLBS1iKL_41Rk9A9NfVwAAABY"]
[Sat Feb 28 00:49:10.142325 2026] [:error] [pid 15240:tid 15253] [client 52.138.25.109:16180] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file8.php"] [unique_id "aaHLBi1iKL_41Rk9A9NfWQAAAAs"]
[Sat Feb 28 00:49:10.551979 2026] [:error] [pid 15240:tid 15256] [client 52.138.25.109:16186] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaHLBi1iKL_41Rk9A9NfWgAAAA4"]
[Sat Feb 28 00:49:10.961497 2026] [:error] [pid 38586:tid 38612] [client 52.138.25.109:16152] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaHLBr_i6nvKNhjFW7UkzAAAARc"]
[Sat Feb 28 00:49:11.373923 2026] [:error] [pid 38586:tid 38597] [client 52.138.25.109:16220] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaHLB7_i6nvKNhjFW7UkzwAAAQg"]
[Sat Feb 28 00:49:11.792951 2026] [:error] [pid 15240:tid 15261] [client 52.138.25.109:16252] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaHLBy1iKL_41Rk9A9NfYQAAABM"]
[Sat Feb 28 00:49:12.202680 2026] [:error] [pid 15240:tid 15259] [client 52.138.25.109:16183] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaHLCC1iKL_41Rk9A9NfYgAAABE"]
[Sat Feb 28 00:49:12.611370 2026] [:error] [pid 38620:tid 38636] [client 52.138.25.109:16101] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaHLCAP6I7SRqrhh7RrYswAAAU4"]
[Sat Feb 28 00:49:13.020696 2026] [:error] [pid 38586:tid 38608] [client 52.138.25.109:16071] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaHLCb_i6nvKNhjFW7Uk2QAAARM"]
[Sat Feb 28 00:49:13.428686 2026] [:error] [pid 38586:tid 38609] [client 52.138.25.109:16325] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaHLCb_i6nvKNhjFW7Uk2wAAARQ"]
[Sat Feb 28 00:49:13.838236 2026] [:error] [pid 38620:tid 38639] [client 52.138.25.109:16070] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaHLCQP6I7SRqrhh7RrYuAAAAVE"]
[Sat Feb 28 00:49:14.249819 2026] [:error] [pid 38620:tid 38632] [client 52.138.25.109:16351] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaHLCgP6I7SRqrhh7RrYvgAAAUo"]
[Sat Feb 28 00:49:14.665274 2026] [:error] [pid 38586:tid 38612] [client 52.138.25.109:16125] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaHLCr_i6nvKNhjFW7Uk3gAAARc"]
[Sat Feb 28 00:49:15.086813 2026] [:error] [pid 38620:tid 38625] [client 52.138.25.109:16079] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaHLCwP6I7SRqrhh7RrYxQAAAUM"]
[Sat Feb 28 00:49:15.503633 2026] [:error] [pid 15240:tid 15251] [client 52.138.25.109:16154] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/build.php"] [unique_id "aaHLCy1iKL_41Rk9A9NfbgAAAAk"]
[Sat Feb 28 00:49:15.915806 2026] [:error] [pid 38620:tid 38622] [client 52.138.25.109:16235] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/build.php"] [unique_id "aaHLCwP6I7SRqrhh7RrYzQAAAUA"]
[Sat Feb 28 00:49:16.325475 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16068] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/build.php"] [unique_id "aaHLDAP6I7SRqrhh7RrY0gAAAUw"]
[Sat Feb 28 00:49:16.736536 2026] [:error] [pid 38620:tid 38645] [client 52.138.25.109:16305] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/build.php"] [unique_id "aaHLDAP6I7SRqrhh7RrY2AAAAVc"]
[Sat Feb 28 00:49:17.149932 2026] [:error] [pid 38586:tid 38605] [client 52.138.25.109:16164] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaHLDb_i6nvKNhjFW7Uk5QAAARA"]
[Sat Feb 28 00:49:17.565940 2026] [:error] [pid 38586:tid 38604] [client 52.138.25.109:16012] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaHLDb_i6nvKNhjFW7Uk5wAAAQ8"]
[Sat Feb 28 00:49:17.976357 2026] [:error] [pid 15100:tid 15167] [client 52.138.25.109:16306] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaHLDUOEbzcINan_ctK0TgAAAEc"]
[Sat Feb 28 00:49:18.394185 2026] [:error] [pid 15100:tid 15182] [client 52.138.25.109:16175] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lc.php"] [unique_id "aaHLDkOEbzcINan_ctK0UQAAAFY"]
[Sat Feb 28 00:49:18.805315 2026] [:error] [pid 38586:tid 38593] [client 52.138.25.109:16136] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaHLDr_i6nvKNhjFW7Uk6QAAAQQ"]
[Sat Feb 28 00:49:19.216241 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16153] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaHLDwP6I7SRqrhh7RrY4QAAAUw"]
[Sat Feb 28 00:49:19.628704 2026] [:error] [pid 38620:tid 38625] [client 52.138.25.109:16159] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaHLDwP6I7SRqrhh7RrY5QAAAUM"]
[Sat Feb 28 00:49:20.040720 2026] [:error] [pid 38586:tid 38609] [client 52.138.25.109:16105] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaHLEL_i6nvKNhjFW7Uk6gAAARQ"]
[Sat Feb 28 00:49:20.452987 2026] [:error] [pid 38586:tid 38592] [client 52.138.25.109:16240] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aaHLEL_i6nvKNhjFW7Uk7AAAAQM"]
[Sat Feb 28 00:49:20.865702 2026] [:error] [pid 38620:tid 38622] [client 52.138.25.109:16166] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aaHLEAP6I7SRqrhh7RrY7gAAAUA"]
[Sat Feb 28 00:49:21.286724 2026] [:error] [pid 38620:tid 38631] [client 52.138.25.109:16311] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aaHLEQP6I7SRqrhh7RrY8wAAAUk"]
[Sat Feb 28 00:49:21.697587 2026] [:error] [pid 15100:tid 15180] [client 52.138.25.109:16132] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "aaHLEUOEbzcINan_ctK0WAAAAFQ"]
[Sat Feb 28 00:49:22.112144 2026] [:error] [pid 15098:tid 15116] [client 52.138.25.109:16094] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gel4y.php"] [unique_id "aaHLEskFqny8dQQbmTkbrAAAAIo"]
[Sat Feb 28 00:49:22.526097 2026] [:error] [pid 38586:tid 38602] [client 52.138.25.109:16231] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gel4y.php"] [unique_id "aaHLEr_i6nvKNhjFW7Uk8wAAAQ0"]
[Sat Feb 28 00:49:22.936853 2026] [:error] [pid 38586:tid 38606] [client 52.138.25.109:16277] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gel4y.php"] [unique_id "aaHLEr_i6nvKNhjFW7Uk9gAAARE"]
[Sat Feb 28 00:49:23.360314 2026] [:error] [pid 38586:tid 38596] [client 52.138.25.109:16185] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gel4y.php"] [unique_id "aaHLE7_i6nvKNhjFW7Uk-QAAAQc"]
[Sat Feb 28 00:49:23.768531 2026] [:error] [pid 38586:tid 38593] [client 52.138.25.109:16130] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hoot.php"] [unique_id "aaHLE7_i6nvKNhjFW7Uk_gAAAQQ"]
[Sat Feb 28 00:49:24.178536 2026] [:error] [pid 38586:tid 38591] [client 52.138.25.109:16236] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hoot.php"] [unique_id "aaHLFL_i6nvKNhjFW7UlAwAAAQI"]
[Sat Feb 28 00:49:24.590023 2026] [:error] [pid 38586:tid 38602] [client 52.138.25.109:16179] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hoot.php"] [unique_id "aaHLFL_i6nvKNhjFW7UlBwAAAQ0"]
[Sat Feb 28 00:49:25.002216 2026] [:error] [pid 15240:tid 15265] [client 52.138.25.109:16144] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hoot.php"] [unique_id "aaHLFS1iKL_41Rk9A9NfgAAAABc"]
[Sat Feb 28 00:49:25.412109 2026] [:error] [pid 15240:tid 15254] [client 52.138.25.109:16089] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aaHLFS1iKL_41Rk9A9NfggAAAAw"]
[Sat Feb 28 00:49:25.821851 2026] [:error] [pid 38586:tid 38591] [client 52.138.25.109:16187] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aaHLFb_i6nvKNhjFW7UlDwAAAQI"]
[Sat Feb 28 00:49:26.228296 2026] [:error] [pid 38586:tid 38602] [client 52.138.25.109:16100] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aaHLFr_i6nvKNhjFW7UlFQAAAQ0"]
[Sat Feb 28 00:49:26.639970 2026] [:error] [pid 38586:tid 38604] [client 52.138.25.109:16085] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aaHLFr_i6nvKNhjFW7UlGwAAAQ8"]
[Sat Feb 28 00:49:27.052535 2026] [:error] [pid 15240:tid 15242] [client 52.138.25.109:16077] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aaHLFy1iKL_41Rk9A9NfiQAAAAA"]
[Sat Feb 28 00:49:27.464143 2026] [:error] [pid 38586:tid 38600] [client 52.138.25.109:16069] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aaHLF7_i6nvKNhjFW7UlIwAAAQs"]
[Sat Feb 28 00:49:27.876021 2026] [:error] [pid 15100:tid 15173] [client 52.138.25.109:16138] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aaHLF0OEbzcINan_ctK0YQAAAE0"]
[Sat Feb 28 00:49:28.286095 2026] [:error] [pid 38620:tid 38629] [client 52.138.25.109:16243] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "aaHLGAP6I7SRqrhh7RrY-gAAAUc"]
[Sat Feb 28 00:49:28.694047 2026] [:error] [pid 15099:tid 15142] [client 52.138.25.109:16000] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/golden.php"] [unique_id "aaHLGOnvP2vtPjYDq_grSQAAAMk"]
[Sat Feb 28 00:49:29.104285 2026] [:error] [pid 15100:tid 15179] [client 52.138.25.109:16161] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/golden.php"] [unique_id "aaHLGUOEbzcINan_ctK0ZQAAAFM"]
[Sat Feb 28 00:49:29.516089 2026] [:error] [pid 38586:tid 38591] [client 52.138.25.109:16091] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/golden.php"] [unique_id "aaHLGb_i6nvKNhjFW7UlKwAAAQI"]
[Sat Feb 28 00:49:29.927591 2026] [:error] [pid 38586:tid 38598] [client 52.138.25.109:16134] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/golden.php"] [unique_id "aaHLGb_i6nvKNhjFW7UlLQAAAQk"]
[Sat Feb 28 00:49:30.336929 2026] [:error] [pid 15240:tid 15251] [client 52.138.25.109:16237] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aaHLGi1iKL_41Rk9A9NfjAAAAAk"]
[Sat Feb 28 00:49:30.746870 2026] [:error] [pid 15100:tid 15180] [client 52.138.25.109:16065] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aaHLGkOEbzcINan_ctK0bAAAAFQ"]
[Sat Feb 28 00:49:31.159688 2026] [:error] [pid 38620:tid 38642] [client 52.138.25.109:16182] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aaHLGwP6I7SRqrhh7RrZAwAAAVQ"]
[Sat Feb 28 00:49:31.573758 2026] [:error] [pid 38620:tid 38645] [client 52.138.25.109:16086] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aaHLGwP6I7SRqrhh7RrZCAAAAVc"]
[Sat Feb 28 00:49:31.984492 2026] [:error] [pid 38620:tid 38622] [client 52.138.25.109:16064] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aaHLGwP6I7SRqrhh7RrZCgAAAUA"]
[Sat Feb 28 00:49:32.399647 2026] [:error] [pid 38586:tid 38598] [client 52.138.25.109:16078] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aaHLHL_i6nvKNhjFW7UlOwAAAQk"]
[Sat Feb 28 00:49:32.812932 2026] [:error] [pid 38620:tid 38630] [client 52.138.25.109:16108] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aaHLHAP6I7SRqrhh7RrZEAAAAUg"]
[Sat Feb 28 00:49:33.223768 2026] [:error] [pid 15240:tid 15256] [client 52.138.25.109:16292] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "aaHLHS1iKL_41Rk9A9NfjwAAAA4"]
[Sat Feb 28 00:49:33.632067 2026] [:error] [pid 38586:tid 38611] [client 52.138.25.109:16200] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geju.php"] [unique_id "aaHLHb_i6nvKNhjFW7UlQQAAARY"]
[Sat Feb 28 00:49:34.043033 2026] [:error] [pid 38586:tid 38589] [client 52.138.25.109:16178] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geju.php"] [unique_id "aaHLHr_i6nvKNhjFW7UlRgAAAQA"]
[Sat Feb 28 00:49:34.454675 2026] [:error] [pid 38620:tid 38625] [client 52.138.25.109:16103] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geju.php"] [unique_id "aaHLHgP6I7SRqrhh7RrZFgAAAUM"]
[Sat Feb 28 00:49:34.866422 2026] [:error] [pid 38586:tid 38612] [client 52.138.25.109:16149] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geju.php"] [unique_id "aaHLHr_i6nvKNhjFW7UlTQAAARc"]
[Sat Feb 28 00:49:35.284169 2026] [:error] [pid 15100:tid 15176] [client 52.138.25.109:16095] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index1.php"] [unique_id "aaHLH0OEbzcINan_ctK0cAAAAFA"]
[Sat Feb 28 00:49:35.700905 2026] [:error] [pid 15098:tid 15111] [client 52.138.25.109:16229] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index1.php"] [unique_id "aaHLH8kFqny8dQQbmTkbswAAAIU"]
[Sat Feb 28 00:49:36.113950 2026] [:error] [pid 38586:tid 38589] [client 52.138.25.109:16080] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index1.php"] [unique_id "aaHLIL_i6nvKNhjFW7UlUAAAAQA"]
[Sat Feb 28 00:49:36.534028 2026] [:error] [pid 38586:tid 38590] [client 52.138.25.109:16018] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index1.php"] [unique_id "aaHLIL_i6nvKNhjFW7UlVAAAAQE"]
[Sat Feb 28 00:49:36.951017 2026] [:error] [pid 38620:tid 38629] [client 52.138.25.109:16102] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aaHLIAP6I7SRqrhh7RrZHQAAAUc"]
[Sat Feb 28 00:49:37.360406 2026] [:error] [pid 15099:tid 15136] [client 52.138.25.109:16117] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aaHLIenvP2vtPjYDq_grUQAAAMM"]
[Sat Feb 28 00:49:37.768073 2026] [:error] [pid 38586:tid 38592] [client 52.138.25.109:16123] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aaHLIb_i6nvKNhjFW7UlWQAAAQM"]
[Sat Feb 28 00:49:38.175766 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16119] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aaHLIgP6I7SRqrhh7RrZJAAAAUw"]
[Sat Feb 28 00:49:38.583774 2026] [:error] [pid 38620:tid 38625] [client 52.138.25.109:16040] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aaHLIgP6I7SRqrhh7RrZKQAAAUM"]
[Sat Feb 28 00:49:38.994663 2026] [:error] [pid 38620:tid 38626] [client 52.138.25.109:16188] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aaHLIgP6I7SRqrhh7RrZLQAAAUQ"]
[Sat Feb 28 00:49:39.405047 2026] [:error] [pid 38620:tid 38622] [client 52.138.25.109:16039] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aaHLIwP6I7SRqrhh7RrZLwAAAUA"]
[Sat Feb 28 00:49:39.816402 2026] [:error] [pid 15240:tid 15243] [client 52.138.25.109:16074] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aaHLIy1iKL_41Rk9A9NfmQAAAAE"]
[Sat Feb 28 00:49:40.232155 2026] [:error] [pid 38586:tid 38607] [client 52.138.25.109:16170] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/news.php"] [unique_id "aaHLJL_i6nvKNhjFW7UlXQAAARI"]
[Sat Feb 28 00:49:40.649397 2026] [:error] [pid 38620:tid 38623] [client 52.138.25.109:16228] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/news.php"] [unique_id "aaHLJAP6I7SRqrhh7RrZMwAAAUE"]
[Sat Feb 28 00:49:41.060281 2026] [:error] [pid 38620:tid 38640] [client 52.138.25.109:16226] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/news.php"] [unique_id "aaHLJQP6I7SRqrhh7RrZNgAAAVI"]
[Sat Feb 28 00:49:41.472841 2026] [:error] [pid 38620:tid 38631] [client 52.138.25.109:16181] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/news.php"] [unique_id "aaHLJQP6I7SRqrhh7RrZNwAAAUk"]
[Sat Feb 28 00:49:41.884063 2026] [:error] [pid 38586:tid 38604] [client 52.138.25.109:16172] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aaHLJb_i6nvKNhjFW7UlYAAAAQ8"]
[Sat Feb 28 00:49:42.296016 2026] [:error] [pid 15100:tid 15181] [client 52.138.25.109:16106] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aaHLJkOEbzcINan_ctK0ewAAAFU"]
[Sat Feb 28 00:49:42.707372 2026] [:error] [pid 15100:tid 15169] [client 52.138.25.109:16004] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aaHLJkOEbzcINan_ctK0fAAAAEk"]
[Sat Feb 28 00:49:43.118405 2026] [:error] [pid 15100:tid 15168] [client 52.138.25.109:16216] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "aaHLJ0OEbzcINan_ctK0fQAAAEg"]
[Sat Feb 28 00:49:43.528801 2026] [:error] [pid 15100:tid 15163] [client 52.138.25.109:16140] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aaHLJ0OEbzcINan_ctK0fgAAAEM"]
[Sat Feb 28 00:49:43.939640 2026] [:error] [pid 38620:tid 38622] [client 52.138.25.109:16007] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aaHLJwP6I7SRqrhh7RrZPQAAAUA"]
[Sat Feb 28 00:49:44.352252 2026] [:error] [pid 38620:tid 38629] [client 52.138.25.109:16050] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aaHLKAP6I7SRqrhh7RrZPwAAAUc"]
[Sat Feb 28 00:49:44.762616 2026] [:error] [pid 38620:tid 38640] [client 52.138.25.109:16027] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aaHLKAP6I7SRqrhh7RrZQgAAAVI"]
[Sat Feb 28 00:49:45.171459 2026] [:error] [pid 38620:tid 38628] [client 52.138.25.109:16005] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aaHLKQP6I7SRqrhh7RrZRgAAAUY"]
[Sat Feb 28 00:49:45.587567 2026] [:error] [pid 38620:tid 38646] [client 52.138.25.109:16261] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aaHLKQP6I7SRqrhh7RrZTAAAAVg"]
[Sat Feb 28 00:49:45.996779 2026] [:error] [pid 38620:tid 38641] [client 52.138.25.109:16120] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aaHLKQP6I7SRqrhh7RrZTgAAAVM"]
[Sat Feb 28 00:49:46.410261 2026] [:error] [pid 38620:tid 38634] [client 52.138.25.109:16334] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mn.php"] [unique_id "aaHLKgP6I7SRqrhh7RrZUQAAAUw"]
[Sat Feb 28 00:49:46.821872 2026] [:error] [pid 38620:tid 38627] [client 52.138.25.109:16127] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "aaHLKgP6I7SRqrhh7RrZUwAAAUU"]
[Sat Feb 28 00:49:47.245343 2026] [proxy_fcgi:error] [pid 38586:tid 38591] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:47.454903 2026] [proxy_fcgi:error] [pid 38586:tid 38589] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:47.664617 2026] [proxy_fcgi:error] [pid 38586:tid 38608] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:48.299663 2026] [proxy_fcgi:error] [pid 38586:tid 38612] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:48.508849 2026] [proxy_fcgi:error] [pid 38586:tid 38610] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:48.928726 2026] [proxy_fcgi:error] [pid 38586:tid 38595] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:49.138671 2026] [proxy_fcgi:error] [pid 38586:tid 38613] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:49.347809 2026] [proxy_fcgi:error] [pid 38586:tid 38609] [client 52.138.25.109:16160] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:49:49.553699 2026] [:error] [pid 38586:tid 38601] [client 52.138.25.109:16160] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaHLLb_i6nvKNhjFW7UldwAAAQw"]
[Sat Feb 28 00:49:49.977507 2026] [:error] [pid 38620:tid 38624] [client 52.138.25.109:16042] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaHLLQP6I7SRqrhh7RrZXgAAAUI"]
[Sat Feb 28 00:49:50.387347 2026] [:error] [pid 38620:tid 38644] [client 52.138.25.109:16023] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaHLLgP6I7SRqrhh7RrZYAAAAVY"]
[Sat Feb 28 00:49:50.797622 2026] [:error] [pid 38586:tid 38597] [client 52.138.25.109:16122] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaHLLr_i6nvKNhjFW7UleQAAAQg"]
[Sat Feb 28 00:49:51.209194 2026] [:error] [pid 15100:tid 15183] [client 52.138.25.109:16090] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aaHLL0OEbzcINan_ctK0gwAAAFc"]
[Sat Feb 28 00:49:51.629267 2026] [:error] [pid 38620:tid 38645] [client 52.138.25.109:16114] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aaHLLwP6I7SRqrhh7RrZYQAAAVc"]
[Sat Feb 28 00:49:52.040744 2026] [:error] [pid 15100:tid 15173] [client 52.138.25.109:16110] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aaHLMEOEbzcINan_ctK0hQAAAE0"]
[Sat Feb 28 00:49:52.451884 2026] [:error] [pid 15099:tid 15154] [client 52.138.25.109:16246] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aaHLMOnvP2vtPjYDq_grWwAAANU"]
[Sat Feb 28 00:50:36.307426 2026] [:error] [pid 15240:tid 15243] [client 43.133.187.11:39446] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaHLXC1iKL_41Rk9A9NfygAAAAE"]
[Sat Feb 28 01:05:39.415061 2026] [proxy_fcgi:error] [pid 38620:tid 38632] [client 145.239.10.137:34825] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/detail.php
[Sat Feb 28 01:14:18.403499 2026] [proxy_fcgi:error] [pid 15240:tid 15246] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:18.613962 2026] [proxy_fcgi:error] [pid 15240:tid 15254] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:19.040584 2026] [proxy_fcgi:error] [pid 15240:tid 15256] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:19.255806 2026] [proxy_fcgi:error] [pid 15240:tid 15253] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:19.465294 2026] [proxy_fcgi:error] [pid 15240:tid 15246] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:19.676974 2026] [proxy_fcgi:error] [pid 15240:tid 15257] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:19.888112 2026] [proxy_fcgi:error] [pid 15240:tid 15264] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:20.105239 2026] [proxy_fcgi:error] [pid 15240:tid 15262] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:20.316944 2026] [proxy_fcgi:error] [pid 15240:tid 15258] [client 4.205.9.11:63381] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 01:14:20.523283 2026] [:error] [pid 15240:tid 15250] [client 4.205.9.11:63381] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHQ7C1iKL_41Rk9A9NuWAAAAAg"]
[Sat Feb 28 01:14:21.037331 2026] [:error] [pid 38620:tid 38622] [client 4.205.9.11:63366] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHQ7QP6I7SRqrhh7Rr30wAAAUA"]
[Sat Feb 28 01:14:21.504026 2026] [:error] [pid 38586:tid 38594] [client 4.205.9.11:61704] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHQ7b_i6nvKNhjFW7U5dQAAAQU"]
[Sat Feb 28 01:14:22.028483 2026] [:error] [pid 15100:tid 15160] [client 4.205.9.11:58800] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHQ7kOEbzcINan_ctK97AAAAEA"]
[Sat Feb 28 01:14:22.486985 2026] [:error] [pid 38586:tid 38604] [client 4.205.9.11:63487] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHQ7r_i6nvKNhjFW7U5fwAAAQ8"]
[Sat Feb 28 01:14:22.938434 2026] [:error] [pid 15100:tid 15175] [client 4.205.9.11:58778] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHQ7kOEbzcINan_ctK97gAAAE8"]
[Sat Feb 28 01:14:23.397524 2026] [:error] [pid 15100:tid 15173] [client 4.205.9.11:63462] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHQ70OEbzcINan_ctK97wAAAE0"]
[Sat Feb 28 01:14:23.852180 2026] [:error] [pid 38620:tid 38643] [client 4.205.9.11:58333] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHQ7wP6I7SRqrhh7Rr3-gAAAVU"]
[Sat Feb 28 01:14:24.334496 2026] [:error] [pid 38620:tid 38646] [client 4.205.9.11:63405] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHQ8AP6I7SRqrhh7Rr4AwAAAVg"]
[Sat Feb 28 01:14:24.783190 2026] [:error] [pid 15098:tid 15118] [client 4.205.9.11:58801] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHQ8MkFqny8dQQbmTkhwAAAAIw"]
[Sat Feb 28 01:14:25.288680 2026] [:error] [pid 38620:tid 38640] [client 4.205.9.11:63470] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHQ8QP6I7SRqrhh7Rr4DQAAAVI"]
[Sat Feb 28 01:14:25.710049 2026] [:error] [pid 38620:tid 38626] [client 4.205.9.11:58794] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHQ8QP6I7SRqrhh7Rr4FwAAAUQ"]
[Sat Feb 28 01:14:26.145093 2026] [:error] [pid 15099:tid 15142] [client 4.205.9.11:63485] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHQ8unvP2vtPjYDq_gyrQAAAMk"]
[Sat Feb 28 01:14:26.604323 2026] [:error] [pid 15100:tid 15180] [client 4.205.9.11:58319] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHQ8kOEbzcINan_ctK99gAAAFQ"]
[Sat Feb 28 01:14:27.032599 2026] [:error] [pid 15099:tid 15145] [client 4.205.9.11:58304] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHQ8-nvP2vtPjYDq_gysQAAAMw"]
[Sat Feb 28 01:14:27.477259 2026] [:error] [pid 15240:tid 15247] [client 4.205.9.11:61759] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHQ8y1iKL_41Rk9A9NujwAAAAU"]
[Sat Feb 28 01:14:27.904241 2026] [:error] [pid 15098:tid 15125] [client 4.205.9.11:61819] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHQ88kFqny8dQQbmTkhyAAAAJM"]
[Sat Feb 28 01:14:28.345982 2026] [:error] [pid 15099:tid 15156] [client 4.205.9.11:58325] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHQ9OnvP2vtPjYDq_gyuAAAANc"]
[Sat Feb 28 01:14:28.790879 2026] [:error] [pid 38620:tid 38630] [client 4.205.9.11:63420] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHQ9AP6I7SRqrhh7Rr4MwAAAUg"]
[Sat Feb 28 01:14:29.226485 2026] [:error] [pid 38620:tid 38632] [client 4.205.9.11:58796] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHQ9QP6I7SRqrhh7Rr4OAAAAUo"]
[Sat Feb 28 01:57:06.730656 2026] [:error] [pid 15240:tid 15250] [client 91.224.92.164:52428] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaHa8i1iKL_41Rk9A9OMpAAAAAg"]
[Sat Feb 28 01:57:08.096687 2026] [:error] [pid 38620:tid 38642] [client 91.224.92.164:54611] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaHa9AP6I7SRqrhh7RovJAAAAVQ"]
[Sat Feb 28 02:52:09.613101 2026] [:error] [pid 15240:tid 15253] [client 37.140.223.207:61317] [client 37.140.223.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.207, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaHn2S1iKL_41Rk9A9OmxgAAAAs"]
[Sat Feb 28 02:52:09.622789 2026] [proxy_fcgi:error] [pid 15240:tid 15253] [client 37.140.223.207:61317] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 02:55:22.423330 2026] [proxy_fcgi:error] [pid 38620:tid 38641] [client 20.220.8.221:52071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 02:55:22.632101 2026] [proxy_fcgi:error] [pid 38620:tid 38646] [client 20.220.8.221:52071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 02:55:23.048525 2026] [:error] [pid 38620:tid 38625] [client 20.220.8.221:52071] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaHomwP6I7SRqrhh7Rpp3gAAAUM"]
[Sat Feb 28 02:55:23.879723 2026] [:error] [pid 38620:tid 38639] [client 20.220.8.221:51649] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaHomwP6I7SRqrhh7Rpp5QAAAVE"]
[Sat Feb 28 02:55:24.709216 2026] [:error] [pid 38620:tid 38629] [client 20.220.8.221:52070] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaHonAP6I7SRqrhh7Rpp7gAAAUc"]
[Sat Feb 28 02:55:25.552834 2026] [:error] [pid 15240:tid 15259] [client 20.220.8.221:51648] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaHonS1iKL_41Rk9A9OoUAAAABE"]
[Sat Feb 28 03:25:04.460092 2026] [proxy_fcgi:error] [pid 38586:tid 38611] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:04.668657 2026] [proxy_fcgi:error] [pid 38586:tid 38610] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:05.092950 2026] [proxy_fcgi:error] [pid 38586:tid 38593] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:05.301537 2026] [proxy_fcgi:error] [pid 38586:tid 38608] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:05.519190 2026] [proxy_fcgi:error] [pid 38586:tid 38604] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:05.749924 2026] [proxy_fcgi:error] [pid 38586:tid 38612] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:05.959591 2026] [proxy_fcgi:error] [pid 38586:tid 38611] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:06.167933 2026] [proxy_fcgi:error] [pid 38586:tid 38597] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:06.375979 2026] [proxy_fcgi:error] [pid 38586:tid 38608] [client 13.71.191.191:41874] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 03:25:06.584854 2026] [:error] [pid 38586:tid 38599] [client 13.71.191.191:41874] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHvkr_i6nvKNhjFW7WlFgAAAQo"]
[Sat Feb 28 03:25:06.994617 2026] [:error] [pid 38586:tid 38612] [client 13.71.191.191:41872] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHvkr_i6nvKNhjFW7WlGwAAARc"]
[Sat Feb 28 03:25:07.421251 2026] [:error] [pid 15100:tid 15166] [client 13.71.191.191:41924] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHvk0OEbzcINan_ctLvrQAAAEY"]
[Sat Feb 28 03:25:07.838027 2026] [:error] [pid 38586:tid 38605] [client 13.71.191.191:41980] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaHvk7_i6nvKNhjFW7WlJAAAARA"]
[Sat Feb 28 03:25:08.250126 2026] [:error] [pid 38586:tid 38607] [client 13.71.191.191:41862] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHvlL_i6nvKNhjFW7WlKgAAARI"]
[Sat Feb 28 03:25:08.661603 2026] [:error] [pid 15100:tid 15171] [client 13.71.191.191:41944] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHvlEOEbzcINan_ctLvrgAAAEs"]
[Sat Feb 28 03:25:09.074810 2026] [:error] [pid 15098:tid 15130] [client 13.71.191.191:41863] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHvlckFqny8dQQbmTlBlgAAAJg"]
[Sat Feb 28 03:25:09.489212 2026] [:error] [pid 15240:tid 15261] [client 13.71.191.191:41865] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaHvlS1iKL_41Rk9A9OyHgAAABM"]
[Sat Feb 28 03:25:09.898114 2026] [:error] [pid 19669:tid 19689] [client 13.71.191.191:41861] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHvlUy98E5mX0pQrMpPOwAAAZE"]
[Sat Feb 28 03:25:10.310604 2026] [:error] [pid 19669:tid 19677] [client 13.71.191.191:41927] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHvlky98E5mX0pQrMpPPQAAAYU"]
[Sat Feb 28 03:25:10.733704 2026] [:error] [pid 38586:tid 38602] [client 13.71.191.191:41949] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHvlr_i6nvKNhjFW7WlMwAAAQ0"]
[Sat Feb 28 03:25:11.144130 2026] [:error] [pid 38586:tid 38609] [client 13.71.191.191:41977] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxxuv.php"] [unique_id "aaHvl7_i6nvKNhjFW7WlNQAAARQ"]
[Sat Feb 28 03:25:11.554669 2026] [:error] [pid 38586:tid 38606] [client 13.71.191.191:41941] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHvl7_i6nvKNhjFW7WlOAAAARE"]
[Sat Feb 28 03:25:11.969057 2026] [:error] [pid 38586:tid 38613] [client 13.71.191.191:41923] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHvl7_i6nvKNhjFW7WlOgAAARg"]
[Sat Feb 28 03:25:12.380957 2026] [:error] [pid 20709:tid 20726] [client 13.71.191.191:41873] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHvmE5CnHafo7s0kbTmcwAAAc8"]
[Sat Feb 28 03:25:12.790266 2026] [:error] [pid 15099:tid 15145] [client 13.71.191.191:41804] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aaHvmOnvP2vtPjYDq_hW0gAAAMw"]
[Sat Feb 28 03:25:13.211050 2026] [:error] [pid 38586:tid 38612] [client 13.71.191.191:41815] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHvmb_i6nvKNhjFW7WlQQAAARc"]
[Sat Feb 28 03:25:13.621777 2026] [:error] [pid 19669:tid 19684] [client 13.71.191.191:41942] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHvmUy98E5mX0pQrMpPQwAAAYw"]
[Sat Feb 28 03:25:14.031464 2026] [:error] [pid 38620:tid 38638] [client 13.71.191.191:41933] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHvmgP6I7SRqrhh7Rp2MwAAAVA"]
[Sat Feb 28 03:25:14.440737 2026] [:error] [pid 20709:tid 20714] [client 13.71.191.191:41928] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gi.php"] [unique_id "aaHvmk5CnHafo7s0kbTmeQAAAcM"]
[Sat Feb 28 05:23:46.406005 2026] [:error] [pid 11791:tid 11811] [client 193.36.225.231:48243] [client 193.36.225.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.231, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaILYmuX5e1Q32gqxH2FGwAAARI"]
[Sat Feb 28 05:23:46.417042 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 193.36.225.231:48243] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 07:23:08.624261 2026] [:error] [pid 39185:tid 39248] [client 182.42.110.255:36725] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaInXBVE-FfM89u7BQZgsAAAAII"]
[Sat Feb 28 08:26:45.421375 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:45.877400 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:46.347158 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:46.821715 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:47.287137 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:47.768682 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:48.247878 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:48.733561 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:49.222885 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:49.717536 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:50.714138 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:51.231298 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:51.719404 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:52.198133 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:52.676842 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:53.151667 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:53.622183 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:54.096986 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:26:54.576718 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.25:41341] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:01.124548 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.25:41341] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI2VaIAO5fN7BxyqcHqfAAAANA"]
[Sat Feb 28 08:27:03.427861 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.22:37473] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI2V6IAO5fN7BxyqcHqrwAAANc"]
[Sat Feb 28 08:27:05.709965 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.26:40141] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:07.105639 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.26:40141] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaI2W6IAO5fN7BxyqcHq9AAAAMw"]
[Sat Feb 28 08:27:08.985409 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 173.244.55.31:54607] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:09.463080 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.31:54607] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaI2XVtZF9Zd_U7easBhAAAAAFI"]
[Sat Feb 28 08:27:10.850702 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.31:45583] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:13.078053 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.31:45583] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI2YX6mbajs3bzQGytbfwAAAVc"]
[Sat Feb 28 08:27:14.417009 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.29:60163] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI2YmuX5e1Q32gqxH3qNgAAAQI"]
[Sat Feb 28 08:27:15.299545 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.22:48129] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI2Y1tZF9Zd_U7easBhFQAAAEE"]
[Sat Feb 28 08:27:16.215108 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.20:38205] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI2ZGuX5e1Q32gqxH3qOgAAAQM"]
[Sat Feb 28 08:27:17.118719 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.28:52835] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI2ZX6mbajs3bzQGytbvAAAAUE"]
[Sat Feb 28 08:27:18.023685 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.26:63121] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI2ZqIAO5fN7BxyqcHrtAAAAMo"]
[Sat Feb 28 08:27:19.384234 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:39307] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI2Z36mbajs3bzQGytb2AAAAUc"]
[Sat Feb 28 08:27:20.258968 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.22:36803] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:21.182349 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.22:36803] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aaI2aWuX5e1Q32gqxH3qWwAAARE"]
[Sat Feb 28 08:27:22.089465 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.20:55621] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:22.992804 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.20:55621] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI2ahVE-FfM89u7BQZ8oAAAAJc"]
[Sat Feb 28 08:27:24.316780 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.20:38869] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI2bH6mbajs3bzQGytcEgAAAUY"]
[Sat Feb 28 08:27:33.118483 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.29:44539] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:33.566281 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.29:44539] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI2dWuX5e1Q32gqxH3q3wAAAQw"]
[Sat Feb 28 08:27:34.466443 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 173.244.55.22:46557] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:35.798505 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.22:46557] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:37.186157 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.22:46557] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI2eRVE-FfM89u7BQZ9fwAAAJU"]
[Sat Feb 28 08:27:38.122474 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.29:32135] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:38.577314 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:32135] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI2emuX5e1Q32gqxH3rNAAAAQ4"]
[Sat Feb 28 08:27:39.534202 2026] [proxy_fcgi:error] [pid 11791:tid 11816] [client 173.244.55.28:40411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:40.422987 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.28:40411] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaI2fGuX5e1Q32gqxH3rXwAAAQo"]
[Sat Feb 28 08:27:41.760018 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.26:37715] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI2fRVE-FfM89u7BQZ9twAAAJc"]
[Sat Feb 28 08:27:43.143980 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.23:44279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:43.629222 2026] [proxy_fcgi:error] [pid 39185:tid 39253] [client 173.244.55.23:44279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:44.549501 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.23:44279] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI2gBVE-FfM89u7BQZ91gAAAJg"]
[Sat Feb 28 08:27:45.945229 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.26:33903] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI2gaIAO5fN7BxyqcHtpwAAANM"]
[Sat Feb 28 08:27:47.337189 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.30:61633] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI2g36mbajs3bzQGytc_gAAAUM"]
[Sat Feb 28 08:27:49.196626 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.22:30937] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI2haIAO5fN7BxyqcHt0AAAAMU"]
[Sat Feb 28 08:27:50.173999 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.30:53789] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI2hhVE-FfM89u7BQZ-AQAAAI8"]
[Sat Feb 28 08:27:52.763774 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.30:55793] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:53.268561 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.30:55793] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI2iaIAO5fN7BxyqcHuFgAAANM"]
[Sat Feb 28 08:27:54.183993 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.22:59671] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaI2in6mbajs3bzQGytdUwAAAVQ"]
[Sat Feb 28 08:27:55.113084 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.20:57189] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI2i6IAO5fN7BxyqcHuLgAAAMI"]
[Sat Feb 28 08:27:56.992693 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 173.244.55.21:52879] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:57.929265 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.21:52879] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:27:59.308872 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.21:52879] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/bypass.php"] [unique_id "aaI2j36mbajs3bzQGytdrwAAAVE"]
[Sat Feb 28 08:28:00.244499 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.21:45549] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/bypass.php"] [unique_id "aaI2kBVE-FfM89u7BQZ-YwAAAJE"]
[Sat Feb 28 08:28:01.578258 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.29:49641] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aaI2kRCf4HvhVePw3LaLHAAAABA"]
[Sat Feb 28 08:28:03.795491 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.22:39111] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI2k36mbajs3bzQGytd4QAAAU8"]
[Sat Feb 28 08:28:04.244444 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.22:39111] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:06.470486 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.22:39111] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:06.925982 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.22:39111] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "aaI2ln6mbajs3bzQGyteAwAAAUI"]
[Sat Feb 28 08:28:07.832100 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.28:43227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:10.111731 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.28:43227] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI2mn6mbajs3bzQGyteKQAAAU8"]
[Sat Feb 28 08:28:11.489442 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.21:30627] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:11.924405 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.21:30627] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI2m6IAO5fN7BxyqcHvVAAAAM4"]
[Sat Feb 28 08:28:12.837487 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.21:30627] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aaI2nKIAO5fN7BxyqcHvZgAAAMY"]
[Sat Feb 28 08:28:15.607151 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.28:28397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:16.566809 2026] [proxy_fcgi:error] [pid 22194:tid 22196] [client 173.244.55.28:28397] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:17.028096 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.28:28397] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaI2oX6mbajs3bzQGyteggAAAVQ"]
[Sat Feb 28 08:28:18.417829 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.22:39961] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI2oltZF9Zd_U7easBibQAAAEk"]
[Sat Feb 28 08:28:19.294892 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.20:26631] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:20.206719 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.20:26631] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aaI2pH6mbajs3bzQGytepwAAAVg"]
[Sat Feb 28 08:28:21.553702 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.22:30149] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:22.471457 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.22:30149] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:23.364036 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.22:30149] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:23.807461 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.22:30149] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI2p6IAO5fN7BxyqcHwMgAAAM8"]
[Sat Feb 28 08:28:24.691459 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 173.244.55.21:55755] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:25.147448 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 173.244.55.21:55755] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:25.602776 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.21:55755] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI2qVtZF9Zd_U7easBipwAAAEk"]
[Sat Feb 28 08:28:26.965943 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.26:31977] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:27.852532 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.26:31977] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI2q6IAO5fN7BxyqcHwiQAAAMc"]
[Sat Feb 28 08:28:28.295596 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:31977] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI2rKIAO5fN7BxyqcHwkQAAAM8"]
[Sat Feb 28 08:28:33.706749 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 173.244.55.30:60623] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:35.525234 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 173.244.55.30:60623] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:36.425474 2026] [proxy_fcgi:error] [pid 39183:tid 39212] [client 173.244.55.30:60623] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:36.866483 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.30:60623] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI2tBCf4HvhVePw3LaLpAAAAA0"]
[Sat Feb 28 08:28:37.760483 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 173.244.55.22:54639] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:39.096706 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.22:54639] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI2t1tZF9Zd_U7easBjBgAAAE8"]
[Sat Feb 28 08:28:39.550061 2026] [proxy_fcgi:error] [pid 39184:tid 39230] [client 173.244.55.22:54639] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:40.001504 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 173.244.55.22:54639] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:40.479453 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 173.244.55.22:54639] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:40.957407 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.22:54639] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI2uFtZF9Zd_U7easBjGgAAAFU"]
[Sat Feb 28 08:28:41.834185 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 173.244.55.29:56887] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:42.276991 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.29:56887] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aaI2ultZF9Zd_U7easBjKQAAAE0"]
[Sat Feb 28 08:28:43.641460 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 173.244.55.28:37051] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:44.080909 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.28:37051] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI2vGuX5e1Q32gqxH3uAAAAARA"]
[Sat Feb 28 08:28:44.969309 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.25:54387] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aaI2vBVE-FfM89u7BQZ_1AAAAIE"]
[Sat Feb 28 08:28:46.781239 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 173.244.55.26:28891] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:47.217255 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.26:28891] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI2v1tZF9Zd_U7easBjVwAAAFA"]
[Sat Feb 28 08:28:48.099228 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.22:55181] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI2wGuX5e1Q32gqxH3uJQAAARc"]
[Sat Feb 28 08:28:49.004457 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.23:47847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:49.480748 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.23:47847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:50.834376 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.23:47847] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/colors_95.php"] [unique_id "aaI2whVE-FfM89u7BQaAFQAAAIU"]
[Sat Feb 28 08:28:52.153969 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.26:55343] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI2xKIAO5fN7BxyqcHx9wAAAMs"]
[Sat Feb 28 08:28:53.522806 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.25:53145] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI2xaIAO5fN7BxyqcHyGAAAANE"]
[Sat Feb 28 08:28:54.411478 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.20:58177] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:55.743176 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:58177] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aaI2x2uX5e1Q32gqxH3uaQAAARc"]
[Sat Feb 28 08:28:57.635728 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.31:64103] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webdb.php"] [unique_id "aaI2yX6mbajs3bzQGytgvwAAAVc"]
[Sat Feb 28 08:28:58.522652 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.22:61775] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:59.429015 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.22:61775] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:28:59.879302 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.22:61775] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI2y36mbajs3bzQGytg2AAAAU8"]
[Sat Feb 28 08:29:00.755016 2026] [proxy_fcgi:error] [pid 39184:tid 39225] [client 173.244.55.20:40339] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:01.634565 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.20:40339] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aaI2zVtZF9Zd_U7easBjnAAAAFM"]
[Sat Feb 28 08:29:02.509092 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.28:47701] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/wp-conflg.php"] [unique_id "aaI2zqIAO5fN7BxyqcHyzgAAAMg"]
[Sat Feb 28 08:29:03.495593 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.30:60921] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:03.943406 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.30:60921] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aaI2z36mbajs3bzQGythAgAAAVQ"]
[Sat Feb 28 08:29:05.746232 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.23:34189] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI20aIAO5fN7BxyqcHzDwAAAM8"]
[Sat Feb 28 08:29:07.099944 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.29:62795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:08.003227 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.29:62795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:08.446876 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 173.244.55.29:62795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:09.338649 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.29:62795] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:09.780170 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.29:62795] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI21aIAO5fN7BxyqcHzZAAAANM"]
[Sat Feb 28 08:29:10.718572 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.28:53969] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI21qIAO5fN7BxyqcHzfQAAANY"]
[Sat Feb 28 08:29:11.612203 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.22:45957] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI212uX5e1Q32gqxH3vBgAAARU"]
[Sat Feb 28 08:29:12.511534 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.25:47343] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI22GuX5e1Q32gqxH3vHgAAAQc"]
[Sat Feb 28 08:29:13.506054 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.26:32661] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:13.946663 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.26:32661] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI22aIAO5fN7BxyqcHzvwAAANQ"]
[Sat Feb 28 08:29:14.900255 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.30:51545] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI22qIAO5fN7BxyqcHz4AAAANM"]
[Sat Feb 28 08:29:15.791446 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.29:52777] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:16.693275 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:52777] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaI23GuX5e1Q32gqxH3vTwAAARM"]
[Sat Feb 28 08:29:17.585074 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.28:20835] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI23WuX5e1Q32gqxH3vWQAAAQk"]
[Sat Feb 28 08:29:18.492050 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.26:55781] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI23qIAO5fN7BxyqcH0NQAAANE"]
[Sat Feb 28 08:29:20.243947 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.20:24353] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI24KIAO5fN7BxyqcH0cAAAANA"]
[Sat Feb 28 08:29:21.570618 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.31:48353] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI24aIAO5fN7BxyqcH0owAAAMo"]
[Sat Feb 28 08:29:23.386958 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.28:58019] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI241tZF9Zd_U7easBkIgAAAFM"]
[Sat Feb 28 08:29:24.293797 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.23:62525] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:25.627455 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.23:62525] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webadmin.php"] [unique_id "aaI25WuX5e1Q32gqxH3vngAAAQ0"]
[Sat Feb 28 08:29:26.529336 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.23:34775] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webadmin.php"] [unique_id "aaI25n6mbajs3bzQGytiBQAAAUY"]
[Sat Feb 28 08:29:27.415895 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.30:40953] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webadmin.php"] [unique_id "aaI252uX5e1Q32gqxH3vxgAAAQ0"]
[Sat Feb 28 08:29:28.289213 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.26:29893] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webadmin.php"] [unique_id "aaI26KIAO5fN7BxyqcH1DgAAAM0"]
[Sat Feb 28 08:29:29.168275 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.25:27617] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:29.611802 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.25:27617] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI26WuX5e1Q32gqxH3v6gAAAQw"]
[Sat Feb 28 08:29:32.354129 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.20:23759] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "aaI27KIAO5fN7BxyqcH1XAAAAMU"]
[Sat Feb 28 08:29:33.707511 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.30:35161] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:34.159438 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.30:35161] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:35.092724 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.30:35161] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez3/bypass.php"] [unique_id "aaI2736mbajs3bzQGytihQAAAVg"]
[Sat Feb 28 08:29:35.974785 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.28:26055] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez3/bypass.php"] [unique_id "aaI271tZF9Zd_U7easBkZgAAAFQ"]
[Sat Feb 28 08:29:37.783374 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 173.244.55.31:43785] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:38.224494 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.31:43785] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI28ltZF9Zd_U7easBkdwAAAFg"]
[Sat Feb 28 08:29:39.119188 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 173.244.55.28:34473] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:40.510898 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.28:34473] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI29FtZF9Zd_U7easBkkAAAAEw"]
[Sat Feb 28 08:29:41.402761 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:49931] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI29aIAO5fN7BxyqcH2EwAAANM"]
[Sat Feb 28 08:29:45.472456 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.31:63547] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "aaI2-X6mbajs3bzQGytjBQAAAVA"]
[Sat Feb 28 08:29:47.261136 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.28:51955] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI2-2uX5e1Q32gqxH3w6AAAAQg"]
[Sat Feb 28 08:29:49.041319 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.31:27793] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:49.494176 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.31:27793] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:49.938531 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 173.244.55.31:27793] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:50.384752 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.31:27793] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:29:52.656548 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.31:27793] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI3ABVE-FfM89u7BQaBlgAAAIk"]
[Sat Feb 28 08:29:53.544269 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.26:44923] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI3AaIAO5fN7BxyqcH2uAAAANY"]
[Sat Feb 28 08:29:55.434892 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.22:41285] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI3A36mbajs3bzQGytjmgAAAU4"]
[Sat Feb 28 08:29:56.316593 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.29:40247] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI3BKIAO5fN7BxyqcH21AAAAMY"]
[Sat Feb 28 08:29:57.205873 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.21:28819] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI3BRVE-FfM89u7BQaBxQAAAJI"]
[Sat Feb 28 08:29:58.083924 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.30:41437] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI3BltZF9Zd_U7easBlFgAAAFY"]
[Sat Feb 28 08:29:59.427403 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.28:33733] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI3B6IAO5fN7BxyqcH29gAAAMw"]
[Sat Feb 28 08:30:00.329495 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.20:62163] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI3CH6mbajs3bzQGytj4wAAAUA"]
[Sat Feb 28 08:30:01.211170 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.28:44769] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI3CVtZF9Zd_U7easBlMQAAAFc"]
[Sat Feb 28 08:30:02.099100 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.25:51163] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI3CqIAO5fN7BxyqcH3EgAAAMM"]
[Sat Feb 28 08:30:03.882531 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:40077] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI3C6IAO5fN7BxyqcH3MQAAAMQ"]
[Sat Feb 28 08:30:05.214612 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.25:31507] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI3DRVE-FfM89u7BQaCDgAAAI0"]
[Sat Feb 28 08:30:06.108298 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.28:35581] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:07.008534 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.28:35581] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI3D6IAO5fN7BxyqcH3awAAAMI"]
[Sat Feb 28 08:30:07.901808 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.28:32703] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog/wp-admin/about.php"] [unique_id "aaI3D6IAO5fN7BxyqcH3eAAAAMI"]
[Sat Feb 28 08:30:09.727286 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.29:35077] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaI3ERVE-FfM89u7BQaCJwAAAIU"]
[Sat Feb 28 08:30:10.615467 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.22:40481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:11.508429 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.22:40481] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:11.949540 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.22:40481] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI3E6IAO5fN7BxyqcH3xwAAAMU"]
[Sat Feb 28 08:30:13.272357 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.23:46525] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:13.713000 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.23:46525] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:14.165113 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.23:46525] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:14.600217 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.23:46525] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI3FmuX5e1Q32gqxH3yBgAAARU"]
[Sat Feb 28 08:30:15.494488 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.20:42403] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:15.933467 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.20:42403] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI3F6IAO5fN7BxyqcH4KwAAAMM"]
[Sat Feb 28 08:30:17.248580 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.26:55503] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/1.php"] [unique_id "aaI3GVtZF9Zd_U7easBlngAAAFQ"]
[Sat Feb 28 08:30:18.592468 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:19.041912 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:19.484754 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:20.368798 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:21.759501 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:22.210442 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:22.658456 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:23.106460 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.20:44069] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:23.549596 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.20:44069] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/about.php"] [unique_id "aaI3H6IAO5fN7BxyqcH4zgAAANA"]
[Sat Feb 28 08:30:25.342598 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.21:32157] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:25.788709 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.21:32157] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI3IRVE-FfM89u7BQaCeQAAAIg"]
[Sat Feb 28 08:30:26.672488 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.31:60401] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI3IhVE-FfM89u7BQaCgAAAAIM"]
[Sat Feb 28 08:30:27.555714 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.20:25227] [client 173.244.55.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.20, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaI3I36mbajs3bzQGytlogAAAUg"]
[Sat Feb 28 08:30:27.564453 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 173.244.55.20:25227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:28.020605 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.20:25227] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "aaI3JH6mbajs3bzQGytlqwAAAUA"]
[Sat Feb 28 08:30:28.898121 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 173.244.55.26:46813] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:29.334082 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.26:46813] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI3JVtZF9Zd_U7easBl1gAAAE4"]
[Sat Feb 28 08:30:30.674471 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 173.244.55.22:59029] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:31.121164 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.22:59029] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI3J36mbajs3bzQGytl6QAAAVI"]
[Sat Feb 28 08:30:31.998720 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.22:27407] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI3JxVE-FfM89u7BQaCtwAAAJg"]
[Sat Feb 28 08:30:33.806362 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.26:57453] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aaI3KX6mbajs3bzQGytmDAAAAUA"]
[Sat Feb 28 08:30:34.678423 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.20:33979] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aaI3KmuX5e1Q32gqxH3zNwAAAQI"]
[Sat Feb 28 08:30:35.566833 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.29:63523] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aaI3K6IAO5fN7BxyqcH5jQAAAMA"]
[Sat Feb 28 08:30:36.437315 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.20:21187] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aaI3LBCf4HvhVePw3LaOagAAAAs"]
[Sat Feb 28 08:30:37.779829 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.23:27429] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file.php"] [unique_id "aaI3LaIAO5fN7BxyqcH5pwAAAMA"]
[Sat Feb 28 08:30:39.090630 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.25:22985] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI3L6IAO5fN7BxyqcH5ugAAAMA"]
[Sat Feb 28 08:30:40.857301 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.21:38791] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aaI3MBCf4HvhVePw3LaOgwAAAA8"]
[Sat Feb 28 08:30:42.645297 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.25:32291] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/about.php"] [unique_id "aaI3MhCf4HvhVePw3LaOnAAAAAo"]
[Sat Feb 28 08:30:43.985332 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 173.244.55.30:37287] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:44.884748 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.30:37287] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI3NBVE-FfM89u7BQaDLQAAAIM"]
[Sat Feb 28 08:30:46.671606 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.21:58143] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:47.562910 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.21:58143] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "aaI3N36mbajs3bzQGytm8QAAAUs"]
[Sat Feb 28 08:30:48.438109 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.22:43343] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaI3OH6mbajs3bzQGytnBQAAAVE"]
[Sat Feb 28 08:30:49.812869 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.31:32679] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content.php"] [unique_id "aaI3OX6mbajs3bzQGytnMgAAAU4"]
[Sat Feb 28 08:30:50.712441 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.30:33049] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:51.156924 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.30:33049] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI3O2uX5e1Q32gqxH3z4QAAARI"]
[Sat Feb 28 08:30:52.037669 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.31:27873] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI3PKIAO5fN7BxyqcH6agAAANM"]
[Sat Feb 28 08:30:53.791611 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.21:43295] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:54.251877 2026] [proxy_fcgi:error] [pid 22194:tid 22198] [client 173.244.55.21:43295] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:55.142446 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.21:43295] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:56.049873 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.21:43295] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI3QH6mbajs3bzQGytntQAAAUo"]
[Sat Feb 28 08:30:56.939615 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.31:26225] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI3QKIAO5fN7BxyqcH6pgAAANE"]
[Sat Feb 28 08:30:57.824442 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.22:56093] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:58.270471 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.22:56093] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:30:59.173655 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.22:56093] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aaI3Q2uX5e1Q32gqxH30NAAAARg"]
[Sat Feb 28 08:31:00.055445 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.22:34683] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aaI3RKIAO5fN7BxyqcH61AAAANI"]
[Sat Feb 28 08:31:00.951449 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.23:30435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:01.418684 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.23:30435] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "aaI3RWuX5e1Q32gqxH30VAAAAQo"]
[Sat Feb 28 08:31:02.292542 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.22:36237] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI3RmuX5e1Q32gqxH30WwAAAQg"]
[Sat Feb 28 08:31:03.164850 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.30:43751] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI3RxCf4HvhVePw3LaPEAAAABY"]
[Sat Feb 28 08:31:05.853776 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.20:57737] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff2.php"] [unique_id "aaI3SaIAO5fN7BxyqcH7KAAAANE"]
[Sat Feb 28 08:31:06.744717 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.20:37303] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff2.php"] [unique_id "aaI3Sn6mbajs3bzQGytofgAAAVE"]
[Sat Feb 28 08:31:07.638949 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 173.244.55.29:28641] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:08.081809 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.29:28641] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI3TBCf4HvhVePw3LaPGwAAAAE"]
[Sat Feb 28 08:31:09.444586 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.22:65507] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI3TVtZF9Zd_U7easBnAQAAAFg"]
[Sat Feb 28 08:31:10.343613 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.29:40547] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:10.792634 2026] [proxy_fcgi:error] [pid 22194:tid 22214] [client 173.244.55.29:40547] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:11.702678 2026] [proxy_fcgi:error] [pid 22194:tid 22206] [client 173.244.55.29:40547] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:13.505269 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:40547] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/js/wp-login.php"] [unique_id "aaI3UX6mbajs3bzQGytowwAAAVA"]
[Sat Feb 28 08:31:14.401528 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.29:40547] File does not exist: /home/measureyourbrand/public_html/measureyourbrand.com/worm.PhP
[Sat Feb 28 08:31:14.845194 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.29:40547] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:15.290380 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.29:40547] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:16.173138 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.29:40547] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI3VH6mbajs3bzQGyto7AAAAUE"]
[Sat Feb 28 08:31:17.054042 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.25:48915] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI3VX6mbajs3bzQGyto_AAAAVQ"]
[Sat Feb 28 08:31:17.500578 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.25:48915] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/install.php"] [unique_id "aaI3VX6mbajs3bzQGytpAwAAAVA"]
[Sat Feb 28 08:31:19.285634 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.26:30009] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aaI3VxCf4HvhVePw3LaPRwAAAAU"]
[Sat Feb 28 08:31:20.179471 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.23:34227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:20.630820 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.23:34227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:21.525446 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.23:34227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:22.450450 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.23:34227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:23.838825 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.23:34227] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:25.637793 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:34227] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/05/404.php"] [unique_id "aaI3XWuX5e1Q32gqxH31QwAAARc"]
[Sat Feb 28 08:31:26.969031 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.28:48553] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaI3XhCf4HvhVePw3LaPbQAAAAQ"]
[Sat Feb 28 08:31:28.762939 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.22:36567] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:29.212281 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.22:36567] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index2.php"] [unique_id "aaI3YWuX5e1Q32gqxH31ZwAAARc"]
[Sat Feb 28 08:31:30.094073 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.23:62873] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:30.971047 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.23:62873] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaI3YqIAO5fN7BxyqcH9DwAAAMM"]
[Sat Feb 28 08:31:31.363671 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:31.572732 2026] [proxy_fcgi:error] [pid 39183:tid 39213] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:31.781961 2026] [proxy_fcgi:error] [pid 39183:tid 39202] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:31.850057 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.23:45521] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaI3Y1tZF9Zd_U7easBn7gAAAFI"]
[Sat Feb 28 08:31:32.001611 2026] [proxy_fcgi:error] [pid 39183:tid 39211] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:32.211440 2026] [proxy_fcgi:error] [pid 39183:tid 39197] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:32.422977 2026] [proxy_fcgi:error] [pid 39183:tid 39214] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:32.647467 2026] [proxy_fcgi:error] [pid 39183:tid 39212] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:32.738357 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.22:64983] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaI3ZFtZF9Zd_U7easBn8gAAAFA"]
[Sat Feb 28 08:31:32.857177 2026] [proxy_fcgi:error] [pid 39183:tid 39205] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:33.068239 2026] [proxy_fcgi:error] [pid 39183:tid 39195] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:33.279775 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 20.220.144.87:33674] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:33.486299 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:33674] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaI3ZRCf4HvhVePw3LaPjQAAAA4"]
[Sat Feb 28 08:31:33.623473 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.22:31615] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "aaI3ZRCf4HvhVePw3LaPjgAAABU"]
[Sat Feb 28 08:31:33.901403 2026] [:error] [pid 39185:tid 39264] [client 20.220.144.87:33761] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaI3ZRVE-FfM89u7BQaFDwAAAJI"]
[Sat Feb 28 08:31:34.317450 2026] [:error] [pid 39185:tid 39268] [client 20.220.144.87:33664] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaI3ZhVE-FfM89u7BQaFFgAAAJY"]
[Sat Feb 28 08:31:34.729944 2026] [:error] [pid 39185:tid 39250] [client 20.220.144.87:33729] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blackmini.php"] [unique_id "aaI3ZhVE-FfM89u7BQaFHwAAAIQ"]
[Sat Feb 28 08:31:35.139110 2026] [:error] [pid 11791:tid 11814] [client 20.220.144.87:33665] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaI3Z2uX5e1Q32gqxH31iwAAARU"]
[Sat Feb 28 08:31:35.552544 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:33790] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaI3ZxCf4HvhVePw3LaPnwAAAAc"]
[Sat Feb 28 08:31:35.850261 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.21:64909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:35.971624 2026] [:error] [pid 39292:tid 39312] [client 20.220.144.87:33776] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaI3Z6IAO5fN7BxyqcH9UAAAANI"]
[Sat Feb 28 08:31:36.290506 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.21:64909] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/content.php"] [unique_id "aaI3aBVE-FfM89u7BQaFOAAAAIM"]
[Sat Feb 28 08:31:36.385813 2026] [:error] [pid 39185:tid 39253] [client 20.220.144.87:33738] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aaI3aBVE-FfM89u7BQaFOQAAAIc"]
[Sat Feb 28 08:31:36.799366 2026] [:error] [pid 22194:tid 22218] [client 20.220.144.87:33778] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaI3aH6mbajs3bzQGytp5gAAAVY"]
[Sat Feb 28 08:31:37.192409 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 173.244.55.22:49697] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:37.222269 2026] [:error] [pid 22194:tid 22200] [client 20.220.144.87:33679] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaI3aX6mbajs3bzQGytp7wAAAUQ"]
[Sat Feb 28 08:31:37.633132 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.22:49697] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI3aRVE-FfM89u7BQaFSgAAAJI"]
[Sat Feb 28 08:31:37.639515 2026] [:error] [pid 22194:tid 22197] [client 20.220.144.87:33767] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaI3aX6mbajs3bzQGytp9QAAAUE"]
[Sat Feb 28 08:31:38.053560 2026] [:error] [pid 22194:tid 22203] [client 20.220.144.87:33785] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F19.php"] [unique_id "aaI3an6mbajs3bzQGytp_AAAAUc"]
[Sat Feb 28 08:31:38.473012 2026] [:error] [pid 22194:tid 22204] [client 20.220.144.87:33611] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaI3an6mbajs3bzQGytqCQAAAUg"]
[Sat Feb 28 08:31:38.890377 2026] [:error] [pid 22194:tid 22205] [client 20.220.144.87:33736] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaI3an6mbajs3bzQGytqFAAAAUk"]
[Sat Feb 28 08:31:38.981018 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.31:45829] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:39.327697 2026] [:error] [pid 22194:tid 22200] [client 20.220.144.87:33768] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaI3a36mbajs3bzQGytqIAAAAUQ"]
[Sat Feb 28 08:31:39.449448 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 173.244.55.31:45829] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:39.739741 2026] [:error] [pid 22194:tid 22199] [client 20.220.144.87:33745] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/F1.php"] [unique_id "aaI3a36mbajs3bzQGytqKQAAAUM"]
[Sat Feb 28 08:31:39.888827 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.31:45829] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI3axVE-FfM89u7BQaFXAAAAIA"]
[Sat Feb 28 08:31:40.164710 2026] [:error] [pid 39292:tid 39306] [client 20.220.144.87:33747] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaI3bKIAO5fN7BxyqcH9fwAAAMw"]
[Sat Feb 28 08:31:40.577283 2026] [:error] [pid 39292:tid 39310] [client 20.220.144.87:33728] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaI3bKIAO5fN7BxyqcH9iQAAANA"]
[Sat Feb 28 08:31:40.990767 2026] [:error] [pid 39292:tid 39318] [client 20.220.144.87:33772] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaI3bKIAO5fN7BxyqcH9jgAAANg"]
[Sat Feb 28 08:31:41.220202 2026] [proxy_fcgi:error] [pid 39183:tid 39195] [client 173.244.55.28:21899] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:41.404852 2026] [:error] [pid 11791:tid 11796] [client 20.220.144.87:33781] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaI3bWuX5e1Q32gqxH313AAAAQM"]
[Sat Feb 28 08:31:41.668830 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.28:21899] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaI3bRCf4HvhVePw3LaPywAAAA4"]
[Sat Feb 28 08:31:41.818539 2026] [:error] [pid 22194:tid 22210] [client 20.220.144.87:33690] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaI3bX6mbajs3bzQGytqRwAAAU4"]
[Sat Feb 28 08:31:42.233098 2026] [:error] [pid 22194:tid 22215] [client 20.220.144.87:33779] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/R57.php"] [unique_id "aaI3bn6mbajs3bzQGytqUwAAAVM"]
[Sat Feb 28 08:31:42.641467 2026] [:error] [pid 39184:tid 39233] [client 20.220.144.87:33676] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaI3bltZF9Zd_U7easBoLAAAAE4"]
[Sat Feb 28 08:31:43.057646 2026] [:error] [pid 39292:tid 39296] [client 20.220.144.87:33694] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4h.php"] [unique_id "aaI3b6IAO5fN7BxyqcH9rQAAAMI"]
[Sat Feb 28 08:31:43.462451 2026] [proxy_fcgi:error] [pid 39292:tid 39304] [client 173.244.55.30:45141] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:43.476906 2026] [:error] [pid 39292:tid 39299] [client 20.220.144.87:33751] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaI3b6IAO5fN7BxyqcH9tQAAAMU"]
[Sat Feb 28 08:31:43.887296 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:33691] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaI3b1tZF9Zd_U7easBoOAAAAEg"]
[Sat Feb 28 08:31:44.295906 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:33681] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaI3cFtZF9Zd_U7easBoPwAAAEs"]
[Sat Feb 28 08:31:44.365513 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.30:45141] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:44.705748 2026] [:error] [pid 22194:tid 22204] [client 20.220.144.87:33678] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "aaI3cH6mbajs3bzQGytqawAAAUg"]
[Sat Feb 28 08:31:45.264045 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 173.244.55.30:45141] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:45.709332 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.30:45141] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:46.592734 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.30:45141] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaI3cqIAO5fN7BxyqcH94gAAAMM"]
[Sat Feb 28 08:31:47.466613 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.26:50251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:47.911488 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.26:50251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:48.351030 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.26:50251] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaI3dKIAO5fN7BxyqcH-HgAAANY"]
[Sat Feb 28 08:31:49.684408 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.21:62863] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaI3daIAO5fN7BxyqcH-RwAAAMA"]
[Sat Feb 28 08:31:51.006995 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 173.244.55.28:28847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:52.285528 2026] [:error] [pid 39292:tid 39312] [client 20.220.144.87:33749] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aaI3eKIAO5fN7BxyqcH-qgAAANI"]
[Sat Feb 28 08:31:52.328534 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.28:28847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:52.695408 2026] [:error] [pid 11791:tid 11813] [client 20.220.144.87:33741] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aaI3eGuX5e1Q32gqxH32HQAAARQ"]
[Sat Feb 28 08:31:52.770457 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 173.244.55.28:28847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:53.105165 2026] [:error] [pid 11791:tid 11798] [client 20.220.144.87:33753] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aaI3eWuX5e1Q32gqxH32IgAAAQU"]
[Sat Feb 28 08:31:53.206534 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.28:28847] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaI3eX6mbajs3bzQGytq4QAAAVU"]
[Sat Feb 28 08:31:53.513278 2026] [:error] [pid 39292:tid 39314] [client 20.220.144.87:33698] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aaI3eaIAO5fN7BxyqcH-zwAAANQ"]
[Sat Feb 28 08:31:53.925657 2026] [:error] [pid 39292:tid 39302] [client 20.220.144.87:33755] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "aaI3eaIAO5fN7BxyqcH-4gAAAMg"]
[Sat Feb 28 08:31:54.093199 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.23:58835] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaI3eqIAO5fN7BxyqcH-6QAAAM8"]
[Sat Feb 28 08:31:54.334632 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:33709] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "aaI3ehCf4HvhVePw3LaQBgAAAA8"]
[Sat Feb 28 08:31:54.742539 2026] [:error] [pid 39185:tid 39258] [client 20.220.144.87:33750] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "aaI3ehVE-FfM89u7BQaFyQAAAIw"]
[Sat Feb 28 08:31:55.157698 2026] [:error] [pid 39185:tid 39263] [client 20.220.144.87:33735] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "aaI3exVE-FfM89u7BQaF0AAAAJE"]
[Sat Feb 28 08:31:56.287974 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.21:64133] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfour/wonder.php"] [unique_id "aaI3fBVE-FfM89u7BQaF3QAAAJM"]
[Sat Feb 28 08:31:56.721087 2026] [:error] [pid 39292:tid 39299] [client 20.220.144.87:33782] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaI3fKIAO5fN7BxyqcH_GQAAAMU"]
[Sat Feb 28 08:31:57.133266 2026] [:error] [pid 39184:tid 39229] [client 20.220.144.87:33791] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaI3fVtZF9Zd_U7easBobAAAAEo"]
[Sat Feb 28 08:31:57.541743 2026] [:error] [pid 11791:tid 11812] [client 20.220.144.87:33764] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaI3fWuX5e1Q32gqxH32RgAAARM"]
[Sat Feb 28 08:31:57.949948 2026] [:error] [pid 11791:tid 11811] [client 20.220.144.87:33687] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samfa.php"] [unique_id "aaI3fWuX5e1Q32gqxH32TQAAARI"]
[Sat Feb 28 08:31:58.047067 2026] [proxy_fcgi:error] [pid 39184:tid 39236] [client 173.244.55.31:45833] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:31:58.358582 2026] [:error] [pid 39292:tid 39295] [client 20.220.144.87:33692] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/boots.php"] [unique_id "aaI3fqIAO5fN7BxyqcH_NQAAAME"]
[Sat Feb 28 08:31:58.766464 2026] [:error] [pid 22194:tid 22219] [client 20.220.144.87:33696] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaI3fn6mbajs3bzQGytrJwAAAVc"]
[Sat Feb 28 08:31:58.931925 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.31:45833] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaI3fltZF9Zd_U7easBoegAAAFQ"]
[Sat Feb 28 08:31:59.179157 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:33770] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaI3f1tZF9Zd_U7easBoewAAAFU"]
[Sat Feb 28 08:31:59.597834 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:33787] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaI3fxCf4HvhVePw3LaQGAAAAAQ"]
[Sat Feb 28 08:32:00.012494 2026] [:error] [pid 39185:tid 39257] [client 20.220.144.87:33677] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/logi.php"] [unique_id "aaI3gBVE-FfM89u7BQaF9QAAAIs"]
[Sat Feb 28 08:32:00.242146 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:61545] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aaI3gGuX5e1Q32gqxH32dAAAARI"]
[Sat Feb 28 08:32:01.576056 2026] [proxy_fcgi:error] [pid 39185:tid 39260] [client 173.244.55.31:33391] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:02.014030 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.31:33391] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-themes.php"] [unique_id "aaI3ghVE-FfM89u7BQaGAQAAAIM"]
[Sat Feb 28 08:32:02.890515 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 173.244.55.23:33867] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:03.329995 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.23:33867] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaI3g36mbajs3bzQGytrawAAAUg"]
[Sat Feb 28 08:32:04.658448 2026] [proxy_fcgi:error] [pid 39183:tid 39203] [client 173.244.55.25:64677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:05.111462 2026] [proxy_fcgi:error] [pid 39183:tid 39212] [client 173.244.55.25:64677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:05.999455 2026] [proxy_fcgi:error] [pid 39183:tid 39196] [client 173.244.55.25:64677] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:06.443412 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.25:64677] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/glex.php"] [unique_id "aaI3hhCf4HvhVePw3LaQMAAAAAE"]
[Sat Feb 28 08:32:07.754736 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.29:43143] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaI3hxVE-FfM89u7BQaGHgAAAJA"]
[Sat Feb 28 08:32:08.644067 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.23:26295] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaI3iKIAO5fN7BxyqcH_vwAAANA"]
[Sat Feb 28 08:32:09.981625 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.25:60899] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaI3iX6mbajs3bzQGytr6AAAAVQ"]
[Sat Feb 28 08:32:10.863470 2026] [proxy_fcgi:error] [pid 39184:tid 39224] [client 173.244.55.21:45507] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:11.751790 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.21:45507] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaI3i1tZF9Zd_U7easBo4gAAAFY"]
[Sat Feb 28 08:32:13.077463 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.26:38361] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaI3jRVE-FfM89u7BQaGSQAAAIQ"]
[Sat Feb 28 08:32:14.398679 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.29:39665] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/theme.php"] [unique_id "aaI3jqIAO5fN7BxyqcEACQAAANQ"]
[Sat Feb 28 08:32:15.279094 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.21:30497] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/theme.php"] [unique_id "aaI3jxVE-FfM89u7BQaGUgAAAJg"]
[Sat Feb 28 08:32:16.167485 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.22:55097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:17.502480 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.22:55097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:17.955006 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.22:55097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:18.859545 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.22:55097] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI3kmuX5e1Q32gqxH33YwAAAQ4"]
[Sat Feb 28 08:32:19.746760 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.23:54063] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI3k2uX5e1Q32gqxH33agAAAQo"]
[Sat Feb 28 08:32:20.622878 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.29:20883] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI3lH6mbajs3bzQGytsoAAAAVE"]
[Sat Feb 28 08:32:21.512872 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.29:20883] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/classwithtostring.php"] [unique_id "aaI3lX6mbajs3bzQGytsvwAAAVM"]
[Sat Feb 28 08:32:22.399252 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 173.244.55.28:59909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:23.725867 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:59909] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaI3l6IAO5fN7BxyqcEArgAAANg"]
[Sat Feb 28 08:32:24.602513 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.28:38229] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:25.058847 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.28:38229] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaI3maIAO5fN7BxyqcEA0QAAAMs"]
[Sat Feb 28 08:32:25.945478 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.28:59331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:26.401589 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.28:59331] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "aaI3mqIAO5fN7BxyqcEA_AAAAMs"]
[Sat Feb 28 08:32:27.731759 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.31:41709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:28.603651 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.31:41709] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaI3nGuX5e1Q32gqxH33sgAAAQk"]
[Sat Feb 28 08:32:29.934963 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.22:50021] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:30.406560 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.22:50021] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:31.297800 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.22:50021] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaI3n6IAO5fN7BxyqcEBeAAAAMM"]
[Sat Feb 28 08:32:32.647375 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.25:51475] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaI3oBVE-FfM89u7BQaGqwAAAIQ"]
[Sat Feb 28 08:32:33.539484 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 173.244.55.25:47279] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:33.986250 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.25:47279] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/litespeed.php"] [unique_id "aaI3oaIAO5fN7BxyqcEBlQAAANI"]
[Sat Feb 28 08:32:34.864876 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.28:46871] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/litespeed.php"] [unique_id "aaI3oqIAO5fN7BxyqcEBnQAAAM8"]
[Sat Feb 28 08:32:35.750836 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.30:55655] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:36.191075 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.30:55655] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img/about.php"] [unique_id "aaI3pH6mbajs3bzQGyttkwAAAUw"]
[Sat Feb 28 08:32:37.527613 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.28:22761] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaI3paIAO5fN7BxyqcEB0AAAAM8"]
[Sat Feb 28 08:32:38.419465 2026] [proxy_fcgi:error] [pid 39292:tid 39299] [client 173.244.55.30:44161] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:39.316624 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.30:44161] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:39.759480 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.30:44161] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaI3p6IAO5fN7BxyqcECCwAAAMQ"]
[Sat Feb 28 08:32:41.079016 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.31:21329] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/db.php"] [unique_id "aaI3qWuX5e1Q32gqxH34OAAAAQg"]
[Sat Feb 28 08:32:41.982387 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.29:23885] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaI3qVtZF9Zd_U7easBplgAAAEc"]
[Sat Feb 28 08:32:42.879572 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:40059] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaI3qn6mbajs3bzQGytt_wAAAVY"]
[Sat Feb 28 08:32:43.760738 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.25:42249] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaI3q1tZF9Zd_U7easBpqQAAAFc"]
[Sat Feb 28 08:32:44.659923 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.25:30413] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaI3rFtZF9Zd_U7easBpsgAAAEc"]
[Sat Feb 28 08:32:45.543298 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.20:27167] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaI3rVtZF9Zd_U7easBpwwAAAEU"]
[Sat Feb 28 08:32:47.308461 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.28:60909] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaI3r36mbajs3bzQGytuSQAAAUM"]
[Sat Feb 28 08:32:48.199273 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.25:60193] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaI3sGuX5e1Q32gqxH34dgAAAQo"]
[Sat Feb 28 08:32:49.094309 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.21:48989] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaI3saIAO5fN7BxyqcECkwAAANI"]
[Sat Feb 28 08:32:50.431079 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.20:58189] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaI3smuX5e1Q32gqxH34mwAAARY"]
[Sat Feb 28 08:32:52.216629 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.31:63277] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaI3tKIAO5fN7BxyqcECvwAAANA"]
[Sat Feb 28 08:32:53.099068 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 173.244.55.23:22173] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:54.421321 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:22173] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/cc.php"] [unique_id "aaI3tqIAO5fN7BxyqcEC4wAAAMQ"]
[Sat Feb 28 08:32:56.674939 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.25:52617] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI3uGuX5e1Q32gqxH346gAAAQc"]
[Sat Feb 28 08:32:58.916408 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.25:52617] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:32:59.356792 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.25:52617] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaI3u2uX5e1Q32gqxH34_QAAAQk"]
[Sat Feb 28 08:33:00.229713 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.26:55519] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaI3vGuX5e1Q32gqxH35BgAAARc"]
[Sat Feb 28 08:33:02.460494 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:02.908196 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:04.690436 2026] [proxy_fcgi:error] [pid 11791:tid 11796] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:05.133626 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:06.926903 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:07.374600 2026] [proxy_fcgi:error] [pid 11791:tid 11795] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:07.821521 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:08.279462 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.30:28127] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:08.719021 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.30:28127] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaI3xGuX5e1Q32gqxH35eAAAAQI"]
[Sat Feb 28 08:33:09.598305 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.30:26201] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaI3xaIAO5fN7BxyqcEEaAAAANY"]
[Sat Feb 28 08:33:10.470755 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.20:56301] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaI3xqIAO5fN7BxyqcEEhgAAANE"]
[Sat Feb 28 08:33:11.794177 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.30:21579] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:12.237370 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.30:21579] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:12.673263 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.30:21579] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "aaI3yH6mbajs3bzQGytv3wAAAU8"]
[Sat Feb 28 08:33:14.017106 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 173.244.55.21:34635] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:14.463643 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.21:34635] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ubh/install.php"] [unique_id "aaI3yqIAO5fN7BxyqcEE8AAAANg"]
[Sat Feb 28 08:33:15.777075 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.22:53811] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaI3y6IAO5fN7BxyqcEFCgAAAM4"]
[Sat Feb 28 08:33:16.664478 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.21:21023] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaI3zGuX5e1Q32gqxH35sgAAARQ"]
[Sat Feb 28 08:33:17.554359 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.31:55033] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaI3zVtZF9Zd_U7easBqZgAAAEE"]
[Sat Feb 28 08:33:18.892920 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:41075] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/controller/extension/extension/alfa.php"] [unique_id "aaI3zn6mbajs3bzQGytwdAAAAVY"]
[Sat Feb 28 08:33:21.122316 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.30:54223] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaI30aIAO5fN7BxyqcEFhAAAANM"]
[Sat Feb 28 08:33:22.011607 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.25:33369] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/media-widget-vide02.php"] [unique_id "aaI30n6mbajs3bzQGytwrQAAAVY"]
[Sat Feb 28 08:33:23.376349 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.29:24943] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaI301tZF9Zd_U7easBqjQAAAEE"]
[Sat Feb 28 08:33:25.131565 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:60923] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaI31X6mbajs3bzQGytxBgAAAUs"]
[Sat Feb 28 08:33:26.022162 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.21:58025] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/install.php"] [unique_id "aaI31ltZF9Zd_U7easBqnQAAAFU"]
[Sat Feb 28 08:33:27.835553 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.22:29451] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/header.php"] [unique_id "aaI316IAO5fN7BxyqcEGEAAAAMc"]
[Sat Feb 28 08:33:28.715160 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.21:39321] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/header.php"] [unique_id "aaI32KIAO5fN7BxyqcEGGwAAANE"]
[Sat Feb 28 08:33:29.596210 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.23:24345] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:30.934253 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.23:24345] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap/install.php"] [unique_id "aaI32qIAO5fN7BxyqcEGRgAAAMY"]
[Sat Feb 28 08:33:34.530790 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.21:21865] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaI33ltZF9Zd_U7easBrEQAAAEk"]
[Sat Feb 28 08:33:35.425955 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 173.244.55.25:25093] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:36.312489 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.25:25093] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "aaI34BVE-FfM89u7BQaHlQAAAIU"]
[Sat Feb 28 08:33:38.079191 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.30:38259] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:39.403785 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.30:38259] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:39.840090 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.30:38259] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaI346IAO5fN7BxyqcEHEgAAANQ"]
[Sat Feb 28 08:33:40.720370 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.26:63699] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-includes/class-wp-http-ixr-client-view.php"] [unique_id "aaI35KIAO5fN7BxyqcEHNAAAAMg"]
[Sat Feb 28 08:33:42.463953 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.28:63635] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaI35muX5e1Q32gqxH36HQAAARc"]
[Sat Feb 28 08:33:44.720447 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.26:52039] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:46.050540 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.26:52039] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaI36muX5e1Q32gqxH36PwAAAQ4"]
[Sat Feb 28 08:33:47.822879 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.20:39515] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/bypass_1.php"] [unique_id "aaI362uX5e1Q32gqxH36UQAAARg"]
[Sat Feb 28 08:33:49.139434 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.21:62967] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/elementskit.php"] [unique_id "aaI37aIAO5fN7BxyqcEH3QAAANY"]
[Sat Feb 28 08:33:52.506532 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.29:59319] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaI38KIAO5fN7BxyqcEIIQAAAMg"]
[Sat Feb 28 08:33:53.401638 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.25:40987] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/kur.php"] [unique_id "aaI38X6mbajs3bzQGytyWAAAAVc"]
[Sat Feb 28 08:33:54.280581 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.25:46659] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/kur.php"] [unique_id "aaI38ltZF9Zd_U7easBr1AAAAEk"]
[Sat Feb 28 08:33:55.612764 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.23:32697] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:33:56.053149 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.23:32697] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaI39KIAO5fN7BxyqcEIWgAAAMc"]
[Sat Feb 28 08:33:56.924952 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.30:25087] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaI39BVE-FfM89u7BQaIOwAAAIY"]
[Sat Feb 28 08:34:00.065498 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.20:30305] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaI3-KIAO5fN7BxyqcEIuwAAAMU"]
[Sat Feb 28 08:34:00.978461 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.23:32527] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:02.770446 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.23:32527] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:03.216059 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.23:32527] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaI3-36mbajs3bzQGyty0wAAAUE"]
[Sat Feb 28 08:34:05.009454 2026] [proxy_fcgi:error] [pid 39185:tid 39246] [client 173.244.55.26:49243] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:05.894527 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.26:49243] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaI3_RVE-FfM89u7BQaIbwAAAJY"]
[Sat Feb 28 08:34:06.776240 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.23:48861] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaI3_muX5e1Q32gqxH37BgAAAQw"]
[Sat Feb 28 08:34:08.556885 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.31:22285] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaI4AH6mbajs3bzQGyty_AAAAVU"]
[Sat Feb 28 08:34:10.794805 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.20:38395] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaI4AqIAO5fN7BxyqcEJNgAAAMQ"]
[Sat Feb 28 08:34:11.682789 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.20:49211] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaI4AxVE-FfM89u7BQaIogAAAIU"]
[Sat Feb 28 08:34:13.012102 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 173.244.55.20:58887] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:15.220136 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.20:58887] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaI4B36mbajs3bzQGytzUgAAAU0"]
[Sat Feb 28 08:34:16.992859 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.29:21063] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaI4CBVE-FfM89u7BQaI4AAAAIk"]
[Sat Feb 28 08:34:17.869688 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.23:30241] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaI4CX6mbajs3bzQGytzgQAAAVU"]
[Sat Feb 28 08:34:19.199727 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 173.244.55.25:57887] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:19.643333 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.25:57887] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaI4C36mbajs3bzQGytzkAAAAU0"]
[Sat Feb 28 08:34:20.971267 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.31:26947] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaI4DH6mbajs3bzQGytzogAAAU8"]
[Sat Feb 28 08:34:24.105931 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.20:52205] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaI4EKIAO5fN7BxyqcEJ1gAAAMU"]
[Sat Feb 28 08:34:25.420644 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 173.244.55.29:26951] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:25.866623 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.29:26951] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaI4EX6mbajs3bzQGytz5QAAAVY"]
[Sat Feb 28 08:34:27.637297 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.25:35125] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaI4E36mbajs3bzQGyt0AAAAAUM"]
[Sat Feb 28 08:34:28.964589 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.26:42327] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/as.php"] [unique_id "aaI4FH6mbajs3bzQGyt0IQAAAUw"]
[Sat Feb 28 08:34:30.276893 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.29:56873] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaI4Fn6mbajs3bzQGyt0QgAAAVQ"]
[Sat Feb 28 08:34:31.151617 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.22:65397] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "aaI4F36mbajs3bzQGyt0XgAAAVE"]
[Sat Feb 28 08:34:32.049907 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.31:32775] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaI4GFtZF9Zd_U7easBseAAAAFA"]
[Sat Feb 28 08:34:35.577211 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.29:44853] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaI4GxCf4HvhVePw3LaSTgAAAAo"]
[Sat Feb 28 08:34:37.809571 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.20:26715] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaI4HVtZF9Zd_U7easBsswAAAFQ"]
[Sat Feb 28 08:34:39.145465 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.22:23275] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:39.591445 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.22:23275] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:40.031323 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.22:23275] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaI4IH6mbajs3bzQGyt06wAAAU4"]
[Sat Feb 28 08:34:42.265758 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.23:54359] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaI4In6mbajs3bzQGyt1KwAAAVE"]
[Sat Feb 28 08:34:43.153858 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.30:25505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:34:45.819554 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.30:25505] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaI4JX6mbajs3bzQGyt1agAAAVY"]
[Sat Feb 28 08:34:47.132600 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.20:21173] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaI4J2uX5e1Q32gqxH383wAAAQU"]
[Sat Feb 28 08:34:48.459580 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.20:39251] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaI4KKIAO5fN7BxyqcELdwAAAM0"]
[Sat Feb 28 08:34:50.236062 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.21:44787] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaI4KmuX5e1Q32gqxH39CAAAAQI"]
[Sat Feb 28 08:34:54.712233 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.29:47207] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaI4Ln6mbajs3bzQGyt1ywAAAU8"]
[Sat Feb 28 08:34:55.597148 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.21:30991] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaI4L2uX5e1Q32gqxH39SQAAAQU"]
[Sat Feb 28 08:34:56.956189 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.26:28601] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/hong1.php"] [unique_id "aaI4MBVE-FfM89u7BQaJnQAAAIM"]
[Sat Feb 28 08:34:58.717645 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:33713] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaI4MmuX5e1Q32gqxH39bwAAARY"]
[Sat Feb 28 08:34:59.622331 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.31:44521] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaI4MxVE-FfM89u7BQaJpQAAAJU"]
[Sat Feb 28 08:35:00.507215 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:40461] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/content-type.php"] [unique_id "aaI4NH6mbajs3bzQGyt1_gAAAVY"]
[Sat Feb 28 08:35:01.380592 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.21:20113] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfour/patterns/content-type.php"] [unique_id "aaI4NaIAO5fN7BxyqcEMVQAAANI"]
[Sat Feb 28 08:35:03.157329 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.31:47021] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaI4N6IAO5fN7BxyqcEMdAAAANE"]
[Sat Feb 28 08:35:04.035694 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.28:34743] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ms-file.php"] [unique_id "aaI4OGuX5e1Q32gqxH39iwAAAQ0"]
[Sat Feb 28 08:35:07.067968 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.31:31119] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaI4O6IAO5fN7BxyqcEMkAAAAM0"]
[Sat Feb 28 08:35:07.957313 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.23:31245] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaI4OxVE-FfM89u7BQaJ7wAAAJg"]
[Sat Feb 28 08:35:07.963436 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.23:31245] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:08.399997 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.23:31245] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaI4PBVE-FfM89u7BQaJ-gAAAJQ"]
[Sat Feb 28 08:35:10.177451 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.20:34773] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:10.623053 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:34773] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaI4Pn6mbajs3bzQGyt2XgAAAUs"]
[Sat Feb 28 08:35:11.517847 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.26:20087] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/network.php"] [unique_id "aaI4PxVE-FfM89u7BQaKGgAAAI0"]
[Sat Feb 28 08:35:12.420470 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.26:25157] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:12.892457 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.26:25157] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aaI4QBVE-FfM89u7BQaKJgAAAJc"]
[Sat Feb 28 08:35:16.474829 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.29:59759] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaI4RBVE-FfM89u7BQaKTQAAAI8"]
[Sat Feb 28 08:35:17.378840 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.28:22517] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaI4RRVE-FfM89u7BQaKVwAAAJE"]
[Sat Feb 28 08:35:19.175505 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.31:37987] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaI4R6IAO5fN7BxyqcENFwAAAMs"]
[Sat Feb 28 08:35:20.053336 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.31:24327] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/install.php"] [unique_id "aaI4SGuX5e1Q32gqxH39_AAAAQM"]
[Sat Feb 28 08:35:20.948693 2026] [proxy_fcgi:error] [pid 39183:tid 39206] [client 173.244.55.29:25447] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:21.394673 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.29:25447] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaI4SRCf4HvhVePw3LaTCQAAAAE"]
[Sat Feb 28 08:35:22.303914 2026] [:error] [pid 39183:tid 39195] [client 173.244.55.29:25447] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaI4ShCf4HvhVePw3LaTCwAAAAM"]
[Sat Feb 28 08:35:24.982011 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.21:58685] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaI4TGuX5e1Q32gqxH3-NAAAAQM"]
[Sat Feb 28 08:35:25.862510 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 173.244.55.28:46905] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:26.299629 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.28:46905] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaI4TltZF9Zd_U7easBt7QAAAEg"]
[Sat Feb 28 08:35:27.197158 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.26:63561] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaI4T6IAO5fN7BxyqcENiQAAANA"]
[Sat Feb 28 08:35:28.069215 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.20:55781] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop.php"] [unique_id "aaI4UGuX5e1Q32gqxH3-TQAAAQo"]
[Sat Feb 28 08:35:28.955457 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 173.244.55.29:28107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:30.295902 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.29:28107] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaI4UqIAO5fN7BxyqcENugAAAMU"]
[Sat Feb 28 08:35:32.072094 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.25:54043] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaI4VH6mbajs3bzQGyt3kwAAAUU"]
[Sat Feb 28 08:35:32.973291 2026] [proxy_fcgi:error] [pid 11791:tid 11806] [client 173.244.55.30:37173] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:33.876238 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.30:37173] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:34.761671 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.30:37173] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaI4VmuX5e1Q32gqxH3-egAAARg"]
[Sat Feb 28 08:35:35.645317 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.22:65375] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bypass.php"] [unique_id "aaI4VxVE-FfM89u7BQaK6AAAAJU"]
[Sat Feb 28 08:35:36.524675 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.30:57133] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/fm.php7"] [unique_id "aaI4WGuX5e1Q32gqxH3-fAAAAQs"]
[Sat Feb 28 08:35:37.852758 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.21:36613] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/count.php"] [unique_id "aaI4WX6mbajs3bzQGyt30wAAAUA"]
[Sat Feb 28 08:35:38.745600 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.28:34105] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:41.429817 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.28:34105] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaI4XWuX5e1Q32gqxH3-ngAAARM"]
[Sat Feb 28 08:35:43.219065 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.21:29979] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourbrand.com"] [uri "/images/stories/themes.php"] [unique_id "aaI4XxCf4HvhVePw3LaTuQAAAAc"]
[Sat Feb 28 08:35:43.663772 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.21:29979] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaI4XxCf4HvhVePw3LaTuwAAABM"]
[Sat Feb 28 08:35:45.450246 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.31:26731] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaI4YRVE-FfM89u7BQaLRgAAAJQ"]
[Sat Feb 28 08:35:46.339049 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.29:65521] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaI4YqIAO5fN7BxyqcEObAAAAM0"]
[Sat Feb 28 08:35:47.664747 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.30:62269] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php%20"] [unique_id "aaI4YxCf4HvhVePw3LaTzQAAAAk"]
[Sat Feb 28 08:35:49.007231 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.29:23485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:50.790918 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.29:23485] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaI4ZqIAO5fN7BxyqcEOtQAAAMw"]
[Sat Feb 28 08:35:52.546195 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.25:57283] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaI4aKIAO5fN7BxyqcEO0QAAANA"]
[Sat Feb 28 08:35:53.861790 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.29:22611] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaI4aVtZF9Zd_U7easBueQAAAE0"]
[Sat Feb 28 08:35:54.780482 2026] [proxy_fcgi:error] [pid 11791:tid 11816] [client 173.244.55.30:23853] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:57.012497 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.30:23853] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaI4bWuX5e1Q32gqxH3_OAAAARA"]
[Sat Feb 28 08:35:58.334872 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.22:30537] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/colour.php"] [unique_id "aaI4bn6mbajs3bzQGyt46gAAAVc"]
[Sat Feb 28 08:35:59.211868 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.31:37331] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:35:59.647885 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.31:37331] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaI4b36mbajs3bzQGyt5CAAAAUs"]
[Sat Feb 28 08:36:00.521028 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.30:21635] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/include.php"] [unique_id "aaI4cGuX5e1Q32gqxH3_UwAAAQE"]
[Sat Feb 28 08:36:02.299115 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.25:48879] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaI4chVE-FfM89u7BQaLxwAAAJA"]
[Sat Feb 28 08:36:03.622256 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.20:27585] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fonts/install.php"] [unique_id "aaI4c36mbajs3bzQGyt5cgAAAUE"]
[Sat Feb 28 08:36:06.565710 2026] [proxy_fcgi:error] [pid 11791:tid 11793] [client 173.244.55.21:52699] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:36:07.004778 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.21:52699] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaI4d2uX5e1Q32gqxH3_gAAAAQw"]
[Sat Feb 28 08:36:07.883840 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.22:35709] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaI4d2uX5e1Q32gqxH3_iQAAAQA"]
[Sat Feb 28 08:36:10.109466 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 173.244.55.22:39379] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:36:10.995008 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.22:39379] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaI4emuX5e1Q32gqxH3_ywAAARE"]
[Sat Feb 28 08:36:12.788008 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.26:20761] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaI4fBCf4HvhVePw3LaUKgAAAA4"]
[Sat Feb 28 08:36:13.669488 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 173.244.55.22:22517] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:36:14.987334 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.22:22517] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaI4fqIAO5fN7BxyqcEP0QAAAMY"]
[Sat Feb 28 08:36:15.863086 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.28:21975] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaI4f6IAO5fN7BxyqcEP9wAAANE"]
[Sat Feb 28 08:36:28.982613 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.21:56401] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aaI4jH6mbajs3bzQGyt7AQAAAUk"]
[Sat Feb 28 08:36:35.685658 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.29:36699] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/"] [unique_id "aaI4k1tZF9Zd_U7easBvWQAAAEg"]
[Sat Feb 28 08:36:37.909527 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.31:21387] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/"] [unique_id "aaI4laIAO5fN7BxyqcERXwAAANU"]
[Sat Feb 28 08:36:39.237735 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.23:24043] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI4lxCf4HvhVePw3LaUtgAAAAY"]
[Sat Feb 28 08:36:40.132298 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.28:35231] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI4mKIAO5fN7BxyqcERgAAAAM4"]
[Sat Feb 28 08:36:41.461402 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.26:30017] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/id3/"] [unique_id "aaI4maIAO5fN7BxyqcERoQAAAMI"]
[Sat Feb 28 08:36:46.367752 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.30:64033] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/"] [unique_id "aaI4nqIAO5fN7BxyqcESBgAAAM8"]
[Sat Feb 28 08:36:47.249637 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.23:37819] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/"] [unique_id "aaI4n6IAO5fN7BxyqcESHAAAANY"]
[Sat Feb 28 08:36:55.661452 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.25:30221] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3"] [unique_id "aaI4p36mbajs3bzQGyt8dAAAAVA"]
[Sat Feb 28 08:36:58.333728 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.28:23757] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/"] [unique_id "aaI4qmuX5e1Q32gqxH0BTQAAARQ"]
[Sat Feb 28 08:37:00.107151 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.23:58031] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/"] [unique_id "aaI4rGuX5e1Q32gqxH0BZAAAAQs"]
[Sat Feb 28 08:37:09.904164 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.25:63495] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "aaI4tRVE-FfM89u7BQaOGQAAAIY"]
[Sat Feb 28 08:37:13.900904 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.22:20705] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/site/wp-includes/"] [unique_id "aaI4uWuX5e1Q32gqxH0CNwAAARQ"]
[Sat Feb 28 08:37:14.773735 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.25:25219] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/site/wp-includes/"] [unique_id "aaI4un6mbajs3bzQGyt9NwAAAUE"]
[Sat Feb 28 08:37:20.504940 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.23:43437] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-includes/"] [unique_id "aaI4wFtZF9Zd_U7easBwpgAAAEo"]
[Sat Feb 28 08:37:23.628085 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.20:42275] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/"] [unique_id "aaI4w1tZF9Zd_U7easBw0AAAAEw"]
[Sat Feb 28 08:37:26.311167 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.21:23537] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaI4xn6mbajs3bzQGyt-AgAAAUA"]
[Sat Feb 28 08:37:27.647411 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.25:21459] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI4x1tZF9Zd_U7easBw9gAAAE4"]
[Sat Feb 28 08:37:28.974641 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.31:57411] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache-wordpress/"] [unique_id "aaI4yBVE-FfM89u7BQaO2gAAAJA"]
[Sat Feb 28 08:37:31.604888 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.22:53647] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/BrutalShell/"] [unique_id "aaI4y36mbajs3bzQGyt-UwAAAU4"]
[Sat Feb 28 08:37:33.360590 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.29:61501] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/cakil/"] [unique_id "aaI4zVtZF9Zd_U7easBxEwAAAEk"]
[Sat Feb 28 08:37:34.699682 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.21:24263] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aaI4zhVE-FfM89u7BQaPCwAAAJU"]
[Sat Feb 28 08:37:37.939124 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.23:50651] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/limit/"] [unique_id "aaI40RCf4HvhVePw3LaWbAAAAAI"]
[Sat Feb 28 08:37:38.830892 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.26:59845] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/limit/"] [unique_id "aaI40muX5e1Q32gqxH0DTwAAAQA"]
[Sat Feb 28 08:37:40.159827 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.21:45329] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/owfsmac/"] [unique_id "aaI41GuX5e1Q32gqxH0DYAAAARQ"]
[Sat Feb 28 08:37:44.611656 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.31:43111] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wpeazvp/"] [unique_id "aaI42KIAO5fN7BxyqcEVBAAAAMQ"]
[Sat Feb 28 08:37:45.493405 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.25:51615] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wpeazvp/"] [unique_id "aaI42RCf4HvhVePw3LaWmwAAAAA"]
[Sat Feb 28 08:37:46.812534 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.28:21411] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/zaen/includes/"] [unique_id "aaI42muX5e1Q32gqxH0DtgAAARA"]
[Sat Feb 28 08:37:50.773811 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.29:26877] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/sketch/"] [unique_id "aaI43qIAO5fN7BxyqcEVYAAAAM8"]
[Sat Feb 28 08:37:54.322343 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.22:30799] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aaI44n6mbajs3bzQGyt_3gAAAUM"]
[Sat Feb 28 08:37:55.637701 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.29:22135] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/upload/"] [unique_id "aaI4436mbajs3bzQGyuABAAAAUk"]
[Sat Feb 28 08:38:01.854039 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.26:33853] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/"] [unique_id "aaI46WuX5e1Q32gqxH0EUgAAARM"]
[Sat Feb 28 08:38:02.724043 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:23441] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/"] [unique_id "aaI46qIAO5fN7BxyqcEWrQAAAMQ"]
[Sat Feb 28 08:38:03.611226 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.26:59133] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/"] [unique_id "aaI4636mbajs3bzQGyuAZgAAAUQ"]
[Sat Feb 28 08:38:04.484238 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.26:27579] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/"] [unique_id "aaI47KIAO5fN7BxyqcEWywAAAMk"]
[Sat Feb 28 08:38:06.699181 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.31:64841] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/"] [unique_id "aaI47n6mbajs3bzQGyuAsAAAAVI"]
[Sat Feb 28 08:38:07.571244 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.30:28029] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/"] [unique_id "aaI47xVE-FfM89u7BQaQQgAAAIU"]
[Sat Feb 28 08:38:09.813706 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:24767] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "aaI48aIAO5fN7BxyqcEXEAAAANM"]
[Sat Feb 28 08:38:11.158338 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.20:32495] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/"] [unique_id "aaI481tZF9Zd_U7easBxqgAAAFQ"]
[Sat Feb 28 08:38:19.554360 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.23:31713] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/beez3/"] [unique_id "aaI4-xCf4HvhVePw3LaXOgAAAAI"]
[Sat Feb 28 08:38:21.774194 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.30:35539] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/templates/atomic/"] [unique_id "aaI4_aIAO5fN7BxyqcEXhAAAANA"]
[Sat Feb 28 08:38:23.542100 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.31:22157] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jcrop/"] [unique_id "aaI4_1tZF9Zd_U7easBx1wAAAEk"]
[Sat Feb 28 08:38:28.082538 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.22:21551] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/seooyanz/"] [unique_id "aaI5BH6mbajs3bzQGyuCSAAAAUA"]
[Sat Feb 28 08:38:28.950894 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.22:46323] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/seooyanz/"] [unique_id "aaI5BH6mbajs3bzQGyuCTAAAAVY"]
[Sat Feb 28 08:38:31.169817 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.21:30145] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aaI5BxVE-FfM89u7BQaRSAAAAII"]
[Sat Feb 28 08:38:53.425156 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.25:54495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:53.872585 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 173.244.55.25:54495] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:54.315549 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.25:54495] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/O-Simple.php"] [unique_id "aaI5HhVE-FfM89u7BQaR4QAAAIA"]
[Sat Feb 28 08:38:55.200281 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.31:32145] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:56.982442 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.31:32145] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:57.439475 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.31:32145] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:57.885438 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.31:32145] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:58.330340 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.31:32145] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaI5In6mbajs3bzQGyuEHAAAAUU"]
[Sat Feb 28 08:38:59.221103 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.26:58135] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:38:59.676194 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.26:58135] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:00.118678 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.26:58135] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/login.php"] [unique_id "aaI5JH6mbajs3bzQGyuEVgAAAU8"]
[Sat Feb 28 08:39:00.996458 2026] [proxy_fcgi:error] [pid 39185:tid 39255] [client 173.244.55.20:34889] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:01.438447 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 173.244.55.20:34889] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:02.333452 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 173.244.55.20:34889] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:02.780602 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.20:34889] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/robots.php"] [unique_id "aaI5JhVE-FfM89u7BQaSMQAAAIQ"]
[Sat Feb 28 08:39:03.668268 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.29:32627] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/robots.php"] [unique_id "aaI5J6IAO5fN7BxyqcEZ5QAAAM4"]
[Sat Feb 28 08:39:04.540026 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.25:22215] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/robots.php"] [unique_id "aaI5KKIAO5fN7BxyqcEaAgAAAMw"]
[Sat Feb 28 08:39:05.429903 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.31:24803] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:05.894755 2026] [proxy_fcgi:error] [pid 39185:tid 39254] [client 173.244.55.31:24803] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:06.362714 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.31:24803] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:06.808857 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.31:24803] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aaI5KhVE-FfM89u7BQaSXgAAAJg"]
[Sat Feb 28 08:39:07.692500 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 173.244.55.25:29251] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:08.139252 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.25:29251] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file5.php"] [unique_id "aaI5LFtZF9Zd_U7easByqwAAAEo"]
[Sat Feb 28 08:39:09.017451 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 173.244.55.20:38245] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:09.459452 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.20:38245] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:09.898292 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 173.244.55.20:38245] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:10.343558 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.20:38245] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aaI5LhVE-FfM89u7BQaSggAAAIM"]
[Sat Feb 28 08:39:11.233029 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.20:64093] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aaI5LxVE-FfM89u7BQaSjAAAAJU"]
[Sat Feb 28 08:39:12.126473 2026] [proxy_fcgi:error] [pid 39184:tid 39235] [client 173.244.55.29:43449] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:13.016814 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.29:43449] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/hello.php"] [unique_id "aaI5MVtZF9Zd_U7easBy3wAAAFA"]
[Sat Feb 28 08:39:15.306733 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.23:38955] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI5MxVE-FfM89u7BQaSqgAAAJM"]
[Sat Feb 28 08:39:19.869468 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.22:38021] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aaI5N36mbajs3bzQGyuFaQAAAVM"]
[Sat Feb 28 08:39:20.757610 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.22:51955] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aaI5OFtZF9Zd_U7easBzHwAAAFM"]
[Sat Feb 28 08:39:22.090844 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.21:41517] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI5OhCf4HvhVePw3LaYQgAAABU"]
[Sat Feb 28 08:39:22.978158 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.25:45849] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aaI5On6mbajs3bzQGyuFfgAAAU8"]
[Sat Feb 28 08:39:23.869485 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.23:45569] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aaI5O1tZF9Zd_U7easBzTwAAAEc"]
[Sat Feb 28 08:39:24.741213 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.26:51585] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aaI5PKIAO5fN7BxyqcEbAwAAAMg"]
[Sat Feb 28 08:39:26.981155 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.22:34855] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI5PhVE-FfM89u7BQaS9QAAAJQ"]
[Sat Feb 28 08:39:28.750429 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.20:52481] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI5QKIAO5fN7BxyqcEbZgAAAMo"]
[Sat Feb 28 08:39:30.077069 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.29:48843] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aaI5QqIAO5fN7BxyqcEbjAAAAMw"]
[Sat Feb 28 08:39:30.979817 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.20:33119] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:32.323225 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.20:33119] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaI5RKIAO5fN7BxyqcEb0AAAANg"]
[Sat Feb 28 08:39:34.099078 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.21:23913] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:34.542513 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.21:23913] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaI5RqIAO5fN7BxyqcEcDwAAAMQ"]
[Sat Feb 28 08:39:35.434826 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.31:53241] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/item.php"] [unique_id "aaI5R6IAO5fN7BxyqcEcLQAAANc"]
[Sat Feb 28 08:39:36.762623 2026] [proxy_fcgi:error] [pid 39185:tid 39247] [client 173.244.55.21:22487] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:37.197906 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.21:22487] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/wp-conflg.php"] [unique_id "aaI5SRVE-FfM89u7BQaTOQAAAJA"]
[Sat Feb 28 08:39:39.848745 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.29:63501] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI5S36mbajs3bzQGyuGfgAAAVQ"]
[Sat Feb 28 08:39:41.157219 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:38353] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI5TaIAO5fN7BxyqcEctQAAANM"]
[Sat Feb 28 08:39:42.039841 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.21:34031] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI5TqIAO5fN7BxyqcEczQAAANA"]
[Sat Feb 28 08:39:42.919430 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.23:26695] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI5TltZF9Zd_U7easBzvwAAAEE"]
[Sat Feb 28 08:39:43.791510 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.28:57393] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI5T6IAO5fN7BxyqcEc7gAAANQ"]
[Sat Feb 28 08:39:44.674230 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.29:58551] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI5UFtZF9Zd_U7easBz0QAAAEQ"]
[Sat Feb 28 08:39:45.999515 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.29:47555] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI5UVtZF9Zd_U7easBz3QAAAEg"]
[Sat Feb 28 08:39:46.879843 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.26:51065] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inc.php"] [unique_id "aaI5Un6mbajs3bzQGyuG0AAAAVI"]
[Sat Feb 28 08:39:47.767201 2026] [proxy_fcgi:error] [pid 39183:tid 39203] [client 173.244.55.21:47919] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:48.642812 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.21:47919] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aaI5VBCf4HvhVePw3LaYggAAAAc"]
[Sat Feb 28 08:39:49.530640 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.21:48183] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:50.408940 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.21:48183] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI5VqIAO5fN7BxyqcEdWgAAANM"]
[Sat Feb 28 08:39:51.731561 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.29:63193] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI5V6IAO5fN7BxyqcEdawAAANA"]
[Sat Feb 28 08:39:52.615467 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.26:41399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:53.050220 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.26:41399] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI5WWuX5e1Q32gqxH0I4AAAAQc"]
[Sat Feb 28 08:39:53.938527 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.31:48283] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "aaI5WaIAO5fN7BxyqcEdgwAAAMQ"]
[Sat Feb 28 08:39:54.824302 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.30:63283] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:55.263599 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.30:63283] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/network.php"] [unique_id "aaI5W36mbajs3bzQGyuHHwAAAVE"]
[Sat Feb 28 08:39:57.037405 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 173.244.55.22:47815] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:58.371407 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.22:47815] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI5Xn6mbajs3bzQGyuHUAAAAVM"]
[Sat Feb 28 08:39:59.249470 2026] [proxy_fcgi:error] [pid 39183:tid 39194] [client 173.244.55.29:44041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:39:59.689637 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.29:44041] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI5XxCf4HvhVePw3LaYmgAAABg"]
[Sat Feb 28 08:40:00.577336 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.20:50917] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:01.026800 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.20:50917] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aaI5YaIAO5fN7BxyqcEd4gAAAM4"]
[Sat Feb 28 08:40:01.909826 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.31:45217] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aaI5YWuX5e1Q32gqxH0JVwAAARA"]
[Sat Feb 28 08:40:02.793463 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.31:28965] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aaI5YmuX5e1Q32gqxH0JYQAAARE"]
[Sat Feb 28 08:40:03.668445 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.30:55001] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd-1/admin.php"] [unique_id "aaI5Y1tZF9Zd_U7easB0XgAAAE8"]
[Sat Feb 28 08:40:04.981551 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.29:38539] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "aaI5ZH6mbajs3bzQGyuHuwAAAUA"]
[Sat Feb 28 08:40:06.308724 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.30:25153] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI5Zn6mbajs3bzQGyuH6QAAAVY"]
[Sat Feb 28 08:40:09.689236 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 173.244.55.25:45311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:10.135213 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 173.244.55.25:45311] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:11.012935 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.25:45311] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI5a1tZF9Zd_U7easB0kgAAAFE"]
[Sat Feb 28 08:40:11.886602 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.28:20943] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aaI5a2uX5e1Q32gqxH0J1gAAAQI"]
[Sat Feb 28 08:40:13.226568 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.23:56127] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI5bRVE-FfM89u7BQaUHgAAAI8"]
[Sat Feb 28 08:40:14.562860 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.23:42643] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI5bmuX5e1Q32gqxH0KDwAAAQM"]
[Sat Feb 28 08:40:15.452149 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.29:37819] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI5b2uX5e1Q32gqxH0KIwAAAQg"]
[Sat Feb 28 08:40:16.341786 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.21:39443] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI5cKIAO5fN7BxyqcEeoAAAAMk"]
[Sat Feb 28 08:40:17.704486 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.26:36569] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/403.php"] [unique_id "aaI5cVtZF9Zd_U7easB04gAAAEk"]
[Sat Feb 28 08:40:19.026482 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.25:23775] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:19.467264 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.25:23775] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI5c36mbajs3bzQGyuIkAAAAUc"]
[Sat Feb 28 08:40:20.347095 2026] [:error] [pid 39183:tid 39195] [client 173.244.55.22:25959] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "aaI5dBCf4HvhVePw3LaZAwAAAAM"]
[Sat Feb 28 08:40:21.223211 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.28:50965] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI5dWuX5e1Q32gqxH0KUAAAARI"]
[Sat Feb 28 08:40:22.107333 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.30:54897] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/chosen.php"] [unique_id "aaI5dqIAO5fN7BxyqcEfCwAAANA"]
[Sat Feb 28 08:40:23.896403 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 173.244.55.26:41627] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:24.802518 2026] [proxy_fcgi:error] [pid 39184:tid 39237] [client 173.244.55.26:41627] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:26.624410 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.26:41627] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "aaI5eltZF9Zd_U7easB1HgAAAEM"]
[Sat Feb 28 08:40:31.075614 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.25:21107] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI5fxVE-FfM89u7BQaUlgAAAJA"]
[Sat Feb 28 08:40:31.521404 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.25:21107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:33.736463 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.25:21107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:34.205446 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.25:21107] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:36.445130 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.25:21107] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI5hBVE-FfM89u7BQaU0QAAAIQ"]
[Sat Feb 28 08:40:37.789593 2026] [proxy_fcgi:error] [pid 11791:tid 11814] [client 173.244.55.21:55297] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:39.092714 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.21:55297] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI5h2uX5e1Q32gqxH0K_wAAAQk"]
[Sat Feb 28 08:40:39.985910 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.21:55297] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "aaI5h2uX5e1Q32gqxH0LCQAAAQk"]
[Sat Feb 28 08:40:40.893132 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.30:22667] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/index.php"] [unique_id "aaI5iH6mbajs3bzQGyuJmQAAAUY"]
[Sat Feb 28 08:40:43.532922 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.22:44603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:44.423073 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.22:44603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:45.298752 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.22:44603] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI5jaIAO5fN7BxyqcEgJgAAAMM"]
[Sat Feb 28 08:40:46.184312 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.28:46853] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aaI5jhVE-FfM89u7BQaVHAAAAIg"]
[Sat Feb 28 08:40:47.071445 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.21:47321] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:47.959833 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.21:47321] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/chosen.php"] [unique_id "aaI5j36mbajs3bzQGyuKJQAAAUc"]
[Sat Feb 28 08:40:49.293680 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.20:51735] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-header.php"] [unique_id "aaI5kWuX5e1Q32gqxH0LZAAAAQg"]
[Sat Feb 28 08:40:50.190410 2026] [proxy_fcgi:error] [pid 39185:tid 39261] [client 173.244.55.22:54999] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:51.096874 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 173.244.55.22:54999] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:52.002168 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.22:54999] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aaI5lBVE-FfM89u7BQaVaQAAAIM"]
[Sat Feb 28 08:40:52.892160 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.20:28333] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:53.338039 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.20:28333] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI5lRVE-FfM89u7BQaVfAAAAIY"]
[Sat Feb 28 08:40:54.228554 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.22:31729] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:54.684454 2026] [proxy_fcgi:error] [pid 22194:tid 22215] [client 173.244.55.22:31729] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:55.125292 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.22:31729] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI5l36mbajs3bzQGyuKcAAAAUo"]
[Sat Feb 28 08:40:56.465738 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 173.244.55.20:65165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:40:57.340303 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.20:65165] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5mRVE-FfM89u7BQaVngAAAIU"]
[Sat Feb 28 08:40:58.222129 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.20:38441] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5mltZF9Zd_U7easB1uwAAAEM"]
[Sat Feb 28 08:40:59.104062 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.23:39675] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5m6IAO5fN7BxyqcEgtgAAANU"]
[Sat Feb 28 08:40:59.566449 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:39675] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI5m6IAO5fN7BxyqcEgwgAAAMQ"]
[Sat Feb 28 08:41:01.350674 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.31:59871] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/up/main.php"] [unique_id "aaI5naIAO5fN7BxyqcEg3gAAAMo"]
[Sat Feb 28 08:41:02.265144 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.31:24501] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/up/main.php"] [unique_id "aaI5nltZF9Zd_U7easB1ywAAAEU"]
[Sat Feb 28 08:41:05.360641 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.30:60331] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/images/about.php"] [unique_id "aaI5oWuX5e1Q32gqxH0McwAAAQA"]
[Sat Feb 28 08:41:07.570467 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 173.244.55.20:57573] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:09.337450 2026] [proxy_fcgi:error] [pid 39292:tid 39318] [client 173.244.55.20:57573] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:10.214818 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.20:57573] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:10.664921 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.20:57573] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI5pqIAO5fN7BxyqcEhQgAAAMU"]
[Sat Feb 28 08:41:11.547249 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.23:27105] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aaI5p2uX5e1Q32gqxH0M6gAAAQI"]
[Sat Feb 28 08:41:12.439341 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:45321] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "aaI5qFtZF9Zd_U7easB19AAAAEg"]
[Sat Feb 28 08:41:13.334445 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 173.244.55.26:41239] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:14.663922 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.26:41239] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI5qltZF9Zd_U7easB2BgAAAFI"]
[Sat Feb 28 08:41:15.112446 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 173.244.55.26:41239] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:15.552697 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 173.244.55.26:41239] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:15.997605 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 173.244.55.26:41239] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:16.434587 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.26:41239] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI5rFtZF9Zd_U7easB2HwAAAEE"]
[Sat Feb 28 08:41:17.360455 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.30:29359] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:17.816117 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.30:29359] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "aaI5rX6mbajs3bzQGyuLkgAAAUE"]
[Sat Feb 28 08:41:19.176063 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.25:27841] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:19.611408 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.25:27841] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI5r36mbajs3bzQGyuLqwAAAUU"]
[Sat Feb 28 08:41:21.366569 2026] [proxy_fcgi:error] [pid 11791:tid 11801] [client 173.244.55.26:43503] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:21.807107 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.26:43503] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI5sWuX5e1Q32gqxH0NhgAAAQ4"]
[Sat Feb 28 08:41:22.685884 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.29:44209] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI5sqIAO5fN7BxyqcEiCgAAAM4"]
[Sat Feb 28 08:41:23.579994 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.26:64117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:24.041811 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.26:64117] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:25.831475 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.26:64117] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI5tX6mbajs3bzQGyuMKQAAAUc"]
[Sat Feb 28 08:41:27.156936 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.21:35523] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI5t36mbajs3bzQGyuMUgAAAVQ"]
[Sat Feb 28 08:41:28.059034 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.26:38073] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:29.385831 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.26:38073] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "aaI5uX6mbajs3bzQGyuMnQAAAVg"]
[Sat Feb 28 08:41:32.591058 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.30:56539] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:33.471613 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.30:56539] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:42.389999 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.25:36327] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI5xn6mbajs3bzQGyuNPQAAAVI"]
[Sat Feb 28 08:41:43.286479 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.21:47003] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:44.177046 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.21:47003] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "aaI5yKIAO5fN7BxyqcEi9QAAANY"]
[Sat Feb 28 08:41:45.073989 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.25:21429] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:46.403705 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.25:21429] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI5yqIAO5fN7BxyqcEjKQAAANQ"]
[Sat Feb 28 08:41:47.736569 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.25:56081] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaI5y2uX5e1Q32gqxH0OfgAAAQE"]
[Sat Feb 28 08:41:48.621746 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 173.244.55.31:26603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:49.509783 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.31:26603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:49.949460 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.31:26603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:50.838548 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.31:26603] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:51.275499 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.31:26603] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI5z6IAO5fN7BxyqcEjmAAAAMc"]
[Sat Feb 28 08:41:52.154322 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.21:24731] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI50H6mbajs3bzQGyuN8gAAAUs"]
[Sat Feb 28 08:41:53.039756 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.21:36953] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI50VtZF9Zd_U7easB27QAAAFg"]
[Sat Feb 28 08:41:53.912231 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.22:25007] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI50aIAO5fN7BxyqcEjxwAAAMY"]
[Sat Feb 28 08:41:54.799435 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 173.244.55.31:22949] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:55.246635 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.31:22949] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI5036mbajs3bzQGyuOMwAAAUY"]
[Sat Feb 28 08:41:56.143026 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.23:20591] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI51KIAO5fN7BxyqcEj7gAAANY"]
[Sat Feb 28 08:41:57.051737 2026] [proxy_fcgi:error] [pid 39184:tid 39243] [client 173.244.55.31:46261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:41:57.946022 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:46261] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aaI51VtZF9Zd_U7easB3GQAAAEg"]
[Sat Feb 28 08:41:58.850029 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.20:31019] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI51n6mbajs3bzQGyuOdAAAAVQ"]
[Sat Feb 28 08:41:59.729001 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.28:59755] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI516IAO5fN7BxyqcEkIAAAANE"]
[Sat Feb 28 08:42:00.608194 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.29:55077] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI52BVE-FfM89u7BQaXvAAAAIQ"]
[Sat Feb 28 08:42:01.924677 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.30:30421] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI52VtZF9Zd_U7easB3NAAAAFU"]
[Sat Feb 28 08:42:03.695619 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.23:40407] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI5236mbajs3bzQGyuOngAAAUU"]
[Sat Feb 28 08:42:04.574452 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 173.244.55.20:28763] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:05.898439 2026] [proxy_fcgi:error] [pid 11791:tid 11809] [client 173.244.55.20:28763] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:06.334730 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.20:28763] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI53muX5e1Q32gqxH0PCQAAAQw"]
[Sat Feb 28 08:42:07.675914 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.22:38823] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2023.php"] [unique_id "aaI53xCf4HvhVePw3LabHAAAABM"]
[Sat Feb 28 08:42:08.551552 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 173.244.55.22:61143] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:08.994610 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.22:61143] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:10.784815 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 173.244.55.22:61143] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:11.223678 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.22:61143] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI5436mbajs3bzQGyuPCgAAAUo"]
[Sat Feb 28 08:42:12.106849 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 173.244.55.30:23319] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:13.436678 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.30:23319] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI55VtZF9Zd_U7easB3ogAAAEg"]
[Sat Feb 28 08:42:14.321541 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.21:43413] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI55muX5e1Q32gqxH0PSAAAAQ8"]
[Sat Feb 28 08:42:16.991265 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:48897] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI56KIAO5fN7BxyqcElFwAAANg"]
[Sat Feb 28 08:42:18.754770 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.31:44387] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:19.194677 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.31:44387] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:19.630352 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.31:44387] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aaI5636mbajs3bzQGyuPagAAAVU"]
[Sat Feb 28 08:42:20.503515 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.31:53729] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aaI57H6mbajs3bzQGyuPcAAAAVc"]
[Sat Feb 28 08:42:21.385096 2026] [proxy_fcgi:error] [pid 11791:tid 11810] [client 173.244.55.30:53037] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:21.822881 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.30:53037] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:24.027314 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.30:53037] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI58GuX5e1Q32gqxH0PnwAAAQg"]
[Sat Feb 28 08:42:24.897073 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.22:31245] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI58H6mbajs3bzQGyuPmwAAAVU"]
[Sat Feb 28 08:42:25.774021 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.30:23283] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI58RCf4HvhVePw3LabcQAAAA0"]
[Sat Feb 28 08:42:26.658690 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.30:21725] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI58ltZF9Zd_U7easB4GAAAAEA"]
[Sat Feb 28 08:42:27.544157 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.28:31881] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI582uX5e1Q32gqxH0PuAAAAQI"]
[Sat Feb 28 08:42:28.421204 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.23:38447] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI59FtZF9Zd_U7easB4MwAAAEY"]
[Sat Feb 28 08:42:29.301542 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.22:57279] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/index.php"] [unique_id "aaI59aIAO5fN7BxyqcElfwAAAMk"]
[Sat Feb 28 08:42:30.184992 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.22:36691] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/index.php"] [unique_id "aaI59qIAO5fN7BxyqcElnAAAAMY"]
[Sat Feb 28 08:42:31.562467 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.20:40985] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI592uX5e1Q32gqxH0P3gAAAQg"]
[Sat Feb 28 08:42:32.450857 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.23:22309] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI5-KIAO5fN7BxyqcEl1QAAANg"]
[Sat Feb 28 08:42:33.344827 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.26:21421] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI5-RCf4HvhVePw3LabewAAAA0"]
[Sat Feb 28 08:42:34.220594 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.31:49959] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI5-qIAO5fN7BxyqcEl-gAAAMQ"]
[Sat Feb 28 08:42:35.547692 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.22:62043] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aaI5-6IAO5fN7BxyqcEmEgAAAM0"]
[Sat Feb 28 08:42:36.857131 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.20:58583] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI5_H6mbajs3bzQGyuQFwAAAUE"]
[Sat Feb 28 08:42:38.188927 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.31:32583] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI5_hCf4HvhVePw3LabhQAAAA4"]
[Sat Feb 28 08:42:39.075451 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 173.244.55.25:34111] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:39.958466 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.25:34111] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI5_36mbajs3bzQGyuQVwAAAUE"]
[Sat Feb 28 08:42:41.735151 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.30:46085] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "aaI6AX6mbajs3bzQGyuQiwAAAVM"]
[Sat Feb 28 08:42:42.626469 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.20:63667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:43.529454 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.20:63667] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:43.968799 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.20:63667] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI6A6IAO5fN7BxyqcEmZQAAANM"]
[Sat Feb 28 08:42:45.297502 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 173.244.55.22:61505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:45.748501 2026] [proxy_fcgi:error] [pid 39184:tid 39240] [client 173.244.55.22:61505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:46.200988 2026] [proxy_fcgi:error] [pid 39184:tid 39238] [client 173.244.55.22:61505] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:46.646810 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.22:61505] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI6BltZF9Zd_U7easB4mQAAAFY"]
[Sat Feb 28 08:42:47.522739 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.29:49061] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:47.963509 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.29:49061] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI6B6IAO5fN7BxyqcEmtwAAAMY"]
[Sat Feb 28 08:42:49.750950 2026] [proxy_fcgi:error] [pid 11791:tid 11815] [client 173.244.55.28:24207] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:50.193037 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.28:24207] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:50.635546 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.28:24207] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:51.532514 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.28:24207] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:52.863440 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.28:24207] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:53.303476 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.28:24207] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc.php"] [unique_id "aaI6DWuX5e1Q32gqxH0Q5wAAAQs"]
[Sat Feb 28 08:42:54.198988 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.23:22587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:54.648028 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.23:22587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:55.094170 2026] [proxy_fcgi:error] [pid 11791:tid 11808] [client 173.244.55.23:22587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:57.912439 2026] [proxy_fcgi:error] [pid 11791:tid 11815] [client 173.244.55.23:22587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:42:58.361721 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.23:22587] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI6EmuX5e1Q32gqxH0RRAAAAQk"]
[Sat Feb 28 08:42:59.242643 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.31:39137] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI6ExVE-FfM89u7BQaZWAAAAJI"]
[Sat Feb 28 08:43:00.118490 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.23:57237] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaI6FKIAO5fN7BxyqcEnSAAAAMQ"]
[Sat Feb 28 08:43:00.129463 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.23:57237] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:00.585827 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 173.244.55.23:57237] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:01.029901 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.23:57237] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI6FaIAO5fN7BxyqcEnUQAAAMw"]
[Sat Feb 28 08:43:01.901789 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:42297] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaI6FX6mbajs3bzQGyuRoAAAAVc"]
[Sat Feb 28 08:43:03.237163 2026] [proxy_fcgi:error] [pid 39185:tid 39262] [client 173.244.55.25:64657] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:03.680547 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.25:64657] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI6FxVE-FfM89u7BQaZegAAAJc"]
[Sat Feb 28 08:43:04.569507 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.30:51619] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI6GBVE-FfM89u7BQaZggAAAIc"]
[Sat Feb 28 08:43:05.459292 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.28:44371] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/fm.php"] [unique_id "aaI6GX6mbajs3bzQGyuRwwAAAUU"]
[Sat Feb 28 08:43:08.126553 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:59309] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI6HGuX5e1Q32gqxH0RwQAAAQ0"]
[Sat Feb 28 08:43:09.029176 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:60399] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aaI6HaIAO5fN7BxyqcEnzwAAANM"]
[Sat Feb 28 08:43:11.224841 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 173.244.55.25:21609] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:13.077265 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.25:21609] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI6IRCf4HvhVePw3LacJQAAAAg"]
[Sat Feb 28 08:43:13.955569 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.21:35355] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/index.php"] [unique_id "aaI6IRCf4HvhVePw3LacKwAAAA0"]
[Sat Feb 28 08:43:15.732886 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.23:26847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:16.616306 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.23:26847] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "aaI6JKIAO5fN7BxyqcEoKgAAAMU"]
[Sat Feb 28 08:43:17.499981 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.25:31339] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugins.php"] [unique_id "aaI6JRVE-FfM89u7BQaZ5AAAAIw"]
[Sat Feb 28 08:43:18.840505 2026] [proxy_fcgi:error] [pid 39185:tid 39255] [client 173.244.55.26:37847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:19.283914 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.26:37847] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI6JxVE-FfM89u7BQaZ_gAAAJQ"]
[Sat Feb 28 08:43:20.176982 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.23:25719] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI6KGuX5e1Q32gqxH0SkwAAAQ4"]
[Sat Feb 28 08:43:21.997557 2026] [proxy_fcgi:error] [pid 39184:tid 39226] [client 173.244.55.26:48697] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:22.448449 2026] [proxy_fcgi:error] [pid 39184:tid 39221] [client 173.244.55.26:48697] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:23.349452 2026] [proxy_fcgi:error] [pid 39184:tid 39231] [client 173.244.55.26:48697] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:24.247771 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.26:48697] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI6LFtZF9Zd_U7easB5eAAAAFc"]
[Sat Feb 28 08:43:25.128940 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.30:32311] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI6LaIAO5fN7BxyqcEongAAAM0"]
[Sat Feb 28 08:43:26.023644 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.21:29993] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:26.469540 2026] [proxy_fcgi:error] [pid 39292:tid 39294] [client 173.244.55.21:29993] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:27.363992 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.21:29993] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:27.805468 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.21:29993] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "aaI6L6IAO5fN7BxyqcEo2wAAANQ"]
[Sat Feb 28 08:43:29.551776 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.20:45483] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI6MaIAO5fN7BxyqcEo7QAAANQ"]
[Sat Feb 28 08:43:30.444919 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:43981] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI6Mn6mbajs3bzQGyuTXwAAAVA"]
[Sat Feb 28 08:43:32.207010 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.30:25843] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/about.php"] [unique_id "aaI6NGuX5e1Q32gqxH0TEgAAAQU"]
[Sat Feb 28 08:43:33.993940 2026] [proxy_fcgi:error] [pid 39292:tid 39306] [client 173.244.55.29:34347] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:34.453110 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.29:34347] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI6NqIAO5fN7BxyqcEpPAAAAMY"]
[Sat Feb 28 08:43:35.782100 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.26:58847] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI6N36mbajs3bzQGyuTqgAAAUU"]
[Sat Feb 28 08:43:36.676256 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 173.244.55.23:29393] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:37.119172 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.23:29393] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-atom.php"] [unique_id "aaI6ORCf4HvhVePw3LacgwAAABY"]
[Sat Feb 28 08:43:38.007569 2026] [proxy_fcgi:error] [pid 11791:tid 11800] [client 173.244.55.30:62665] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:38.446707 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.30:62665] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/index.php"] [unique_id "aaI6OmuX5e1Q32gqxH0TmAAAARE"]
[Sat Feb 28 08:43:39.802867 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 173.244.55.21:33249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:41.613303 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.21:33249] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/js/wp-login.php"] [unique_id "aaI6PaIAO5fN7BxyqcEpfgAAAMI"]
[Sat Feb 28 08:43:42.511797 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.21:33249] File does not exist: /home/measureyourbrand/public_html/measureyourbrand.com/worm.PhP
[Sat Feb 28 08:43:42.958848 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 173.244.55.21:33249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:43.403529 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 173.244.55.21:33249] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:44.299295 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.21:33249] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI6QKIAO5fN7BxyqcEpoAAAAM4"]
[Sat Feb 28 08:43:45.168888 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.29:47411] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI6QX6mbajs3bzQGyuUJwAAAUY"]
[Sat Feb 28 08:43:46.488772 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 173.244.55.29:47411] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:46.926253 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.29:47411] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin.php"] [unique_id "aaI6Qn6mbajs3bzQGyuUOgAAAUs"]
[Sat Feb 28 08:43:47.814473 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.29:65519] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin.php"] [unique_id "aaI6Q6IAO5fN7BxyqcEpyQAAAMg"]
[Sat Feb 28 08:43:48.716078 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 173.244.55.25:29811] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:49.609779 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 173.244.55.25:29811] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:50.513443 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 173.244.55.25:29811] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:50.953379 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.25:29811] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaI6Rn6mbajs3bzQGyuUZgAAAVM"]
[Sat Feb 28 08:43:52.264685 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.31:54437] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/defaults.php"] [unique_id "aaI6SGuX5e1Q32gqxH0UtgAAAQE"]
[Sat Feb 28 08:43:53.635731 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.20:48261] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:54.971842 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.20:48261] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/about.php"] [unique_id "aaI6ShVE-FfM89u7BQabCgAAAJE"]
[Sat Feb 28 08:43:57.634554 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.29:29399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:43:58.093678 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.29:29399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:00.326877 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 173.244.55.29:29399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:00.773783 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.29:29399] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:01.210614 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.29:29399] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI6UaIAO5fN7BxyqcEqRwAAANE"]
[Sat Feb 28 08:44:02.541457 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.30:51113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:02.995453 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 173.244.55.30:51113] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:03.436343 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.30:51113] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI6U2uX5e1Q32gqxH0VbQAAAQw"]
[Sat Feb 28 08:44:04.764915 2026] [proxy_fcgi:error] [pid 39185:tid 39251] [client 173.244.55.23:54253] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:05.201371 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.23:54253] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaI6VRVE-FfM89u7BQabUwAAAI4"]
[Sat Feb 28 08:44:06.085215 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.30:65007] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/style.php"] [unique_id "aaI6VqIAO5fN7BxyqcEqXgAAAMY"]
[Sat Feb 28 08:44:06.972678 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.30:46743] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/style.php"] [unique_id "aaI6VmuX5e1Q32gqxH0VsQAAAQE"]
[Sat Feb 28 08:44:08.751722 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 173.244.55.23:45691] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:09.193227 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.23:45691] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/about.php7"] [unique_id "aaI6WaIAO5fN7BxyqcEqhgAAAMk"]
[Sat Feb 28 08:44:10.073491 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.23:60609] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/about.php7"] [unique_id "aaI6WmuX5e1Q32gqxH0WHwAAAQ4"]
[Sat Feb 28 08:44:11.403466 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.25:55467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:12.314459 2026] [proxy_fcgi:error] [pid 11791:tid 11803] [client 173.244.55.25:55467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:12.757461 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.25:55467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:16.305054 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.25:55467] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaI6YGuX5e1Q32gqxH0WnwAAAQI"]
[Sat Feb 28 08:44:17.191159 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.30:33085] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contacts.php"] [unique_id "aaI6YWuX5e1Q32gqxH0WrQAAAQA"]
[Sat Feb 28 08:44:18.072798 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.30:54069] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contacts.php"] [unique_id "aaI6YhVE-FfM89u7BQabugAAAIo"]
[Sat Feb 28 08:44:18.966443 2026] [proxy_fcgi:error] [pid 11791:tid 11799] [client 173.244.55.29:54671] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:19.412751 2026] [proxy_fcgi:error] [pid 11791:tid 11812] [client 173.244.55.29:54671] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:19.855074 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.29:54671] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaI6Y2uX5e1Q32gqxH0W0AAAAQw"]
[Sat Feb 28 08:44:21.179878 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.26:60517] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaI6ZaIAO5fN7BxyqcEq-wAAAME"]
[Sat Feb 28 08:44:22.063387 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.23:54763] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/content.php"] [unique_id "aaI6Zn6mbajs3bzQGyuVrwAAAU8"]
[Sat Feb 28 08:44:22.936537 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.23:35391] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/content.php"] [unique_id "aaI6ZqIAO5fN7BxyqcErJgAAANE"]
[Sat Feb 28 08:44:23.807697 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.23:49459] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/content.php"] [unique_id "aaI6Z6IAO5fN7BxyqcErNwAAANA"]
[Sat Feb 28 08:44:25.141460 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.29:51167] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aaI6aWuX5e1Q32gqxH0XAwAAARY"]
[Sat Feb 28 08:44:26.026403 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.29:44509] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aaI6ahVE-FfM89u7BQacQQAAAI0"]
[Sat Feb 28 08:44:26.909456 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.26:60165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:28.268461 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.26:60165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:28.729704 2026] [proxy_fcgi:error] [pid 11791:tid 11804] [client 173.244.55.26:60165] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:29.170193 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.26:60165] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaI6bWuX5e1Q32gqxH0XTwAAAQM"]
[Sat Feb 28 08:44:30.051563 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.25:57537] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaI6bmuX5e1Q32gqxH0XbgAAAQg"]
[Sat Feb 28 08:44:33.191834 2026] [proxy_fcgi:error] [pid 39183:tid 39192] [client 173.244.55.29:45071] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:34.085879 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.29:45071] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaI6chCf4HvhVePw3LadbgAAABg"]
[Sat Feb 28 08:44:35.415503 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.26:47119] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aaI6cxCf4HvhVePw3LadeQAAABM"]
[Sat Feb 28 08:44:36.749871 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.28:34855] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aaI6dGuX5e1Q32gqxH0YAQAAAQs"]
[Sat Feb 28 08:44:37.640547 2026] [proxy_fcgi:error] [pid 11791:tid 11797] [client 173.244.55.31:50915] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:38.085441 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 173.244.55.31:50915] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:38.525081 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.31:50915] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaI6dmuX5e1Q32gqxH0YLgAAAQk"]
[Sat Feb 28 08:44:39.873456 2026] [proxy_fcgi:error] [pid 39183:tid 39216] [client 173.244.55.30:56983] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:40.328075 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 173.244.55.30:56983] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:41.225862 2026] [proxy_fcgi:error] [pid 39183:tid 39216] [client 173.244.55.30:56983] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:42.551859 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.30:56983] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaI6ehCf4HvhVePw3LadqgAAAAY"]
[Sat Feb 28 08:44:43.439997 2026] [proxy_fcgi:error] [pid 39185:tid 39252] [client 173.244.55.21:24767] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:44.773728 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.21:24767] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaI6fBVE-FfM89u7BQac8AAAAIM"]
[Sat Feb 28 08:44:46.109521 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.31:39935] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:49.427266 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.31:39935] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:49.874478 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.31:39935] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:50.768927 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.31:39935] [client 173.244.55.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.31, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI6gqIAO5fN7BxyqcEsUwAAAM0"]
[Sat Feb 28 08:44:51.651084 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.31:39935] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:52.975475 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.31:39935] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaI6hKIAO5fN7BxyqcEsfwAAANA"]
[Sat Feb 28 08:44:53.863231 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.29:30055] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/small.php"] [unique_id "aaI6haIAO5fN7BxyqcEshwAAAMg"]
[Sat Feb 28 08:44:54.758592 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.25:40203] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:55.211719 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.25:40203] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaI6hxVE-FfM89u7BQadRwAAAIY"]
[Sat Feb 28 08:44:56.134469 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.28:62555] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:59.160454 2026] [proxy_fcgi:error] [pid 11791:tid 11798] [client 173.244.55.28:62555] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:44:59.595706 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.28:62555] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/admin-footer.php"] [unique_id "aaI6i2uX5e1Q32gqxH0ZuwAAAQc"]
[Sat Feb 28 08:45:00.927925 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.30:20753] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaI6jGuX5e1Q32gqxH0Z1gAAAQY"]
[Sat Feb 28 08:45:01.816200 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.23:41627] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/themes/index.php"] [unique_id "aaI6jaIAO5fN7BxyqcEszQAAANc"]
[Sat Feb 28 08:45:03.160801 2026] [proxy_fcgi:error] [pid 22194:tid 22216] [client 173.244.55.26:32581] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:03.610454 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.26:32581] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:04.494926 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.26:32581] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaI6kH6mbajs3bzQGyuXywAAAUU"]
[Sat Feb 28 08:45:05.823700 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.25:25593] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaI6kaIAO5fN7BxyqcEtBQAAAM8"]
[Sat Feb 28 08:45:06.712483 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.22:61837] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:07.161445 2026] [proxy_fcgi:error] [pid 39292:tid 39313] [client 173.244.55.22:61837] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:08.056779 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.22:61837] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaI6lKIAO5fN7BxyqcEtKgAAAMU"]
[Sat Feb 28 08:45:08.942499 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 173.244.55.29:57263] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:09.829589 2026] [proxy_fcgi:error] [pid 22194:tid 22197] [client 173.244.55.29:57263] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:10.270008 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.29:57263] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaI6ln6mbajs3bzQGyuYIAAAAVI"]
[Sat Feb 28 08:45:11.583181 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.30:59113] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/db.php"] [unique_id "aaI6l36mbajs3bzQGyuYMQAAAUk"]
[Sat Feb 28 08:45:12.471723 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.29:32873] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaI6mFtZF9Zd_U7easB74gAAAEE"]
[Sat Feb 28 08:45:13.350800 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.29:23899] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaI6mX6mbajs3bzQGyuYQAAAAVQ"]
[Sat Feb 28 08:45:14.236222 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.30:38039] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaI6mmuX5e1Q32gqxH0azAAAAQA"]
[Sat Feb 28 08:45:15.108868 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.22:57351] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaI6m1tZF9Zd_U7easB79wAAAFY"]
[Sat Feb 28 08:45:15.999175 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.31:24839] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaI6m2uX5e1Q32gqxH0a2wAAAQw"]
[Sat Feb 28 08:45:17.762727 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.30:51797] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaI6nWuX5e1Q32gqxH0a9QAAAQo"]
[Sat Feb 28 08:45:18.634881 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.26:40179] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaI6nmuX5e1Q32gqxH0bDAAAAQg"]
[Sat Feb 28 08:45:19.522566 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.23:37205] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaI6nxVE-FfM89u7BQaefgAAAIo"]
[Sat Feb 28 08:45:20.417261 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.20:50685] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fog/management/index.php"] [unique_id "aaI6oGuX5e1Q32gqxH0bLwAAAQg"]
[Sat Feb 28 08:45:21.751688 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.25:56597] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaI6oX6mbajs3bzQGyuYmgAAAU8"]
[Sat Feb 28 08:45:23.065502 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.30:39727] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/wp-aespa.php"] [unique_id "aaI6oxVE-FfM89u7BQaeowAAAIw"]
[Sat Feb 28 08:45:24.378685 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.21:61367] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/options.php"] [unique_id "aaI6pGuX5e1Q32gqxH0bTQAAAQo"]
[Sat Feb 28 08:45:25.294285 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.23:44189] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:27.068981 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.23:44189] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI6pxVE-FfM89u7BQaeygAAAI4"]
[Sat Feb 28 08:45:29.324521 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 173.244.55.23:44189] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:29.776599 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.23:44189] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaI6qRVE-FfM89u7BQae5QAAAIQ"]
[Sat Feb 28 08:45:30.647613 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.29:35939] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaI6qltZF9Zd_U7easB8oAAAAEc"]
[Sat Feb 28 08:45:32.881515 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:33.344453 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:35.129215 2026] [proxy_fcgi:error] [pid 39185:tid 39255] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:35.574415 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:37.355624 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:37.801773 2026] [proxy_fcgi:error] [pid 39185:tid 39255] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:38.245909 2026] [proxy_fcgi:error] [pid 39185:tid 39246] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:38.700771 2026] [proxy_fcgi:error] [pid 39185:tid 39259] [client 173.244.55.26:47485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:39.140171 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.26:47485] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaI6sxVE-FfM89u7BQafPgAAAIM"]
[Sat Feb 28 08:45:40.020313 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.28:35697] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaI6tGuX5e1Q32gqxH0cHQAAAQw"]
[Sat Feb 28 08:45:40.910100 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.21:54377] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaI6tGuX5e1Q32gqxH0cOgAAARQ"]
[Sat Feb 28 08:45:41.799950 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.29:35579] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap/wso.php"] [unique_id "aaI6taIAO5fN7BxyqcEuoQAAAMs"]
[Sat Feb 28 08:45:43.121547 2026] [proxy_fcgi:error] [pid 11791:tid 11811] [client 173.244.55.28:26601] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:43.561487 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.28:26601] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-footer.php"] [unique_id "aaI6t2uX5e1Q32gqxH0cVgAAARI"]
[Sat Feb 28 08:45:44.456598 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.22:36973] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:45.358453 2026] [proxy_fcgi:error] [pid 39185:tid 39255] [client 173.244.55.22:36973] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:45:45.794407 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.22:36973] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ubh/install.php"] [unique_id "aaI6uRVE-FfM89u7BQafbgAAAJY"]
[Sat Feb 28 08:45:47.128309 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.29:41235] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaI6uxCf4HvhVePw3LaevAAAABc"]
[Sat Feb 28 08:45:48.014999 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.28:27757] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaI6vFtZF9Zd_U7easB9BgAAAFI"]
[Sat Feb 28 08:45:48.889021 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.25:41301] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaI6vKIAO5fN7BxyqcEu6QAAAME"]
[Sat Feb 28 08:45:49.768130 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.22:56115] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfour/content-index.php"] [unique_id "aaI6vX6mbajs3bzQGyuaUAAAAVA"]
[Sat Feb 28 08:45:50.653479 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.22:39285] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfour/content-index.php"] [unique_id "aaI6vn6mbajs3bzQGyuaXQAAAUI"]
[Sat Feb 28 08:45:53.324593 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.26:21295] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaI6wWuX5e1Q32gqxH0c-wAAAQk"]
[Sat Feb 28 08:45:54.210235 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.30:40643] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/media-widget-vide02.php"] [unique_id "aaI6wltZF9Zd_U7easB9PQAAAFc"]
[Sat Feb 28 08:45:55.096477 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.30:61909] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/media-widget-vide02.php"] [unique_id "aaI6w1tZF9Zd_U7easB9RgAAAFA"]
[Sat Feb 28 08:45:56.432785 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.21:63411] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaI6xGuX5e1Q32gqxH0dPgAAAQY"]
[Sat Feb 28 08:45:58.192542 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.20:58051] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaI6xltZF9Zd_U7easB9WQAAAE8"]
[Sat Feb 28 08:45:59.967486 2026] [proxy_fcgi:error] [pid 22194:tid 22217] [client 173.244.55.31:53039] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:03.957955 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.31:53039] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aaI6y36mbajs3bzQGyubPQAAAUI"]
[Sat Feb 28 08:46:04.851458 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 173.244.55.31:61403] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:05.746436 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.31:61403] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "aaI6zX6mbajs3bzQGyubUwAAAUM"]
[Sat Feb 28 08:46:07.521493 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.22:43093] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:08.859303 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:43093] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaI60GuX5e1Q32gqxH0eLQAAARI"]
[Sat Feb 28 08:46:09.738219 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.25:35613] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:10.179551 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.25:35613] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaI60hVE-FfM89u7BQagiQAAAIo"]
[Sat Feb 28 08:46:11.970175 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:20487] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaI6036mbajs3bzQGyubqQAAAU4"]
[Sat Feb 28 08:46:13.298924 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.30:22113] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/info.php"] [unique_id "aaI61aIAO5fN7BxyqcEwAAAAAMs"]
[Sat Feb 28 08:46:14.211751 2026] [proxy_fcgi:error] [pid 39292:tid 39309] [client 173.244.55.20:23375] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:15.096287 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.20:23375] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/navi.php"] [unique_id "aaI616IAO5fN7BxyqcEwLQAAAMM"]
[Sat Feb 28 08:46:16.424362 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.29:37829] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaI62KIAO5fN7BxyqcEwRAAAAMM"]
[Sat Feb 28 08:46:19.536679 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.28:59521] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaI626IAO5fN7BxyqcEwiAAAAMM"]
[Sat Feb 28 08:46:20.882250 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.21:52211] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:21.322201 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.21:52211] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaI63aIAO5fN7BxyqcEwqgAAAM8"]
[Sat Feb 28 08:46:22.199652 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.28:40435] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaI63muX5e1Q32gqxH0fFQAAAQ8"]
[Sat Feb 28 08:46:23.975542 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.23:34927] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/autoload_classmap.php"] [unique_id "aaI632uX5e1Q32gqxH0fPAAAARA"]
[Sat Feb 28 08:46:26.191819 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.28:53861] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaI64qIAO5fN7BxyqcEw5gAAAMY"]
[Sat Feb 28 08:46:27.096298 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 173.244.55.30:44711] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:28.894468 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 173.244.55.30:44711] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:29.334412 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.30:44711] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaI65VtZF9Zd_U7easB-kwAAAEk"]
[Sat Feb 28 08:46:31.093787 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.28:37127] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfusm.php"] [unique_id "aaI651tZF9Zd_U7easB-pwAAAEY"]
[Sat Feb 28 08:46:31.966343 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.25:28069] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfusm.php"] [unique_id "aaI65xVE-FfM89u7BQahSQAAAIs"]
[Sat Feb 28 08:46:32.851299 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.21:42505] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfusm.php"] [unique_id "aaI66GuX5e1Q32gqxH0f7wAAAQU"]
[Sat Feb 28 08:46:33.745441 2026] [proxy_fcgi:error] [pid 22194:tid 22208] [client 173.244.55.26:47367] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:34.621489 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.26:47367] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaI66n6mbajs3bzQGyuc4gAAAUA"]
[Sat Feb 28 08:46:35.505857 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:39663] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaI6636mbajs3bzQGyuc7AAAAUc"]
[Sat Feb 28 08:46:37.263301 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.29:43779] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaI67aIAO5fN7BxyqcExkwAAAMU"]
[Sat Feb 28 08:46:39.468663 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.29:22299] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/install.php"] [unique_id "aaI67xVE-FfM89u7BQahpAAAAIU"]
[Sat Feb 28 08:46:40.353227 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.22:32217] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaI68FtZF9Zd_U7easB_BgAAAFY"]
[Sat Feb 28 08:46:41.700098 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.23:20653] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_SpaceTn.php"] [unique_id "aaI68X6mbajs3bzQGyudYwAAAU8"]
[Sat Feb 28 08:46:42.589829 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.31:38019] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:44.830232 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.31:38019] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/category-double.php"] [unique_id "aaI69BVE-FfM89u7BQahyQAAAI8"]
[Sat Feb 28 08:46:46.608241 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.21:61933] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/db.php"] [unique_id "aaI69n6mbajs3bzQGyudwgAAAUI"]
[Sat Feb 28 08:46:47.482445 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.30:49301] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaI692uX5e1Q32gqxH0g7QAAARU"]
[Sat Feb 28 08:46:48.815444 2026] [proxy_fcgi:error] [pid 39185:tid 39265] [client 173.244.55.20:60937] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:52.297892 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.20:60937] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaI6_BVE-FfM89u7BQah_gAAAJQ"]
[Sat Feb 28 08:46:53.623809 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.25:58037] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaI6_aIAO5fN7BxyqcEyOwAAANc"]
[Sat Feb 28 08:46:56.740762 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.29:61461] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaI7ABCf4HvhVePw3LagOQAAAAw"]
[Sat Feb 28 08:46:57.626519 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.22:52749] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aaI7AVtZF9Zd_U7easB_yQAAAEE"]
[Sat Feb 28 08:46:58.977154 2026] [proxy_fcgi:error] [pid 22194:tid 22213] [client 173.244.55.30:57511] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:46:59.417792 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.30:57511] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaI7A36mbajs3bzQGyuepAAAAUE"]
[Sat Feb 28 08:47:01.191089 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.21:41011] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaI7BRVE-FfM89u7BQaiQgAAAIY"]
[Sat Feb 28 08:47:02.069842 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.28:55701] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/pdf.php"] [unique_id "aaI7BmuX5e1Q32gqxH0h7gAAAQk"]
[Sat Feb 28 08:47:02.945513 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.29:30739] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/pdf.php"] [unique_id "aaI7BltZF9Zd_U7easB_7wAAAEE"]
[Sat Feb 28 08:47:04.267660 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.21:54745] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/as.php"] [unique_id "aaI7CBVE-FfM89u7BQaiYQAAAI0"]
[Sat Feb 28 08:47:05.608975 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.30:34551] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaI7CWuX5e1Q32gqxH0iKgAAARI"]
[Sat Feb 28 08:47:06.496789 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.29:37549] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "aaI7Cn6mbajs3bzQGyufEwAAAVQ"]
[Sat Feb 28 08:47:07.369198 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.25:25069] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/db.php"] [unique_id "aaI7C2uX5e1Q32gqxH0iYwAAAQY"]
[Sat Feb 28 08:47:08.240880 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.20:58633] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/fan.php"] [unique_id "aaI7DFtZF9Zd_U7easCAHQAAAEA"]
[Sat Feb 28 08:47:11.774780 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:38165] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaI7D2uX5e1Q32gqxH0i-AAAARY"]
[Sat Feb 28 08:47:13.982172 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:40201] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "aaI7EX6mbajs3bzQGyufiQAAAVY"]
[Sat Feb 28 08:47:14.863647 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.20:56415] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/alam.php"] [unique_id "aaI7EmuX5e1Q32gqxH0jagAAARQ"]
[Sat Feb 28 08:47:16.206084 2026] [proxy_fcgi:error] [pid 22194:tid 22209] [client 173.244.55.22:54097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:47:17.965594 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 173.244.55.22:54097] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:47:18.410702 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.22:54097] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaI7Fn6mbajs3bzQGyuf0gAAAUA"]
[Sat Feb 28 08:47:20.628933 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.31:31457] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaI7GKIAO5fN7BxyqcEzawAAAMg"]
[Sat Feb 28 08:47:21.514504 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.22:49695] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:47:24.186903 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.22:49695] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaI7HKIAO5fN7BxyqcEzrwAAAM8"]
[Sat Feb 28 08:47:25.499155 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.26:31651] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaI7HX6mbajs3bzQGyugawAAAVQ"]
[Sat Feb 28 08:47:26.375856 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.28:29925] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aaI7Hn6mbajs3bzQGyugdgAAAUI"]
[Sat Feb 28 08:47:27.255640 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.25:32283] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aaI7H6IAO5fN7BxyqcEz2gAAANY"]
[Sat Feb 28 08:47:28.135081 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.25:54791] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aaI7IFtZF9Zd_U7easCAfQAAAE0"]
[Sat Feb 28 08:47:29.007231 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.21:62897] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/cloud.php"] [unique_id "aaI7IVtZF9Zd_U7easCAgwAAAEk"]
[Sat Feb 28 08:47:30.312849 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.30:25199] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/"] [unique_id "aaI7In6mbajs3bzQGyugzQAAAVI"]
[Sat Feb 28 08:47:32.083682 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.31:31213] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI7JFtZF9Zd_U7easCApAAAAEI"]
[Sat Feb 28 08:47:36.205247 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.30:48727] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/"] [unique_id "aaI7KH6mbajs3bzQGyuhcAAAAUY"]
[Sat Feb 28 08:47:37.534825 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.26:57761] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/"] [unique_id "aaI7KX6mbajs3bzQGyuhjgAAAU4"]
[Sat Feb 28 08:47:38.857608 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.21:44321] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI7KmuX5e1Q32gqxH0lZAAAARE"]
[Sat Feb 28 08:47:39.758614 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.21:20219] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI7K2uX5e1Q32gqxH0lcgAAARg"]
[Sat Feb 28 08:47:40.638266 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.21:34889] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI7LGuX5e1Q32gqxH0ljAAAAQE"]
[Sat Feb 28 08:47:42.853203 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.23:43025] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/"] [unique_id "aaI7LmuX5e1Q32gqxH0lwQAAAQY"]
[Sat Feb 28 08:47:45.503122 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.22:32133] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/id3/"] [unique_id "aaI7MVtZF9Zd_U7easCA6AAAAEE"]
[Sat Feb 28 08:47:48.167929 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.21:46303] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI7NGuX5e1Q32gqxH0mngAAAQE"]
[Sat Feb 28 08:47:49.049367 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.26:30377] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI7NaIAO5fN7BxyqcE0agAAAMQ"]
[Sat Feb 28 08:47:51.710594 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.25:36085] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7N6IAO5fN7BxyqcE0hAAAAMA"]
[Sat Feb 28 08:47:52.608510 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.25:56777] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI7OH6mbajs3bzQGyuiDwAAAUg"]
[Sat Feb 28 08:47:56.995588 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.31:60391] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aaI7PH6mbajs3bzQGyuiaQAAAUg"]
[Sat Feb 28 08:47:57.872689 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.29:25139] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aaI7PWuX5e1Q32gqxH0nfgAAAQU"]
[Sat Feb 28 08:48:00.096884 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.21:54437] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI7QGuX5e1Q32gqxH0nxAAAAQI"]
[Sat Feb 28 08:48:00.977559 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.21:42309] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI7QH6mbajs3bzQGyuiqwAAAUI"]
[Sat Feb 28 08:48:04.093316 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.28:31097] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "aaI7RGuX5e1Q32gqxH0oCwAAAQo"]
[Sat Feb 28 08:48:05.418373 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:52695] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/"] [unique_id "aaI7RWuX5e1Q32gqxH0oKAAAARY"]
[Sat Feb 28 08:48:06.749935 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.22:55139] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/"] [unique_id "aaI7RhVE-FfM89u7BQakKAAAAJI"]
[Sat Feb 28 08:48:08.969717 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.29:54923] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/"] [unique_id "aaI7SFtZF9Zd_U7easCBlQAAAEU"]
[Sat Feb 28 08:48:12.987409 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.22:39845] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/"] [unique_id "aaI7TH6mbajs3bzQGyujhgAAAVE"]
[Sat Feb 28 08:48:14.741663 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.30:53875] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/mu-plugins/"] [unique_id "aaI7TmuX5e1Q32gqxH0o5wAAARU"]
[Sat Feb 28 08:48:21.861643 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.20:37499] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aaI7VX6mbajs3bzQGyukUgAAAVY"]
[Sat Feb 28 08:48:23.649498 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.29:45711] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "aaI7V6IAO5fN7BxyqcE2GQAAAMU"]
[Sat Feb 28 08:48:26.828524 2026] [proxy_fcgi:error] [pid 39184:tid 39241] [client 173.244.55.20:40969] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:27.275047 2026] [proxy_fcgi:error] [pid 39184:tid 39229] [client 173.244.55.20:40969] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:27.728650 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 173.244.55.20:40969] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:28.173501 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.20:40969] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock360.php"] [unique_id "aaI7XFtZF9Zd_U7easCCGwAAAEc"]
[Sat Feb 28 08:48:28.489930 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.20:25237] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/includes/wp-admin/js/"] [unique_id "aaI7XH6mbajs3bzQGyuk4AAAAUI"]
[Sat Feb 28 08:48:29.057271 2026] [proxy_fcgi:error] [pid 22194:tid 22219] [client 173.244.55.26:47613] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:29.501539 2026] [proxy_fcgi:error] [pid 22194:tid 22199] [client 173.244.55.26:47613] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:29.957270 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.26:47613] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aaI7XX6mbajs3bzQGyuk_AAAAVg"]
[Sat Feb 28 08:48:30.838992 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.28:20949] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aaI7XqIAO5fN7BxyqcE2dQAAAME"]
[Sat Feb 28 08:48:31.179133 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.22:33813] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI7XxCf4HvhVePw3Lah1gAAAAU"]
[Sat Feb 28 08:48:31.725583 2026] [proxy_fcgi:error] [pid 11791:tid 11794] [client 173.244.55.29:36585] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:32.168492 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:36585] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaI7YGuX5e1Q32gqxH0qigAAAQ8"]
[Sat Feb 28 08:48:33.053102 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:42117] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aaI7YWuX5e1Q32gqxH0qqgAAAQ8"]
[Sat Feb 28 08:48:33.946527 2026] [proxy_fcgi:error] [pid 39292:tid 39300] [client 173.244.55.21:35587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:34.394289 2026] [proxy_fcgi:error] [pid 39292:tid 39305] [client 173.244.55.21:35587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:34.838851 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.21:35587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:35.290014 2026] [proxy_fcgi:error] [pid 39292:tid 39297] [client 173.244.55.21:35587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:36.078930 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.23:29305] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/"] [unique_id "aaI7ZKIAO5fN7BxyqcE21QAAAMI"]
[Sat Feb 28 08:48:36.182469 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 173.244.55.21:35587] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:36.629882 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.21:35587] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/robots.php"] [unique_id "aaI7ZKIAO5fN7BxyqcE22QAAAMk"]
[Sat Feb 28 08:48:37.514522 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.26:54737] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/robots.php"] [unique_id "aaI7ZaIAO5fN7BxyqcE24gAAAMY"]
[Sat Feb 28 08:48:37.859251 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.20:20841] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI7ZRVE-FfM89u7BQalKQAAAIs"]
[Sat Feb 28 08:48:38.392658 2026] [proxy_fcgi:error] [pid 39185:tid 39249] [client 173.244.55.25:37395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:38.730249 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.28:58933] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI7ZltZF9Zd_U7easCCVAAAAEo"]
[Sat Feb 28 08:48:38.830176 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 173.244.55.25:37395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:39.273208 2026] [proxy_fcgi:error] [pid 39185:tid 39257] [client 173.244.55.25:37395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:39.711556 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 173.244.55.25:37395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:40.150868 2026] [proxy_fcgi:error] [pid 39185:tid 39264] [client 173.244.55.25:37395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:40.593674 2026] [proxy_fcgi:error] [pid 39185:tid 39248] [client 173.244.55.25:37395] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:41.045880 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.25:37395] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaI7aRVE-FfM89u7BQalRwAAAI8"]
[Sat Feb 28 08:48:41.394487 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.29:26319] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaI7aaIAO5fN7BxyqcE3GwAAAM0"]
[Sat Feb 28 08:48:41.915207 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.21:64653] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aaI7aRCf4HvhVePw3Lah-wAAABI"]
[Sat Feb 28 08:48:42.804475 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 173.244.55.29:30483] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:43.252898 2026] [proxy_fcgi:error] [pid 22194:tid 22214] [client 173.244.55.29:30483] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:48:43.627707 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.28:29215] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI7a6IAO5fN7BxyqcE3MgAAAMA"]
[Sat Feb 28 08:48:43.714136 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.29:30483] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aaI7a36mbajs3bzQGyulzwAAAUM"]
[Sat Feb 28 08:48:44.517798 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.31:56819] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI7bKIAO5fN7BxyqcE3PgAAAMo"]
[Sat Feb 28 08:48:45.932510 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.21:28271] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aaI7baIAO5fN7BxyqcE3WAAAAMA"]
[Sat Feb 28 08:48:46.807871 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.31:44565] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aaI7bqIAO5fN7BxyqcE3ZwAAANQ"]
[Sat Feb 28 08:48:47.642196 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.26:52785] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aaI7b1tZF9Zd_U7easCCiQAAAE0"]
[Sat Feb 28 08:48:47.697646 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.31:29907] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aaI7bxVE-FfM89u7BQaliwAAAIA"]
[Sat Feb 28 08:48:49.015077 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.26:46495] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI7cWuX5e1Q32gqxH0rwgAAAQc"]
[Sat Feb 28 08:48:49.432041 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.21:42955] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/home/"] [unique_id "aaI7cWuX5e1Q32gqxH0r2wAAAQY"]
[Sat Feb 28 08:48:49.893787 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.22:28285] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI7cWuX5e1Q32gqxH0r8wAAAQU"]
[Sat Feb 28 08:48:51.202607 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:43287] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/owfsmac/"] [unique_id "aaI7c2uX5e1Q32gqxH0sLAAAARc"]
[Sat Feb 28 08:48:51.698526 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.28:53367] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/bootstrap.php"] [unique_id "aaI7c6IAO5fN7BxyqcE3nAAAANA"]
[Sat Feb 28 08:48:52.090721 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.23:23837] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/owfsmac/"] [unique_id "aaI7dBVE-FfM89u7BQalpAAAAJc"]
[Sat Feb 28 08:48:55.194722 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.30:65095] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-diambar/includes/"] [unique_id "aaI7d36mbajs3bzQGyumfAAAAUw"]
[Sat Feb 28 08:48:55.248165 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.31:36603] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aaI7d36mbajs3bzQGyumfwAAAVc"]
[Sat Feb 28 08:48:56.143259 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.31:34641] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aaI7eFtZF9Zd_U7easCCpgAAAFY"]
[Sat Feb 28 08:48:56.519786 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.25:22663] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-freeform/"] [unique_id "aaI7eH6mbajs3bzQGyumnAAAAVA"]
[Sat Feb 28 08:48:57.406055 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.21:32957] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-freeform/"] [unique_id "aaI7eWuX5e1Q32gqxH0spwAAARg"]
[Sat Feb 28 08:48:57.479133 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.28:36599] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI7eX6mbajs3bzQGyumuAAAAUs"]
[Sat Feb 28 08:48:58.283325 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.31:21595] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-freeform/"] [unique_id "aaI7emuX5e1Q32gqxH0sxwAAARI"]
[Sat Feb 28 08:48:58.825516 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:64727] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aaI7emuX5e1Q32gqxH0s0wAAAQo"]
[Sat Feb 28 08:49:00.597899 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.30:21223] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI7fH6mbajs3bzQGyum5QAAAU4"]
[Sat Feb 28 08:49:01.926524 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.20:25147] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aaI7fVtZF9Zd_U7easCCtAAAAE8"]
[Sat Feb 28 08:49:03.222064 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.23:53735] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/rishi/"] [unique_id "aaI7fxVE-FfM89u7BQal-gAAAIU"]
[Sat Feb 28 08:49:03.260917 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.22:42499] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI7fxVE-FfM89u7BQal_AAAAIg"]
[Sat Feb 28 08:49:04.145861 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.30:48901] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI7gKIAO5fN7BxyqcE4TAAAANQ"]
[Sat Feb 28 08:49:05.031388 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.30:58473] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI7gRVE-FfM89u7BQamDgAAAJM"]
[Sat Feb 28 08:49:06.366471 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 173.244.55.23:65467] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:49:06.773133 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.26:36385] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/zakra/"] [unique_id "aaI7gltZF9Zd_U7easCC1wAAAFc"]
[Sat Feb 28 08:49:07.696957 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.23:65467] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aaI7gxVE-FfM89u7BQamMAAAAJQ"]
[Sat Feb 28 08:49:09.041313 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.23:24815] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aaI7hX6mbajs3bzQGyunaAAAAU0"]
[Sat Feb 28 08:49:09.897278 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.25:41755] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/apikey/"] [unique_id "aaI7hX6mbajs3bzQGyuneQAAAVY"]
[Sat Feb 28 08:49:10.357441 2026] [proxy_fcgi:error] [pid 39292:tid 39295] [client 173.244.55.26:44435] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:49:10.772288 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.30:57037] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/apikey/"] [unique_id "aaI7hqIAO5fN7BxyqcE4hwAAANE"]
[Sat Feb 28 08:49:10.792333 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.26:44435] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aaI7hqIAO5fN7BxyqcE4igAAAMk"]
[Sat Feb 28 08:49:12.137453 2026] [proxy_fcgi:error] [pid 39183:tid 39212] [client 173.244.55.26:41207] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:49:12.575499 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.29:43045] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/"] [unique_id "aaI7iBVE-FfM89u7BQamUwAAAIM"]
[Sat Feb 28 08:49:13.467567 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.26:41207] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/elementor/wp-wjvngrh.php"] [unique_id "aaI7iRCf4HvhVePw3LaiqAAAAA4"]
[Sat Feb 28 08:49:13.906065 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.31:39295] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aaI7iX6mbajs3bzQGyunqQAAAVI"]
[Sat Feb 28 08:49:14.775322 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.28:21215] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aaI7iqIAO5fN7BxyqcE4vQAAANU"]
[Sat Feb 28 08:49:15.219134 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.30:56539] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI7i2uX5e1Q32gqxH0t-wAAARE"]
[Sat Feb 28 08:49:15.662046 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.26:64033] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aaI7i2uX5e1Q32gqxH0uBgAAAQw"]
[Sat Feb 28 08:49:16.545091 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.28:27939] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/"] [unique_id "aaI7jH6mbajs3bzQGyun4wAAAUA"]
[Sat Feb 28 08:49:16.562616 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.28:35933] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI7jKIAO5fN7BxyqcE4yQAAAMY"]
[Sat Feb 28 08:49:17.441965 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.31:51963] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI7jWuX5e1Q32gqxH0uQQAAAQ8"]
[Sat Feb 28 08:49:18.313880 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.31:55601] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI7jhCf4HvhVePw3LaiqQAAABU"]
[Sat Feb 28 08:49:19.195158 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.23:60049] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI7j2uX5e1Q32gqxH0uewAAAQQ"]
[Sat Feb 28 08:49:19.659193 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:49301] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/includes/"] [unique_id "aaI7j2uX5e1Q32gqxH0ujgAAARc"]
[Sat Feb 28 08:49:20.080417 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.30:64807] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI7kGuX5e1Q32gqxH0ungAAAQM"]
[Sat Feb 28 08:49:21.418220 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.25:60097] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI7kWuX5e1Q32gqxH0u2wAAAQs"]
[Sat Feb 28 08:49:22.314205 2026] [proxy_fcgi:error] [pid 22194:tid 22202] [client 173.244.55.21:54989] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:49:22.735440 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.25:64635] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaI7kmuX5e1Q32gqxH0vFgAAARg"]
[Sat Feb 28 08:49:22.751197 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.21:54989] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "aaI7kn6mbajs3bzQGyuoHgAAAVg"]
[Sat Feb 28 08:49:23.610533 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.26:38349] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaI7k6IAO5fN7BxyqcE4-wAAAMc"]
[Sat Feb 28 08:49:24.103591 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.29:64473] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "aaI7lKIAO5fN7BxyqcE5AQAAAMQ"]
[Sat Feb 28 08:49:24.492554 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.31:29897] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaI7lBVE-FfM89u7BQamkQAAAJA"]
[Sat Feb 28 08:49:24.990829 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.29:27411] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI7lBVE-FfM89u7BQamlwAAAIA"]
[Sat Feb 28 08:49:25.384725 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.31:29463] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaI7lRCf4HvhVePw3LaiyAAAABA"]
[Sat Feb 28 08:49:25.861771 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.20:23257] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI7lWuX5e1Q32gqxH0vUwAAAQg"]
[Sat Feb 28 08:49:26.270673 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.26:64975] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aaI7lmuX5e1Q32gqxH0vWQAAAQw"]
[Sat Feb 28 08:49:26.745771 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.31:36611] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI7lltZF9Zd_U7easCDTAAAAFE"]
[Sat Feb 28 08:49:27.638359 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:42845] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/bypass.php"] [unique_id "aaI7l6IAO5fN7BxyqcE5LwAAAMc"]
[Sat Feb 28 08:49:28.511692 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.28:41085] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aaI7mKIAO5fN7BxyqcE5PwAAAMc"]
[Sat Feb 28 08:49:30.725949 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.22:39259] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI7mqIAO5fN7BxyqcE5bwAAAMQ"]
[Sat Feb 28 08:49:37.429191 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.23:46165] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI7oaIAO5fN7BxyqcE5xAAAAMY"]
[Sat Feb 28 08:49:38.312255 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.26:55937] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI7oqIAO5fN7BxyqcE50gAAANg"]
[Sat Feb 28 08:49:39.184318 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.26:28057] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI7o2uX5e1Q32gqxH0wBQAAAQ8"]
[Sat Feb 28 08:49:40.962820 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.30:56311] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI7pH6mbajs3bzQGyupIQAAAUo"]
[Sat Feb 28 08:49:41.842785 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.22:21299] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI7paIAO5fN7BxyqcE59gAAAM4"]
[Sat Feb 28 08:49:46.297099 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.29:30583] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/"] [unique_id "aaI7qhVE-FfM89u7BQaniwAAAJA"]
[Sat Feb 28 08:49:49.376988 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.25:21243] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "aaI7rRVE-FfM89u7BQanxwAAAJU"]
[Sat Feb 28 08:50:02.823798 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.23:26521] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/image/"] [unique_id "aaI7uhCf4HvhVePw3LajsAAAABQ"]
[Sat Feb 28 08:50:10.857283 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.21:38869] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/components/"] [unique_id "aaI7wmuX5e1Q32gqxH0yIgAAAQ4"]
[Sat Feb 28 08:50:17.551244 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.23:60099] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/languages/"] [unique_id "aaI7yRVE-FfM89u7BQapAQAAAIQ"]
[Sat Feb 28 08:50:18.876151 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:31945] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI7yn6mbajs3bzQGyurDwAAAVA"]
[Sat Feb 28 08:50:19.754339 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.22:53907] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI7y6IAO5fN7BxyqcE7-AAAAM0"]
[Sat Feb 28 08:50:28.465716 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.30:39367] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaI71KIAO5fN7BxyqcE8ZAAAANA"]
[Sat Feb 28 08:50:33.404450 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.26:37379] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/cekidot/"] [unique_id "aaI72RCf4HvhVePw3LakWgAAAAQ"]
[Sat Feb 28 08:50:40.544282 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:30877] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/revslider/templates/immersion-photography/"] [unique_id "aaI74GuX5e1Q32gqxH0z8gAAAQ0"]
[Sat Feb 28 08:50:43.189955 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.21:61505] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/alera/"] [unique_id "aaI742uX5e1Q32gqxH00FwAAARA"]
[Sat Feb 28 08:50:53.060958 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:44707] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/includes/"] [unique_id "aaI77VtZF9Zd_U7easCGHwAAAEg"]
[Sat Feb 28 08:50:54.396792 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.30:47191] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/"] [unique_id "aaI77muX5e1Q32gqxH00rAAAARM"]
[Sat Feb 28 08:50:58.839081 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.25:23551] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/"] [unique_id "aaI78hVE-FfM89u7BQaqjwAAAJQ"]
[Sat Feb 28 08:50:59.719979 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.30:52207] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/"] [unique_id "aaI7836mbajs3bzQGyutRAAAAUE"]
[Sat Feb 28 08:51:01.068782 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.26:37219] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "aaI79RVE-FfM89u7BQaqrgAAAIs"]
[Sat Feb 28 08:51:01.954465 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.31:54523] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "aaI79RCf4HvhVePw3LalBwAAAAc"]
[Sat Feb 28 08:51:13.539404 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.21:51105] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/x/"] [unique_id "aaI8AWuX5e1Q32gqxH02XgAAARU"]
[Sat Feb 28 08:51:14.423788 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.28:37565] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/x/"] [unique_id "aaI8AhVE-FfM89u7BQarOgAAAIE"]
[Sat Feb 28 08:51:15.312943 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.23:35625] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/x/"] [unique_id "aaI8A6IAO5fN7BxyqcE-MwAAANY"]
[Sat Feb 28 08:51:16.183083 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.28:62555] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/x/"] [unique_id "aaI8BGuX5e1Q32gqxH02iAAAARI"]
[Sat Feb 28 08:51:21.120223 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.20:50337] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "aaI8CVtZF9Zd_U7easCHGwAAAFg"]
[Sat Feb 28 09:41:16.610780 2026] [:error] [pid 11791:tid 11804] [client 82.29.157.105:50628] [client 82.29.157.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaJHvGuX5e1Q32gqxH2npgAAAQs"]
[Sat Feb 28 10:39:30.078046 2026] [:error] [pid 52460:tid 52482] [client 162.62.213.165:58624] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaJVYrLWOogAgHGh62Sb2gAAAZM"]
[Sat Feb 28 11:06:48.416822 2026] [proxy_fcgi:error] [pid 39185:tid 39258] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:48.556417 2026] [proxy_fcgi:error] [pid 39185:tid 39267] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:48.836324 2026] [proxy_fcgi:error] [pid 39185:tid 39269] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:48.978151 2026] [proxy_fcgi:error] [pid 39185:tid 39268] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:49.274177 2026] [proxy_fcgi:error] [pid 39185:tid 39266] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:49.417411 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:49.557573 2026] [proxy_fcgi:error] [pid 39185:tid 39263] [client 40.80.89.74:5485] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:06:49.832770 2026] [:error] [pid 39185:tid 39257] [client 40.80.89.74:5485] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaJbyRVE-FfM89u7BQZh0AAAAIs"]
[Sat Feb 28 11:06:50.380541 2026] [:error] [pid 39185:tid 39252] [client 40.80.89.74:5491] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaJbyhVE-FfM89u7BQZh0wAAAIY"]
[Sat Feb 28 11:06:50.928820 2026] [:error] [pid 39184:tid 39222] [client 40.80.89.74:5637] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaJbyltZF9Zd_U7easDAQQAAAEM"]
[Sat Feb 28 11:06:51.476038 2026] [:error] [pid 11791:tid 11805] [client 40.80.89.74:5447] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaJby2uX5e1Q32gqxH3bSQAAAQw"]
[Sat Feb 28 11:11:50.008561 2026] [autoindex:error] [pid 11791:tid 11811] [client 157.230.20.6:55162] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 11:36:53.116698 2026] [proxy_fcgi:error] [pid 22194:tid 22211] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:53.326993 2026] [proxy_fcgi:error] [pid 22194:tid 22220] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:53.536995 2026] [proxy_fcgi:error] [pid 22194:tid 22200] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:53.746001 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:53.956002 2026] [proxy_fcgi:error] [pid 22194:tid 22203] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:54.165456 2026] [proxy_fcgi:error] [pid 22194:tid 22210] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:54.376599 2026] [proxy_fcgi:error] [pid 22194:tid 22201] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:54.585601 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:54.794617 2026] [proxy_fcgi:error] [pid 22194:tid 22218] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:55.003262 2026] [proxy_fcgi:error] [pid 22194:tid 22205] [client 20.220.61.156:33076] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 11:36:55.219060 2026] [:error] [pid 22194:tid 22213] [client 20.220.61.156:33076] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaJi136mbajs3bzQGysmxQAAAVE"]
[Sat Feb 28 11:36:55.633329 2026] [:error] [pid 52460:tid 52476] [client 20.220.61.156:33080] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaJi17LWOogAgHGh62TcUgAAAY0"]
[Sat Feb 28 11:36:56.046836 2026] [:error] [pid 39185:tid 39246] [client 20.220.61.156:32602] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaJi2BVE-FfM89u7BQZ6DwAAAIA"]
[Sat Feb 28 11:36:56.455694 2026] [:error] [pid 39184:tid 39229] [client 20.220.61.156:32605] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaJi2FtZF9Zd_U7easDG3QAAAEo"]
[Sat Feb 28 11:36:56.871909 2026] [:error] [pid 39184:tid 39225] [client 20.220.61.156:33079] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaJi2FtZF9Zd_U7easDG3gAAAEY"]
[Sat Feb 28 11:36:57.285814 2026] [:error] [pid 11791:tid 11806] [client 20.220.61.156:32585] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaJi2WuX5e1Q32gqxH3sdQAAAQ0"]
[Sat Feb 28 11:36:57.697002 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:32581] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaJi2bLWOogAgHGh62TcWAAAAYM"]
[Sat Feb 28 11:36:58.109729 2026] [:error] [pid 39292:tid 39306] [client 20.220.61.156:32587] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaJi2qIAO5fN7BxyqcGyTwAAAMw"]
[Sat Feb 28 11:36:58.520110 2026] [:error] [pid 39292:tid 39317] [client 20.220.61.156:33027] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaJi2qIAO5fN7BxyqcGyUgAAANc"]
[Sat Feb 28 11:36:58.935759 2026] [:error] [pid 39292:tid 39304] [client 20.220.61.156:32607] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaJi2qIAO5fN7BxyqcGyVgAAAMo"]
[Sat Feb 28 11:36:59.351035 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:33084] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaJi27LWOogAgHGh62TcXwAAAYc"]
[Sat Feb 28 11:36:59.767324 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:32578] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaJi22uX5e1Q32gqxH3sgwAAAQ8"]
[Sat Feb 28 11:37:00.183283 2026] [:error] [pid 52460:tid 52479] [client 20.220.61.156:33034] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaJi3LLWOogAgHGh62TcZAAAAZA"]
[Sat Feb 28 11:37:00.599573 2026] [:error] [pid 39184:tid 39222] [client 20.220.61.156:33075] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaJi3FtZF9Zd_U7easDG5QAAAEM"]
[Sat Feb 28 11:37:01.013759 2026] [:error] [pid 39184:tid 39236] [client 20.220.61.156:33029] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaJi3VtZF9Zd_U7easDG6AAAAFE"]
[Sat Feb 28 11:37:01.428160 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:33054] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaJi3bLWOogAgHGh62TcbAAAAYg"]
[Sat Feb 28 11:37:01.842519 2026] [:error] [pid 39292:tid 39307] [client 20.220.61.156:33085] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaJi3aIAO5fN7BxyqcGyXQAAAM0"]
[Sat Feb 28 11:37:02.254436 2026] [:error] [pid 39185:tid 39262] [client 20.220.61.156:32601] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaJi3hVE-FfM89u7BQZ6NwAAAJA"]
[Sat Feb 28 11:37:02.677862 2026] [:error] [pid 39185:tid 39252] [client 20.220.61.156:33059] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaJi3hVE-FfM89u7BQZ6PgAAAIY"]
[Sat Feb 28 11:37:03.094371 2026] [:error] [pid 11791:tid 11806] [client 20.220.61.156:33040] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaJi32uX5e1Q32gqxH3siAAAAQ0"]
[Sat Feb 28 11:37:03.510274 2026] [:error] [pid 52460:tid 52479] [client 20.220.61.156:33071] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaJi37LWOogAgHGh62TcdQAAAZA"]
[Sat Feb 28 11:37:03.925271 2026] [:error] [pid 39183:tid 39196] [client 20.220.61.156:33061] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaJi3xCf4HvhVePw3LbZTAAAAAQ"]
[Sat Feb 28 11:37:04.337294 2026] [:error] [pid 39185:tid 39259] [client 20.220.61.156:33038] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaJi4BVE-FfM89u7BQZ6SwAAAI0"]
[Sat Feb 28 11:37:04.749163 2026] [:error] [pid 39183:tid 39203] [client 20.220.61.156:32576] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaJi4BCf4HvhVePw3LbZUAAAAAs"]
[Sat Feb 28 11:37:05.161029 2026] [:error] [pid 11791:tid 11796] [client 20.220.61.156:12239] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaJi4WuX5e1Q32gqxH3sjwAAAQM"]
[Sat Feb 28 11:37:05.572601 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:32580] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaJi4bLWOogAgHGh62TcfQAAAYg"]
[Sat Feb 28 11:37:05.988622 2026] [:error] [pid 39292:tid 39317] [client 20.220.61.156:32629] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaJi4aIAO5fN7BxyqcGyZwAAANc"]
[Sat Feb 28 11:37:06.402824 2026] [:error] [pid 39185:tid 39256] [client 20.220.61.156:33036] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaJi4hVE-FfM89u7BQZ6VAAAAIo"]
[Sat Feb 28 11:37:06.817042 2026] [:error] [pid 39185:tid 39263] [client 20.220.61.156:33024] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaJi4hVE-FfM89u7BQZ6WAAAAJE"]
[Sat Feb 28 11:37:07.233974 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:32593] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaJi47LWOogAgHGh62TchgAAAYE"]
[Sat Feb 28 11:37:07.667315 2026] [:error] [pid 22194:tid 22217] [client 20.220.61.156:32590] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaJi436mbajs3bzQGysm0AAAAVU"]
[Sat Feb 28 11:37:08.088960 2026] [:error] [pid 52460:tid 52473] [client 20.220.61.156:33042] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaJi5LLWOogAgHGh62TciAAAAYo"]
[Sat Feb 28 11:37:08.502578 2026] [:error] [pid 39292:tid 39307] [client 20.220.61.156:12249] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaJi5KIAO5fN7BxyqcGybQAAAM0"]
[Sat Feb 28 11:37:08.918387 2026] [:error] [pid 39185:tid 39256] [client 20.220.61.156:33069] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaJi5BVE-FfM89u7BQZ6YQAAAIo"]
[Sat Feb 28 11:37:09.334535 2026] [:error] [pid 39292:tid 39309] [client 20.220.61.156:32579] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaJi5aIAO5fN7BxyqcGybwAAAM8"]
[Sat Feb 28 11:37:09.745686 2026] [:error] [pid 52460:tid 52480] [client 20.220.61.156:32606] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaJi5bLWOogAgHGh62TcjwAAAZE"]
[Sat Feb 28 11:37:10.156722 2026] [:error] [pid 52460:tid 52469] [client 20.220.61.156:33049] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaJi5rLWOogAgHGh62TckAAAAYY"]
[Sat Feb 28 11:37:10.570099 2026] [:error] [pid 39292:tid 39315] [client 20.220.61.156:33047] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaJi5qIAO5fN7BxyqcGycQAAANU"]
[Sat Feb 28 11:37:10.981685 2026] [:error] [pid 52460:tid 52467] [client 20.220.61.156:33081] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaJi5rLWOogAgHGh62TcmwAAAYQ"]
[Sat Feb 28 11:37:11.392228 2026] [:error] [pid 52460:tid 52480] [client 20.220.61.156:32596] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaJi57LWOogAgHGh62TcnQAAAZE"]
[Sat Feb 28 11:37:11.801790 2026] [:error] [pid 11791:tid 11797] [client 20.220.61.156:12180] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaJi52uX5e1Q32gqxH3spwAAAQQ"]
[Sat Feb 28 11:37:12.213528 2026] [:error] [pid 11791:tid 11799] [client 20.220.61.156:12277] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaJi6GuX5e1Q32gqxH3srAAAAQY"]
[Sat Feb 28 11:37:12.622609 2026] [:error] [pid 39185:tid 39254] [client 20.220.61.156:32615] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaJi6BVE-FfM89u7BQZ6dAAAAIg"]
[Sat Feb 28 11:37:13.039279 2026] [:error] [pid 52460:tid 52473] [client 20.220.61.156:12260] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaJi6bLWOogAgHGh62TcpQAAAYo"]
[Sat Feb 28 11:37:13.448459 2026] [:error] [pid 39183:tid 39193] [client 20.220.61.156:33083] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaJi6RCf4HvhVePw3LbZXAAAAAE"]
[Sat Feb 28 11:37:13.857157 2026] [:error] [pid 22194:tid 22212] [client 20.220.61.156:33044] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaJi6X6mbajs3bzQGysm1gAAAVA"]
[Sat Feb 28 11:37:14.271241 2026] [:error] [pid 52460:tid 52476] [client 20.220.61.156:33062] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaJi6rLWOogAgHGh62TcrwAAAY0"]
[Sat Feb 28 11:37:14.685195 2026] [:error] [pid 39183:tid 39206] [client 20.220.61.156:33050] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaJi6hCf4HvhVePw3LbZYAAAAA4"]
[Sat Feb 28 11:37:15.097127 2026] [:error] [pid 39185:tid 39264] [client 20.220.61.156:32632] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaJi6xVE-FfM89u7BQZ6eQAAAJI"]
[Sat Feb 28 11:37:15.513200 2026] [:error] [pid 39185:tid 39246] [client 20.220.61.156:32594] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaJi6xVE-FfM89u7BQZ6egAAAIA"]
[Sat Feb 28 11:37:15.933633 2026] [:error] [pid 22194:tid 22208] [client 20.220.61.156:32635] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaJi636mbajs3bzQGysm3QAAAUw"]
[Sat Feb 28 11:37:16.349549 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:12227] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaJi7LLWOogAgHGh62TcuwAAAYw"]
[Sat Feb 28 11:37:16.766718 2026] [:error] [pid 39185:tid 39266] [client 20.220.61.156:33077] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaJi7BVE-FfM89u7BQZ6fwAAAJQ"]
[Sat Feb 28 11:37:17.255882 2026] [:error] [pid 39185:tid 39249] [client 20.220.61.156:32619] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaJi7RVE-FfM89u7BQZ6ggAAAIM"]
[Sat Feb 28 11:37:17.671282 2026] [:error] [pid 39185:tid 39261] [client 20.220.61.156:33087] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaJi7RVE-FfM89u7BQZ6hQAAAI8"]
[Sat Feb 28 11:37:18.094382 2026] [:error] [pid 22194:tid 22209] [client 20.220.61.156:32638] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaJi7n6mbajs3bzQGysm4gAAAU0"]
[Sat Feb 28 11:37:18.515002 2026] [:error] [pid 39185:tid 39246] [client 20.220.61.156:33025] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaJi7hVE-FfM89u7BQZ6jAAAAIA"]
[Sat Feb 28 11:37:18.935526 2026] [:error] [pid 52460:tid 52478] [client 20.220.61.156:32589] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaJi7rLWOogAgHGh62TczgAAAY8"]
[Sat Feb 28 11:37:19.386554 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:32577] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaJi77LWOogAgHGh62Tc0wAAAYM"]
[Sat Feb 28 11:37:19.805507 2026] [:error] [pid 39185:tid 39257] [client 20.220.61.156:33066] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaJi7xVE-FfM89u7BQZ6kQAAAIs"]
[Sat Feb 28 11:37:20.241953 2026] [:error] [pid 52460:tid 52463] [client 20.220.61.156:33031] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaJi8LLWOogAgHGh62Tc3AAAAYA"]
[Sat Feb 28 11:37:20.651721 2026] [:error] [pid 11791:tid 11809] [client 20.220.61.156:32588] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaJi8GuX5e1Q32gqxH3svAAAARA"]
[Sat Feb 28 11:37:21.063403 2026] [:error] [pid 39185:tid 39269] [client 20.220.61.156:12267] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaJi8RVE-FfM89u7BQZ6lQAAAJc"]
[Sat Feb 28 11:37:21.506747 2026] [:error] [pid 39185:tid 39264] [client 20.220.61.156:12262] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaJi8RVE-FfM89u7BQZ6nAAAAJI"]
[Sat Feb 28 11:37:21.921785 2026] [:error] [pid 11791:tid 11798] [client 20.220.61.156:33064] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaJi8WuX5e1Q32gqxH3svgAAAQU"]
[Sat Feb 28 11:37:22.366358 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:33028] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaJi8rLWOogAgHGh62Tc8wAAAYM"]
[Sat Feb 28 11:37:22.782048 2026] [:error] [pid 39184:tid 39235] [client 20.220.61.156:12268] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaJi8ltZF9Zd_U7easDHCAAAAFA"]
[Sat Feb 28 11:37:23.195321 2026] [:error] [pid 39185:tid 39247] [client 20.220.61.156:32637] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaJi8xVE-FfM89u7BQZ6owAAAIE"]
[Sat Feb 28 11:37:23.658063 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:32603] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaJi87LWOogAgHGh62TdAQAAAYg"]
[Sat Feb 28 11:37:24.068501 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:12248] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaJi9LLWOogAgHGh62TdBwAAAYM"]
[Sat Feb 28 11:37:24.478193 2026] [:error] [pid 52460:tid 52483] [client 20.220.61.156:12247] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaJi9LLWOogAgHGh62TdCwAAAZQ"]
[Sat Feb 28 11:37:24.887878 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:32623] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaJi9LLWOogAgHGh62TdEQAAAYg"]
[Sat Feb 28 11:37:25.301471 2026] [:error] [pid 39185:tid 39246] [client 20.220.61.156:33068] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaJi9RVE-FfM89u7BQZ6qQAAAIA"]
[Sat Feb 28 11:37:25.784082 2026] [:error] [pid 39183:tid 39202] [client 20.220.61.156:12282] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaJi9RCf4HvhVePw3LbZYwAAAAo"]
[Sat Feb 28 11:37:26.197199 2026] [:error] [pid 22194:tid 22207] [client 20.220.61.156:32616] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaJi9n6mbajs3bzQGysm5gAAAUs"]
[Sat Feb 28 11:37:26.609130 2026] [:error] [pid 39292:tid 39310] [client 20.220.61.156:32612] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaJi9qIAO5fN7BxyqcGyfQAAANA"]
[Sat Feb 28 11:37:27.022897 2026] [:error] [pid 52460:tid 52482] [client 20.220.61.156:32619] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaJi97LWOogAgHGh62TdFwAAAZM"]
[Sat Feb 28 11:37:27.451733 2026] [:error] [pid 39185:tid 39265] [client 20.220.61.156:33030] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaJi9xVE-FfM89u7BQZ6sAAAAJM"]
[Sat Feb 28 11:37:27.859114 2026] [:error] [pid 39185:tid 39266] [client 20.220.61.156:33043] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaJi9xVE-FfM89u7BQZ6sgAAAJQ"]
[Sat Feb 28 11:37:28.271639 2026] [:error] [pid 39185:tid 39247] [client 20.220.61.156:32586] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaJi-BVE-FfM89u7BQZ6twAAAIE"]
[Sat Feb 28 11:37:28.685785 2026] [:error] [pid 11791:tid 11799] [client 20.220.61.156:12259] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaJi-GuX5e1Q32gqxH3sxwAAAQY"]
[Sat Feb 28 11:37:29.105592 2026] [:error] [pid 39292:tid 39318] [client 20.220.61.156:32608] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaJi-aIAO5fN7BxyqcGyfwAAANg"]
[Sat Feb 28 11:37:29.525578 2026] [:error] [pid 39185:tid 39255] [client 20.220.61.156:32613] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaJi-RVE-FfM89u7BQZ6wAAAAIk"]
[Sat Feb 28 11:37:29.943972 2026] [:error] [pid 39292:tid 39309] [client 20.220.61.156:32631] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaJi-aIAO5fN7BxyqcGygAAAAM8"]
[Sat Feb 28 11:37:30.356256 2026] [:error] [pid 11791:tid 11807] [client 20.220.61.156:33033] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaJi-muX5e1Q32gqxH3sywAAAQ4"]
[Sat Feb 28 11:37:30.765947 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:12171] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaJi-muX5e1Q32gqxH3szgAAAQ8"]
[Sat Feb 28 11:37:31.183662 2026] [:error] [pid 39185:tid 39265] [client 20.220.61.156:12286] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaJi-xVE-FfM89u7BQZ6xAAAAJM"]
[Sat Feb 28 11:37:31.600864 2026] [:error] [pid 11791:tid 11806] [client 20.220.61.156:33074] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaJi-2uX5e1Q32gqxH3s1wAAAQ0"]
[Sat Feb 28 11:37:32.017621 2026] [:error] [pid 39292:tid 39312] [client 20.220.61.156:12237] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaJi_KIAO5fN7BxyqcGyggAAANI"]
[Sat Feb 28 11:37:32.429759 2026] [:error] [pid 11791:tid 11812] [client 20.220.61.156:33052] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaJi_GuX5e1Q32gqxH3s3wAAARM"]
[Sat Feb 28 11:37:32.842546 2026] [:error] [pid 39183:tid 39208] [client 20.220.61.156:33055] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaJi_BCf4HvhVePw3LbZbgAAABA"]
[Sat Feb 28 11:37:33.253770 2026] [:error] [pid 22194:tid 22198] [client 20.220.61.156:33053] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaJi_X6mbajs3bzQGysm7wAAAUI"]
[Sat Feb 28 11:37:33.669000 2026] [:error] [pid 22194:tid 22215] [client 20.220.61.156:32614] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaJi_X6mbajs3bzQGysm8QAAAVM"]
[Sat Feb 28 11:37:34.086101 2026] [:error] [pid 11791:tid 11800] [client 20.220.61.156:33067] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaJi_muX5e1Q32gqxH3s5AAAAQc"]
[Sat Feb 28 11:37:34.499913 2026] [:error] [pid 39183:tid 39197] [client 20.220.61.156:12254] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaJi_hCf4HvhVePw3LbZdgAAAAU"]
[Sat Feb 28 11:37:34.908769 2026] [:error] [pid 11791:tid 11795] [client 20.220.61.156:32600] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaJi_muX5e1Q32gqxH3s5wAAAQI"]
[Sat Feb 28 11:37:35.322897 2026] [:error] [pid 52460:tid 52469] [client 20.220.61.156:12261] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaJi_7LWOogAgHGh62TdLQAAAYY"]
[Sat Feb 28 11:37:35.744445 2026] [:error] [pid 39292:tid 39317] [client 20.220.61.156:12266] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaJi_6IAO5fN7BxyqcGyhwAAANc"]
[Sat Feb 28 11:37:36.153333 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:12251] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaJjAGuX5e1Q32gqxH3s6wAAAQ8"]
[Sat Feb 28 11:37:36.570161 2026] [:error] [pid 39292:tid 39313] [client 20.220.61.156:33026] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaJjAKIAO5fN7BxyqcGyjAAAANM"]
[Sat Feb 28 11:37:36.990063 2026] [:error] [pid 39185:tid 39251] [client 20.220.61.156:12165] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaJjABVE-FfM89u7BQZ6zwAAAIU"]
[Sat Feb 28 11:37:37.398842 2026] [:error] [pid 39292:tid 39298] [client 20.220.61.156:12193] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaJjAaIAO5fN7BxyqcGyjwAAAMQ"]
[Sat Feb 28 11:37:37.814123 2026] [:error] [pid 39184:tid 39232] [client 20.220.61.156:12184] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaJjAVtZF9Zd_U7easDHEQAAAE0"]
[Sat Feb 28 11:37:38.223854 2026] [:error] [pid 39292:tid 39299] [client 20.220.61.156:33051] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaJjAqIAO5fN7BxyqcGykQAAAMU"]
[Sat Feb 28 11:37:38.635302 2026] [:error] [pid 39185:tid 39265] [client 20.220.61.156:32584] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaJjAhVE-FfM89u7BQZ61gAAAJM"]
[Sat Feb 28 11:37:39.044182 2026] [:error] [pid 11791:tid 11817] [client 20.220.61.156:32582] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaJjA2uX5e1Q32gqxH3s9AAAARg"]
[Sat Feb 28 11:37:39.457661 2026] [:error] [pid 39185:tid 39246] [client 20.220.61.156:32633] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaJjAxVE-FfM89u7BQZ64QAAAIA"]
[Sat Feb 28 11:37:39.886011 2026] [:error] [pid 39292:tid 39316] [client 20.220.61.156:12263] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaJjA6IAO5fN7BxyqcGykwAAANY"]
[Sat Feb 28 11:37:40.296671 2026] [:error] [pid 39292:tid 39314] [client 20.220.61.156:12244] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaJjBKIAO5fN7BxyqcGylQAAANQ"]
[Sat Feb 28 11:37:40.709809 2026] [:error] [pid 11791:tid 11802] [client 20.220.61.156:32636] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaJjBGuX5e1Q32gqxH3s-AAAAQk"]
[Sat Feb 28 11:37:41.119145 2026] [:error] [pid 11791:tid 11803] [client 20.220.61.156:12198] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaJjBWuX5e1Q32gqxH3s-QAAAQo"]
[Sat Feb 28 11:37:41.533755 2026] [:error] [pid 39185:tid 39257] [client 20.220.61.156:32591] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaJjBRVE-FfM89u7BQZ66gAAAIs"]
[Sat Feb 28 11:37:41.952096 2026] [:error] [pid 39185:tid 39259] [client 20.220.61.156:12240] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaJjBRVE-FfM89u7BQZ67AAAAI0"]
[Sat Feb 28 11:37:42.371266 2026] [:error] [pid 39185:tid 39249] [client 20.220.61.156:33082] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaJjBhVE-FfM89u7BQZ68AAAAIM"]
[Sat Feb 28 11:37:42.785946 2026] [:error] [pid 39185:tid 39252] [client 20.220.61.156:12172] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaJjBhVE-FfM89u7BQZ69QAAAIY"]
[Sat Feb 28 11:37:43.194505 2026] [:error] [pid 39292:tid 39306] [client 20.220.61.156:32618] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaJjB6IAO5fN7BxyqcGymwAAAMw"]
[Sat Feb 28 11:37:43.606668 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:33039] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaJjB7LWOogAgHGh62TdPQAAAYw"]
[Sat Feb 28 11:37:44.020603 2026] [:error] [pid 52460:tid 52483] [client 20.220.61.156:32604] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaJjCLLWOogAgHGh62TdQgAAAZQ"]
[Sat Feb 28 11:37:44.443326 2026] [:error] [pid 52460:tid 52463] [client 20.220.61.156:32621] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaJjCLLWOogAgHGh62TdRQAAAYA"]
[Sat Feb 28 11:37:44.862646 2026] [:error] [pid 39184:tid 39227] [client 20.220.61.156:32622] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaJjCFtZF9Zd_U7easDHFQAAAEg"]
[Sat Feb 28 11:37:45.280919 2026] [:error] [pid 39184:tid 39231] [client 20.220.61.156:12226] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaJjCVtZF9Zd_U7easDHFwAAAEw"]
[Sat Feb 28 11:37:45.695482 2026] [:error] [pid 11791:tid 11804] [client 20.220.61.156:12241] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaJjCWuX5e1Q32gqxH3s_wAAAQs"]
[Sat Feb 28 11:37:46.110403 2026] [:error] [pid 11791:tid 11794] [client 20.220.61.156:12234] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaJjCmuX5e1Q32gqxH3tAgAAAQE"]
[Sat Feb 28 11:37:46.527670 2026] [:error] [pid 39183:tid 39198] [client 20.220.61.156:33037] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaJjChCf4HvhVePw3LbZiQAAAAY"]
[Sat Feb 28 12:40:03.368115 2026] [:error] [pid 52460:tid 52483] [client 122.176.154.222:52161] [client 122.176.154.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.154.222, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaJxo7LWOogAgHGh62QbcQAAAZQ"]
[Sat Feb 28 12:40:03.380664 2026] [proxy_fcgi:error] [pid 52460:tid 52483] [client 122.176.154.222:52161] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 12:41:46.795732 2026] [:error] [pid 39185:tid 39247] [client 170.106.161.78:40004] [client 170.106.161.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaJyChVE-FfM89u7BQan-wAAAIE"]
[Sat Feb 28 13:14:56.321849 2026] [:error] [pid 39185:tid 39256] [client 105.184.191.170:56689] [client 105.184.191.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.184.191.170, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaJ50BVE-FfM89u7BQbNKwAAAIo"]
[Sat Feb 28 13:14:56.338222 2026] [proxy_fcgi:error] [pid 39185:tid 39256] [client 105.184.191.170:56689] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 13:41:36.177561 2026] [:error] [pid 39185:tid 39263] [client 106.227.49.113:37761] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaKAEBVE-FfM89u7BQbkdQAAAJE"]
[Sat Feb 28 15:29:55.596114 2026] [:error] [pid 39184:tid 39237] [client 104.194.155.80:58870] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aaKZc1tZF9Zd_U7easD6igAAAFI"]
[Sat Feb 28 15:40:40.770171 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:40.984018 2026] [proxy_fcgi:error] [pid 39292:tid 39316] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:41.196872 2026] [proxy_fcgi:error] [pid 39292:tid 39298] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:41.409781 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:41.623128 2026] [proxy_fcgi:error] [pid 39292:tid 39312] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:41.838243 2026] [proxy_fcgi:error] [pid 39292:tid 39308] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:42.057707 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:42.273158 2026] [proxy_fcgi:error] [pid 39292:tid 39317] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:42.487240 2026] [proxy_fcgi:error] [pid 39292:tid 39314] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:42.708934 2026] [proxy_fcgi:error] [pid 39292:tid 39310] [client 20.220.61.156:56929] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 15:40:42.920340 2026] [:error] [pid 39292:tid 39304] [client 20.220.61.156:56929] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaKb-qIAO5fN7BxyqcEH8wAAAMo"]
[Sat Feb 28 15:40:43.363481 2026] [:error] [pid 39184:tid 39242] [client 20.220.61.156:56928] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaKb-1tZF9Zd_U7easABtQAAAFc"]
[Sat Feb 28 15:40:43.785101 2026] [:error] [pid 39183:tid 39193] [client 20.220.61.156:56922] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaKb-xCf4HvhVePw3LYI-wAAAAE"]
[Sat Feb 28 15:40:44.233934 2026] [:error] [pid 11791:tid 11794] [client 20.220.61.156:56847] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "aaKb_GuX5e1Q32gqxH1o3AAAAQE"]
[Sat Feb 28 15:40:44.653861 2026] [:error] [pid 39184:tid 39230] [client 20.220.61.156:56943] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaKb_FtZF9Zd_U7easAByAAAAEs"]
[Sat Feb 28 15:40:45.083226 2026] [:error] [pid 39292:tid 39297] [client 20.220.61.156:56897] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaKb_aIAO5fN7BxyqcEH-wAAAMM"]
[Sat Feb 28 15:40:45.503463 2026] [:error] [pid 39292:tid 39316] [client 20.220.61.156:56944] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaKb_aIAO5fN7BxyqcEH_gAAANY"]
[Sat Feb 28 15:40:45.920737 2026] [:error] [pid 39183:tid 39209] [client 20.220.61.156:56921] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aaKb_RCf4HvhVePw3LYJBwAAABE"]
[Sat Feb 28 15:40:46.336042 2026] [:error] [pid 52460:tid 52487] [client 20.220.61.156:56854] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaKb_rLWOogAgHGh62Sf1QAAAZg"]
[Sat Feb 28 15:40:46.748486 2026] [:error] [pid 39185:tid 39257] [client 20.220.61.156:56949] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaKb_hVE-FfM89u7BQZdpwAAAIs"]
[Sat Feb 28 15:40:47.158299 2026] [:error] [pid 49763:tid 49778] [client 20.220.61.156:56953] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaKb_7THSOG_yf2PpqG86QAAAcw"]
[Sat Feb 28 15:40:47.575602 2026] [:error] [pid 39183:tid 39199] [client 20.220.61.156:56843] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aaKb_xCf4HvhVePw3LYJEgAAAAc"]
[Sat Feb 28 15:40:47.994769 2026] [:error] [pid 39183:tid 39210] [client 20.220.61.156:56905] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaKb_xCf4HvhVePw3LYJFQAAABI"]
[Sat Feb 28 15:40:48.406646 2026] [:error] [pid 39183:tid 39204] [client 20.220.61.156:56916] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaKcABCf4HvhVePw3LYJGQAAAAw"]
[Sat Feb 28 15:40:48.820310 2026] [:error] [pid 39183:tid 39200] [client 20.220.61.156:56935] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaKcABCf4HvhVePw3LYJHAAAAAg"]
[Sat Feb 28 15:40:49.239049 2026] [:error] [pid 49763:tid 49770] [client 20.220.61.156:56850] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aaKcAbTHSOG_yf2PpqG88wAAAcQ"]
[Sat Feb 28 15:40:49.656706 2026] [:error] [pid 49763:tid 49789] [client 20.220.61.156:56834] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaKcAbTHSOG_yf2PpqG89QAAAdc"]
[Sat Feb 28 15:40:50.073452 2026] [:error] [pid 11791:tid 11799] [client 20.220.61.156:56871] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaKcAmuX5e1Q32gqxH1o4QAAAQY"]
[Sat Feb 28 15:40:50.492231 2026] [:error] [pid 49763:tid 49782] [client 20.220.61.156:56919] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaKcArTHSOG_yf2PpqG8-wAAAdA"]
[Sat Feb 28 15:40:50.908492 2026] [:error] [pid 11791:tid 11811] [client 20.220.61.156:56954] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mails.php"] [unique_id "aaKcAmuX5e1Q32gqxH1o5AAAARI"]
[Sat Feb 28 15:40:51.329042 2026] [:error] [pid 39183:tid 39203] [client 20.220.61.156:56958] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaKcAxCf4HvhVePw3LYJKAAAAAs"]
[Sat Feb 28 15:40:51.742336 2026] [:error] [pid 39184:tid 39235] [client 20.220.61.156:56907] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaKcA1tZF9Zd_U7easABzwAAAFA"]
[Sat Feb 28 15:40:52.163630 2026] [:error] [pid 39183:tid 39197] [client 20.220.61.156:56947] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaKcBBCf4HvhVePw3LYJMwAAAAU"]
[Sat Feb 28 15:40:52.583544 2026] [:error] [pid 39183:tid 39216] [client 20.220.61.156:56926] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "aaKcBBCf4HvhVePw3LYJNwAAABg"]
[Sat Feb 28 15:40:52.993758 2026] [:error] [pid 11791:tid 11808] [client 20.220.61.156:56933] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaKcBGuX5e1Q32gqxH1o6wAAAQ8"]
[Sat Feb 28 15:40:53.411920 2026] [:error] [pid 49763:tid 49780] [client 20.220.61.156:56867] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaKcBbTHSOG_yf2PpqG9AgAAAc4"]
[Sat Feb 28 15:40:53.829956 2026] [:error] [pid 11791:tid 11801] [client 20.220.61.156:56865] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaKcBWuX5e1Q32gqxH1o8QAAAQg"]
[Sat Feb 28 15:40:54.247229 2026] [:error] [pid 11791:tid 11800] [client 20.220.61.156:56914] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3.php"] [unique_id "aaKcBmuX5e1Q32gqxH1o9QAAAQc"]
[Sat Feb 28 15:40:54.665215 2026] [:error] [pid 11791:tid 11813] [client 20.220.61.156:56911] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaKcBmuX5e1Q32gqxH1o9gAAARQ"]
[Sat Feb 28 15:40:55.076872 2026] [:error] [pid 49763:tid 49790] [client 20.220.61.156:56913] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaKcB7THSOG_yf2PpqG9DQAAAdg"]
[Sat Feb 28 15:40:55.490998 2026] [:error] [pid 39185:tid 39256] [client 20.220.61.156:56959] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaKcBxVE-FfM89u7BQZdtQAAAIo"]
[Sat Feb 28 15:40:55.905956 2026] [:error] [pid 39292:tid 39308] [client 20.220.61.156:45901] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/key.php"] [unique_id "aaKcB6IAO5fN7BxyqcEIAAAAAM4"]
[Sat Feb 28 15:40:56.348778 2026] [:error] [pid 39292:tid 39314] [client 20.220.61.156:56853] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaKcCKIAO5fN7BxyqcEIAgAAANQ"]
[Sat Feb 28 15:40:56.768612 2026] [:error] [pid 11791:tid 11810] [client 20.220.61.156:45940] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaKcCGuX5e1Q32gqxH1pAAAAARE"]
[Sat Feb 28 15:40:57.188658 2026] [:error] [pid 49763:tid 49769] [client 20.220.61.156:56837] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaKcCbTHSOG_yf2PpqG9FwAAAcM"]
[Sat Feb 28 15:40:57.603538 2026] [:error] [pid 49763:tid 49770] [client 20.220.61.156:56864] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/667.php"] [unique_id "aaKcCbTHSOG_yf2PpqG9GwAAAcQ"]
[Sat Feb 28 15:40:58.014947 2026] [:error] [pid 49763:tid 49780] [client 20.220.61.156:56873] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaKcCrTHSOG_yf2PpqG9IgAAAc4"]
[Sat Feb 28 15:40:58.434690 2026] [:error] [pid 49763:tid 49789] [client 20.220.61.156:56951] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaKcCrTHSOG_yf2PpqG9JgAAAdc"]
[Sat Feb 28 15:40:58.858988 2026] [:error] [pid 49763:tid 49774] [client 20.220.61.156:56955] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaKcCrTHSOG_yf2PpqG9LQAAAcg"]
[Sat Feb 28 15:40:59.271297 2026] [:error] [pid 49763:tid 49775] [client 20.220.61.156:56909] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctfbe.php"] [unique_id "aaKcC7THSOG_yf2PpqG9NgAAAck"]
[Sat Feb 28 15:40:59.688585 2026] [:error] [pid 49763:tid 49766] [client 20.220.61.156:56844] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaKcC7THSOG_yf2PpqG9PwAAAcA"]
[Sat Feb 28 15:41:00.102745 2026] [:error] [pid 39183:tid 39200] [client 20.220.61.156:56942] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaKcDBCf4HvhVePw3LYJRwAAAAg"]
[Sat Feb 28 15:41:00.522712 2026] [:error] [pid 39183:tid 39209] [client 20.220.61.156:56910] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaKcDBCf4HvhVePw3LYJTAAAABE"]
[Sat Feb 28 15:41:00.952821 2026] [:error] [pid 39183:tid 39210] [client 20.220.61.156:56925] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hkweu.php"] [unique_id "aaKcDBCf4HvhVePw3LYJTwAAABI"]
[Sat Feb 28 15:41:01.412834 2026] [:error] [pid 39184:tid 39220] [client 20.220.61.156:45906] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaKcDVtZF9Zd_U7easAB0QAAAEE"]
[Sat Feb 28 15:41:01.830143 2026] [:error] [pid 49763:tid 49785] [client 20.220.61.156:56952] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaKcDbTHSOG_yf2PpqG9WAAAAdM"]
[Sat Feb 28 15:41:02.238833 2026] [:error] [pid 39292:tid 39297] [client 20.220.61.156:56946] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaKcDqIAO5fN7BxyqcEICQAAAMM"]
[Sat Feb 28 15:41:02.648577 2026] [:error] [pid 49763:tid 49780] [client 20.220.61.156:56868] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qdlte.php"] [unique_id "aaKcDrTHSOG_yf2PpqG9XwAAAc4"]
[Sat Feb 28 15:41:03.068070 2026] [:error] [pid 49763:tid 49786] [client 20.220.61.156:56931] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaKcD7THSOG_yf2PpqG9ZwAAAdQ"]
[Sat Feb 28 15:41:03.497139 2026] [:error] [pid 11791:tid 11814] [client 20.220.61.156:56896] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaKcD2uX5e1Q32gqxH1pDwAAARU"]
[Sat Feb 28 15:41:03.911688 2026] [:error] [pid 49763:tid 49784] [client 20.220.61.156:56839] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaKcD7THSOG_yf2PpqG9dAAAAdI"]
[Sat Feb 28 15:41:04.324161 2026] [:error] [pid 49763:tid 49779] [client 20.220.61.156:56856] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f7.php"] [unique_id "aaKcELTHSOG_yf2PpqG9egAAAc0"]
[Sat Feb 28 15:41:04.738669 2026] [:error] [pid 49763:tid 49772] [client 20.220.61.156:56846] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaKcELTHSOG_yf2PpqG9gQAAAcY"]
[Sat Feb 28 15:41:05.161367 2026] [:error] [pid 49763:tid 49775] [client 20.220.61.156:56915] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaKcEbTHSOG_yf2PpqG9hgAAAck"]
[Sat Feb 28 15:41:05.576252 2026] [:error] [pid 39183:tid 39201] [client 20.220.61.156:45888] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaKcERCf4HvhVePw3LYJXAAAAAk"]
[Sat Feb 28 15:41:05.990824 2026] [:error] [pid 39183:tid 39208] [client 20.220.61.156:45830] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "aaKcERCf4HvhVePw3LYJXwAAABA"]
[Sat Feb 28 15:41:06.404465 2026] [:error] [pid 39185:tid 39250] [client 20.220.61.156:45905] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaKcEhVE-FfM89u7BQZdwQAAAIQ"]
[Sat Feb 28 15:41:06.816137 2026] [:error] [pid 11791:tid 11797] [client 20.220.61.156:45892] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaKcEmuX5e1Q32gqxH1pFAAAAQQ"]
[Sat Feb 28 15:41:07.230581 2026] [:error] [pid 39183:tid 39212] [client 20.220.61.156:56957] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaKcExCf4HvhVePw3LYJcQAAABQ"]
[Sat Feb 28 15:41:07.676332 2026] [:error] [pid 39183:tid 39205] [client 20.220.61.156:56857] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp7.php"] [unique_id "aaKcExCf4HvhVePw3LYJcwAAAA0"]
[Sat Feb 28 15:41:08.095297 2026] [:error] [pid 49763:tid 49768] [client 20.220.61.156:56917] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaKcFLTHSOG_yf2PpqG9nAAAAcI"]
[Sat Feb 28 15:41:08.582804 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:56878] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaKcFLLWOogAgHGh62Sf5wAAAYE"]
[Sat Feb 28 15:41:09.004885 2026] [:error] [pid 49763:tid 49775] [client 20.220.61.156:56894] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaKcFbTHSOG_yf2PpqG9pQAAAck"]
[Sat Feb 28 15:41:09.429495 2026] [:error] [pid 39184:tid 39233] [client 20.220.61.156:45913] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aaKcFVtZF9Zd_U7easAB2QAAAE4"]
[Sat Feb 28 15:41:09.844467 2026] [:error] [pid 39184:tid 39236] [client 20.220.61.156:56845] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaKcFVtZF9Zd_U7easAB3gAAAFE"]
[Sat Feb 28 15:41:10.265531 2026] [:error] [pid 49763:tid 49781] [client 20.220.61.156:56833] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaKcFrTHSOG_yf2PpqG9sAAAAc8"]
[Sat Feb 28 15:41:10.703216 2026] [:error] [pid 22194:tid 22206] [client 20.220.61.156:45894] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaKcFn6mbajs3bzQGytqxQAAAUo"]
[Sat Feb 28 15:41:11.115307 2026] [:error] [pid 39184:tid 39237] [client 20.220.61.156:45912] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clcdu.php"] [unique_id "aaKcF1tZF9Zd_U7easAB4wAAAFI"]
[Sat Feb 28 15:41:11.535927 2026] [:error] [pid 52460:tid 52472] [client 20.220.61.156:56882] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaKcF7LWOogAgHGh62Sf6wAAAYk"]
[Sat Feb 28 15:41:11.949180 2026] [:error] [pid 49763:tid 49767] [client 20.220.61.156:56885] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaKcF7THSOG_yf2PpqG9wAAAAcE"]
[Sat Feb 28 15:41:12.366553 2026] [:error] [pid 11791:tid 11803] [client 20.220.61.156:45850] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaKcGGuX5e1Q32gqxH1pHAAAAQo"]
[Sat Feb 28 15:41:12.829960 2026] [:error] [pid 39184:tid 39229] [client 20.220.61.156:45898] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffbsq.php"] [unique_id "aaKcGFtZF9Zd_U7easAB6wAAAEo"]
[Sat Feb 28 15:41:13.256624 2026] [:error] [pid 39184:tid 39227] [client 20.220.61.156:56886] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaKcGVtZF9Zd_U7easAB8AAAAEg"]
[Sat Feb 28 15:41:13.684978 2026] [:error] [pid 39292:tid 39302] [client 20.220.61.156:56900] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaKcGaIAO5fN7BxyqcEIEgAAAMg"]
[Sat Feb 28 15:41:14.098231 2026] [:error] [pid 49763:tid 49773] [client 20.220.61.156:56934] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaKcGrTHSOG_yf2PpqG94AAAAcc"]
[Sat Feb 28 15:41:14.512804 2026] [:error] [pid 39185:tid 39260] [client 20.220.61.156:56876] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/resp.php"] [unique_id "aaKcGhVE-FfM89u7BQZdxQAAAI4"]
[Sat Feb 28 15:41:14.957200 2026] [:error] [pid 49763:tid 49769] [client 20.220.61.156:56842] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaKcGrTHSOG_yf2PpqG96AAAAcM"]
[Sat Feb 28 15:41:15.367076 2026] [:error] [pid 49763:tid 49768] [client 20.220.61.156:56841] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaKcG7THSOG_yf2PpqG97QAAAcI"]
[Sat Feb 28 15:41:15.776900 2026] [:error] [pid 39184:tid 39225] [client 20.220.61.156:56872] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaKcG1tZF9Zd_U7easAB9wAAAEY"]
[Sat Feb 28 15:41:16.203720 2026] [:error] [pid 39184:tid 39222] [client 20.220.61.156:56948] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaKcHFtZF9Zd_U7easAB-gAAAEM"]
[Sat Feb 28 15:41:16.629069 2026] [:error] [pid 49763:tid 49785] [client 20.220.61.156:56893] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaKcHLTHSOG_yf2PpqG9-gAAAdM"]
[Sat Feb 28 15:41:17.046462 2026] [:error] [pid 49763:tid 49774] [client 20.220.61.156:45890] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaKcHbTHSOG_yf2PpqG-AAAAAcg"]
[Sat Feb 28 15:41:17.463981 2026] [:error] [pid 11791:tid 11812] [client 20.220.61.156:56858] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaKcHWuX5e1Q32gqxH1pJAAAARM"]
[Sat Feb 28 15:41:17.897995 2026] [:error] [pid 39292:tid 39311] [client 20.220.61.156:56862] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aaKcHaIAO5fN7BxyqcEIHAAAANE"]
[Sat Feb 28 15:41:18.313886 2026] [:error] [pid 52460:tid 52478] [client 20.220.61.156:45923] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaKcHrLWOogAgHGh62Sf-gAAAY8"]
[Sat Feb 28 15:41:18.737337 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:56938] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaKcHrLWOogAgHGh62Sf_AAAAYg"]
[Sat Feb 28 15:41:19.157541 2026] [:error] [pid 39292:tid 39306] [client 20.220.61.156:56940] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaKcH6IAO5fN7BxyqcEIHgAAAMw"]
[Sat Feb 28 15:41:19.577370 2026] [:error] [pid 52460:tid 52481] [client 20.220.61.156:56855] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kma.php"] [unique_id "aaKcH7LWOogAgHGh62Sf_QAAAZI"]
[Sat Feb 28 15:41:20.008729 2026] [:error] [pid 39292:tid 39305] [client 20.220.61.156:56874] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaKcIKIAO5fN7BxyqcEIIwAAAMs"]
[Sat Feb 28 15:41:20.428086 2026] [:error] [pid 39183:tid 39200] [client 20.220.61.156:45925] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaKcIBCf4HvhVePw3LYJiwAAAAg"]
[Sat Feb 28 15:41:20.843762 2026] [:error] [pid 39292:tid 39304] [client 20.220.61.156:45835] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaKcIKIAO5fN7BxyqcEIKwAAAMo"]
[Sat Feb 28 15:41:21.254157 2026] [:error] [pid 52460:tid 52476] [client 20.220.61.156:56904] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpls.php"] [unique_id "aaKcIbLWOogAgHGh62SgAQAAAY0"]
[Sat Feb 28 15:41:21.672812 2026] [:error] [pid 39292:tid 39318] [client 20.220.61.156:56920] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaKcIaIAO5fN7BxyqcEIMwAAANg"]
[Sat Feb 28 15:41:22.083437 2026] [:error] [pid 49763:tid 49773] [client 20.220.61.156:56904] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaKcIrTHSOG_yf2PpqG-EQAAAcc"]
[Sat Feb 28 15:41:22.500734 2026] [:error] [pid 49763:tid 49772] [client 20.220.61.156:45907] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaKcIrTHSOG_yf2PpqG-FgAAAcY"]
[Sat Feb 28 15:41:22.962776 2026] [:error] [pid 39184:tid 39226] [client 20.220.61.156:45839] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ova-wso.php"] [unique_id "aaKcIltZF9Zd_U7easACBQAAAEc"]
[Sat Feb 28 15:41:23.376666 2026] [:error] [pid 39292:tid 39313] [client 20.220.61.156:56891] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaKcI6IAO5fN7BxyqcEIPwAAANM"]
[Sat Feb 28 15:41:23.789851 2026] [:error] [pid 39292:tid 39318] [client 20.220.61.156:56924] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaKcI6IAO5fN7BxyqcEIRAAAANg"]
[Sat Feb 28 15:41:24.215210 2026] [:error] [pid 39184:tid 39242] [client 20.220.61.156:56877] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaKcJFtZF9Zd_U7easACBwAAAFc"]
[Sat Feb 28 15:41:24.632962 2026] [:error] [pid 49763:tid 49775] [client 20.220.61.156:56939] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "aaKcJLTHSOG_yf2PpqG-HQAAAck"]
[Sat Feb 28 15:41:25.055332 2026] [:error] [pid 49763:tid 49786] [client 20.220.61.156:56896] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaKcJbTHSOG_yf2PpqG-IAAAAdQ"]
[Sat Feb 28 15:41:25.491948 2026] [:error] [pid 39292:tid 39298] [client 20.220.61.156:56884] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaKcJaIAO5fN7BxyqcEIVwAAAMQ"]
[Sat Feb 28 15:41:25.934251 2026] [:error] [pid 39184:tid 39219] [client 20.220.61.156:56889] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaKcJVtZF9Zd_U7easACDAAAAEA"]
[Sat Feb 28 15:41:26.356708 2026] [:error] [pid 22194:tid 22209] [client 20.220.61.156:56849] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php7"] [unique_id "aaKcJn6mbajs3bzQGytq5gAAAU0"]
[Sat Feb 28 15:41:26.786273 2026] [:error] [pid 39184:tid 39221] [client 20.220.61.156:45924] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaKcJltZF9Zd_U7easACEQAAAEI"]
[Sat Feb 28 15:41:27.218661 2026] [:error] [pid 49763:tid 49789] [client 20.220.61.156:56869] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaKcJ7THSOG_yf2PpqG-LAAAAdc"]
[Sat Feb 28 15:41:27.633133 2026] [:error] [pid 39184:tid 39233] [client 20.220.61.156:56852] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaKcJ1tZF9Zd_U7easACGQAAAE4"]
[Sat Feb 28 15:41:28.046881 2026] [:error] [pid 49763:tid 49773] [client 20.220.61.156:56888] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sc.php"] [unique_id "aaKcKLTHSOG_yf2PpqG-MAAAAcc"]
[Sat Feb 28 15:41:28.471912 2026] [:error] [pid 39292:tid 39294] [client 20.220.61.156:56950] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaKcKKIAO5fN7BxyqcEIbAAAAMA"]
[Sat Feb 28 15:41:28.883969 2026] [:error] [pid 49763:tid 49784] [client 20.220.61.156:56835] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaKcKLTHSOG_yf2PpqG-MwAAAdI"]
[Sat Feb 28 15:41:29.295264 2026] [:error] [pid 39292:tid 39297] [client 20.220.61.156:56930] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaKcKaIAO5fN7BxyqcEIdQAAAMM"]
[Sat Feb 28 15:41:29.708838 2026] [:error] [pid 49763:tid 49778] [client 20.220.61.156:56956] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php7"] [unique_id "aaKcKbTHSOG_yf2PpqG-NgAAAcw"]
[Sat Feb 28 15:41:30.118034 2026] [:error] [pid 49763:tid 49777] [client 20.220.61.156:45949] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaKcKrTHSOG_yf2PpqG-PgAAAcs"]
[Sat Feb 28 15:41:30.527887 2026] [:error] [pid 49763:tid 49784] [client 20.220.61.156:45929] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaKcKrTHSOG_yf2PpqG-QgAAAdI"]
[Sat Feb 28 15:41:30.947219 2026] [:error] [pid 49763:tid 49781] [client 20.220.61.156:45877] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaKcKrTHSOG_yf2PpqG-TQAAAc8"]
[Sat Feb 28 15:41:31.359155 2026] [:error] [pid 49763:tid 49766] [client 20.220.61.156:45921] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "aaKcK7THSOG_yf2PpqG-WAAAAcA"]
[Sat Feb 28 15:41:31.789509 2026] [:error] [pid 49763:tid 49785] [client 20.220.61.156:56863] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaKcK7THSOG_yf2PpqG-ZwAAAdM"]
[Sat Feb 28 15:41:32.220152 2026] [:error] [pid 39184:tid 39224] [client 20.220.61.156:45941] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaKcLFtZF9Zd_U7easACLwAAAEU"]
[Sat Feb 28 15:41:32.632076 2026] [:error] [pid 39184:tid 39231] [client 20.220.61.156:56875] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaKcLFtZF9Zd_U7easACNAAAAEw"]
[Sat Feb 28 15:41:33.046443 2026] [:error] [pid 49763:tid 49778] [client 20.220.61.156:56866] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc.php"] [unique_id "aaKcLbTHSOG_yf2PpqG-iAAAAcw"]
[Sat Feb 28 15:41:33.466865 2026] [:error] [pid 49763:tid 49787] [client 20.220.61.156:45943] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaKcLbTHSOG_yf2PpqG-kAAAAdU"]
[Sat Feb 28 15:41:33.882001 2026] [:error] [pid 49763:tid 49780] [client 20.220.61.156:45950] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaKcLbTHSOG_yf2PpqG-nQAAAc4"]
[Sat Feb 28 15:41:34.293090 2026] [:error] [pid 49763:tid 49771] [client 20.220.61.156:45915] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaKcLrTHSOG_yf2PpqG-qAAAAcU"]
[Sat Feb 28 15:41:34.704536 2026] [:error] [pid 22194:tid 22211] [client 20.220.61.156:56912] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/re.php"] [unique_id "aaKcLn6mbajs3bzQGytq6QAAAU8"]
[Sat Feb 28 17:12:08.653922 2026] [proxy_fcgi:error] [pid 39183:tid 39207] [client 145.239.10.137:38101] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/45up.php
[Sat Feb 28 17:34:39.577286 2026] [:error] [pid 39183:tid 39198] [client 107.189.1.176:49069] [client 107.189.1.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.189.1.176, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aaK2rxCf4HvhVePw3LZPlQAAAAY"], referer: http://www.google.com.hk
[Sat Feb 28 17:34:39.581751 2026] [proxy_fcgi:error] [pid 39183:tid 39198] [client 107.189.1.176:49069] AH01071: Got error 'Primary script unknown', referer: http://www.google.com.hk
[Sat Feb 28 18:15:10.665202 2026] [:error] [pid 11791:tid 11817] [client 204.76.203.25:52362] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaLALmuX5e1Q32gqxH2RZwAAARg"]
[Sat Feb 28 18:22:31.024137 2026] [:error] [pid 39183:tid 39200] [client 49.51.38.193:45118] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaLB5xCf4HvhVePw3LZ38AAAAAg"]
[Sat Feb 28 19:22:19.482611 2026] [:error] [pid 11791:tid 11796] [client 157.230.55.55:36344] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/campaign/.env"] [unique_id "aaLP62uX5e1Q32gqxH2mTQAAAQM"]
[Sat Feb 28 19:22:19.499862 2026] [:error] [pid 39183:tid 39206] [client 157.230.55.55:36358] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/portal/.env"] [unique_id "aaLP6xCf4HvhVePw3LbE3QAAAA4"]
[Sat Feb 28 19:22:19.499862 2026] [:error] [pid 11791:tid 11803] [client 157.230.55.55:36374] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/staff/.env"] [unique_id "aaLP62uX5e1Q32gqxH2mTgAAAQo"]
[Sat Feb 28 19:22:19.503695 2026] [:error] [pid 39183:tid 39210] [client 157.230.55.55:36354] [client 157.230.55.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aaLP6xCf4HvhVePw3LbE3gAAABI"]
[Sat Feb 28 19:56:05.778702 2026] [:error] [pid 49763:tid 49779] [client 43.130.40.120:37710] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaLX1bTHSOG_yf2PpqHvPQAAAc0"]
[Sat Feb 28 20:23:39.950858 2026] [:error] [pid 49763:tid 49770] [client 120.71.59.24:54251] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaLeS7THSOG_yf2PpqEirwAAAcQ"]
[Sat Feb 28 21:22:10.426239 2026] [proxy_fcgi:error] [pid 49763:tid 49781] [client 13.71.191.191:4998] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:22:10.639306 2026] [proxy_fcgi:error] [pid 49763:tid 49777] [client 13.71.191.191:4998] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:22:11.277738 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:4998] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaLsA7THSOG_yf2PpqFrPwAAAcw"]
[Sat Feb 28 21:22:13.400323 2026] [proxy_fcgi:error] [pid 39184:tid 39242] [client 13.71.191.191:5060] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:22:13.604958 2026] [:error] [pid 39184:tid 39221] [client 13.71.191.191:5060] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaLsBVtZF9Zd_U7easDEBgAAAEI"]
[Sat Feb 28 21:22:14.429292 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:5057] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaLsBhVE-FfM89u7BQairQAAAIA"]
[Sat Feb 28 21:22:14.841536 2026] [proxy_fcgi:error] [pid 39184:tid 39227] [client 13.71.191.191:5089] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:22:15.047021 2026] [:error] [pid 39184:tid 39233] [client 13.71.191.191:5089] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file2.php"] [unique_id "aaLsB1tZF9Zd_U7easDECgAAAE4"]
[Sat Feb 28 21:22:15.460877 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:5084] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file2.php"] [unique_id "aaLsB36mbajs3bzQGyumTAAAAUw"]
[Sat Feb 28 21:22:15.874240 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:5116] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file2.php"] [unique_id "aaLsB7LWOogAgHGh62SJhgAAAYs"]
[Sat Feb 28 21:22:16.290030 2026] [:error] [pid 39183:tid 39208] [client 13.71.191.191:5087] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file2.php"] [unique_id "aaLsCBCf4HvhVePw3LZIAwAAABA"]
[Sat Feb 28 21:22:16.703718 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:5100] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaLsCLLWOogAgHGh62SJiQAAAYU"]
[Sat Feb 28 21:22:17.118459 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:5090] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddgg.php"] [unique_id "aaLsCRCf4HvhVePw3LZIBwAAABU"]
[Sat Feb 28 21:22:17.532527 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:5001] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddgg.php"] [unique_id "aaLsCRCf4HvhVePw3LZICgAAABg"]
[Sat Feb 28 21:22:17.941480 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:5062] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddgg.php"] [unique_id "aaLsCbLWOogAgHGh62SJkAAAAYo"]
[Sat Feb 28 21:22:18.351259 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:5073] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaLsCrLWOogAgHGh62SJkgAAAYE"]
[Sat Feb 28 21:22:18.763000 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:5066] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaLsChCf4HvhVePw3LZIFwAAABU"]
[Sat Feb 28 21:22:19.177879 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:5005] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaLsCxVE-FfM89u7BQaisAAAAIw"]
[Sat Feb 28 21:22:19.591598 2026] [:error] [pid 39183:tid 39199] [client 13.71.191.191:5051] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaLsCxCf4HvhVePw3LZIJgAAAAc"]
[Sat Feb 28 21:22:20.018761 2026] [:error] [pid 39184:tid 39220] [client 13.71.191.191:5062] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaLsDFtZF9Zd_U7easDEFAAAAEE"]
[Sat Feb 28 21:22:20.432358 2026] [:error] [pid 39184:tid 39227] [client 13.71.191.191:5118] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLsDFtZF9Zd_U7easDEGAAAAEg"]
[Sat Feb 28 21:22:20.848436 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:5105] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLsDGuX5e1Q32gqxH3HNAAAAQU"]
[Sat Feb 28 21:22:21.263548 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:5071] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb2434353s/index.php"] [unique_id "aaLsDaIAO5fN7BxyqcF-bAAAAMk"]
[Sat Feb 28 21:22:21.677397 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:5102] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLsDbLWOogAgHGh62SJmwAAAYw"]
[Sat Feb 28 21:22:22.090214 2026] [:error] [pid 39183:tid 39198] [client 13.71.191.191:5085] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLsDhCf4HvhVePw3LZIPwAAAAY"]
[Sat Feb 28 21:22:22.502285 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:5080] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLsDn6mbajs3bzQGyumVQAAAUg"]
[Sat Feb 28 21:22:22.914753 2026] [:error] [pid 39184:tid 39241] [client 13.71.191.191:5077] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaLsDltZF9Zd_U7easDEHQAAAFY"]
[Sat Feb 28 21:22:23.337474 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:5086] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sundax.Php"] [unique_id "aaLsD7THSOG_yf2PpqFrWgAAAcc"]
[Sat Feb 28 21:22:23.749512 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:5119] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sundax.Php"] [unique_id "aaLsD7THSOG_yf2PpqFrXgAAAcw"]
[Sat Feb 28 21:22:24.162006 2026] [:error] [pid 39184:tid 39220] [client 13.71.191.191:5099] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sundax.Php"] [unique_id "aaLsEFtZF9Zd_U7easDEJQAAAEE"]
[Sat Feb 28 21:22:24.575464 2026] [:error] [pid 39184:tid 39242] [client 13.71.191.191:5078] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sundax.Php"] [unique_id "aaLsEFtZF9Zd_U7easDEJgAAAFc"]
[Sat Feb 28 21:22:24.992157 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:5037] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLsEBCf4HvhVePw3LZISwAAAAk"]
[Sat Feb 28 21:22:25.407466 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:5081] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLsEbLWOogAgHGh62SJpwAAAZM"]
[Sat Feb 28 21:22:25.820475 2026] [:error] [pid 52460:tid 52483] [client 13.71.191.191:5101] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLsEbLWOogAgHGh62SJqwAAAZQ"]
[Sat Feb 28 21:22:26.233157 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:4996] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/pages.php"] [unique_id "aaLsErTHSOG_yf2PpqFrYwAAAdQ"]
[Sat Feb 28 21:22:26.642448 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:5018] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/item.php"] [unique_id "aaLsErLWOogAgHGh62SJrwAAAYY"]
[Sat Feb 28 21:22:27.051335 2026] [:error] [pid 39184:tid 39231] [client 13.71.191.191:5028] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/item.php"] [unique_id "aaLsE1tZF9Zd_U7easDELAAAAEw"]
[Sat Feb 28 21:22:27.471269 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:5111] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/item.php"] [unique_id "aaLsE2uX5e1Q32gqxH3HPQAAAQI"]
[Sat Feb 28 21:22:27.886069 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:5027] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/item.php"] [unique_id "aaLsE1tZF9Zd_U7easDEMgAAAEo"]
[Sat Feb 28 21:22:28.295778 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:4993] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLsFLTHSOG_yf2PpqFrcQAAAcY"]
[Sat Feb 28 21:22:28.709154 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:5114] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLsFKIAO5fN7BxyqcF-lwAAANA"]
[Sat Feb 28 21:22:29.128549 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:5019] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLsFRVE-FfM89u7BQaitgAAAJc"]
[Sat Feb 28 21:22:29.544714 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:5083] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaLsFbLWOogAgHGh62SJuAAAAYw"]
[Sat Feb 28 21:22:29.958238 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:5067] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qpglkpgm.php"] [unique_id "aaLsFaIAO5fN7BxyqcF-ngAAAM0"]
[Sat Feb 28 21:22:30.375533 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:5041] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qpglkpgm.php"] [unique_id "aaLsFrLWOogAgHGh62SJvQAAAYY"]
[Sat Feb 28 21:22:30.788471 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:4997] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qpglkpgm.php"] [unique_id "aaLsFrLWOogAgHGh62SJwwAAAZE"]
[Sat Feb 28 21:22:31.199776 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:5064] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qpglkpgm.php"] [unique_id "aaLsF7THSOG_yf2PpqFreAAAAcU"]
[Sat Feb 28 21:22:31.610162 2026] [:error] [pid 49763:tid 49784] [client 13.71.191.191:5010] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsF7THSOG_yf2PpqFregAAAdI"]
[Sat Feb 28 21:22:32.020600 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:4945] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsGLTHSOG_yf2PpqFrgAAAAdQ"]
[Sat Feb 28 21:22:32.434605 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:5034] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsGLTHSOG_yf2PpqFrggAAAco"]
[Sat Feb 28 21:22:32.851014 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:5029] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsGLTHSOG_yf2PpqFrhAAAAdg"]
[Sat Feb 28 21:22:33.264474 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:5003] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maint/jp.php"] [unique_id "aaLsGRVE-FfM89u7BQaiuAAAAIo"]
[Sat Feb 28 21:22:33.687658 2026] [:error] [pid 39292:tid 39316] [client 13.71.191.191:5006] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maint/jp.php"] [unique_id "aaLsGaIAO5fN7BxyqcF-oQAAANY"]
[Sat Feb 28 21:22:34.113627 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:5004] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maint/jp.php"] [unique_id "aaLsGhVE-FfM89u7BQaiugAAAIc"]
[Sat Feb 28 21:22:34.526460 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:4943] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maint/jp.php"] [unique_id "aaLsGrTHSOG_yf2PpqFrjwAAAdE"]
[Sat Feb 28 21:22:34.940207 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:5007] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLsGrLWOogAgHGh62SJ4wAAAZc"]
[Sat Feb 28 21:22:35.354540 2026] [:error] [pid 49763:tid 49780] [client 13.71.191.191:5000] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLsG7THSOG_yf2PpqFrkQAAAc4"]
[Sat Feb 28 21:22:35.768479 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:5024] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLsGxVE-FfM89u7BQaivQAAAIQ"]
[Sat Feb 28 21:22:36.178169 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:4994] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaLsHLLWOogAgHGh62SJ7QAAAZg"]
[Sat Feb 28 21:22:36.587207 2026] [:error] [pid 49763:tid 49785] [client 13.71.191.191:4946] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaLsHLTHSOG_yf2PpqFrlwAAAdM"]
[Sat Feb 28 21:22:36.997832 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:5098] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLsHBVE-FfM89u7BQaiwgAAAJg"]
[Sat Feb 28 21:22:37.411298 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:5020] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLsHRVE-FfM89u7BQaiwwAAAJA"]
[Sat Feb 28 21:22:37.820781 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:4949] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaLsHRCf4HvhVePw3LZIWQAAABY"]
[Sat Feb 28 21:22:38.234769 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:5023] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLsHrTHSOG_yf2PpqFroQAAAdc"]
[Sat Feb 28 21:22:38.654470 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:4995] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLsHrTHSOG_yf2PpqFrpwAAAck"]
[Sat Feb 28 21:22:39.072898 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:5082] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLsH7THSOG_yf2PpqFrqgAAAcs"]
[Sat Feb 28 21:22:39.487095 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:5043] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaLsH7THSOG_yf2PpqFrsAAAAdY"]
[Sat Feb 28 21:22:39.903360 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:5009] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLsH7THSOG_yf2PpqFrtQAAAdg"]
[Sat Feb 28 21:22:40.313619 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:5050] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLsILTHSOG_yf2PpqFrugAAAc8"]
[Sat Feb 28 21:22:40.732636 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:5025] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLsILLWOogAgHGh62SKAAAAAY8"]
[Sat Feb 28 21:22:41.143552 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:5008] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaLsIbLWOogAgHGh62SKBAAAAYY"]
[Sat Feb 28 21:22:41.552140 2026] [:error] [pid 11791:tid 11815] [client 13.71.191.191:4932] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WSO-Enigma.php"] [unique_id "aaLsIWuX5e1Q32gqxH3HVAAAARY"]
[Sat Feb 28 21:22:41.964855 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:5038] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WSO-Enigma.php"] [unique_id "aaLsIbLWOogAgHGh62SKCgAAAZc"]
[Sat Feb 28 21:22:42.378111 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:5065] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WSO-Enigma.php"] [unique_id "aaLsImuX5e1Q32gqxH3HVQAAARE"]
[Sat Feb 28 21:22:42.792095 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:5094] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/WSO-Enigma.php"] [unique_id "aaLsIhCf4HvhVePw3LZIYQAAAAA"]
[Sat Feb 28 21:22:43.206775 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:5014] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/general/cache/plugins.php"] [unique_id "aaLsI6IAO5fN7BxyqcF-xQAAAMg"]
[Sat Feb 28 21:22:43.622518 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:4942] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/general/cache/plugins.php"] [unique_id "aaLsI7LWOogAgHGh62SKFAAAAZg"]
[Sat Feb 28 21:22:44.045260 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:4929] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/general/cache/plugins.php"] [unique_id "aaLsJLTHSOG_yf2PpqFrxQAAAdQ"]
[Sat Feb 28 21:22:44.455084 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:4944] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/general/cache/plugins.php"] [unique_id "aaLsJH6mbajs3bzQGyumYgAAAUY"]
[Sat Feb 28 21:22:44.868693 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:5044] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/gif.php"] [unique_id "aaLsJGuX5e1Q32gqxH3HWAAAARM"]
[Sat Feb 28 21:22:45.283167 2026] [:error] [pid 39292:tid 39305] [client 13.71.191.191:5045] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaLsJaIAO5fN7BxyqcF-zQAAAMs"]
[Sat Feb 28 21:22:45.691635 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:4875] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaLsJVtZF9Zd_U7easDEkwAAAE8"]
[Sat Feb 28 21:22:46.100933 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:5117] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaLsJrLWOogAgHGh62SKHQAAAYA"]
[Sat Feb 28 21:22:46.519738 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:5076] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaLsJrTHSOG_yf2PpqFrzQAAAdA"]
[Sat Feb 28 21:22:46.929623 2026] [:error] [pid 39184:tid 39223] [client 13.71.191.191:4961] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaLsJltZF9Zd_U7easDEoAAAAEQ"]
[Sat Feb 28 21:22:47.341472 2026] [:error] [pid 39184:tid 39243] [client 13.71.191.191:5011] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaLsJ1tZF9Zd_U7easDEpAAAAFg"]
[Sat Feb 28 21:22:47.753505 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:4940] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaLsJxCf4HvhVePw3LZIbwAAAAk"]
[Sat Feb 28 21:22:48.168048 2026] [:error] [pid 39183:tid 39215] [client 13.71.191.191:5115] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/ern/classwithtostring.php"] [unique_id "aaLsKBCf4HvhVePw3LZIcQAAABc"]
[Sat Feb 28 21:22:48.580839 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:4937] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fnyeltio.php"] [unique_id "aaLsKGuX5e1Q32gqxH3HWgAAAQE"]
[Sat Feb 28 21:22:48.994462 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:5015] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fnyeltio.php"] [unique_id "aaLsKBCf4HvhVePw3LZIeAAAAAs"]
[Sat Feb 28 21:22:49.408150 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:4983] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fnyeltio.php"] [unique_id "aaLsKbTHSOG_yf2PpqFr1QAAAcY"]
[Sat Feb 28 21:22:49.815927 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:5002] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fnyeltio.php"] [unique_id "aaLsKX6mbajs3bzQGyumaAAAAUo"]
[Sat Feb 28 21:22:50.230903 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:5072] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaLsKhCf4HvhVePw3LZIiQAAABg"]
[Sat Feb 28 21:22:50.645279 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:4975] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaLsKqIAO5fN7BxyqcF-1gAAAMI"]
[Sat Feb 28 21:22:51.054222 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:4966] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/affiliate_manager.php"] [unique_id "aaLsKxCf4HvhVePw3LZIlgAAAAQ"]
[Sat Feb 28 21:22:51.471448 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:5068] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/affiliate_manager.php"] [unique_id "aaLsK6IAO5fN7BxyqcF-2AAAANg"]
[Sat Feb 28 21:22:51.885989 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:5061] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/affiliate_manager.php"] [unique_id "aaLsKxCf4HvhVePw3LZIogAAAAE"]
[Sat Feb 28 21:22:52.295728 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:5039] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaLsLBCf4HvhVePw3LZIqQAAAA8"]
[Sat Feb 28 21:22:52.703083 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:4935] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaLsLLTHSOG_yf2PpqFr3gAAAcw"]
[Sat Feb 28 21:22:53.114873 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:5074] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaLsLRVE-FfM89u7BQaizgAAAI4"]
[Sat Feb 28 21:22:53.526796 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:5109] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ALFA_DATA/alfacgiapi/bk.php"] [unique_id "aaLsLRCf4HvhVePw3LZIuAAAAAs"]
[Sat Feb 28 21:22:53.941511 2026] [:error] [pid 39292:tid 39316] [client 13.71.191.191:5013] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaLsLaIAO5fN7BxyqcF-3QAAANY"]
[Sat Feb 28 21:22:54.354725 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:5047] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaLsLhVE-FfM89u7BQai0QAAAI8"]
[Sat Feb 28 21:22:54.763084 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:5026] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaLsLn6mbajs3bzQGyumcQAAAVM"]
[Sat Feb 28 21:22:55.178747 2026] [:error] [pid 39183:tid 39195] [client 13.71.191.191:4965] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php/cpvcigyk.php/text.php"] [unique_id "aaLsLxCf4HvhVePw3LZIzgAAAAM"]
[Sat Feb 28 21:22:55.594782 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:5053] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaLsL6IAO5fN7BxyqcF-4QAAAMA"]
[Sat Feb 28 21:22:56.004769 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:4976] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaLsMLLWOogAgHGh62SKIgAAAYs"]
[Sat Feb 28 21:22:56.414436 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:5110] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaLsMLTHSOG_yf2PpqFr7QAAAck"]
[Sat Feb 28 21:22:56.824025 2026] [:error] [pid 49763:tid 49772] [client 13.71.191.191:5017] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php/file1.php/text.php"] [unique_id "aaLsMLTHSOG_yf2PpqFr8gAAAcY"]
[Sat Feb 28 21:22:57.238081 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:4960] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaLsMbLWOogAgHGh62SKKAAAAZg"]
[Sat Feb 28 21:22:57.651501 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:5052] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaLsMX6mbajs3bzQGyumcwAAAUw"]
[Sat Feb 28 21:22:58.065542 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:4948] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaLsMrTHSOG_yf2PpqFr_AAAAcU"]
[Sat Feb 28 21:22:58.478658 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:4934] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/more/alfa-rex.php8"] [unique_id "aaLsMhCf4HvhVePw3LZI-gAAAAs"]
[Sat Feb 28 21:22:58.892262 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:5108] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pu.php"] [unique_id "aaLsMhCf4HvhVePw3LZJAwAAABQ"]
[Sat Feb 28 21:22:59.303070 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:4999] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pu.php"] [unique_id "aaLsMxVE-FfM89u7BQai2QAAAIk"]
[Sat Feb 28 21:22:59.716759 2026] [:error] [pid 39183:tid 39209] [client 13.71.191.191:5022] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pu.php"] [unique_id "aaLsMxCf4HvhVePw3LZJGQAAABE"]
[Sat Feb 28 21:23:00.134635 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:5036] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pu.php"] [unique_id "aaLsNKIAO5fN7BxyqcF-6QAAANU"]
[Sat Feb 28 21:23:00.544842 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:5058] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/js/foter.php"] [unique_id "aaLsNLLWOogAgHGh62SKLQAAAZM"]
[Sat Feb 28 21:23:00.960712 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:4947] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/js/foter.php"] [unique_id "aaLsNKIAO5fN7BxyqcF-7wAAAM8"]
[Sat Feb 28 21:23:01.380561 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:5048] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/js/foter.php"] [unique_id "aaLsNbTHSOG_yf2PpqFsAwAAAc8"]
[Sat Feb 28 21:23:01.798061 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:4967] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/assets/contao/js/foter.php"] [unique_id "aaLsNbTHSOG_yf2PpqFsCQAAAdQ"]
[Sat Feb 28 21:23:02.217893 2026] [:error] [pid 49763:tid 49769] [client 13.71.191.191:4972] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaLsNrTHSOG_yf2PpqFsDgAAAcM"]
[Sat Feb 28 21:23:02.631383 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:4885] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/404.php"] [unique_id "aaLsNrLWOogAgHGh62SKMwAAAYw"]
[Sat Feb 28 21:23:03.041828 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:5095] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog/wp-2018.php"] [unique_id "aaLsN7THSOG_yf2PpqFsHQAAAck"]
[Sat Feb 28 21:23:03.451928 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:5035] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog/wp-2018.php"] [unique_id "aaLsN7THSOG_yf2PpqFsHwAAAc8"]
[Sat Feb 28 21:23:03.867719 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:5030] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog/wp-2018.php"] [unique_id "aaLsN7THSOG_yf2PpqFsIwAAAcU"]
[Sat Feb 28 21:23:04.282782 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:4928] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaLsOLLWOogAgHGh62SKNgAAAZU"]
[Sat Feb 28 21:23:04.693407 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:4962] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaLsOLTHSOG_yf2PpqFsKwAAAcE"]
[Sat Feb 28 21:23:05.103166 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:5113] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaLsObTHSOG_yf2PpqFsMAAAAdc"]
[Sat Feb 28 21:23:05.519965 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:4914] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaLsObTHSOG_yf2PpqFsNgAAAdU"]
[Sat Feb 28 21:23:05.935542 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:4954] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaLsORVE-FfM89u7BQai4gAAAJE"]
[Sat Feb 28 21:23:06.347440 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:5075] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaLsOrTHSOG_yf2PpqFsPQAAAcE"]
[Sat Feb 28 21:23:06.758062 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:5040] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaLsOqIAO5fN7BxyqcF--AAAAMY"]
[Sat Feb 28 21:23:07.171208 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:5106] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaLsO6IAO5fN7BxyqcF--gAAAMo"]
[Sat Feb 28 21:23:07.585540 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:4936] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/news_event/1.php7"] [unique_id "aaLsO36mbajs3bzQGyumfgAAAVE"]
[Sat Feb 28 21:23:07.996146 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:4876] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/news_event/1.php7"] [unique_id "aaLsO7LWOogAgHGh62SKQgAAAYo"]
[Sat Feb 28 21:23:08.406027 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:4916] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/news_event/1.php7"] [unique_id "aaLsPLLWOogAgHGh62SKSQAAAZg"]
[Sat Feb 28 21:23:08.824609 2026] [:error] [pid 39183:tid 39195] [client 13.71.191.191:4963] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/news_event/1.php7"] [unique_id "aaLsPBCf4HvhVePw3LZJMgAAAAM"]
[Sat Feb 28 21:23:09.242494 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:5059] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLsPRCf4HvhVePw3LZJNwAAABM"]
[Sat Feb 28 21:23:09.655212 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:4981] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLsPbTHSOG_yf2PpqFsRgAAAck"]
[Sat Feb 28 21:23:10.071155 2026] [:error] [pid 39183:tid 39213] [client 13.71.191.191:4964] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLsPhCf4HvhVePw3LZJQgAAABU"]
[Sat Feb 28 21:23:10.489768 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:5016] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaLsPqIAO5fN7BxyqcF-_wAAAMU"]
[Sat Feb 28 21:23:10.904787 2026] [:error] [pid 39183:tid 39194] [client 13.71.191.191:4878] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLsPhCf4HvhVePw3LZJSQAAAAI"]
[Sat Feb 28 21:23:11.319278 2026] [:error] [pid 39292:tid 39316] [client 13.71.191.191:5055] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLsP6IAO5fN7BxyqcF_AQAAANY"]
[Sat Feb 28 21:23:11.735023 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:4938] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLsPxVE-FfM89u7BQai7wAAAJc"]
[Sat Feb 28 21:23:12.160713 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:4957] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaLsQGuX5e1Q32gqxH3HawAAARc"]
[Sat Feb 28 21:23:12.569651 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:4951] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/docs.php"] [unique_id "aaLsQKIAO5fN7BxyqcF_AwAAANM"]
[Sat Feb 28 21:23:12.982773 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:4990] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/docs.php"] [unique_id "aaLsQLTHSOG_yf2PpqFsVAAAAdc"]
[Sat Feb 28 21:23:13.398914 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:4895] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/docs.php"] [unique_id "aaLsQWuX5e1Q32gqxH3HcgAAAQI"]
[Sat Feb 28 21:23:13.815415 2026] [:error] [pid 49763:tid 49781] [client 13.71.191.191:4933] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/docs.php"] [unique_id "aaLsQbTHSOG_yf2PpqFsXQAAAc8"]
[Sat Feb 28 21:23:14.231843 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:5096] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaLsQhCf4HvhVePw3LZJUwAAAAE"]
[Sat Feb 28 21:23:15.071898 2026] [proxy_fcgi:error] [pid 52460:tid 52484] [client 13.71.191.191:4879] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:23:15.281114 2026] [proxy_fcgi:error] [pid 52460:tid 52478] [client 13.71.191.191:4879] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:23:15.693941 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:4879] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaLsQ7LWOogAgHGh62SKegAAAZM"]
[Sat Feb 28 21:23:16.524697 2026] [proxy_fcgi:error] [pid 39184:tid 39232] [client 13.71.191.191:4930] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:23:17.149780 2026] [proxy_fcgi:error] [pid 39184:tid 39220] [client 13.71.191.191:4930] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 21:23:17.354790 2026] [:error] [pid 39184:tid 39242] [client 13.71.191.191:4930] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/input.php"] [unique_id "aaLsRVtZF9Zd_U7easDExwAAAFc"]
[Sat Feb 28 21:23:17.765663 2026] [:error] [pid 39183:tid 39196] [client 13.71.191.191:4883] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/uploads__.php"] [unique_id "aaLsRRCf4HvhVePw3LZJXwAAAAQ"]
[Sat Feb 28 21:23:18.178905 2026] [:error] [pid 49763:tid 49778] [client 13.71.191.191:4877] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/uploads__.php"] [unique_id "aaLsRrTHSOG_yf2PpqFsdwAAAcw"]
[Sat Feb 28 21:23:18.594349 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:5088] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/uploads__.php"] [unique_id "aaLsRhCf4HvhVePw3LZJaAAAABg"]
[Sat Feb 28 21:23:19.007663 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:4874] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaLsR7LWOogAgHGh62SKjgAAAY4"]
[Sat Feb 28 21:23:19.419213 2026] [:error] [pid 49763:tid 49775] [client 13.71.191.191:4980] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaLsR7THSOG_yf2PpqFsfgAAAck"]
[Sat Feb 28 21:23:19.829787 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:5091] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaLsR7THSOG_yf2PpqFsgwAAAdU"]
[Sat Feb 28 21:23:20.240937 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:4974] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaLsSGuX5e1Q32gqxH3HfQAAAQU"]
[Sat Feb 28 21:23:20.651527 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:5054] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaLsSH6mbajs3bzQGyumlQAAAU8"]
[Sat Feb 28 21:23:21.060124 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:4973] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaLsSbTHSOG_yf2PpqFsjwAAAcU"]
[Sat Feb 28 21:23:21.472194 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:4817] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaLsSaIAO5fN7BxyqcF_FwAAAMQ"]
[Sat Feb 28 21:23:21.888918 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:4956] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaLsSbTHSOG_yf2PpqFsmgAAAcQ"]
[Sat Feb 28 21:23:22.303843 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:5070] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/service.php"] [unique_id "aaLsSrTHSOG_yf2PpqFsoAAAAcU"]
[Sat Feb 28 21:23:22.719315 2026] [:error] [pid 49763:tid 49773] [client 13.71.191.191:4809] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/service.php"] [unique_id "aaLsSrTHSOG_yf2PpqFspgAAAcc"]
[Sat Feb 28 21:23:23.136700 2026] [:error] [pid 49763:tid 49776] [client 13.71.191.191:4991] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/service.php"] [unique_id "aaLsS7THSOG_yf2PpqFsqwAAAco"]
[Sat Feb 28 21:23:23.548086 2026] [:error] [pid 39292:tid 39305] [client 13.71.191.191:4959] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/service.php"] [unique_id "aaLsS6IAO5fN7BxyqcF_GwAAAMs"]
[Sat Feb 28 21:23:23.958316 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:4971] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/cache.php"] [unique_id "aaLsSxVE-FfM89u7BQai9gAAAJE"]
[Sat Feb 28 21:23:24.371609 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:5069] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/cache.php"] [unique_id "aaLsTBVE-FfM89u7BQai-AAAAIA"]
[Sat Feb 28 21:23:24.784894 2026] [:error] [pid 39185:tid 39264] [client 13.71.191.191:4898] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/cache.php"] [unique_id "aaLsTBVE-FfM89u7BQai-gAAAJI"]
[Sat Feb 28 21:23:25.198247 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:4923] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/js/cache.php"] [unique_id "aaLsTaIAO5fN7BxyqcF_JwAAANE"]
[Sat Feb 28 21:23:25.615428 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:5097] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aaLsTVtZF9Zd_U7easDE0AAAAEU"]
[Sat Feb 28 21:23:26.027354 2026] [:error] [pid 49763:tid 49779] [client 13.71.191.191:5056] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aaLsTrTHSOG_yf2PpqFstwAAAc0"]
[Sat Feb 28 21:23:26.437215 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:5012] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aaLsTqIAO5fN7BxyqcF_KgAAAMI"]
[Sat Feb 28 21:23:26.850946 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:4950] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aaLsTltZF9Zd_U7easDE1gAAAFQ"]
[Sat Feb 28 21:23:27.271939 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:4941] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaLsT1tZF9Zd_U7easDE3AAAAFI"]
[Sat Feb 28 21:23:27.680894 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:4988] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaLsT7LWOogAgHGh62SKmwAAAY0"]
[Sat Feb 28 21:23:28.089371 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:4865] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaLsUFtZF9Zd_U7easDE5wAAAEk"]
[Sat Feb 28 21:23:28.501306 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:4897] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aaLsUH6mbajs3bzQGyumnQAAAUw"]
[Sat Feb 28 21:23:28.918079 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:4873] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell.php"] [unique_id "aaLsULLWOogAgHGh62SKqAAAAYc"]
[Sat Feb 28 21:23:29.339320 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:4917] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell.php"] [unique_id "aaLsURVE-FfM89u7BQajBAAAAIU"]
[Sat Feb 28 21:23:29.754504 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:4982] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell.php"] [unique_id "aaLsURVE-FfM89u7BQajBwAAAIg"]
[Sat Feb 28 21:23:30.165005 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:4939] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell.php"] [unique_id "aaLsUhVE-FfM89u7BQajCwAAAIA"]
[Sat Feb 28 21:23:30.575723 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:4853] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mrbmppbo.php"] [unique_id "aaLsUrLWOogAgHGh62SKrwAAAY8"]
[Sat Feb 28 21:23:30.988200 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:4931] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mrbmppbo.php"] [unique_id "aaLsUhVE-FfM89u7BQajEgAAAIQ"]
[Sat Feb 28 21:23:31.404783 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:4992] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mrbmppbo.php"] [unique_id "aaLsU1tZF9Zd_U7easDE_AAAAEk"]
[Sat Feb 28 21:23:31.825929 2026] [:error] [pid 11791:tid 11813] [client 13.71.191.191:4884] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mrbmppbo.php"] [unique_id "aaLsU2uX5e1Q32gqxH3HlwAAARQ"]
[Sat Feb 28 21:23:32.243649 2026] [:error] [pid 39183:tid 39212] [client 13.71.191.191:4821] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaLsVBCf4HvhVePw3LZJmwAAABQ"]
[Sat Feb 28 21:23:32.658404 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:4896] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaLsVGuX5e1Q32gqxH3HmwAAARU"]
[Sat Feb 28 21:23:33.072690 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:4969] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaLsVbTHSOG_yf2PpqFs7gAAAdE"]
[Sat Feb 28 21:23:33.487855 2026] [:error] [pid 49763:tid 49779] [client 13.71.191.191:5049] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/mfw-activity-logger/csv-uploads/TitaniumEx.php"] [unique_id "aaLsVbTHSOG_yf2PpqFs8wAAAc0"]
[Sat Feb 28 21:23:33.908840 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:4866] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaLsVRCf4HvhVePw3LZJ0gAAAAE"]
[Sat Feb 28 21:23:34.327548 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:4970] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaLsVrTHSOG_yf2PpqFs-AAAAcQ"]
[Sat Feb 28 21:23:34.743026 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:4801] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaLsVqIAO5fN7BxyqcF_MgAAAMA"]
[Sat Feb 28 21:23:35.156064 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:5021] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaLsV7LWOogAgHGh62SK9wAAAZA"]
[Sat Feb 28 21:23:35.569747 2026] [:error] [pid 49763:tid 49771] [client 13.71.191.191:5032] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLsV7THSOG_yf2PpqFtAQAAAcU"]
[Sat Feb 28 21:23:35.986788 2026] [:error] [pid 49763:tid 49786] [client 13.71.191.191:4886] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLsV7THSOG_yf2PpqFtCgAAAdQ"]
[Sat Feb 28 21:23:36.399836 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:4867] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLsWKIAO5fN7BxyqcF_OgAAAM0"]
[Sat Feb 28 21:23:36.811683 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:5104] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db/phpmyadmin3/index.php"] [unique_id "aaLsWFtZF9Zd_U7easDFGwAAAEo"]
[Sat Feb 28 21:23:37.226246 2026] [:error] [pid 49763:tid 49787] [client 13.71.191.191:4851] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaLsWbTHSOG_yf2PpqFtHwAAAdU"]
[Sat Feb 28 21:23:37.645285 2026] [:error] [pid 49763:tid 49788] [client 13.71.191.191:4813] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaLsWbTHSOG_yf2PpqFtKAAAAdY"]
[Sat Feb 28 21:23:38.057887 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:4899] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaLsWhCf4HvhVePw3LZJ4wAAAAs"]
[Sat Feb 28 21:23:38.468671 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:4835] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaLsWrTHSOG_yf2PpqFtOAAAAcQ"]
[Sat Feb 28 21:23:38.882979 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:4905] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aaLsWrLWOogAgHGh62SLAAAAAZM"]
[Sat Feb 28 21:23:39.300141 2026] [:error] [pid 49763:tid 49790] [client 13.71.191.191:4869] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aaLsW7THSOG_yf2PpqFtQQAAAdg"]
[Sat Feb 28 21:23:39.708685 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:4909] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aaLsW7THSOG_yf2PpqFtSAAAAdA"]
[Sat Feb 28 21:23:40.125067 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:4881] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "aaLsXGuX5e1Q32gqxH3HrAAAAQk"]
[Sat Feb 28 21:23:40.541708 2026] [:error] [pid 49763:tid 49779] [client 13.71.191.191:4806] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLsXLTHSOG_yf2PpqFtVAAAAc0"]
[Sat Feb 28 21:23:40.959551 2026] [:error] [pid 49763:tid 49768] [client 13.71.191.191:5033] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLsXLTHSOG_yf2PpqFtVwAAAcI"]
[Sat Feb 28 21:23:41.370079 2026] [:error] [pid 39183:tid 39207] [client 13.71.191.191:4751] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLsXRCf4HvhVePw3LZJ7gAAAA8"]
[Sat Feb 28 21:23:41.779673 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:4826] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aaLsXRCf4HvhVePw3LZJ8AAAAAE"]
[Sat Feb 28 21:23:42.190255 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:4985] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsXltZF9Zd_U7easDFLAAAAFQ"]
[Sat Feb 28 21:23:42.623768 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:4871] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsXrTHSOG_yf2PpqFtaQAAAdc"]
[Sat Feb 28 21:23:43.038077 2026] [:error] [pid 39184:tid 39235] [client 13.71.191.191:4868] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsX1tZF9Zd_U7easDFLQAAAFA"]
[Sat Feb 28 21:23:43.453354 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:5046] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms.php"] [unique_id "aaLsX7THSOG_yf2PpqFtdgAAAcQ"]
[Sat Feb 28 21:23:43.863814 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:4977] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aaLsX36mbajs3bzQGyumuQAAAVM"]
[Sat Feb 28 21:23:44.280233 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:4845] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aaLsYGuX5e1Q32gqxH3HuAAAAQs"]
[Sat Feb 28 21:23:44.690104 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:4906] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aaLsYH6mbajs3bzQGyumvwAAAUQ"]
[Sat Feb 28 21:23:45.101112 2026] [:error] [pid 22194:tid 22206] [client 13.71.191.191:4900] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aaLsYX6mbajs3bzQGyumwAAAAUo"]
[Sat Feb 28 21:23:45.510399 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:4902] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php"] [unique_id "aaLsYX6mbajs3bzQGyumxAAAAUU"]
[Sat Feb 28 21:23:45.926031 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:4823] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php"] [unique_id "aaLsYX6mbajs3bzQGyumzQAAAVg"]
[Sat Feb 28 21:23:46.342471 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:5079] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php"] [unique_id "aaLsYrLWOogAgHGh62SLLgAAAZA"]
[Sat Feb 28 21:23:46.758182 2026] [:error] [pid 39184:tid 39231] [client 13.71.191.191:4894] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/duck.php"] [unique_id "aaLsYltZF9Zd_U7easDFMwAAAEw"]
[Sat Feb 28 21:23:47.171071 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:4912] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaLsY7THSOG_yf2PpqFtjwAAAcs"]
[Sat Feb 28 21:23:47.589829 2026] [:error] [pid 39183:tid 39204] [client 13.71.191.191:4891] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaLsYxCf4HvhVePw3LZKEgAAAAw"]
[Sat Feb 28 21:23:48.006440 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:4908] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaLsZLLWOogAgHGh62SLNAAAAYE"]
[Sat Feb 28 21:23:48.415839 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:5093] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaLsZBCf4HvhVePw3LZKGQAAABM"]
[Sat Feb 28 21:23:48.823948 2026] [:error] [pid 49763:tid 49783] [client 13.71.191.191:4808] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dqbayyrz.php"] [unique_id "aaLsZLTHSOG_yf2PpqFtmwAAAdE"]
[Sat Feb 28 21:23:49.258990 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:5031] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dqbayyrz.php"] [unique_id "aaLsZbLWOogAgHGh62SLOAAAAZM"]
[Sat Feb 28 21:23:49.671854 2026] [:error] [pid 39183:tid 39210] [client 13.71.191.191:4915] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dqbayyrz.php"] [unique_id "aaLsZRCf4HvhVePw3LZKJQAAABI"]
[Sat Feb 28 21:23:50.084268 2026] [:error] [pid 49763:tid 49777] [client 13.71.191.191:4807] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dqbayyrz.php"] [unique_id "aaLsZrTHSOG_yf2PpqFtpAAAAcs"]
[Sat Feb 28 23:08:00.490210 2026] [:error] [pid 49763:tid 49782] [client 20.151.205.221:25772] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaME0LTHSOG_yf2PpqH41gAAAdA"]
[Sat Feb 28 23:08:01.318664 2026] [:error] [pid 39183:tid 39199] [client 20.151.205.221:25684] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaME0RCf4HvhVePw3LbF8AAAAAc"]
[Sat Feb 28 23:08:02.207892 2026] [:error] [pid 52460:tid 52463] [client 20.151.205.221:25745] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaME0rLWOogAgHGh62TYIgAAAYA"]
[Sat Feb 28 23:08:03.036617 2026] [:error] [pid 52460:tid 52466] [client 20.151.205.221:25776] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaME07LWOogAgHGh62TYJAAAAYM"]
[Sat Feb 28 23:25:43.250062 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:43.457663 2026] [proxy_fcgi:error] [pid 49763:tid 49768] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:43.665101 2026] [proxy_fcgi:error] [pid 49763:tid 49782] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:43.873323 2026] [proxy_fcgi:error] [pid 49763:tid 49776] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:44.081602 2026] [proxy_fcgi:error] [pid 49763:tid 49770] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:44.289538 2026] [proxy_fcgi:error] [pid 49763:tid 49790] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:44.703774 2026] [proxy_fcgi:error] [pid 49763:tid 49773] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:44.912474 2026] [proxy_fcgi:error] [pid 49763:tid 49778] [client 20.63.83.113:15909] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 23:25:45.323656 2026] [:error] [pid 49763:tid 49787] [client 20.63.83.113:15909] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aaMI-bTHSOG_yf2PpqELcgAAAdU"]
[Sat Feb 28 23:25:45.733701 2026] [:error] [pid 22194:tid 22206] [client 20.63.83.113:20565] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aaMI-X6mbajs3bzQGyu-kwAAAUo"]
[Sat Feb 28 23:25:46.145800 2026] [:error] [pid 49763:tid 49779] [client 20.63.83.113:34051] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aaMI-rTHSOG_yf2PpqELcwAAAc0"]
[Sat Feb 28 23:25:46.558526 2026] [:error] [pid 39183:tid 39197] [client 20.63.83.113:2510] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aaMI-hCf4HvhVePw3LbjpQAAAAU"]
[Sat Feb 28 23:25:46.972595 2026] [:error] [pid 49763:tid 49790] [client 20.63.83.113:60318] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynz.PhP7"] [unique_id "aaMI-rTHSOG_yf2PpqELeAAAAdg"]
[Sat Feb 28 23:25:47.394841 2026] [:error] [pid 49763:tid 49789] [client 20.63.83.113:45244] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynz.PhP7"] [unique_id "aaMI-7THSOG_yf2PpqELfgAAAdc"]
[Sat Feb 28 23:25:47.809093 2026] [:error] [pid 39183:tid 39205] [client 20.63.83.113:2544] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynz.PhP7"] [unique_id "aaMI-xCf4HvhVePw3LbjtQAAAA0"]
[Sat Feb 28 23:25:48.218622 2026] [:error] [pid 49763:tid 49783] [client 20.63.83.113:60337] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynz.PhP7"] [unique_id "aaMI_LTHSOG_yf2PpqELhgAAAdE"]
[Sat Feb 28 23:25:48.645019 2026] [:error] [pid 39183:tid 39214] [client 20.63.83.113:15881] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aaMI_BCf4HvhVePw3LbjwgAAABY"]
[Sat Feb 28 23:25:49.058981 2026] [:error] [pid 52460:tid 52485] [client 20.63.83.113:45188] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aaMI_bLWOogAgHGh62TnFAAAAZY"]
[Sat Feb 28 23:25:49.469403 2026] [:error] [pid 52460:tid 52487] [client 20.63.83.113:2515] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aaMI_bLWOogAgHGh62TnFQAAAZg"]
[Sat Feb 28 23:25:49.884798 2026] [:error] [pid 52460:tid 52476] [client 20.63.83.113:6696] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byp.php"] [unique_id "aaMI_bLWOogAgHGh62TnGgAAAY0"]
[Sat Feb 28 23:25:50.303922 2026] [:error] [pid 49763:tid 49784] [client 20.63.83.113:2498] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aaMI_rTHSOG_yf2PpqELlAAAAdI"]
[Sat Feb 28 23:25:50.722249 2026] [:error] [pid 39184:tid 39234] [client 20.63.83.113:20582] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aaMI_ltZF9Zd_U7easABJwAAAE8"]
[Sat Feb 28 23:25:51.145055 2026] [:error] [pid 52460:tid 52485] [client 20.63.83.113:45238] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aaMI_7LWOogAgHGh62TnIQAAAZY"]
[Sat Feb 28 23:25:51.554371 2026] [:error] [pid 39184:tid 39241] [client 20.63.83.113:34087] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "aaMI_1tZF9Zd_U7easABKQAAAFY"]
[Sat Feb 28 23:25:51.967669 2026] [:error] [pid 52460:tid 52477] [client 20.63.83.113:20546] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aaMI_7LWOogAgHGh62TnJwAAAY4"]
[Sat Feb 28 23:25:52.384736 2026] [:error] [pid 52460:tid 52481] [client 20.63.83.113:2496] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aaMJALLWOogAgHGh62TnKwAAAZI"]
[Sat Feb 28 23:25:52.796832 2026] [:error] [pid 39184:tid 39223] [client 20.63.83.113:20544] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aaMJAFtZF9Zd_U7easABMAAAAEQ"]
[Sat Feb 28 23:25:53.210319 2026] [:error] [pid 39183:tid 39212] [client 20.63.83.113:60291] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "aaMJARCf4HvhVePw3Lbj1gAAABQ"]
[Sat Feb 28 23:25:53.624284 2026] [:error] [pid 49763:tid 49781] [client 20.63.83.113:60340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaMJAbTHSOG_yf2PpqELpAAAAc8"]
[Sat Feb 28 23:25:54.050731 2026] [:error] [pid 39184:tid 39228] [client 20.63.83.113:15877] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaMJAltZF9Zd_U7easABOAAAAEk"]
[Sat Feb 28 23:25:54.468699 2026] [:error] [pid 52460:tid 52470] [client 20.63.83.113:60308] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaMJArLWOogAgHGh62TnMgAAAYc"]
[Sat Feb 28 23:25:54.887462 2026] [:error] [pid 39183:tid 39203] [client 20.63.83.113:60341] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaMJAhCf4HvhVePw3Lbj3AAAAAs"]
[Sat Feb 28 23:25:55.308621 2026] [:error] [pid 39184:tid 39223] [client 20.63.83.113:6686] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aaMJA1tZF9Zd_U7easABPgAAAEQ"]
[Sat Feb 28 23:25:55.718184 2026] [:error] [pid 52460:tid 52468] [client 20.63.83.113:2509] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aaMJA7LWOogAgHGh62TnOQAAAYU"]
[Sat Feb 28 23:25:56.127432 2026] [:error] [pid 39183:tid 39204] [client 20.63.83.113:15930] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aaMJBBCf4HvhVePw3Lbj6QAAAAw"]
[Sat Feb 28 23:25:56.541108 2026] [:error] [pid 52460:tid 52485] [client 20.63.83.113:34079] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aaMJBLLWOogAgHGh62TnPgAAAZY"]
[Sat Feb 28 23:25:56.959720 2026] [:error] [pid 39183:tid 39201] [client 20.63.83.113:34111] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass.php"] [unique_id "aaMJBBCf4HvhVePw3Lbj8gAAAAk"]
[Sat Feb 28 23:25:57.377291 2026] [:error] [pid 52460:tid 52484] [client 20.63.83.113:15920] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass.php"] [unique_id "aaMJBbLWOogAgHGh62TnRAAAAZU"]
[Sat Feb 28 23:25:57.788002 2026] [:error] [pid 52460:tid 52475] [client 20.63.83.113:15929] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass.php"] [unique_id "aaMJBbLWOogAgHGh62TnSgAAAYw"]
[Sat Feb 28 23:25:58.206227 2026] [:error] [pid 39183:tid 39196] [client 20.63.83.113:20562] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass.php"] [unique_id "aaMJBhCf4HvhVePw3Lbj-gAAAAQ"]
[Sat Feb 28 23:25:58.619072 2026] [:error] [pid 49763:tid 49772] [client 20.63.83.113:45218] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aaMJBrTHSOG_yf2PpqELrwAAAcY"]
[Sat Feb 28 23:25:59.034113 2026] [:error] [pid 39184:tid 39220] [client 20.63.83.113:60332] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aaMJB1tZF9Zd_U7easABSgAAAEE"]
[Sat Feb 28 23:25:59.447243 2026] [:error] [pid 39183:tid 39211] [client 20.63.83.113:2540] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aaMJBxCf4HvhVePw3LbkAwAAABM"]
[Sat Feb 28 23:25:59.857905 2026] [:error] [pid 52460:tid 52467] [client 20.63.83.113:60331] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "aaMJB7LWOogAgHGh62TnUwAAAYQ"]
[Sun Mar 01 00:26:55.175361 2026] [:error] [pid 53600:tid 53604] [client 20.63.83.162:24320] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMXTw2UMRAYWtDB23SinQAAAQE"]
[Sun Mar 01 00:26:56.018880 2026] [:error] [pid 30795:tid 30811] [client 20.63.83.162:24333] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMXUGuI44IL94Zgti-m7gAAAAM"]
[Sun Mar 01 00:26:56.888543 2026] [:error] [pid 31190:tid 31208] [client 20.63.83.162:24527] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMXUBfvwGOholYpM1E-9AAAAMI"]
[Sun Mar 01 00:26:57.753098 2026] [:error] [pid 53600:tid 53618] [client 20.63.83.162:24308] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMXUQ2UMRAYWtDB23SitQAAAQ8"]
[Sun Mar 01 00:36:26.176823 2026] [:error] [pid 30795:tid 30827] [client 43.165.190.5:53264] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaMZimuI44IL94Zgti-tHgAAABM"]
[Sun Mar 01 01:00:52.759699 2026] [:error] [pid 31190:tid 31206] [client 20.63.83.162:30661] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMfRBfvwGOholYpM1FimwAAAMA"]
[Sun Mar 01 01:00:53.590514 2026] [:error] [pid 31190:tid 31224] [client 20.63.83.162:29955] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMfRRfvwGOholYpM1FiqwAAANI"]
[Sun Mar 01 01:00:54.419202 2026] [:error] [pid 53600:tid 53627] [client 20.63.83.162:30670] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMfRg2UMRAYWtDB23TO5gAAARg"]
[Sun Mar 01 01:00:55.254816 2026] [:error] [pid 11920:tid 11927] [client 20.63.83.162:30679] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaMfRyzLNJUKxvBorrB6-wAAAYM"]
[Sun Mar 01 02:06:43.595504 2026] [:error] [pid 30798:tid 30905] [client 77.90.185.115:36852] [client 77.90.185.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aaMus8BkD73gO8wTonaWrQAAAIY"]
[Sun Mar 01 02:29:44.710411 2026] [:error] [pid 30798:tid 30906] [client 192.253.248.11:54272] [client 192.253.248.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aaM0GMBkD73gO8wTonaunwAAAIc"]
[Sun Mar 01 02:39:40.185040 2026] [:error] [pid 11920:tid 11928] [client 43.153.35.128:42462] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaM2bCzLNJUKxvBorrAQlgAAAYQ"]
[Sun Mar 01 02:45:10.123775 2026] [proxy_fcgi:error] [pid 11920:tid 11933] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:10.332251 2026] [proxy_fcgi:error] [pid 11920:tid 11938] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:10.543038 2026] [proxy_fcgi:error] [pid 11920:tid 11947] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:10.752436 2026] [proxy_fcgi:error] [pid 11920:tid 11936] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:10.962887 2026] [proxy_fcgi:error] [pid 11920:tid 11929] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:11.171665 2026] [proxy_fcgi:error] [pid 11920:tid 11944] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:11.596812 2026] [proxy_fcgi:error] [pid 11920:tid 11934] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:11.805120 2026] [proxy_fcgi:error] [pid 11920:tid 11939] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:12.013357 2026] [proxy_fcgi:error] [pid 11920:tid 11948] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:12.221907 2026] [proxy_fcgi:error] [pid 11920:tid 11947] [client 20.151.205.221:57675] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 02:45:12.426832 2026] [:error] [pid 11920:tid 11936] [client 20.151.205.221:57675] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaM3uCzLNJUKxvBorrAVpQAAAYw"]
[Sun Mar 01 02:45:13.265965 2026] [:error] [pid 53600:tid 53609] [client 20.151.205.221:58698] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaM3uQ2UMRAYWtDB23T8RQAAAQY"]
[Sun Mar 01 02:45:14.105085 2026] [:error] [pid 7644:tid 7650] [client 20.151.205.221:58734] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaM3uvqeDUGmVAHX7VCy3AAAAUQ"]
[Sun Mar 01 02:45:14.936929 2026] [:error] [pid 30798:tid 30909] [client 20.151.205.221:57681] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aaM3usBkD73gO8wTona4TwAAAIo"]
[Sun Mar 01 03:13:24.139646 2026] [:error] [pid 30798:tid 30900] [client 182.42.104.32:51682] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaM-VMBkD73gO8wTonbZcAAAAIE"]
[Sun Mar 01 03:27:15.753598 2026] [:error] [pid 11920:tid 11924] [client 35.150.39.131:15468] [client 35.150.39.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.150.39.131, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaNBkyzLNJUKxvBorrBFFQAAAYA"]
[Sun Mar 01 03:27:15.771129 2026] [proxy_fcgi:error] [pid 11920:tid 11924] [client 35.150.39.131:15468] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:41:17.209406 2026] [:error] [pid 21158:tid 21201] [client 103.65.236.153:49621] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aaNS7TriSIe3-pWnbPbQmwAAAEg"]
[Sun Mar 01 04:41:17.464918 2026] [:error] [pid 21159:tid 21231] [client 103.65.236.153:49638] [client 103.65.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aaNS7eLi3ouy1NZIkgoMFQAAAIo"]
[Sun Mar 01 05:24:28.477986 2026] [proxy_fcgi:error] [pid 21158:tid 21201] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:28.638487 2026] [proxy_fcgi:error] [pid 21158:tid 21198] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:28.940014 2026] [proxy_fcgi:error] [pid 21158:tid 21206] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:29.157192 2026] [proxy_fcgi:error] [pid 21158:tid 21203] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:29.458640 2026] [proxy_fcgi:error] [pid 21158:tid 21202] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:30.973409 2026] [proxy_fcgi:error] [pid 21158:tid 21199] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:31.124743 2026] [proxy_fcgi:error] [pid 21158:tid 21200] [client 40.115.138.121:2019] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 05:24:31.420853 2026] [:error] [pid 21158:tid 21197] [client 40.115.138.121:2019] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaNdDzriSIe3-pWnbPbhVwAAAEQ"]
[Sun Mar 01 05:24:31.966466 2026] [:error] [pid 8688:tid 8693] [client 40.115.138.121:1623] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaNdDzHJ4Nn-RvulD0qFpgAAAUM"]
[Sun Mar 01 05:24:32.617585 2026] [:error] [pid 8688:tid 8700] [client 40.115.138.121:1774] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaNdEDHJ4Nn-RvulD0qFrwAAAUo"]
[Sun Mar 01 05:24:33.128155 2026] [:error] [pid 21158:tid 21204] [client 40.115.138.121:2034] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaNdETriSIe3-pWnbPbhWQAAAEs"]
[Sun Mar 01 09:35:07.085049 2026] [:error] [pid 34552:tid 34572] [client 43.155.157.239:34442] [client 43.155.157.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaOXy3BlU_DRqGi4yvsAigAAAtE"]
[Sun Mar 01 11:20:07.662588 2026] [:error] [pid 35060:tid 35074] [client 170.106.179.68:49354] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaOwZ5L8JPoS_tq-tiUGSwAAA0w"]
[Sun Mar 01 12:11:24.239806 2026] [proxy_fcgi:error] [pid 35654:tid 35679] [client 20.104.206.150:39881] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:24.842339 2026] [proxy_fcgi:error] [pid 35654:tid 35660] [client 20.104.206.150:39808] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:25.054052 2026] [proxy_fcgi:error] [pid 35654:tid 35660] [client 20.104.206.150:39808] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:25.266552 2026] [proxy_fcgi:error] [pid 35654:tid 35664] [client 20.104.206.150:39808] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:26.017692 2026] [proxy_fcgi:error] [pid 34552:tid 34559] [client 20.104.206.150:39897] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:26.908509 2026] [proxy_fcgi:error] [pid 33767:tid 33770] [client 20.104.206.150:39828] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:27.116987 2026] [proxy_fcgi:error] [pid 33767:tid 33794] [client 20.104.206.150:39828] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:27.325348 2026] [proxy_fcgi:error] [pid 33767:tid 33776] [client 20.104.206.150:39828] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:27.535378 2026] [proxy_fcgi:error] [pid 33767:tid 33792] [client 20.104.206.150:39828] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:27.743897 2026] [proxy_fcgi:error] [pid 33767:tid 33784] [client 20.104.206.150:39828] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 12:11:27.949318 2026] [:error] [pid 33767:tid 33787] [client 20.104.206.150:39828] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configss.php"] [unique_id "aaO8b0GyeKe3MWsxvBgfGQAAAhE"]
[Sun Mar 01 12:11:28.360960 2026] [:error] [pid 8688:tid 8714] [client 20.104.206.150:39902] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configss.php"] [unique_id "aaO8cDHJ4Nn-RvulD0rtyAAAAVg"]
[Sun Mar 01 12:11:28.769495 2026] [:error] [pid 33539:tid 33561] [client 20.104.206.150:39910] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configss.php"] [unique_id "aaO8cNCsLwBYg4s018vI_wAAAdA"]
[Sun Mar 01 12:11:29.181235 2026] [:error] [pid 24576:tid 24594] [client 20.104.206.150:39898] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configss.php"] [unique_id "aaO8cYvfb5CnctJh071SjwAAAQ4"]
[Sun Mar 01 12:11:29.588891 2026] [:error] [pid 8688:tid 8690] [client 20.104.206.150:39885] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yanz.php"] [unique_id "aaO8cTHJ4Nn-RvulD0rt0wAAAUA"]
[Sun Mar 01 12:11:30.001527 2026] [:error] [pid 8688:tid 8690] [client 20.104.206.150:39814] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yanz.php"] [unique_id "aaO8cjHJ4Nn-RvulD0rt1QAAAUA"]
[Sun Mar 01 12:11:30.409635 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:39880] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yanz.php"] [unique_id "aaO8cpL8JPoS_tq-tiURpAAAA0k"]
[Sun Mar 01 12:11:30.822429 2026] [:error] [pid 35060:tid 35071] [client 20.104.206.150:39900] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yanz.php"] [unique_id "aaO8cpL8JPoS_tq-tiURpgAAA0k"]
[Sun Mar 01 12:11:31.236445 2026] [:error] [pid 8688:tid 8713] [client 20.104.206.150:39922] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.phpa"] [unique_id "aaO8czHJ4Nn-RvulD0rt3AAAAVc"]
[Sun Mar 01 12:11:31.648933 2026] [:error] [pid 8688:tid 8714] [client 20.104.206.150:39825] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.phpa"] [unique_id "aaO8czHJ4Nn-RvulD0rt3QAAAVg"]
[Sun Mar 01 12:11:32.062634 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39848] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.phpa"] [unique_id "aaO8dOLi3ouy1NZIkgpeowAAAJY"]
[Sun Mar 01 12:11:32.482669 2026] [:error] [pid 8688:tid 8694] [client 20.104.206.150:39923] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.phpa"] [unique_id "aaO8dDHJ4Nn-RvulD0rt4QAAAUQ"]
[Sun Mar 01 12:11:32.898718 2026] [:error] [pid 8688:tid 8713] [client 20.104.206.150:39904] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "aaO8dDHJ4Nn-RvulD0rt5gAAAVc"]
[Sun Mar 01 12:11:33.317636 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39894] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "aaO8dXPFxpCIhHW6Xmm14wAAApQ"]
[Sun Mar 01 12:11:33.729924 2026] [:error] [pid 8688:tid 8713] [client 20.104.206.150:39873] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "aaO8dTHJ4Nn-RvulD0rt6AAAAVc"]
[Sun Mar 01 12:11:34.139755 2026] [:error] [pid 35654:tid 35664] [client 20.104.206.150:39918] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "aaO8dkIPeuEwCTirofKa-AAAA8Y"]
[Sun Mar 01 12:11:34.549107 2026] [:error] [pid 21159:tid 21244] [client 20.104.206.150:39909] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/im.php"] [unique_id "aaO8duLi3ouy1NZIkgpepAAAAJc"]
[Sun Mar 01 12:11:34.961734 2026] [:error] [pid 35654:tid 35665] [client 20.104.206.150:39768] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/im.php"] [unique_id "aaO8dkIPeuEwCTirofKbBgAAA8c"]
[Sun Mar 01 12:11:35.376769 2026] [:error] [pid 35350:tid 35353] [client 20.104.206.150:39879] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/im.php"] [unique_id "aaO8d4qZbPJ_JGYY1RQHuwAAA4E"]
[Sun Mar 01 12:11:35.790502 2026] [:error] [pid 35654:tid 35664] [client 20.104.206.150:39823] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/im.php"] [unique_id "aaO8d0IPeuEwCTirofKbCQAAA8Y"]
[Sun Mar 01 12:11:36.208641 2026] [:error] [pid 21159:tid 21244] [client 20.104.206.150:39815] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-comments-post.php"] [unique_id "aaO8eOLi3ouy1NZIkgpeuwAAAJc"]
[Sun Mar 01 12:11:36.620710 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39770] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-comments-post.php"] [unique_id "aaO8eOLi3ouy1NZIkgpevgAAAJY"]
[Sun Mar 01 12:11:37.032803 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39934] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-comments-post.php"] [unique_id "aaO8eeLi3ouy1NZIkgpewAAAAJY"]
[Sun Mar 01 12:11:37.445544 2026] [:error] [pid 34785:tid 34802] [client 20.104.206.150:39890] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-comments-post.php"] [unique_id "aaO8eYC4dBNEGEcJx-OPxAAAAw8"]
[Sun Mar 01 12:11:37.857716 2026] [:error] [pid 34552:tid 34570] [client 20.104.206.150:39878] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache-compat.php"] [unique_id "aaO8eXBlU_DRqGi4yvsfLgAAAs8"]
[Sun Mar 01 12:11:38.275616 2026] [:error] [pid 35350:tid 35368] [client 20.104.206.150:39818] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache-compat.php"] [unique_id "aaO8eoqZbPJ_JGYY1RQHyAAAA5A"]
[Sun Mar 01 12:11:38.691315 2026] [:error] [pid 35350:tid 35375] [client 20.104.206.150:39917] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache-compat.php"] [unique_id "aaO8eoqZbPJ_JGYY1RQHyQAAA5c"]
[Sun Mar 01 12:11:39.099290 2026] [:error] [pid 34785:tid 34791] [client 20.104.206.150:39892] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache-compat.php"] [unique_id "aaO8e4C4dBNEGEcJx-OPxwAAAwQ"]
[Sun Mar 01 12:11:39.514406 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39882] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaO8e-Li3ouy1NZIkgpewwAAAJY"]
[Sun Mar 01 12:11:39.935658 2026] [:error] [pid 21263:tid 21290] [client 20.104.206.150:39899] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaO8e9AxjzLvN1upBhkrKwAAANc"]
[Sun Mar 01 12:11:40.363670 2026] [:error] [pid 33767:tid 33772] [client 20.104.206.150:39847] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaO8fEGyeKe3MWsxvBgfHwAAAgI"]
[Sun Mar 01 12:11:40.778183 2026] [:error] [pid 24576:tid 24586] [client 20.104.206.150:39872] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw.php"] [unique_id "aaO8fIvfb5CnctJh071SngAAAQc"]
[Sun Mar 01 12:11:41.198365 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39817] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berlin.php"] [unique_id "aaO8fXPFxpCIhHW6Xmm15QAAApQ"]
[Sun Mar 01 12:11:41.611043 2026] [:error] [pid 33767:tid 33770] [client 20.104.206.150:39896] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berlin.php"] [unique_id "aaO8fUGyeKe3MWsxvBgfIAAAAgA"]
[Sun Mar 01 12:11:42.026816 2026] [:error] [pid 34286:tid 34307] [client 20.104.206.150:39921] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berlin.php"] [unique_id "aaO8fnPFxpCIhHW6Xmm16AAAApM"]
[Sun Mar 01 12:11:42.450177 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39844] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berlin.php"] [unique_id "aaO8fnPFxpCIhHW6Xmm16gAAApQ"]
[Sun Mar 01 12:11:42.863508 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:39827] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaO8foC4dBNEGEcJx-OPzwAAAwk"]
[Sun Mar 01 12:11:43.277003 2026] [:error] [pid 8688:tid 8712] [client 20.104.206.150:39914] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaO8fzHJ4Nn-RvulD0ruJQAAAVY"]
[Sun Mar 01 12:11:43.684010 2026] [:error] [pid 34286:tid 34312] [client 20.104.206.150:39820] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaO8f3PFxpCIhHW6Xmm17AAAApg"]
[Sun Mar 01 12:11:44.097907 2026] [:error] [pid 8688:tid 8713] [client 20.104.206.150:39822] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abe.php"] [unique_id "aaO8gDHJ4Nn-RvulD0ruJgAAAVc"]
[Sun Mar 01 12:11:44.514343 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39846] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/otuz1.php"] [unique_id "aaO8gHPFxpCIhHW6Xmm17wAAApQ"]
[Sun Mar 01 12:11:44.933128 2026] [:error] [pid 34286:tid 34312] [client 20.104.206.150:39877] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/otuz1.php"] [unique_id "aaO8gHPFxpCIhHW6Xmm18gAAApg"]
[Sun Mar 01 12:11:45.347241 2026] [:error] [pid 21263:tid 21267] [client 20.104.206.150:39746] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/otuz1.php"] [unique_id "aaO8gdAxjzLvN1upBhkrLQAAAMA"]
[Sun Mar 01 12:11:45.773971 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39908] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/otuz1.php"] [unique_id "aaO8geLi3ouy1NZIkgpeygAAAI4"]
[Sun Mar 01 12:11:46.183350 2026] [:error] [pid 35654:tid 35666] [client 20.104.206.150:39801] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-files.php"] [unique_id "aaO8gkIPeuEwCTirofKbEAAAA8g"]
[Sun Mar 01 12:11:46.593533 2026] [:error] [pid 35350:tid 35375] [client 20.104.206.150:39871] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-files.php"] [unique_id "aaO8goqZbPJ_JGYY1RQHzgAAA5c"]
[Sun Mar 01 12:11:47.002181 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39875] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-files.php"] [unique_id "aaO8g-Li3ouy1NZIkgpezAAAAI4"]
[Sun Mar 01 12:11:47.410017 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39935] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-files.php"] [unique_id "aaO8g-Li3ouy1NZIkgpezwAAAI4"]
[Sun Mar 01 12:11:47.819592 2026] [:error] [pid 35654:tid 35666] [client 20.104.206.150:39832] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aaO8g0IPeuEwCTirofKbEwAAA8g"]
[Sun Mar 01 12:11:48.236241 2026] [:error] [pid 33539:tid 33547] [client 20.104.206.150:39903] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aaO8hNCsLwBYg4s018vJBAAAAcI"]
[Sun Mar 01 12:11:48.648649 2026] [:error] [pid 8688:tid 8706] [client 20.104.206.150:39754] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aaO8hDHJ4Nn-RvulD0ruKwAAAVA"]
[Sun Mar 01 12:11:49.055804 2026] [:error] [pid 8688:tid 8714] [client 20.104.206.150:39926] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj.php"] [unique_id "aaO8hTHJ4Nn-RvulD0ruLgAAAVg"]
[Sun Mar 01 12:11:49.462509 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39893] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/he.php"] [unique_id "aaO8heLi3ouy1NZIkgpe1gAAAJY"]
[Sun Mar 01 12:11:49.875364 2026] [:error] [pid 8688:tid 8712] [client 20.104.206.150:39826] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/he.php"] [unique_id "aaO8hTHJ4Nn-RvulD0ruNAAAAVY"]
[Sun Mar 01 12:11:50.288438 2026] [:error] [pid 24576:tid 24603] [client 20.104.206.150:39883] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/he.php"] [unique_id "aaO8hovfb5CnctJh071SowAAARc"]
[Sun Mar 01 12:11:50.707604 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39859] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/he.php"] [unique_id "aaO8huLi3ouy1NZIkgpe2gAAAJY"]
[Sun Mar 01 12:11:51.122002 2026] [:error] [pid 33767:tid 33794] [client 20.104.206.150:39774] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aaO8h0GyeKe3MWsxvBgfJgAAAhg"]
[Sun Mar 01 12:11:51.532721 2026] [:error] [pid 8688:tid 8712] [client 20.104.206.150:39933] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aaO8hzHJ4Nn-RvulD0ruOwAAAVY"]
[Sun Mar 01 12:11:51.944873 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39932] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aaO8h-Li3ouy1NZIkgpe3AAAAI4"]
[Sun Mar 01 12:11:52.363016 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39758] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cache.php"] [unique_id "aaO8iHPFxpCIhHW6Xmm19wAAApQ"]
[Sun Mar 01 12:11:52.781943 2026] [:error] [pid 34286:tid 34307] [client 20.104.206.150:39843] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aaO8iHPFxpCIhHW6Xmm1-QAAApM"]
[Sun Mar 01 12:11:53.195883 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39819] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aaO8ieLi3ouy1NZIkgpe3gAAAI4"]
[Sun Mar 01 12:11:53.602707 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:39931] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aaO8iYC4dBNEGEcJx-OP6AAAAwk"]
[Sun Mar 01 12:11:54.017680 2026] [:error] [pid 34286:tid 34295] [client 20.104.206.150:39767] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "aaO8inPFxpCIhHW6Xmm1-wAAAoc"]
[Sun Mar 01 12:11:54.435903 2026] [:error] [pid 34286:tid 34295] [client 20.104.206.150:39912] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog.php"] [unique_id "aaO8inPFxpCIhHW6Xmm1_QAAAoc"]
[Sun Mar 01 12:11:54.858914 2026] [:error] [pid 34286:tid 34295] [client 20.104.206.150:39809] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog.php"] [unique_id "aaO8inPFxpCIhHW6Xmm1_wAAAoc"]
[Sun Mar 01 12:11:55.273728 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39841] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog.php"] [unique_id "aaO8i-Li3ouy1NZIkgpe4AAAAI4"]
[Sun Mar 01 12:11:55.687951 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39761] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog.php"] [unique_id "aaO8i3PFxpCIhHW6Xmm2AgAAApQ"]
[Sun Mar 01 12:11:56.108308 2026] [:error] [pid 34552:tid 34570] [client 20.104.206.150:39919] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfanew.php7"] [unique_id "aaO8jHBlU_DRqGi4yvsfNAAAAs8"]
[Sun Mar 01 12:11:56.517685 2026] [:error] [pid 8688:tid 8706] [client 20.104.206.150:39777] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfanew.php7"] [unique_id "aaO8jDHJ4Nn-RvulD0ruSgAAAVA"]
[Sun Mar 01 12:11:56.925807 2026] [:error] [pid 8688:tid 8714] [client 20.104.206.150:39901] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfanew.php7"] [unique_id "aaO8jDHJ4Nn-RvulD0ruTQAAAVg"]
[Sun Mar 01 12:11:57.337458 2026] [:error] [pid 8688:tid 8714] [client 20.104.206.150:39831] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfanew.php7"] [unique_id "aaO8jTHJ4Nn-RvulD0ruTgAAAVg"]
[Sun Mar 01 12:11:57.749784 2026] [:error] [pid 34286:tid 34295] [client 20.104.206.150:39870] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaO8jXPFxpCIhHW6Xmm2CAAAAoc"]
[Sun Mar 01 12:11:58.158925 2026] [:error] [pid 34552:tid 34570] [client 20.104.206.150:39927] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaO8jnBlU_DRqGi4yvsfNwAAAs8"]
[Sun Mar 01 12:11:58.567263 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39794] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaO8juLi3ouy1NZIkgpe4wAAAJY"]
[Sun Mar 01 12:11:58.980132 2026] [:error] [pid 8688:tid 8706] [client 20.104.206.150:39913] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lufix.php"] [unique_id "aaO8jjHJ4Nn-RvulD0ruWAAAAVA"]
[Sun Mar 01 12:11:59.397845 2026] [:error] [pid 21159:tid 21235] [client 20.104.206.150:39930] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax-actions.php"] [unique_id "aaO8j-Li3ouy1NZIkgpe5gAAAI4"]
[Sun Mar 01 12:11:59.820036 2026] [:error] [pid 34785:tid 34796] [client 20.104.206.150:39842] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax-actions.php"] [unique_id "aaO8j4C4dBNEGEcJx-OP8AAAAwk"]
[Sun Mar 01 12:12:00.235979 2026] [:error] [pid 33767:tid 33788] [client 20.104.206.150:39915] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax-actions.php"] [unique_id "aaO8kEGyeKe3MWsxvBgfKwAAAhI"]
[Sun Mar 01 12:12:00.647022 2026] [:error] [pid 8688:tid 8706] [client 20.104.206.150:39810] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax-actions.php"] [unique_id "aaO8kDHJ4Nn-RvulD0ruWwAAAVA"]
[Sun Mar 01 12:12:01.063307 2026] [:error] [pid 35654:tid 35679] [client 20.104.206.150:39887] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaO8kUIPeuEwCTirofKbIQAAA9U"]
[Sun Mar 01 12:12:01.480485 2026] [:error] [pid 33539:tid 33560] [client 20.104.206.150:39874] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaO8kdCsLwBYg4s018vJBwAAAc8"]
[Sun Mar 01 12:12:01.898694 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39729] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaO8kXPFxpCIhHW6Xmm2EQAAApQ"]
[Sun Mar 01 12:12:02.315953 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39916] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaO8knPFxpCIhHW6Xmm2FAAAApQ"]
[Sun Mar 01 12:12:02.733895 2026] [:error] [pid 21159:tid 21243] [client 20.104.206.150:39833] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc.php"] [unique_id "aaO8kuLi3ouy1NZIkgpe6wAAAJY"]
[Sun Mar 01 12:12:03.150804 2026] [:error] [pid 33539:tid 33549] [client 20.104.206.150:39697] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc.php"] [unique_id "aaO8k9CsLwBYg4s018vJCAAAAcQ"]
[Sun Mar 01 12:12:03.568062 2026] [:error] [pid 35654:tid 35675] [client 20.104.206.150:39851] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc.php"] [unique_id "aaO8k0IPeuEwCTirofKbJQAAA9E"]
[Sun Mar 01 12:12:03.982567 2026] [:error] [pid 35654:tid 35665] [client 20.104.206.150:39830] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc.php"] [unique_id "aaO8k0IPeuEwCTirofKbKQAAA8c"]
[Sun Mar 01 12:12:04.391415 2026] [:error] [pid 34552:tid 34579] [client 20.104.206.150:39824] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaO8lHBlU_DRqGi4yvsfOwAAAtg"]
[Sun Mar 01 12:12:04.801100 2026] [:error] [pid 35654:tid 35664] [client 20.104.206.150:39811] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaO8lEIPeuEwCTirofKbLAAAA8Y"]
[Sun Mar 01 12:12:05.211857 2026] [:error] [pid 35654:tid 35675] [client 20.104.206.150:39867] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaO8lUIPeuEwCTirofKbLgAAA9E"]
[Sun Mar 01 12:12:05.625040 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39766] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bypass.php"] [unique_id "aaO8lXPFxpCIhHW6Xmm2GAAAApQ"]
[Sun Mar 01 12:12:06.036761 2026] [:error] [pid 8688:tid 8706] [client 20.104.206.150:39816] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/browse.php"] [unique_id "aaO8ljHJ4Nn-RvulD0ruXwAAAVA"]
[Sun Mar 01 12:12:06.443995 2026] [:error] [pid 33767:tid 33776] [client 20.104.206.150:39775] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/browse.php"] [unique_id "aaO8lkGyeKe3MWsxvBgfLgAAAgY"]
[Sun Mar 01 12:12:06.856213 2026] [:error] [pid 34785:tid 34791] [client 20.104.206.150:39924] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/browse.php"] [unique_id "aaO8loC4dBNEGEcJx-OP-wAAAwQ"]
[Sun Mar 01 12:12:07.273768 2026] [:error] [pid 34785:tid 34791] [client 20.104.206.150:39839] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/browse.php"] [unique_id "aaO8l4C4dBNEGEcJx-OP_gAAAwQ"]
[Sun Mar 01 12:12:07.692141 2026] [:error] [pid 34552:tid 34559] [client 20.104.206.150:39751] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aaO8l3BlU_DRqGi4yvsfPwAAAsQ"]
[Sun Mar 01 12:12:08.105659 2026] [:error] [pid 33767:tid 33779] [client 20.104.206.150:39849] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aaO8mEGyeKe3MWsxvBgfLwAAAgk"]
[Sun Mar 01 12:12:08.521233 2026] [:error] [pid 34785:tid 34802] [client 20.104.206.150:39813] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aaO8mIC4dBNEGEcJx-OQAAAAAw8"]
[Sun Mar 01 12:12:08.935007 2026] [:error] [pid 35350:tid 35357] [client 20.104.206.150:39905] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/license.php"] [unique_id "aaO8mIqZbPJ_JGYY1RQH3AAAA4U"]
[Sun Mar 01 12:12:09.343081 2026] [:error] [pid 34552:tid 34566] [client 20.104.206.150:39863] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaO8mXBlU_DRqGi4yvsfQgAAAss"]
[Sun Mar 01 12:12:09.752342 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39866] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaO8mXPFxpCIhHW6Xmm2IgAAApQ"]
[Sun Mar 01 12:12:10.159738 2026] [:error] [pid 35654:tid 35664] [client 20.104.206.150:39700] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaO8mkIPeuEwCTirofKbMgAAA8Y"]
[Sun Mar 01 12:12:10.571440 2026] [:error] [pid 34286:tid 34307] [client 20.104.206.150:39888] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.php"] [unique_id "aaO8mnPFxpCIhHW6Xmm2JAAAApM"]
[Sun Mar 01 12:12:10.992384 2026] [:error] [pid 8688:tid 8706] [client 20.104.206.150:39745] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/minik.php"] [unique_id "aaO8mjHJ4Nn-RvulD0ruaQAAAVA"]
[Sun Mar 01 12:12:11.407074 2026] [:error] [pid 34552:tid 34570] [client 20.104.206.150:39769] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/minik.php"] [unique_id "aaO8m3BlU_DRqGi4yvsfRQAAAs8"]
[Sun Mar 01 12:12:11.819084 2026] [:error] [pid 35350:tid 35357] [client 20.104.206.150:39747] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/minik.php"] [unique_id "aaO8m4qZbPJ_JGYY1RQH3wAAA4U"]
[Sun Mar 01 12:12:12.238188 2026] [:error] [pid 35350:tid 35357] [client 20.104.206.150:39686] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/minik.php"] [unique_id "aaO8nIqZbPJ_JGYY1RQH4QAAA4U"]
[Sun Mar 01 12:12:12.652425 2026] [:error] [pid 34552:tid 34559] [client 20.104.206.150:39876] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/st.php"] [unique_id "aaO8nHBlU_DRqGi4yvsfRwAAAsQ"]
[Sun Mar 01 12:12:13.059622 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39920] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/st.php"] [unique_id "aaO8nXPFxpCIhHW6Xmm2KQAAApQ"]
[Sun Mar 01 12:12:13.468158 2026] [:error] [pid 34286:tid 34308] [client 20.104.206.150:39790] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/st.php"] [unique_id "aaO8nXPFxpCIhHW6Xmm2LAAAApQ"]
[Sun Mar 01 12:12:13.882611 2026] [:error] [pid 35654:tid 35673] [client 20.104.206.150:39887] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/st.php"] [unique_id "aaO8nUIPeuEwCTirofKbNwAAA88"]
[Sun Mar 01 12:12:14.295763 2026] [:error] [pid 24576:tid 24586] [client 20.104.206.150:39821] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upgrade.php"] [unique_id "aaO8novfb5CnctJh071SpgAAAQc"]
[Sun Mar 01 12:12:14.708780 2026] [:error] [pid 33767:tid 33772] [client 20.104.206.150:39856] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upgrade.php"] [unique_id "aaO8nkGyeKe3MWsxvBgfOAAAAgI"]
[Sun Mar 01 12:12:15.123928 2026] [:error] [pid 35350:tid 35370] [client 20.104.206.150:39860] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upgrade.php"] [unique_id "aaO8n4qZbPJ_JGYY1RQH5QAAA5I"]
[Sun Mar 01 12:12:15.537511 2026] [:error] [pid 34286:tid 34295] [client 20.104.206.150:39780] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upgrade.php"] [unique_id "aaO8n3PFxpCIhHW6Xmm2MQAAAoc"]
[Sun Mar 01 14:29:33.589317 2026] [:error] [pid 42619:tid 42622] [client 62.60.131.218:57690] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaPczR_zUXcYaZE4AOd2zAAAAUE"]
[Sun Mar 01 15:54:37.818031 2026] [:error] [pid 44644:tid 44651] [client 182.42.105.144:56064] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaPwvZ3RJaXMcw3y9V-xmAAAAAQ"]
[Sun Mar 01 16:46:21.396149 2026] [:error] [pid 38241:tid 38252] [client 43.135.138.128:49138] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaP83fKRPk6YnJBxw_x7DwAAAMg"]
[Sun Mar 01 18:06:19.531479 2026] [:error] [pid 7133:tid 7153] [client 20.104.206.150:41979] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQPm_Ctubh8pR64qB_7AwAAAFI"]
[Sun Mar 01 18:06:19.949815 2026] [:error] [pid 33822:tid 33838] [client 20.104.206.150:41947] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQPm26W3ygu1YVssubt0wAAAo4"]
[Sun Mar 01 18:06:20.366109 2026] [:error] [pid 40750:tid 40755] [client 20.104.206.150:41948] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQPnAfBuk03yQKDyqtYCgAAAcI"]
[Sun Mar 01 18:06:20.792318 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:41942] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaQPnAfBuk03yQKDyqtYDgAAAdY"]
[Sun Mar 01 18:12:02.236263 2026] [:error] [pid 33822:tid 33833] [client 43.153.86.78:38376] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaQQ8m6W3ygu1YVssubvDwAAAok"]
[Sun Mar 01 18:35:06.670472 2026] [proxy_fcgi:error] [pid 7165:tid 7183] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:06.787673 2026] [proxy_fcgi:error] [pid 7165:tid 7190] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:07.021804 2026] [proxy_fcgi:error] [pid 7165:tid 7172] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:07.139916 2026] [proxy_fcgi:error] [pid 7165:tid 7182] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:07.374954 2026] [proxy_fcgi:error] [pid 7165:tid 7189] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:07.492015 2026] [proxy_fcgi:error] [pid 7165:tid 7187] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:07.608852 2026] [proxy_fcgi:error] [pid 7165:tid 7178] [client 40.115.138.121:1745] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:35:07.838711 2026] [:error] [pid 7165:tid 7174] [client 40.115.138.121:1745] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaQWWxRjCrA8qWBjgG-3rAAAAkc"]
[Sun Mar 01 18:35:08.386322 2026] [:error] [pid 7165:tid 7186] [client 40.115.138.121:1782] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaQWXBRjCrA8qWBjgG-3swAAAlM"]
[Sun Mar 01 18:35:08.850484 2026] [:error] [pid 7165:tid 7185] [client 40.115.138.121:10732] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaQWXBRjCrA8qWBjgG-3uAAAAlI"]
[Sun Mar 01 18:35:09.357873 2026] [:error] [pid 7165:tid 7179] [client 40.115.138.121:1545] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaQWXRRjCrA8qWBjgG-3vgAAAkw"]
[Sun Mar 01 19:08:19.054788 2026] [:error] [pid 7133:tid 7142] [client 216.73.216.121:8229] [client 216.73.216.121] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aaQeI_Ctubh8pR64qB8UvgAAAEc"]
[Sun Mar 01 19:39:17.908831 2026] [:error] [pid 7165:tid 7167] [client 195.178.110.109:4398] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aaQlZRRjCrA8qWBjgG_1MAAAAkA"]
[Sun Mar 01 19:46:29.493880 2026] [:error] [pid 44644:tid 44653] [client 172.71.172.92:9798] [client 172.71.172.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aaQnFZ3RJaXMcw3y9V_UHAAAAAY"]
[Sun Mar 01 21:09:12.855623 2026] [:error] [pid 38034:tid 38045] [client 84.15.223.37:62010] [client 84.15.223.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.223.37, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaQ6eAxtfZjwlJok9K8U4AAAAQc"]
[Sun Mar 01 21:09:12.865916 2026] [proxy_fcgi:error] [pid 38034:tid 38045] [client 84.15.223.37:62010] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:23.051143 2026] [proxy_fcgi:error] [pid 40750:tid 40764] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:23.270911 2026] [proxy_fcgi:error] [pid 40750:tid 40756] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:23.481459 2026] [proxy_fcgi:error] [pid 40750:tid 40754] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:23.694278 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:23.961425 2026] [proxy_fcgi:error] [pid 40750:tid 40766] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:24.174690 2026] [proxy_fcgi:error] [pid 40750:tid 40771] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:24.383796 2026] [proxy_fcgi:error] [pid 40750:tid 40774] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:24.611887 2026] [proxy_fcgi:error] [pid 40750:tid 40753] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:24.832176 2026] [proxy_fcgi:error] [pid 40750:tid 40756] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:25.045977 2026] [proxy_fcgi:error] [pid 40750:tid 40755] [client 4.204.200.32:12236] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:23:25.276203 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:12236] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aaQ9zQfBuk03yQKDyqtAVAAAAdI"]
[Sun Mar 01 21:23:25.934531 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:12237] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aaQ9zQfBuk03yQKDyqtAWAAAAdU"]
[Sun Mar 01 21:23:26.594540 2026] [:error] [pid 33822:tid 33830] [client 4.204.200.32:12162] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aaQ9zm6W3ygu1YVssuYg4AAAAoY"]
[Sun Mar 01 21:23:27.279948 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:12167] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aaQ9z_KRPk6YnJBxw_wWVwAAAMc"]
[Sun Mar 01 21:23:27.751893 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:12180] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/path.php"] [unique_id "aaQ9zwfBuk03yQKDyqtAYQAAAdY"]
[Sun Mar 01 21:23:28.312995 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:12246] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/path.php"] [unique_id "aaQ90AfBuk03yQKDyqtAZgAAAcw"]
[Sun Mar 01 21:23:28.841728 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:12111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/path.php"] [unique_id "aaQ90AfBuk03yQKDyqtAaAAAAdQ"]
[Sun Mar 01 21:23:29.382921 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:12231] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/path.php"] [unique_id "aaQ90QfBuk03yQKDyqtAbgAAAdY"]
[Sun Mar 01 21:23:30.014887 2026] [:error] [pid 37032:tid 37051] [client 4.204.200.32:12161] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdf.php"] [unique_id "aaQ90uu0U4o7eSImsVSAVQAAAZE"]
[Sun Mar 01 21:23:30.485879 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:12281] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdf.php"] [unique_id "aaQ90gfBuk03yQKDyqtAewAAAdM"]
[Sun Mar 01 21:23:30.935585 2026] [:error] [pid 37032:tid 37036] [client 4.204.200.32:12264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdf.php"] [unique_id "aaQ90uu0U4o7eSImsVSAVwAAAYI"]
[Sun Mar 01 21:23:31.421208 2026] [:error] [pid 40750:tid 40762] [client 4.204.200.32:12285] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdf.php"] [unique_id "aaQ90wfBuk03yQKDyqtAhQAAAck"]
[Sun Mar 01 21:23:31.909759 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:12170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fleen.php"] [unique_id "aaQ90wfBuk03yQKDyqtAigAAAcM"]
[Sun Mar 01 21:23:32.431160 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:12225] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fleen.php"] [unique_id "aaQ91AfBuk03yQKDyqtAjgAAAcY"]
[Sun Mar 01 21:23:32.945247 2026] [:error] [pid 40750:tid 40762] [client 4.204.200.32:12230] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fleen.php"] [unique_id "aaQ91AfBuk03yQKDyqtAkgAAAck"]
[Sun Mar 01 21:23:33.689560 2026] [:error] [pid 44644:tid 44654] [client 4.204.200.32:12239] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fleen.php"] [unique_id "aaQ91Z3RJaXMcw3y9V_e3QAAAAc"]
[Sun Mar 01 21:23:34.181494 2026] [:error] [pid 33822:tid 33846] [client 4.204.200.32:12278] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tem.php"] [unique_id "aaQ91m6W3ygu1YVssuYg5AAAApY"]
[Sun Mar 01 21:23:34.630630 2026] [:error] [pid 40750:tid 40761] [client 4.204.200.32:12265] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tem.php"] [unique_id "aaQ91gfBuk03yQKDyqtAnAAAAcg"]
[Sun Mar 01 21:23:35.164284 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:12258] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tem.php"] [unique_id "aaQ91_Ctubh8pR64qB9IewAAAFE"]
[Sun Mar 01 21:23:35.748648 2026] [:error] [pid 7133:tid 7145] [client 4.204.200.32:12114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tem.php"] [unique_id "aaQ91_Ctubh8pR64qB9IfAAAAEo"]
[Sun Mar 01 21:23:36.286981 2026] [:error] [pid 33822:tid 33847] [client 4.204.200.32:12166] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avim.php"] [unique_id "aaQ92G6W3ygu1YVssuYg6AAAApc"]
[Sun Mar 01 21:23:36.949468 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:12240] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avim.php"] [unique_id "aaQ92PKRPk6YnJBxw_wWYQAAAM0"]
[Sun Mar 01 21:23:37.574222 2026] [:error] [pid 33822:tid 33837] [client 4.204.200.32:12178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avim.php"] [unique_id "aaQ92W6W3ygu1YVssuYg6QAAAo0"]
[Sun Mar 01 21:23:38.270331 2026] [:error] [pid 33822:tid 33841] [client 4.204.200.32:12172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/avim.php"] [unique_id "aaQ92m6W3ygu1YVssuYg7QAAApE"]
[Sun Mar 01 21:23:38.931402 2026] [:error] [pid 33822:tid 33826] [client 4.204.200.32:12280] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autogooey.php"] [unique_id "aaQ92m6W3ygu1YVssuYg7wAAAoI"]
[Sun Mar 01 21:23:39.539995 2026] [:error] [pid 38034:tid 38051] [client 4.204.200.32:12242] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autogooey.php"] [unique_id "aaQ92wxtfZjwlJok9K8X8wAAAQ0"]
[Sun Mar 01 21:23:40.350693 2026] [:error] [pid 33822:tid 33848] [client 4.204.200.32:12283] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autogooey.php"] [unique_id "aaQ93G6W3ygu1YVssuYg8gAAApg"]
[Sun Mar 01 21:23:41.003071 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autogooey.php"] [unique_id "aaQ93QfBuk03yQKDyqtAsgAAAdA"]
[Sun Mar 01 21:23:41.671180 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:12271] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "aaQ93fKRPk6YnJBxw_wWZgAAAMo"]
[Sun Mar 01 21:23:42.333988 2026] [:error] [pid 7165:tid 7188] [client 4.204.200.32:12171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "aaQ93hRjCrA8qWBjgG9DGAAAAlU"]
[Sun Mar 01 21:23:42.908202 2026] [:error] [pid 7165:tid 7174] [client 4.204.200.32:12209] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "aaQ93hRjCrA8qWBjgG9DGgAAAkc"]
[Sun Mar 01 21:23:43.554352 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:12193] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "aaQ93xRjCrA8qWBjgG9DHgAAAk8"]
[Sun Mar 01 21:23:44.104957 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12168] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "aaQ94AfBuk03yQKDyqtAvAAAAdA"]
[Sun Mar 01 21:23:44.707273 2026] [:error] [pid 7133:tid 7154] [client 4.204.200.32:12233] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "aaQ94PCtubh8pR64qB9IigAAAFM"]
[Sun Mar 01 21:23:45.328752 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "aaQ94RRjCrA8qWBjgG9DIQAAAks"]
[Sun Mar 01 21:23:45.826764 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:12256] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "aaQ94QxtfZjwlJok9K8X-gAAARY"]
[Sun Mar 01 21:23:46.523559 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:12262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aaQ94vKRPk6YnJBxw_wWfgAAAMw"]
[Sun Mar 01 21:23:47.301673 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:12177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aaQ94wfBuk03yQKDyqtAxwAAAcU"]
[Sun Mar 01 21:23:48.034564 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:12227] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aaQ95BRjCrA8qWBjgG9DJgAAAkg"]
[Sun Mar 01 21:23:48.660433 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:12257] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aaQ95BRjCrA8qWBjgG9DKQAAAkI"]
[Sun Mar 01 21:23:49.380729 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:12164] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/agg.php"] [unique_id "aaQ95RRjCrA8qWBjgG9DLAAAAkk"]
[Sun Mar 01 21:23:50.148513 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:12217] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/agg.php"] [unique_id "aaQ95gfBuk03yQKDyqtA1AAAAdU"]
[Sun Mar 01 21:23:50.675294 2026] [:error] [pid 40750:tid 40757] [client 4.204.200.32:12219] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/agg.php"] [unique_id "aaQ95gfBuk03yQKDyqtA1wAAAcQ"]
[Sun Mar 01 21:23:51.290856 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:12286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/agg.php"] [unique_id "aaQ95_KRPk6YnJBxw_wWgQAAAMA"]
[Sun Mar 01 21:23:51.778981 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:12109] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aaQ95xRjCrA8qWBjgG9DLwAAAkE"]
[Sun Mar 01 21:23:52.271992 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:12194] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aaQ96BRjCrA8qWBjgG9DMwAAAlg"]
[Sun Mar 01 21:23:52.940784 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:12238] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aaQ96AfBuk03yQKDyqtA4wAAAcI"]
[Sun Mar 01 21:23:53.499557 2026] [:error] [pid 33822:tid 33837] [client 4.204.200.32:12173] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pass4.php"] [unique_id "aaQ96W6W3ygu1YVssuYg9wAAAo0"]
[Sun Mar 01 21:23:53.948727 2026] [:error] [pid 41342:tid 41364] [client 4.204.200.32:12160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsws.php"] [unique_id "aaQ96Y4iJ6RAS5CatDlfZgAAAhM"]
[Sun Mar 01 21:23:54.475495 2026] [:error] [pid 7133:tid 7143] [client 4.204.200.32:12241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsws.php"] [unique_id "aaQ96vCtubh8pR64qB9ImgAAAEg"]
[Sun Mar 01 21:23:54.931418 2026] [:error] [pid 41342:tid 41353] [client 4.204.200.32:12273] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsws.php"] [unique_id "aaQ96o4iJ6RAS5CatDlfZwAAAgg"]
[Sun Mar 01 21:23:55.428845 2026] [:error] [pid 37032:tid 37056] [client 4.204.200.32:12272] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsws.php"] [unique_id "aaQ96-u0U4o7eSImsVSAXgAAAZY"]
[Sun Mar 01 21:23:55.884255 2026] [:error] [pid 37032:tid 37055] [client 4.204.200.32:12214] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-in.php"] [unique_id "aaQ96-u0U4o7eSImsVSAXwAAAZU"]
[Sun Mar 01 21:23:56.467044 2026] [:error] [pid 7133:tid 7156] [client 4.204.200.32:12232] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-in.php"] [unique_id "aaQ97PCtubh8pR64qB9IowAAAFU"]
[Sun Mar 01 21:23:57.071875 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:12123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-in.php"] [unique_id "aaQ97RRjCrA8qWBjgG9DOAAAAk4"]
[Sun Mar 01 21:23:57.617296 2026] [:error] [pid 41780:tid 41787] [client 4.204.200.32:12097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-in.php"] [unique_id "aaQ97cONkVoocLIqzy0spwAAA8Q"]
[Sun Mar 01 21:23:58.181500 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:12245] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaQ97vKRPk6YnJBxw_wWgwAAANM"]
[Sun Mar 01 21:23:58.739885 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:12108] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaQ97gfBuk03yQKDyqtA8QAAAcU"]
[Sun Mar 01 21:23:59.178008 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:12244] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaQ97_KRPk6YnJBxw_wWhAAAAMk"]
[Sun Mar 01 21:23:59.714209 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:12212] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaQ97wfBuk03yQKDyqtA8gAAAdE"]
[Sun Mar 01 21:24:00.299085 2026] [:error] [pid 37032:tid 37052] [client 4.204.200.32:12210] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/loxi-o.php"] [unique_id "aaQ98Ou0U4o7eSImsVSAYAAAAZI"]
[Sun Mar 01 21:24:00.742816 2026] [:error] [pid 40750:tid 40757] [client 4.204.200.32:12051] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/loxi-o.php"] [unique_id "aaQ98AfBuk03yQKDyqtA8wAAAcQ"]
[Sun Mar 01 21:24:01.282868 2026] [:error] [pid 41342:tid 41356] [client 4.204.200.32:12277] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/loxi-o.php"] [unique_id "aaQ98Y4iJ6RAS5CatDlfbQAAAgs"]
[Sun Mar 01 21:24:02.024286 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:12260] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/loxi-o.php"] [unique_id "aaQ98hRjCrA8qWBjgG9DQQAAAlA"]
[Sun Mar 01 21:24:02.543616 2026] [:error] [pid 7133:tid 7145] [client 4.204.200.32:12261] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaQ98vCtubh8pR64qB9ItgAAAEo"]
[Sun Mar 01 21:24:03.222202 2026] [:error] [pid 7165:tid 7189] [client 4.204.200.32:12253] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaQ98xRjCrA8qWBjgG9DSwAAAlY"]
[Sun Mar 01 21:24:03.872523 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:12247] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaQ98xRjCrA8qWBjgG9DUgAAAlA"]
[Sun Mar 01 21:24:04.441351 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:12183] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aaQ99AfBuk03yQKDyqtA_AAAAdY"]
[Sun Mar 01 21:24:04.993240 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:12259] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaQ99BRjCrA8qWBjgG9DWgAAAk8"]
[Sun Mar 01 21:24:05.505366 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:12229] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaQ99QfBuk03yQKDyqtA_gAAAdI"]
[Sun Mar 01 21:24:06.072235 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:12222] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaQ99gfBuk03yQKDyqtBAAAAAdE"]
[Sun Mar 01 21:24:06.601884 2026] [:error] [pid 40750:tid 40761] [client 4.204.200.32:12215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aaQ99gfBuk03yQKDyqtBAwAAAcg"]
[Sun Mar 01 21:24:07.203048 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:12182] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaQ99xRjCrA8qWBjgG9DcQAAAkE"]
[Sun Mar 01 21:24:07.943228 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:12268] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaQ99wfBuk03yQKDyqtBDQAAAc4"]
[Sun Mar 01 21:24:08.442218 2026] [:error] [pid 38241:tid 38266] [client 4.204.200.32:12138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaQ9-PKRPk6YnJBxw_wWkgAAANY"]
[Sun Mar 01 21:24:09.153406 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:12196] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaQ9-QfBuk03yQKDyqtBFQAAAdU"]
[Sun Mar 01 21:24:10.075860 2026] [:error] [pid 33822:tid 33825] [client 4.204.200.32:12158] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olfclass.php"] [unique_id "aaQ9-m6W3ygu1YVssuYg_gAAAoE"]
[Sun Mar 01 21:24:10.573550 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olfclass.php"] [unique_id "aaQ9-hRjCrA8qWBjgG9DiQAAAks"]
[Sun Mar 01 21:24:11.083981 2026] [:error] [pid 40750:tid 40766] [client 4.204.200.32:12270] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olfclass.php"] [unique_id "aaQ9-wfBuk03yQKDyqtBHAAAAc0"]
[Sun Mar 01 21:24:11.906676 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:12116] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olfclass.php"] [unique_id "aaQ9-xRjCrA8qWBjgG9DmAAAAkw"]
[Sun Mar 01 21:24:12.419826 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:12146] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaQ9_AfBuk03yQKDyqtBIQAAAdI"]
[Sun Mar 01 21:24:13.140486 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:12136] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaQ9_RRjCrA8qWBjgG9DowAAAlI"]
[Sun Mar 01 21:24:14.104570 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:12269] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaQ9_gfBuk03yQKDyqtBKAAAAdE"]
[Sun Mar 01 21:24:14.607043 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:12224] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aaQ9_gfBuk03yQKDyqtBKwAAAcw"]
[Sun Mar 01 21:24:15.232508 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:12223] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ9_xRjCrA8qWBjgG9DqgAAAlg"]
[Sun Mar 01 21:24:15.679185 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:12165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ9_wfBuk03yQKDyqtBMQAAAcY"]
[Sun Mar 01 21:24:16.255565 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:12059] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ-ABRjCrA8qWBjgG9DrQAAAlc"]
[Sun Mar 01 21:24:16.912075 2026] [:error] [pid 40750:tid 40776] [client 4.204.200.32:12203] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ-AAfBuk03yQKDyqtBNwAAAdc"]
[Sun Mar 01 21:24:17.527623 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:12099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaQ-AQxtfZjwlJok9K8YBAAAAQw"]
[Sun Mar 01 21:24:18.147172 2026] [:error] [pid 41780:tid 41789] [client 4.204.200.32:12218] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaQ-AsONkVoocLIqzy0sqwAAA8Y"]
[Sun Mar 01 21:24:18.943300 2026] [:error] [pid 33822:tid 33845] [client 4.204.200.32:12049] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaQ-Am6W3ygu1YVssuYhBgAAApU"]
[Sun Mar 01 21:24:19.690444 2026] [:error] [pid 7133:tid 7146] [client 4.204.200.32:12107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aaQ-A_Ctubh8pR64qB9IuAAAAEs"]
[Sun Mar 01 21:24:20.265303 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:12192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaQ-BPKRPk6YnJBxw_wWnQAAAMw"]
[Sun Mar 01 21:24:20.893231 2026] [:error] [pid 33822:tid 33829] [client 4.204.200.32:12287] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaQ-BG6W3ygu1YVssuYhCgAAAoU"]
[Sun Mar 01 21:24:21.433367 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12275] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaQ-BRRjCrA8qWBjgG9DuQAAAks"]
[Sun Mar 01 21:24:22.208472 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:12104] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X57.php"] [unique_id "aaQ-BgfBuk03yQKDyqtBQAAAAcE"]
[Sun Mar 01 21:24:22.877901 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:12188] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpver.php"] [unique_id "aaQ-BhRjCrA8qWBjgG9DwQAAAkU"]
[Sun Mar 01 21:24:23.331793 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:12195] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpver.php"] [unique_id "aaQ-BwfBuk03yQKDyqtBRAAAAc8"]
[Sun Mar 01 21:24:23.913554 2026] [:error] [pid 7133:tid 7151] [client 4.204.200.32:12190] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpver.php"] [unique_id "aaQ-B_Ctubh8pR64qB9IvwAAAFA"]
[Sun Mar 01 21:24:24.655986 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:12221] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpver.php"] [unique_id "aaQ-CAfBuk03yQKDyqtBSQAAAcA"]
[Sun Mar 01 21:24:25.420261 2026] [proxy_fcgi:error] [pid 40750:tid 40764] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:25.704102 2026] [proxy_fcgi:error] [pid 40750:tid 40761] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:25.929733 2026] [proxy_fcgi:error] [pid 40750:tid 40770] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:26.138319 2026] [proxy_fcgi:error] [pid 40750:tid 40756] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:26.345772 2026] [proxy_fcgi:error] [pid 40750:tid 40759] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:26.562879 2026] [proxy_fcgi:error] [pid 40750:tid 40772] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:26.770288 2026] [proxy_fcgi:error] [pid 40750:tid 40774] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:26.992207 2026] [proxy_fcgi:error] [pid 40750:tid 40776] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:27.322866 2026] [proxy_fcgi:error] [pid 40750:tid 40768] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:27.531426 2026] [proxy_fcgi:error] [pid 40750:tid 40765] [client 4.204.200.32:12118] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:24:27.744325 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:12118] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mcs.php"] [unique_id "aaQ-CwfBuk03yQKDyqtBaAAAAdQ"]
[Sun Mar 01 21:24:28.192429 2026] [:error] [pid 40750:tid 40766] [client 4.204.200.32:12185] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mcs.php"] [unique_id "aaQ-DAfBuk03yQKDyqtBawAAAc0"]
[Sun Mar 01 21:24:28.800979 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:12148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mcs.php"] [unique_id "aaQ-DBRjCrA8qWBjgG9DywAAAkI"]
[Sun Mar 01 21:24:29.641093 2026] [:error] [pid 38241:tid 38263] [client 4.204.200.32:12274] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mcs.php"] [unique_id "aaQ-DfKRPk6YnJBxw_wWogAAANM"]
[Sun Mar 01 21:24:30.182951 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:12279] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaQ-DvKRPk6YnJBxw_wWpAAAAM8"]
[Sun Mar 01 21:24:30.731162 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:12163] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaQ-DhRjCrA8qWBjgG9DzQAAAlQ"]
[Sun Mar 01 21:24:31.423906 2026] [:error] [pid 7133:tid 7141] [client 4.204.200.32:12150] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaQ-D_Ctubh8pR64qB9IyAAAAEY"]
[Sun Mar 01 21:24:31.919298 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:12252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aaQ-D_KRPk6YnJBxw_wWpQAAANg"]
[Sun Mar 01 21:24:32.371756 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:12276] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "aaQ-EPKRPk6YnJBxw_wWpwAAAMU"]
[Sun Mar 01 21:24:33.012844 2026] [:error] [pid 38034:tid 38045] [client 4.204.200.32:12100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "aaQ-EQxtfZjwlJok9K8YEQAAAQc"]
[Sun Mar 01 21:24:33.678259 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:12157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "aaQ-EQfBuk03yQKDyqtBigAAAcc"]
[Sun Mar 01 21:24:34.457863 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:12249] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "aaQ-EgfBuk03yQKDyqtBkwAAAcU"]
[Sun Mar 01 21:24:35.126770 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12267] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "aaQ-EwfBuk03yQKDyqtBlwAAAdA"]
[Sun Mar 01 21:24:35.836647 2026] [:error] [pid 38034:tid 38036] [client 4.204.200.32:12251] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "aaQ-EwxtfZjwlJok9K8YEgAAAQA"]
[Sun Mar 01 21:24:36.422130 2026] [:error] [pid 44644:tid 44654] [client 4.204.200.32:12198] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "aaQ-FJ3RJaXMcw3y9V_e6wAAAAc"]
[Sun Mar 01 21:24:36.975139 2026] [:error] [pid 41342:tid 41357] [client 4.204.200.32:12144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "aaQ-FI4iJ6RAS5CatDlfbwAAAgw"]
[Sun Mar 01 21:24:37.632349 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:12175] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaQ-FfKRPk6YnJBxw_wWqgAAAMQ"]
[Sun Mar 01 21:24:38.553856 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:12112] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaQ-FgfBuk03yQKDyqtBngAAAcU"]
[Sun Mar 01 21:24:39.259297 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:12205] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaQ-F_KRPk6YnJBxw_wWrAAAANA"]
[Sun Mar 01 21:24:39.877910 2026] [:error] [pid 38241:tid 38250] [client 4.204.200.32:12284] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aaQ-F_KRPk6YnJBxw_wWrgAAAMY"]
[Sun Mar 01 21:24:40.519076 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:12228] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaQ-GAfBuk03yQKDyqtBogAAAdI"]
[Sun Mar 01 21:24:41.108324 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:12105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaQ-GRRjCrA8qWBjgG9D2gAAAkQ"]
[Sun Mar 01 21:24:41.606798 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:12200] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaQ-GQxtfZjwlJok9K8YGAAAAQ8"]
[Sun Mar 01 21:24:42.194777 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12169] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aaQ-GhRjCrA8qWBjgG9D3AAAAks"]
[Sun Mar 01 21:24:42.856677 2026] [:error] [pid 7133:tid 7148] [client 4.204.200.32:12140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aaQ-GvCtubh8pR64qB9I4gAAAE0"]
[Sun Mar 01 21:24:43.451467 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:12255] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aaQ-G_KRPk6YnJBxw_wWtgAAAMU"]
[Sun Mar 01 21:24:44.030867 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:12187] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aaQ-HPKRPk6YnJBxw_wWuAAAAMk"]
[Sun Mar 01 21:24:44.557837 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:12184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmpls.php"] [unique_id "aaQ-HBRjCrA8qWBjgG9D4gAAAkg"]
[Sun Mar 01 21:24:45.220729 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:12191] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bsg-management/php.php"] [unique_id "aaQ-HRRjCrA8qWBjgG9D5wAAAlI"]
[Sun Mar 01 21:24:46.398503 2026] [:error] [pid 7165:tid 7174] [client 4.204.200.32:12115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bsg-management/php.php"] [unique_id "aaQ-HhRjCrA8qWBjgG9D8gAAAkc"]
[Sun Mar 01 21:24:47.288615 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:12120] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bsg-management/php.php"] [unique_id "aaQ-HxRjCrA8qWBjgG9D-QAAAkk"]
[Sun Mar 01 21:24:48.322953 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:12122] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bsg-management/php.php"] [unique_id "aaQ-IPKRPk6YnJBxw_wWuwAAAMc"]
[Sun Mar 01 21:24:49.819229 2026] [:error] [pid 37032:tid 37041] [client 4.204.200.32:12056] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pouhg.php"] [unique_id "aaQ-Ieu0U4o7eSImsVSAaAAAAYc"]
[Sun Mar 01 21:24:50.887601 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:12189] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pouhg.php"] [unique_id "aaQ-IhRjCrA8qWBjgG9EAwAAAkQ"]
[Sun Mar 01 21:24:51.392893 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12129] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pouhg.php"] [unique_id "aaQ-IxRjCrA8qWBjgG9EBgAAAks"]
[Sun Mar 01 21:24:52.425476 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:12143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pouhg.php"] [unique_id "aaQ-JAfBuk03yQKDyqtBzwAAAc4"]
[Sun Mar 01 21:24:53.970082 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:12176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aaQ-JRRjCrA8qWBjgG9ECwAAAkM"]
[Sun Mar 01 21:24:54.901993 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:12133] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aaQ-JhRjCrA8qWBjgG9EEQAAAkg"]
[Sun Mar 01 21:24:56.355582 2026] [:error] [pid 40750:tid 40757] [client 4.204.200.32:12139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aaQ-KAfBuk03yQKDyqtB2QAAAcQ"]
[Sun Mar 01 21:24:56.962341 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12042] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aaQ-KAfBuk03yQKDyqtB4AAAAdA"]
[Sun Mar 01 21:24:57.623688 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:12126] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaQ-KQfBuk03yQKDyqtB5gAAAc8"]
[Sun Mar 01 21:24:58.251435 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:12234] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaQ-KgfBuk03yQKDyqtB7AAAAdI"]
[Sun Mar 01 21:24:58.756014 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:12060] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaQ-KhRjCrA8qWBjgG9EGQAAAkU"]
[Sun Mar 01 21:24:59.355846 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaQ-KxRjCrA8qWBjgG9EGgAAAkY"]
[Sun Mar 01 21:24:59.938498 2026] [:error] [pid 7133:tid 7146] [client 4.204.200.32:12137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aaQ-K_Ctubh8pR64qB9I6wAAAEs"]
[Sun Mar 01 21:25:00.598281 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:12201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aaQ-LAfBuk03yQKDyqtB9QAAAdE"]
[Sun Mar 01 21:25:01.093507 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:12119] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aaQ-LQfBuk03yQKDyqtB9wAAAcA"]
[Sun Mar 01 21:25:01.624190 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:12079] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aaQ-LfKRPk6YnJBxw_wW4AAAAM8"]
[Sun Mar 01 21:25:02.208663 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12220] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws59.php"] [unique_id "aaQ-LhRjCrA8qWBjgG9ELQAAAkY"]
[Sun Mar 01 21:25:02.771220 2026] [:error] [pid 7133:tid 7142] [client 4.204.200.32:12032] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws59.php"] [unique_id "aaQ-LvCtubh8pR64qB9I7AAAAEc"]
[Sun Mar 01 21:25:03.314102 2026] [:error] [pid 7133:tid 7139] [client 4.204.200.32:12153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws59.php"] [unique_id "aaQ-L_Ctubh8pR64qB9I7gAAAEQ"]
[Sun Mar 01 21:25:03.823768 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:12174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws59.php"] [unique_id "aaQ-LwfBuk03yQKDyqtB-wAAAdY"]
[Sun Mar 01 21:25:04.430406 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:12204] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaQ-MBRjCrA8qWBjgG9ENAAAAk0"]
[Sun Mar 01 21:25:04.925236 2026] [:error] [pid 7133:tid 7148] [client 4.204.200.32:12040] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaQ-MPCtubh8pR64qB9I8QAAAE0"]
[Sun Mar 01 21:25:05.436259 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12036] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaQ-MRRjCrA8qWBjgG9EOgAAAkY"]
[Sun Mar 01 21:25:05.966124 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:12117] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aaQ-MRRjCrA8qWBjgG9EPgAAAk4"]
[Sun Mar 01 21:25:06.504214 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:12044] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mamzi.php"] [unique_id "aaQ-MgfBuk03yQKDyqtCDQAAAdY"]
[Sun Mar 01 21:25:07.142430 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:12102] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mamzi.php"] [unique_id "aaQ-MxRjCrA8qWBjgG9ESAAAAlI"]
[Sun Mar 01 21:25:07.648673 2026] [:error] [pid 40750:tid 40762] [client 4.204.200.32:12197] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mamzi.php"] [unique_id "aaQ-MwfBuk03yQKDyqtCEQAAAck"]
[Sun Mar 01 21:25:08.295193 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:12054] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mamzi.php"] [unique_id "aaQ-NAfBuk03yQKDyqtCEwAAAdU"]
[Sun Mar 01 21:25:08.757037 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:12135] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaQ-NAfBuk03yQKDyqtCFwAAAcM"]
[Sun Mar 01 21:25:09.256953 2026] [:error] [pid 40750:tid 40762] [client 4.204.200.32:12128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaQ-NQfBuk03yQKDyqtCGwAAAck"]
[Sun Mar 01 21:25:09.751267 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:12110] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaQ-NQfBuk03yQKDyqtCJAAAAcw"]
[Sun Mar 01 21:25:10.210644 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12202] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aaQ-NgfBuk03yQKDyqtCMQAAAdA"]
[Sun Mar 01 21:25:10.669601 2026] [:error] [pid 41342:tid 41358] [client 4.204.200.32:12086] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ae.php"] [unique_id "aaQ-No4iJ6RAS5CatDlfcwAAAg0"]
[Sun Mar 01 21:25:11.229662 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:12043] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ae.php"] [unique_id "aaQ-N53RJaXMcw3y9V_e8wAAABQ"]
[Sun Mar 01 21:25:11.797908 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:12207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ae.php"] [unique_id "aaQ-N_KRPk6YnJBxw_wW9AAAANg"]
[Sun Mar 01 21:25:12.332758 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:12106] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ae.php"] [unique_id "aaQ-OPKRPk6YnJBxw_wW9gAAANc"]
[Sun Mar 01 21:25:12.833033 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:12074] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaQ-OPKRPk6YnJBxw_wW-wAAAMU"]
[Sun Mar 01 21:25:13.414659 2026] [:error] [pid 33822:tid 33831] [client 4.204.200.32:11998] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaQ-OW6W3ygu1YVssuYhKgAAAoc"]
[Sun Mar 01 21:25:13.971089 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:11978] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaQ-OQfBuk03yQKDyqtCRgAAAcw"]
[Sun Mar 01 21:25:14.577513 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:12130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/06.php"] [unique_id "aaQ-OvKRPk6YnJBxw_wW_gAAANI"]
[Sun Mar 01 21:25:15.317958 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:12134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaQ-OxRjCrA8qWBjgG9EWAAAAkA"]
[Sun Mar 01 21:25:15.963269 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:12068] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaQ-OxRjCrA8qWBjgG9EXAAAAlc"]
[Sun Mar 01 21:25:16.541750 2026] [:error] [pid 38241:tid 38246] [client 4.204.200.32:12076] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaQ-PPKRPk6YnJBxw_wXBgAAAMI"]
[Sun Mar 01 21:25:17.091507 2026] [:error] [pid 38034:tid 38061] [client 4.204.200.32:12199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws60.php"] [unique_id "aaQ-PQxtfZjwlJok9K8YJwAAARc"]
[Sun Mar 01 21:25:17.615711 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:12069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aaQ-PfKRPk6YnJBxw_wXDAAAAM8"]
[Sun Mar 01 21:25:18.215532 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:12073] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aaQ-PgfBuk03yQKDyqtCUgAAAcI"]
[Sun Mar 01 21:25:18.820608 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:12034] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aaQ-PhRjCrA8qWBjgG9EZgAAAkA"]
[Sun Mar 01 21:25:19.445591 2026] [:error] [pid 38034:tid 38050] [client 4.204.200.32:12213] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-freya.php"] [unique_id "aaQ-PwxtfZjwlJok9K8YOQAAAQw"]
[Sun Mar 01 21:25:20.268146 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:12141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb.php"] [unique_id "aaQ-QBRjCrA8qWBjgG9EbgAAAkM"]
[Sun Mar 01 21:25:20.807008 2026] [:error] [pid 37032:tid 37048] [client 4.204.200.32:12248] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb.php"] [unique_id "aaQ-QOu0U4o7eSImsVSAegAAAY4"]
[Sun Mar 01 21:25:21.437302 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:12089] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb.php"] [unique_id "aaQ-QfKRPk6YnJBxw_wXEwAAANg"]
[Sun Mar 01 21:25:22.096602 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12047] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bb.php"] [unique_id "aaQ-QhRjCrA8qWBjgG9EegAAAkY"]
[Sun Mar 01 21:25:22.537683 2026] [:error] [pid 38241:tid 38259] [client 4.204.200.32:12155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dsd.php"] [unique_id "aaQ-QvKRPk6YnJBxw_wXGQAAAM8"]
[Sun Mar 01 21:25:23.393510 2026] [:error] [pid 7165:tid 7179] [client 4.204.200.32:12211] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dsd.php"] [unique_id "aaQ-QxRjCrA8qWBjgG9EfQAAAkw"]
[Sun Mar 01 21:25:23.977240 2026] [:error] [pid 7133:tid 7141] [client 4.204.200.32:12282] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dsd.php"] [unique_id "aaQ-Q_Ctubh8pR64qB9I-gAAAEY"]
[Sun Mar 01 21:25:24.564963 2026] [:error] [pid 7133:tid 7144] [client 4.204.200.32:12098] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dsd.php"] [unique_id "aaQ-RPCtubh8pR64qB9I-wAAAEk"]
[Sun Mar 01 21:25:25.033300 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:12078] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/guk.php"] [unique_id "aaQ-RfKRPk6YnJBxw_wXIgAAAMU"]
[Sun Mar 01 21:25:25.568325 2026] [:error] [pid 44644:tid 44649] [client 4.204.200.32:12179] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/guk.php"] [unique_id "aaQ-RZ3RJaXMcw3y9V_e9wAAAAI"]
[Sun Mar 01 21:25:26.294435 2026] [:error] [pid 38241:tid 38257] [client 4.204.200.32:12035] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/guk.php"] [unique_id "aaQ-RvKRPk6YnJBxw_wXKQAAAM0"]
[Sun Mar 01 21:25:26.856786 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:12208] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/guk.php"] [unique_id "aaQ-RvKRPk6YnJBxw_wXLgAAAMQ"]
[Sun Mar 01 21:25:27.800681 2026] [proxy_fcgi:error] [pid 7133:tid 7143] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:28.094635 2026] [proxy_fcgi:error] [pid 7133:tid 7157] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:28.342721 2026] [proxy_fcgi:error] [pid 7133:tid 7154] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:28.557881 2026] [proxy_fcgi:error] [pid 7133:tid 7135] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:28.768207 2026] [proxy_fcgi:error] [pid 7133:tid 7147] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:28.976634 2026] [proxy_fcgi:error] [pid 7133:tid 7158] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:29.189575 2026] [proxy_fcgi:error] [pid 7133:tid 7140] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:29.468133 2026] [proxy_fcgi:error] [pid 7133:tid 7141] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:30.053535 2026] [proxy_fcgi:error] [pid 7133:tid 7142] [client 4.204.200.32:12048] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:25:30.262029 2026] [:error] [pid 7133:tid 7149] [client 4.204.200.32:12048] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aaQ-SvCtubh8pR64qB9JEgAAAE4"]
[Sun Mar 01 21:25:30.961895 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:12055] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aaQ-ShRjCrA8qWBjgG9EkwAAAkE"]
[Sun Mar 01 21:25:31.586070 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:12066] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aaQ-SwfBuk03yQKDyqtCdQAAAcw"]
[Sun Mar 01 21:25:32.407372 2026] [:error] [pid 7133:tid 7148] [client 4.204.200.32:12005] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aaQ-TPCtubh8pR64qB9JFgAAAE0"]
[Sun Mar 01 21:25:32.850684 2026] [:error] [pid 33822:tid 33840] [client 4.204.200.32:12186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaQ-TG6W3ygu1YVssuYhOQAAApA"]
[Sun Mar 01 21:25:33.308749 2026] [:error] [pid 33822:tid 33834] [client 4.204.200.32:11918] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaQ-TW6W3ygu1YVssuYhPAAAAoo"]
[Sun Mar 01 21:25:33.800506 2026] [:error] [pid 38241:tid 38246] [client 4.204.200.32:12075] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaQ-TfKRPk6YnJBxw_wXOwAAAMI"]
[Sun Mar 01 21:25:34.556692 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:12101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1vx.php"] [unique_id "aaQ-TvKRPk6YnJBxw_wXQAAAANU"]
[Sun Mar 01 21:25:35.118708 2026] [:error] [pid 41342:tid 41361] [client 4.204.200.32:12235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aaQ-T44iJ6RAS5CatDlfewAAAhA"]
[Sun Mar 01 21:25:35.729053 2026] [:error] [pid 33822:tid 33828] [client 4.204.200.32:12113] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aaQ-T26W3ygu1YVssuYhPgAAAoQ"]
[Sun Mar 01 21:25:36.208963 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:12077] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aaQ-UBRjCrA8qWBjgG9EnwAAAkE"]
[Sun Mar 01 21:25:36.812759 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:12154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mans.php"] [unique_id "aaQ-UPKRPk6YnJBxw_wXUwAAAMo"]
[Sun Mar 01 21:25:37.454059 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:12131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rum.php"] [unique_id "aaQ-UfKRPk6YnJBxw_wXWgAAANg"]
[Sun Mar 01 21:25:38.085774 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:12096] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rum.php"] [unique_id "aaQ-UgfBuk03yQKDyqtCiwAAAdM"]
[Sun Mar 01 21:25:38.570894 2026] [:error] [pid 41342:tid 41347] [client 4.204.200.32:12127] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rum.php"] [unique_id "aaQ-Uo4iJ6RAS5CatDlffAAAAgI"]
[Sun Mar 01 21:25:39.238137 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:12151] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rum.php"] [unique_id "aaQ-UxRjCrA8qWBjgG9ErAAAAkg"]
[Sun Mar 01 21:25:40.070819 2026] [:error] [pid 33822:tid 33825] [client 4.204.200.32:12001] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaQ-VG6W3ygu1YVssuYhSQAAAoE"]
[Sun Mar 01 21:25:40.660553 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:12057] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaQ-VAxtfZjwlJok9K8YVAAAARY"]
[Sun Mar 01 21:25:41.205465 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:12070] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaQ-VQfBuk03yQKDyqtCkwAAAcw"]
[Sun Mar 01 21:25:41.736348 2026] [:error] [pid 40750:tid 40761] [client 4.204.200.32:11974] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aaQ-VQfBuk03yQKDyqtClgAAAcg"]
[Sun Mar 01 21:25:42.452511 2026] [:error] [pid 33822:tid 33848] [client 4.204.200.32:12045] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wio.php"] [unique_id "aaQ-Vm6W3ygu1YVssuYhTQAAApg"]
[Sun Mar 01 21:25:43.258049 2026] [:error] [pid 38241:tid 38262] [client 4.204.200.32:12037] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wio.php"] [unique_id "aaQ-V_KRPk6YnJBxw_wXcwAAANI"]
[Sun Mar 01 21:25:43.911008 2026] [:error] [pid 40750:tid 40777] [client 4.204.200.32:12067] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wio.php"] [unique_id "aaQ-VwfBuk03yQKDyqtCpQAAAdg"]
[Sun Mar 01 21:25:44.681956 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:12152] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wio.php"] [unique_id "aaQ-WBRjCrA8qWBjgG9EyAAAAkE"]
[Sun Mar 01 21:25:45.188908 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:11991] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clasa99.php"] [unique_id "aaQ-WQfBuk03yQKDyqtCswAAAcM"]
[Sun Mar 01 21:25:46.179772 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:11972] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clasa99.php"] [unique_id "aaQ-WvKRPk6YnJBxw_wXdQAAANE"]
[Sun Mar 01 21:25:47.091877 2026] [:error] [pid 38034:tid 38057] [client 4.204.200.32:12041] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clasa99.php"] [unique_id "aaQ-WwxtfZjwlJok9K8YWwAAARM"]
[Sun Mar 01 21:25:47.843994 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12065] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clasa99.php"] [unique_id "aaQ-WwfBuk03yQKDyqtCyQAAAdA"]
[Sun Mar 01 21:25:48.767763 2026] [:error] [pid 7133:tid 7156] [client 4.204.200.32:11992] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaQ-XPCtubh8pR64qB9JLgAAAFU"]
[Sun Mar 01 21:25:49.403273 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:11968] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaQ-XRRjCrA8qWBjgG9E5gAAAlA"]
[Sun Mar 01 21:25:49.989788 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:12181] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaQ-XQfBuk03yQKDyqtC1gAAAdU"]
[Sun Mar 01 21:25:50.724292 2026] [:error] [pid 38241:tid 38255] [client 4.204.200.32:12094] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa-rex.php7"] [unique_id "aaQ-XvKRPk6YnJBxw_wXfQAAAMs"]
[Sun Mar 01 21:25:51.905583 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:11971] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws62.php"] [unique_id "aaQ-XxRjCrA8qWBjgG9E-gAAAlI"]
[Sun Mar 01 21:25:52.659015 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:12145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws62.php"] [unique_id "aaQ-YBRjCrA8qWBjgG9FAQAAAkE"]
[Sun Mar 01 21:25:53.458771 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:11996] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws62.php"] [unique_id "aaQ-YfKRPk6YnJBxw_wXgQAAAMc"]
[Sun Mar 01 21:25:54.117383 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:12125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws62.php"] [unique_id "aaQ-YgfBuk03yQKDyqtC-wAAAcs"]
[Sun Mar 01 21:25:55.218335 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:12050] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aaQ-YwfBuk03yQKDyqtDCgAAAc8"]
[Sun Mar 01 21:25:55.822787 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:11952] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aaQ-YwfBuk03yQKDyqtDFAAAAcY"]
[Sun Mar 01 21:25:56.528585 2026] [:error] [pid 7133:tid 7147] [client 4.204.200.32:12093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aaQ-ZPCtubh8pR64qB9JOgAAAEw"]
[Sun Mar 01 21:25:57.024478 2026] [:error] [pid 38241:tid 38264] [client 4.204.200.32:12064] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "aaQ-ZfKRPk6YnJBxw_wXkgAAANQ"]
[Sun Mar 01 21:25:57.635842 2026] [:error] [pid 7133:tid 7135] [client 4.204.200.32:12081] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaQ-ZfCtubh8pR64qB9JPgAAAEA"]
[Sun Mar 01 21:25:58.116591 2026] [:error] [pid 38241:tid 38256] [client 4.204.200.32:11981] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaQ-ZvKRPk6YnJBxw_wXnAAAAMw"]
[Sun Mar 01 21:25:58.781426 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:12216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaQ-ZvKRPk6YnJBxw_wXpgAAANE"]
[Sun Mar 01 21:25:59.334451 2026] [:error] [pid 38034:tid 38037] [client 4.204.200.32:11989] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaQ-ZwxtfZjwlJok9K8YZQAAAQE"]
[Sun Mar 01 21:26:00.035806 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:12149] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aaQ-aBRjCrA8qWBjgG9FGQAAAlA"]
[Sun Mar 01 21:26:00.685825 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:12000] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aaQ-aBRjCrA8qWBjgG9FGwAAAlg"]
[Sun Mar 01 21:26:01.209151 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aaQ-aRRjCrA8qWBjgG9FHgAAAkY"]
[Sun Mar 01 21:26:01.742500 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:12156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "aaQ-aQfBuk03yQKDyqtDLwAAAc4"]
[Sun Mar 01 21:26:02.207990 2026] [:error] [pid 44644:tid 44671] [client 4.204.200.32:12103] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aaQ-ap3RJaXMcw3y9V_fAgAAABg"]
[Sun Mar 01 21:26:02.700115 2026] [:error] [pid 41342:tid 41369] [client 4.204.200.32:12085] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aaQ-ao4iJ6RAS5CatDlfhAAAAhg"]
[Sun Mar 01 21:26:03.239814 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:12011] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aaQ-a_Ctubh8pR64qB9JWAAAAFE"]
[Sun Mar 01 21:26:03.926119 2026] [:error] [pid 7133:tid 7153] [client 4.204.200.32:12159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cxc.php"] [unique_id "aaQ-a_Ctubh8pR64qB9JWQAAAFI"]
[Sun Mar 01 21:26:04.458967 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:12046] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gjm.php"] [unique_id "aaQ-bAfBuk03yQKDyqtDNwAAAcU"]
[Sun Mar 01 21:26:04.963656 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12020] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gjm.php"] [unique_id "aaQ-bBRjCrA8qWBjgG9FLAAAAks"]
[Sun Mar 01 21:26:05.669710 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:11970] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gjm.php"] [unique_id "aaQ-bRRjCrA8qWBjgG9FMQAAAlQ"]
[Sun Mar 01 21:26:06.307877 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:11993] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gjm.php"] [unique_id "aaQ-bhRjCrA8qWBjgG9FMgAAAkQ"]
[Sun Mar 01 21:26:06.817872 2026] [:error] [pid 7165:tid 7188] [client 4.204.200.32:12142] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aaQ-bhRjCrA8qWBjgG9FNwAAAlU"]
[Sun Mar 01 21:26:07.380026 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:11985] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aaQ-bxRjCrA8qWBjgG9FPAAAAkY"]
[Sun Mar 01 21:26:07.920723 2026] [:error] [pid 41342:tid 41366] [client 4.204.200.32:12025] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aaQ-b44iJ6RAS5CatDlfhwAAAhU"]
[Sun Mar 01 21:26:08.570884 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:11987] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ex.php"] [unique_id "aaQ-cAfBuk03yQKDyqtDRwAAAdQ"]
[Sun Mar 01 21:26:09.058187 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12061] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/post.php"] [unique_id "aaQ-cQfBuk03yQKDyqtDSwAAAdA"]
[Sun Mar 01 21:26:09.708851 2026] [:error] [pid 7133:tid 7138] [client 4.204.200.32:11983] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/post.php"] [unique_id "aaQ-cfCtubh8pR64qB9JXQAAAEM"]
[Sun Mar 01 21:26:10.325212 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:12010] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/post.php"] [unique_id "aaQ-cgfBuk03yQKDyqtDUwAAAdM"]
[Sun Mar 01 21:26:11.041754 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:12092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/post.php"] [unique_id "aaQ-cwfBuk03yQKDyqtDVwAAAcI"]
[Sun Mar 01 21:26:11.634480 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:11984] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpo.php"] [unique_id "aaQ-cxRjCrA8qWBjgG9FUwAAAkI"]
[Sun Mar 01 21:26:12.361157 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:12091] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpo.php"] [unique_id "aaQ-dBRjCrA8qWBjgG9FVgAAAlc"]
[Sun Mar 01 21:26:12.952922 2026] [:error] [pid 7133:tid 7155] [client 4.204.200.32:12058] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpo.php"] [unique_id "aaQ-dPCtubh8pR64qB9JZgAAAFQ"]
[Sun Mar 01 21:26:13.553479 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:12206] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpo.php"] [unique_id "aaQ-dQfBuk03yQKDyqtDXQAAAdQ"]
[Sun Mar 01 21:26:14.329308 2026] [:error] [pid 7165:tid 7185] [client 4.204.200.32:12084] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aaQ-dhRjCrA8qWBjgG9FWwAAAlI"]
[Sun Mar 01 21:26:14.883406 2026] [:error] [pid 33822:tid 33835] [client 4.204.200.32:11994] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aaQ-dm6W3ygu1YVssuYhYQAAAos"]
[Sun Mar 01 21:26:15.382728 2026] [:error] [pid 33822:tid 33824] [client 4.204.200.32:11905] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aaQ-d26W3ygu1YVssuYhZwAAAoA"]
[Sun Mar 01 21:26:15.978779 2026] [:error] [pid 33822:tid 33825] [client 4.204.200.32:12053] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aaQ-d26W3ygu1YVssuYhbwAAAoE"]
[Sun Mar 01 21:26:16.654209 2026] [:error] [pid 38241:tid 38267] [client 4.204.200.32:11913] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaQ-ePKRPk6YnJBxw_wXswAAANc"]
[Sun Mar 01 21:26:17.139225 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:12071] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaQ-efKRPk6YnJBxw_wXuwAAANA"]
[Sun Mar 01 21:26:17.868213 2026] [:error] [pid 38241:tid 38248] [client 4.204.200.32:12087] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaQ-efKRPk6YnJBxw_wXzwAAAMQ"]
[Sun Mar 01 21:26:18.514060 2026] [:error] [pid 40750:tid 40777] [client 4.204.200.32:11911] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7.php"] [unique_id "aaQ-egfBuk03yQKDyqtDcwAAAdg"]
[Sun Mar 01 21:26:19.137443 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:12095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aaQ-ewfBuk03yQKDyqtDeQAAAdE"]
[Sun Mar 01 21:26:19.632887 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:11995] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aaQ-exRjCrA8qWBjgG9FZwAAAk8"]
[Sun Mar 01 21:26:20.247648 2026] [:error] [pid 7165:tid 7174] [client 4.204.200.32:11926] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aaQ-fBRjCrA8qWBjgG9FagAAAkc"]
[Sun Mar 01 21:26:20.695203 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12006] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bes.php"] [unique_id "aaQ-fBRjCrA8qWBjgG9FbgAAAkY"]
[Sun Mar 01 21:26:21.400677 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:12002] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadd.php"] [unique_id "aaQ-fRRjCrA8qWBjgG9FcQAAAlM"]
[Sun Mar 01 21:26:22.196009 2026] [:error] [pid 38034:tid 38054] [client 4.204.200.32:11907] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadd.php"] [unique_id "aaQ-fgxtfZjwlJok9K8YegAAARA"]
[Sun Mar 01 21:26:22.689550 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:11939] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadd.php"] [unique_id "aaQ-fhRjCrA8qWBjgG9FdAAAAkQ"]
[Sun Mar 01 21:26:23.378478 2026] [:error] [pid 38034:tid 38036] [client 4.204.200.32:11934] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadd.php"] [unique_id "aaQ-fwxtfZjwlJok9K8YfAAAAQA"]
[Sun Mar 01 21:26:23.968144 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:12254] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vgtyu.php"] [unique_id "aaQ-fxRjCrA8qWBjgG9FewAAAk0"]
[Sun Mar 01 21:26:24.493962 2026] [:error] [pid 44644:tid 44662] [client 4.204.200.32:12027] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vgtyu.php"] [unique_id "aaQ-gJ3RJaXMcw3y9V_fBQAAAA8"]
[Sun Mar 01 21:26:25.093445 2026] [:error] [pid 38034:tid 38039] [client 4.204.200.32:11906] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vgtyu.php"] [unique_id "aaQ-gQxtfZjwlJok9K8YfQAAAQM"]
[Sun Mar 01 21:26:25.749700 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12033] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vgtyu.php"] [unique_id "aaQ-gQfBuk03yQKDyqtDoQAAAdA"]
[Sun Mar 01 21:26:26.527254 2026] [:error] [pid 40750:tid 40766] [client 4.204.200.32:11997] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaQ-ggfBuk03yQKDyqtDqwAAAc0"]
[Sun Mar 01 21:26:27.206944 2026] [:error] [pid 40750:tid 40757] [client 4.204.200.32:11982] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaQ-gwfBuk03yQKDyqtDsQAAAcQ"]
[Sun Mar 01 21:26:27.649727 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:11990] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaQ-g_Ctubh8pR64qB9JmAAAAFE"]
[Sun Mar 01 21:26:28.282020 2026] [:error] [pid 7165:tid 7177] [client 4.204.200.32:12072] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aaQ-hBRjCrA8qWBjgG9FlAAAAko"]
[Sun Mar 01 21:26:28.779182 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:11988] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aaQ-hBRjCrA8qWBjgG9FlwAAAk4"]
[Sun Mar 01 21:26:29.432655 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12080] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aaQ-hRRjCrA8qWBjgG9FngAAAkY"]
[Sun Mar 01 21:26:29.911843 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:12038] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aaQ-hRRjCrA8qWBjgG9FpQAAAlM"]
[Sun Mar 01 21:26:30.417627 2026] [proxy_fcgi:error] [pid 7165:tid 7172] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:30.633470 2026] [proxy_fcgi:error] [pid 7165:tid 7174] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:30.857410 2026] [proxy_fcgi:error] [pid 7165:tid 7176] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:31.108674 2026] [proxy_fcgi:error] [pid 7165:tid 7169] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:31.316824 2026] [proxy_fcgi:error] [pid 7165:tid 7167] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:31.554577 2026] [proxy_fcgi:error] [pid 7165:tid 7170] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:31.764648 2026] [proxy_fcgi:error] [pid 7165:tid 7182] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:31.984430 2026] [proxy_fcgi:error] [pid 7165:tid 7180] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:32.212362 2026] [proxy_fcgi:error] [pid 7165:tid 7179] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:32.420175 2026] [proxy_fcgi:error] [pid 7165:tid 7174] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:32.630919 2026] [proxy_fcgi:error] [pid 7165:tid 7190] [client 4.204.200.32:12132] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:26:32.843124 2026] [:error] [pid 7165:tid 7178] [client 4.204.200.32:12132] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1061.php"] [unique_id "aaQ-iBRjCrA8qWBjgG9FwgAAAks"]
[Sun Mar 01 21:26:33.518108 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:11917] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1061.php"] [unique_id "aaQ-iQfBuk03yQKDyqtD2wAAAcM"]
[Sun Mar 01 21:26:34.042467 2026] [:error] [pid 38241:tid 38244] [client 4.204.200.32:12009] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1061.php"] [unique_id "aaQ-ivKRPk6YnJBxw_wYBwAAAMA"]
[Sun Mar 01 21:26:34.528228 2026] [:error] [pid 44644:tid 44659] [client 4.204.200.32:11951] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1061.php"] [unique_id "aaQ-ip3RJaXMcw3y9V_fCAAAAAw"]
[Sun Mar 01 21:26:35.116333 2026] [:error] [pid 37032:tid 37037] [client 4.204.200.32:12003] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "aaQ-i-u0U4o7eSImsVSA5wAAAYM"]
[Sun Mar 01 21:26:35.669169 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:12029] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "aaQ-i_KRPk6YnJBxw_wYCgAAAMo"]
[Sun Mar 01 21:26:36.240847 2026] [:error] [pid 38241:tid 38249] [client 4.204.200.32:12124] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "aaQ-jPKRPk6YnJBxw_wYCwAAAMU"]
[Sun Mar 01 21:26:36.946627 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:11980] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "aaQ-jAfBuk03yQKDyqtD6wAAAdY"]
[Sun Mar 01 21:26:37.482147 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:11938] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aaQ-jQfBuk03yQKDyqtD8QAAAcU"]
[Sun Mar 01 21:26:37.961171 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:12017] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aaQ-jQfBuk03yQKDyqtD9wAAAcI"]
[Sun Mar 01 21:26:38.552748 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:11921] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aaQ-jgfBuk03yQKDyqtD_QAAAcs"]
[Sun Mar 01 21:26:39.151840 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:11930] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hello.php"] [unique_id "aaQ-j_KRPk6YnJBxw_wYEAAAAME"]
[Sun Mar 01 21:26:39.621748 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:12083] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/05.php"] [unique_id "aaQ-jxRjCrA8qWBjgG9F4QAAAkQ"]
[Sun Mar 01 21:26:40.086163 2026] [:error] [pid 38241:tid 38264] [client 4.204.200.32:11977] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/05.php"] [unique_id "aaQ-kPKRPk6YnJBxw_wYFAAAANQ"]
[Sun Mar 01 21:26:40.522186 2026] [:error] [pid 40750:tid 40774] [client 4.204.200.32:12021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/05.php"] [unique_id "aaQ-kAfBuk03yQKDyqtEBgAAAdU"]
[Sun Mar 01 21:26:41.194618 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:12015] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/05.php"] [unique_id "aaQ-kQfBuk03yQKDyqtECgAAAcs"]
[Sun Mar 01 21:26:41.855973 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:12019] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxin.php"] [unique_id "aaQ-kQfBuk03yQKDyqtEEgAAAdQ"]
[Sun Mar 01 21:26:42.425895 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:11928] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxin.php"] [unique_id "aaQ-kgfBuk03yQKDyqtEFwAAAcI"]
[Sun Mar 01 21:26:42.893587 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:12095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxin.php"] [unique_id "aaQ-kgfBuk03yQKDyqtEHAAAAcs"]
[Sun Mar 01 21:26:43.371650 2026] [:error] [pid 40750:tid 40773] [client 4.204.200.32:11999] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxin.php"] [unique_id "aaQ-kwfBuk03yQKDyqtEIwAAAdQ"]
[Sun Mar 01 21:26:43.869240 2026] [:error] [pid 40750:tid 40761] [client 4.204.200.32:12004] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ-kwfBuk03yQKDyqtELAAAAcg"]
[Sun Mar 01 21:26:44.344030 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:11914] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ-lAfBuk03yQKDyqtEMQAAAcA"]
[Sun Mar 01 21:26:44.826700 2026] [:error] [pid 41342:tid 41348] [client 4.204.200.32:11946] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ-lI4iJ6RAS5CatDlfiQAAAgM"]
[Sun Mar 01 21:26:45.293881 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:11975] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aaQ-lRRjCrA8qWBjgG9GFQAAAlQ"]
[Sun Mar 01 21:26:45.740999 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:12090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aaQ-lRRjCrA8qWBjgG9GHQAAAlM"]
[Sun Mar 01 21:26:46.296909 2026] [:error] [pid 7133:tid 7143] [client 4.204.200.32:11909] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aaQ-lvCtubh8pR64qB9JogAAAEg"]
[Sun Mar 01 21:26:46.782912 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:11855] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aaQ-lvKRPk6YnJBxw_wYFgAAAMk"]
[Sun Mar 01 21:26:47.223929 2026] [:error] [pid 38034:tid 38037] [client 4.204.200.32:11934] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aaQ-lwxtfZjwlJok9K8YugAAAQE"]
[Sun Mar 01 21:26:47.693804 2026] [:error] [pid 7165:tid 7182] [client 4.204.200.32:12008] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aaQ-lxRjCrA8qWBjgG9GNQAAAk8"]
[Sun Mar 01 21:26:48.301428 2026] [:error] [pid 7133:tid 7152] [client 4.204.200.32:11958] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aaQ-mPCtubh8pR64qB9JpAAAAFE"]
[Sun Mar 01 21:26:48.777868 2026] [:error] [pid 7133:tid 7144] [client 4.204.200.32:12028] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aaQ-mPCtubh8pR64qB9JpwAAAEk"]
[Sun Mar 01 21:26:49.318286 2026] [:error] [pid 41780:tid 41793] [client 4.204.200.32:12007] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aaQ-mcONkVoocLIqzy0s4QAAA8o"]
[Sun Mar 01 21:26:49.886356 2026] [:error] [pid 37032:tid 37051] [client 4.204.200.32:11931] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iko.php"] [unique_id "aaQ-meu0U4o7eSImsVSA8AAAAZE"]
[Sun Mar 01 21:26:50.351917 2026] [:error] [pid 7165:tid 7170] [client 4.204.200.32:12014] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iko.php"] [unique_id "aaQ-mhRjCrA8qWBjgG9GQgAAAkM"]
[Sun Mar 01 21:26:50.833742 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:12039] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iko.php"] [unique_id "aaQ-mhRjCrA8qWBjgG9GSgAAAlQ"]
[Sun Mar 01 21:26:51.378644 2026] [:error] [pid 37032:tid 37036] [client 4.204.200.32:12250] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iko.php"] [unique_id "aaQ-m-u0U4o7eSImsVSA8wAAAYI"]
[Sun Mar 01 21:26:51.849841 2026] [:error] [pid 37032:tid 37047] [client 4.204.200.32:11859] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmy.php"] [unique_id "aaQ-m-u0U4o7eSImsVSA9QAAAY0"]
[Sun Mar 01 21:26:52.513971 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:12031] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmy.php"] [unique_id "aaQ-nPKRPk6YnJBxw_wYIgAAANA"]
[Sun Mar 01 21:26:53.095589 2026] [:error] [pid 7133:tid 7136] [client 4.204.200.32:11986] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmy.php"] [unique_id "aaQ-nfCtubh8pR64qB9JrAAAAEE"]
[Sun Mar 01 21:26:53.685798 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:11949] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmy.php"] [unique_id "aaQ-nQfBuk03yQKDyqtEUgAAAcA"]
[Sun Mar 01 21:26:54.162179 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:11969] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aaQ-ngfBuk03yQKDyqtEWQAAAdM"]
[Sun Mar 01 21:26:54.671887 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:11873] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aaQ-ngfBuk03yQKDyqtEYwAAAcE"]
[Sun Mar 01 21:26:55.333971 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:12024] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aaQ-nwfBuk03yQKDyqtEbAAAAcw"]
[Sun Mar 01 21:26:55.878050 2026] [:error] [pid 7165:tid 7172] [client 4.204.200.32:12025] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aaQ-nxRjCrA8qWBjgG9GZwAAAkU"]
[Sun Mar 01 21:26:56.484754 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:11948] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/end.php"] [unique_id "aaQ-oAfBuk03yQKDyqtEcgAAAdA"]
[Sun Mar 01 21:26:57.085316 2026] [:error] [pid 7165:tid 7188] [client 4.204.200.32:11912] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/end.php"] [unique_id "aaQ-oRRjCrA8qWBjgG9GcwAAAlU"]
[Sun Mar 01 21:26:57.675597 2026] [:error] [pid 40750:tid 40757] [client 4.204.200.32:11820] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/end.php"] [unique_id "aaQ-oQfBuk03yQKDyqtEewAAAcQ"]
[Sun Mar 01 21:26:58.168313 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:11961] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/end.php"] [unique_id "aaQ-ogfBuk03yQKDyqtEfwAAAcw"]
[Sun Mar 01 21:26:58.614154 2026] [:error] [pid 33822:tid 33831] [client 4.204.200.32:11845] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaQ-om6W3ygu1YVssuYhjgAAAoc"]
[Sun Mar 01 21:26:59.077808 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:12023] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaQ-oxRjCrA8qWBjgG9GfAAAAkg"]
[Sun Mar 01 21:26:59.549330 2026] [:error] [pid 38241:tid 38247] [client 4.204.200.32:12121] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaQ-o_KRPk6YnJBxw_wYPQAAAMM"]
[Sun Mar 01 21:27:00.065175 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:11947] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aaQ-pAfBuk03yQKDyqtEiwAAAc4"]
[Sun Mar 01 21:27:00.610145 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:11941] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/scx.php7"] [unique_id "aaQ-pAfBuk03yQKDyqtEjgAAAc8"]
[Sun Mar 01 21:27:01.164480 2026] [:error] [pid 38034:tid 38059] [client 4.204.200.32:12013] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/scx.php7"] [unique_id "aaQ-pQxtfZjwlJok9K8YvwAAARU"]
[Sun Mar 01 21:27:01.667815 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:11955] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/scx.php7"] [unique_id "aaQ-pQfBuk03yQKDyqtElgAAAcM"]
[Sun Mar 01 21:27:02.114801 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:11922] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/scx.php7"] [unique_id "aaQ-pgfBuk03yQKDyqtEmgAAAcE"]
[Sun Mar 01 21:27:02.591070 2026] [:error] [pid 33822:tid 33830] [client 4.204.200.32:11944] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aaQ-pm6W3ygu1YVssuYhkQAAAoY"]
[Sun Mar 01 21:27:03.142346 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:11925] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aaQ-pwfBuk03yQKDyqtEowAAAdM"]
[Sun Mar 01 21:27:03.630657 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:11933] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aaQ-pwfBuk03yQKDyqtEqgAAAdA"]
[Sun Mar 01 21:27:04.158752 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:11979] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error1.php"] [unique_id "aaQ-qAfBuk03yQKDyqtErQAAAcc"]
[Sun Mar 01 21:27:04.687491 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:12147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thui.php"] [unique_id "aaQ-qAfBuk03yQKDyqtEsgAAAdM"]
[Sun Mar 01 21:27:05.237258 2026] [:error] [pid 7165:tid 7167] [client 4.204.200.32:11841] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thui.php"] [unique_id "aaQ-qRRjCrA8qWBjgG9GoAAAAkA"]
[Sun Mar 01 21:27:05.841581 2026] [:error] [pid 7165:tid 7189] [client 4.204.200.32:11923] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thui.php"] [unique_id "aaQ-qRRjCrA8qWBjgG9GpgAAAlY"]
[Sun Mar 01 21:27:06.427729 2026] [:error] [pid 7165:tid 7177] [client 4.204.200.32:11916] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/thui.php"] [unique_id "aaQ-qhRjCrA8qWBjgG9GrgAAAko"]
[Sun Mar 01 21:27:06.993271 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:11887] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaQ-qvKRPk6YnJBxw_wYTQAAANA"]
[Sun Mar 01 21:27:07.594224 2026] [:error] [pid 38241:tid 38251] [client 4.204.200.32:12016] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaQ-q_KRPk6YnJBxw_wYVQAAAMc"]
[Sun Mar 01 21:27:08.068496 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:12004] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaQ-rPKRPk6YnJBxw_wYWAAAANg"]
[Sun Mar 01 21:27:08.551406 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:11847] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "aaQ-rBRjCrA8qWBjgG9GvAAAAkE"]
[Sun Mar 01 21:27:09.029915 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:11927] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/sc.php"] [unique_id "aaQ-rQfBuk03yQKDyqtEvQAAAc4"]
[Sun Mar 01 21:27:09.517788 2026] [:error] [pid 7165:tid 7190] [client 4.204.200.32:11967] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/sc.php"] [unique_id "aaQ-rRRjCrA8qWBjgG9GxQAAAlc"]
[Sun Mar 01 21:27:10.017005 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:11953] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/sc.php"] [unique_id "aaQ-rhRjCrA8qWBjgG9GygAAAkY"]
[Sun Mar 01 21:27:10.518992 2026] [:error] [pid 7133:tid 7154] [client 4.204.200.32:11954] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/sc.php"] [unique_id "aaQ-rvCtubh8pR64qB9JtAAAAFM"]
[Sun Mar 01 21:27:11.016447 2026] [:error] [pid 41342:tid 41356] [client 4.204.200.32:12022] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaQ-r44iJ6RAS5CatDlfkgAAAgs"]
[Sun Mar 01 21:27:11.524191 2026] [:error] [pid 40750:tid 40763] [client 4.204.200.32:12012] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaQ-rwfBuk03yQKDyqtEzAAAAco"]
[Sun Mar 01 21:27:12.044068 2026] [:error] [pid 37032:tid 37035] [client 4.204.200.32:11976] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaQ-sOu0U4o7eSImsVSBBQAAAYE"]
[Sun Mar 01 21:27:12.514517 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:11919] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aaQ-sAfBuk03yQKDyqtE0gAAAcE"]
[Sun Mar 01 21:27:13.012348 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:11908] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaQ-sQfBuk03yQKDyqtE1AAAAcI"]
[Sun Mar 01 21:27:13.589371 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:11779] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaQ-sQfBuk03yQKDyqtE2AAAAcA"]
[Sun Mar 01 21:27:14.057876 2026] [:error] [pid 7133:tid 7148] [client 4.204.200.32:11856] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaQ-svCtubh8pR64qB9JxAAAAE0"]
[Sun Mar 01 21:27:14.596947 2026] [:error] [pid 7133:tid 7157] [client 4.204.200.32:11862] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aaQ-svCtubh8pR64qB9JxgAAAFY"]
[Sun Mar 01 21:27:15.072619 2026] [:error] [pid 7133:tid 7140] [client 4.204.200.32:11850] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rpk.php"] [unique_id "aaQ-s_Ctubh8pR64qB9JygAAAEU"]
[Sun Mar 01 21:27:15.599379 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:11935] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rpk.php"] [unique_id "aaQ-sxRjCrA8qWBjgG9G4AAAAlM"]
[Sun Mar 01 21:27:16.153702 2026] [:error] [pid 7165:tid 7184] [client 4.204.200.32:12062] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rpk.php"] [unique_id "aaQ-tBRjCrA8qWBjgG9G5QAAAlE"]
[Sun Mar 01 21:27:16.601455 2026] [:error] [pid 38241:tid 38245] [client 4.204.200.32:11973] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rpk.php"] [unique_id "aaQ-tPKRPk6YnJBxw_wYeAAAAME"]
[Sun Mar 01 21:27:17.128179 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:11924] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aaQ-tQfBuk03yQKDyqtE5wAAAcA"]
[Sun Mar 01 21:27:17.599938 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:11864] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aaQ-tQfBuk03yQKDyqtE6wAAAc8"]
[Sun Mar 01 21:27:18.089433 2026] [:error] [pid 44644:tid 44665] [client 4.204.200.32:11962] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aaQ-tp3RJaXMcw3y9V_fFgAAABI"]
[Sun Mar 01 21:27:18.736349 2026] [:error] [pid 41342:tid 41355] [client 4.204.200.32:11863] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aaQ-to4iJ6RAS5CatDlflgAAAgo"]
[Sun Mar 01 21:27:19.270404 2026] [:error] [pid 7133:tid 7157] [client 4.204.200.32:11866] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaQ-t_Ctubh8pR64qB9J2gAAAFY"]
[Sun Mar 01 21:27:19.719532 2026] [:error] [pid 7133:tid 7138] [client 4.204.200.32:11920] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaQ-t_Ctubh8pR64qB9J3AAAAEM"]
[Sun Mar 01 21:27:20.174183 2026] [:error] [pid 40750:tid 40772] [client 4.204.200.32:11929] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaQ-uAfBuk03yQKDyqtE-gAAAdM"]
[Sun Mar 01 21:27:20.696677 2026] [:error] [pid 7165:tid 7176] [client 4.204.200.32:11780] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "aaQ-uBRjCrA8qWBjgG9G9gAAAkk"]
[Sun Mar 01 21:27:21.218541 2026] [:error] [pid 40750:tid 40771] [client 4.204.200.32:11849] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaQ-uQfBuk03yQKDyqtFBQAAAdI"]
[Sun Mar 01 21:27:21.948157 2026] [:error] [pid 40750:tid 40777] [client 4.204.200.32:11794] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaQ-uQfBuk03yQKDyqtFCgAAAdg"]
[Sun Mar 01 21:27:22.594579 2026] [:error] [pid 33822:tid 33847] [client 4.204.200.32:11879] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaQ-um6W3ygu1YVssuYh1gAAApc"]
[Sun Mar 01 21:27:23.057495 2026] [:error] [pid 7133:tid 7136] [client 4.204.200.32:11956] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e.php"] [unique_id "aaQ-u_Ctubh8pR64qB9J5gAAAEE"]
[Sun Mar 01 21:27:23.666078 2026] [:error] [pid 7133:tid 7156] [client 4.204.200.32:11898] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaQ-u_Ctubh8pR64qB9J6wAAAFU"]
[Sun Mar 01 21:27:24.318767 2026] [:error] [pid 33822:tid 33846] [client 4.204.200.32:11964] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaQ-vG6W3ygu1YVssuYh2wAAApY"]
[Sun Mar 01 21:27:24.899771 2026] [:error] [pid 33822:tid 33824] [client 4.204.200.32:11883] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaQ-vG6W3ygu1YVssuYh3gAAAoA"]
[Sun Mar 01 21:27:25.646329 2026] [:error] [pid 33822:tid 33829] [client 4.204.200.32:11791] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aaQ-vW6W3ygu1YVssuYh4QAAAoU"]
[Sun Mar 01 21:27:26.318496 2026] [:error] [pid 7133:tid 7143] [client 4.204.200.32:12082] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaQ-vvCtubh8pR64qB9J-AAAAEg"]
[Sun Mar 01 21:27:26.787604 2026] [:error] [pid 7165:tid 7189] [client 4.204.200.32:11848] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaQ-vhRjCrA8qWBjgG9HDQAAAlY"]
[Sun Mar 01 21:27:27.250226 2026] [:error] [pid 40750:tid 40760] [client 4.204.200.32:11785] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaQ-vwfBuk03yQKDyqtFJwAAAcc"]
[Sun Mar 01 21:27:27.736499 2026] [:error] [pid 33822:tid 33825] [client 4.204.200.32:11942] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/X7x.php"] [unique_id "aaQ-v26W3ygu1YVssuYh4wAAAoE"]
[Sun Mar 01 21:27:28.192224 2026] [:error] [pid 33822:tid 33841] [client 4.204.200.32:12271] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "aaQ-wG6W3ygu1YVssuYh5gAAApE"]
[Sun Mar 01 21:27:28.746065 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:11950] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "aaQ-wAfBuk03yQKDyqtFMAAAAdE"]
[Sun Mar 01 21:27:29.570046 2026] [:error] [pid 38241:tid 38253] [client 4.204.200.32:11861] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "aaQ-wfKRPk6YnJBxw_wYiQAAAMk"]
[Sun Mar 01 21:27:30.255919 2026] [:error] [pid 41780:tid 41787] [client 4.204.200.32:11880] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "aaQ-wsONkVoocLIqzy0s6wAAA8Q"]
[Sun Mar 01 21:27:30.800676 2026] [:error] [pid 7165:tid 7183] [client 4.204.200.32:11869] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/get.php"] [unique_id "aaQ-whRjCrA8qWBjgG9HGAAAAlA"]
[Sun Mar 01 21:27:31.284350 2026] [:error] [pid 33822:tid 33825] [client 4.204.200.32:11936] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/get.php"] [unique_id "aaQ-w26W3ygu1YVssuYh8AAAAoE"]
[Sun Mar 01 21:27:31.816753 2026] [:error] [pid 41780:tid 41789] [client 4.204.200.32:11843] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/get.php"] [unique_id "aaQ-w8ONkVoocLIqzy0s7gAAA8Y"]
[Sun Mar 01 21:27:32.379191 2026] [proxy_fcgi:error] [pid 7133:tid 7138] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:33.148435 2026] [proxy_fcgi:error] [pid 7133:tid 7147] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:33.357326 2026] [proxy_fcgi:error] [pid 7133:tid 7154] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:33.570086 2026] [proxy_fcgi:error] [pid 7133:tid 7150] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:33.778546 2026] [proxy_fcgi:error] [pid 7133:tid 7142] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:33.987436 2026] [proxy_fcgi:error] [pid 7133:tid 7148] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:34.266438 2026] [proxy_fcgi:error] [pid 7133:tid 7143] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:34.476908 2026] [proxy_fcgi:error] [pid 7133:tid 7159] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:34.685900 2026] [proxy_fcgi:error] [pid 7133:tid 7145] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:34.996010 2026] [proxy_fcgi:error] [pid 7133:tid 7141] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:35.236794 2026] [proxy_fcgi:error] [pid 7133:tid 7137] [client 4.204.200.32:11890] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 21:27:35.441546 2026] [:error] [pid 7133:tid 7136] [client 4.204.200.32:11890] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaQ-x_Ctubh8pR64qB9KEQAAAEE"]
[Sun Mar 01 21:27:35.960992 2026] [:error] [pid 44644:tid 44671] [client 4.204.200.32:11959] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaQ-x53RJaXMcw3y9V_fJQAAABg"]
[Sun Mar 01 21:27:36.574599 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:11854] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaQ-yBRjCrA8qWBjgG9HKgAAAlQ"]
[Sun Mar 01 21:27:37.136147 2026] [:error] [pid 44644:tid 44667] [client 4.204.200.32:12237] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aaQ-yZ3RJaXMcw3y9V_fJwAAABQ"]
[Sun Mar 01 21:27:37.641856 2026] [:error] [pid 44644:tid 44657] [client 4.204.200.32:11783] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "aaQ-yZ3RJaXMcw3y9V_fKQAAAAo"]
[Sun Mar 01 21:27:38.310451 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:11829] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "aaQ-ygfBuk03yQKDyqtFXgAAAcs"]
[Sun Mar 01 21:27:38.964571 2026] [:error] [pid 40750:tid 40758] [client 4.204.200.32:11877] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "aaQ-ygfBuk03yQKDyqtFYwAAAcU"]
[Sun Mar 01 21:27:39.511075 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:11885] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "aaQ-ywfBuk03yQKDyqtFaQAAAc4"]
[Sun Mar 01 21:27:40.061749 2026] [:error] [pid 40750:tid 40770] [client 4.204.200.32:11937] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aaQ-zAfBuk03yQKDyqtFbAAAAdE"]
[Sun Mar 01 21:27:40.524559 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:12246] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aaQ-zBRjCrA8qWBjgG9HOgAAAkQ"]
[Sun Mar 01 21:27:41.109172 2026] [:error] [pid 40750:tid 40765] [client 4.204.200.32:11884] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aaQ-zQfBuk03yQKDyqtFcgAAAcw"]
[Sun Mar 01 21:27:41.655408 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:11940] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aaQ-zQfBuk03yQKDyqtFegAAAcA"]
[Sun Mar 01 21:27:42.240614 2026] [:error] [pid 38241:tid 38252] [client 4.204.200.32:12239] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aaQ-zvKRPk6YnJBxw_wYlQAAAMg"]
[Sun Mar 01 21:27:42.753868 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:11874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aaQ-zhRjCrA8qWBjgG9HQAAAAk4"]
[Sun Mar 01 21:27:43.196753 2026] [:error] [pid 33822:tid 33838] [client 4.204.200.32:11782] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aaQ-z26W3ygu1YVssuYh_AAAAo4"]
[Sun Mar 01 21:27:43.648797 2026] [:error] [pid 44644:tid 44654] [client 4.204.200.32:11943] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aaQ-z53RJaXMcw3y9V_fMQAAAAc"]
[Sun Mar 01 21:27:44.130561 2026] [:error] [pid 40750:tid 40767] [client 4.204.200.32:11896] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaQ-0AfBuk03yQKDyqtFhgAAAc4"]
[Sun Mar 01 21:27:44.680456 2026] [:error] [pid 7165:tid 7171] [client 4.204.200.32:12170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaQ-0BRjCrA8qWBjgG9HRAAAAkQ"]
[Sun Mar 01 21:27:45.136309 2026] [:error] [pid 40750:tid 40755] [client 4.204.200.32:12225] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaQ-0QfBuk03yQKDyqtFiAAAAcI"]
[Sun Mar 01 21:27:45.717626 2026] [:error] [pid 33822:tid 33833] [client 4.204.200.32:11795] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aaQ-0W6W3ygu1YVssuYiCgAAAok"]
[Sun Mar 01 21:27:46.179271 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:11857] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ocxla.php"] [unique_id "aaQ-0hRjCrA8qWBjgG9HSgAAAlg"]
[Sun Mar 01 21:27:46.590743 2026] [:error] [pid 38034:tid 38048] [client 4.204.200.32:11957] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ocxla.php"] [unique_id "aaQ-0gxtfZjwlJok9K8Y1gAAAQo"]
[Sun Mar 01 21:27:47.069246 2026] [:error] [pid 38034:tid 38046] [client 4.204.200.32:11891] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ocxla.php"] [unique_id "aaQ-0wxtfZjwlJok9K8Y2QAAAQg"]
[Sun Mar 01 21:27:47.536425 2026] [:error] [pid 38241:tid 38254] [client 4.204.200.32:12114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ocxla.php"] [unique_id "aaQ-0_KRPk6YnJBxw_wYmwAAAMo"]
[Sun Mar 01 21:27:47.978361 2026] [:error] [pid 38034:tid 38052] [client 4.204.200.32:11837] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aaQ-0wxtfZjwlJok9K8Y5QAAAQ4"]
[Sun Mar 01 21:27:48.463494 2026] [:error] [pid 38034:tid 38056] [client 4.204.200.32:11810] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aaQ-1AxtfZjwlJok9K8Y6AAAARI"]
[Sun Mar 01 21:27:48.965454 2026] [:error] [pid 38241:tid 38265] [client 4.204.200.32:12264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aaQ-1PKRPk6YnJBxw_wYnQAAANU"]
[Sun Mar 01 21:27:49.545722 2026] [:error] [pid 33822:tid 33843] [client 4.204.200.32:11886] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/god.php"] [unique_id "aaQ-1W6W3ygu1YVssuYiEAAAApM"]
[Sun Mar 01 21:27:49.979100 2026] [:error] [pid 40750:tid 40769] [client 4.204.200.32:12283] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aaQ-1QfBuk03yQKDyqtFkQAAAdA"]
[Sun Mar 01 21:27:50.464171 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:12162] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aaQ-1gfBuk03yQKDyqtFlwAAAcE"]
[Sun Mar 01 21:27:50.958916 2026] [:error] [pid 40750:tid 40764] [client 4.204.200.32:11870] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aaQ-1gfBuk03yQKDyqtFmwAAAcs"]
[Sun Mar 01 21:27:51.383522 2026] [:error] [pid 40750:tid 40768] [client 4.204.200.32:12180] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aaQ-1wfBuk03yQKDyqtFnwAAAc8"]
[Sun Mar 01 21:27:51.982498 2026] [:error] [pid 7165:tid 7187] [client 4.204.200.32:11846] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aaQ-1xRjCrA8qWBjgG9HWQAAAlQ"]
[Sun Mar 01 21:27:52.506083 2026] [:error] [pid 7165:tid 7169] [client 4.204.200.32:11842] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aaQ-2BRjCrA8qWBjgG9HYwAAAkI"]
[Sun Mar 01 21:27:52.973406 2026] [:error] [pid 38034:tid 38060] [client 4.204.200.32:11851] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aaQ-2AxtfZjwlJok9K8Y7wAAARY"]
[Sun Mar 01 21:27:53.418431 2026] [:error] [pid 38034:tid 38053] [client 4.204.200.32:11809] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zz.php"] [unique_id "aaQ-2QxtfZjwlJok9K8Y8QAAAQ8"]
[Sun Mar 01 21:27:53.896773 2026] [:error] [pid 7165:tid 7186] [client 4.204.200.32:12030] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaQ-2RRjCrA8qWBjgG9HewAAAlM"]
[Sun Mar 01 21:27:54.360671 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:11865] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaQ-2gfBuk03yQKDyqtFowAAAdY"]
[Sun Mar 01 21:27:54.893572 2026] [:error] [pid 38241:tid 38268] [client 4.204.200.32:11888] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaQ-2vKRPk6YnJBxw_wYqAAAANg"]
[Sun Mar 01 21:27:55.396904 2026] [:error] [pid 7165:tid 7181] [client 4.204.200.32:12233] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aaQ-2xRjCrA8qWBjgG9HlQAAAk4"]
[Sun Mar 01 21:27:55.967841 2026] [:error] [pid 7165:tid 7180] [client 4.204.200.32:12252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sdsa.php"] [unique_id "aaQ-2xRjCrA8qWBjgG9HoQAAAk0"]
[Sun Mar 01 21:27:56.467854 2026] [:error] [pid 7165:tid 7174] [client 4.204.200.32:11844] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sdsa.php"] [unique_id "aaQ-3BRjCrA8qWBjgG9HqgAAAkc"]
[Sun Mar 01 21:27:56.974205 2026] [:error] [pid 7165:tid 7168] [client 4.204.200.32:11781] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sdsa.php"] [unique_id "aaQ-3BRjCrA8qWBjgG9HsQAAAkE"]
[Sun Mar 01 21:27:57.608772 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:12258] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sdsa.php"] [unique_id "aaQ-3RRjCrA8qWBjgG9HuQAAAlg"]
[Sun Mar 01 21:27:58.124256 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaQ-3hRjCrA8qWBjgG9HvwAAAkY"]
[Sun Mar 01 21:27:58.794236 2026] [:error] [pid 7165:tid 7191] [client 4.204.200.32:12111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaQ-3hRjCrA8qWBjgG9HyAAAAlg"]
[Sun Mar 01 21:27:59.332104 2026] [:error] [pid 7165:tid 7175] [client 4.204.200.32:11903] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaQ-3xRjCrA8qWBjgG9HzQAAAkg"]
[Sun Mar 01 21:27:59.862956 2026] [:error] [pid 7133:tid 7147] [client 4.204.200.32:12243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aaQ-3_Ctubh8pR64qB9KKAAAAEw"]
[Sun Mar 01 21:28:00.327326 2026] [:error] [pid 38241:tid 38261] [client 4.204.200.32:12262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaQ-4PKRPk6YnJBxw_wYtQAAANE"]
[Sun Mar 01 21:28:00.779527 2026] [:error] [pid 7133:tid 7137] [client 4.204.200.32:11784] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaQ-4PCtubh8pR64qB9KMAAAAEI"]
[Sun Mar 01 21:28:01.274471 2026] [:error] [pid 40750:tid 40759] [client 4.204.200.32:12166] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaQ-4QfBuk03yQKDyqtFqgAAAcY"]
[Sun Mar 01 21:28:01.949578 2026] [:error] [pid 40750:tid 40756] [client 4.204.200.32:12171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aaQ-4QfBuk03yQKDyqtFsAAAAcM"]
[Sun Mar 01 21:28:02.511782 2026] [:error] [pid 7165:tid 7173] [client 4.204.200.32:12026] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aaQ-4hRjCrA8qWBjgG9H2AAAAkY"]
[Sun Mar 01 21:28:03.029130 2026] [:error] [pid 41780:tid 41792] [client 4.204.200.32:11960] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aaQ-48ONkVoocLIqzy0s9wAAA8k"]
[Sun Mar 01 21:28:03.537407 2026] [:error] [pid 40750:tid 40775] [client 4.204.200.32:12160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aaQ-4wfBuk03yQKDyqtFtAAAAdY"]
[Sun Mar 01 21:28:04.015004 2026] [:error] [pid 7133:tid 7148] [client 4.204.200.32:12161] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/un.php"] [unique_id "aaQ-5PCtubh8pR64qB9KPgAAAE0"]
[Sun Mar 01 21:28:04.533953 2026] [:error] [pid 33822:tid 33827] [client 4.204.200.32:12178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.kb.php"] [unique_id "aaQ-5G6W3ygu1YVssuYiHgAAAoM"]
[Sun Mar 01 21:28:05.122471 2026] [:error] [pid 40750:tid 40754] [client 4.204.200.32:11945] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.kb.php"] [unique_id "aaQ-5QfBuk03yQKDyqtFtQAAAcE"]
[Sun Mar 01 21:28:05.590973 2026] [:error] [pid 40750:tid 40753] [client 4.204.200.32:11714] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.kb.php"] [unique_id "aaQ-5QfBuk03yQKDyqtFtwAAAcA"]
[Sun Mar 01 21:28:06.096963 2026] [:error] [pid 33822:tid 33840] [client 4.204.200.32:12097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.kb.php"] [unique_id "aaQ-5m6W3ygu1YVssuYiJgAAApA"]
[Sun Mar 01 21:28:06.570098 2026] [:error] [pid 38241:tid 38260] [client 4.204.200.32:11793] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aaQ-5vKRPk6YnJBxw_wYwwAAANA"]
[Sun Mar 01 21:28:07.022017 2026] [:error] [pid 44644:tid 44661] [client 4.204.200.32:11897] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aaQ-553RJaXMcw3y9V_fNwAAAA4"]
[Sun Mar 01 21:28:07.513178 2026] [:error] [pid 37032:tid 37046] [client 4.204.200.32:12164] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aaQ-5-u0U4o7eSImsVSBNwAAAYw"]
[Sun Mar 01 21:28:08.024833 2026] [:error] [pid 41780:tid 41803] [client 4.204.200.32:12286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aaQ-6MONkVoocLIqzy0s-QAAA9Q"]
[Sun Mar 01 22:01:24.664851 2026] [:error] [pid 38241:tid 38264] [client 20.63.80.2:51999] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaRGtPKRPk6YnJBxw_woLQAAANQ"]
[Sun Mar 01 22:01:25.501427 2026] [:error] [pid 38034:tid 38051] [client 20.63.80.2:51419] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaRGtQxtfZjwlJok9K8e5QAAAQ0"]
[Sun Mar 01 22:01:26.342429 2026] [:error] [pid 40750:tid 40773] [client 20.63.80.2:51410] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaRGtgfBuk03yQKDyqthHwAAAdQ"]
[Sun Mar 01 22:01:27.185402 2026] [:error] [pid 38241:tid 38266] [client 20.63.80.2:51990] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaRGt_KRPk6YnJBxw_woPgAAANY"]
[Sun Mar 01 22:47:29.086472 2026] [:error] [pid 40750:tid 40767] [client 49.51.183.15:55142] [client 49.51.183.15] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaRRgQfBuk03yQKDyquBNwAAAc4"]
[Mon Mar 02 00:14:47.707709 2026] [:error] [pid 7165:tid 7185] [client 43.130.37.243:53542] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaRl9xRjCrA8qWBjgG_kDQAAAlI"]
[Mon Mar 02 00:46:12.653600 2026] [proxy_fcgi:error] [pid 53585:tid 53608] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:12.780200 2026] [proxy_fcgi:error] [pid 53585:tid 53596] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:12.909439 2026] [proxy_fcgi:error] [pid 53585:tid 53588] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.038451 2026] [proxy_fcgi:error] [pid 53585:tid 53601] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.159151 2026] [:error] [pid 53585:tid 53599] [client 20.89.254.160:17547] [client 20.89.254.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.89.254.160, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaRtVXbCvYsvu6kKhM1nvAAAAAs"]
[Mon Mar 02 00:46:13.164928 2026] [proxy_fcgi:error] [pid 53585:tid 53599] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.306438 2026] [proxy_fcgi:error] [pid 53585:tid 53604] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.435503 2026] [proxy_fcgi:error] [pid 53585:tid 53603] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.564459 2026] [proxy_fcgi:error] [pid 53585:tid 53611] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.687803 2026] [proxy_fcgi:error] [pid 53585:tid 53608] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.811296 2026] [proxy_fcgi:error] [pid 53585:tid 53612] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:13.936271 2026] [proxy_fcgi:error] [pid 53585:tid 53602] [client 20.89.254.160:17547] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 00:46:14.057203 2026] [:error] [pid 53585:tid 53609] [client 20.89.254.160:17547] [client 20.89.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaRtVnbCvYsvu6kKhM1nygAAABU"]
[Mon Mar 02 00:46:14.537554 2026] [:error] [pid 53585:tid 53593] [client 20.89.254.160:17114] [client 20.89.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaRtVnbCvYsvu6kKhM1n0AAAAAU"]
[Mon Mar 02 00:46:15.037304 2026] [:error] [pid 53585:tid 53612] [client 20.89.254.160:15845] [client 20.89.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaRtV3bCvYsvu6kKhM1n2AAAABg"]
[Mon Mar 02 00:46:15.522655 2026] [:error] [pid 53181:tid 53519] [client 20.89.254.160:17588] [client 20.89.254.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoload_classmap.php"] [unique_id "aaRtV4r_0T1SazTrJOAd2AAAAQU"]
[Mon Mar 02 01:18:30.139877 2026] [proxy_fcgi:error] [pid 53182:tid 53559] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:30.257618 2026] [proxy_fcgi:error] [pid 53182:tid 53562] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:30.374646 2026] [proxy_fcgi:error] [pid 53182:tid 53566] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:30.605978 2026] [proxy_fcgi:error] [pid 53182:tid 53553] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:30.723171 2026] [proxy_fcgi:error] [pid 53182:tid 53555] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:30.841100 2026] [proxy_fcgi:error] [pid 53182:tid 53561] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:30.960894 2026] [proxy_fcgi:error] [pid 53182:tid 53568] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:31.504366 2026] [proxy_fcgi:error] [pid 53182:tid 53545] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:31.621636 2026] [proxy_fcgi:error] [pid 53182:tid 53548] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:31.741405 2026] [proxy_fcgi:error] [pid 53182:tid 53544] [client 52.253.113.41:2330] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 01:18:31.854525 2026] [:error] [pid 53182:tid 53550] [client 52.253.113.41:2330] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaR05_v073cA6eM1YCS_iAAAAMc"]
[Mon Mar 02 01:18:32.309622 2026] [:error] [pid 26940:tid 26965] [client 52.253.113.41:20934] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaR06BrUg-j5GLDtRFmOCgAAAFU"]
[Mon Mar 02 01:18:32.785235 2026] [:error] [pid 26940:tid 26953] [client 52.253.113.41:2476] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaR06BrUg-j5GLDtRFmOEgAAAEk"]
[Mon Mar 02 01:18:33.281255 2026] [:error] [pid 53180:tid 53447] [client 52.253.113.41:2343] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aaR06TPPJpDOBvYnaa1OSgAAAYM"]
[Mon Mar 02 05:27:00.251654 2026] [:error] [pid 31257:tid 31271] [client 170.106.107.87:59226] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaSvJP-JFLfishX45N8fYgAAAQg"]
[Mon Mar 02 06:59:32.451873 2026] [:error] [pid 28795:tid 28877] [client 43.159.138.217:45028] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaTE1LROd53wZBkdI_dMYgAAAI4"]
[Mon Mar 02 07:49:58.506840 2026] [proxy_fcgi:error] [pid 31257:tid 31269] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:58.623575 2026] [proxy_fcgi:error] [pid 31257:tid 31264] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:58.857498 2026] [proxy_fcgi:error] [pid 31257:tid 31275] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:58.974771 2026] [proxy_fcgi:error] [pid 31257:tid 31280] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:59.212513 2026] [proxy_fcgi:error] [pid 31257:tid 31265] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:59.329489 2026] [proxy_fcgi:error] [pid 31257:tid 31266] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:59.447225 2026] [proxy_fcgi:error] [pid 31257:tid 31285] [client 40.115.138.121:1526] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 07:49:59.677245 2026] [:error] [pid 31257:tid 31264] [client 40.115.138.121:1526] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaTQp_-JFLfishX45N-i9wAAAQE"]
[Mon Mar 02 07:50:00.188588 2026] [:error] [pid 31257:tid 31267] [client 40.115.138.121:1535] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaTQqP-JFLfishX45N-i-wAAAQQ"]
[Mon Mar 02 07:50:00.647627 2026] [:error] [pid 31257:tid 31284] [client 40.115.138.121:9966] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaTQqP-JFLfishX45N-i_gAAARU"]
[Mon Mar 02 07:50:01.109538 2026] [:error] [pid 28795:tid 28863] [client 40.115.138.121:1479] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaTQqbROd53wZBkdI_dq3wAAAIA"]
[Mon Mar 02 08:50:52.800402 2026] [autoindex:error] [pid 23872:tid 23884] [client 52.253.113.41:24857] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 08:50:52.925178 2026] [proxy_fcgi:error] [pid 23872:tid 23898] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.044375 2026] [proxy_fcgi:error] [pid 23872:tid 23879] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.163445 2026] [proxy_fcgi:error] [pid 23872:tid 23881] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.305728 2026] [proxy_fcgi:error] [pid 23872:tid 23891] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.423563 2026] [proxy_fcgi:error] [pid 23872:tid 23889] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.541744 2026] [proxy_fcgi:error] [pid 23872:tid 23888] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.661593 2026] [proxy_fcgi:error] [pid 23872:tid 23883] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.778637 2026] [proxy_fcgi:error] [pid 23872:tid 23897] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:53.895294 2026] [proxy_fcgi:error] [pid 23872:tid 23881] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:54.012735 2026] [proxy_fcgi:error] [pid 23872:tid 23899] [client 52.253.113.41:24857] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 08:50:54.241993 2026] [:error] [pid 23872:tid 23883] [client 52.253.113.41:24857] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaTe7kzkQFuA2qBk8UMxOAAAAYg"]
[Mon Mar 02 08:50:54.739679 2026] [:error] [pid 31257:tid 31268] [client 52.253.113.41:30285] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaTe7v-JFLfishX45N_WfAAAAQU"]
[Mon Mar 02 08:50:55.193734 2026] [:error] [pid 31257:tid 31273] [client 52.253.113.41:30329] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaTe7_-JFLfishX45N_WfwAAAQo"]
[Mon Mar 02 08:50:55.648701 2026] [:error] [pid 31257:tid 31283] [client 52.253.113.41:30276] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aaTe7_-JFLfishX45N_WggAAARQ"]
[Mon Mar 02 09:31:21.217491 2026] [:error] [pid 31257:tid 31263] [client 20.104.97.185:31391] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaToaf-JFLfishX45N_-OwAAAQA"]
[Mon Mar 02 09:31:22.060250 2026] [:error] [pid 23872:tid 23892] [client 20.104.97.185:30976] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaToakzkQFuA2qBk8UNxfQAAAZE"]
[Mon Mar 02 09:31:22.939095 2026] [:error] [pid 21575:tid 21591] [client 20.104.97.185:31011] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaToairocdArcJqFfImO8gAAAUw"]
[Mon Mar 02 09:31:23.811682 2026] [:error] [pid 23872:tid 23888] [client 20.104.97.185:31375] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "aaToa0zkQFuA2qBk8UNxiAAAAY0"]
[Mon Mar 02 10:21:12.727258 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.101:21489] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaT0GIqJmC8ih_lQQnD93AAAANI"]
[Mon Mar 02 10:21:14.014453 2026] [:error] [pid 28795:tid 28887] [client 20.220.232.101:21478] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaT0GrROd53wZBkdI_elgwAAAJg"]
[Mon Mar 02 10:21:15.300966 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.101:21491] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaT0G4qJmC8ih_lQQnD94wAAAMM"]
[Mon Mar 02 10:21:16.248883 2026] [:error] [pid 21575:tid 21584] [client 20.220.232.101:21392] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaT0HCrocdArcJqFfImqUAAAAUU"]
[Mon Mar 02 11:26:09.712365 2026] [:error] [pid 31257:tid 31263] [client 123.252.137.30:55235] [client 123.252.137.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.137.30, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaUDUf-JFLfishX45N9T1QAAAQA"]
[Mon Mar 02 11:26:09.723601 2026] [proxy_fcgi:error] [pid 31257:tid 31263] [client 123.252.137.30:55235] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:26:16.430407 2026] [:error] [pid 23872:tid 23880] [client 138.84.74.40:2103] [client 138.84.74.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.74.40, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaUDWEzkQFuA2qBk8UProwAAAYU"]
[Mon Mar 02 11:26:16.439629 2026] [proxy_fcgi:error] [pid 23872:tid 23880] [client 138.84.74.40:2103] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 11:43:12.020615 2026] [:error] [pid 23872:tid 23884] [client 182.44.12.37:37049] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaUHUEzkQFuA2qBk8UP5BwAAAYk"]
[Mon Mar 02 11:53:28.570149 2026] [:error] [pid 28908:tid 28927] [client 43.130.110.130:53492] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaUJuIqJmC8ih_lQQnA_4wAAANE"]
[Mon Mar 02 11:59:31.794043 2026] [:error] [pid 28908:tid 28933] [client 134.149.59.124:6534] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaULI4qJmC8ih_lQQnBKQQAAANc"]
[Mon Mar 02 11:59:32.303553 2026] [:error] [pid 21575:tid 21591] [client 134.149.59.124:9940] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaULJCrocdArcJqFfIkH8wAAAUw"]
[Mon Mar 02 14:17:52.281189 2026] [:error] [pid 59602:tid 59665] [client 152.59.149.208:53044] [client 152.59.149.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.149.208, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaUrkDMtSo_Fr0lHnSbJuwAAAIA"]
[Mon Mar 02 14:17:52.295100 2026] [proxy_fcgi:error] [pid 59602:tid 59665] [client 152.59.149.208:53044] AH01071: Got error 'Primary script unknown'
[Mon Mar 02 17:57:38.366085 2026] [:error] [pid 59601:tid 59662] [client 49.51.243.156:57308] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaVfEsQ1lXfvWN0-ZQls6AAAAFg"]
[Mon Mar 02 19:21:40.435301 2026] [:error] [pid 28847:tid 28867] [client 43.131.23.154:49910] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaVyxJ9xbBq8VfeqVDbxtQAAANI"]
[Mon Mar 02 22:37:34.118996 2026] [:error] [pid 59734:tid 59755] [client 20.63.100.156:33291] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWgrpeWQx7ZQG9NybFCSAAAAVM"]
[Mon Mar 02 22:37:34.551591 2026] [:error] [pid 59601:tid 59640] [client 20.63.100.156:33161] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWgrsQ1lXfvWN0-ZQmjBAAAAEI"]
[Mon Mar 02 22:37:35.006163 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:33316] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWgr4Q5lE4yocV9IBePRQAAABY"]
[Mon Mar 02 22:37:35.510164 2026] [:error] [pid 59701:tid 59721] [client 20.63.100.156:33335] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaWgr-UmTDVso96U9_LsJQAAARE"]
[Mon Mar 02 23:47:08.767231 2026] [:error] [pid 28847:tid 28861] [client 150.109.46.88:46496] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaWw_J9xbBq8VfeqVDa_sgAAAMw"]
[Tue Mar 03 01:02:44.846000 2026] [:error] [pid 18558:tid 18878] [client 208.74.105.183:59247] [client 208.74.105.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.74.105.183, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaXCtLO1kQHjTOLioCm5TQAAAJg"]
[Tue Mar 03 01:02:44.858626 2026] [proxy_fcgi:error] [pid 18558:tid 18878] [client 208.74.105.183:59247] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 01:03:41.472698 2026] [:error] [pid 18558:tid 18855] [client 168.232.229.138:53572] [client 168.232.229.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.232.229.138, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaXC7bO1kQHjTOLioCm5iwAAAIE"]
[Tue Mar 03 01:03:41.485095 2026] [proxy_fcgi:error] [pid 18558:tid 18855] [client 168.232.229.138:53572] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 01:12:58.011637 2026] [:error] [pid 60214:tid 60221] [client 43.153.73.200:50836] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaXFGomuQ_v4S3RkLiv0xAAAAQU"]
[Tue Mar 03 01:27:44.943316 2026] [:error] [pid 60214:tid 60227] [client 180.110.203.108:50438] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaXIkImuQ_v4S3RkLisBpQAAAQs"]
[Tue Mar 03 01:38:53.884371 2026] [:error] [pid 60214:tid 60228] [client 78.124.95.193:20109] [client 78.124.95.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.124.95.193, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaXLLYmuQ_v4S3RkLisKsAAAAQw"]
[Tue Mar 03 01:38:53.897532 2026] [proxy_fcgi:error] [pid 60214:tid 60228] [client 78.124.95.193:20109] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 13:52:47.414697 2026] [:error] [pid 36785:tid 36850] [client 170.106.193.108:45976] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaZ3L3hJejauENG9qTjygQAAAIA"]
[Tue Mar 03 13:54:54.987304 2026] [:error] [pid 36785:tid 36856] [client 49.234.192.248:53516] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaZ3rnhJejauENG9qTjz2wAAAIY"]
[Tue Mar 03 16:16:30.216724 2026] [:error] [pid 36785:tid 36856] [client 49.36.102.161:50504] [client 49.36.102.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.102.161, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaaY3nhJejauENG9qThOhQAAAIY"]
[Tue Mar 03 16:16:30.222025 2026] [proxy_fcgi:error] [pid 36785:tid 36856] [client 49.36.102.161:50504] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 17:10:44.395258 2026] [autoindex:error] [pid 36785:tid 36874] [client 80.85.245.145:41520] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 18:18:21.583152 2026] [:error] [pid 36784:tid 36838] [client 43.157.142.101:54134] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaa1bXNeKOSGbW9kDgSeNgAAAE8"]
[Tue Mar 03 19:45:57.949750 2026] [:error] [pid 36784:tid 36834] [client 43.135.133.241:47216] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aabJ9XNeKOSGbW9kDgS8mAAAAEs"]
[Tue Mar 03 20:36:43.996946 2026] [:error] [pid 36784:tid 36838] [client 114.96.103.33:58787] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aabV23NeKOSGbW9kDgTLfQAAAE8"]
[Tue Mar 03 21:01:47.151579 2026] [autoindex:error] [pid 36897:tid 36914] [client 5.35.69.6:57140] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Mar 03 21:47:35.056544 2026] [proxy_fcgi:error] [pid 36784:tid 36837] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:35.268111 2026] [proxy_fcgi:error] [pid 36784:tid 36842] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:35.694244 2026] [proxy_fcgi:error] [pid 36784:tid 36828] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:35.932216 2026] [proxy_fcgi:error] [pid 36784:tid 36847] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:36.403604 2026] [proxy_fcgi:error] [pid 36784:tid 36840] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:36.614790 2026] [proxy_fcgi:error] [pid 36784:tid 36838] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:36.869446 2026] [proxy_fcgi:error] [pid 36784:tid 36841] [client 20.220.211.162:25269] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 21:47:37.341908 2026] [:error] [pid 36784:tid 36823] [client 20.220.211.162:25269] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aabmeXNeKOSGbW9kDgTjOgAAAEA"]
[Tue Mar 03 21:47:38.238732 2026] [:error] [pid 14042:tid 14054] [client 20.220.211.162:31241] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aabmemeHGCmSEiIBcK59ewAAAYo"]
[Tue Mar 03 21:47:39.199305 2026] [:error] [pid 20872:tid 20892] [client 20.220.211.162:13242] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aabme4lYbNk3E_3CgBg6WwAAARI"]
[Tue Mar 03 21:47:40.043289 2026] [:error] [pid 20872:tid 20880] [client 20.220.211.162:27311] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aabmfIlYbNk3E_3CgBg6XgAAAQY"]
[Tue Mar 03 22:11:33.740283 2026] [:error] [pid 14042:tid 14051] [client 178.16.53.90:59423] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aabsFWeHGCmSEiIBcK6BMAAAAYc"]
[Wed Mar 04 00:12:15.655274 2026] [:error] [pid 36897:tid 36924] [client 170.106.73.216:43030] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aacIXyZC69_8eM0UouvkvQAAANY"]
[Wed Mar 04 03:45:12.769917 2026] [proxy_fcgi:error] [pid 14052:tid 14064] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:12.980807 2026] [proxy_fcgi:error] [pid 14052:tid 14060] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:14.706465 2026] [proxy_fcgi:error] [pid 14052:tid 14067] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:14.915770 2026] [proxy_fcgi:error] [pid 14052:tid 14078] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:15.126176 2026] [proxy_fcgi:error] [pid 14052:tid 14072] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:15.352920 2026] [proxy_fcgi:error] [pid 14052:tid 14073] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:15.783911 2026] [proxy_fcgi:error] [pid 14052:tid 14071] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:15.994731 2026] [proxy_fcgi:error] [pid 14052:tid 14058] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:16.206487 2026] [proxy_fcgi:error] [pid 14052:tid 14079] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:16.417005 2026] [proxy_fcgi:error] [pid 14052:tid 14070] [client 20.220.211.162:12967] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 03:45:16.623019 2026] [:error] [pid 14052:tid 14074] [client 20.220.211.162:12967] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aac6THvGZB0eU0P5_AtOhAAAANI"]
[Wed Mar 04 03:45:17.472191 2026] [:error] [pid 13889:tid 13965] [client 20.220.211.162:41767] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aac6TQ9JNV1nAmD7LEfViQAAAJE"]
[Wed Mar 04 03:45:18.298447 2026] [:error] [pid 14052:tid 14080] [client 20.220.211.162:57970] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aac6TnvGZB0eU0P5_AtOjQAAANg"]
[Wed Mar 04 03:45:19.125675 2026] [:error] [pid 13887:tid 13912] [client 20.220.211.162:44899] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "aac6T6nqnUNyPzvlIdBW-gAAABM"]
[Wed Mar 04 04:05:05.123548 2026] [proxy_fcgi:error] [pid 18555:tid 18620] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:05.345087 2026] [proxy_fcgi:error] [pid 18555:tid 18638] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:05.577079 2026] [proxy_fcgi:error] [pid 18555:tid 18639] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:06.045294 2026] [proxy_fcgi:error] [pid 18555:tid 18623] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:06.266591 2026] [proxy_fcgi:error] [pid 18555:tid 18642] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:06.492462 2026] [proxy_fcgi:error] [pid 18555:tid 18626] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:06.941397 2026] [proxy_fcgi:error] [pid 18555:tid 18619] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:07.361069 2026] [proxy_fcgi:error] [pid 18555:tid 18633] [client 20.151.200.236:51174] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 04:05:07.603420 2026] [:error] [pid 18555:tid 18641] [client 20.151.200.236:51174] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpfox.php"] [unique_id "aac-8zQeUDANiOsQ3GdTugAAAJY"]
[Wed Mar 04 04:05:08.519646 2026] [:error] [pid 18681:tid 18694] [client 20.151.200.236:46030] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpfox.php"] [unique_id "aac-9KE_TuZYUBveWkVv5gAAAMs"]
[Wed Mar 04 04:05:09.422954 2026] [:error] [pid 18681:tid 18699] [client 20.151.200.236:62621] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpfox.php"] [unique_id "aac-9aE_TuZYUBveWkVv7gAAANA"]
[Wed Mar 04 04:05:10.275982 2026] [:error] [pid 18554:tid 18601] [client 20.151.200.236:34428] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpfox.php"] [unique_id "aac-9p0fKmKeTIK7QS1mDQAAAEk"]
[Wed Mar 04 04:51:17.922991 2026] [:error] [pid 18553:tid 18574] [client 78.137.218.88:49411] [client 78.137.218.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.137.218.88, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aadJxWbax1neh8d0AHaB2AAAAAo"]
[Wed Mar 04 04:51:17.935549 2026] [proxy_fcgi:error] [pid 18553:tid 18574] [client 78.137.218.88:49411] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 06:45:02.364532 2026] [:error] [pid 18681:tid 18687] [client 43.131.36.84:46108] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aadkbqE_TuZYUBveWkWpHwAAAMQ"]
[Wed Mar 04 09:26:18.737312 2026] [:error] [pid 54487:tid 54495] [client 120.71.59.24:51453] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaeKOvN8030QMpFXddu3HwAAAQY"]
[Wed Mar 04 10:44:03.357558 2026] [:error] [pid 18554:tid 18611] [client 139.135.192.4:5614] [client 139.135.192.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.192.4, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaecc50fKmKeTIK7QS1baAAAAFM"]
[Wed Mar 04 10:44:03.375885 2026] [proxy_fcgi:error] [pid 18554:tid 18611] [client 139.135.192.4:5614] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:21.589378 2026] [proxy_fcgi:error] [pid 18554:tid 18593] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:21.813192 2026] [proxy_fcgi:error] [pid 18554:tid 18600] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:22.040464 2026] [proxy_fcgi:error] [pid 18554:tid 18614] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:22.266836 2026] [proxy_fcgi:error] [pid 18554:tid 18598] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:22.490429 2026] [proxy_fcgi:error] [pid 18554:tid 18593] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:22.713091 2026] [proxy_fcgi:error] [pid 18554:tid 18597] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:22.937409 2026] [proxy_fcgi:error] [pid 18554:tid 18604] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:23.164205 2026] [proxy_fcgi:error] [pid 18554:tid 18598] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:23.387221 2026] [proxy_fcgi:error] [pid 18554:tid 18603] [client 137.116.32.109:24525] AH01071: Got error 'Primary script unknown'
[Wed Mar 04 12:15:23.832146 2026] [:error] [pid 18554:tid 18606] [client 137.116.32.109:24525] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aaex250fKmKeTIK7QS2cigAAAE4"]
[Wed Mar 04 12:15:24.250011 2026] [:error] [pid 54487:tid 54511] [client 137.116.32.109:24522] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aaex3PN8030QMpFXddtI-gAAARY"]
[Wed Mar 04 12:15:24.671715 2026] [:error] [pid 54487:tid 54492] [client 137.116.32.109:24448] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aaex3PN8030QMpFXddtI_wAAAQM"]
[Wed Mar 04 12:15:25.109828 2026] [:error] [pid 54487:tid 54502] [client 137.116.32.109:24532] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aaex3fN8030QMpFXddtJAQAAAQ0"]
[Wed Mar 04 12:15:25.528104 2026] [:error] [pid 45947:tid 46032] [client 137.116.32.109:24531] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "aaex3UQXEtszYKy6sav2AAAAAUQ"]
[Wed Mar 04 12:15:25.931640 2026] [:error] [pid 18554:tid 18615] [client 137.116.32.109:24549] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "aaex3Z0fKmKeTIK7QS2cjQAAAFc"]
[Wed Mar 04 12:15:26.350436 2026] [:error] [pid 18554:tid 18592] [client 137.116.32.109:24467] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "aaex3p0fKmKeTIK7QS2cjgAAAEA"]
[Wed Mar 04 12:15:26.792110 2026] [:error] [pid 45947:tid 46049] [client 137.116.32.109:24517] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "aaex3kQXEtszYKy6sav2BwAAAVE"]
[Wed Mar 04 12:15:27.229590 2026] [:error] [pid 45947:tid 46044] [client 137.116.32.109:24544] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cah.php"] [unique_id "aaex30QXEtszYKy6sav2CQAAAUw"]
[Wed Mar 04 12:15:27.671640 2026] [:error] [pid 45947:tid 46053] [client 137.116.32.109:24524] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cah.php"] [unique_id "aaex30QXEtszYKy6sav2CwAAAVU"]
[Wed Mar 04 12:15:28.109296 2026] [:error] [pid 18555:tid 18640] [client 137.116.32.109:24572] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cah.php"] [unique_id "aaex4DQeUDANiOsQ3GfHMAAAAJU"]
[Wed Mar 04 12:15:28.556102 2026] [:error] [pid 45947:tid 46050] [client 137.116.32.109:24464] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cah.php"] [unique_id "aaex4EQXEtszYKy6sav2DwAAAVI"]
[Wed Mar 04 12:15:28.974765 2026] [:error] [pid 18555:tid 18639] [client 137.116.32.109:24546] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aaex4DQeUDANiOsQ3GfHMQAAAJQ"]
[Wed Mar 04 12:15:29.374642 2026] [:error] [pid 18555:tid 18628] [client 137.116.32.109:24559] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aaex4TQeUDANiOsQ3GfHMgAAAIk"]
[Wed Mar 04 12:15:29.773376 2026] [:error] [pid 18554:tid 18594] [client 137.116.32.109:24519] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aaex4Z0fKmKeTIK7QS2clAAAAEI"]
[Wed Mar 04 12:15:30.191752 2026] [:error] [pid 18554:tid 18595] [client 137.116.32.109:24455] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ee.php"] [unique_id "aaex4p0fKmKeTIK7QS2clgAAAEM"]
[Wed Mar 04 12:15:30.613848 2026] [:error] [pid 18554:tid 18592] [client 137.116.32.109:24451] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaex4p0fKmKeTIK7QS2cmQAAAEA"]
[Wed Mar 04 12:15:31.013050 2026] [:error] [pid 18554:tid 18600] [client 137.116.32.109:24537] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaex450fKmKeTIK7QS2cmgAAAEg"]
[Wed Mar 04 12:15:31.413213 2026] [:error] [pid 18554:tid 18601] [client 137.116.32.109:24556] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaex450fKmKeTIK7QS2cnAAAAEk"]
[Wed Mar 04 12:15:31.812224 2026] [:error] [pid 18554:tid 18599] [client 137.116.32.109:24537] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/admin.php"] [unique_id "aaex450fKmKeTIK7QS2cpgAAAEc"]
[Wed Mar 04 12:15:32.211046 2026] [:error] [pid 45947:tid 46048] [client 137.116.32.109:24569] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-file.php"] [unique_id "aaex5EQXEtszYKy6sav2FQAAAVA"]
[Wed Mar 04 13:01:32.787598 2026] [:error] [pid 18554:tid 18616] [client 43.228.157.73:51146] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aae8rJ0fKmKeTIK7QS3K4gAAAFg"]
[Wed Mar 04 13:01:33.340194 2026] [:error] [pid 18555:tid 18640] [client 43.228.157.73:51264] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aae8rTQeUDANiOsQ3GfQCwAAAJU"]
[Wed Mar 04 13:01:33.908625 2026] [:error] [pid 18681:tid 18693] [client 43.228.157.73:51428] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aae8raE_TuZYUBveWkUoYwAAAMo"]
[Wed Mar 04 13:01:34.565028 2026] [:error] [pid 18555:tid 18624] [client 43.228.157.73:51634] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aae8rjQeUDANiOsQ3GfQRQAAAIU"]
[Wed Mar 04 13:01:35.173152 2026] [:error] [pid 54487:tid 54500] [client 43.228.157.73:51835] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aae8r_N8030QMpFXddtdxgAAAQs"]
[Wed Mar 04 13:15:15.950948 2026] [:error] [pid 18553:tid 18571] [client 43.166.134.47:46484] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aae_42bax1neh8d0AHbRQgAAAAc"]
[Wed Mar 04 14:48:32.253921 2026] [:error] [pid 51357:tid 51420] [client 43.153.122.30:57166] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aafVwGimsh8xS8jkf2hB0AAAABM"]
[Wed Mar 04 19:57:22.825778 2026] [:error] [pid 64829:tid 64851] [client 129.224.206.230:21428] [client 129.224.206.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.224.206.230, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aageIp9ZED3FG9h7uijD5wAAABQ"]
[Wed Mar 04 19:57:22.838028 2026] [proxy_fcgi:error] [pid 64829:tid 64851] [client 129.224.206.230:21428] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 01:10:58.389435 2026] [:error] [pid 26966:tid 27014] [client 43.153.135.208:44728] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aahnohaIQuoePO_dwgc17QAAAEE"]
[Thu Mar 05 02:06:18.411807 2026] [:error] [pid 27472:tid 27556] [client 200.141.33.155:5669] [client 200.141.33.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.141.33.155, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aah0mrt7N-W1OaN6b8riGwAAAZc"]
[Thu Mar 05 02:06:18.424357 2026] [proxy_fcgi:error] [pid 27472:tid 27556] [client 200.141.33.155:5669] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 05:14:51.909509 2026] [:error] [pid 62435:tid 62469] [client 182.44.8.254:42393] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaigyyMZJMDfZh_-8sWfAwAAANM"]
[Thu Mar 05 08:01:52.088465 2026] [:error] [pid 41459:tid 41491] [client 196.217.20.130:64447] [client 196.217.20.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.217.20.130, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aajH8OdFBZEnZ3pzxrViTwAAAVE"]
[Thu Mar 05 08:01:52.102812 2026] [proxy_fcgi:error] [pid 41459:tid 41491] [client 196.217.20.130:64447] AH01071: Got error 'Primary script unknown'
[Thu Mar 05 09:42:13.310797 2026] [:error] [pid 41459:tid 41479] [client 43.135.144.126:47278] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aajfdedFBZEnZ3pzxrWtiQAAAUU"]
[Thu Mar 05 11:36:23.617441 2026] [:error] [pid 53350:tid 53381] [client 106.227.49.113:42968] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaj6N6O0Baxc5WFYeP0RGQAAAQY"]
[Thu Mar 05 14:14:27.357534 2026] [:error] [pid 41459:tid 41493] [client 43.135.145.77:37344] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aakfQ-dFBZEnZ3pzxrVsowAAAVM"]
[Thu Mar 05 18:16:59.561869 2026] [:error] [pid 41459:tid 41484] [client 120.71.59.24:47991] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aalYG-dFBZEnZ3pzxrXxIgAAAUo"]
[Thu Mar 05 19:09:46.474622 2026] [:error] [pid 41459:tid 41478] [client 103.77.106.118:54396] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aalkeudFBZEnZ3pzxrUUXgAAAUQ"]
[Thu Mar 05 19:09:46.692635 2026] [:error] [pid 53350:tid 53400] [client 103.77.106.118:54412] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aalkeqO0Baxc5WFYeP0DqAAAARc"]
[Thu Mar 05 20:00:44.393861 2026] [:error] [pid 62176:tid 62301] [client 43.166.1.243:52366] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aalwbCNfTPJryi30JPn5bQAAAFE"]
[Thu Mar 05 21:18:51.651356 2026] [:error] [pid 53350:tid 53385] [client 43.153.122.30:57050] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aamCu6O0Baxc5WFYeP1lYgAAAQk"]
[Thu Mar 05 22:40:24.781470 2026] [:error] [pid 41459:tid 41488] [client 157.15.40.88:50085] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "aamV2OdFBZEnZ3pzxrWDlAAAAU4"]
[Thu Mar 05 22:40:25.047247 2026] [:error] [pid 8151:tid 8221] [client 157.15.40.88:50109] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCn-gAAAYI"]
[Thu Mar 05 22:40:25.302551 2026] [:error] [pid 62435:tid 62474] [client 157.15.40.88:50146] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/txets.php"] [unique_id "aamV2SMZJMDfZh_-8sWS0gAAANg"]
[Thu Mar 05 22:40:25.558743 2026] [:error] [pid 8151:tid 8230] [client 157.15.40.88:50189] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoHAAAAYs"]
[Thu Mar 05 22:40:25.825339 2026] [:error] [pid 8151:tid 8242] [client 157.15.40.88:50250] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/schallfuns.php"] [unique_id "aamV2ZO3dLEidct1HvCoOQAAAZY"]
[Thu Mar 05 22:40:26.080337 2026] [:error] [pid 8151:tid 8230] [client 157.15.40.88:50317] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCoUAAAAYs"]
[Thu Mar 05 22:40:26.344301 2026] [:error] [pid 62177:tid 62332] [client 157.15.40.88:50388] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/postnews.php"] [unique_id "aamV2hWSQc2OzPrsnwX6LgAAAJQ"]
[Thu Mar 05 22:40:26.598981 2026] [:error] [pid 8151:tid 8239] [client 157.15.40.88:50462] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCoawAAAZM"]
[Thu Mar 05 22:40:26.867170 2026] [:error] [pid 8151:tid 8221] [client 157.15.40.88:50532] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/postnews.php"] [unique_id "aamV2pO3dLEidct1HvComwAAAYI"]
[Thu Mar 05 23:30:58.549414 2026] [:error] [pid 8151:tid 8234] [client 197.250.51.109:25547] [client 197.250.51.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.250.51.109, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aamhspO3dLEidct1HvDOnQAAAY4"]
[Thu Mar 05 23:30:58.581352 2026] [proxy_fcgi:error] [pid 8151:tid 8234] [client 197.250.51.109:25547] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 00:44:23.384157 2026] [:error] [pid 47657:tid 47902] [client 103.77.107.222:50685] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aamy5y76-uV01o_084mEvAAAAAI"]
[Fri Mar 06 00:44:23.637114 2026] [:error] [pid 27687:tid 27712] [client 103.77.107.222:50824] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "aamy50I2IG23EwU7sL8A7AAAAIs"]
[Fri Mar 06 08:44:50.227013 2026] [:error] [pid 8945:tid 8983] [client 43.157.156.190:46458] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aaojggttiLGNg13nMzI22wAAANA"]
[Fri Mar 06 09:25:03.154508 2026] [proxy_fcgi:error] [pid 8656:tid 8833] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:03.273521 2026] [proxy_fcgi:error] [pid 8656:tid 8819] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:03.512966 2026] [proxy_fcgi:error] [pid 8656:tid 8813] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:03.631626 2026] [proxy_fcgi:error] [pid 8656:tid 8814] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:03.867827 2026] [proxy_fcgi:error] [pid 8656:tid 8810] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:03.987101 2026] [proxy_fcgi:error] [pid 8656:tid 8822] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:04.105925 2026] [proxy_fcgi:error] [pid 8656:tid 8830] [client 20.89.57.111:8003] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 09:25:04.340870 2026] [:error] [pid 8656:tid 8811] [client 20.89.57.111:8003] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaos8JPxTG9Ff1TtP6NvcgAAAIE"]
[Fri Mar 06 09:25:04.813841 2026] [:error] [pid 8656:tid 8834] [client 20.89.57.111:7874] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaos8JPxTG9Ff1TtP6NvdgAAAJg"]
[Fri Mar 06 09:25:05.277266 2026] [:error] [pid 8648:tid 8750] [client 20.89.57.111:36267] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaos8UhAk6X-gF6akMRdNQAAAAM"]
[Fri Mar 06 09:25:05.738125 2026] [:error] [pid 44628:tid 44648] [client 20.89.57.111:7626] [client 20.89.57.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "aaos8YZtiq7T54_AYvKaigAAAUM"]
[Fri Mar 06 14:49:51.905137 2026] [:error] [pid 16140:tid 16150] [client 37.19.107.28:26807] [client 37.19.107.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.107.28, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aap5D5ZVpEeGhAeSpv1ASwAAAQg"]
[Fri Mar 06 14:49:51.916314 2026] [proxy_fcgi:error] [pid 16140:tid 16150] [client 37.19.107.28:26807] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 14:50:11.149091 2026] [:error] [pid 59037:tid 59057] [client 190.86.73.222:23461] [client 190.86.73.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.86.73.222, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aap5I_LSf47J21UqfPY02AAAAkY"]
[Fri Mar 06 14:50:11.154671 2026] [proxy_fcgi:error] [pid 59037:tid 59057] [client 190.86.73.222:23461] AH01071: Got error 'Primary script unknown'
[Fri Mar 06 17:03:17.358407 2026] [:error] [pid 59239:tid 59282] [client 49.51.233.46:47876] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaqYVbG1EpnE909fvGdp8gAAA80"]
[Fri Mar 06 23:10:55.593731 2026] [:error] [pid 8648:tid 8765] [client 62.60.131.218:51174] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aaruf0hAk6X-gF6akMSI3QAAABI"]
[Sat Mar 07 03:14:28.630794 2026] [proxy_fcgi:error] [pid 6919:tid 7049] [client 160.187.210.184:61111] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 03:14:32.255346 2026] [proxy_fcgi:error] [pid 7406:tid 7470] [client 160.187.210.184:53995] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 03:22:34.268358 2026] [:error] [pid 23672:tid 23756] [client 148.222.231.107:58625] [client 148.222.231.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.222.231.107, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaspenPvdBVUU3Simx4aaAAAAAI"]
[Sat Mar 07 03:22:34.280002 2026] [proxy_fcgi:error] [pid 23672:tid 23756] [client 148.222.231.107:58625] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 03:54:21.441991 2026] [:error] [pid 4311:tid 4441] [client 103.82.37.106:51953] [client 103.82.37.106] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.82.37.106, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aasw7XbyS653WMGf2vXWBAAAAFY"], referer: https://measureyourbrand.com/wp-admin/
[Sat Mar 07 03:54:21.458649 2026] [proxy_fcgi:error] [pid 4311:tid 4441] [client 103.82.37.106:51953] AH01071: Got error 'Primary script unknown', referer: https://measureyourbrand.com/wp-admin/
[Sat Mar 07 04:53:28.043407 2026] [:error] [pid 4609:tid 4631] [client 78.109.78.74:63833] [client 78.109.78.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.78.74, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aas-yOP7JMxUbw4Fd1YSqgAAAMM"]
[Sat Mar 07 04:53:28.053051 2026] [proxy_fcgi:error] [pid 4609:tid 4631] [client 78.109.78.74:63833] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 08:28:17.655793 2026] [:error] [pid 4307:tid 4383] [client 62.60.131.218:60472] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aatxITeKp4wgnLc38f9euQAAAAE"]
[Sat Mar 07 08:59:08.598013 2026] [:error] [pid 52484:tid 52515] [client 43.166.255.122:51532] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aat4XPE9AnX6zUICFeRyEwAAAQw"]
[Sat Mar 07 09:26:01.872489 2026] [:error] [pid 52484:tid 52507] [client 123.187.240.242:42298] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aat-qfE9AnX6zUICFeSIQgAAAQQ"]
[Sat Mar 07 12:11:32.644237 2026] [proxy_fcgi:error] [pid 4307:tid 4402] [client 20.214.142.73:19766] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 12:11:32.783055 2026] [proxy_fcgi:error] [pid 4307:tid 4395] [client 20.214.142.73:19766] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 12:11:32.921627 2026] [proxy_fcgi:error] [pid 4307:tid 4399] [client 20.214.142.73:19766] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 12:11:33.059363 2026] [proxy_fcgi:error] [pid 4307:tid 4383] [client 20.214.142.73:19766] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 12:11:33.198049 2026] [proxy_fcgi:error] [pid 4307:tid 4389] [client 20.214.142.73:19766] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 12:11:33.336446 2026] [proxy_fcgi:error] [pid 4307:tid 4384] [client 20.214.142.73:19766] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 12:11:33.470875 2026] [:error] [pid 4307:tid 4397] [client 20.214.142.73:19766] [client 20.214.142.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "aauldTeKp4wgnLc38f97gAAAAA8"]
[Sat Mar 07 12:11:34.021815 2026] [:error] [pid 4315:tid 4450] [client 20.214.142.73:3670] [client 20.214.142.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "aauldtDEK9AXzxu9OSihfwAAAIM"]
[Sat Mar 07 12:11:34.563314 2026] [:error] [pid 4609:tid 4634] [client 20.214.142.73:19757] [client 20.214.142.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "aaulduP7JMxUbw4Fd1bkCAAAAMY"]
[Sat Mar 07 12:11:35.106304 2026] [:error] [pid 4609:tid 4631] [client 20.214.142.73:8603] [client 20.214.142.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "aauld-P7JMxUbw4Fd1bkDQAAAMM"]
[Sat Mar 07 14:37:31.881130 2026] [:error] [pid 4609:tid 4636] [client 34.24.47.138:49729] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "aavHq-P7JMxUbw4Fd1YSyQAAAMg"]
[Sat Mar 07 15:15:24.936732 2026] [:error] [pid 37998:tid 38065] [client 162.62.213.187:43642] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aavQjMl3xHpv0STGaSbUggAAAVU"]
[Sat Mar 07 17:01:20.094344 2026] [:error] [pid 37998:tid 38052] [client 193.32.126.227:62119] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aavpYMl3xHpv0STGaSYMUQAAAUg"]
[Sat Mar 07 17:01:20.103010 2026] [proxy_fcgi:error] [pid 37998:tid 38052] [client 193.32.126.227:62119] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 17:02:01.505411 2026] [:error] [pid 52484:tid 52521] [client 43.156.228.27:33984] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aavpifE9AnX6zUICFeR8MgAAARE"]
[Sat Mar 07 19:27:34.287770 2026] [:error] [pid 14885:tid 14913] [client 180.191.183.193:53935] [client 180.191.183.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.183.193, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aawLplj4t7-EBJadtcWtmwAAA44"]
[Sat Mar 07 19:27:34.303731 2026] [proxy_fcgi:error] [pid 14885:tid 14913] [client 180.191.183.193:53935] AH01071: Got error 'Primary script unknown'
[Sat Mar 07 21:36:32.719891 2026] [:error] [pid 4315:tid 4447] [client 119.28.89.249:57928] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aawp4NDEK9AXzxu9OSgPjAAAAIA"]
[Sat Mar 07 22:27:55.016052 2026] [:error] [pid 54127:tid 54160] [client 153.252.96.132:64922] [client 153.252.96.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.252.96.132, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aaw160uQzHmVv_Y3VjdvPgAAAtI"]
[Sat Mar 07 22:27:55.027439 2026] [proxy_fcgi:error] [pid 54127:tid 54160] [client 153.252.96.132:64922] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 05:51:58.394362 2026] [:error] [pid 22786:tid 22803] [client 106.54.62.156:39784] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aayd_nPuJewMN2jPbdUZUgAAAwI"]
[Sun Mar 08 08:38:18.238106 2026] [proxy_fcgi:error] [pid 22787:tid 22837] [client 161.178.140.192:54438] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 08:38:19.267887 2026] [proxy_fcgi:error] [pid 22786:tid 22825] [client 161.178.140.192:54817] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 08:38:21.324249 2026] [:error] [pid 22786:tid 22823] [client 161.178.140.192:55577] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aazE_XPuJewMN2jPbdUxXQAAAxY"]
[Sun Mar 08 08:38:22.350893 2026] [:error] [pid 22788:tid 22863] [client 161.178.140.192:55915] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/db.sql"] [unique_id "aazE_khwluk21OG9mScEzAAAA4g"]
[Sun Mar 08 08:38:23.392732 2026] [:error] [pid 22787:tid 22834] [client 161.178.140.192:56305] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/dump.sql"] [unique_id "aazE_0F9MGMhk9pT4z4ZPgAAA0Y"]
[Sun Mar 08 08:38:24.418135 2026] [:error] [pid 22788:tid 22879] [client 161.178.140.192:56663] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/database.sql"] [unique_id "aazFAEhwluk21OG9mScE0AAAA5g"]
[Sun Mar 08 08:38:25.443636 2026] [:error] [pid 22786:tid 22824] [client 161.178.140.192:57033] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/backup.sql"] [unique_id "aazFAXPuJewMN2jPbdUxYgAAAxc"]
[Sun Mar 08 08:38:26.472316 2026] [:error] [pid 22787:tid 22839] [client 161.178.140.192:57437] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/config/db.sql"] [unique_id "aazFAkF9MGMhk9pT4z4ZSwAAA0s"]
[Sun Mar 08 08:38:27.498661 2026] [:error] [pid 22790:tid 22885] [client 161.178.140.192:57828] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/sql/db.sql"] [unique_id "aazFAxXbGDWrzD_dTOduxAAAA8M"]
[Sun Mar 08 08:38:28.525239 2026] [:error] [pid 22786:tid 22813] [client 161.178.140.192:58241] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/data/dump.sql"] [unique_id "aazFBHPuJewMN2jPbdUxZQAAAww"]
[Sun Mar 08 08:38:29.552598 2026] [:error] [pid 43671:tid 43736] [client 161.178.140.192:58631] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/backups/database.sql"] [unique_id "aazFBa6AdwroU1gT3XGA0AAAAE0"]
[Sun Mar 08 08:38:30.577583 2026] [:error] [pid 22790:tid 22903] [client 161.178.140.192:58981] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/mysql.sql"] [unique_id "aazFBhXbGDWrzD_dTOduzgAAA9U"]
[Sun Mar 08 08:38:31.613452 2026] [:error] [pid 22790:tid 22903] [client 161.178.140.192:59433] [client 161.178.140.192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourbrand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourbrand.com"] [uri "/db_backup.sql"] [unique_id "aazFBxXbGDWrzD_dTOdu1wAAA9U"]
[Sun Mar 08 11:33:49.893182 2026] [:error] [pid 22669:tid 22777] [client 125.21.29.10:60658] [client 125.21.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.21.29.10, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aazuHWvqAhy8LIaua-pV9QAAAtI"]
[Sun Mar 08 11:33:49.906020 2026] [proxy_fcgi:error] [pid 22669:tid 22777] [client 125.21.29.10:60658] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 11:33:57.141701 2026] [:error] [pid 22787:tid 22850] [client 154.119.224.90:55163] [client 154.119.224.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.119.224.90, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aazuJUF9MGMhk9pT4z57EQAAA1Y"]
[Sun Mar 08 11:33:57.147137 2026] [proxy_fcgi:error] [pid 22787:tid 22850] [client 154.119.224.90:55163] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 12:54:23.979656 2026] [:error] [pid 22790:tid 22894] [client 170.106.113.235:33378] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa0A_xXbGDWrzD_dTOc96QAAA8w"]
[Sun Mar 08 18:30:20.902865 2026] [:error] [pid 22669:tid 22781] [client 5.77.193.105:8919] [client 5.77.193.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.77.193.105, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa1PvGvqAhy8LIaua-p9TAAAAtY"]
[Sun Mar 08 18:30:20.913846 2026] [proxy_fcgi:error] [pid 22669:tid 22781] [client 5.77.193.105:8919] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 18:36:06.907130 2026] [:error] [pid 22790:tid 22883] [client 152.57.89.12:53646] [client 152.57.89.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.89.12, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa1RFhXbGDWrzD_dTOfmCQAAA8E"]
[Sun Mar 08 18:36:06.918605 2026] [proxy_fcgi:error] [pid 22790:tid 22883] [client 152.57.89.12:53646] AH01071: Got error 'Primary script unknown'
[Sun Mar 08 19:21:05.657746 2026] [:error] [pid 22667:tid 22729] [client 223.244.35.77:60365] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa1boeG7qk1roo-TRWOoZwAAAlg"]
[Sun Mar 08 20:57:47.771626 2026] [:error] [pid 22669:tid 22769] [client 43.166.238.12:47490] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa1yS2vqAhy8LIaua-qQSAAAAso"]
[Mon Mar 09 00:43:17.608572 2026] [:error] [pid 16352:tid 16377] [client 85.57.98.203:61058] [client 85.57.98.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.57.98.203, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa2nJeS719tlqxBPD_C6EAAAANY"]
[Mon Mar 09 00:43:17.620470 2026] [proxy_fcgi:error] [pid 16352:tid 16377] [client 85.57.98.203:61058] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:24:53.972638 2026] [:error] [pid 16352:tid 16359] [client 182.10.130.226:53613] [client 182.10.130.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.130.226, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa2w5eS719tlqxBPD_DUsAAAAMQ"]
[Mon Mar 09 01:24:53.977918 2026] [proxy_fcgi:error] [pid 16352:tid 16359] [client 182.10.130.226:53613] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 01:28:27.479188 2026] [:error] [pid 49677:tid 49748] [client 170.106.181.163:57444] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa2xu9gMztaTv5fI2XrqwQAAAJQ"]
[Mon Mar 09 02:19:25.674986 2026] [:error] [pid 49419:tid 49657] [client 49.234.192.248:50962] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa29rfSUwH6DJwBBi5B6WwAAABA"]
[Mon Mar 09 02:52:26.680070 2026] [proxy_fcgi:error] [pid 49404:tid 49631] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:26.902799 2026] [proxy_fcgi:error] [pid 49404:tid 49630] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:27.114114 2026] [proxy_fcgi:error] [pid 49404:tid 49619] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:27.422711 2026] [proxy_fcgi:error] [pid 49404:tid 49637] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:27.648844 2026] [proxy_fcgi:error] [pid 49404:tid 49635] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:27.874831 2026] [proxy_fcgi:error] [pid 49404:tid 49625] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:28.102784 2026] [proxy_fcgi:error] [pid 49404:tid 49614] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:28.327357 2026] [proxy_fcgi:error] [pid 49404:tid 49638] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:28.537857 2026] [proxy_fcgi:error] [pid 49404:tid 49621] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:28.977899 2026] [proxy_fcgi:error] [pid 49404:tid 49627] [client 20.12.79.171:40282] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 02:52:29.442437 2026] [:error] [pid 49404:tid 49632] [client 20.12.79.171:40282] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-session.php"] [unique_id "aa3FbXc8Cw-aeCN3s76W2AAAA1I"]
[Mon Mar 09 02:52:30.561069 2026] [:error] [pid 49419:tid 49659] [client 20.12.79.171:39953] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-session.php"] [unique_id "aa3FbvSUwH6DJwBBi5CAuAAAABI"]
[Mon Mar 09 02:52:31.485145 2026] [:error] [pid 16352:tid 16368] [client 20.12.79.171:40297] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-session.php"] [unique_id "aa3Fb-S719tlqxBPD_ARAQAAAM0"]
[Mon Mar 09 02:52:33.651965 2026] [:error] [pid 16352:tid 16367] [client 20.12.79.171:40285] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-session.php"] [unique_id "aa3FceS719tlqxBPD_ARBgAAAMw"]
[Mon Mar 09 02:52:34.315167 2026] [:error] [pid 49419:tid 49652] [client 20.12.79.171:39939] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2023.php"] [unique_id "aa3FcvSUwH6DJwBBi5CAugAAAAs"]
[Mon Mar 09 02:52:35.325218 2026] [:error] [pid 16352:tid 16357] [client 20.12.79.171:40300] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2023.php"] [unique_id "aa3Fc-S719tlqxBPD_ARCgAAAMI"]
[Mon Mar 09 02:52:36.473288 2026] [:error] [pid 49677:tid 49729] [client 20.12.79.171:39947] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2023.php"] [unique_id "aa3FdNgMztaTv5fI2XoOagAAAIE"]
[Mon Mar 09 02:52:37.097704 2026] [:error] [pid 49677:tid 49733] [client 20.12.79.171:39948] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2023.php"] [unique_id "aa3FddgMztaTv5fI2XoObAAAAIU"]
[Mon Mar 09 02:52:37.985490 2026] [:error] [pid 16352:tid 16355] [client 20.12.79.171:39942] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aa3FdeS719tlqxBPD_AREQAAAMA"]
[Mon Mar 09 02:52:39.040030 2026] [:error] [pid 16352:tid 16377] [client 20.12.79.171:39938] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aa3Fd-S719tlqxBPD_ARFQAAANY"]
[Mon Mar 09 02:52:40.523288 2026] [:error] [pid 16352:tid 16364] [client 20.12.79.171:40318] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aa3FeOS719tlqxBPD_ARGwAAAMk"]
[Mon Mar 09 02:52:43.094709 2026] [:error] [pid 16352:tid 16377] [client 20.12.79.171:40316] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "aa3Fe-S719tlqxBPD_ARIwAAANY"]
[Mon Mar 09 02:52:43.829723 2026] [:error] [pid 49404:tid 49622] [client 20.12.79.171:40261] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aa3Fe3c8Cw-aeCN3s76W2QAAA0g"]
[Mon Mar 09 02:52:46.844714 2026] [:error] [pid 49677:tid 49731] [client 20.12.79.171:39952] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aa3FftgMztaTv5fI2XoOggAAAIM"]
[Mon Mar 09 02:52:47.693156 2026] [:error] [pid 49392:tid 49607] [client 20.12.79.171:39951] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aa3Ff7hnfLjo2gwJdbFWCAAAAFU"]
[Mon Mar 09 02:52:48.583029 2026] [:error] [pid 49392:tid 49602] [client 20.12.79.171:40268] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aa3FgLhnfLjo2gwJdbFWCQAAAFA"]
[Mon Mar 09 02:52:49.423857 2026] [:error] [pid 49677:tid 49747] [client 20.12.79.171:40319] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa3FgdgMztaTv5fI2XoOgwAAAJM"]
[Mon Mar 09 02:52:50.866493 2026] [:error] [pid 49392:tid 49596] [client 20.12.79.171:39974] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa3FgrhnfLjo2gwJdbFWDAAAAEo"]
[Mon Mar 09 02:52:52.245517 2026] [:error] [pid 49677:tid 49734] [client 20.12.79.171:40291] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa3FhNgMztaTv5fI2XoOhgAAAIY"]
[Mon Mar 09 02:52:53.245224 2026] [:error] [pid 16352:tid 16378] [client 20.12.79.171:39983] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbK8Qd6nhc.php"] [unique_id "aa3FheS719tlqxBPD_ARQAAAANc"]
[Mon Mar 09 02:52:53.936962 2026] [:error] [pid 49677:tid 49750] [client 20.12.79.171:40288] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BIBIL.php"] [unique_id "aa3FhdgMztaTv5fI2XoOigAAAJY"]
[Mon Mar 09 02:52:56.805946 2026] [:error] [pid 49392:tid 49608] [client 20.12.79.171:40315] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BIBIL.php"] [unique_id "aa3FiLhnfLjo2gwJdbFWFgAAAFY"]
[Mon Mar 09 02:52:57.783566 2026] [:error] [pid 16352:tid 16378] [client 20.12.79.171:39955] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BIBIL.php"] [unique_id "aa3FieS719tlqxBPD_ARSQAAANc"]
[Mon Mar 09 02:52:58.594158 2026] [:error] [pid 49677:tid 49747] [client 20.12.79.171:40207] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BIBIL.php"] [unique_id "aa3FitgMztaTv5fI2XoOkwAAAJM"]
[Mon Mar 09 02:53:02.085692 2026] [:error] [pid 16352:tid 16374] [client 20.12.79.171:40298] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uchkkzmk.php"] [unique_id "aa3FjuS719tlqxBPD_ARWAAAANM"]
[Mon Mar 09 02:53:04.688093 2026] [:error] [pid 49392:tid 49596] [client 20.12.79.171:39944] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uchkkzmk.php"] [unique_id "aa3FkLhnfLjo2gwJdbFWIQAAAEo"]
[Mon Mar 09 02:53:05.908571 2026] [:error] [pid 16352:tid 16369] [client 20.12.79.171:39950] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uchkkzmk.php"] [unique_id "aa3FkeS719tlqxBPD_ARYgAAAM4"]
[Mon Mar 09 02:53:07.235582 2026] [:error] [pid 16352:tid 16359] [client 20.12.79.171:40210] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uchkkzmk.php"] [unique_id "aa3Fk-S719tlqxBPD_ARZQAAAMQ"]
[Mon Mar 09 02:53:08.214484 2026] [:error] [pid 16352:tid 16379] [client 20.12.79.171:39941] [client 20.12.79.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aa3FlOS719tlqxBPD_ARagAAANg"]
[Mon Mar 09 07:58:16.219153 2026] [:error] [pid 17485:tid 17490] [client 194.180.48.253:43954] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aa4NGNQOL_kxQEc1PTDeXAAAAQI"]
[Mon Mar 09 08:34:48.235352 2026] [:error] [pid 17485:tid 17499] [client 43.156.232.190:47224] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa4VqNQOL_kxQEc1PTAEfAAAAQs"]
[Mon Mar 09 09:58:36.562555 2026] [:error] [pid 17485:tid 17499] [client 217.63.112.92:30412] [client 217.63.112.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.63.112.92, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aa4pTNQOL_kxQEc1PTA-8AAAAQs"]
[Mon Mar 09 09:58:36.569024 2026] [proxy_fcgi:error] [pid 17485:tid 17499] [client 217.63.112.92:30412] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 10:21:25.975161 2026] [:error] [pid 2145:tid 2172] [client 43.157.147.3:51164] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa4upXczzpD9XHtKwuBlWwAAAUY"]
[Mon Mar 09 12:38:55.337490 2026] [:error] [pid 2145:tid 2184] [client 103.59.177.25:56765] [client 103.59.177.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.177.25, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa5O33czzpD9XHtKwuDGlgAAAVA"]
[Mon Mar 09 12:38:55.351675 2026] [proxy_fcgi:error] [pid 2145:tid 2184] [client 103.59.177.25:56765] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 16:10:58.414386 2026] [:error] [pid 5779:tid 5870] [client 106.194.25.251:57534] [client 106.194.25.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.194.25.251, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa6AkgaHbHwtklaurgW_3AAAAA8"]
[Mon Mar 09 16:10:58.424906 2026] [proxy_fcgi:error] [pid 5779:tid 5870] [client 106.194.25.251:57534] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 16:15:57.967831 2026] [:error] [pid 6074:tid 6097] [client 103.179.233.94:10059] [client 103.179.233.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.233.94, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa6BvRgvXHMVGYw_Elzf5gAAAMY"]
[Mon Mar 09 16:15:57.980473 2026] [proxy_fcgi:error] [pid 6074:tid 6097] [client 103.179.233.94:10059] AH01071: Got error 'Primary script unknown'
[Mon Mar 09 19:10:39.980441 2026] [:error] [pid 5779:tid 5855] [client 94.247.172.129:33118] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa6qrwaHbHwtklaurgURewAAAAA"]
[Mon Mar 09 21:53:11.439239 2026] [:error] [pid 5779:tid 5861] [client 110.166.71.39:38289] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa7QxwaHbHwtklaurgVG2wAAAAY"]
[Mon Mar 09 22:23:21.141962 2026] [:error] [pid 5787:tid 5929] [client 49.51.183.75:42360] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa7X2bGpMgQ18gGUaFMAHAAAAIc"]
[Tue Mar 10 03:03:39.855514 2026] [:error] [pid 32798:tid 32801] [client 49.51.36.179:60022] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa8Zi2xfsI4EbE3KrNCoAwAAAEE"]
[Tue Mar 10 04:43:49.985918 2026] [:error] [pid 7904:tid 8007] [client 43.166.250.187:45762] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa8xBdqdH-GCmASfJqHbDwAAAA8"]
[Tue Mar 10 05:23:22.496483 2026] [:error] [pid 7904:tid 8000] [client 62.60.131.218:58817] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa86StqdH-GCmASfJqHe4QAAAAg"]
[Tue Mar 10 05:40:49.500231 2026] [:error] [pid 8193:tid 8220] [client 62.60.131.218:62866] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa8-YR27LTs3sNpMSvwVTgAAAMA"]
[Tue Mar 10 06:29:29.406736 2026] [:error] [pid 37324:tid 37360] [client 118.99.73.60:7766] [client 118.99.73.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.99.73.60, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa9JyWVvKYS3ogzUMPc4dAAAARM"]
[Tue Mar 10 06:29:29.418195 2026] [proxy_fcgi:error] [pid 37324:tid 37360] [client 118.99.73.60:7766] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 06:45:16.676323 2026] [:error] [pid 37324:tid 37350] [client 190.86.74.81:9888] [client 190.86.74.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.86.74.81, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa9NfGVvKYS3ogzUMPc_3QAAAQk"]
[Tue Mar 10 06:45:16.687721 2026] [proxy_fcgi:error] [pid 37324:tid 37350] [client 190.86.74.81:9888] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 14:01:36.670543 2026] [proxy_fcgi:error] [pid 39996:tid 40019] [client 23.104.185.211:40280] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 14:09:50.363573 2026] [:error] [pid 42666:tid 42673] [client 103.214.60.65:37930] [client 103.214.60.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.60.65, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aa-1ro0d5emjo-Hs706SgQAAAQU"]
[Tue Mar 10 14:09:50.375776 2026] [proxy_fcgi:error] [pid 42666:tid 42673] [client 103.214.60.65:37930] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 15:25:23.200977 2026] [:error] [pid 21318:tid 21385] [client 43.130.131.18:37222] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aa_HYxTTkPqKydpYiIJA8gAAAIs"]
[Tue Mar 10 17:39:09.561285 2026] [:error] [pid 21400:tid 21416] [client 106.54.62.156:58126] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aa_mvTCFYMzi4orNuEHtkQAAAM4"]
[Tue Mar 10 20:27:54.373740 2026] [:error] [pid 3965:tid 3969] [client 152.32.98.2:52746] [client 152.32.98.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abAOSpN2nrVwtq9b0raHVgAAAMI"]
[Tue Mar 10 20:27:54.389290 2026] [proxy_fcgi:error] [pid 3965:tid 3969] [client 152.32.98.2:52746] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 21:18:53.996021 2026] [:error] [pid 3874:tid 3953] [client 62.65.189.167:42250] [client 62.65.189.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abAaPeK9H96QUJV_mxYo9wAAAI4"]
[Tue Mar 10 21:18:54.007108 2026] [proxy_fcgi:error] [pid 3874:tid 3953] [client 62.65.189.167:42250] AH01071: Got error 'Primary script unknown'
[Tue Mar 10 21:19:04.092217 2026] [:error] [pid 3965:tid 3985] [client 178.153.94.81:42418] [client 178.153.94.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abAaSJN2nrVwtq9b0ran2QAAANI"]
[Tue Mar 10 21:19:04.098917 2026] [proxy_fcgi:error] [pid 3965:tid 3985] [client 178.153.94.81:42418] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 07:48:35.251164 2026] [:error] [pid 11796:tid 11815] [client 209.87.169.99:40300] [client 209.87.169.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abCt0wEDXoQrlStpO9AhRwAAAZE"]
[Wed Mar 11 07:48:35.258284 2026] [proxy_fcgi:error] [pid 11796:tid 11815] [client 209.87.169.99:40300] AH01071: Got error 'Primary script unknown'
[Wed Mar 11 10:16:57.215752 2026] [:error] [pid 54045:tid 54056] [client 178.16.128.28:54056] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/www/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKJAAAAMk"]
[Wed Mar 11 10:16:57.218101 2026] [:error] [pid 54045:tid 54063] [client 178.16.128.28:54058] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKJQAAANA"]
[Wed Mar 11 10:16:57.232373 2026] [:error] [pid 54045:tid 54059] [client 178.16.128.28:54060] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKJgAAAMw"]
[Wed Mar 11 10:16:57.232841 2026] [:error] [pid 54045:tid 54054] [client 178.16.128.28:54062] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKJwAAAMc"]
[Wed Mar 11 10:16:57.234416 2026] [:error] [pid 54045:tid 54053] [client 178.16.128.28:54064] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKKAAAAMY"]
[Wed Mar 11 10:16:57.237462 2026] [:error] [pid 54045:tid 54057] [client 178.16.128.28:54066] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKKQAAAMo"]
[Wed Mar 11 10:16:57.239172 2026] [:error] [pid 54045:tid 54067] [client 178.16.128.28:54068] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/dev/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKKgAAANQ"]
[Wed Mar 11 10:16:57.247725 2026] [:error] [pid 54045:tid 54070] [client 178.16.128.28:54070] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/core/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKKwAAANc"]
[Wed Mar 11 10:16:57.250144 2026] [:error] [pid 54045:tid 54069] [client 178.16.128.28:54072] [client 178.16.128.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "abDQmSRcKzQ1f-N8TgQKLAAAANY"]
[Wed Mar 11 10:33:20.251855 2026] [:error] [pid 53955:tid 54035] [client 49.151.19.100:38094] [client 49.151.19.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abDUcNP1Uf6qBkbxZg-CAwAAAJA"]
[Wed Mar 11 10:33:20.257321 2026] [proxy_fcgi:error] [pid 53955:tid 54035] [client 49.151.19.100:38094] AH01071: Got error 'Primary script unknown'
2026/03/11 13:07:16 [error] 53948#53948: *768309 openat() "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/gu.php" failed (2: No such file or directory), client: 20.151.211.215, server: cpanel.measureyourbrand.com, request: "GET /.well-known/pki-validation/gu.php HTTP/1.1", host: "cpanel.measureyourbrand.com"
2026/03/11 13:07:16 [error] 53948#53948: *768309 openat() "/usr/local/apache/autossl_tmp/.well-known/acme-challenge/rafa.php" failed (2: No such file or directory), client: 20.151.211.215, server: cpanel.measureyourbrand.com, request: "GET /.well-known/pki-validation/rafa.php HTTP/1.1", host: "cpanel.measureyourbrand.com"
[Wed Mar 11 14:45:40.327822 2026] [proxy_fcgi:error] [pid 53955:tid 54027] [client 145.239.10.137:34680] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/gfg.php
[Wed Mar 11 15:20:13.458574 2026] [:error] [pid 23482:tid 23507] [client 134.199.164.121:60814] [client 134.199.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abEXrcrYaTAnN_mLXymi4QAAARY"]
2026/03/11 15:20:13 [error] 53943#53943: *847456 access forbidden by rule, client: 134.199.164.121, server: measureyourbrand.com, request: "GET /.git/config HTTP/1.1", host: "measureyourbrand.com"
[Wed Mar 11 15:20:13.545644 2026] [:error] [pid 23482:tid 23502] [client 134.199.164.121:60878] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrcrYaTAnN_mLXymi9QAAARE"]
2026/03/11 15:20:13 [error] 53943#53943: *847460 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com, request: "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/laravel-filemanager/js/script.js", host: "measureyourbrand.com"
[Wed Mar 11 15:20:13.560470 2026] [:error] [pid 23482:tid 23500] [client 134.199.164.121:60890] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrcrYaTAnN_mLXymi9wAAAQ8"]
2026/03/11 15:20:13 [error] 53943#53943: *847460 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourbrand.com, request: "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/public/vendor/laravel-filemanager/js/script.js", host: "measureyourbrand.com"
[Wed Mar 11 21:44:09.681991 2026] [:error] [pid 54045:tid 54049] [client 62.61.165.84:39716] [client 62.61.165.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abFxqSRcKzQ1f-N8TgTu3wAAAMI"]
[Wed Mar 11 21:44:09.696820 2026] [proxy_fcgi:error] [pid 54045:tid 54049] [client 62.61.165.84:39716] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 00:17:49.901878 2026] [:error] [pid 23482:tid 23499] [client 125.166.116.99:35460] [client 125.166.116.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abGVrcrYaTAnN_mLXykC4wAAAQ4"]
[Thu Mar 12 00:17:49.916908 2026] [proxy_fcgi:error] [pid 23482:tid 23499] [client 125.166.116.99:35460] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 08:08:00.021948 2026] [:error] [pid 51540:tid 51566] [client 78.164.206.213:62332] [client 78.164.206.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.164.206.213, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abID4GOFFjotMIN2UD1OgAAAANg"]
[Thu Mar 12 08:08:00.035924 2026] [proxy_fcgi:error] [pid 51540:tid 51566] [client 78.164.206.213:62332] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 09:21:44.465763 2026] [:error] [pid 51455:tid 51482] [client 117.33.163.216:41632] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abIVKJE0YyNxdg6PL_AUDwAAABY"]
[Thu Mar 12 12:12:18.780775 2026] [:error] [pid 22063:tid 22068] [client 49.51.203.164:43600] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abI9Iq0RUhS-MJyHWLSilQAAAgM"]
[Thu Mar 12 12:36:22.171026 2026] [:error] [pid 51456:tid 51490] [client 37.140.223.203:22733] [client 37.140.223.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.203, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abJCxhXu8LzVixNGr0tHxwAAAEM"]
[Thu Mar 12 12:36:22.184184 2026] [proxy_fcgi:error] [pid 51456:tid 51490] [client 37.140.223.203:22733] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 15:18:54.102626 2026] [:error] [pid 51540:tid 51562] [client 36.83.21.148:55559] [client 36.83.21.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.83.21.148, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abJo3mOFFjotMIN2UD3BYQAAANQ"]
[Thu Mar 12 15:18:54.114500 2026] [proxy_fcgi:error] [pid 51540:tid 51562] [client 36.83.21.148:55559] AH01071: Got error 'Primary script unknown'
[Thu Mar 12 16:53:51.005189 2026] [:error] [pid 51455:tid 51460] [client 101.32.52.164:57958] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abJ_H5E0YyNxdg6PL_AJqAAAAAA"]
[Thu Mar 12 17:19:55.010863 2026] [autoindex:error] [pid 22063:tid 22065] [client 212.34.146.152:44900] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Mar 12 18:08:57.730507 2026] [:error] [pid 51455:tid 51475] [client 170.106.72.93:38298] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abKQuZE0YyNxdg6PL_Am-QAAAA8"]
[Thu Mar 12 18:25:13.329426 2026] [:error] [pid 11985:tid 11996] [client 103.65.236.149:52270] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "abKUiXcAcNujsOssVDcVAQAAAYU"]
[Thu Mar 12 18:25:13.547066 2026] [:error] [pid 22063:tid 22082] [client 103.65.236.149:52287] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "abKUia0RUhS-MJyHWLQcDwAAAhE"]
[Thu Mar 12 18:47:39.202353 2026] [:error] [pid 22063:tid 22073] [client 49.43.217.24:59825] [client 49.43.217.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.217.24, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abKZy60RUhS-MJyHWLQiJwAAAgg"]
[Thu Mar 12 18:47:39.215072 2026] [proxy_fcgi:error] [pid 22063:tid 22073] [client 49.43.217.24:59825] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 02:32:09.962891 2026] [:error] [pid 47894:tid 48017] [client 193.36.225.26:41591] [client 193.36.225.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.26, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abMGqZiuFpRtVNR6uOKP8AAAAQ8"]
[Fri Mar 13 02:32:09.974030 2026] [proxy_fcgi:error] [pid 47894:tid 48017] [client 193.36.225.26:41591] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 05:14:55.740744 2026] [:error] [pid 44755:tid 44764] [client 36.41.75.167:45236] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abMsz_ONf1H0XrBFE4NlSgAAAQc"]
[Fri Mar 13 06:04:51.588477 2026] [:error] [pid 44755:tid 44781] [client 5.195.98.47:3971] [client 5.195.98.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.98.47, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abM4g_ONf1H0XrBFE4OAQwAAARg"]
[Fri Mar 13 06:04:51.604413 2026] [proxy_fcgi:error] [pid 44755:tid 44781] [client 5.195.98.47:3971] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 06:05:14.112269 2026] [:error] [pid 55077:tid 55099] [client 187.1.8.237:25326] [client 187.1.8.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.1.8.237, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abM4mt9Ul5ym4M-PlQLqyQAAAVQ"]
[Fri Mar 13 06:05:14.127867 2026] [proxy_fcgi:error] [pid 55077:tid 55099] [client 187.1.8.237:25326] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 06:27:18.786886 2026] [:error] [pid 61928:tid 61983] [client 139.59.56.82:52628] [client 139.59.56.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/favicon.ico"] [unique_id "abM9xgod66AHekJJZioyCAAAAEY"]
[Fri Mar 13 06:27:19.218429 2026] [:error] [pid 62036:tid 62062] [client 139.59.56.82:52638] [client 139.59.56.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "abM9x7ce6g9kILuh_R4JkAAAANM"]
[Fri Mar 13 06:27:19.628942 2026] [:error] [pid 62036:tid 62060] [client 139.59.56.82:48834] [client 139.59.56.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/favicon.ico"] [unique_id "abM9x7ce6g9kILuh_R4JkwAAANE"]
[Fri Mar 13 06:27:20.477418 2026] [:error] [pid 62036:tid 62046] [client 139.59.56.82:48838] [client 139.59.56.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "abM9yLce6g9kILuh_R4JlQAAAMM"]
[Fri Mar 13 09:29:12.374569 2026] [proxy_fcgi:error] [pid 61927:tid 61950] [client 20.89.98.229:8245] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:29:12.495643 2026] [proxy_fcgi:error] [pid 61927:tid 61946] [client 20.89.98.229:8245] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:29:12.614090 2026] [proxy_fcgi:error] [pid 61927:tid 61965] [client 20.89.98.229:8245] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:29:12.733961 2026] [proxy_fcgi:error] [pid 61927:tid 61958] [client 20.89.98.229:8245] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:29:12.854020 2026] [proxy_fcgi:error] [pid 61927:tid 61970] [client 20.89.98.229:8245] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:29:12.973192 2026] [proxy_fcgi:error] [pid 61927:tid 61961] [client 20.89.98.229:8245] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 09:29:13.087343 2026] [:error] [pid 61927:tid 61968] [client 20.89.98.229:8245] [client 20.89.98.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abNoabLkK584eBa2J7Xh-AAAABY"]
[Fri Mar 13 09:29:13.573120 2026] [:error] [pid 44755:tid 44763] [client 20.89.98.229:8136] [client 20.89.98.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abNoafONf1H0XrBFE4OxZAAAAQY"]
[Fri Mar 13 09:29:14.030620 2026] [:error] [pid 61929:tid 62024] [client 20.89.98.229:8220] [client 20.89.98.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abNoajGGsow2jgUjLtyFVwAAAJQ"]
[Fri Mar 13 09:29:14.491279 2026] [:error] [pid 44755:tid 44766] [client 20.89.98.229:10757] [client 20.89.98.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abNoavONf1H0XrBFE4OxZwAAAQk"]
[Fri Mar 13 09:50:26.510088 2026] [:error] [pid 44755:tid 44764] [client 209.87.169.131:29639] [client 209.87.169.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.131, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abNtYvONf1H0XrBFE4O3GQAAAQc"]
[Fri Mar 13 09:50:26.529408 2026] [proxy_fcgi:error] [pid 44755:tid 44764] [client 209.87.169.131:29639] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 11:33:24.573685 2026] [:error] [pid 55077:tid 55093] [client 101.32.49.171:58190] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abOFhN9Ul5ym4M-PlQJrQwAAAU4"]
[Fri Mar 13 11:56:20.471819 2026] [:error] [pid 9241:tid 9263] [client 136.144.35.34:38895] [client 136.144.35.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.34, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abOK5A48xagB6AsXkJ7gzwAAAco"]
[Fri Mar 13 11:56:20.484173 2026] [proxy_fcgi:error] [pid 9241:tid 9263] [client 136.144.35.34:38895] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 12:56:40.700737 2026] [:error] [pid 9311:tid 9364] [client 43.157.179.227:60590] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abOZCFTiCkU4QLmYwPnaaQAAAk0"]
[Fri Mar 13 16:58:32.387201 2026] [:error] [pid 9309:tid 9332] [client 106.215.91.4:9167] [client 106.215.91.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.91.4, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abPRuKo1KEMMghNWAN8HHgAAAgk"]
[Fri Mar 13 16:58:32.400314 2026] [proxy_fcgi:error] [pid 9309:tid 9332] [client 106.215.91.4:9167] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 17:35:41.124404 2026] [:error] [pid 55077:tid 55102] [client 43.135.144.81:48178] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abPabd9Ul5ym4M-PlQLHPwAAAVc"]
[Fri Mar 13 18:18:41.582166 2026] [:error] [pid 61929:tid 62021] [client 182.42.105.144:59757] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abPkgTGGsow2jgUjLtynIAAAAJE"]
[Fri Mar 13 18:53:13.852611 2026] [:error] [pid 9309:tid 9323] [client 124.156.225.181:60590] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abPsmao1KEMMghNWAN8pQwAAAgA"]
[Fri Mar 13 18:54:45.787055 2026] [:error] [pid 9309:tid 9326] [client 41.221.81.38:64227] [client 41.221.81.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.221.81.38, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abPs9ao1KEMMghNWAN8p1gAAAgM"]
[Fri Mar 13 18:54:45.800275 2026] [proxy_fcgi:error] [pid 9309:tid 9326] [client 41.221.81.38:64227] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 19:05:18.092798 2026] [proxy_fcgi:error] [pid 9311:tid 9355] [client 104.194.152.134:60429] AH01071: Got error 'Primary script unknown'
[Fri Mar 13 19:35:16.313202 2026] [:error] [pid 9309:tid 9337] [client 104.28.166.127:25558] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "abP2dKo1KEMMghNWAN827gAAAg4"]
[Sat Mar 14 00:20:53.457669 2026] [:error] [pid 47891:tid 47967] [client 43.164.197.209:44912] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abQ5ZfchNnuMqi7I_WHisgAAAIE"]
[Sat Mar 14 01:42:04.713199 2026] [:error] [pid 47891:tid 47979] [client 4.204.233.55:39321] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRMbPchNnuMqi7I_WH8RAAAAI0"]
[Sat Mar 14 01:42:05.563011 2026] [:error] [pid 47905:tid 48009] [client 4.204.233.55:39176] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRMbRaYZayP4o4wpJco6AAAAVA"]
[Sat Mar 14 01:42:06.401157 2026] [:error] [pid 47905:tid 48008] [client 4.204.233.55:39182] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRMbhaYZayP4o4wpJco7AAAAU8"]
[Sat Mar 14 01:42:07.250710 2026] [:error] [pid 47891:tid 47971] [client 4.204.233.55:39188] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRMb_chNnuMqi7I_WH8SAAAAIU"]
[Sat Mar 14 02:27:53.292396 2026] [proxy_fcgi:error] [pid 47878:tid 47941] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:53.503122 2026] [proxy_fcgi:error] [pid 47878:tid 47944] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:53.714264 2026] [proxy_fcgi:error] [pid 47878:tid 47959] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:53.925857 2026] [proxy_fcgi:error] [pid 47878:tid 47940] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:54.137830 2026] [proxy_fcgi:error] [pid 47878:tid 47962] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:54.356856 2026] [proxy_fcgi:error] [pid 47878:tid 47950] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:54.567737 2026] [proxy_fcgi:error] [pid 47878:tid 47961] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:54.778464 2026] [proxy_fcgi:error] [pid 47878:tid 47949] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:54.989646 2026] [proxy_fcgi:error] [pid 47878:tid 47947] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:55.199488 2026] [proxy_fcgi:error] [pid 47878:tid 47957] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:55.411039 2026] [proxy_fcgi:error] [pid 47878:tid 47945] [client 4.204.233.55:50394] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 02:27:55.618552 2026] [:error] [pid 47878:tid 47963] [client 4.204.233.55:50394] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "abRXK38jymmmpr1jcBe71QAAAFg"]
[Sat Mar 14 02:27:56.444444 2026] [:error] [pid 47891:tid 47981] [client 4.204.233.55:50402] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "abRXLPchNnuMqi7I_WEVjAAAAI8"]
[Sat Mar 14 02:27:57.272255 2026] [:error] [pid 48070:tid 48082] [client 4.204.233.55:50885] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "abRXLUIvrhMS5BVHxNk1MwAAAAo"]
[Sat Mar 14 02:27:58.098684 2026] [:error] [pid 48070:tid 48074] [client 4.204.233.55:50892] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chati.php"] [unique_id "abRXLkIvrhMS5BVHxNk1NgAAAAI"]
[Sat Mar 14 02:56:16.357008 2026] [:error] [pid 48070:tid 48083] [client 4.204.233.55:64742] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRd0EIvrhMS5BVHxNk98AAAAAs"]
[Sat Mar 14 02:56:17.196776 2026] [:error] [pid 48070:tid 48082] [client 4.204.233.55:64756] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRd0UIvrhMS5BVHxNk98gAAAAo"]
[Sat Mar 14 02:56:18.019363 2026] [:error] [pid 48070:tid 48074] [client 4.204.233.55:64736] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRd0kIvrhMS5BVHxNk99gAAAAI"]
[Sat Mar 14 02:56:18.846941 2026] [:error] [pid 48070:tid 48092] [client 4.204.233.55:64732] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/hp2.php"] [unique_id "abRd0kIvrhMS5BVHxNk9-gAAABQ"]
[Sat Mar 14 04:04:15.666037 2026] [autoindex:error] [pid 4018:tid 4030] [client 89.110.109.74:55934] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sat Mar 14 05:01:04.985676 2026] [proxy_fcgi:error] [pid 35801:tid 35826] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:05.251579 2026] [proxy_fcgi:error] [pid 35801:tid 35808] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:05.513476 2026] [proxy_fcgi:error] [pid 35801:tid 35827] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:05.792007 2026] [proxy_fcgi:error] [pid 35801:tid 35805] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:06.073024 2026] [proxy_fcgi:error] [pid 35801:tid 35820] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:06.333215 2026] [proxy_fcgi:error] [pid 35801:tid 35825] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:06.604426 2026] [proxy_fcgi:error] [pid 35801:tid 35828] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:10.356740 2026] [proxy_fcgi:error] [pid 35801:tid 35822] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:10.618862 2026] [proxy_fcgi:error] [pid 35801:tid 35809] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:10.891692 2026] [proxy_fcgi:error] [pid 35801:tid 35817] [client 20.215.53.247:26562] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:01:11.148249 2026] [:error] [pid 35801:tid 35821] [client 20.215.53.247:26562] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "abR7F28tVFelXGsqbU-c3QAAARE"]
[Sat Mar 14 05:01:12.583271 2026] [:error] [pid 4018:tid 4039] [client 20.215.53.247:4222] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "abR7GAEk1fxdMMkDDaLLngAAAM4"]
[Sat Mar 14 05:01:14.393616 2026] [:error] [pid 3914:tid 4002] [client 20.215.53.247:39656] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "abR7GvH_HeUqa_sn9-ABtAAAAJI"]
[Sat Mar 14 05:01:15.584700 2026] [:error] [pid 3913:tid 3969] [client 20.215.53.247:13666] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "abR7Gx9qvQd4GQHUp6_3qAAAAEw"]
[Sat Mar 14 05:01:17.071618 2026] [:error] [pid 4018:tid 4049] [client 20.215.53.247:28275] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "abR7HQEk1fxdMMkDDaLLpQAAANg"]
[Sat Mar 14 05:01:18.887852 2026] [:error] [pid 35801:tid 35825] [client 20.215.53.247:28261] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "abR7Hm8tVFelXGsqbU-c5gAAARU"]
[Sat Mar 14 05:01:22.369034 2026] [:error] [pid 3914:tid 3985] [client 20.215.53.247:28270] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "abR7IvH_HeUqa_sn9-ABuwAAAIE"]
[Sat Mar 14 05:01:34.304924 2026] [:error] [pid 3913:tid 3979] [client 20.215.53.247:38388] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "abR7Lh9qvQd4GQHUp6_3vAAAAFY"]
[Sat Mar 14 05:01:36.482675 2026] [:error] [pid 3914:tid 4008] [client 20.215.53.247:38344] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "abR7MPH_HeUqa_sn9-AB0AAAAJg"]
[Sat Mar 14 05:01:40.073650 2026] [:error] [pid 3912:tid 3949] [client 20.215.53.247:28232] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "abR7NMXFZBK-jpdCvTHCZQAAABY"]
[Sat Mar 14 05:01:42.847070 2026] [:error] [pid 3914:tid 3991] [client 20.215.53.247:39186] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lock.php"] [unique_id "abR7NvH_HeUqa_sn9-AB1wAAAIc"]
[Sat Mar 14 05:01:47.598645 2026] [:error] [pid 3913:tid 3978] [client 20.215.53.247:38339] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "abR7Ox9qvQd4GQHUp6_3ygAAAFU"]
[Sat Mar 14 05:01:48.871193 2026] [:error] [pid 3914:tid 3985] [client 20.215.53.247:39200] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "abR7PPH_HeUqa_sn9-AB3QAAAIE"]
[Sat Mar 14 05:01:50.310974 2026] [:error] [pid 4018:tid 4045] [client 20.215.53.247:26580] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "abR7PgEk1fxdMMkDDaLL1AAAANQ"]
[Sat Mar 14 05:01:52.094986 2026] [:error] [pid 4018:tid 4043] [client 20.215.53.247:38365] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "abR7QAEk1fxdMMkDDaLL2wAAANI"]
[Sat Mar 14 05:01:56.025983 2026] [:error] [pid 3914:tid 4006] [client 20.215.53.247:39210] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "abR7RPH_HeUqa_sn9-AB4AAAAJY"]
[Sat Mar 14 05:01:57.038143 2026] [:error] [pid 4018:tid 4027] [client 20.215.53.247:38373] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "abR7RQEk1fxdMMkDDaLL5wAAAMI"]
[Sat Mar 14 05:01:58.266283 2026] [:error] [pid 4018:tid 4030] [client 20.215.53.247:39654] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "abR7RgEk1fxdMMkDDaLL6QAAAMU"]
[Sat Mar 14 05:02:03.625382 2026] [:error] [pid 3914:tid 4007] [client 20.215.53.247:28190] [client 20.215.53.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "abR7S_H_HeUqa_sn9-AB7AAAAJc"]
[Sat Mar 14 05:02:11.777124 2026] [proxy_fcgi:error] [pid 35801:tid 35818] [client 20.215.53.247:28246] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:02:12.047798 2026] [proxy_fcgi:error] [pid 35801:tid 35820] [client 20.215.53.247:28246] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:02:12.686329 2026] [proxy_fcgi:error] [pid 35801:tid 35813] [client 20.215.53.247:28246] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:02:12.958051 2026] [proxy_fcgi:error] [pid 35801:tid 35824] [client 20.215.53.247:28246] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 05:02:13.222678 2026] [proxy_fcgi:error] [pid 35801:tid 35809] [client 20.215.53.247:28246] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 07:16:12.130951 2026] [:error] [pid 57226:tid 57231] [client 185.137.164.15:51927] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "abSavGxFlXQvNewjeI8-OQAAAUE"]
[Sat Mar 14 07:44:39.156783 2026] [:error] [pid 3912:tid 3943] [client 122.51.236.174:38638] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abShZ8XFZBK-jpdCvTHW7wAAABA"]
[Sat Mar 14 09:08:51.600665 2026] [:error] [pid 57226:tid 57251] [client 223.181.53.210:3740] [client 223.181.53.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.53.210, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abS1I2xFlXQvNewjeI9wmQAAAVU"]
[Sat Mar 14 09:08:51.612139 2026] [proxy_fcgi:error] [pid 57226:tid 57251] [client 223.181.53.210:3740] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 09:30:01.494796 2026] [:error] [pid 57226:tid 57254] [client 43.231.185.207:53838] [client 43.231.185.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||measureyourbrand.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "measureyourbrand.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "abS6GWxFlXQvNewjeI96wwAAAVg"]
[Sat Mar 14 10:56:11.053982 2026] [:error] [pid 53961:tid 53972] [client 134.199.200.219:55112] [client 134.199.200.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/favicon.ico"] [unique_id "abTOS9czYH1OqY7y2cOJ9wAAAcg"]
[Sat Mar 14 10:56:11.431665 2026] [:error] [pid 3913:tid 3969] [client 134.199.200.219:55124] [client 134.199.200.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "abTOSx9qvQd4GQHUp69aggAAAEw"]
[Sat Mar 14 10:56:11.813330 2026] [:error] [pid 3913:tid 3977] [client 134.199.200.219:35594] [client 134.199.200.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/favicon.ico"] [unique_id "abTOSx9qvQd4GQHUp69agwAAAFQ"]
[Sat Mar 14 10:56:12.566562 2026] [:error] [pid 3913:tid 3964] [client 134.199.200.219:35604] [client 134.199.200.219] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "abTOTB9qvQd4GQHUp69ahQAAAEc"]
[Sat Mar 14 11:27:57.697476 2026] [:error] [pid 3913:tid 3965] [client 43.157.67.70:56042] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abTVvR9qvQd4GQHUp69kxgAAAEg"]
[Sat Mar 14 14:29:26.347196 2026] [:error] [pid 61477:tid 61487] [client 14.215.163.132:37133] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abUARqcx6muYfIYRM7BndAAAAEY"]
[Sat Mar 14 18:13:43.529185 2026] [:error] [pid 13151:tid 13175] [client 43.166.245.120:46990] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abU019bXrXQxFzrsw41A-QAAAJY"]
[Sat Mar 14 20:11:06.733402 2026] [:error] [pid 30154:tid 30172] [client 203.177.64.130:60250] [client 203.177.64.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.64.130, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abVQWl6OP9woRgp3v0F0UgAAAMw"]
[Sat Mar 14 20:11:06.744876 2026] [proxy_fcgi:error] [pid 30154:tid 30172] [client 203.177.64.130:60250] AH01071: Got error 'Primary script unknown'
[Sat Mar 14 22:25:59.220795 2026] [:error] [pid 13151:tid 13177] [client 49.51.243.95:49340] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abVv99bXrXQxFzrsw414GwAAAJg"]
[Sun Mar 15 00:57:12.700224 2026] [:error] [pid 20020:tid 20045] [client 179.54.100.168:60321] [client 179.54.100.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.54.100.168, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abWTaEPjaRwagw2fU7j9ogAAAFc"]
[Sun Mar 15 00:57:12.708352 2026] [proxy_fcgi:error] [pid 20020:tid 20045] [client 179.54.100.168:60321] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 04:27:30.587767 2026] [:error] [pid 38541:tid 38634] [client 182.42.111.213:36018] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abXEsnuOpex8jIO0jt63dwAAAJU"]
[Sun Mar 15 09:16:00.341556 2026] [:error] [pid 38541:tid 38631] [client 158.51.121.45:61966] [client 158.51.121.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.51.121.45, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abYIUHuOpex8jIO0jt4YJwAAAJI"]
[Sun Mar 15 09:16:00.348760 2026] [proxy_fcgi:error] [pid 38541:tid 38631] [client 158.51.121.45:61966] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:03:51.556507 2026] [:error] [pid 50986:tid 50988] [client 62.171.151.115:42036] [client 62.171.151.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abYThyknK4c779bcQqHM9AAAAUA"]
[Sun Mar 15 10:03:51.557433 2026] [:error] [pid 50986:tid 51008] [client 62.171.151.115:42042] [client 62.171.151.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "abYThyknK4c779bcQqHM9QAAAVM"]
[Sun Mar 15 10:08:47.584218 2026] [autoindex:error] [pid 38541:tid 38633] [client 20.244.84.206:57996] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 10:59:30.418903 2026] [:error] [pid 38540:tid 38595] [client 43.140.247.223:49190] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abYgkl8bnHsJ1dE90bI-uwAAAEk"]
[Sun Mar 15 12:10:35.342990 2026] [proxy_fcgi:error] [pid 38536:tid 38577] [client 52.243.60.223:4888] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:10:35.460684 2026] [proxy_fcgi:error] [pid 38536:tid 38570] [client 52.243.60.223:4888] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:10:35.577879 2026] [proxy_fcgi:error] [pid 38536:tid 38576] [client 52.243.60.223:4888] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:10:35.696341 2026] [proxy_fcgi:error] [pid 38536:tid 38559] [client 52.243.60.223:4888] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:10:35.814121 2026] [proxy_fcgi:error] [pid 38536:tid 38572] [client 52.243.60.223:4888] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:10:35.936443 2026] [proxy_fcgi:error] [pid 38536:tid 38565] [client 52.243.60.223:4888] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 12:10:36.049288 2026] [:error] [pid 38536:tid 38553] [client 52.243.60.223:4888] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abYxPPpTEqkVJ0rBEWvoEgAAAAA"]
[Sun Mar 15 12:10:36.642839 2026] [:error] [pid 45974:tid 45991] [client 52.243.60.223:4895] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abYxPBWn4R6u72SegehpTQAAAg8"]
[Sun Mar 15 12:10:37.246319 2026] [:error] [pid 42570:tid 42589] [client 52.243.60.223:20698] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abYxPcIUXZJLmk_gYCPPmQAAAZA"]
[Sun Mar 15 12:10:37.709390 2026] [:error] [pid 38540:tid 38606] [client 52.243.60.223:21927] [client 52.243.60.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "abYxPV8bnHsJ1dE90bJGpwAAAFQ"]
[Sun Mar 15 13:18:33.430028 2026] [proxy_fcgi:error] [pid 38645:tid 38648] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:33.522834 2026] [proxy_fcgi:error] [pid 38645:tid 38655] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:33.615562 2026] [proxy_fcgi:error] [pid 38645:tid 38668] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:33.719872 2026] [proxy_fcgi:error] [pid 38645:tid 38663] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:33.812338 2026] [proxy_fcgi:error] [pid 38645:tid 38656] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:33.904325 2026] [proxy_fcgi:error] [pid 38645:tid 38658] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:33.998076 2026] [proxy_fcgi:error] [pid 38645:tid 38662] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:34.090061 2026] [proxy_fcgi:error] [pid 38645:tid 38654] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:34.189541 2026] [proxy_fcgi:error] [pid 38645:tid 38652] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:34.281767 2026] [proxy_fcgi:error] [pid 38645:tid 38666] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:34.373033 2026] [proxy_fcgi:error] [pid 38645:tid 38659] [client 52.139.198.173:19554] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 13:18:34.461637 2026] [:error] [pid 38645:tid 38651] [client 52.139.198.173:19554] [client 52.139.198.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "abZBKhFPHtsDUuVrWDYfqAAAAMQ"]
[Sun Mar 15 13:18:34.817673 2026] [:error] [pid 38645:tid 38664] [client 52.139.198.173:19524] [client 52.139.198.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "abZBKhFPHtsDUuVrWDYfqgAAANE"]
[Sun Mar 15 13:18:35.220441 2026] [:error] [pid 38645:tid 38647] [client 52.139.198.173:14944] [client 52.139.198.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "abZBKxFPHtsDUuVrWDYfqwAAAMA"]
[Sun Mar 15 13:18:35.605935 2026] [:error] [pid 38540:tid 38591] [client 52.139.198.173:19334] [client 52.139.198.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "abZBK18bnHsJ1dE90bJMuAAAAEU"]
[Sun Mar 15 14:36:27.569684 2026] [:error] [pid 38645:tid 38655] [client 170.106.147.63:50918] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abZTaxFPHtsDUuVrWDY9IQAAAMg"]
[Sun Mar 15 17:19:08.830502 2026] [:error] [pid 50986:tid 51007] [client 152.59.47.149:61371] [client 152.59.47.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.47.149, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abZ5jCknK4c779bcQqGTAQAAAVI"]
[Sun Mar 15 17:19:08.842257 2026] [proxy_fcgi:error] [pid 50986:tid 51007] [client 152.59.47.149:61371] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 19:09:47.318160 2026] [:error] [pid 9995:tid 10009] [client 49.51.132.100:39128] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abaTewa8xkcaSmgTbwhwYwAAAQs"]
[Sun Mar 15 22:22:31.678958 2026] [:error] [pid 9995:tid 10009] [client 196.191.133.60:51897] [client 196.191.133.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.191.133.60, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abbApwa8xkcaSmgTbwicVAAAAQs"]
[Sun Mar 15 22:22:31.689676 2026] [proxy_fcgi:error] [pid 9995:tid 10009] [client 196.191.133.60:51897] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 00:38:44.432066 2026] [:error] [pid 60694:tid 60825] [client 43.166.128.187:52046] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abbglGEURh3k32p5sFJySAAAAJM"]
[Mon Mar 16 01:02:25.995080 2026] [:error] [pid 60947:tid 61017] [client 125.94.144.102:48356] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abbmIf8DVbvyAQDJWh1XNQAAAM8"]
[Mon Mar 16 02:02:49.665357 2026] [:error] [pid 23458:tid 23471] [client 170.106.152.218:37958] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abb0SQ4cKIHVuOkxhhocCAAAAQs"]
[Mon Mar 16 07:02:27.368342 2026] [:error] [pid 62428:tid 62477] [client 203.188.168.21:37709] [client 203.188.168.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.21, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abc6g6rHSRXFZx1-aIHoFAAAAEg"]
[Mon Mar 16 07:02:27.392309 2026] [proxy_fcgi:error] [pid 62428:tid 62477] [client 203.188.168.21:37709] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 08:22:47.882881 2026] [:error] [pid 1411:tid 1438] [client 103.65.237.124:49165] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "abdNV9rCV4sh-le3M-2exAAAAVg"]
[Mon Mar 16 08:22:48.324463 2026] [:error] [pid 1411:tid 1429] [client 103.65.237.124:49332] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "abdNWNrCV4sh-le3M-2eyQAAAU8"]
[Mon Mar 16 13:04:19.153288 2026] [:error] [pid 62510:tid 62515] [client 60.50.7.242:59827] [client 60.50.7.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.50.7.242, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abePUyE33_T9aKpoDdgXSgAAAQI"]
[Mon Mar 16 13:04:19.165780 2026] [proxy_fcgi:error] [pid 62510:tid 62515] [client 60.50.7.242:59827] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 13:04:20.202888 2026] [:error] [pid 62026:tid 62100] [client 103.240.204.49:61592] [client 103.240.204.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.204.49, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abePVO8oW52PUIYI2O4q_QAAAI4"]
[Mon Mar 16 13:04:20.208611 2026] [proxy_fcgi:error] [pid 62026:tid 62100] [client 103.240.204.49:61592] AH01071: Got error 'Primary script unknown'
[Mon Mar 16 13:21:04.916571 2026] [:error] [pid 62510:tid 62513] [client 43.164.197.209:40936] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abeTQCE33_T9aKpoDdgcKQAAAQA"]
[Mon Mar 16 13:49:11.598371 2026] [:error] [pid 9400:tid 9417] [client 182.42.105.144:34102] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abeZ1wSHzD8ZM8ddLEnkzAAAAgE"]
[Mon Mar 16 14:44:46.461930 2026] [:error] [pid 9249:tid 9261] [client 43.164.197.224:44990] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abem3gsX15dONR9F2wzMEwAAAUc"]
[Mon Mar 16 20:17:31.043554 2026] [:error] [pid 39154:tid 39169] [client 43.165.65.180:50230] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abf02xgq1_qjm7J1LqsnuQAAAUw"]
[Mon Mar 16 21:42:23.710264 2026] [:error] [pid 36198:tid 36218] [client 173.239.224.118:21281] [client 173.239.224.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.118, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abgIv-lL1GNckmsdWlNQgQAAARE"]
[Mon Mar 16 21:42:23.714072 2026] [proxy_fcgi:error] [pid 36198:tid 36218] [client 173.239.224.118:21281] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 00:26:10.732380 2026] [:error] [pid 45404:tid 45527] [client 43.130.14.245:46712] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abgvImcrPifELUd8UWDxbgAAAAo"]
[Tue Mar 17 06:04:13.028463 2026] [:error] [pid 22541:tid 22560] [client 107.189.7.114:51742] [client 107.189.7.114] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||measureyourbrand.com|F|2"] [data "TX:0=application/qwik-json"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abh-XaS6JNY1-CTsTA_rfgAAAQ4"]
[Tue Mar 17 06:32:27.385752 2026] [:error] [pid 46020:tid 46043] [client 105.242.174.60:49169] [client 105.242.174.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.242.174.60, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abiE-3-nCcd9BdzGdLcFngAAANU"]
[Tue Mar 17 06:32:27.399084 2026] [proxy_fcgi:error] [pid 46020:tid 46043] [client 105.242.174.60:49169] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 06:33:59.488621 2026] [:error] [pid 46020:tid 46043] [client 147.93.93.184:18226] [client 147.93.93.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abiFV3-nCcd9BdzGdLcGygAAANU"]
[Tue Mar 17 06:34:16.676760 2026] [:error] [pid 22541:tid 22555] [client 43.153.54.14:35742] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abiFaKS6JNY1-CTsTA_3_wAAAQk"]
[Tue Mar 17 07:55:47.866366 2026] [:error] [pid 46020:tid 46024] [client 43.130.102.7:57710] [client 43.130.102.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abiYg3-nCcd9BdzGdLdA1gAAAMI"]
[Tue Mar 17 07:56:11.371288 2026] [:error] [pid 22541:tid 22560] [client 185.223.152.131:37399] [client 185.223.152.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.131, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abiYm6S6JNY1-CTsTA8fmwAAAQ4"]
[Tue Mar 17 07:56:11.375576 2026] [proxy_fcgi:error] [pid 22541:tid 22560] [client 185.223.152.131:37399] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 09:32:06.216292 2026] [:error] [pid 45915:tid 45947] [client 77.90.185.116:41294] [client 77.90.185.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "abivFph7U84ydzcrcnc-tAAAABI"]
[Tue Mar 17 12:22:23.402072 2026] [:error] [pid 22541:tid 22552] [client 43.153.26.165:50776] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abjW_6S6JNY1-CTsTA-CVAAAAQY"]
[Tue Mar 17 12:56:17.877554 2026] [:error] [pid 15013:tid 15082] [client 217.216.37.50:61711] [client 217.216.37.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abje8VZc-p7DonmJmm3d2wAAAgU"]
[Tue Mar 17 12:56:18.071430 2026] [:error] [pid 15162:tid 15180] [client 217.216.37.50:63988] [client 217.216.37.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "abje8rkCW4399PnBfYS-KQAAAk0"]
[Tue Mar 17 12:56:18.262517 2026] [:error] [pid 14817:tid 14850] [client 217.216.37.50:61020] [client 217.216.37.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "abje8uBWVgTpR3dKOgbfuAAAAVg"]
[Tue Mar 17 13:51:38.905745 2026] [:error] [pid 15013:tid 15080] [client 49.51.33.159:48078] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abjr6lZc-p7DonmJmm3r4gAAAgM"]
[Tue Mar 17 15:28:56.092697 2026] [:error] [pid 14817:tid 14827] [client 89.39.107.202:58792] [client 89.39.107.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.39.107.202, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abkCuOBWVgTpR3dKOgb-CAAAAUE"]
[Tue Mar 17 15:28:56.435025 2026] [proxy_fcgi:error] [pid 14817:tid 14827] [client 89.39.107.202:58792] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 16:22:21.357544 2026] [:error] [pid 15013:tid 15093] [client 182.44.10.67:48369] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abkPPVZc-p7DonmJmm0RIQAAAhA"]
[Tue Mar 17 18:02:02.584504 2026] [:error] [pid 15162:tid 15176] [client 43.135.185.59:52548] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abkmmrkCW4399PnBfYTqFAAAAkk"]
[Tue Mar 17 18:30:21.143895 2026] [:error] [pid 45915:tid 45944] [client 93.67.169.70:56696] [client 93.67.169.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.67.169.70, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abktPZh7U84ydzcrcndXWgAAAA8"]
[Tue Mar 17 18:30:21.160263 2026] [proxy_fcgi:error] [pid 45915:tid 45944] [client 93.67.169.70:56696] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 23:09:04.462098 2026] [:error] [pid 14817:tid 14839] [client 158.173.25.98:48947] [client 158.173.25.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.25.98, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ablukOBWVgTpR3dKOgaLmwAAAU0"]
[Tue Mar 17 23:09:04.476230 2026] [proxy_fcgi:error] [pid 14817:tid 14839] [client 158.173.25.98:48947] AH01071: Got error 'Primary script unknown'
[Tue Mar 17 23:33:00.371084 2026] [:error] [pid 22541:tid 22557] [client 43.167.157.80:49312] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abl0LKS6JNY1-CTsTA9iiQAAAQs"]
[Wed Mar 18 00:57:38.126566 2026] [:error] [pid 40715:tid 40952] [client 43.153.102.138:43640] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abmIAmcms0rUPgdkLiH_fAAAAA4"]
[Wed Mar 18 02:30:11.614865 2026] [proxy_fcgi:error] [pid 40716:tid 41021] [client 20.116.1.191:46166] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:30:12.032723 2026] [:error] [pid 40716:tid 41038] [client 20.116.1.191:46166] [client 20.116.1.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.1.191, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abmdtBR6i4ByUuhUBASONAAAAFE"]
[Wed Mar 18 02:30:12.248297 2026] [proxy_fcgi:error] [pid 40716:tid 41034] [client 20.116.1.191:46166] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:30:13.270060 2026] [proxy_fcgi:error] [pid 40716:tid 41028] [client 20.116.1.191:46166] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:30:13.953698 2026] [proxy_fcgi:error] [pid 40716:tid 41037] [client 20.116.1.191:46166] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 02:30:14.287925 2026] [:error] [pid 40716:tid 41033] [client 20.116.1.191:46166] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abmdthR6i4ByUuhUBASORwAAAEw"]
[Wed Mar 18 02:30:16.401018 2026] [:error] [pid 63449:tid 63462] [client 20.116.1.191:37861] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abmduAplutP4IZ5mr13mrwAAAUs"]
[Wed Mar 18 02:30:19.473404 2026] [:error] [pid 63612:tid 63615] [client 20.116.1.191:47893] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abmdu-7vPBSR8vo387NJVAAAAYE"]
[Wed Mar 18 02:30:20.995204 2026] [:error] [pid 63612:tid 63619] [client 20.116.1.191:15394] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abmdvO7vPBSR8vo387NJWAAAAYU"]
[Wed Mar 18 05:40:56.819501 2026] [:error] [pid 44964:tid 44992] [client 1.15.52.154:34306] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abnKaMvMufm4ayzOOhBNcAAAAA4"]
[Wed Mar 18 05:41:35.861818 2026] [:error] [pid 13676:tid 13701] [client 157.49.182.240:61875] [client 157.49.182.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.49.182.240, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abnKj2xDEHR5lvAEVIjiHgAAARc"]
[Wed Mar 18 05:41:35.876214 2026] [proxy_fcgi:error] [pid 13676:tid 13701] [client 157.49.182.240:61875] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 05:43:58.889032 2026] [:error] [pid 13676:tid 13696] [client 162.62.231.139:34804] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abnLHmxDEHR5lvAEVIji0AAAARI"]
[Wed Mar 18 07:10:07.317287 2026] [:error] [pid 44964:tid 44996] [client 43.157.62.101:58508] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abnfT8vMufm4ayzOOhBdCQAAABI"]
[Wed Mar 18 08:13:18.327387 2026] [:error] [pid 13716:tid 13721] [client 20.2.90.103:39050] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abnuHmWKzQVHkZkUHaRT7AAAAUM"]
[Wed Mar 18 11:54:58.714830 2026] [:error] [pid 31232:tid 31251] [client 43.135.134.127:47150] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aboiEmX6HV7dqh3BQD2fCwAAAFA"]
[Wed Mar 18 11:56:26.256186 2026] [:error] [pid 31232:tid 31251] [client 125.75.66.97:34626] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aboiamX6HV7dqh3BQD2f3AAAAFA"]
[Wed Mar 18 13:21:39.527348 2026] [:error] [pid 43009:tid 43019] [client 43.153.119.119:50000] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abo2Y38aUp4Sm6m3nmP7RwAAAQg"]
[Wed Mar 18 13:31:19.456255 2026] [:error] [pid 53755:tid 53762] [client 41.101.102.127:60784] [client 41.101.102.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.101.102.127, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abo4p6qw5ZSRshmIhWmGJgAAAUU"]
[Wed Mar 18 13:31:19.469974 2026] [proxy_fcgi:error] [pid 53755:tid 53762] [client 41.101.102.127:60784] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 13:35:38.683130 2026] [:error] [pid 31232:tid 31259] [client 86.99.106.111:64650] [client 86.99.106.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.99.106.111, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abo5qmX6HV7dqh3BQD3aZwAAAFg"]
[Wed Mar 18 13:35:38.694832 2026] [proxy_fcgi:error] [pid 31232:tid 31259] [client 86.99.106.111:64650] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 18:56:03.501383 2026] [:error] [pid 42871:tid 42922] [client 182.44.2.148:42124] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abqEw2PUS0lM1M9nUaJF4wAAAIg"]
[Wed Mar 18 19:12:39.104971 2026] [:error] [pid 53755:tid 53771] [client 43.159.145.153:60122] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abqIp6qw5ZSRshmIhWkH4gAAAU4"]
[Wed Mar 18 20:25:04.020629 2026] [:error] [pid 31232:tid 31256] [client 197.250.231.140:13352] [client 197.250.231.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.250.231.140, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abqZoGX6HV7dqh3BQD3w8wAAAFU"]
[Wed Mar 18 20:25:04.028071 2026] [proxy_fcgi:error] [pid 31232:tid 31256] [client 197.250.231.140:13352] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 21:45:06.635640 2026] [:error] [pid 42870:tid 42901] [client 172.245.102.4:49117] [client 172.245.102.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.245.102.4, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abqsYp6axlAooiuYyUxBKAAAABA"]
[Wed Mar 18 21:45:06.644826 2026] [proxy_fcgi:error] [pid 42870:tid 42901] [client 172.245.102.4:49117] AH01071: Got error 'Primary script unknown'
[Wed Mar 18 23:27:14.072196 2026] [:error] [pid 42871:tid 42923] [client 43.133.14.237:41124] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abrEUmPUS0lM1M9nUaKcswAAAIk"]
[Thu Mar 19 00:54:02.988518 2026] [:error] [pid 19431:tid 19508] [client 49.51.252.146:44406] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abrYqjioVgnJ_ZdBjctnbQAAAFY"]
[Thu Mar 19 01:11:41.665131 2026] [proxy_fcgi:error] [pid 19224:tid 19379] [client 20.48.234.9:42980] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:11:42.179549 2026] [:error] [pid 19224:tid 19380] [client 20.48.234.9:42980] [client 20.48.234.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.48.234.9, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abrczjxUIaHQ6Y3ff51T1wAAAco"]
[Thu Mar 19 01:11:42.541665 2026] [proxy_fcgi:error] [pid 19224:tid 19382] [client 20.48.234.9:42980] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:11:43.464982 2026] [proxy_fcgi:error] [pid 19224:tid 19374] [client 20.48.234.9:42980] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:11:44.104785 2026] [proxy_fcgi:error] [pid 19224:tid 19375] [client 20.48.234.9:42980] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 01:11:44.312976 2026] [:error] [pid 19224:tid 19387] [client 20.48.234.9:42980] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abrc0DxUIaHQ6Y3ff51T4gAAAdE"]
[Thu Mar 19 01:11:46.619216 2026] [:error] [pid 19431:tid 19499] [client 20.48.234.9:42956] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abrc0jioVgnJ_ZdBjctvkgAAAE4"]
[Thu Mar 19 01:11:48.182694 2026] [:error] [pid 19208:tid 19346] [client 20.48.234.9:42984] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "abrc1N4kPqt9Qws3poFTPAAAAIM"]
[Thu Mar 19 03:56:41.951337 2026] [:error] [pid 23988:tid 24004] [client 103.147.133.4:65447] [client 103.147.133.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.133.4, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "absDeWnlkSPXj2matr3NbQAAAM0"]
[Thu Mar 19 03:56:41.965162 2026] [proxy_fcgi:error] [pid 23988:tid 24004] [client 103.147.133.4:65447] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 06:31:03.933154 2026] [:error] [pid 3278:tid 3301] [client 31.171.130.10:61737] [client 31.171.130.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.10, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "absnpwC2T_lM6ZgvfcQ0nAAAARQ"]
[Thu Mar 19 06:31:03.938133 2026] [proxy_fcgi:error] [pid 3278:tid 3301] [client 31.171.130.10:61737] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 06:57:40.745604 2026] [proxy_fcgi:error] [pid 31735:tid 31741] [client 145.239.10.137:52529] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/mna.php
[Thu Mar 19 07:47:07.510565 2026] [:error] [pid 31447:tid 31476] [client 43.135.211.148:45452] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abs5exmVNRDSLnGvghhPJgAAAhU"]
[Thu Mar 19 07:51:34.160589 2026] [:error] [pid 23884:tid 23956] [client 159.69.124.159:48524] [client 159.69.124.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abs6hl6St-VCdOYnZMoEIQAAAIA"]
[Thu Mar 19 08:55:57.604518 2026] [:error] [pid 23884:tid 23976] [client 91.99.178.105:48268] [client 91.99.178.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abtJnV6St-VCdOYnZMoQTQAAAJQ"]
[Thu Mar 19 09:58:58.148385 2026] [proxy_fcgi:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:58:58.527294 2026] [proxy_fcgi:error] [pid 23882:tid 23919] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:58:58.834459 2026] [proxy_fcgi:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:58:59.124311 2026] [proxy_fcgi:error] [pid 23882:tid 23903] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:58:59.385326 2026] [proxy_fcgi:error] [pid 23882:tid 23918] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:58:59.698766 2026] [proxy_fcgi:error] [pid 23882:tid 23918] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:00.045340 2026] [proxy_fcgi:error] [pid 23882:tid 23905] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:00.382312 2026] [proxy_fcgi:error] [pid 23882:tid 23913] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:00.927972 2026] [proxy_fcgi:error] [pid 23882:tid 23902] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:01.266311 2026] [proxy_fcgi:error] [pid 23882:tid 23915] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:01.842302 2026] [proxy_fcgi:error] [pid 23882:tid 23918] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:02.110362 2026] [proxy_fcgi:error] [pid 23882:tid 23905] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:02.344310 2026] [proxy_fcgi:error] [pid 23882:tid 23902] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:02.659286 2026] [proxy_fcgi:error] [pid 23882:tid 23906] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:02.909526 2026] [proxy_fcgi:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:03.199369 2026] [proxy_fcgi:error] [pid 23882:tid 23909] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:03.534328 2026] [proxy_fcgi:error] [pid 23882:tid 23902] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:03.797302 2026] [proxy_fcgi:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:04.086324 2026] [proxy_fcgi:error] [pid 23882:tid 23913] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:04.670326 2026] [proxy_fcgi:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:04.987323 2026] [proxy_fcgi:error] [pid 23882:tid 23909] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:05.258281 2026] [proxy_fcgi:error] [pid 23882:tid 23903] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:05.519289 2026] [proxy_fcgi:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:05.830303 2026] [proxy_fcgi:error] [pid 23882:tid 23905] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:08.645367 2026] [proxy_fcgi:error] [pid 23882:tid 23905] [client 209.87.169.247:61593] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:08.900068 2026] [:error] [pid 23882:tid 23925] [client 209.87.169.247:61593] [client 209.87.169.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "abtYbLWnClbtbN12M78a5QAAABc"]
[Thu Mar 19 09:59:09.454346 2026] [proxy_fcgi:error] [pid 23882:tid 23904] [client 209.87.169.206:48313] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:09.733655 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.206:48313] [client 209.87.169.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "abtYbbWnClbtbN12M78a-wAAAAI"]
[Thu Mar 19 09:59:10.326334 2026] [proxy_fcgi:error] [pid 31735:tid 31749] [client 209.87.169.248:43061] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:10.586305 2026] [proxy_fcgi:error] [pid 31735:tid 31758] [client 209.87.169.248:43061] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:10.866301 2026] [proxy_fcgi:error] [pid 31735:tid 31751] [client 209.87.169.248:43061] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:11.155569 2026] [:error] [pid 31735:tid 31760] [client 209.87.169.248:43061] [client 209.87.169.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "abtYb3-gyQbRQWJYccw_owAAApU"]
[Thu Mar 19 09:59:11.725327 2026] [proxy_fcgi:error] [pid 31447:tid 31458] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:12.033292 2026] [proxy_fcgi:error] [pid 31447:tid 31458] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:12.322423 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:12.577882 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:12.871320 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:13.145293 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:13.427311 2026] [proxy_fcgi:error] [pid 31447:tid 31458] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:13.676309 2026] [proxy_fcgi:error] [pid 31447:tid 31458] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:13.938296 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:14.198395 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:14.470999 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:14.754325 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:14.997106 2026] [proxy_fcgi:error] [pid 31447:tid 31455] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:15.301583 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:15.618698 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:15.879304 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:16.130670 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:16.393293 2026] [proxy_fcgi:error] [pid 31447:tid 31471] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:16.656573 2026] [proxy_fcgi:error] [pid 31447:tid 31471] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:16.945358 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:17.188348 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:17.458305 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:17.755294 2026] [proxy_fcgi:error] [pid 31447:tid 31479] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:18.033290 2026] [proxy_fcgi:error] [pid 31447:tid 31469] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:18.330077 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:18.599569 2026] [proxy_fcgi:error] [pid 31447:tid 31455] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:18.856644 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:19.131664 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:19.456033 2026] [proxy_fcgi:error] [pid 31447:tid 31455] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:19.784300 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:20.074302 2026] [proxy_fcgi:error] [pid 31447:tid 31469] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:20.362301 2026] [proxy_fcgi:error] [pid 31447:tid 31456] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:20.651296 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:26.574318 2026] [proxy_fcgi:error] [pid 31447:tid 31463] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:26.806289 2026] [proxy_fcgi:error] [pid 31447:tid 31469] [client 209.87.169.236:64625] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:30.233410 2026] [proxy_fcgi:error] [pid 24925:tid 24945] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:30.975936 2026] [proxy_fcgi:error] [pid 24925:tid 24944] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:31.230327 2026] [proxy_fcgi:error] [pid 24925:tid 24937] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:31.646171 2026] [proxy_fcgi:error] [pid 24925:tid 24944] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:32.180487 2026] [proxy_fcgi:error] [pid 24925:tid 24944] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:34.830367 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:35.787502 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:36.379297 2026] [proxy_fcgi:error] [pid 24925:tid 24937] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:36.843289 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:37.300040 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:37.760293 2026] [proxy_fcgi:error] [pid 24925:tid 24930] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:38.215286 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:38.762008 2026] [proxy_fcgi:error] [pid 24925:tid 24930] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:39.372061 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:39.883508 2026] [proxy_fcgi:error] [pid 24925:tid 24932] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:40.341335 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:40.967441 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:41.472918 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:41.933314 2026] [proxy_fcgi:error] [pid 24925:tid 24947] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:42.495325 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:42.765014 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:43.040308 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:43.306328 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:43.572520 2026] [proxy_fcgi:error] [pid 24925:tid 24936] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:44.170314 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:44.441999 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:44.738302 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:45.008286 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:45.297321 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:45.569292 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:45.850201 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:46.120779 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:46.395287 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:46.633290 2026] [proxy_fcgi:error] [pid 24925:tid 24930] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:46.907876 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:47.181305 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:47.433070 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:47.735315 2026] [proxy_fcgi:error] [pid 24925:tid 24930] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:48.003337 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:48.345310 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:48.657317 2026] [proxy_fcgi:error] [pid 24925:tid 24942] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:48.952118 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:49.185308 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:49.479137 2026] [proxy_fcgi:error] [pid 24925:tid 24930] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:49.765304 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:50.020321 2026] [proxy_fcgi:error] [pid 24925:tid 24932] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:50.328304 2026] [proxy_fcgi:error] [pid 24925:tid 24942] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:50.587286 2026] [proxy_fcgi:error] [pid 24925:tid 24930] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:50.849313 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:51.130843 2026] [proxy_fcgi:error] [pid 24925:tid 24932] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:51.391726 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:51.669308 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:51.919361 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:52.169401 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:52.437926 2026] [proxy_fcgi:error] [pid 24925:tid 24942] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:52.722789 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:52.976649 2026] [proxy_fcgi:error] [pid 24925:tid 24936] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:53.242919 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:53.497113 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:54.733289 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:55.014289 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:55.272333 2026] [proxy_fcgi:error] [pid 24925:tid 24951] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:55.558380 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:55.809362 2026] [proxy_fcgi:error] [pid 24925:tid 24932] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:56.110589 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:56.419295 2026] [proxy_fcgi:error] [pid 24925:tid 24941] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:56.672326 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:56.936331 2026] [proxy_fcgi:error] [pid 24925:tid 24939] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:57.211557 2026] [proxy_fcgi:error] [pid 24925:tid 24952] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:57.477062 2026] [proxy_fcgi:error] [pid 24925:tid 24949] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:57.739115 2026] [proxy_fcgi:error] [pid 24925:tid 24942] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:58.035302 2026] [proxy_fcgi:error] [pid 24925:tid 24950] [client 209.87.169.209:21381] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:59.222305 2026] [proxy_fcgi:error] [pid 31313:tid 31365] [client 209.87.169.225:42099] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 09:59:59.487623 2026] [proxy_fcgi:error] [pid 31313:tid 31365] [client 209.87.169.225:42099] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:00:01.312350 2026] [proxy_fcgi:error] [pid 31735:tid 31748] [client 209.87.169.39:61203] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:00:02.431749 2026] [proxy_fcgi:error] [pid 31735:tid 31752] [client 209.87.169.39:61203] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:00:02.994922 2026] [proxy_fcgi:error] [pid 31735:tid 31747] [client 209.87.169.39:61203] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:00:03.539672 2026] [proxy_fcgi:error] [pid 31735:tid 31752] [client 209.87.169.39:61203] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:00:07.651870 2026] [:error] [pid 31735:tid 31748] [client 209.87.169.39:61203] [client 209.87.169.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abtYp3-gyQbRQWJYccxCjwAAAok"]
[Thu Mar 19 10:00:10.271333 2026] [:error] [pid 24925:tid 24929] [client 209.87.169.32:36533] [client 209.87.169.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abtYqvUZEHbnUgjEbWM_UQAAAYA"]
[Thu Mar 19 10:00:18.136626 2026] [:error] [pid 25044:tid 25051] [client 209.87.169.215:52117] [client 209.87.169.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "abtYstUUDKsY7wMywpozqQAAAsM"]
[Thu Mar 19 10:00:18.992382 2026] [:error] [pid 24971:tid 24976] [client 209.87.169.38:28005] [client 209.87.169.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "abtYsvUcWA7YXQC7dRvMfwAAAkE"]
[Thu Mar 19 10:00:23.709435 2026] [:error] [pid 23988:tid 23994] [client 209.87.169.75:23035] [client 209.87.169.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abtYt2nlkSPXj2matr0vcwAAAMM"]
[Thu Mar 19 10:00:24.221414 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.214:41797] [client 209.87.169.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abtYuA9HuAbqf2tZOychFwAAAcs"]
[Thu Mar 19 10:00:24.677525 2026] [:error] [pid 25269:tid 25290] [client 209.87.169.226:38339] [client 209.87.169.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abtYuMU9ntriqNcU-b6JzAAAA9I"]
[Thu Mar 19 10:00:25.140010 2026] [:error] [pid 23988:tid 24002] [client 209.87.169.54:45361] [client 209.87.169.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abtYuWnlkSPXj2matr0vhgAAAMs"]
[Thu Mar 19 10:00:25.604150 2026] [:error] [pid 23988:tid 24012] [client 209.87.169.72:44749] [client 209.87.169.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abtYuWnlkSPXj2matr0vjAAAANU"]
[Thu Mar 19 10:00:26.322667 2026] [:error] [pid 25135:tid 25151] [client 209.87.169.210:36415] [client 209.87.169.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abtYuqKtE0dzgMctjFWOegAAA04"]
[Thu Mar 19 10:00:27.058301 2026] [proxy_fcgi:error] [pid 24925:tid 24929] [client 209.87.169.44:60837] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 10:00:27.586635 2026] [:error] [pid 24925:tid 24943] [client 209.87.169.44:60837] [client 209.87.169.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abtYu_UZEHbnUgjEbWM_jQAAAY4"]
[Thu Mar 19 10:00:29.896240 2026] [:error] [pid 23884:tid 23967] [client 209.87.169.39:36821] [client 209.87.169.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abtYvV6St-VCdOYnZMolGAAAAIs"]
[Thu Mar 19 10:00:31.432135 2026] [:error] [pid 23883:tid 23947] [client 209.87.169.238:25441] [client 209.87.169.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abtYv9Ni-EnEAH4abz2TDQAAAFI"]
[Thu Mar 19 10:00:40.451866 2026] [:error] [pid 31735:tid 31742] [client 209.87.169.34:45363] [client 209.87.169.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abtYyH-gyQbRQWJYccxExQAAAoM"]
[Thu Mar 19 10:00:40.933768 2026] [:error] [pid 25044:tid 25071] [client 209.87.169.244:24103] [client 209.87.169.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abtYyNUUDKsY7wMywpo0PAAAAtc"]
[Thu Mar 19 10:00:42.092355 2026] [:error] [pid 25044:tid 25049] [client 209.87.169.244:31815] [client 209.87.169.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "abtYytUUDKsY7wMywpo0TAAAAsE"]
[Thu Mar 19 10:00:43.919000 2026] [:error] [pid 23883:tid 23949] [client 209.87.169.206:32173] [client 209.87.169.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "abtYy9Ni-EnEAH4abz2TmAAAAFQ"]
[Thu Mar 19 10:00:44.953279 2026] [:error] [pid 23988:tid 24000] [client 209.87.169.55:22181] [client 209.87.169.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abtYzGnlkSPXj2matr0wVQAAAMk"]
[Thu Mar 19 10:00:45.675411 2026] [:error] [pid 25269:tid 25279] [client 209.87.169.218:31845] [client 209.87.169.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abtYzcU9ntriqNcU-b6KmQAAA8c"]
[Thu Mar 19 10:00:46.478411 2026] [:error] [pid 23988:tid 24000] [client 209.87.169.58:57091] [client 209.87.169.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "abtYzmnlkSPXj2matr0wZAAAAMk"]
[Thu Mar 19 10:00:46.916708 2026] [:error] [pid 3278:tid 3300] [client 209.87.169.224:35615] [client 209.87.169.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "abtYzgC2T_lM6ZgvfcRSsQAAARM"]
[Thu Mar 19 10:00:48.289551 2026] [:error] [pid 23882:tid 23903] [client 209.87.169.56:36727] [client 209.87.169.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "abtY0LWnClbtbN12M78e7wAAAAE"]
[Thu Mar 19 10:00:48.812203 2026] [:error] [pid 31735:tid 31742] [client 209.87.169.236:38089] [client 209.87.169.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "abtY0H-gyQbRQWJYccxFVQAAAoM"]
[Thu Mar 19 10:00:49.308708 2026] [:error] [pid 3278:tid 3293] [client 209.87.169.31:55797] [client 209.87.169.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "abtY0QC2T_lM6ZgvfcRStgAAAQw"]
[Thu Mar 19 10:00:51.272876 2026] [:error] [pid 23884:tid 23960] [client 209.87.169.246:41297] [client 209.87.169.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "abtY016St-VCdOYnZMolaQAAAIQ"]
[Thu Mar 19 10:00:52.313172 2026] [:error] [pid 31205:tid 31229] [client 209.87.169.233:34071] [client 209.87.169.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.233, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abtY1Fu5gZKGrGz5P1FSFwAAAUw"]
[Thu Mar 19 10:00:54.950674 2026] [:error] [pid 25179:tid 25187] [client 209.87.169.67:41165] [client 209.87.169.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abtY1mFzmTtmuBLc_LZTngAAA4Y"]
[Thu Mar 19 10:00:55.712324 2026] [:error] [pid 25044:tid 25050] [client 209.87.169.235:43419] [client 209.87.169.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.235, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abtY19UUDKsY7wMywpo1AAAAAsI"]
[Thu Mar 19 10:00:56.194117 2026] [:error] [pid 25044:tid 25050] [client 209.87.169.235:43419] [client 209.87.169.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "abtY2NUUDKsY7wMywpo1BwAAAsI"]
[Thu Mar 19 10:00:58.199304 2026] [:error] [pid 31735:tid 31763] [client 209.87.169.238:59209] [client 209.87.169.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "abtY2n-gyQbRQWJYccxGLAAAApg"]
[Thu Mar 19 10:02:03.539213 2026] [:error] [pid 31735:tid 31748] [client 173.239.218.213:63321] [client 173.239.218.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.218.213, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abtZG3-gyQbRQWJYccxHRAAAAok"]
[Thu Mar 19 10:02:03.560307 2026] [proxy_fcgi:error] [pid 31735:tid 31748] [client 173.239.218.213:63321] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 12:24:54.471303 2026] [:error] [pid 23882:tid 23914] [client 49.51.183.220:49392] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abt6lrWnClbtbN12M7-BFwAAAAw"]
[Thu Mar 19 12:48:44.616512 2026] [:error] [pid 31205:tid 31239] [client 200.225.115.243:43796] [client 200.225.115.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.225.115.243, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abuALFu5gZKGrGz5P1Gl8wAAAVY"]
[Thu Mar 19 12:48:44.627827 2026] [proxy_fcgi:error] [pid 31205:tid 31239] [client 200.225.115.243:43796] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 12:54:11.252383 2026] [:error] [pid 23883:tid 23951] [client 154.16.49.101:5701] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abuBc9Ni-EnEAH4abz2wZAAAAFY"]
[Thu Mar 19 12:54:11.747832 2026] [:error] [pid 23882:tid 23907] [client 154.16.49.101:5890] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBc7WnClbtbN12M7-T_wAAAAU"]
[Thu Mar 19 12:54:12.243009 2026] [:error] [pid 25135:tid 25160] [client 154.16.49.101:6095] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/feed/"] [unique_id "abuBdKKtE0dzgMctjFXtQwAAA1c"]
[Thu Mar 19 14:48:45.447722 2026] [:error] [pid 11016:tid 11085] [client 49.234.192.248:42730] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abucTRPK94J9G19C6uX3UgAAAQw"]
[Thu Mar 19 15:39:11.412208 2026] [:error] [pid 11014:tid 11037] [client 216.45.61.243:55256] [client 216.45.61.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abuoHzBVizvrAl0DfCDduQAAAFI"], referer: https://www.google.com
[Thu Mar 19 17:38:37.683111 2026] [:error] [pid 11015:tid 11068] [client 49.43.218.240:53916] [client 49.43.218.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.218.240, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abvEHfPcMwFQZAVfzLRCWgAAAJY"]
[Thu Mar 19 17:38:37.694175 2026] [proxy_fcgi:error] [pid 11015:tid 11068] [client 49.43.218.240:53916] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 18:16:31.664920 2026] [:error] [pid 11110:tid 11131] [client 129.226.93.214:51938] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abvM_wSNPqGfikw7k8KVrwAAABA"]
[Thu Mar 19 22:14:04.644093 2026] [:error] [pid 1247:tid 1262] [client 45.131.195.25:65233] [client 45.131.195.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.25, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "abwErA5tmeOr-yI4XNED2gAAAc0"]
[Thu Mar 19 22:14:04.647356 2026] [proxy_fcgi:error] [pid 1247:tid 1262] [client 45.131.195.25:65233] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:31:19.930679 2026] [:error] [pid 1285:tid 1294] [client 223.185.34.197:30560] [client 223.185.34.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.34.197, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abwIt1E95r3zR75X1HpfOQAAAgc"]
[Thu Mar 19 22:31:19.942598 2026] [proxy_fcgi:error] [pid 1285:tid 1294] [client 223.185.34.197:30560] AH01071: Got error 'Primary script unknown'
[Thu Mar 19 22:31:40.730676 2026] [:error] [pid 1285:tid 1311] [client 119.73.101.11:47411] [client 119.73.101.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.101.11, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abwIzFE95r3zR75X1HpfbwAAAhg"]
[Thu Mar 19 22:31:40.744537 2026] [proxy_fcgi:error] [pid 1285:tid 1311] [client 119.73.101.11:47411] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.760437 2026] [proxy_fcgi:error] [pid 11258:tid 11270] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.780210 2026] [proxy_fcgi:error] [pid 11258:tid 11282] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.798478 2026] [proxy_fcgi:error] [pid 11258:tid 11278] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.817410 2026] [proxy_fcgi:error] [pid 11258:tid 11267] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.836817 2026] [proxy_fcgi:error] [pid 11258:tid 11261] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.904369 2026] [proxy_fcgi:error] [pid 11258:tid 11274] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.923982 2026] [proxy_fcgi:error] [pid 11258:tid 11264] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.941785 2026] [proxy_fcgi:error] [pid 11258:tid 11283] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.960962 2026] [proxy_fcgi:error] [pid 11258:tid 11272] [client 20.70.169.231:5234] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 01:44:31.976200 2026] [:error] [pid 11258:tid 11281] [client 20.70.169.231:5234] [client 20.70.169.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "abw1_5PHb95f6xzHJOciEAAAANU"]
[Fri Mar 20 01:44:32.066400 2026] [:error] [pid 46124:tid 46201] [client 20.70.169.231:2453] [client 20.70.169.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "abw2AEzMrlLOY6zyCjKB_QAAAFU"]
[Fri Mar 20 01:44:32.133846 2026] [:error] [pid 11258:tid 11280] [client 20.70.169.231:2485] [client 20.70.169.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "abw2AJPHb95f6xzHJOciEQAAANQ"]
[Fri Mar 20 01:44:32.226418 2026] [:error] [pid 46124:tid 46194] [client 20.70.169.231:2471] [client 20.70.169.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "abw2AEzMrlLOY6zyCjKB_wAAAE4"]
[Fri Mar 20 02:31:44.386697 2026] [:error] [pid 46124:tid 46183] [client 172.69.150.46:10107] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/index"] [unique_id "abxBEEzMrlLOY6zyCjKT_gAAAEM"]
[Fri Mar 20 02:31:44.386962 2026] [:error] [pid 46126:tid 46246] [client 172.69.150.254:11910] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/refs/heads/master"] [unique_id "abxBEKQ44YePbsZz3j7hdAAAARI"]
[Fri Mar 20 02:31:44.410357 2026] [:error] [pid 46124:tid 46188] [client 172.69.150.254:11918] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/logs/HEAD"] [unique_id "abxBEEzMrlLOY6zyCjKT_wAAAEg"]
[Fri Mar 20 02:31:44.424414 2026] [:error] [pid 46124:tid 46203] [client 172.69.151.2:11532] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/refs/heads/main"] [unique_id "abxBEEzMrlLOY6zyCjKUAAAAAFc"]
[Fri Mar 20 02:31:44.425320 2026] [:error] [pid 46126:tid 46248] [client 172.69.151.210:10854] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "abxBEKQ44YePbsZz3j7hdgAAARM"]
[Fri Mar 20 02:31:44.425365 2026] [:error] [pid 46126:tid 46256] [client 172.69.151.171:12354] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "abxBEKQ44YePbsZz3j7hdQAAARc"]
[Fri Mar 20 02:31:45.415395 2026] [:error] [pid 46126:tid 46231] [client 172.69.151.172:13211] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abxBEaQ44YePbsZz3j7heQAAAQo"]
[Fri Mar 20 02:31:45.425924 2026] [:error] [pid 46124:tid 46199] [client 172.69.151.171:12361] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "abxBEUzMrlLOY6zyCjKUBQAAAFM"]
[Fri Mar 20 02:31:45.432643 2026] [:error] [pid 46126:tid 46218] [client 172.69.151.2:11534] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "abxBEaQ44YePbsZz3j7hegAAAQQ"]
[Fri Mar 20 02:31:45.450841 2026] [:error] [pid 46126:tid 46214] [client 172.69.151.210:10859] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "abxBEaQ44YePbsZz3j7hewAAAQI"]
[Fri Mar 20 02:31:45.468325 2026] [:error] [pid 11258:tid 11275] [client 172.69.151.171:12362] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "abxBEZPHb95f6xzHJOc5YgAAAM8"]
[Fri Mar 20 02:31:45.470449 2026] [:error] [pid 46264:tid 46299] [client 172.69.150.47:13883] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "abxBEYp3TruHFmWOt5EKKQAAABA"]
[Fri Mar 20 02:31:46.437510 2026] [:error] [pid 11258:tid 11269] [client 172.69.150.46:10112] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "abxBEpPHb95f6xzHJOc5bAAAAMk"]
[Fri Mar 20 02:31:46.450766 2026] [:error] [pid 11258:tid 11265] [client 172.69.150.47:13890] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "abxBEpPHb95f6xzHJOc5bQAAAMU"]
[Fri Mar 20 02:31:46.455587 2026] [:error] [pid 11258:tid 11276] [client 172.69.150.254:11988] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "abxBEpPHb95f6xzHJOc5bgAAANA"]
[Fri Mar 20 02:31:46.492621 2026] [:error] [pid 11258:tid 11282] [client 172.69.150.46:10117] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.tmp"] [unique_id "abxBEpPHb95f6xzHJOc5bwAAANY"]
[Fri Mar 20 02:31:46.498119 2026] [:error] [pid 11258:tid 11262] [client 172.69.151.171:12363] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "abxBEpPHb95f6xzHJOc5cAAAAMI"]
[Fri Mar 20 02:31:46.498399 2026] [:error] [pid 11258:tid 11272] [client 172.69.150.254:11989] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "abxBEpPHb95f6xzHJOc5cQAAAMw"]
[Fri Mar 20 02:31:47.436857 2026] [:error] [pid 11258:tid 11279] [client 172.69.151.2:10675] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "abxBE5PHb95f6xzHJOc5dwAAANM"]
[Fri Mar 20 02:31:47.441929 2026] [:error] [pid 11258:tid 11280] [client 172.69.151.210:12082] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production.local"] [unique_id "abxBE5PHb95f6xzHJOc5eAAAANQ"]
[Fri Mar 20 02:31:47.455046 2026] [:error] [pid 11258:tid 11281] [client 172.69.151.171:12365] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development.local"] [unique_id "abxBE5PHb95f6xzHJOc5eQAAANU"]
[Fri Mar 20 02:31:47.501075 2026] [:error] [pid 11258:tid 11271] [client 172.69.151.2:10678] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env"] [unique_id "abxBE5PHb95f6xzHJOc5fAAAAMs"]
[Fri Mar 20 02:31:47.526105 2026] [:error] [pid 46264:tid 46284] [client 172.69.151.210:12086] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "abxBE4p3TruHFmWOt5EKLQAAAAE"]
[Fri Mar 20 02:31:47.531646 2026] [:error] [pid 46124:tid 46196] [client 172.69.150.254:11992] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "abxBE0zMrlLOY6zyCjKUBgAAAFA"]
[Fri Mar 20 02:31:48.437995 2026] [:error] [pid 11258:tid 11283] [client 172.69.151.171:12373] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "abxBFJPHb95f6xzHJOc5gQAAANc"]
[Fri Mar 20 02:31:48.452217 2026] [:error] [pid 11258:tid 11284] [client 172.69.151.172:13217] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "abxBFJPHb95f6xzHJOc5ggAAANg"]
[Fri Mar 20 02:31:48.470944 2026] [:error] [pid 46264:tid 46304] [client 172.69.150.47:13897] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/core/.env"] [unique_id "abxBFIp3TruHFmWOt5EKLwAAABU"]
[Fri Mar 20 02:31:48.515615 2026] [:error] [pid 46264:tid 46298] [client 172.69.150.47:13903] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "abxBFIp3TruHFmWOt5EKMAAAAA8"]
[Fri Mar 20 02:31:48.558062 2026] [:error] [pid 11258:tid 11270] [client 172.69.150.254:11996] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/private/.env"] [unique_id "abxBFJPHb95f6xzHJOc5hQAAAMo"]
[Fri Mar 20 02:31:48.777934 2026] [:error] [pid 46264:tid 46287] [client 172.69.150.47:13904] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "abxBFIp3TruHFmWOt5EKMgAAAAQ"]
[Fri Mar 20 02:31:49.432657 2026] [:error] [pid 11258:tid 11268] [client 172.69.150.47:13912] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env.local"] [unique_id "abxBFZPHb95f6xzHJOc5iwAAAMg"]
[Fri Mar 20 02:31:49.453594 2026] [:error] [pid 46264:tid 46306] [client 172.69.151.209:13867] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.php"] [unique_id "abxBFYp3TruHFmWOt5EKNQAAABc"]
[Fri Mar 20 02:31:49.515177 2026] [:error] [pid 11258:tid 11278] [client 172.69.150.254:12001] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.json"] [unique_id "abxBFZPHb95f6xzHJOc5jAAAANI"]
[Fri Mar 20 02:31:49.538696 2026] [:error] [pid 46264:tid 46290] [client 172.69.150.46:10122] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_backup"] [unique_id "abxBFYp3TruHFmWOt5EKNgAAAAc"]
[Fri Mar 20 02:31:49.580991 2026] [:error] [pid 11258:tid 11260] [client 172.69.151.210:12089] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env1"] [unique_id "abxBFZPHb95f6xzHJOc5jgAAAMA"]
[Fri Mar 20 02:31:49.780764 2026] [:error] [pid 46264:tid 46292] [client 172.69.150.47:13914] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env2"] [unique_id "abxBFYp3TruHFmWOt5EKOAAAAAk"]
[Fri Mar 20 02:31:50.440713 2026] [:error] [pid 46264:tid 46300] [client 172.69.150.46:10126] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "abxBFop3TruHFmWOt5EKPAAAABE"]
[Fri Mar 20 02:31:50.468246 2026] [:error] [pid 46264:tid 46307] [client 172.69.150.254:12003] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.envrc"] [unique_id "abxBFop3TruHFmWOt5EKPQAAABg"]
[Fri Mar 20 02:31:50.542566 2026] [:error] [pid 46264:tid 46299] [client 172.69.151.172:13225] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.orig"] [unique_id "abxBFop3TruHFmWOt5EKPgAAABA"]
[Fri Mar 20 02:31:50.577518 2026] [:error] [pid 46126:tid 46250] [client 172.69.150.254:12009] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production.bak"] [unique_id "abxBFqQ44YePbsZz3j7hfQAAARQ"]
[Fri Mar 20 02:31:50.580902 2026] [:error] [pid 11258:tid 11262] [client 172.69.151.2:10685] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "abxBFpPHb95f6xzHJOc5jwAAAMI"]
[Fri Mar 20 02:31:50.796945 2026] [:error] [pid 11258:tid 11272] [client 172.69.151.171:12379] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev.local"] [unique_id "abxBFpPHb95f6xzHJOc5kQAAAMw"]
[Fri Mar 20 02:31:51.457397 2026] [:error] [pid 46126:tid 46248] [client 172.69.151.172:13227] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.docker"] [unique_id "abxBF6Q44YePbsZz3j7hfgAAARM"]
[Fri Mar 20 02:31:51.476359 2026] [:error] [pid 46125:tid 46243] [client 172.69.150.46:10127] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.container"] [unique_id "abxBF2gN4lI6NHeckY5tHAAAAJE"]
[Fri Mar 20 02:31:51.557194 2026] [:error] [pid 11258:tid 11261] [client 172.69.151.171:12386] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/docker/.env"] [unique_id "abxBF5PHb95f6xzHJOc5lgAAAME"]
[Fri Mar 20 02:31:51.573519 2026] [:error] [pid 11258:tid 11273] [client 172.69.151.172:13229] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/docker/.env.local"] [unique_id "abxBF5PHb95f6xzHJOc5lwAAAM0"]
[Fri Mar 20 02:31:51.829354 2026] [:error] [pid 11258:tid 11274] [client 172.69.150.46:10134] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/server/.env"] [unique_id "abxBF5PHb95f6xzHJOc5mQAAAM4"]
[Fri Mar 20 02:31:52.452797 2026] [:error] [pid 11258:tid 11280] [client 172.69.151.210:12097] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/srv/.env"] [unique_id "abxBGJPHb95f6xzHJOc5ngAAANQ"]
[Fri Mar 20 02:31:52.503826 2026] [:error] [pid 46125:tid 46225] [client 172.69.150.46:10139] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/web/.env"] [unique_id "abxBGGgN4lI6NHeckY5tHgAAAIg"]
[Fri Mar 20 02:31:52.575945 2026] [:error] [pid 46264:tid 46292] [client 172.69.151.209:13869] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/www/.env"] [unique_id "abxBGIp3TruHFmWOt5EKRQAAAAk"]
[Fri Mar 20 02:31:52.586991 2026] [:error] [pid 46264:tid 46285] [client 172.69.150.46:13978] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/site/.env"] [unique_id "abxBGIp3TruHFmWOt5EKRgAAAAI"]
[Fri Mar 20 02:31:52.640920 2026] [:error] [pid 11258:tid 11266] [client 172.69.151.2:10688] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/var/www/.env"] [unique_id "abxBGJPHb95f6xzHJOc5oQAAAMY"]
[Fri Mar 20 02:31:52.703557 2026] [:error] [pid 11258:tid 11282] [client 172.69.150.46:10129] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/home/.env"] [unique_id "abxBGJPHb95f6xzHJOc5ogAAANY"]
[Fri Mar 20 02:31:52.831323 2026] [:error] [pid 11258:tid 11278] [client 172.69.151.172:13232] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/var/www/html/.env"] [unique_id "abxBGJPHb95f6xzHJOc5owAAANI"]
[Fri Mar 20 02:31:53.337243 2026] [:error] [pid 46264:tid 46297] [client 172.69.151.209:13855] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "abxBGYp3TruHFmWOt5EKTAAAAA4"]
[Fri Mar 20 02:31:53.522547 2026] [:error] [pid 11258:tid 11260] [client 172.69.151.210:12100] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/root/.env"] [unique_id "abxBGZPHb95f6xzHJOc5pgAAAMA"]
[Fri Mar 20 02:31:53.608602 2026] [:error] [pid 46264:tid 46307] [client 172.69.150.47:13720] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_config"] [unique_id "abxBGYp3TruHFmWOt5EKTwAAABg"]
[Fri Mar 20 02:31:53.613050 2026] [:error] [pid 46264:tid 46299] [client 172.69.151.210:12107] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_secret"] [unique_id "abxBGYp3TruHFmWOt5EKUAAAABA"]
[Fri Mar 20 02:31:53.678402 2026] [:error] [pid 46264:tid 46289] [client 172.69.150.47:13724] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_settings"] [unique_id "abxBGYp3TruHFmWOt5EKUQAAAAY"]
[Fri Mar 20 02:31:53.707466 2026] [:error] [pid 46264:tid 46298] [client 172.69.151.172:13238] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local.backup"] [unique_id "abxBGYp3TruHFmWOt5EKUgAAAA8"]
[Fri Mar 20 02:31:53.852044 2026] [:error] [pid 46264:tid 46302] [client 172.69.151.2:12784] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "abxBGYp3TruHFmWOt5EKVAAAABM"]
[Fri Mar 20 02:31:54.034857 2026] [:error] [pid 46126:tid 46222] [client 172.69.150.46:9828] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/index"] [unique_id "abxBGqQ44YePbsZz3j7hgQAAAQY"]
[Fri Mar 20 02:31:54.119651 2026] [:error] [pid 46124:tid 46188] [client 172.69.151.172:10707] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/logs/HEAD"] [unique_id "abxBGkzMrlLOY6zyCjKUCAAAAEg"]
[Fri Mar 20 02:31:54.124397 2026] [:error] [pid 46124:tid 46203] [client 172.69.151.2:12787] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/refs/heads/master"] [unique_id "abxBGkzMrlLOY6zyCjKUCQAAAFc"]
[Fri Mar 20 02:31:54.198599 2026] [:error] [pid 46124:tid 46180] [client 172.69.150.254:9740] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/refs/heads/main"] [unique_id "abxBGkzMrlLOY6zyCjKUCgAAAEA"]
[Fri Mar 20 02:31:54.211989 2026] [:error] [pid 46124:tid 46201] [client 172.69.151.210:10472] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "abxBGkzMrlLOY6zyCjKUCwAAAFU"]
[Fri Mar 20 02:31:54.358074 2026] [:error] [pid 46126:tid 46257] [client 172.69.151.2:12788] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "abxBGqQ44YePbsZz3j7hggAAARg"]
[Fri Mar 20 02:31:54.549319 2026] [:error] [pid 11258:tid 11265] [client 172.69.150.46:9831] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "abxBGpPHb95f6xzHJOc5qQAAAMU"]
[Fri Mar 20 02:31:54.626691 2026] [:error] [pid 46264:tid 46297] [client 172.69.151.171:13052] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "abxBGop3TruHFmWOt5EKWAAAAA4"]
[Fri Mar 20 02:31:54.627029 2026] [:error] [pid 46264:tid 46291] [client 172.69.150.46:9838] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "abxBGop3TruHFmWOt5EKWQAAAAg"]
[Fri Mar 20 02:31:54.712045 2026] [:error] [pid 46125:tid 46217] [client 172.69.151.172:10708] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "abxBGmgN4lI6NHeckY5tIAAAAIQ"]
[Fri Mar 20 02:31:54.729682 2026] [:error] [pid 46126:tid 46235] [client 172.69.150.46:9839] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "abxBGqQ44YePbsZz3j7hhAAAAQw"]
[Fri Mar 20 02:31:54.866928 2026] [:error] [pid 46264:tid 46296] [client 172.69.151.171:13059] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "abxBGop3TruHFmWOt5EKWwAAAA0"]
[Fri Mar 20 02:31:55.053397 2026] [:error] [pid 46264:tid 46289] [client 172.69.151.2:12794] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "abxBG4p3TruHFmWOt5EKXAAAAAY"]
[Fri Mar 20 02:31:55.134319 2026] [:error] [pid 46264:tid 46293] [client 172.69.151.209:13856] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "abxBG4p3TruHFmWOt5EKXgAAAAo"]
[Fri Mar 20 02:31:55.138560 2026] [:error] [pid 46264:tid 46287] [client 172.69.151.171:13064] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "abxBG4p3TruHFmWOt5EKXwAAAAQ"]
[Fri Mar 20 02:31:55.231413 2026] [:error] [pid 46264:tid 46284] [client 172.69.150.47:9986] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.tmp"] [unique_id "abxBG4p3TruHFmWOt5EKYQAAAAE"]
[Fri Mar 20 02:31:55.249815 2026] [:error] [pid 46264:tid 46295] [client 172.69.150.46:9846] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "abxBG4p3TruHFmWOt5EKYgAAAAw"]
[Fri Mar 20 02:31:55.371871 2026] [:error] [pid 46264:tid 46294] [client 172.69.150.46:9848] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production.local"] [unique_id "abxBG4p3TruHFmWOt5EKYwAAAAs"]
[Fri Mar 20 02:31:55.553558 2026] [:error] [pid 46125:tid 46229] [client 172.69.150.47:9992] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development.local"] [unique_id "abxBG2gN4lI6NHeckY5tIQAAAIo"]
[Fri Mar 20 02:31:55.650631 2026] [:error] [pid 46125:tid 46249] [client 172.69.151.172:10714] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env"] [unique_id "abxBG2gN4lI6NHeckY5tIgAAAJQ"]
[Fri Mar 20 02:31:55.662331 2026] [:error] [pid 46264:tid 46307] [client 172.69.150.46:9855] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "abxBG4p3TruHFmWOt5EKZwAAABg"]
[Fri Mar 20 02:31:55.761038 2026] [:error] [pid 46125:tid 46215] [client 172.69.151.209:12110] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "abxBG2gN4lI6NHeckY5tIwAAAIM"]
[Fri Mar 20 02:31:55.769090 2026] [:error] [pid 11258:tid 11261] [client 172.69.150.254:13477] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "abxBG5PHb95f6xzHJOc5qwAAAME"]
[Fri Mar 20 02:31:55.873534 2026] [:error] [pid 46125:tid 46245] [client 172.69.151.2:14217] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "abxBG2gN4lI6NHeckY5tJAAAAJI"]
[Fri Mar 20 02:31:56.063515 2026] [:error] [pid 11258:tid 11266] [client 172.69.150.254:13478] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/core/.env"] [unique_id "abxBHJPHb95f6xzHJOc5rgAAAMY"]
[Fri Mar 20 02:31:56.167632 2026] [:error] [pid 11258:tid 11273] [client 172.69.151.171:13065] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "abxBHJPHb95f6xzHJOc5rwAAAM0"]
[Fri Mar 20 02:31:56.180217 2026] [:error] [pid 11258:tid 11283] [client 172.69.151.209:12115] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/private/.env"] [unique_id "abxBHJPHb95f6xzHJOc5sAAAANc"]
[Fri Mar 20 02:31:56.281269 2026] [:error] [pid 11258:tid 11282] [client 172.69.150.254:13481] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/config/.env.local"] [unique_id "abxBHJPHb95f6xzHJOc5sQAAANY"]
[Fri Mar 20 02:31:56.381033 2026] [:error] [pid 11258:tid 11274] [client 172.69.151.171:13066] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.php"] [unique_id "abxBHJPHb95f6xzHJOc5tAAAAM4"]
[Fri Mar 20 02:31:56.571274 2026] [:error] [pid 11258:tid 11270] [client 172.69.150.47:9994] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.json"] [unique_id "abxBHJPHb95f6xzHJOc5twAAAMo"]
[Fri Mar 20 02:31:56.678134 2026] [:error] [pid 11258:tid 11273] [client 172.69.151.2:14223] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_backup"] [unique_id "abxBHJPHb95f6xzHJOc5uAAAAM0"]
[Fri Mar 20 02:31:56.697551 2026] [:error] [pid 11258:tid 11283] [client 172.69.151.209:12116] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "abxBHJPHb95f6xzHJOc5uQAAANc"]
[Fri Mar 20 02:31:56.779903 2026] [:error] [pid 46264:tid 46294] [client 172.69.151.2:14224] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env1"] [unique_id "abxBHIp3TruHFmWOt5EKagAAAAs"]
[Fri Mar 20 02:31:56.792901 2026] [:error] [pid 46264:tid 46306] [client 172.69.151.2:14230] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env2"] [unique_id "abxBHIp3TruHFmWOt5EKawAAABc"]
[Fri Mar 20 02:31:56.892587 2026] [:error] [pid 11258:tid 11274] [client 172.69.150.46:9858] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "abxBHJPHb95f6xzHJOc5ugAAAM4"]
[Fri Mar 20 02:31:57.070826 2026] [:error] [pid 11258:tid 11276] [client 172.69.151.2:14234] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.envrc"] [unique_id "abxBHZPHb95f6xzHJOc5vAAAANA"]
[Fri Mar 20 02:31:57.190615 2026] [:error] [pid 46126:tid 46232] [client 172.69.151.171:13070] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.orig"] [unique_id "abxBHaQ44YePbsZz3j7hhQAAAQs"]
[Fri Mar 20 02:31:57.220443 2026] [:error] [pid 46125:tid 46234] [client 172.69.150.47:9999] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production.bak"] [unique_id "abxBHWgN4lI6NHeckY5tJgAAAI0"]
[Fri Mar 20 02:31:57.287289 2026] [:error] [pid 11258:tid 11264] [client 172.69.150.254:13482] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "abxBHZPHb95f6xzHJOc5vwAAAMQ"]
[Fri Mar 20 02:31:57.292143 2026] [:error] [pid 46126:tid 46240] [client 172.69.150.46:9860] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev.local"] [unique_id "abxBHaQ44YePbsZz3j7hhgAAAQ8"]
[Fri Mar 20 02:31:57.407063 2026] [:error] [pid 46124:tid 46185] [client 172.69.150.46:9868] [client 172.69.150.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.docker"] [unique_id "abxBHUzMrlLOY6zyCjKUEAAAAEU"]
[Fri Mar 20 02:31:57.583397 2026] [:error] [pid 46264:tid 46291] [client 172.69.151.2:14242] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.container"] [unique_id "abxBHYp3TruHFmWOt5EKbQAAAAg"]
[Fri Mar 20 02:31:57.713963 2026] [:error] [pid 46264:tid 46304] [client 172.69.150.254:13487] [client 172.69.150.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/docker/.env"] [unique_id "abxBHYp3TruHFmWOt5EKbgAAABU"]
[Fri Mar 20 02:31:57.747886 2026] [:error] [pid 11258:tid 11282] [client 172.69.151.210:12440] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/web/.env"] [unique_id "abxBHZPHb95f6xzHJOc5xAAAANY"]
[Fri Mar 20 02:31:57.791296 2026] [:error] [pid 46264:tid 46300] [client 172.69.151.209:12118] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/docker/.env.local"] [unique_id "abxBHYp3TruHFmWOt5EKbwAAABE"]
[Fri Mar 20 02:31:57.793006 2026] [:error] [pid 46264:tid 46296] [client 172.69.151.209:12124] [client 172.69.151.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/server/.env"] [unique_id "abxBHYp3TruHFmWOt5EKcAAAAA0"]
[Fri Mar 20 02:31:57.919725 2026] [:error] [pid 46264:tid 46305] [client 172.69.151.2:14244] [client 172.69.151.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/srv/.env"] [unique_id "abxBHYp3TruHFmWOt5EKcgAAABY"]
[Fri Mar 20 02:31:58.098729 2026] [:error] [pid 46126:tid 46254] [client 172.69.151.171:13074] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/site/.env"] [unique_id "abxBHqQ44YePbsZz3j7hiQAAARY"]
[Fri Mar 20 02:31:58.230845 2026] [:error] [pid 46124:tid 46196] [client 172.69.151.171:13079] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/www/.env"] [unique_id "abxBHkzMrlLOY6zyCjKUEQAAAFA"]
[Fri Mar 20 02:31:58.274891 2026] [:error] [pid 11258:tid 11261] [client 172.69.151.210:12446] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/var/www/.env"] [unique_id "abxBHpPHb95f6xzHJOc5xQAAAME"]
[Fri Mar 20 02:31:58.305608 2026] [:error] [pid 46126:tid 46248] [client 172.69.151.210:12451] [client 172.69.151.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/home/.env"] [unique_id "abxBHqQ44YePbsZz3j7higAAARM"]
[Fri Mar 20 02:31:58.308603 2026] [:error] [pid 46124:tid 46192] [client 172.69.151.172:10722] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/var/www/html/.env"] [unique_id "abxBHkzMrlLOY6zyCjKUEgAAAEw"]
[Fri Mar 20 02:31:58.424076 2026] [:error] [pid 46264:tid 46286] [client 172.69.151.172:10726] [client 172.69.151.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/root/.env"] [unique_id "abxBHop3TruHFmWOt5EKdgAAAAM"]
[Fri Mar 20 02:31:58.617768 2026] [:error] [pid 46125:tid 46221] [client 172.69.151.171:13082] [client 172.69.151.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_config"] [unique_id "abxBHmgN4lI6NHeckY5tKAAAAIY"]
[Fri Mar 20 02:31:58.757714 2026] [:error] [pid 46264:tid 46306] [client 172.69.150.47:10004] [client 172.69.150.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_secret"] [unique_id "abxBHop3TruHFmWOt5EKdwAAABc"]
[Fri Mar 20 04:49:57.841862 2026] [:error] [pid 58230:tid 58240] [client 221.229.106.25:33206] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abxhdfeBObYxbmHTzfqsYgAAAMc"]
[Fri Mar 20 04:58:27.831462 2026] [:error] [pid 58127:tid 58199] [client 202.47.63.29:43618] [client 202.47.63.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.63.29, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "abxjc7Q_HbYy8C6I_EHlHwAAAIA"]
[Fri Mar 20 04:58:27.843300 2026] [proxy_fcgi:error] [pid 58127:tid 58199] [client 202.47.63.29:43618] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 06:18:17.897102 2026] [:error] [pid 55299:tid 55321] [client 43.153.204.189:53210] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "abx2KfoGhbNgkNIkZwlr-wAAAhA"]
[Fri Mar 20 07:23:39.753751 2026] [autoindex:error] [pid 43163:tid 43188] [client 92.63.102.213:56886] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Fri Mar 20 07:28:51.842961 2026] [:error] [pid 55206:tid 55214] [client 43.130.100.35:56124] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abyGs3Uc_Wl5viVmsDwqSQAAAUY"]
[Fri Mar 20 13:37:08.908035 2026] [:error] [pid 49080:tid 49095] [client 43.164.196.57:60830] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "abzdBIk5CHi4V0A3tthOKAAAAEk"]
[Fri Mar 20 13:47:05.260655 2026] [autoindex:error] [pid 49080:tid 49106] [client 62.171.191.117:53765] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 18:38:31.592503 2026] [:error] [pid 49081:tid 49130] [client 43.166.1.243:43630] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab0jpxo1LBAUhfhYPR1kkAAAAQ8"]
[Fri Mar 20 18:41:12.662678 2026] [:error] [pid 49081:tid 49126] [client 39.52.102.95:51783] [client 39.52.102.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.52.102.95, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ab0kSBo1LBAUhfhYPR1mpgAAAQs"]
[Fri Mar 20 18:41:12.674798 2026] [proxy_fcgi:error] [pid 49081:tid 49126] [client 39.52.102.95:51783] AH01071: Got error 'Primary script unknown'
[Fri Mar 20 20:13:29.298564 2026] [:error] [pid 49082:tid 49149] [client 216.24.212.44:32691] [client 216.24.212.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.44, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "ab056apllYJI1LUIdL-4NwAAAUc"]
[Fri Mar 20 20:13:29.303074 2026] [proxy_fcgi:error] [pid 49082:tid 49149] [client 216.24.212.44:32691] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 00:21:56.075305 2026] [:error] [pid 62480:tid 62557] [client 43.153.58.28:51896] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab10JLq1lu6xCJtkVarRFQAAAVM"]
[Sat Mar 21 02:12:12.193997 2026] [:error] [pid 62754:tid 62819] [client 203.2.64.59:60052] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab2N_BwXN_jHGJ5L7yF-uwAAAAQ"]
[Sat Mar 21 08:58:47.058364 2026] [:error] [pid 42886:tid 42910] [client 125.94.144.102:36388] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ab3tR1452dC6nbNWav3sUgAAAxY"]
[Sat Mar 21 12:07:49.846335 2026] [:error] [pid 43052:tid 43067] [client 103.163.245.234:59537] [client 103.163.245.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.245.234, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ab4ZlV5fjm-AiInC1hI7dwAAA40"]
[Sat Mar 21 12:07:49.856530 2026] [proxy_fcgi:error] [pid 43052:tid 43067] [client 103.163.245.234:59537] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 12:41:59.792478 2026] [autoindex:error] [pid 1489:tid 1516] [client 92.63.102.213:56286] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sat Mar 21 13:29:21.717541 2026] [:error] [pid 43052:tid 43067] [client 43.130.53.252:49168] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ab4ssV5fjm-AiInC1hJi8wAAA40"]
[Sat Mar 21 16:39:36.901255 2026] [:error] [pid 43052:tid 43067] [client 45.239.238.105:39473] [client 45.239.238.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.239.238.105, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ab5ZSF5fjm-AiInC1hLAMQAAA40"]
[Sat Mar 21 16:39:36.912287 2026] [proxy_fcgi:error] [pid 43052:tid 43067] [client 45.239.238.105:39473] AH01071: Got error 'Primary script unknown'
[Sat Mar 21 18:24:15.942712 2026] [:error] [pid 33584:tid 33588] [client 43.133.139.6:54672] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab5xz-ATEQBBo5z2HkmKMQAAAcI"]
[Sat Mar 21 23:35:29.495621 2026] [:error] [pid 33456:tid 33481] [client 49.7.227.204:46242] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ab66wQ-0Ziq_OzjHFfU-9QAAAZc"]
[Sun Mar 22 01:58:51.233187 2026] [:error] [pid 40780:tid 40954] [client 170.106.152.218:60208] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ab7cWyZDsmYIjKpJe4NfvwAAAAc"]
[Sun Mar 22 02:04:52.318561 2026] [proxy_fcgi:error] [pid 40780:tid 40960] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:52.528290 2026] [proxy_fcgi:error] [pid 40780:tid 40968] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:52.737435 2026] [proxy_fcgi:error] [pid 40780:tid 40972] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:52.947519 2026] [proxy_fcgi:error] [pid 40780:tid 40956] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:53.157845 2026] [proxy_fcgi:error] [pid 40780:tid 40963] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:54.795023 2026] [proxy_fcgi:error] [pid 40780:tid 40966] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:55.004324 2026] [proxy_fcgi:error] [pid 40780:tid 40955] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:55.425642 2026] [proxy_fcgi:error] [pid 40780:tid 40962] [client 52.138.39.105:52305] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 02:04:55.841487 2026] [:error] [pid 40780:tid 40961] [client 52.138.39.105:52305] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7dxyZDsmYIjKpJe4NipgAAAA0"]
[Sun Mar 22 02:04:56.679518 2026] [:error] [pid 40780:tid 40954] [client 52.138.39.105:24153] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7dyCZDsmYIjKpJe4NiqQAAAAc"]
[Sun Mar 22 02:04:57.511639 2026] [:error] [pid 40781:tid 41018] [client 52.138.39.105:22004] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7dyTJQuCgg1YvEGBLtfQAAAEw"]
[Sun Mar 22 02:04:58.339001 2026] [:error] [pid 40780:tid 40966] [client 52.138.39.105:21993] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab7dyiZDsmYIjKpJe4NirgAAABI"]
[Sun Mar 22 06:34:23.528861 2026] [:error] [pid 40039:tid 40047] [client 182.44.67.97:34738] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab8c7x3aDgUJfBYishkTFwAAAQY"]
[Sun Mar 22 08:45:34.608991 2026] [:error] [pid 51361:tid 51383] [client 150.109.230.210:35128] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab87rhXYUsdvKC9YWpVQcwAAAAw"]
[Sun Mar 22 10:47:04.850227 2026] [:error] [pid 40039:tid 40051] [client 101.33.66.34:57818] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ab9YKB3aDgUJfBYishm5PgAAAQo"]
[Sun Mar 22 12:08:32.559333 2026] [:error] [pid 51363:tid 51436] [client 72.56.50.247:18723] [client 72.56.50.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.56.50.247, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ab9rQFwa9x6OCTRkhl3IcAAAAIc"]
[Sun Mar 22 12:08:32.570184 2026] [proxy_fcgi:error] [pid 51363:tid 51436] [client 72.56.50.247:18723] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 13:24:32.336317 2026] [:error] [pid 51468:tid 51498] [client 122.51.236.174:34286] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ab99EE2TppSvA8W5CBRpVQAAANY"]
[Sun Mar 22 16:01:39.343919 2026] [:error] [pid 51362:tid 51416] [client 43.155.140.157:33760] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab-h48OwPm3DXzTDjUdKVQAAAE8"]
[Sun Mar 22 19:36:29.613962 2026] [:error] [pid 51468:tid 51483] [client 177.181.7.177:15660] [client 177.181.7.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.181.7.177, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ab_UPU2TppSvA8W5CBRH3gAAAMc"]
[Sun Mar 22 19:36:29.622585 2026] [proxy_fcgi:error] [pid 51468:tid 51483] [client 177.181.7.177:15660] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:10.367297 2026] [proxy_fcgi:error] [pid 51362:tid 51414] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:10.646349 2026] [proxy_fcgi:error] [pid 51362:tid 51421] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:11.030712 2026] [proxy_fcgi:error] [pid 51362:tid 51412] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:11.371976 2026] [proxy_fcgi:error] [pid 51362:tid 51405] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:11.612336 2026] [proxy_fcgi:error] [pid 51362:tid 51411] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:11.889791 2026] [proxy_fcgi:error] [pid 51362:tid 51424] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:12.178866 2026] [proxy_fcgi:error] [pid 51362:tid 51415] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:13.191979 2026] [proxy_fcgi:error] [pid 51362:tid 51402] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:13.438435 2026] [proxy_fcgi:error] [pid 51362:tid 51413] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:13.940886 2026] [proxy_fcgi:error] [pid 51362:tid 51418] [client 40.89.156.15:27823] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:30:14.176500 2026] [:error] [pid 51362:tid 51419] [client 40.89.156.15:27823] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyiiz.php"] [unique_id "ab_g1sOwPm3DXzTDjUfDpAAAAFI"]
[Sun Mar 22 20:30:15.923771 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:55981] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyiiz.php"] [unique_id "ab_g1xXYUsdvKC9YWpXkcQAAAAc"]
[Sun Mar 22 20:30:17.129077 2026] [:error] [pid 51361:tid 51391] [client 40.89.156.15:39929] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyiiz.php"] [unique_id "ab_g2RXYUsdvKC9YWpXkdwAAABM"]
[Sun Mar 22 20:30:19.250801 2026] [:error] [pid 51468:tid 51478] [client 40.89.156.15:38607] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyiiz.php"] [unique_id "ab_g202TppSvA8W5CBRW4gAAAMI"]
[Sun Mar 22 20:30:20.229854 2026] [:error] [pid 51468:tid 51495] [client 40.89.156.15:38625] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ab_g3E2TppSvA8W5CBRW4wAAANM"]
[Sun Mar 22 20:30:21.112391 2026] [:error] [pid 30166:tid 30200] [client 40.89.156.15:27831] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ab_g3bm4_26jKMD0zy3wfAAAAVc"]
[Sun Mar 22 20:30:22.053639 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:38612] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ab_g3k2TppSvA8W5CBRW5wAAANI"]
[Sun Mar 22 20:30:23.065493 2026] [:error] [pid 51468:tid 51476] [client 40.89.156.15:60404] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ab_g302TppSvA8W5CBRW6wAAAMA"]
[Sun Mar 22 20:30:24.404749 2026] [:error] [pid 51468:tid 51490] [client 40.89.156.15:52143] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bywaf.php"] [unique_id "ab_g4E2TppSvA8W5CBRW7AAAAM4"]
[Sun Mar 22 20:30:25.392447 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:46427] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bywaf.php"] [unique_id "ab_g4U2TppSvA8W5CBRW7wAAANc"]
[Sun Mar 22 20:30:26.634817 2026] [:error] [pid 51361:tid 51384] [client 40.89.156.15:28321] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bywaf.php"] [unique_id "ab_g4hXYUsdvKC9YWpXkgwAAAA0"]
[Sun Mar 22 20:30:27.494651 2026] [:error] [pid 51361:tid 51392] [client 40.89.156.15:61808] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bywaf.php"] [unique_id "ab_g4xXYUsdvKC9YWpXkiAAAABQ"]
[Sun Mar 22 20:30:28.198340 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:60413] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_g5Fwa9x6OCTRkhl27FAAAAIw"]
[Sun Mar 22 20:30:28.981012 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:34940] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_g5MOwPm3DXzTDjUfDtQAAAE0"]
[Sun Mar 22 20:30:30.075497 2026] [:error] [pid 51363:tid 51436] [client 40.89.156.15:26359] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_g5lwa9x6OCTRkhl27FQAAAIc"]
[Sun Mar 22 20:30:31.036540 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:28292] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ab_g5xXYUsdvKC9YWpXkjwAAAAc"]
[Sun Mar 22 20:30:33.126787 2026] [:error] [pid 30166:tid 30173] [client 40.89.156.15:34933] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ab_g6bm4_26jKMD0zy3wiwAAAUI"]
[Sun Mar 22 20:30:33.980716 2026] [:error] [pid 30166:tid 30171] [client 40.89.156.15:60359] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ab_g6bm4_26jKMD0zy3wkQAAAUE"]
[Sun Mar 22 20:30:34.736619 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:46436] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ab_g6rm4_26jKMD0zy3wlAAAAUQ"]
[Sun Mar 22 20:30:35.944335 2026] [:error] [pid 30166:tid 30183] [client 40.89.156.15:41510] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ab_g67m4_26jKMD0zy3wlgAAAUg"]
[Sun Mar 22 20:30:37.347428 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:26367] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "ab_g7bm4_26jKMD0zy3wnAAAAVU"]
[Sun Mar 22 20:30:40.133546 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:52134] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "ab_g8BXYUsdvKC9YWpXknAAAAAk"]
[Sun Mar 22 20:30:41.037394 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:45277] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "ab_g8U2TppSvA8W5CBRXAQAAAME"]
[Sun Mar 22 20:30:42.144372 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:41513] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/erty.php"] [unique_id "ab_g8k2TppSvA8W5CBRXBQAAAMw"]
[Sun Mar 22 20:30:42.781611 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:61784] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "ab_g8hXYUsdvKC9YWpXknQAAAAc"]
[Sun Mar 22 20:30:43.385613 2026] [:error] [pid 51362:tid 51404] [client 40.89.156.15:28331] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "ab_g88OwPm3DXzTDjUfDvgAAAEM"]
[Sun Mar 22 20:30:44.022637 2026] [:error] [pid 51361:tid 51374] [client 40.89.156.15:59208] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "ab_g9BXYUsdvKC9YWpXknwAAAAM"]
[Sun Mar 22 20:30:44.748462 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:46456] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0.php"] [unique_id "ab_g9MOwPm3DXzTDjUfDwAAAAEg"]
[Sun Mar 22 20:30:45.298177 2026] [:error] [pid 51361:tid 51373] [client 40.89.156.15:61776] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ab_g9RXYUsdvKC9YWpXkoQAAAAI"]
[Sun Mar 22 20:30:45.988516 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:59206] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ab_g9cOwPm3DXzTDjUfDwgAAAE0"]
[Sun Mar 22 20:30:46.688226 2026] [:error] [pid 40039:tid 40053] [client 40.89.156.15:61793] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ab_g9h3aDgUJfBYishm3GwAAAQw"]
[Sun Mar 22 20:30:47.324138 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:55964] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ab_g902TppSvA8W5CBRXFgAAAM8"]
[Sun Mar 22 20:30:47.902368 2026] [:error] [pid 51362:tid 51420] [client 40.89.156.15:39892] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ab_g98OwPm3DXzTDjUfDxgAAAFM"]
[Sun Mar 22 20:30:48.893221 2026] [:error] [pid 40039:tid 40048] [client 40.89.156.15:27817] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ab_g-B3aDgUJfBYishm3HAAAAQc"]
[Sun Mar 22 20:30:49.544653 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:28317] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ab_g-RXYUsdvKC9YWpXkrQAAAAQ"]
[Sun Mar 22 20:30:50.145313 2026] [:error] [pid 51361:tid 51374] [client 40.89.156.15:55977] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ab_g-hXYUsdvKC9YWpXkrwAAAAM"]
[Sun Mar 22 20:30:50.673365 2026] [:error] [pid 51361:tid 51382] [client 40.89.156.15:46463] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ab_g-hXYUsdvKC9YWpXksQAAAAs"]
[Sun Mar 22 20:30:51.287300 2026] [:error] [pid 51361:tid 51395] [client 40.89.156.15:26538] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ab_g-xXYUsdvKC9YWpXktQAAABY"]
[Sun Mar 22 20:30:51.936625 2026] [:error] [pid 51468:tid 51493] [client 40.89.156.15:39879] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ab_g-02TppSvA8W5CBRXGgAAANE"]
[Sun Mar 22 20:30:52.549634 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:57314] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ab_g_BXYUsdvKC9YWpXkvQAAAAc"]
[Sun Mar 22 20:30:53.183986 2026] [:error] [pid 51468:tid 51489] [client 40.89.156.15:59212] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "ab_g_U2TppSvA8W5CBRXGwAAAM0"]
[Sun Mar 22 20:30:53.766767 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:59253] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "ab_g_U2TppSvA8W5CBRXHQAAAMM"]
[Sun Mar 22 20:30:54.439308 2026] [:error] [pid 51362:tid 51413] [client 40.89.156.15:55961] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "ab_g_sOwPm3DXzTDjUfDywAAAEw"]
[Sun Mar 22 20:30:54.995950 2026] [:error] [pid 51361:tid 51385] [client 40.89.156.15:27787] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "ab_g_hXYUsdvKC9YWpXkxAAAAA4"]
[Sun Mar 22 20:30:55.520133 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:52147] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "ab_g_7m4_26jKMD0zy3wsgAAAVA"]
[Sun Mar 22 20:30:56.227124 2026] [:error] [pid 30166:tid 30182] [client 40.89.156.15:34929] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "ab_hALm4_26jKMD0zy3wtQAAAUc"]
[Sun Mar 22 20:30:56.960683 2026] [:error] [pid 51362:tid 51419] [client 40.89.156.15:55952] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "ab_hAMOwPm3DXzTDjUfDzQAAAFI"]
[Sun Mar 22 20:30:57.685523 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:59811] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq13.php"] [unique_id "ab_hAU2TppSvA8W5CBRXIgAAANc"]
[Sun Mar 22 20:30:58.439302 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:45311] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aapig.php"] [unique_id "ab_hAsOwPm3DXzTDjUfDzwAAAE0"]
[Sun Mar 22 20:30:59.101090 2026] [:error] [pid 30166:tid 30174] [client 40.89.156.15:59233] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aapig.php"] [unique_id "ab_hA7m4_26jKMD0zy3wugAAAUM"]
[Sun Mar 22 20:31:00.362064 2026] [:error] [pid 40039:tid 40054] [client 40.89.156.15:28288] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aapig.php"] [unique_id "ab_hBB3aDgUJfBYishm3IwAAAQ0"]
[Sun Mar 22 20:31:13.716107 2026] [proxy_fcgi:error] [pid 51362:tid 51423] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:14.034708 2026] [proxy_fcgi:error] [pid 51362:tid 51419] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:14.288361 2026] [proxy_fcgi:error] [pid 51362:tid 51401] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:14.550766 2026] [proxy_fcgi:error] [pid 51362:tid 51414] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:14.858726 2026] [proxy_fcgi:error] [pid 51362:tid 51422] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:15.208434 2026] [proxy_fcgi:error] [pid 51362:tid 51400] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:15.488141 2026] [proxy_fcgi:error] [pid 51362:tid 51421] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:15.726939 2026] [proxy_fcgi:error] [pid 51362:tid 51417] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:15.996403 2026] [proxy_fcgi:error] [pid 51362:tid 51416] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:16.235888 2026] [proxy_fcgi:error] [pid 51362:tid 51424] [client 40.89.156.15:60387] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:31:16.724931 2026] [:error] [pid 51362:tid 51423] [client 40.89.156.15:60387] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp6.php"] [unique_id "ab_hFMOwPm3DXzTDjUfD-QAAAFY"]
[Sun Mar 22 20:31:18.377367 2026] [:error] [pid 51363:tid 51430] [client 40.89.156.15:41514] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp6.php"] [unique_id "ab_hFlwa9x6OCTRkhl27JgAAAII"]
[Sun Mar 22 20:31:20.291470 2026] [:error] [pid 51363:tid 51447] [client 40.89.156.15:57299] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp6.php"] [unique_id "ab_hGFwa9x6OCTRkhl27KgAAAJE"]
[Sun Mar 22 20:31:22.600274 2026] [:error] [pid 40039:tid 40058] [client 40.89.156.15:27808] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lp6.php"] [unique_id "ab_hGh3aDgUJfBYishm3OgAAARE"]
[Sun Mar 22 20:31:23.361923 2026] [:error] [pid 51363:tid 51429] [client 40.89.156.15:27812] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/com.php"] [unique_id "ab_hG1wa9x6OCTRkhl27LQAAAIE"]
[Sun Mar 22 20:31:25.596523 2026] [:error] [pid 51362:tid 51420] [client 40.89.156.15:57329] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/com.php"] [unique_id "ab_hHcOwPm3DXzTDjUfEAAAAAFM"]
[Sun Mar 22 20:31:26.941489 2026] [:error] [pid 51363:tid 51443] [client 40.89.156.15:45286] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/com.php"] [unique_id "ab_hHlwa9x6OCTRkhl27MgAAAI4"]
[Sun Mar 22 20:31:28.594505 2026] [:error] [pid 40039:tid 40047] [client 40.89.156.15:61779] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/com.php"] [unique_id "ab_hIB3aDgUJfBYishm3TAAAAQY"]
[Sun Mar 22 20:31:29.549536 2026] [:error] [pid 51361:tid 51382] [client 40.89.156.15:46444] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ab_hIRXYUsdvKC9YWpXlCgAAAAs"]
[Sun Mar 22 20:31:30.669965 2026] [:error] [pid 51363:tid 51434] [client 40.89.156.15:41473] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ab_hIlwa9x6OCTRkhl27NAAAAIY"]
[Sun Mar 22 20:31:32.197162 2026] [:error] [pid 51361:tid 51384] [client 40.89.156.15:59869] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ab_hJBXYUsdvKC9YWpXlEgAAAA0"]
[Sun Mar 22 20:31:33.249939 2026] [:error] [pid 40039:tid 40044] [client 40.89.156.15:45273] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ab_hJR3aDgUJfBYishm3UwAAAQM"]
[Sun Mar 22 20:31:35.094003 2026] [:error] [pid 51468:tid 51479] [client 40.89.156.15:39915] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ab_hJ02TppSvA8W5CBRXRgAAAMM"]
[Sun Mar 22 20:31:36.098963 2026] [:error] [pid 51468:tid 51480] [client 40.89.156.15:57286] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ab_hKE2TppSvA8W5CBRXRwAAAMQ"]
[Sun Mar 22 20:31:36.813583 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:59902] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ab_hKE2TppSvA8W5CBRXSgAAAMc"]
[Sun Mar 22 20:31:38.311098 2026] [:error] [pid 40039:tid 40062] [client 40.89.156.15:59230] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ab_hKh3aDgUJfBYishm3WQAAARU"]
[Sun Mar 22 20:31:39.141888 2026] [:error] [pid 30166:tid 30193] [client 40.89.156.15:59785] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ab_hK7m4_26jKMD0zy3w4wAAAVI"]
[Sun Mar 22 20:31:40.888437 2026] [:error] [pid 51362:tid 51411] [client 40.89.156.15:61814] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ab_hLMOwPm3DXzTDjUfEDwAAAEo"]
[Sun Mar 22 20:31:42.019480 2026] [:error] [pid 51363:tid 51449] [client 40.89.156.15:48341] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ab_hLlwa9x6OCTRkhl27OgAAAJM"]
[Sun Mar 22 20:31:43.771901 2026] [:error] [pid 30166:tid 30193] [client 40.89.156.15:39884] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ab_hL7m4_26jKMD0zy3w9QAAAVI"]
[Sun Mar 22 20:31:44.945988 2026] [:error] [pid 30166:tid 30182] [client 40.89.156.15:27790] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ab_hMLm4_26jKMD0zy3xAAAAAUc"]
[Sun Mar 22 20:31:47.767447 2026] [:error] [pid 51362:tid 51400] [client 40.89.156.15:26362] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ab_hM8OwPm3DXzTDjUfEHAAAAEA"]
[Sun Mar 22 20:31:49.243115 2026] [:error] [pid 51361:tid 51379] [client 40.89.156.15:39910] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ab_hNRXYUsdvKC9YWpXlKwAAAAg"]
[Sun Mar 22 20:31:50.703365 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:34896] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ab_hNsOwPm3DXzTDjUfEIwAAAEI"]
[Sun Mar 22 20:31:52.245474 2026] [:error] [pid 51361:tid 51380] [client 40.89.156.15:46411] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_hOBXYUsdvKC9YWpXlMgAAAAk"]
[Sun Mar 22 20:31:53.439987 2026] [:error] [pid 51362:tid 51420] [client 40.89.156.15:27778] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_hOcOwPm3DXzTDjUfEJwAAAFM"]
[Sun Mar 22 20:31:54.271318 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:61815] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_hOrm4_26jKMD0zy3xFAAAAVA"]
[Sun Mar 22 20:31:55.252822 2026] [:error] [pid 30166:tid 30196] [client 40.89.156.15:27826] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ab_hO7m4_26jKMD0zy3xGwAAAVM"]
[Sun Mar 22 20:31:56.484776 2026] [:error] [pid 30166:tid 30197] [client 40.89.156.15:41531] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "ab_hPLm4_26jKMD0zy3xIgAAAVQ"]
[Sun Mar 22 20:31:57.269811 2026] [:error] [pid 30166:tid 30200] [client 40.89.156.15:60369] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "ab_hPbm4_26jKMD0zy3xKwAAAVc"]
[Sun Mar 22 20:31:57.915889 2026] [:error] [pid 51362:tid 51416] [client 40.89.156.15:48383] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "ab_hPcOwPm3DXzTDjUfEKQAAAE8"]
[Sun Mar 22 20:31:58.575831 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:48356] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "ab_hPrm4_26jKMD0zy3xNAAAAVA"]
[Sun Mar 22 20:31:59.380454 2026] [:error] [pid 51362:tid 51411] [client 40.89.156.15:59214] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ab_hP8OwPm3DXzTDjUfEKwAAAEo"]
[Sun Mar 22 20:32:00.000103 2026] [:error] [pid 40039:tid 40052] [client 40.89.156.15:60362] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ab_hPx3aDgUJfBYishm3ZQAAAQs"]
[Sun Mar 22 20:32:01.106510 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:61787] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ab_hQcOwPm3DXzTDjUfEMAAAAFE"]
[Sun Mar 22 20:32:03.371165 2026] [:error] [pid 40039:tid 40053] [client 40.89.156.15:57287] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ab_hQx3aDgUJfBYishm3dwAAAQw"]
[Sun Mar 22 20:32:12.690468 2026] [:error] [pid 30166:tid 30190] [client 40.89.156.15:61820] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/to.php"] [unique_id "ab_hTLm4_26jKMD0zy3xVQAAAU8"]
[Sun Mar 22 20:32:14.099050 2026] [:error] [pid 51361:tid 51377] [client 40.89.156.15:46086] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/to.php"] [unique_id "ab_hThXYUsdvKC9YWpXlUQAAAAY"]
[Sun Mar 22 20:32:14.940720 2026] [:error] [pid 51362:tid 51424] [client 40.89.156.15:46426] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/to.php"] [unique_id "ab_hTsOwPm3DXzTDjUfEWQAAAFc"]
[Sun Mar 22 20:32:15.818723 2026] [:error] [pid 51361:tid 51372] [client 40.89.156.15:25844] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/to.php"] [unique_id "ab_hTxXYUsdvKC9YWpXlVQAAAAE"]
[Sun Mar 22 20:32:16.877323 2026] [proxy_fcgi:error] [pid 30166:tid 30186] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:17.194871 2026] [proxy_fcgi:error] [pid 30166:tid 30191] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:17.459297 2026] [proxy_fcgi:error] [pid 30166:tid 30174] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:17.812745 2026] [proxy_fcgi:error] [pid 30166:tid 30201] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:18.243388 2026] [proxy_fcgi:error] [pid 30166:tid 30199] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:18.559149 2026] [proxy_fcgi:error] [pid 30166:tid 30196] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:18.809192 2026] [proxy_fcgi:error] [pid 30166:tid 30187] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:19.050153 2026] [proxy_fcgi:error] [pid 30166:tid 30197] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:19.792110 2026] [proxy_fcgi:error] [pid 30166:tid 30183] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:20.032198 2026] [proxy_fcgi:error] [pid 30166:tid 30193] [client 40.89.156.15:51785] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:32:20.357078 2026] [:error] [pid 30166:tid 30173] [client 40.89.156.15:51785] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ab_hVLm4_26jKMD0zy3xdQAAAUI"]
[Sun Mar 22 20:32:21.099722 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:47044] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ab_hVU2TppSvA8W5CBRXbAAAAMc"]
[Sun Mar 22 20:32:22.095177 2026] [:error] [pid 51363:tid 51437] [client 40.89.156.15:31945] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ab_hVlwa9x6OCTRkhl27dQAAAIg"]
[Sun Mar 22 20:32:23.365443 2026] [:error] [pid 51363:tid 51443] [client 40.89.156.15:24740] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ab_hV1wa9x6OCTRkhl27dwAAAI4"]
[Sun Mar 22 20:32:24.519764 2026] [:error] [pid 51362:tid 51423] [client 40.89.156.15:34827] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "ab_hWMOwPm3DXzTDjUfEbwAAAFY"]
[Sun Mar 22 20:32:25.469696 2026] [:error] [pid 51363:tid 51430] [client 40.89.156.15:32299] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "ab_hWVwa9x6OCTRkhl27ewAAAII"]
[Sun Mar 22 20:32:28.140707 2026] [:error] [pid 51362:tid 51421] [client 40.89.156.15:23241] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "ab_hXMOwPm3DXzTDjUfEcwAAAFQ"]
[Sun Mar 22 20:32:29.674396 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:62438] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "ab_hXRXYUsdvKC9YWpXlZgAAAAw"]
[Sun Mar 22 20:32:30.931693 2026] [:error] [pid 51363:tid 51437] [client 40.89.156.15:23239] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "ab_hXlwa9x6OCTRkhl27hQAAAIg"]
[Sun Mar 22 20:32:31.920822 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:57219] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "ab_hX8OwPm3DXzTDjUfEdgAAAFE"]
[Sun Mar 22 20:32:32.917694 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:36723] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "ab_hYMOwPm3DXzTDjUfEfAAAAEI"]
[Sun Mar 22 20:32:34.092928 2026] [:error] [pid 40039:tid 40043] [client 40.89.156.15:57264] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "ab_hYh3aDgUJfBYishm3hgAAAQI"]
[Sun Mar 22 20:32:35.438445 2026] [:error] [pid 40039:tid 40061] [client 40.89.156.15:63945] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/callback.php"] [unique_id "ab_hYx3aDgUJfBYishm3igAAARQ"]
[Sun Mar 22 20:32:36.603912 2026] [:error] [pid 40039:tid 40049] [client 40.89.156.15:38658] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/callback.php"] [unique_id "ab_hZB3aDgUJfBYishm3jQAAAQg"]
[Sun Mar 22 20:32:37.704969 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:36243] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/callback.php"] [unique_id "ab_hZbm4_26jKMD0zy3xmgAAAUs"]
[Sun Mar 22 20:32:38.927774 2026] [:error] [pid 40039:tid 40065] [client 40.89.156.15:57217] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/callback.php"] [unique_id "ab_hZh3aDgUJfBYishm3lgAAARg"]
[Sun Mar 22 20:32:40.014778 2026] [:error] [pid 51468:tid 51486] [client 40.89.156.15:40459] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ab_haE2TppSvA8W5CBRXcwAAAMo"]
[Sun Mar 22 20:32:41.413438 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:35285] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ab_hacOwPm3DXzTDjUfEiAAAAEI"]
[Sun Mar 22 20:32:46.199271 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:33345] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ab_hbsOwPm3DXzTDjUfElQAAAEg"]
[Sun Mar 22 20:32:47.258948 2026] [:error] [pid 51362:tid 51408] [client 40.89.156.15:40967] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ab_hb8OwPm3DXzTDjUfEmwAAAEc"]
[Sun Mar 22 20:32:49.739455 2026] [:error] [pid 30166:tid 30199] [client 40.89.156.15:33317] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ab_hcbm4_26jKMD0zy3xqwAAAVY"]
[Sun Mar 22 20:32:54.023157 2026] [:error] [pid 40039:tid 40044] [client 40.89.156.15:49684] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ab_hdh3aDgUJfBYishm3tAAAAQM"]
[Sun Mar 22 20:32:56.802993 2026] [:error] [pid 40039:tid 40065] [client 40.89.156.15:33321] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ab_heB3aDgUJfBYishm3uwAAARg"]
[Sun Mar 22 20:32:58.319431 2026] [:error] [pid 51468:tid 51488] [client 40.89.156.15:26940] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ab_hek2TppSvA8W5CBRXfQAAAMw"]
[Sun Mar 22 20:32:59.217606 2026] [:error] [pid 51468:tid 51476] [client 40.89.156.15:26931] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ab_he02TppSvA8W5CBRXgQAAAMA"]
[Sun Mar 22 20:33:00.454655 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:26926] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ab_hfBXYUsdvKC9YWpXljAAAAAA"]
[Sun Mar 22 20:33:04.009134 2026] [:error] [pid 30166:tid 30170] [client 40.89.156.15:29386] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ab_hgLm4_26jKMD0zy3xywAAAUA"]
[Sun Mar 22 20:33:06.686798 2026] [:error] [pid 30166:tid 30201] [client 40.89.156.15:42578] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ab_hgrm4_26jKMD0zy3x2QAAAVg"]
[Sun Mar 22 20:33:11.792240 2026] [:error] [pid 30166:tid 30197] [client 40.89.156.15:44381] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "ab_hh7m4_26jKMD0zy3x9QAAAVQ"]
[Sun Mar 22 20:33:13.106981 2026] [:error] [pid 51362:tid 51415] [client 40.89.156.15:35222] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "ab_hicOwPm3DXzTDjUfExwAAAE4"]
[Sun Mar 22 20:33:14.437890 2026] [:error] [pid 51362:tid 51400] [client 40.89.156.15:29990] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "ab_hisOwPm3DXzTDjUfEzAAAAEA"]
[Sun Mar 22 20:33:15.167595 2026] [:error] [pid 51361:tid 51397] [client 40.89.156.15:4933] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "ab_hixXYUsdvKC9YWpXlmAAAABg"]
[Sun Mar 22 20:33:16.097049 2026] [:error] [pid 51468:tid 51477] [client 40.89.156.15:31897] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vanda.php"] [unique_id "ab_hjE2TppSvA8W5CBRXjQAAAME"]
[Sun Mar 22 20:33:17.799514 2026] [:error] [pid 40039:tid 40056] [client 40.89.156.15:42600] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vanda.php"] [unique_id "ab_hjR3aDgUJfBYishm3yQAAAQ8"]
[Sun Mar 22 20:33:18.901346 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:31933] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vanda.php"] [unique_id "ab_hjrm4_26jKMD0zy3yFwAAAUo"]
[Sun Mar 22 20:33:19.724363 2026] [:error] [pid 30166:tid 30182] [client 40.89.156.15:42575] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vanda.php"] [unique_id "ab_hj7m4_26jKMD0zy3yGQAAAUc"]
[Sun Mar 22 20:33:21.266634 2026] [proxy_fcgi:error] [pid 51468:tid 51491] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:21.553797 2026] [proxy_fcgi:error] [pid 51468:tid 51486] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:21.797803 2026] [proxy_fcgi:error] [pid 51468:tid 51480] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:22.147436 2026] [proxy_fcgi:error] [pid 51468:tid 51485] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:22.417152 2026] [proxy_fcgi:error] [pid 51468:tid 51482] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:22.656688 2026] [proxy_fcgi:error] [pid 51468:tid 51483] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:22.934934 2026] [proxy_fcgi:error] [pid 51468:tid 51479] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:23.260926 2026] [proxy_fcgi:error] [pid 51468:tid 51490] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:23.553007 2026] [proxy_fcgi:error] [pid 51468:tid 51498] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:24.096348 2026] [proxy_fcgi:error] [pid 51468:tid 51487] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:24.539673 2026] [proxy_fcgi:error] [pid 51468:tid 51499] [client 40.89.156.15:44078] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:33:24.778828 2026] [:error] [pid 51468:tid 51481] [client 40.89.156.15:44078] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "ab_hlE2TppSvA8W5CBRXrQAAAMU"]
[Sun Mar 22 20:33:25.583549 2026] [:error] [pid 51361:tid 51391] [client 40.89.156.15:4913] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "ab_hlRXYUsdvKC9YWpXlqwAAABM"]
[Sun Mar 22 20:33:26.408492 2026] [:error] [pid 30166:tid 30192] [client 40.89.156.15:44812] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "ab_hlrm4_26jKMD0zy3yJgAAAVE"]
[Sun Mar 22 20:33:27.409090 2026] [:error] [pid 51468:tid 51492] [client 40.89.156.15:48982] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "ab_hl02TppSvA8W5CBRXsQAAANA"]
[Sun Mar 22 20:33:28.053441 2026] [:error] [pid 51362:tid 51404] [client 40.89.156.15:31873] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "ab_hmMOwPm3DXzTDjUfE6QAAAEM"]
[Sun Mar 22 20:33:28.737323 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:4975] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "ab_hmMOwPm3DXzTDjUfE6gAAAE0"]
[Sun Mar 22 20:33:29.546444 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:33888] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "ab_hmbm4_26jKMD0zy3yLwAAAVU"]
[Sun Mar 22 20:33:30.271524 2026] [:error] [pid 30166:tid 30199] [client 40.89.156.15:44803] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "ab_hmrm4_26jKMD0zy3yNQAAAVY"]
[Sun Mar 22 20:33:31.417387 2026] [:error] [pid 30166:tid 30183] [client 40.89.156.15:56619] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "ab_hm7m4_26jKMD0zy3yOwAAAUg"]
[Sun Mar 22 20:33:32.192769 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:63577] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "ab_hnLm4_26jKMD0zy3yPgAAAVU"]
[Sun Mar 22 20:33:33.688444 2026] [:error] [pid 51468:tid 51476] [client 40.89.156.15:31880] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "ab_hnU2TppSvA8W5CBRXswAAAMA"]
[Sun Mar 22 20:33:34.654195 2026] [:error] [pid 51362:tid 51410] [client 40.89.156.15:48963] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "ab_hnsOwPm3DXzTDjUfE8wAAAEk"]
[Sun Mar 22 20:33:35.386795 2026] [:error] [pid 51363:tid 51448] [client 40.89.156.15:4127] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "ab_hn1wa9x6OCTRkhl27rgAAAJI"]
[Sun Mar 22 20:33:36.113948 2026] [:error] [pid 51362:tid 51421] [client 40.89.156.15:54099] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "ab_hoMOwPm3DXzTDjUfE9wAAAFQ"]
[Sun Mar 22 20:33:37.033423 2026] [:error] [pid 51362:tid 51414] [client 40.89.156.15:4878] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "ab_hocOwPm3DXzTDjUfE-gAAAE0"]
[Sun Mar 22 20:33:37.696340 2026] [:error] [pid 51361:tid 51385] [client 40.89.156.15:31354] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "ab_hoRXYUsdvKC9YWpXlxwAAAA4"]
[Sun Mar 22 20:33:38.296062 2026] [:error] [pid 51361:tid 51395] [client 40.89.156.15:25728] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "ab_hohXYUsdvKC9YWpXlyQAAABY"]
[Sun Mar 22 20:33:39.069621 2026] [:error] [pid 30166:tid 30184] [client 40.89.156.15:25737] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "ab_ho7m4_26jKMD0zy3yRwAAAUk"]
[Sun Mar 22 20:33:39.925228 2026] [:error] [pid 51362:tid 51409] [client 40.89.156.15:56588] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "ab_ho8OwPm3DXzTDjUfE_wAAAEg"]
[Sun Mar 22 20:33:40.857712 2026] [:error] [pid 51468:tid 51499] [client 40.89.156.15:42605] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "ab_hpE2TppSvA8W5CBRXugAAANc"]
[Sun Mar 22 20:33:41.940099 2026] [:error] [pid 51361:tid 51379] [client 40.89.156.15:30489] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "ab_hpRXYUsdvKC9YWpXlzgAAAAg"]
[Sun Mar 22 20:33:43.044209 2026] [:error] [pid 30166:tid 30201] [client 40.89.156.15:25741] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "ab_hp7m4_26jKMD0zy3yTwAAAVg"]
[Sun Mar 22 20:33:44.047215 2026] [:error] [pid 30166:tid 30182] [client 40.89.156.15:35202] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "ab_hqLm4_26jKMD0zy3yVgAAAUc"]
[Sun Mar 22 20:33:44.775084 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:4108] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "ab_hqLm4_26jKMD0zy3yXQAAAUQ"]
[Sun Mar 22 20:33:45.647418 2026] [:error] [pid 51362:tid 51402] [client 40.89.156.15:54122] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "ab_hqcOwPm3DXzTDjUfFEQAAAEI"]
[Sun Mar 22 20:33:46.368727 2026] [:error] [pid 51363:tid 51434] [client 40.89.156.15:42580] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "ab_hqlwa9x6OCTRkhl27wAAAAIY"]
[Sun Mar 22 20:33:47.059831 2026] [:error] [pid 51361:tid 51389] [client 40.89.156.15:4141] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "ab_hqxXYUsdvKC9YWpXl3AAAABE"]
[Sun Mar 22 20:33:47.743819 2026] [:error] [pid 30166:tid 30183] [client 40.89.156.15:31313] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "ab_hq7m4_26jKMD0zy3ybAAAAUg"]
[Sun Mar 22 20:33:48.482676 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:55977] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "ab_hrBXYUsdvKC9YWpXl4gAAAAA"]
[Sun Mar 22 20:33:49.437020 2026] [:error] [pid 51361:tid 51375] [client 40.89.156.15:31299] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "ab_hrRXYUsdvKC9YWpXl5AAAAAQ"]
[Sun Mar 22 20:33:50.290307 2026] [:error] [pid 51361:tid 51396] [client 40.89.156.15:56580] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "ab_hrhXYUsdvKC9YWpXl5QAAABc"]
[Sun Mar 22 20:33:50.861522 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:27845] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "ab_hrrm4_26jKMD0zy3ycgAAAUo"]
[Sun Mar 22 20:33:51.585188 2026] [:error] [pid 51468:tid 51493] [client 40.89.156.15:4898] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ab_hr02TppSvA8W5CBRX1AAAANE"]
[Sun Mar 22 20:33:52.220194 2026] [:error] [pid 30166:tid 30174] [client 40.89.156.15:27869] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ab_hsLm4_26jKMD0zy3ydwAAAUM"]
[Sun Mar 22 20:33:52.728698 2026] [:error] [pid 30166:tid 30182] [client 40.89.156.15:4953] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ab_hsLm4_26jKMD0zy3yeQAAAUc"]
[Sun Mar 22 20:33:53.341780 2026] [:error] [pid 40039:tid 40061] [client 40.89.156.15:39448] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ab_hsR3aDgUJfBYishm38AAAARQ"]
[Sun Mar 22 20:33:54.019610 2026] [:error] [pid 51362:tid 51425] [client 40.89.156.15:4983] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pas2.php"] [unique_id "ab_hssOwPm3DXzTDjUfFIgAAAFg"]
[Sun Mar 22 20:33:54.747185 2026] [:error] [pid 51362:tid 51416] [client 40.89.156.15:4967] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pas2.php"] [unique_id "ab_hssOwPm3DXzTDjUfFJQAAAE8"]
[Sun Mar 22 20:33:55.431082 2026] [:error] [pid 51361:tid 51371] [client 40.89.156.15:54091] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pas2.php"] [unique_id "ab_hsxXYUsdvKC9YWpXmAgAAAAA"]
[Sun Mar 22 20:33:56.284633 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:39446] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pas2.php"] [unique_id "ab_htLm4_26jKMD0zy3yfwAAAUs"]
[Sun Mar 22 20:33:57.311367 2026] [:error] [pid 30166:tid 30171] [client 40.89.156.15:4888] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ab_htbm4_26jKMD0zy3ygQAAAUE"]
[Sun Mar 22 20:33:58.269458 2026] [:error] [pid 51362:tid 51418] [client 40.89.156.15:4910] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ab_htsOwPm3DXzTDjUfFLAAAAFE"]
[Sun Mar 22 20:33:59.182623 2026] [:error] [pid 40039:tid 40058] [client 40.89.156.15:30524] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ab_htx3aDgUJfBYishm3_QAAARE"]
[Sun Mar 22 20:33:59.802989 2026] [:error] [pid 40039:tid 40054] [client 40.89.156.15:25730] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ab_htx3aDgUJfBYishm3_wAAAQ0"]
[Sun Mar 22 20:34:00.562819 2026] [:error] [pid 30166:tid 30196] [client 40.89.156.15:44084] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ab_huLm4_26jKMD0zy3yiwAAAVM"]
[Sun Mar 22 20:34:01.182089 2026] [:error] [pid 30166:tid 30171] [client 40.89.156.15:33870] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ab_hubm4_26jKMD0zy3ykAAAAUE"]
[Sun Mar 22 20:34:01.794903 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:25780] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ab_hubm4_26jKMD0zy3ylAAAAUo"]
[Sun Mar 22 20:34:02.341035 2026] [:error] [pid 40039:tid 40050] [client 40.89.156.15:45709] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ab_huh3aDgUJfBYishm4BQAAAQk"]
[Sun Mar 22 20:34:03.433528 2026] [:error] [pid 30166:tid 30190] [client 40.89.156.15:45731] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ab_hu7m4_26jKMD0zy3ypgAAAU8"]
[Sun Mar 22 20:34:04.282578 2026] [:error] [pid 51361:tid 51391] [client 40.89.156.15:4885] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ab_hvBXYUsdvKC9YWpXmKwAAABM"]
[Sun Mar 22 20:34:05.052961 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:54756] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ab_hvbm4_26jKMD0zy3yswAAAVU"]
[Sun Mar 22 20:34:05.872796 2026] [:error] [pid 30166:tid 30184] [client 40.89.156.15:4877] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ab_hvbm4_26jKMD0zy3ytgAAAUk"]
[Sun Mar 22 20:34:06.564604 2026] [:error] [pid 51361:tid 51379] [client 40.89.156.15:31300] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ab_hvhXYUsdvKC9YWpXmLgAAAAg"]
[Sun Mar 22 20:34:07.231795 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:30516] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ab_hv7m4_26jKMD0zy3ywQAAAUs"]
[Sun Mar 22 20:34:08.591969 2026] [:error] [pid 30166:tid 30199] [client 40.89.156.15:30483] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ab_hwLm4_26jKMD0zy3y0QAAAVY"]
[Sun Mar 22 20:34:09.648684 2026] [:error] [pid 30166:tid 30174] [client 40.89.156.15:63601] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ab_hwbm4_26jKMD0zy3y2AAAAUM"]
[Sun Mar 22 20:34:10.578633 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:56581] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wta.php"] [unique_id "ab_hwk2TppSvA8W5CBRX1gAAAM8"]
[Sun Mar 22 20:34:13.095206 2026] [:error] [pid 51362:tid 51420] [client 40.89.156.15:25761] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wta.php"] [unique_id "ab_hxcOwPm3DXzTDjUfFOAAAAFM"]
[Sun Mar 22 20:34:16.293721 2026] [:error] [pid 40039:tid 40053] [client 40.89.156.15:30504] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wta.php"] [unique_id "ab_hyB3aDgUJfBYishm4FgAAAQw"]
[Sun Mar 22 20:34:19.441888 2026] [:error] [pid 51363:tid 51433] [client 40.89.156.15:39455] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wta.php"] [unique_id "ab_hy1wa9x6OCTRkhl275wAAAIU"]
[Sun Mar 22 20:34:22.630341 2026] [:error] [pid 51363:tid 51441] [client 40.89.156.15:39041] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/privacy.php"] [unique_id "ab_hzlwa9x6OCTRkhl276wAAAIw"]
[Sun Mar 22 20:34:24.455248 2026] [proxy_fcgi:error] [pid 51362:tid 51419] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:24.839516 2026] [proxy_fcgi:error] [pid 51362:tid 51412] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:25.083988 2026] [proxy_fcgi:error] [pid 51362:tid 51406] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:25.321472 2026] [proxy_fcgi:error] [pid 51362:tid 51422] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:25.558858 2026] [proxy_fcgi:error] [pid 51362:tid 51407] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:25.797909 2026] [proxy_fcgi:error] [pid 51362:tid 51402] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:26.041155 2026] [proxy_fcgi:error] [pid 51362:tid 51418] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:26.280034 2026] [proxy_fcgi:error] [pid 51362:tid 51405] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:26.633679 2026] [proxy_fcgi:error] [pid 51362:tid 51409] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:27.031140 2026] [proxy_fcgi:error] [pid 51362:tid 51408] [client 40.89.156.15:4880] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:34:27.672477 2026] [:error] [pid 51362:tid 51413] [client 40.89.156.15:4880] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phina.php"] [unique_id "ab_h08OwPm3DXzTDjUfFTgAAAEw"]
[Sun Mar 22 20:34:30.687159 2026] [:error] [pid 40039:tid 40052] [client 40.89.156.15:31320] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phina.php"] [unique_id "ab_h1h3aDgUJfBYishm4RQAAAQs"]
[Sun Mar 22 20:34:32.997682 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:54730] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phina.php"] [unique_id "ab_h2Lm4_26jKMD0zy3ziwAAAUQ"]
[Sun Mar 22 20:34:34.121651 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:51765] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phina.php"] [unique_id "ab_h2hXYUsdvKC9YWpXmQAAAAAw"]
[Sun Mar 22 20:34:35.648730 2026] [:error] [pid 51361:tid 51395] [client 40.89.156.15:4893] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "ab_h2xXYUsdvKC9YWpXmRAAAABY"]
[Sun Mar 22 20:34:36.698666 2026] [:error] [pid 51468:tid 51492] [client 40.89.156.15:39476] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "ab_h3E2TppSvA8W5CBRYGwAAANA"]
[Sun Mar 22 20:34:37.563815 2026] [:error] [pid 30166:tid 30188] [client 40.89.156.15:54734] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "ab_h3bm4_26jKMD0zy3zmwAAAU0"]
[Sun Mar 22 20:34:39.331515 2026] [:error] [pid 30166:tid 30199] [client 40.89.156.15:27867] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "ab_h37m4_26jKMD0zy3zpQAAAVY"]
[Sun Mar 22 20:34:41.643293 2026] [:error] [pid 30166:tid 30185] [client 40.89.156.15:39091] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rovoj.php"] [unique_id "ab_h4bm4_26jKMD0zy3zrwAAAUo"]
[Sun Mar 22 20:34:47.991616 2026] [:error] [pid 30166:tid 30201] [client 40.89.156.15:35239] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rovoj.php"] [unique_id "ab_h57m4_26jKMD0zy3zwQAAAVg"]
[Sun Mar 22 20:34:49.582159 2026] [:error] [pid 51468:tid 51491] [client 40.89.156.15:27856] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rovoj.php"] [unique_id "ab_h6U2TppSvA8W5CBRYLQAAAM8"]
[Sun Mar 22 20:34:50.262812 2026] [:error] [pid 40039:tid 40065] [client 40.89.156.15:51732] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rovoj.php"] [unique_id "ab_h6h3aDgUJfBYishm4TgAAARg"]
[Sun Mar 22 20:34:51.512535 2026] [:error] [pid 51468:tid 51500] [client 40.89.156.15:4957] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ab_h602TppSvA8W5CBRYNQAAANg"]
[Sun Mar 22 20:34:52.417700 2026] [:error] [pid 51361:tid 51378] [client 40.89.156.15:32299] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ab_h7BXYUsdvKC9YWpXmWgAAAAc"]
[Sun Mar 22 20:34:53.818743 2026] [:error] [pid 40039:tid 40057] [client 40.89.156.15:30474] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ab_h7R3aDgUJfBYishm4UgAAARA"]
[Sun Mar 22 20:34:54.712960 2026] [:error] [pid 30166:tid 30174] [client 40.89.156.15:39487] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ab_h7rm4_26jKMD0zy3zywAAAUM"]
[Sun Mar 22 20:34:55.483795 2026] [:error] [pid 30166:tid 30191] [client 40.89.156.15:54766] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpmini.php"] [unique_id "ab_h77m4_26jKMD0zy3zzgAAAVA"]
[Sun Mar 22 20:34:56.399021 2026] [:error] [pid 51468:tid 51490] [client 40.89.156.15:4129] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpmini.php"] [unique_id "ab_h8E2TppSvA8W5CBRYQAAAAM4"]
[Sun Mar 22 20:34:57.530959 2026] [:error] [pid 51361:tid 51379] [client 40.89.156.15:4926] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpmini.php"] [unique_id "ab_h8RXYUsdvKC9YWpXmXQAAAAg"]
[Sun Mar 22 20:34:58.456137 2026] [:error] [pid 51361:tid 51381] [client 40.89.156.15:54083] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpmini.php"] [unique_id "ab_h8hXYUsdvKC9YWpXmXwAAAAo"]
[Sun Mar 22 20:34:59.248302 2026] [:error] [pid 51361:tid 51373] [client 40.89.156.15:4955] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/caiij.php"] [unique_id "ab_h8xXYUsdvKC9YWpXmYgAAAAI"]
[Sun Mar 22 20:34:59.976175 2026] [:error] [pid 51362:tid 51423] [client 40.89.156.15:35957] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/caiij.php"] [unique_id "ab_h88OwPm3DXzTDjUfFtgAAAFY"]
[Sun Mar 22 20:35:00.644480 2026] [:error] [pid 51362:tid 51412] [client 40.89.156.15:62886] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/caiij.php"] [unique_id "ab_h9MOwPm3DXzTDjUfFtwAAAEs"]
[Sun Mar 22 20:35:01.754813 2026] [:error] [pid 30166:tid 30175] [client 40.89.156.15:54770] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/caiij.php"] [unique_id "ab_h9bm4_26jKMD0zy3zzwAAAUQ"]
[Sun Mar 22 20:35:02.562508 2026] [:error] [pid 51468:tid 51494] [client 40.89.156.15:62888] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "ab_h9k2TppSvA8W5CBRYRwAAANI"]
[Sun Mar 22 20:35:03.347535 2026] [:error] [pid 30166:tid 30198] [client 40.89.156.15:30487] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "ab_h97m4_26jKMD0zy3z0AAAAVU"]
[Sun Mar 22 20:35:04.204746 2026] [:error] [pid 30166:tid 30199] [client 40.89.156.15:27897] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "ab_h-Lm4_26jKMD0zy3z0wAAAVY"]
[Sun Mar 22 20:35:05.404820 2026] [:error] [pid 51361:tid 51388] [client 40.89.156.15:30488] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xex.php"] [unique_id "ab_h-RXYUsdvKC9YWpXmegAAABA"]
[Sun Mar 22 20:35:06.735856 2026] [:error] [pid 51361:tid 51383] [client 40.89.156.15:27892] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ab_h-hXYUsdvKC9YWpXmggAAAAw"]
[Sun Mar 22 20:35:07.867021 2026] [:error] [pid 51362:tid 51407] [client 40.89.156.15:54086] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ab_h-8OwPm3DXzTDjUfFvAAAAEY"]
[Sun Mar 22 20:35:09.030559 2026] [:error] [pid 51363:tid 51452] [client 40.89.156.15:39094] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ab_h_Vwa9x6OCTRkhl28AgAAAJY"]
[Sun Mar 22 20:35:09.878733 2026] [:error] [pid 51468:tid 51483] [client 40.89.156.15:31350] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ab_h_U2TppSvA8W5CBRYSwAAAMc"]
[Sun Mar 22 20:35:11.431758 2026] [:error] [pid 30166:tid 30201] [client 40.89.156.15:35924] [client 40.89.156.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/app.php"] [unique_id "ab_h_7m4_26jKMD0zy3z4QAAAVg"]
[Sun Mar 22 20:35:13.115892 2026] [:error] [pid 51468:tid 51484] [client 40.89.156.15:63613] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/max.php"] [unique_id "ab_iAU2TppSvA8W5CBRYUgAAAMg"]
[Sun Mar 22 20:35:14.107703 2026] [:error] [pid 40039:tid 40045] [client 40.89.156.15:4865] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/max.php"] [unique_id "ab_iAh3aDgUJfBYishm4ZwAAAQQ"]
[Sun Mar 22 20:35:15.203476 2026] [:error] [pid 30166:tid 30186] [client 40.89.156.15:54762] [client 40.89.156.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/max.php"] [unique_id "ab_iA7m4_26jKMD0zy3z8wAAAUs"]
[Sun Mar 22 20:48:53.234487 2026] [:error] [pid 51362:tid 51419] [client 1.15.52.154:56852] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab_lNcOwPm3DXzTDjUfK2gAAAFI"]
[Sun Mar 22 20:55:51.001945 2026] [proxy_fcgi:error] [pid 51362:tid 51422] [client 20.102.53.32:46611] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:55:51.421702 2026] [:error] [pid 51362:tid 51417] [client 20.102.53.32:46611] [client 20.102.53.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.102.53.32, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_m18OwPm3DXzTDjUfNoAAAAFA"]
[Sun Mar 22 20:55:51.645312 2026] [proxy_fcgi:error] [pid 51362:tid 51412] [client 20.102.53.32:46611] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:55:52.534397 2026] [proxy_fcgi:error] [pid 51362:tid 51419] [client 20.102.53.32:46611] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:55:53.173241 2026] [proxy_fcgi:error] [pid 51362:tid 51405] [client 20.102.53.32:46611] AH01071: Got error 'Primary script unknown'
[Sun Mar 22 20:55:53.381025 2026] [:error] [pid 51362:tid 51422] [client 20.102.53.32:46611] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_m2cOwPm3DXzTDjUfNrAAAAFU"]
[Sun Mar 22 20:55:54.209328 2026] [:error] [pid 30166:tid 30193] [client 20.102.53.32:46605] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_m2rm4_26jKMD0zy0DbAAAAVI"]
[Sun Mar 22 20:55:55.031178 2026] [:error] [pid 30166:tid 30188] [client 20.102.53.32:46619] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_m27m4_26jKMD0zy0DcwAAAU0"]
[Sun Mar 22 20:55:55.874273 2026] [:error] [pid 51362:tid 51408] [client 20.102.53.32:46600] [client 20.102.53.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_m28OwPm3DXzTDjUfNsgAAAEc"]
[Sun Mar 22 21:59:08.849731 2026] [:error] [pid 51362:tid 51408] [client 43.135.115.233:33220] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ab_1rMOwPm3DXzTDjUflBQAAAEc"]
[Sun Mar 22 23:19:33.126195 2026] [:error] [pid 30166:tid 30187] [client 43.135.135.57:48848] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acAIhbm4_26jKMD0zy08iQAAAUw"]
[Mon Mar 23 00:43:05.618784 2026] [:error] [pid 27776:tid 27853] [client 106.221.50.109:40681] [client 106.221.50.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.221.50.109, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acAcGY3Eaq7IZ5L-4XUodQAAAQc"]
[Mon Mar 23 00:43:05.631217 2026] [proxy_fcgi:error] [pid 27776:tid 27853] [client 106.221.50.109:40681] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 02:29:44.740884 2026] [:error] [pid 20587:tid 20667] [client 154.47.27.236:14943] [client 154.47.27.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "acA1GIByf8r3QAk4VXP3dAAAAJg"]
[Mon Mar 23 04:05:09.246657 2026] [:error] [pid 23441:tid 23505] [client 223.15.245.170:51608] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acBLdRq7S-oOqSXZEr42kAAAAII"]
[Mon Mar 23 04:13:48.043081 2026] [:error] [pid 23441:tid 23522] [client 195.178.110.34:35104] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "acBNfBq7S-oOqSXZEr46NQAAAJM"]
[Mon Mar 23 04:13:52.175986 2026] [:error] [pid 23440:tid 23481] [client 195.178.110.34:35118] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.svn/wc.db"] [unique_id "acBNgD49_8n8h_ttcUq2xQAAAEU"]
[Mon Mar 23 04:14:09.654059 2026] [:error] [pid 23539:tid 23551] [client 195.178.110.34:48700] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.svn/entries"] [unique_id "acBNkX7Dh3qWGSpIAZUdmQAAAMM"]
[Mon Mar 23 04:18:25.227953 2026] [:error] [pid 57265:tid 57279] [client 43.153.86.78:40128] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acBOkWNLjPJJkhuqCsiEQgAAAQw"]
[Mon Mar 23 05:47:23.022297 2026] [:error] [pid 57265:tid 57275] [client 43.167.245.18:50762] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acBja2NLjPJJkhuqCsizJAAAAQg"]
[Mon Mar 23 12:48:25.230679 2026] [proxy_fcgi:error] [pid 23539:tid 23555] [client 45.89.60.68:53333] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Mar 23 12:48:26.312923 2026] [proxy_fcgi:error] [pid 35165:tid 35177] [client 45.89.60.68:60395] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Mar 23 14:24:29.760892 2026] [:error] [pid 35165:tid 35168] [client 185.198.240.233:30393] [client 185.198.240.233] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.233, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acDcnc6udpN6Esk7JKtovwAAAYA"]
[Mon Mar 23 14:24:29.768060 2026] [proxy_fcgi:error] [pid 35165:tid 35168] [client 185.198.240.233:30393] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 17:52:04.983481 2026] [:error] [pid 14573:tid 14580] [client 136.158.56.222:34224] [client 136.158.56.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.222, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acENRO-oSmHn3q4_J1G02QAAAUU"]
[Mon Mar 23 17:52:04.994910 2026] [proxy_fcgi:error] [pid 14573:tid 14580] [client 136.158.56.222:34224] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 17:59:14.030371 2026] [:error] [pid 14573:tid 14589] [client 43.138.68.113:55260] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acEO8u-oSmHn3q4_J1G4pQAAAU4"]
[Mon Mar 23 18:01:39.194236 2026] [:error] [pid 57265:tid 57276] [client 43.135.182.43:47864] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acEPg2NLjPJJkhuqCsgsJgAAAQk"]
[Mon Mar 23 19:36:44.981529 2026] [:error] [pid 57265:tid 57273] [client 103.211.16.159:58696] [client 103.211.16.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.16.159, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acElzGNLjPJJkhuqCsho7wAAAQY"]
[Mon Mar 23 19:36:44.992665 2026] [proxy_fcgi:error] [pid 57265:tid 57273] [client 103.211.16.159:58696] AH01071: Got error 'Primary script unknown'
[Mon Mar 23 21:55:35.063414 2026] [:error] [pid 38306:tid 38324] [client 54.211.246.250:42662] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGVzkL8qwu-hHc6BisIwAAARA"]
[Mon Mar 23 21:55:35.064856 2026] [:error] [pid 52341:tid 52367] [client 54.211.246.250:34530] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGV6PKTBDR2u47Gb3m3wAAAVg"]
[Mon Mar 23 21:55:35.471039 2026] [:error] [pid 38178:tid 38261] [client 54.211.246.250:34534] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGVw0axWfXsVvR9udH5gAAAJM"]
[Mon Mar 23 21:55:35.879532 2026] [:error] [pid 38306:tid 38325] [client 54.211.246.250:34546] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGVzkL8qwu-hHc6BisJAAAARE"]
[Mon Mar 23 21:55:35.879566 2026] [:error] [pid 38176:tid 38210] [client 54.211.246.250:42678] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGV0tG4qlh1gvNjuJFzgAAABc"]
[Mon Mar 23 21:55:36.288646 2026] [:error] [pid 38306:tid 38332] [client 54.211.246.250:34550] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGWDkL8qwu-hHc6BisJgAAARg"]
[Mon Mar 23 21:55:36.695618 2026] [:error] [pid 38176:tid 38203] [client 54.211.246.250:34562] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGWEtG4qlh1gvNjuJF0QAAABA"]
[Mon Mar 23 21:55:36.696436 2026] [:error] [pid 38177:tid 38229] [client 54.211.246.250:42690] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGWHsYW-_HCI66Mun4YAAAAE4"]
[Mon Mar 23 21:55:37.513669 2026] [:error] [pid 38178:tid 38243] [client 54.211.246.250:42696] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGWQ0axWfXsVvR9udH6QAAAIE"]
[Mon Mar 23 21:55:38.331636 2026] [:error] [pid 38176:tid 38187] [client 54.211.246.250:42704] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.txt"] [unique_id "acFGWktG4qlh1gvNjuJF0wAAAAA"]
[Mon Mar 23 21:55:38.739646 2026] [:error] [pid 38178:tid 38249] [client 54.211.246.250:34570] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGWg0axWfXsVvR9udH7gAAAIc"]
[Mon Mar 23 21:55:39.146766 2026] [:error] [pid 38176:tid 38198] [client 54.211.246.250:34584] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGW0tG4qlh1gvNjuJF1gAAAAs"]
[Mon Mar 23 21:55:39.147066 2026] [:error] [pid 38177:tid 38223] [client 54.211.246.250:42716] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGW3sYW-_HCI66Mun4ZwAAAEg"]
[Mon Mar 23 21:55:39.552985 2026] [:error] [pid 38276:tid 38281] [client 54.211.246.250:38062] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGW5oKGiI-a7oME3L_PAAAAMI"]
[Mon Mar 23 21:55:39.960675 2026] [:error] [pid 38177:tid 38226] [client 54.211.246.250:38078] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGW3sYW-_HCI66Mun4aQAAAEs"]
[Mon Mar 23 21:55:39.962060 2026] [:error] [pid 38276:tid 38299] [client 54.211.246.250:34780] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGW5oKGiI-a7oME3L_PQAAANQ"]
[Mon Mar 23 21:55:40.368622 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:38080] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGXKPKTBDR2u47Gb3m5gAAAU0"]
[Mon Mar 23 21:55:40.779359 2026] [:error] [pid 52341:tid 52344] [client 54.211.246.250:34790] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGXKPKTBDR2u47Gb3m5wAAAUE"]
[Mon Mar 23 21:55:41.598419 2026] [:error] [pid 38178:tid 38262] [client 54.211.246.250:34802] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGXQ0axWfXsVvR9udH7wAAAJQ"]
[Mon Mar 23 21:55:42.414858 2026] [:error] [pid 38306:tid 38316] [client 54.211.246.250:34804] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.md"] [unique_id "acFGXjkL8qwu-hHc6BisLwAAAQg"]
[Mon Mar 23 21:55:42.822678 2026] [:error] [pid 52341:tid 52351] [client 54.211.246.250:38088] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGXqPKTBDR2u47Gb3m6QAAAUg"]
[Mon Mar 23 21:55:43.230725 2026] [:error] [pid 38177:tid 38227] [client 54.211.246.250:38104] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGX3sYW-_HCI66Mun4bQAAAEw"]
[Mon Mar 23 21:55:43.231676 2026] [:error] [pid 52341:tid 52347] [client 54.211.246.250:34826] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGX6PKTBDR2u47Gb3m6gAAAUQ"]
[Mon Mar 23 21:55:43.639539 2026] [:error] [pid 52341:tid 52357] [client 54.211.246.250:38110] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGX6PKTBDR2u47Gb3m7AAAAU4"]
[Mon Mar 23 21:55:44.047043 2026] [:error] [pid 38178:tid 38266] [client 54.211.246.250:38124] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGYA0axWfXsVvR9udH8AAAAJg"]
[Mon Mar 23 21:55:44.047244 2026] [:error] [pid 38176:tid 38205] [client 54.211.246.250:34830] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGYEtG4qlh1gvNjuJF3QAAABI"]
[Mon Mar 23 21:55:44.454133 2026] [:error] [pid 38276:tid 38290] [client 54.211.246.250:38130] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGYJoKGiI-a7oME3L_QgAAAMs"]
[Mon Mar 23 21:55:44.862139 2026] [:error] [pid 38176:tid 38203] [client 54.211.246.250:34846] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGYEtG4qlh1gvNjuJF3gAAABA"]
[Mon Mar 23 21:55:45.678087 2026] [:error] [pid 38176:tid 38194] [client 54.211.246.250:34860] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGYUtG4qlh1gvNjuJF4QAAAAc"]
[Mon Mar 23 21:55:46.497555 2026] [:error] [pid 38177:tid 38215] [client 54.211.246.250:34866] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/readme.html"] [unique_id "acFGYnsYW-_HCI66Mun4cgAAAEA"]
[Mon Mar 23 21:55:46.906998 2026] [:error] [pid 38176:tid 38187] [client 54.211.246.250:38146] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGYktG4qlh1gvNjuJF4wAAAAA"]
[Mon Mar 23 21:55:47.314809 2026] [:error] [pid 38178:tid 38256] [client 54.211.246.250:38156] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGYw0axWfXsVvR9udH8wAAAI4"]
[Mon Mar 23 21:55:47.314971 2026] [:error] [pid 38176:tid 38196] [client 54.211.246.250:34872] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGY0tG4qlh1gvNjuJF5AAAAAk"]
[Mon Mar 23 21:55:47.722443 2026] [:error] [pid 38276:tid 38292] [client 54.211.246.250:38170] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGY5oKGiI-a7oME3L_RQAAAM0"]
[Mon Mar 23 21:55:48.130460 2026] [:error] [pid 38176:tid 38188] [client 54.211.246.250:38184] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGZEtG4qlh1gvNjuJF6AAAAAE"]
[Mon Mar 23 21:55:48.131472 2026] [:error] [pid 38176:tid 38195] [client 54.211.246.250:34878] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGZEtG4qlh1gvNjuJF6QAAAAg"]
[Mon Mar 23 21:55:48.538863 2026] [:error] [pid 38176:tid 38199] [client 54.211.246.250:38198] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGZEtG4qlh1gvNjuJF6gAAAAw"]
[Mon Mar 23 21:55:48.947528 2026] [:error] [pid 38178:tid 38251] [client 54.211.246.250:34884] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGZA0axWfXsVvR9udH9AAAAIk"]
[Mon Mar 23 21:55:49.763116 2026] [:error] [pid 38306:tid 38329] [client 54.211.246.250:37382] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGZTkL8qwu-hHc6BisOAAAARU"]
[Mon Mar 23 21:55:50.579695 2026] [:error] [pid 38306:tid 38327] [client 54.211.246.250:37386] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.txt"] [unique_id "acFGZjkL8qwu-hHc6BisOQAAARM"]
[Mon Mar 23 21:55:50.988499 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:36836] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGZqPKTBDR2u47Gb3m8QAAAUU"]
[Mon Mar 23 21:55:51.395917 2026] [:error] [pid 38178:tid 38248] [client 54.211.246.250:36848] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGZw0axWfXsVvR9udH9gAAAIY"]
[Mon Mar 23 21:55:51.398345 2026] [:error] [pid 52341:tid 52350] [client 54.211.246.250:37392] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGZ6PKTBDR2u47Gb3m8wAAAUc"]
[Mon Mar 23 21:55:51.804115 2026] [:error] [pid 38178:tid 38250] [client 54.211.246.250:36850] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGZw0axWfXsVvR9udH-QAAAIg"]
[Mon Mar 23 21:55:52.211981 2026] [:error] [pid 38178:tid 38253] [client 54.211.246.250:36864] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGaA0axWfXsVvR9udH_QAAAIs"]
[Mon Mar 23 21:55:52.215087 2026] [:error] [pid 38178:tid 38260] [client 54.211.246.250:37404] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGaA0axWfXsVvR9udH_gAAAJI"]
[Mon Mar 23 21:55:52.619839 2026] [:error] [pid 38306:tid 38331] [client 54.211.246.250:36880] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGaDkL8qwu-hHc6BisOgAAARc"]
[Mon Mar 23 21:55:53.031399 2026] [:error] [pid 38176:tid 38206] [client 54.211.246.250:37412] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGaUtG4qlh1gvNjuJF8AAAABM"]
[Mon Mar 23 21:55:53.849482 2026] [:error] [pid 38276:tid 38302] [client 54.211.246.250:37426] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGaZoKGiI-a7oME3L_SAAAANc"]
[Mon Mar 23 21:55:54.665430 2026] [:error] [pid 38177:tid 38230] [client 54.211.246.250:37440] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/changelog.md"] [unique_id "acFGansYW-_HCI66Mun4dwAAAE8"]
[Mon Mar 23 21:55:55.073627 2026] [:error] [pid 52341:tid 52343] [client 54.211.246.250:36890] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGa6PKTBDR2u47Gb3m-gAAAUA"]
[Mon Mar 23 21:55:55.480383 2026] [:error] [pid 52341:tid 52362] [client 54.211.246.250:36900] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGa6PKTBDR2u47Gb3m_AAAAVM"]
[Mon Mar 23 21:55:55.480469 2026] [:error] [pid 52341:tid 52359] [client 54.211.246.250:37448] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGa6PKTBDR2u47Gb3m_QAAAVA"]
[Mon Mar 23 21:55:55.889230 2026] [:error] [pid 38306:tid 38311] [client 54.211.246.250:36914] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGazkL8qwu-hHc6BisPQAAAQM"]
[Mon Mar 23 21:55:56.299029 2026] [:error] [pid 38176:tid 38194] [client 54.211.246.250:36918] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGbEtG4qlh1gvNjuJF9AAAAAc"]
[Mon Mar 23 21:55:56.299200 2026] [:error] [pid 52341:tid 52353] [client 54.211.246.250:37464] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGbKPKTBDR2u47Gb3nAwAAAUo"]
[Mon Mar 23 21:55:56.705949 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:36924] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGbKPKTBDR2u47Gb3nBgAAAUU"]
[Mon Mar 23 21:55:57.115476 2026] [:error] [pid 38176:tid 38201] [client 54.211.246.250:37470] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGbUtG4qlh1gvNjuJF9QAAAA4"]
[Mon Mar 23 21:55:57.930421 2026] [:error] [pid 38276:tid 38295] [client 54.211.246.250:37476] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGbZoKGiI-a7oME3L_TAAAANA"]
[Mon Mar 23 21:55:58.746190 2026] [:error] [pid 38177:tid 38222] [client 54.211.246.250:37490] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hash-form/hash-form.php"] [unique_id "acFGbnsYW-_HCI66Mun4eAAAAEc"]
[Mon Mar 23 21:55:59.153220 2026] [:error] [pid 52341:tid 52362] [client 54.211.246.250:36940] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGb6PKTBDR2u47Gb3nDQAAAVM"]
[Mon Mar 23 21:55:59.560887 2026] [:error] [pid 52341:tid 52351] [client 54.211.246.250:53852] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGb6PKTBDR2u47Gb3nEQAAAUg"]
[Mon Mar 23 21:55:59.560876 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:37498] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGb6PKTBDR2u47Gb3nEgAAAU0"]
[Mon Mar 23 21:55:59.968512 2026] [:error] [pid 38177:tid 38234] [client 54.211.246.250:53858] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGb3sYW-_HCI66Mun4eQAAAFM"]
[Mon Mar 23 21:56:00.376249 2026] [:error] [pid 38306:tid 38321] [client 54.211.246.250:53866] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGcDkL8qwu-hHc6BisQQAAAQ0"]
[Mon Mar 23 21:56:00.376249 2026] [:error] [pid 52341:tid 52361] [client 54.211.246.250:49112] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGcKPKTBDR2u47Gb3nFQAAAVI"]
[Mon Mar 23 21:56:00.784287 2026] [:error] [pid 52341:tid 52349] [client 54.211.246.250:53880] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGcKPKTBDR2u47Gb3nFwAAAUY"]
[Mon Mar 23 21:56:01.192540 2026] [:error] [pid 52341:tid 52350] [client 54.211.246.250:49124] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGcaPKTBDR2u47Gb3nGgAAAUc"]
[Mon Mar 23 21:56:02.008060 2026] [:error] [pid 52341:tid 52354] [client 54.211.246.250:49134] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGcqPKTBDR2u47Gb3nHwAAAUs"]
[Mon Mar 23 21:56:02.825583 2026] [:error] [pid 38178:tid 38256] [client 54.211.246.250:49142] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.txt"] [unique_id "acFGcg0axWfXsVvR9udIIgAAAI4"]
[Mon Mar 23 21:56:03.235022 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:53896] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGc6PKTBDR2u47Gb3nJAAAAU0"]
[Mon Mar 23 21:56:03.643745 2026] [:error] [pid 38178:tid 38251] [client 54.211.246.250:53908] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGcw0axWfXsVvR9udIIwAAAIk"]
[Mon Mar 23 21:56:03.644898 2026] [:error] [pid 52341:tid 52347] [client 54.211.246.250:49156] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGc6PKTBDR2u47Gb3nKAAAAUQ"]
[Mon Mar 23 21:56:04.052120 2026] [:error] [pid 52341:tid 52363] [client 54.211.246.250:53922] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdKPKTBDR2u47Gb3nKwAAAVQ"]
[Mon Mar 23 21:56:04.460866 2026] [:error] [pid 52341:tid 52362] [client 54.211.246.250:53938] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdKPKTBDR2u47Gb3nLwAAAVM"]
[Mon Mar 23 21:56:04.462198 2026] [:error] [pid 52341:tid 52350] [client 54.211.246.250:49162] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdKPKTBDR2u47Gb3nMAAAAUc"]
[Mon Mar 23 21:56:04.866413 2026] [:error] [pid 52341:tid 52345] [client 54.211.246.250:53944] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdKPKTBDR2u47Gb3nNgAAAUI"]
[Mon Mar 23 21:56:05.276401 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:49166] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdaPKTBDR2u47Gb3nOAAAAUU"]
[Mon Mar 23 21:56:06.092406 2026] [:error] [pid 52341:tid 52355] [client 54.211.246.250:49176] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdqPKTBDR2u47Gb3nOwAAAUw"]
[Mon Mar 23 21:56:06.907641 2026] [:error] [pid 52341:tid 52352] [client 54.211.246.250:49184] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.md"] [unique_id "acFGdqPKTBDR2u47Gb3nQAAAAUk"]
[Mon Mar 23 21:56:07.315789 2026] [:error] [pid 52341:tid 52344] [client 54.211.246.250:53946] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGd6PKTBDR2u47Gb3nQQAAAUE"]
[Mon Mar 23 21:56:07.723010 2026] [:error] [pid 38177:tid 38227] [client 54.211.246.250:53956] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGd3sYW-_HCI66Mun4fgAAAEw"]
[Mon Mar 23 21:56:07.723105 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:49190] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGd6PKTBDR2u47Gb3nRgAAAU0"]
[Mon Mar 23 21:56:08.131338 2026] [:error] [pid 38176:tid 38193] [client 54.211.246.250:53970] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGeEtG4qlh1gvNjuJF-QAAAAY"]
[Mon Mar 23 21:56:08.537824 2026] [:error] [pid 38306:tid 38329] [client 54.211.246.250:53972] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGeDkL8qwu-hHc6BisSAAAARU"]
[Mon Mar 23 21:56:08.538844 2026] [:error] [pid 38178:tid 38248] [client 54.211.246.250:49194] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGeA0axWfXsVvR9udIJAAAAIY"]
[Mon Mar 23 21:56:08.946737 2026] [:error] [pid 38306:tid 38317] [client 54.211.246.250:53974] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGeDkL8qwu-hHc6BisSwAAAQk"]
[Mon Mar 23 21:56:09.356034 2026] [:error] [pid 38306:tid 38316] [client 54.211.246.250:49196] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGeTkL8qwu-hHc6BisTQAAAQg"]
[Mon Mar 23 21:56:10.173330 2026] [:error] [pid 38276:tid 38291] [client 54.211.246.250:38896] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGepoKGiI-a7oME3L_UgAAAMw"]
[Mon Mar 23 21:56:10.994961 2026] [:error] [pid 38178:tid 38263] [client 54.211.246.250:38898] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/readme.html"] [unique_id "acFGeg0axWfXsVvR9udIJQAAAJU"]
[Mon Mar 23 21:56:11.403436 2026] [:error] [pid 38276:tid 38292] [client 54.211.246.250:48774] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGe5oKGiI-a7oME3L_UwAAAM0"]
[Mon Mar 23 21:56:11.811110 2026] [:error] [pid 38306:tid 38308] [client 54.211.246.250:48788] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGezkL8qwu-hHc6BisVwAAAQA"]
[Mon Mar 23 21:56:11.811528 2026] [:error] [pid 38177:tid 38221] [client 54.211.246.250:38902] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGe3sYW-_HCI66Mun4gQAAAEY"]
[Mon Mar 23 21:56:12.218205 2026] [:error] [pid 38306:tid 38312] [client 54.211.246.250:48800] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGfDkL8qwu-hHc6BisWAAAAQQ"]
[Mon Mar 23 21:56:12.625126 2026] [:error] [pid 38176:tid 38199] [client 54.211.246.250:48814] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGfEtG4qlh1gvNjuJF-wAAAAw"]
[Mon Mar 23 21:56:12.629222 2026] [:error] [pid 38306:tid 38314] [client 54.211.246.250:38916] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGfDkL8qwu-hHc6BisWQAAAQY"]
[Mon Mar 23 21:56:13.033470 2026] [:error] [pid 38177:tid 38215] [client 54.211.246.250:48830] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGfXsYW-_HCI66Mun4ggAAAEA"]
[Mon Mar 23 21:56:13.453790 2026] [:error] [pid 38276:tid 38289] [client 54.211.246.250:38932] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGfZoKGiI-a7oME3L_VgAAAMo"]
[Mon Mar 23 21:56:14.273008 2026] [:error] [pid 38177:tid 38218] [client 54.211.246.250:38938] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGfnsYW-_HCI66Mun4gwAAAEM"]
[Mon Mar 23 21:56:15.092571 2026] [:error] [pid 38176:tid 38208] [client 54.211.246.250:38948] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.txt"] [unique_id "acFGf0tG4qlh1gvNjuJF_gAAABU"]
[Mon Mar 23 21:56:15.530841 2026] [:error] [pid 38176:tid 38200] [client 54.211.246.250:48840] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGf0tG4qlh1gvNjuJGAAAAAA0"]
[Mon Mar 23 21:56:15.938802 2026] [:error] [pid 38276:tid 38283] [client 54.211.246.250:48848] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGf5oKGiI-a7oME3L_VwAAAMQ"]
[Mon Mar 23 21:56:15.941682 2026] [:error] [pid 38306:tid 38322] [client 54.211.246.250:38958] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGfzkL8qwu-hHc6BisXgAAAQ4"]
[Mon Mar 23 21:56:16.353766 2026] [:error] [pid 38178:tid 38261] [client 54.211.246.250:48864] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGgA0axWfXsVvR9udIJwAAAJM"]
[Mon Mar 23 21:56:16.769422 2026] [:error] [pid 38178:tid 38245] [client 54.211.246.250:48866] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGgA0axWfXsVvR9udIKQAAAIM"]
[Mon Mar 23 21:56:16.769592 2026] [:error] [pid 38306:tid 38323] [client 54.211.246.250:38964] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGgDkL8qwu-hHc6BisXwAAAQ8"]
[Mon Mar 23 21:56:17.177335 2026] [:error] [pid 38177:tid 38220] [client 54.211.246.250:48870] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGgXsYW-_HCI66Mun4hQAAAEU"]
[Mon Mar 23 21:56:17.587350 2026] [:error] [pid 52341:tid 52367] [client 54.211.246.250:38972] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGgaPKTBDR2u47Gb3nVwAAAVg"]
[Mon Mar 23 21:56:18.406297 2026] [:error] [pid 38276:tid 38302] [client 54.211.246.250:38986] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGgpoKGiI-a7oME3L_WQAAANc"]
[Mon Mar 23 21:56:19.221689 2026] [:error] [pid 52341:tid 52362] [client 54.211.246.250:38990] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/changelog.md"] [unique_id "acFGg6PKTBDR2u47Gb3nXgAAAVM"]
[Mon Mar 23 21:56:19.628715 2026] [:error] [pid 38177:tid 38228] [client 54.211.246.250:37164] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGg3sYW-_HCI66Mun4hwAAAE0"]
[Mon Mar 23 21:56:20.036004 2026] [:error] [pid 38176:tid 38187] [client 54.211.246.250:37178] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhEtG4qlh1gvNjuJGBwAAAAA"]
[Mon Mar 23 21:56:20.036015 2026] [:error] [pid 38176:tid 38194] [client 54.211.246.250:41846] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhEtG4qlh1gvNjuJGCAAAAAc"]
[Mon Mar 23 21:56:20.443847 2026] [:error] [pid 38276:tid 38296] [client 54.211.246.250:37192] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhJoKGiI-a7oME3L_WgAAANE"]
[Mon Mar 23 21:56:20.851532 2026] [:error] [pid 52341:tid 52354] [client 54.211.246.250:37200] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhKPKTBDR2u47Gb3nYAAAAUs"]
[Mon Mar 23 21:56:20.851558 2026] [:error] [pid 38177:tid 38217] [client 54.211.246.250:41860] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhHsYW-_HCI66Mun4iAAAAEI"]
[Mon Mar 23 21:56:21.259857 2026] [:error] [pid 38176:tid 38198] [client 54.211.246.250:37214] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhUtG4qlh1gvNjuJGCwAAAAs"]
[Mon Mar 23 21:56:21.668415 2026] [:error] [pid 38178:tid 38257] [client 54.211.246.250:41866] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhQ0axWfXsVvR9udIKwAAAI8"]
[Mon Mar 23 21:56:22.484844 2026] [:error] [pid 38176:tid 38189] [client 54.211.246.250:41880] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGhktG4qlh1gvNjuJGDwAAAAI"]
[Mon Mar 23 21:56:23.301632 2026] [:error] [pid 38176:tid 38207] [client 54.211.246.250:41896] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/startklar-elementor-addons/startklar-elementor-addons.php"] [unique_id "acFGh0tG4qlh1gvNjuJGEwAAABQ"]
[Mon Mar 23 21:56:23.711121 2026] [:error] [pid 52341:tid 52360] [client 54.211.246.250:37218] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGh6PKTBDR2u47Gb3nYwAAAVE"]
[Mon Mar 23 21:56:24.118326 2026] [:error] [pid 38306:tid 38330] [client 54.211.246.250:37230] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiDkL8qwu-hHc6BisYQAAARY"]
[Mon Mar 23 21:56:24.121518 2026] [:error] [pid 52341:tid 52352] [client 54.211.246.250:41908] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiKPKTBDR2u47Gb3nZAAAAUk"]
[Mon Mar 23 21:56:24.524791 2026] [:error] [pid 38306:tid 38315] [client 54.211.246.250:37236] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiDkL8qwu-hHc6BisYwAAAQc"]
[Mon Mar 23 21:56:24.931932 2026] [:error] [pid 38276:tid 38293] [client 54.211.246.250:37246] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiJoKGiI-a7oME3L_WwAAAM4"]
[Mon Mar 23 21:56:24.936367 2026] [:error] [pid 38306:tid 38324] [client 54.211.246.250:41912] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiDkL8qwu-hHc6BisZgAAARA"]
[Mon Mar 23 21:56:25.339996 2026] [:error] [pid 52341:tid 52353] [client 54.211.246.250:37256] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiaPKTBDR2u47Gb3nZgAAAUo"]
[Mon Mar 23 21:56:25.755393 2026] [:error] [pid 38306:tid 38310] [client 54.211.246.250:41914] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiTkL8qwu-hHc6BisaAAAAQI"]
[Mon Mar 23 21:56:26.576380 2026] [:error] [pid 52341:tid 52346] [client 54.211.246.250:41918] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGiqPKTBDR2u47Gb3nawAAAUM"]
[Mon Mar 23 21:56:27.392732 2026] [:error] [pid 38276:tid 38284] [client 54.211.246.250:41924] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.txt"] [unique_id "acFGi5oKGiI-a7oME3L_XgAAAMU"]
[Mon Mar 23 21:56:27.801680 2026] [:error] [pid 38306:tid 38312] [client 54.211.246.250:37270] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGizkL8qwu-hHc6BisagAAAQQ"]
[Mon Mar 23 21:56:28.209308 2026] [:error] [pid 38276:tid 38298] [client 54.211.246.250:37282] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjJoKGiI-a7oME3L_YQAAANM"]
[Mon Mar 23 21:56:28.211981 2026] [:error] [pid 38176:tid 38206] [client 54.211.246.250:41938] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjEtG4qlh1gvNjuJGFgAAABM"]
[Mon Mar 23 21:56:28.617294 2026] [:error] [pid 38276:tid 38299] [client 54.211.246.250:37292] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjJoKGiI-a7oME3L_YgAAANQ"]
[Mon Mar 23 21:56:29.024929 2026] [:error] [pid 38276:tid 38288] [client 54.211.246.250:37296] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjZoKGiI-a7oME3L_ZAAAAMk"]
[Mon Mar 23 21:56:29.029740 2026] [:error] [pid 38176:tid 38211] [client 54.211.246.250:41946] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjUtG4qlh1gvNjuJGGQAAABg"]
[Mon Mar 23 21:56:29.433324 2026] [:error] [pid 38176:tid 38201] [client 54.211.246.250:58266] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjUtG4qlh1gvNjuJGGwAAAA4"]
[Mon Mar 23 21:56:29.847199 2026] [:error] [pid 38176:tid 38203] [client 54.211.246.250:48942] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjUtG4qlh1gvNjuJGHAAAABA"]
[Mon Mar 23 21:56:30.663540 2026] [:error] [pid 38176:tid 38187] [client 54.211.246.250:48948] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGjktG4qlh1gvNjuJGHgAAAAA"]
[Mon Mar 23 21:56:31.478339 2026] [:error] [pid 52341:tid 52357] [client 54.211.246.250:48956] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.md"] [unique_id "acFGj6PKTBDR2u47Gb3nbQAAAU4"]
[Mon Mar 23 21:56:31.887443 2026] [:error] [pid 38276:tid 38279] [client 54.211.246.250:58268] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGj5oKGiI-a7oME3L_aQAAAMA"]
[Mon Mar 23 21:56:32.294812 2026] [:error] [pid 38276:tid 38300] [client 54.211.246.250:58270] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkJoKGiI-a7oME3L_agAAANU"]
[Mon Mar 23 21:56:32.296987 2026] [:error] [pid 52341:tid 52349] [client 54.211.246.250:48968] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkKPKTBDR2u47Gb3ncQAAAUY"]
[Mon Mar 23 21:56:32.701645 2026] [:error] [pid 38177:tid 38222] [client 54.211.246.250:58284] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkHsYW-_HCI66Mun4iwAAAEc"]
[Mon Mar 23 21:56:33.109828 2026] [:error] [pid 38276:tid 38289] [client 54.211.246.250:58294] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkZoKGiI-a7oME3L_awAAAMo"]
[Mon Mar 23 21:56:33.112310 2026] [:error] [pid 38177:tid 38234] [client 54.211.246.250:48972] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkXsYW-_HCI66Mun4jQAAAFM"]
[Mon Mar 23 21:56:33.518015 2026] [:error] [pid 38306:tid 38321] [client 54.211.246.250:58306] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkTkL8qwu-hHc6BisdwAAAQ0"]
[Mon Mar 23 21:56:33.929691 2026] [:error] [pid 38306:tid 38309] [client 54.211.246.250:48986] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/kognetiks-chatbot/readme.html"] [unique_id "acFGkTkL8qwu-hHc6BisegAAAQE"]
[Mon Mar 23 21:56:37.341652 2026] [:error] [pid 52341:tid 52345] [client 54.211.246.250:48992] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlaPKTBDR2u47Gb3nhQAAAUI"]
[Mon Mar 23 21:56:37.342133 2026] [:error] [pid 38306:tid 38328] [client 54.211.246.250:58316] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlTkL8qwu-hHc6BishQAAARQ"]
[Mon Mar 23 21:56:37.749113 2026] [:error] [pid 38176:tid 38207] [client 54.211.246.250:58318] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlUtG4qlh1gvNjuJGJgAAABQ"]
[Mon Mar 23 21:56:38.156576 2026] [:error] [pid 52341:tid 52349] [client 54.211.246.250:48998] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlqPKTBDR2u47Gb3niQAAAUY"]
[Mon Mar 23 21:56:38.156580 2026] [:error] [pid 52341:tid 52354] [client 54.211.246.250:58324] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlqPKTBDR2u47Gb3niAAAAUs"]
[Mon Mar 23 21:56:38.564567 2026] [:error] [pid 52341:tid 52360] [client 54.211.246.250:58328] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlqPKTBDR2u47Gb3nigAAAVE"]
[Mon Mar 23 21:56:38.972076 2026] [:error] [pid 52341:tid 52355] [client 54.211.246.250:58338] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlqPKTBDR2u47Gb3njgAAAUw"]
[Mon Mar 23 21:56:38.973471 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:49014] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGlqPKTBDR2u47Gb3njwAAAUU"]
[Mon Mar 23 21:56:39.787482 2026] [:error] [pid 52341:tid 52347] [client 54.211.246.250:40122] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGl6PKTBDR2u47Gb3nkgAAAUQ"]
[Mon Mar 23 21:56:40.601688 2026] [:error] [pid 38177:tid 38227] [client 54.211.246.250:40132] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/readme.html"] [unique_id "acFGmHsYW-_HCI66Mun4kgAAAEw"]
[Mon Mar 23 21:56:41.010352 2026] [:error] [pid 52341:tid 52362] [client 54.211.246.250:47842] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmaPKTBDR2u47Gb3nlAAAAVM"]
[Mon Mar 23 21:56:41.418022 2026] [:error] [pid 38276:tid 38298] [client 54.211.246.250:47844] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmZoKGiI-a7oME3L_cQAAANM"]
[Mon Mar 23 21:56:41.419382 2026] [:error] [pid 52341:tid 52357] [client 54.211.246.250:40144] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmaPKTBDR2u47Gb3nlwAAAU4"]
[Mon Mar 23 21:56:41.825476 2026] [:error] [pid 38176:tid 38197] [client 54.211.246.250:47858] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmUtG4qlh1gvNjuJGKAAAAAo"]
[Mon Mar 23 21:56:42.233530 2026] [:error] [pid 52341:tid 52354] [client 54.211.246.250:40146] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmqPKTBDR2u47Gb3nmAAAAUs"]
[Mon Mar 23 21:56:42.233631 2026] [:error] [pid 38177:tid 38239] [client 54.211.246.250:47874] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmnsYW-_HCI66Mun4lgAAAFg"]
[Mon Mar 23 21:56:42.641286 2026] [:error] [pid 38178:tid 38248] [client 54.211.246.250:47882] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmg0axWfXsVvR9udIOAAAAIY"]
[Mon Mar 23 21:56:43.049621 2026] [:error] [pid 38178:tid 38246] [client 54.211.246.250:40158] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGmw0axWfXsVvR9udIOQAAAIQ"]
[Mon Mar 23 21:56:43.869107 2026] [:error] [pid 38176:tid 38209] [client 54.211.246.250:40160] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGm0tG4qlh1gvNjuJGKgAAABY"]
[Mon Mar 23 21:56:44.689016 2026] [:error] [pid 38276:tid 38299] [client 54.211.246.250:40174] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.txt"] [unique_id "acFGnJoKGiI-a7oME3L_cgAAANQ"]
[Mon Mar 23 21:56:45.096867 2026] [:error] [pid 38178:tid 38250] [client 54.211.246.250:47892] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnQ0axWfXsVvR9udIOwAAAIg"]
[Mon Mar 23 21:56:45.505581 2026] [:error] [pid 38177:tid 38218] [client 54.211.246.250:47908] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnXsYW-_HCI66Mun4lwAAAEM"]
[Mon Mar 23 21:56:45.506466 2026] [:error] [pid 52341:tid 52365] [client 54.211.246.250:40180] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnaPKTBDR2u47Gb3nnAAAAVY"]
[Mon Mar 23 21:56:45.913498 2026] [:error] [pid 38178:tid 38242] [client 54.211.246.250:47914] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnQ0axWfXsVvR9udIPgAAAIA"]
[Mon Mar 23 21:56:46.321124 2026] [:error] [pid 38306:tid 38322] [client 54.211.246.250:47922] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnjkL8qwu-hHc6BishwAAAQ4"]
[Mon Mar 23 21:56:46.324153 2026] [:error] [pid 38306:tid 38317] [client 54.211.246.250:40190] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnjkL8qwu-hHc6BisiAAAAQk"]
[Mon Mar 23 21:56:46.728488 2026] [:error] [pid 38306:tid 38319] [client 54.211.246.250:47934] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnjkL8qwu-hHc6BisigAAAQs"]
[Mon Mar 23 21:56:47.141590 2026] [:error] [pid 38306:tid 38323] [client 54.211.246.250:40194] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGnzkL8qwu-hHc6BisiwAAAQ8"]
[Mon Mar 23 21:56:47.958282 2026] [:error] [pid 38176:tid 38211] [client 54.211.246.250:40210] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGn0tG4qlh1gvNjuJGLgAAABg"]
[Mon Mar 23 21:56:48.775596 2026] [:error] [pid 38306:tid 38315] [client 54.211.246.250:40216] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/changelog.md"] [unique_id "acFGoDkL8qwu-hHc6BisjgAAAQc"]
[Mon Mar 23 21:56:49.184020 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:47950] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGoaPKTBDR2u47Gb3npwAAAU0"]
[Mon Mar 23 21:56:49.591388 2026] [:error] [pid 52341:tid 52360] [client 54.211.246.250:44000] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGoaPKTBDR2u47Gb3nqQAAAVE"]
[Mon Mar 23 21:56:49.592724 2026] [:error] [pid 52341:tid 52349] [client 54.211.246.250:40224] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGoaPKTBDR2u47Gb3nqgAAAUY"]
[Mon Mar 23 21:56:49.998904 2026] [:error] [pid 52341:tid 52351] [client 54.211.246.250:44008] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGoaPKTBDR2u47Gb3nrAAAAUg"]
[Mon Mar 23 21:56:50.406592 2026] [:error] [pid 38306:tid 38324] [client 54.211.246.250:44022] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGojkL8qwu-hHc6BisjwAAARA"]
[Mon Mar 23 21:56:50.409878 2026] [:error] [pid 38178:tid 38264] [client 54.211.246.250:60040] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGog0axWfXsVvR9udIPwAAAJY"]
[Mon Mar 23 21:56:50.812978 2026] [:error] [pid 38276:tid 38294] [client 54.211.246.250:44028] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGopoKGiI-a7oME3L_dAAAAM8"]
[Mon Mar 23 21:56:51.224797 2026] [:error] [pid 38276:tid 38288] [client 54.211.246.250:60046] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGo5oKGiI-a7oME3L_dQAAAMk"]
[Mon Mar 23 21:56:52.041349 2026] [:error] [pid 52341:tid 52353] [client 54.211.246.250:60054] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGpKPKTBDR2u47Gb3nrwAAAUo"]
[Mon Mar 23 21:56:52.858478 2026] [:error] [pid 38306:tid 38328] [client 54.211.246.250:60066] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/profilepress/profilepress.php"] [unique_id "acFGpDkL8qwu-hHc6BislgAAARQ"]
[Mon Mar 23 21:56:53.269667 2026] [:error] [pid 38176:tid 38196] [client 54.211.246.250:44034] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpUtG4qlh1gvNjuJGMgAAAAk"]
[Mon Mar 23 21:56:53.677562 2026] [:error] [pid 38306:tid 38322] [client 54.211.246.250:44036] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpTkL8qwu-hHc6BismwAAAQ4"]
[Mon Mar 23 21:56:53.677913 2026] [:error] [pid 38306:tid 38312] [client 54.211.246.250:60078] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpTkL8qwu-hHc6BisnAAAAQQ"]
[Mon Mar 23 21:56:54.086535 2026] [:error] [pid 38177:tid 38229] [client 54.211.246.250:44038] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpnsYW-_HCI66Mun4mAAAAE4"]
[Mon Mar 23 21:56:54.494505 2026] [:error] [pid 52341:tid 52343] [client 54.211.246.250:60086] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpqPKTBDR2u47Gb3nsgAAAUA"]
[Mon Mar 23 21:56:54.494510 2026] [:error] [pid 52341:tid 52344] [client 54.211.246.250:44044] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpqPKTBDR2u47Gb3nsQAAAUE"]
[Mon Mar 23 21:56:54.902160 2026] [:error] [pid 38178:tid 38257] [client 54.211.246.250:44050] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGpg0axWfXsVvR9udIQAAAAI8"]
[Mon Mar 23 21:56:55.310586 2026] [:error] [pid 38177:tid 38233] [client 54.211.246.250:60092] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGp3sYW-_HCI66Mun4mgAAAFI"]
[Mon Mar 23 21:56:56.128267 2026] [:error] [pid 38178:tid 38252] [client 54.211.246.250:60106] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGqA0axWfXsVvR9udIRAAAAIo"]
[Mon Mar 23 21:56:56.944368 2026] [:error] [pid 52341:tid 52347] [client 54.211.246.250:60118] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.txt"] [unique_id "acFGqKPKTBDR2u47Gb3ntQAAAUQ"]
[Mon Mar 23 21:56:57.351942 2026] [:error] [pid 52341:tid 52361] [client 54.211.246.250:44058] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqaPKTBDR2u47Gb3ntwAAAVI"]
[Mon Mar 23 21:56:57.758660 2026] [:error] [pid 38276:tid 38279] [client 54.211.246.250:44062] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqZoKGiI-a7oME3L_dwAAAMA"]
[Mon Mar 23 21:56:57.759795 2026] [:error] [pid 52341:tid 52350] [client 54.211.246.250:60120] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqaPKTBDR2u47Gb3nugAAAUc"]
[Mon Mar 23 21:56:58.166684 2026] [:error] [pid 38306:tid 38330] [client 54.211.246.250:44066] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqjkL8qwu-hHc6BisoQAAARY"]
[Mon Mar 23 21:56:58.575641 2026] [:error] [pid 38306:tid 38318] [client 54.211.246.250:60136] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqjkL8qwu-hHc6BisogAAAQo"]
[Mon Mar 23 21:56:58.575747 2026] [:error] [pid 38177:tid 38228] [client 54.211.246.250:44076] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqnsYW-_HCI66Mun4nAAAAE0"]
[Mon Mar 23 21:56:58.983677 2026] [:error] [pid 38176:tid 38208] [client 54.211.246.250:44084] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqktG4qlh1gvNjuJGNgAAABU"]
[Mon Mar 23 21:56:59.392467 2026] [:error] [pid 38178:tid 38244] [client 54.211.246.250:60146] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGqw0axWfXsVvR9udIRgAAAII"]
[Mon Mar 23 21:57:00.209340 2026] [:error] [pid 38176:tid 38200] [client 54.211.246.250:55360] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGrEtG4qlh1gvNjuJGOAAAAA0"]
[Mon Mar 23 21:57:01.024904 2026] [:error] [pid 38177:tid 38222] [client 54.211.246.250:55368] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.md"] [unique_id "acFGrXsYW-_HCI66Mun4nwAAAEc"]
[Mon Mar 23 21:57:01.433288 2026] [:error] [pid 38306:tid 38314] [client 54.211.246.250:55328] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGrTkL8qwu-hHc6BisowAAAQY"]
[Mon Mar 23 21:57:01.841998 2026] [:error] [pid 38176:tid 38195] [client 54.211.246.250:55376] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGrUtG4qlh1gvNjuJGOgAAAAg"]
[Mon Mar 23 21:57:01.842446 2026] [:error] [pid 38176:tid 38197] [client 54.211.246.250:55336] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGrUtG4qlh1gvNjuJGOwAAAAo"]
[Mon Mar 23 21:57:02.250601 2026] [:error] [pid 52341:tid 52364] [client 54.211.246.250:55338] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGrqPKTBDR2u47Gb3nxwAAAVU"]
[Mon Mar 23 21:57:02.659402 2026] [:error] [pid 38306:tid 38325] [client 54.211.246.250:55346] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGrjkL8qwu-hHc6BispQAAARE"]
[Mon Mar 23 21:57:02.662883 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:55386] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGrqPKTBDR2u47Gb3nygAAAUU"]
[Mon Mar 23 21:57:03.067143 2026] [:error] [pid 38176:tid 38188] [client 54.211.246.250:55358] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGr0tG4qlh1gvNjuJGPAAAAAE"]
[Mon Mar 23 21:57:03.478503 2026] [:error] [pid 52341:tid 52366] [client 54.211.246.250:55402] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGr6PKTBDR2u47Gb3nzAAAAVc"]
[Mon Mar 23 21:57:04.296955 2026] [:error] [pid 52341:tid 52359] [client 54.211.246.250:55408] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGsKPKTBDR2u47Gb3nzgAAAVA"]
[Mon Mar 23 21:57:05.114361 2026] [:error] [pid 38306:tid 38328] [client 54.211.246.250:55420] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/readme.html"] [unique_id "acFGsTkL8qwu-hHc6BispgAAARQ"]
[Mon Mar 23 21:57:05.522460 2026] [:error] [pid 52341:tid 52346] [client 54.211.246.250:55368] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGsaPKTBDR2u47Gb3n0QAAAUM"]
[Mon Mar 23 21:57:05.929740 2026] [:error] [pid 52341:tid 52349] [client 54.211.246.250:55370] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGsaPKTBDR2u47Gb3n0wAAAUY"]
[Mon Mar 23 21:57:05.933232 2026] [:error] [pid 52341:tid 52354] [client 54.211.246.250:55428] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGsaPKTBDR2u47Gb3n1AAAAUs"]
[Mon Mar 23 21:57:06.338023 2026] [:error] [pid 52341:tid 52352] [client 54.211.246.250:55382] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGsqPKTBDR2u47Gb3n2QAAAUk"]
[Mon Mar 23 21:57:06.745453 2026] [:error] [pid 38178:tid 38243] [client 54.211.246.250:55396] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGsg0axWfXsVvR9udISQAAAIE"]
[Mon Mar 23 21:57:06.751477 2026] [:error] [pid 52341:tid 52353] [client 54.211.246.250:55438] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGsqPKTBDR2u47Gb3n2wAAAUo"]
[Mon Mar 23 21:57:07.152872 2026] [:error] [pid 38176:tid 38196] [client 54.211.246.250:55406] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGs0tG4qlh1gvNjuJGQgAAAAk"]
[Mon Mar 23 21:57:07.566168 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:55452] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGs6PKTBDR2u47Gb3n3QAAAUU"]
[Mon Mar 23 21:57:08.382837 2026] [:error] [pid 52341:tid 52344] [client 54.211.246.250:55456] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGtKPKTBDR2u47Gb3n3wAAAUE"]
[Mon Mar 23 21:57:09.201617 2026] [:error] [pid 52341:tid 52347] [client 54.211.246.250:55466] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.txt"] [unique_id "acFGtaPKTBDR2u47Gb3n4wAAAUQ"]
[Mon Mar 23 21:57:09.610557 2026] [:error] [pid 38178:tid 38250] [client 54.211.246.250:44154] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtQ0axWfXsVvR9udITgAAAIg"]
[Mon Mar 23 21:57:10.017997 2026] [:error] [pid 38178:tid 38261] [client 54.211.246.250:44156] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtg0axWfXsVvR9udITwAAAJM"]
[Mon Mar 23 21:57:10.022027 2026] [:error] [pid 52341:tid 52350] [client 54.211.246.250:35342] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtqPKTBDR2u47Gb3n5gAAAUc"]
[Mon Mar 23 21:57:10.425519 2026] [:error] [pid 38306:tid 38322] [client 54.211.246.250:44170] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtjkL8qwu-hHc6BisqwAAAQ4"]
[Mon Mar 23 21:57:10.833283 2026] [:error] [pid 38276:tid 38295] [client 54.211.246.250:44184] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtpoKGiI-a7oME3L_fQAAANA"]
[Mon Mar 23 21:57:10.838868 2026] [:error] [pid 38306:tid 38312] [client 54.211.246.250:35354] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtjkL8qwu-hHc6BisrAAAAQQ"]
[Mon Mar 23 21:57:11.239174 2026] [:error] [pid 38306:tid 38331] [client 54.211.246.250:44194] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtzkL8qwu-hHc6BisrQAAARc"]
[Mon Mar 23 21:57:11.655134 2026] [:error] [pid 38306:tid 38319] [client 54.211.246.250:35364] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGtzkL8qwu-hHc6BisrwAAAQs"]
[Mon Mar 23 21:57:12.472673 2026] [:error] [pid 38178:tid 38259] [client 54.211.246.250:35372] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGuA0axWfXsVvR9udIVAAAAJE"]
[Mon Mar 23 21:57:13.288340 2026] [:error] [pid 38276:tid 38287] [client 54.211.246.250:35386] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/changelog.md"] [unique_id "acFGuZoKGiI-a7oME3L_ggAAAMg"]
[Mon Mar 23 21:57:13.696135 2026] [:error] [pid 38276:tid 38281] [client 54.211.246.250:44204] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuZoKGiI-a7oME3L_hAAAAMI"]
[Mon Mar 23 21:57:14.105507 2026] [:error] [pid 38176:tid 38190] [client 54.211.246.250:44208] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuktG4qlh1gvNjuJGSgAAAAM"]
[Mon Mar 23 21:57:14.106715 2026] [:error] [pid 38176:tid 38209] [client 54.211.246.250:35394] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuktG4qlh1gvNjuJGSwAAABY"]
[Mon Mar 23 21:57:14.513046 2026] [:error] [pid 52341:tid 52345] [client 54.211.246.250:44212] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuqPKTBDR2u47Gb3n7AAAAUI"]
[Mon Mar 23 21:57:14.919923 2026] [:error] [pid 52341:tid 52359] [client 54.211.246.250:44214] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuqPKTBDR2u47Gb3n8AAAAVA"]
[Mon Mar 23 21:57:14.922695 2026] [:error] [pid 52341:tid 52365] [client 54.211.246.250:35402] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuqPKTBDR2u47Gb3n8QAAAVY"]
[Mon Mar 23 21:57:15.327200 2026] [:error] [pid 38306:tid 38316] [client 54.211.246.250:44230] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuzkL8qwu-hHc6BissQAAAQg"]
[Mon Mar 23 21:57:15.739395 2026] [:error] [pid 38178:tid 38266] [client 54.211.246.250:35408] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGuw0axWfXsVvR9udIVwAAAJg"]
[Mon Mar 23 21:57:16.554285 2026] [:error] [pid 38178:tid 38248] [client 54.211.246.250:35418] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGvA0axWfXsVvR9udIXAAAAIY"]
[Mon Mar 23 21:57:17.371040 2026] [:error] [pid 38178:tid 38263] [client 54.211.246.250:35428] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/3dprint-lite/3dprint-lite.php"] [unique_id "acFGvQ0axWfXsVvR9udIXQAAAJU"]
[Mon Mar 23 21:57:17.779427 2026] [:error] [pid 52341:tid 52362] [client 54.211.246.250:44234] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGvaPKTBDR2u47Gb3oAgAAAVM"]
[Mon Mar 23 21:57:18.187786 2026] [:error] [pid 38176:tid 38199] [client 54.211.246.250:44246] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGvktG4qlh1gvNjuJGUwAAAAw"]
[Mon Mar 23 21:57:18.188024 2026] [:error] [pid 52341:tid 52355] [client 54.211.246.250:35434] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGvqPKTBDR2u47Gb3oDQAAAUw"]
[Mon Mar 23 21:57:18.595720 2026] [:error] [pid 38276:tid 38279] [client 54.211.246.250:44252] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGvpoKGiI-a7oME3L_hwAAAMA"]
[Mon Mar 23 21:57:19.002698 2026] [:error] [pid 52341:tid 52354] [client 54.211.246.250:44266] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGv6PKTBDR2u47Gb3oEQAAAUs"]
[Mon Mar 23 21:57:19.002916 2026] [:error] [pid 38176:tid 38194] [client 54.211.246.250:35440] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGv0tG4qlh1gvNjuJGVQAAAAc"]
[Mon Mar 23 21:57:19.410476 2026] [:error] [pid 38176:tid 38207] [client 54.211.246.250:40646] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGv0tG4qlh1gvNjuJGVwAAABQ"]
[Mon Mar 23 21:57:19.824549 2026] [:error] [pid 38178:tid 38253] [client 54.211.246.250:34252] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGvw0axWfXsVvR9udIZAAAAIs"]
[Mon Mar 23 21:57:20.642518 2026] [:error] [pid 38177:tid 38224] [client 54.211.246.250:34264] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGwHsYW-_HCI66Mun4rwAAAEk"]
[Mon Mar 23 21:57:21.459352 2026] [:error] [pid 38176:tid 38196] [client 54.211.246.250:34278] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.txt"] [unique_id "acFGwUtG4qlh1gvNjuJGXwAAAAk"]
[Mon Mar 23 21:57:21.867594 2026] [:error] [pid 38176:tid 38198] [client 54.211.246.250:40658] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGwUtG4qlh1gvNjuJGYQAAAAs"]
[Mon Mar 23 21:57:22.274842 2026] [:error] [pid 38176:tid 38199] [client 54.211.246.250:40660] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGwktG4qlh1gvNjuJGYgAAAAw"]
[Mon Mar 23 21:57:22.275638 2026] [:error] [pid 52341:tid 52347] [client 54.211.246.250:34290] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGwqPKTBDR2u47Gb3oIwAAAUQ"]
[Mon Mar 23 21:57:22.682731 2026] [:error] [pid 38306:tid 38315] [client 54.211.246.250:40672] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGwjkL8qwu-hHc6BisvAAAAQc"]
[Mon Mar 23 21:57:23.090294 2026] [:error] [pid 38306:tid 38332] [client 54.211.246.250:34298] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGwzkL8qwu-hHc6BisvgAAARg"]
[Mon Mar 23 21:57:23.090294 2026] [:error] [pid 38178:tid 38255] [client 54.211.246.250:40680] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGww0axWfXsVvR9udIZQAAAI0"]
[Mon Mar 23 21:57:23.497005 2026] [:error] [pid 38178:tid 38248] [client 54.211.246.250:40684] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGww0axWfXsVvR9udIZgAAAIY"]
[Mon Mar 23 21:57:23.908056 2026] [:error] [pid 38178:tid 38246] [client 54.211.246.250:34304] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGww0axWfXsVvR9udIZwAAAIQ"]
[Mon Mar 23 21:57:24.730180 2026] [:error] [pid 38276:tid 38301] [client 54.211.246.250:34314] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGxJoKGiI-a7oME3L_iwAAANY"]
[Mon Mar 23 21:57:25.547962 2026] [:error] [pid 38176:tid 38190] [client 54.211.246.250:34324] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.md"] [unique_id "acFGxUtG4qlh1gvNjuJGbQAAAAM"]
[Mon Mar 23 21:57:25.957511 2026] [:error] [pid 38176:tid 38196] [client 54.211.246.250:40694] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGxUtG4qlh1gvNjuJGbwAAAAk"]
[Mon Mar 23 21:57:26.364747 2026] [:error] [pid 38176:tid 38195] [client 54.211.246.250:34328] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGxktG4qlh1gvNjuJGcwAAAAg"]
[Mon Mar 23 21:57:26.364747 2026] [:error] [pid 38176:tid 38199] [client 54.211.246.250:40708] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGxktG4qlh1gvNjuJGcgAAAAw"]
[Mon Mar 23 21:57:26.773454 2026] [:error] [pid 52341:tid 52353] [client 54.211.246.250:40710] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGxqPKTBDR2u47Gb3oKwAAAUo"]
[Mon Mar 23 21:57:27.179790 2026] [:error] [pid 38306:tid 38329] [client 54.211.246.250:34342] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGxzkL8qwu-hHc6BiswwAAARU"]
[Mon Mar 23 21:57:27.180577 2026] [:error] [pid 52341:tid 52346] [client 54.211.246.250:40726] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGx6PKTBDR2u47Gb3oLQAAAUM"]
[Mon Mar 23 21:57:27.587385 2026] [:error] [pid 38306:tid 38312] [client 54.211.246.250:40732] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGxzkL8qwu-hHc6BisxQAAAQQ"]
[Mon Mar 23 21:57:27.994435 2026] [:error] [pid 52341:tid 52363] [client 54.211.246.250:34344] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGx6PKTBDR2u47Gb3oMQAAAVQ"]
[Mon Mar 23 21:57:28.811496 2026] [:error] [pid 52341:tid 52350] [client 54.211.246.250:34356] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGyKPKTBDR2u47Gb3oNwAAAUc"]
[Mon Mar 23 21:57:29.626719 2026] [:error] [pid 38177:tid 38224] [client 54.211.246.250:42172] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/readme.html"] [unique_id "acFGyXsYW-_HCI66Mun4vQAAAEk"]
[Mon Mar 23 21:57:30.035274 2026] [:error] [pid 38176:tid 38209] [client 54.211.246.250:35032] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGyktG4qlh1gvNjuJGeQAAABY"]
[Mon Mar 23 21:57:30.442741 2026] [:error] [pid 38177:tid 38234] [client 54.211.246.250:35038] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGynsYW-_HCI66Mun4vwAAAFM"]
[Mon Mar 23 21:57:30.446793 2026] [:error] [pid 52341:tid 52360] [client 54.211.246.250:42178] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGyqPKTBDR2u47Gb3oOwAAAVE"]
[Mon Mar 23 21:57:30.849902 2026] [:error] [pid 38178:tid 38243] [client 54.211.246.250:35054] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGyg0axWfXsVvR9udIcQAAAIE"]
[Mon Mar 23 21:57:31.257787 2026] [:error] [pid 52341:tid 52346] [client 54.211.246.250:35066] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGy6PKTBDR2u47Gb3oPQAAAUM"]
[Mon Mar 23 21:57:31.263145 2026] [:error] [pid 38176:tid 38194] [client 54.211.246.250:42184] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGy0tG4qlh1gvNjuJGfgAAAAc"]
[Mon Mar 23 21:57:31.665397 2026] [:error] [pid 52341:tid 52359] [client 54.211.246.250:35072] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGy6PKTBDR2u47Gb3oQAAAAVA"]
[Mon Mar 23 21:57:32.079015 2026] [:error] [pid 52341:tid 52363] [client 54.211.246.250:42190] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGzKPKTBDR2u47Gb3oQwAAAVQ"]
[Mon Mar 23 21:57:32.894275 2026] [:error] [pid 38306:tid 38321] [client 54.211.246.250:42206] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGzDkL8qwu-hHc6BisxwAAAQ0"]
[Mon Mar 23 21:57:33.711415 2026] [:error] [pid 38276:tid 38296] [client 54.211.246.250:42210] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.txt"] [unique_id "acFGzZoKGiI-a7oME3L_jwAAANE"]
[Mon Mar 23 21:57:34.119752 2026] [:error] [pid 52341:tid 52352] [client 54.211.246.250:35084] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGzqPKTBDR2u47Gb3oSwAAAUk"]
[Mon Mar 23 21:57:34.526922 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:35092] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGzqPKTBDR2u47Gb3oTQAAAU0"]
[Mon Mar 23 21:57:34.529316 2026] [:error] [pid 52341:tid 52348] [client 54.211.246.250:42218] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGzqPKTBDR2u47Gb3oTwAAAUU"]
[Mon Mar 23 21:57:34.934760 2026] [:error] [pid 52341:tid 52346] [client 54.211.246.250:35100] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGzqPKTBDR2u47Gb3oUQAAAUM"]
[Mon Mar 23 21:57:35.342775 2026] [:error] [pid 38178:tid 38264] [client 54.211.246.250:35102] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGzw0axWfXsVvR9udIdgAAAJY"]
[Mon Mar 23 21:57:35.343368 2026] [:error] [pid 52341:tid 52351] [client 54.211.246.250:42224] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGz6PKTBDR2u47Gb3oVAAAAUg"]
[Mon Mar 23 21:57:35.750997 2026] [:error] [pid 38178:tid 38252] [client 54.211.246.250:35118] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFGzw0axWfXsVvR9udIegAAAIo"]
[Mon Mar 23 21:57:36.157563 2026] [:error] [pid 52341:tid 52363] [client 54.211.246.250:42232] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFG0KPKTBDR2u47Gb3oVgAAAVQ"]
[Mon Mar 23 21:57:36.971888 2026] [:error] [pid 52341:tid 52365] [client 54.211.246.250:42244] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-directory-kit/changelog.md"] [unique_id "acFG0KPKTBDR2u47Gb3oWQAAAVY"]
[Mon Mar 23 21:57:39.242090 2026] [:error] [pid 38178:tid 38253] [client 54.211.246.250:35124] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG0w0axWfXsVvR9udIiQAAAIs"]
[Mon Mar 23 21:57:39.242200 2026] [:error] [pid 38276:tid 38301] [client 54.211.246.250:42246] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG05oKGiI-a7oME3L_ngAAANY"]
[Mon Mar 23 21:57:39.649957 2026] [:error] [pid 38176:tid 38200] [client 54.211.246.250:57372] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG00tG4qlh1gvNjuJGhwAAAA0"]
[Mon Mar 23 21:57:40.058044 2026] [:error] [pid 52341:tid 52357] [client 54.211.246.250:57378] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1KPKTBDR2u47Gb3oWwAAAU4"]
[Mon Mar 23 21:57:40.058330 2026] [:error] [pid 52341:tid 52352] [client 54.211.246.250:37630] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1KPKTBDR2u47Gb3oXAAAAUk"]
[Mon Mar 23 21:57:40.465332 2026] [:error] [pid 38176:tid 38209] [client 54.211.246.250:57384] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1EtG4qlh1gvNjuJGigAAABY"]
[Mon Mar 23 21:57:40.872551 2026] [:error] [pid 38176:tid 38206] [client 54.211.246.250:57388] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1EtG4qlh1gvNjuJGiwAAABM"]
[Mon Mar 23 21:57:40.873694 2026] [:error] [pid 38276:tid 38292] [client 54.211.246.250:37646] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1JoKGiI-a7oME3L_nwAAAM0"]
[Mon Mar 23 21:57:41.690598 2026] [:error] [pid 52341:tid 52356] [client 54.211.246.250:37652] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1aPKTBDR2u47Gb3oYgAAAU0"]
[Mon Mar 23 21:57:42.506692 2026] [:error] [pid 52341:tid 52351] [client 54.211.246.250:37668] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/changelog.md"] [unique_id "acFG1qPKTBDR2u47Gb3oZAAAAUg"]
[Mon Mar 23 21:57:42.917141 2026] [:error] [pid 38276:tid 38286] [client 54.211.246.250:57394] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG1poKGiI-a7oME3L_oQAAAMc"]
[Mon Mar 23 21:57:43.330872 2026] [:error] [pid 38177:tid 38219] [client 54.211.246.250:57398] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG13sYW-_HCI66Mun4yAAAAEQ"]
[Mon Mar 23 21:57:43.331554 2026] [:error] [pid 38177:tid 38218] [client 54.211.246.250:37680] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG13sYW-_HCI66Mun4yQAAAEM"]
[Mon Mar 23 21:57:43.740040 2026] [:error] [pid 38177:tid 38233] [client 54.211.246.250:57400] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG13sYW-_HCI66Mun4ygAAAFI"]
[Mon Mar 23 21:57:44.147986 2026] [:error] [pid 38276:tid 38293] [client 54.211.246.250:37690] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG2JoKGiI-a7oME3L_owAAAM4"]
[Mon Mar 23 21:57:44.148230 2026] [:error] [pid 52341:tid 52355] [client 54.211.246.250:57406] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG2KPKTBDR2u47Gb3oZwAAAUw"]
[Mon Mar 23 21:57:44.554681 2026] [:error] [pid 38178:tid 38252] [client 54.211.246.250:57414] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG2A0axWfXsVvR9udIjAAAAIo"]
[Mon Mar 23 21:57:44.961675 2026] [:error] [pid 38178:tid 38254] [client 54.211.246.250:37692] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG2A0axWfXsVvR9udIjgAAAIw"]
[Mon Mar 23 21:57:45.777808 2026] [:error] [pid 38276:tid 38297] [client 54.211.246.250:37702] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG2ZoKGiI-a7oME3L_qgAAANI"]
[Mon Mar 23 21:57:46.594389 2026] [:error] [pid 38176:tid 38199] [client 54.211.246.250:37710] [client 54.211.246.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/masterstudy-lms-learning-management-system/masterstudy-lms-learning-management-system.php"] [unique_id "acFG2ktG4qlh1gvNjuJGkwAAAAw"]
[Mon Mar 23 22:17:17.290553 2026] [:error] [pid 52341:tid 52351] [client 49.51.132.100:54910] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acFLbaPKTBDR2u47Gb30DgAAAUg"]
[Mon Mar 23 23:44:25.698846 2026] [:error] [pid 38306:tid 38318] [client 43.156.109.53:35864] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acFf2TkL8qwu-hHc6BjabAAAAQo"]
[Tue Mar 24 01:50:40.967805 2026] [:error] [pid 56238:tid 56348] [client 182.42.105.85:52833] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acF9cFSqceFAZRgPDq6vvwAAAMA"]
[Tue Mar 24 05:58:43.591376 2026] [:error] [pid 64198:tid 64221] [client 43.166.253.94:54442] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acG3k3VzJqf6OS_oSZ3VTQAAAVU"]
[Tue Mar 24 08:44:36.514590 2026] [:error] [pid 64198:tid 64224] [client 1.15.52.154:42970] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acHedHVzJqf6OS_oSZ0kbQAAAVg"]
[Tue Mar 24 09:02:43.726455 2026] [:error] [pid 3030:tid 3057] [client 185.223.152.140:40261] [client 185.223.152.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.140, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acHiswyOuILyynfcqfkW5AAAAAg"]
[Tue Mar 24 09:02:43.734109 2026] [proxy_fcgi:error] [pid 3030:tid 3057] [client 185.223.152.140:40261] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 10:44:57.888802 2026] [:error] [pid 64198:tid 64210] [client 49.51.178.45:48090] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acH6qXVzJqf6OS_oSZ16SQAAAUo"]
[Tue Mar 24 12:41:40.231634 2026] [:error] [pid 48219:tid 48290] [client 122.177.210.115:12452] [client 122.177.210.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.210.115, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acIWBChf3b4R_lAIyv8WegAAAgk"]
[Tue Mar 24 12:41:40.244525 2026] [proxy_fcgi:error] [pid 48219:tid 48290] [client 122.177.210.115:12452] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:18.817128 2026] [proxy_fcgi:error] [pid 48219:tid 48288] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:19.090583 2026] [proxy_fcgi:error] [pid 48219:tid 48294] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:19.361715 2026] [proxy_fcgi:error] [pid 48219:tid 48287] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:19.712090 2026] [proxy_fcgi:error] [pid 48219:tid 48302] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:19.981437 2026] [proxy_fcgi:error] [pid 48219:tid 48282] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:20.250246 2026] [proxy_fcgi:error] [pid 48219:tid 48297] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:20.518182 2026] [proxy_fcgi:error] [pid 48219:tid 48303] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:20.847250 2026] [proxy_fcgi:error] [pid 48219:tid 48290] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:21.147994 2026] [proxy_fcgi:error] [pid 48219:tid 48293] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:21.415291 2026] [proxy_fcgi:error] [pid 48219:tid 48298] [client 4.223.137.201:56892] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 15:59:21.678216 2026] [:error] [pid 48219:tid 48300] [client 4.223.137.201:56892] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "acJEWShf3b4R_lAIyv8_3QAAAhM"]
[Tue Mar 24 16:00:09.315783 2026] [:error] [pid 3032:tid 3119] [client 4.223.137.201:22705] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "acJEiSa_-JXXD03-JNwvbwAAAJA"]
[Tue Mar 24 16:00:10.024409 2026] [:error] [pid 38767:tid 38774] [client 4.223.137.201:16956] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "acJEivwkUqN4GJAI5oWUngAAAQQ"]
[Tue Mar 24 16:00:11.270307 2026] [:error] [pid 3137:tid 3161] [client 4.223.137.201:12511] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "acJEi5dZesutm6dfYM_b3gAAANY"]
[Tue Mar 24 16:00:12.344215 2026] [:error] [pid 3137:tid 3148] [client 4.223.137.201:15929] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "acJEjJdZesutm6dfYM_b6gAAAMk"]
[Tue Mar 24 16:00:13.017417 2026] [:error] [pid 48214:tid 48271] [client 4.223.137.201:50267] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "acJEjbeshLWZ3uUDHKlAqgAAAdM"]
[Tue Mar 24 16:00:13.894015 2026] [:error] [pid 38767:tid 38783] [client 4.223.137.201:47066] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "acJEjfwkUqN4GJAI5oWUtAAAAQ0"]
[Tue Mar 24 16:00:14.935733 2026] [:error] [pid 38767:tid 38778] [client 4.223.137.201:11011] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "acJEjvwkUqN4GJAI5oWUvwAAAQg"]
[Tue Mar 24 16:00:15.858251 2026] [:error] [pid 38767:tid 38787] [client 4.223.137.201:32459] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "acJEj_wkUqN4GJAI5oWUxwAAARE"]
[Tue Mar 24 16:00:17.397402 2026] [:error] [pid 3137:tid 3160] [client 4.223.137.201:11014] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "acJEkZdZesutm6dfYM_b9AAAANU"]
[Tue Mar 24 16:00:18.514936 2026] [:error] [pid 48219:tid 48296] [client 4.223.137.201:60338] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "acJEkihf3b4R_lAIyv9ABgAAAg8"]
[Tue Mar 24 16:00:19.559648 2026] [:error] [pid 64198:tid 64222] [client 4.223.137.201:47087] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "acJEk3VzJqf6OS_oSZ08UQAAAVY"]
[Tue Mar 24 16:00:20.581488 2026] [:error] [pid 3137:tid 3140] [client 4.223.137.201:11042] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "acJElJdZesutm6dfYM_b_wAAAME"]
[Tue Mar 24 16:00:21.559978 2026] [proxy_fcgi:error] [pid 3137:tid 3155] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:21.907959 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:22.205247 2026] [proxy_fcgi:error] [pid 3137:tid 3148] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:22.474218 2026] [proxy_fcgi:error] [pid 3137:tid 3145] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:22.869604 2026] [proxy_fcgi:error] [pid 3137:tid 3146] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:23.450328 2026] [proxy_fcgi:error] [pid 3137:tid 3147] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:23.828339 2026] [proxy_fcgi:error] [pid 3137:tid 3162] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:24.095465 2026] [proxy_fcgi:error] [pid 3137:tid 3155] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:24.367431 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:24.793339 2026] [proxy_fcgi:error] [pid 3137:tid 3148] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:25.137121 2026] [proxy_fcgi:error] [pid 3137:tid 3160] [client 4.223.137.201:50252] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 16:00:25.523903 2026] [:error] [pid 3137:tid 3144] [client 4.223.137.201:50252] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acJEmZdZesutm6dfYM_cFQAAAMU"]
[Tue Mar 24 16:00:27.283388 2026] [:error] [pid 48214:tid 48259] [client 4.223.137.201:2881] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acJEm7eshLWZ3uUDHKlAtAAAAcc"]
[Tue Mar 24 16:00:28.653753 2026] [:error] [pid 48214:tid 48275] [client 4.223.137.201:12491] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acJEnLeshLWZ3uUDHKlAuAAAAdc"]
[Tue Mar 24 16:00:29.674706 2026] [:error] [pid 38767:tid 38773] [client 4.223.137.201:60342] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acJEnfwkUqN4GJAI5oWU5QAAAQM"]
[Tue Mar 24 16:00:30.582901 2026] [:error] [pid 48128:tid 48163] [client 4.223.137.201:60289] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acJEnsvR4LIMFLbM5Vkf1wAAAYs"]
[Tue Mar 24 16:00:31.263989 2026] [:error] [pid 48214:tid 48272] [client 4.223.137.201:50272] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acJEn7eshLWZ3uUDHKlAugAAAdQ"]
[Tue Mar 24 16:00:32.279381 2026] [:error] [pid 3030:tid 3059] [client 4.223.137.201:11018] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acJEoAyOuILyynfcqflBLAAAAAo"]
[Tue Mar 24 16:00:33.048767 2026] [:error] [pid 3030:tid 3054] [client 4.223.137.201:47664] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acJEoQyOuILyynfcqflBLQAAAAU"]
[Tue Mar 24 16:00:34.072665 2026] [:error] [pid 48219:tid 48291] [client 4.223.137.201:2932] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "acJEoihf3b4R_lAIyv9AUgAAAgo"]
[Tue Mar 24 16:00:34.767599 2026] [:error] [pid 48214:tid 48274] [client 4.223.137.201:47094] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "acJEoreshLWZ3uUDHKlAwAAAAdY"]
[Tue Mar 24 16:00:35.468198 2026] [:error] [pid 3032:tid 3122] [client 4.223.137.201:15920] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "acJEoya_-JXXD03-JNwvgAAAAJM"]
[Tue Mar 24 16:00:36.386547 2026] [:error] [pid 3032:tid 3125] [client 4.223.137.201:50244] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "acJEpCa_-JXXD03-JNwvggAAAJY"]
[Tue Mar 24 16:00:37.523667 2026] [:error] [pid 3030:tid 3050] [client 4.223.137.201:22687] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acJEpQyOuILyynfcqflBMgAAAAE"]
[Tue Mar 24 16:00:38.217307 2026] [:error] [pid 48214:tid 48261] [client 4.223.137.201:11068] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acJEpreshLWZ3uUDHKlAzgAAAck"]
[Tue Mar 24 16:00:38.907499 2026] [:error] [pid 3032:tid 3113] [client 4.223.137.201:22678] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acJEpia_-JXXD03-JNwvhgAAAIo"]
[Tue Mar 24 16:00:40.692097 2026] [:error] [pid 64198:tid 64211] [client 4.223.137.201:15120] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acJEqHVzJqf6OS_oSZ08aAAAAUs"]
[Tue Mar 24 16:00:42.322578 2026] [:error] [pid 3030:tid 3057] [client 4.223.137.201:37037] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "acJEqgyOuILyynfcqflBNgAAAAg"]
[Tue Mar 24 16:00:44.938170 2026] [:error] [pid 38767:tid 38781] [client 4.223.137.201:2884] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "acJErPwkUqN4GJAI5oWU7wAAAQs"]
[Tue Mar 24 16:00:45.929613 2026] [:error] [pid 38767:tid 38788] [client 4.223.137.201:12825] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "acJErfwkUqN4GJAI5oWU8QAAARI"]
[Tue Mar 24 16:00:46.642466 2026] [:error] [pid 3031:tid 3100] [client 4.223.137.201:47626] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "acJErqJBKytnG47nuiYg7QAAAFg"]
[Tue Mar 24 16:00:47.584070 2026] [:error] [pid 48128:tid 48151] [client 4.223.137.201:60326] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acJEr8vR4LIMFLbM5Vkf4QAAAYI"]
[Tue Mar 24 16:00:48.376189 2026] [:error] [pid 48214:tid 48268] [client 4.223.137.201:60292] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acJEsLeshLWZ3uUDHKlA2gAAAdA"]
[Tue Mar 24 16:00:49.758351 2026] [:error] [pid 3031:tid 3080] [client 4.223.137.201:60331] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acJEsaJBKytnG47nuiYg8AAAAEQ"]
[Tue Mar 24 16:00:50.351737 2026] [:error] [pid 38767:tid 38791] [client 4.223.137.201:11032] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acJEsvwkUqN4GJAI5oWU8wAAARU"]
[Tue Mar 24 16:00:51.319794 2026] [:error] [pid 48128:tid 48166] [client 4.223.137.201:14054] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "acJEs8vR4LIMFLbM5Vkf5QAAAY4"]
[Tue Mar 24 16:00:52.134562 2026] [:error] [pid 3032:tid 3103] [client 4.223.137.201:60293] [client 4.223.137.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "acJEtCa_-JXXD03-JNwvigAAAIA"]
[Tue Mar 24 16:37:23.844111 2026] [:error] [pid 48219:tid 48285] [client 43.157.52.37:47316] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acJNQyhf3b4R_lAIyv9HowAAAgQ"]
[Tue Mar 24 16:53:54.652555 2026] [:error] [pid 38767:tid 38775] [client 216.81.245.214:53006] [client 216.81.245.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "acJRIvwkUqN4GJAI5oW0xAAAAQU"]
[Tue Mar 24 17:57:10.155971 2026] [:error] [pid 48214:tid 48259] [client 43.159.152.184:59654] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acJf9reshLWZ3uUDHKlVSQAAAcc"]
[Tue Mar 24 18:59:06.454824 2026] [:error] [pid 3032:tid 3103] [client 182.42.111.213:51153] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acJueia_-JXXD03-JNxJ3AAAAIA"]
[Tue Mar 24 19:37:06.603815 2026] [:error] [pid 64198:tid 64212] [client 136.144.35.218:62189] [client 136.144.35.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.218, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acJ3YnVzJqf6OS_oSZ2mKwAAAUw"]
[Tue Mar 24 19:37:06.613897 2026] [proxy_fcgi:error] [pid 64198:tid 64212] [client 136.144.35.218:62189] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 22:00:20.812461 2026] [:error] [pid 64198:tid 64220] [client 170.106.37.134:58356] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acKY9HVzJqf6OS_oSZ3WnAAAAVQ"]
[Tue Mar 24 22:21:31.399186 2026] [autoindex:error] [pid 64198:tid 64219] [client 213.199.63.167:53401] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 24 22:43:59.183135 2026] [:error] [pid 64198:tid 64209] [client 103.21.164.246:58415] [client 103.21.164.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.21.164.246, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acKjL3VzJqf6OS_oSZ3i9AAAAUk"]
[Tue Mar 24 22:43:59.195825 2026] [proxy_fcgi:error] [pid 64198:tid 64209] [client 103.21.164.246:58415] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:08:46.760379 2026] [:error] [pid 3031:tid 3078] [client 103.250.109.226:56031] [client 103.250.109.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.250.109.226, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acKo_qJBKytnG47nuiZEdAAAAEI"]
[Tue Mar 24 23:08:46.771227 2026] [proxy_fcgi:error] [pid 3031:tid 3078] [client 103.250.109.226:56031] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:18:45.522473 2026] [:error] [pid 48214:tid 48255] [client 43.159.152.4:51138] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acKrVbeshLWZ3uUDHKmHsAAAAcM"]
[Tue Mar 24 23:41:30.557372 2026] [proxy_fcgi:error] [pid 3137:tid 3147] [client 20.151.251.35:14588] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:41:30.971119 2026] [:error] [pid 3137:tid 3142] [client 20.151.251.35:14588] [client 20.151.251.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.251.35, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acKwqpdZesutm6dfYM9yZgAAAMM"]
[Tue Mar 24 23:41:31.197957 2026] [proxy_fcgi:error] [pid 3137:tid 3149] [client 20.151.251.35:14588] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:41:32.038429 2026] [proxy_fcgi:error] [pid 3137:tid 3145] [client 20.151.251.35:14588] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:41:32.666437 2026] [proxy_fcgi:error] [pid 3137:tid 3150] [client 20.151.251.35:14588] AH01071: Got error 'Primary script unknown'
[Tue Mar 24 23:41:32.871678 2026] [:error] [pid 3137:tid 3147] [client 20.151.251.35:14588] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acKwrJdZesutm6dfYM9ydwAAAMg"]
[Tue Mar 24 23:41:33.698213 2026] [:error] [pid 3137:tid 3161] [client 20.151.251.35:14529] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acKwrZdZesutm6dfYM9yeAAAANY"]
[Tue Mar 24 23:41:34.524548 2026] [:error] [pid 48219:tid 48289] [client 20.151.251.35:14563] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acKwrihf3b4R_lAIyv-ogwAAAgg"]
[Tue Mar 24 23:41:35.347065 2026] [:error] [pid 38767:tid 38776] [client 20.151.251.35:14552] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "acKwr_wkUqN4GJAI5oWB7QAAAQY"]
[Wed Mar 25 01:14:47.999109 2026] [:error] [pid 20371:tid 20378] [client 45.156.87.11:56594] [client 45.156.87.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.11, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acLGh-b25OL4yTv2fF965wAAAQU"]
[Wed Mar 25 01:14:48.003383 2026] [proxy_fcgi:error] [pid 20371:tid 20378] [client 45.156.87.11:56594] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 01:37:49.258739 2026] [autoindex:error] [pid 20371:tid 20397] [client 20.17.160.49:65161] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 02:15:16.550819 2026] [proxy_fcgi:error] [pid 57703:tid 58040] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:16.977969 2026] [proxy_fcgi:error] [pid 57703:tid 58032] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:18.366328 2026] [proxy_fcgi:error] [pid 57703:tid 58036] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:18.576672 2026] [proxy_fcgi:error] [pid 57703:tid 58042] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:18.788634 2026] [proxy_fcgi:error] [pid 57703:tid 58026] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:19.207917 2026] [proxy_fcgi:error] [pid 57703:tid 58038] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:19.627726 2026] [proxy_fcgi:error] [pid 57703:tid 58021] [client 20.151.251.35:59894] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 02:15:20.046340 2026] [:error] [pid 57703:tid 58037] [client 20.151.251.35:59894] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acLUuPIVQxDtjkklWGZm0gAAAFI"]
[Wed Mar 25 02:15:20.901062 2026] [:error] [pid 20371:tid 20382] [client 20.151.251.35:59874] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acLUuOb25OL4yTv2fF-lEAAAAQk"]
[Wed Mar 25 02:15:21.725454 2026] [:error] [pid 57711:tid 58067] [client 20.151.251.35:15051] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acLUuaLdPFdeRRktTdNpgwAAAI0"]
[Wed Mar 25 02:15:22.628908 2026] [:error] [pid 20371:tid 20381] [client 20.151.251.35:15074] [client 20.151.251.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acLUuub25OL4yTv2fF-lGQAAAQg"]
[Wed Mar 25 03:51:13.362758 2026] [:error] [pid 892:tid 901] [client 170.106.11.141:34168] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acLrMST_G8WMU3T3yxrt8gAAAMQ"]
[Wed Mar 25 05:14:27.823082 2026] [:error] [pid 756:tid 870] [client 78.182.92.49:56424] [client 78.182.92.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.182.92.49, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acL-szOaW6oylMIDBCR0VgAAAJI"]
[Wed Mar 25 05:14:27.835318 2026] [proxy_fcgi:error] [pid 756:tid 870] [client 78.182.92.49:56424] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 05:34:30.616688 2026] [:error] [pid 754:tid 774] [client 148.72.173.218:52647] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acMDZjisL3asPbA3Cti3qwAAAAk"]
[Wed Mar 25 05:34:30.616777 2026] [:error] [pid 754:tid 774] [client 148.72.173.218:52647] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 13"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acMDZjisL3asPbA3Cti3qwAAAAk"]
[Wed Mar 25 09:55:10.161769 2026] [:error] [pid 26449:tid 26469] [client 185.223.152.29:33051] [client 185.223.152.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.29, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acNAftpZ2T15NDqzAjHpxQAAAlA"]
[Wed Mar 25 09:55:10.176783 2026] [proxy_fcgi:error] [pid 26449:tid 26469] [client 185.223.152.29:33051] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 09:55:18.375000 2026] [:error] [pid 26449:tid 26454] [client 43.157.95.239:51508] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acNAhtpZ2T15NDqzAjHp2AAAAkE"]
[Wed Mar 25 11:52:14.703028 2026] [:error] [pid 26321:tid 26341] [client 185.194.178.101:59677] [client 185.194.178.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.101, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acNb7vKO65qqGZCSPZrY2gAAAgI"]
[Wed Mar 25 11:52:14.714052 2026] [proxy_fcgi:error] [pid 26321:tid 26341] [client 185.194.178.101:59677] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 16:03:14.113419 2026] [:error] [pid 25875:tid 25891] [client 170.106.160.90:60120] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acOWwhJ38QkS3Nyfshy3xQAAAoo"]
[Wed Mar 25 16:49:03.308466 2026] [:error] [pid 26269:tid 26292] [client 182.42.111.213:47128] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acOhf0n7e-ZQbaIs7qyrLQAAAZA"]
[Wed Mar 25 17:29:17.507103 2026] [:error] [pid 26321:tid 26364] [client 49.51.243.95:36082] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acOq7fKO65qqGZCSPZoo0AAAAhc"]
[Wed Mar 25 17:38:42.176390 2026] [proxy_fcgi:error] [pid 26449:tid 26455] [client 74.248.130.23:42114] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:38:42.436366 2026] [proxy_fcgi:error] [pid 26449:tid 26476] [client 74.248.130.23:42114] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 17:38:42.951774 2026] [:error] [pid 26449:tid 26464] [client 74.248.130.23:42114] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fw/faiyy.php"] [unique_id "acOtItpZ2T15NDqzAjFn6AAAAks"]
[Wed Mar 25 17:38:43.488452 2026] [:error] [pid 25967:tid 25987] [client 74.248.130.23:42153] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acOtI_g8Qtq7ZM4mSFkleAAAA08"]
[Wed Mar 25 17:38:43.998840 2026] [:error] [pid 25967:tid 25985] [client 74.248.130.23:41481] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acOtI_g8Qtq7ZM4mSFklggAAA00"]
[Wed Mar 25 17:38:44.507613 2026] [:error] [pid 25967:tid 25994] [client 74.248.130.23:42168] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acOtJPg8Qtq7ZM4mSFkliQAAA1Y"]
[Wed Mar 25 17:38:45.069056 2026] [:error] [pid 25967:tid 25993] [client 74.248.130.23:42392] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acOtJfg8Qtq7ZM4mSFkllQAAA1U"]
[Wed Mar 25 17:38:45.587486 2026] [:error] [pid 756:tid 876] [client 74.248.130.23:42096] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acOtJTOaW6oylMIDBCQXagAAAJg"]
[Wed Mar 25 17:38:46.098308 2026] [:error] [pid 26321:tid 26342] [client 74.248.130.23:41452] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acOtJvKO65qqGZCSPZorBAAAAgM"]
[Wed Mar 25 17:38:46.614609 2026] [:error] [pid 26321:tid 26354] [client 74.248.130.23:42092] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acOtJvKO65qqGZCSPZorCAAAAg0"]
[Wed Mar 25 17:38:47.130297 2026] [:error] [pid 25967:tid 25993] [client 74.248.130.23:42428] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acOtJ_g8Qtq7ZM4mSFkloAAAA1U"]
[Wed Mar 25 17:38:47.647441 2026] [:error] [pid 47946:tid 47960] [client 74.248.130.23:41457] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acOtJzipQTqBMSeKYhd8OAAAAQw"]
[Wed Mar 25 17:38:48.161743 2026] [:error] [pid 25967:tid 25981] [client 74.248.130.23:41415] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acOtKPg8Qtq7ZM4mSFklpgAAA0k"]
[Wed Mar 25 17:38:48.847738 2026] [:error] [pid 25967:tid 25989] [client 74.248.130.23:42072] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bays.php"] [unique_id "acOtKPg8Qtq7ZM4mSFklqwAAA1E"]
[Wed Mar 25 17:38:49.357341 2026] [:error] [pid 26269:tid 26293] [client 74.248.130.23:41512] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bays.php"] [unique_id "acOtKUn7e-ZQbaIs7qyvRQAAAZE"]
[Wed Mar 25 17:38:49.866868 2026] [:error] [pid 47989:tid 48010] [client 74.248.130.23:41724] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bays.php"] [unique_id "acOtKSWKdJMhIccROjmU9AAAAVM"]
[Wed Mar 25 17:38:50.406085 2026] [:error] [pid 47946:tid 47962] [client 74.248.130.23:42382] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "acOtKjipQTqBMSeKYhd8PgAAAQ4"]
[Wed Mar 25 17:38:50.916409 2026] [:error] [pid 26449:tid 26473] [client 74.248.130.23:41501] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "acOtKtpZ2T15NDqzAjFn8wAAAlQ"]
[Wed Mar 25 17:38:51.430208 2026] [:error] [pid 756:tid 860] [client 74.248.130.23:41531] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "acOtKzOaW6oylMIDBCQXcAAAAIg"]
[Wed Mar 25 17:38:51.939566 2026] [:error] [pid 756:tid 871] [client 74.248.130.23:41496] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "acOtKzOaW6oylMIDBCQXcwAAAJM"]
[Wed Mar 25 18:05:59.566448 2026] [:error] [pid 892:tid 923] [client 182.8.164.18:6823] [client 182.8.164.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.164.18, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acOzhyT_G8WMU3T3yxrFpQAAANg"]
[Wed Mar 25 18:05:59.577867 2026] [proxy_fcgi:error] [pid 892:tid 923] [client 182.8.164.18:6823] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:09:20.665522 2026] [proxy_fcgi:error] [pid 25967:tid 25993] [client 51.103.36.25:32783] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:09:20.913741 2026] [proxy_fcgi:error] [pid 25967:tid 25984] [client 51.103.36.25:32783] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 18:09:21.618892 2026] [:error] [pid 25967:tid 25992] [client 51.103.36.25:32783] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acO0Ufg8Qtq7ZM4mSFkxYAAAA1Q"]
[Wed Mar 25 18:09:22.321315 2026] [:error] [pid 25875:tid 25888] [client 51.103.36.25:54215] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acO0UhJ38QkS3NyfshzbHwAAAoc"]
[Wed Mar 25 18:09:22.816693 2026] [:error] [pid 47989:tid 48011] [client 51.103.36.25:6409] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acO0UiWKdJMhIccROjmkrQAAAVQ"]
[Wed Mar 25 18:09:23.321978 2026] [:error] [pid 25967:tid 25972] [client 51.103.36.25:59535] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acO0U_g8Qtq7ZM4mSFkxYwAAA0A"]
[Wed Mar 25 18:09:23.803134 2026] [:error] [pid 892:tid 902] [client 51.103.36.25:37132] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acO0UyT_G8WMU3T3yxrGawAAAMU"]
[Wed Mar 25 18:09:24.286272 2026] [:error] [pid 25967:tid 25977] [client 51.103.36.25:59550] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acO0VPg8Qtq7ZM4mSFkxaAAAA0U"]
[Wed Mar 25 18:09:25.104907 2026] [:error] [pid 25967:tid 25988] [client 51.103.36.25:35657] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acO0Vfg8Qtq7ZM4mSFkxbgAAA1A"]
[Wed Mar 25 18:09:25.618129 2026] [:error] [pid 47989:tid 47992] [client 51.103.36.25:37177] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acO0VSWKdJMhIccROjmktAAAAUE"]
[Wed Mar 25 18:09:26.120012 2026] [:error] [pid 25967:tid 25983] [client 51.103.36.25:6433] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acO0Vvg8Qtq7ZM4mSFkxcQAAA0s"]
[Wed Mar 25 18:09:26.589702 2026] [:error] [pid 47989:tid 47994] [client 51.103.36.25:6542] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acO0ViWKdJMhIccROjmkugAAAUM"]
[Wed Mar 25 18:09:27.065370 2026] [:error] [pid 25969:tid 26040] [client 51.103.36.25:37181] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acO0Vxd3aEUmOfdKja__9AAAA84"]
[Wed Mar 25 18:09:27.543590 2026] [:error] [pid 892:tid 910] [client 51.103.36.25:39483] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/AAAA.php"] [unique_id "acO0VyT_G8WMU3T3yxrGbgAAAMw"]
[Wed Mar 25 18:09:28.040284 2026] [:error] [pid 25969:tid 26047] [client 51.103.36.25:44236] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/AAAA.php"] [unique_id "acO0WBd3aEUmOfdKja__9gAAA9U"]
[Wed Mar 25 18:09:28.537976 2026] [:error] [pid 26449:tid 26477] [client 51.103.36.25:44261] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/AAAA.php"] [unique_id "acO0WNpZ2T15NDqzAjFsIQAAAlg"]
[Wed Mar 25 18:09:29.156657 2026] [:error] [pid 47989:tid 47995] [client 51.103.36.25:38333] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/AAAA.php"] [unique_id "acO0WSWKdJMhIccROjmkwAAAAUQ"]
[Wed Mar 25 18:09:29.756207 2026] [:error] [pid 47989:tid 48005] [client 51.103.36.25:51128] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x0rg.php"] [unique_id "acO0WSWKdJMhIccROjmkxgAAAU4"]
[Wed Mar 25 18:09:30.237959 2026] [:error] [pid 25875:tid 25897] [client 51.103.36.25:54828] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x0rg.php"] [unique_id "acO0WhJ38QkS3NyfshzbLgAAApA"]
[Wed Mar 25 18:09:30.715984 2026] [:error] [pid 892:tid 915] [client 51.103.36.25:38326] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x0rg.php"] [unique_id "acO0WiT_G8WMU3T3yxrGcgAAANE"]
[Wed Mar 25 18:09:31.207108 2026] [:error] [pid 892:tid 908] [client 51.103.36.25:39427] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x0rg.php"] [unique_id "acO0WyT_G8WMU3T3yxrGdQAAAMo"]
[Wed Mar 25 18:09:31.672197 2026] [:error] [pid 47946:tid 47958] [client 51.103.36.25:35705] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dk.php"] [unique_id "acO0WzipQTqBMSeKYhd-TQAAAQo"]
[Wed Mar 25 20:59:14.247016 2026] [proxy_fcgi:error] [pid 47989:tid 48002] [client 20.251.61.72:55484] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:59:14.512029 2026] [proxy_fcgi:error] [pid 47989:tid 47992] [client 20.251.61.72:55484] AH01071: Got error 'Primary script unknown'
[Wed Mar 25 20:59:15.298162 2026] [:error] [pid 47989:tid 48007] [client 20.251.61.72:55484] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acPcIyWKdJMhIccROjn34QAAAVA"]
[Wed Mar 25 20:59:15.829804 2026] [:error] [pid 25875:tid 25900] [client 20.251.61.72:54227] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acPcIxJ38QkS3NyfshwccAAAApM"]
[Wed Mar 25 20:59:16.361993 2026] [:error] [pid 26449:tid 26471] [client 20.251.61.72:45064] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acPcJNpZ2T15NDqzAjGGxwAAAlI"]
[Wed Mar 25 20:59:16.880734 2026] [:error] [pid 25875:tid 25903] [client 20.251.61.72:54854] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lfm.php"] [unique_id "acPcJBJ38QkS3NyfshwccwAAApY"]
[Wed Mar 25 20:59:17.408646 2026] [:error] [pid 25875:tid 25901] [client 20.251.61.72:54250] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acPcJRJ38QkS3NyfshwceAAAApQ"]
[Wed Mar 25 20:59:17.942097 2026] [:error] [pid 26321:tid 26352] [client 20.251.61.72:61329] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acPcJfKO65qqGZCSPZpX8AAAAgs"]
[Wed Mar 25 20:59:18.460365 2026] [:error] [pid 25875:tid 25904] [client 20.251.61.72:44304] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acPcJhJ38QkS3NyfshwcgAAAApc"]
[Wed Mar 25 20:59:18.981198 2026] [:error] [pid 25875:tid 25899] [client 20.251.61.72:45088] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abca.php"] [unique_id "acPcJhJ38QkS3NyfshwcgwAAApI"]
[Wed Mar 25 20:59:19.500147 2026] [:error] [pid 26321:tid 26344] [client 20.251.61.72:54889] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acPcJ_KO65qqGZCSPZpX9wAAAgU"]
[Wed Mar 25 20:59:20.020243 2026] [:error] [pid 26321:tid 26357] [client 20.251.61.72:55715] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acPcKPKO65qqGZCSPZpX-gAAAhA"]
[Wed Mar 25 20:59:20.655418 2026] [:error] [pid 25875:tid 25883] [client 20.251.61.72:54847] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acPcKBJ38QkS3NyfshwcigAAAoI"]
[Wed Mar 25 20:59:21.176355 2026] [:error] [pid 25967:tid 25972] [client 20.251.61.72:52685] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "acPcKfg8Qtq7ZM4mSFlsTgAAA0A"]
[Wed Mar 25 20:59:21.704733 2026] [:error] [pid 25967:tid 25985] [client 20.251.61.72:54678] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acPcKfg8Qtq7ZM4mSFlsVAAAA00"]
[Wed Mar 25 20:59:22.227694 2026] [:error] [pid 26449:tid 26475] [client 20.251.61.72:54665] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acPcKtpZ2T15NDqzAjGGzwAAAlY"]
[Wed Mar 25 20:59:22.760649 2026] [:error] [pid 25969:tid 26050] [client 20.251.61.72:44325] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acPcKhd3aEUmOfdKja8QlAAAA9g"]
[Wed Mar 25 20:59:23.282203 2026] [:error] [pid 47989:tid 48006] [client 20.251.61.72:54855] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddd.php"] [unique_id "acPcKyWKdJMhIccROjn36AAAAU8"]
[Wed Mar 25 20:59:23.809246 2026] [:error] [pid 26321:tid 26353] [client 20.251.61.72:45750] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2024.php"] [unique_id "acPcK_KO65qqGZCSPZpX_gAAAgw"]
[Wed Mar 25 20:59:24.334842 2026] [:error] [pid 26321:tid 26346] [client 20.251.61.72:55733] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2024.php"] [unique_id "acPcLPKO65qqGZCSPZpYAAAAAgY"]
[Wed Mar 25 20:59:24.856467 2026] [:error] [pid 47989:tid 48001] [client 20.251.61.72:61312] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2024.php"] [unique_id "acPcLCWKdJMhIccROjn38QAAAUo"]
[Wed Mar 25 20:59:25.375277 2026] [:error] [pid 47989:tid 48012] [client 20.251.61.72:50689] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl2024.php"] [unique_id "acPcLSWKdJMhIccROjn39QAAAVU"]
[Wed Mar 25 20:59:25.904516 2026] [:error] [pid 26449:tid 26471] [client 20.251.61.72:1956] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acPcLdpZ2T15NDqzAjGG1gAAAlI"]
[Wed Mar 25 20:59:26.423858 2026] [:error] [pid 25967:tid 25982] [client 20.251.61.72:61330] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acPcLvg8Qtq7ZM4mSFlsYAAAA0o"]
[Wed Mar 25 20:59:26.949336 2026] [:error] [pid 26321:tid 26344] [client 20.251.61.72:45696] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acPcLvKO65qqGZCSPZpYAwAAAgU"]
[Wed Mar 25 20:59:27.475529 2026] [:error] [pid 26449:tid 26453] [client 20.251.61.72:56035] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fgd.php"] [unique_id "acPcL9pZ2T15NDqzAjGG2AAAAkA"]
[Wed Mar 25 20:59:28.003127 2026] [:error] [pid 26321:tid 26343] [client 20.251.61.72:44321] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/AAAA.php"] [unique_id "acPcMPKO65qqGZCSPZpYBwAAAgQ"]
[Wed Mar 25 20:59:28.528615 2026] [:error] [pid 47989:tid 48011] [client 20.251.61.72:55475] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/AAAA.php"] [unique_id "acPcMCWKdJMhIccROjn3-gAAAVQ"]
[Wed Mar 25 20:59:29.074012 2026] [:error] [pid 47989:tid 48001] [client 20.251.61.72:59338] [client 20.251.61.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/az.php"] [unique_id "acPcMSWKdJMhIccROjn3_wAAAUo"]
[Wed Mar 25 21:46:05.759896 2026] [:error] [pid 25875:tid 25902] [client 43.155.162.41:36160] [client 43.155.162.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acPnHRJ38QkS3NyfshwuoQAAApU"]
[Thu Mar 26 00:33:27.369013 2026] [:error] [pid 55733:tid 55764] [client 182.44.8.254:38388] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acQOV6MzUauzYCgMHcnLVQAAAJA"]
[Thu Mar 26 04:31:01.462668 2026] [:error] [pid 19818:tid 19836] [client 79.122.30.166:50829] [client 79.122.30.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.122.30.166, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acRGBczaSnm3d1BeM5UfBgAAANA"]
[Thu Mar 26 04:31:01.476519 2026] [proxy_fcgi:error] [pid 19818:tid 19836] [client 79.122.30.166:50829] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 05:59:33.741880 2026] [:error] [pid 60829:tid 60850] [client 101.32.49.171:55752] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acRaxfTdjHKeZokybaTXJQAAARM"]
[Thu Mar 26 06:30:39.227351 2026] [proxy_fcgi:error] [pid 19710:tid 19737] [client 132.164.249.185:13564] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:30:39.478516 2026] [:error] [pid 19710:tid 19744] [client 132.164.249.185:13564] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "acRiDwVEWP8Ar68Njk6YYQAAABY"]
[Thu Mar 26 06:30:40.491292 2026] [:error] [pid 60829:tid 60831] [client 132.164.249.185:11449] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "acRiEPTdjHKeZokybaT5CwAAAQA"]
[Thu Mar 26 06:30:41.230655 2026] [:error] [pid 19818:tid 19839] [client 132.164.249.185:20138] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "acRiEczaSnm3d1BeM5VqDgAAANM"]
[Thu Mar 26 06:30:41.952192 2026] [:error] [pid 19710:tid 19744] [client 132.164.249.185:20364] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "acRiEQVEWP8Ar68Njk6YawAAABY"]
[Thu Mar 26 06:30:42.780632 2026] [:error] [pid 60829:tid 60831] [client 132.164.249.185:15946] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "acRiEvTdjHKeZokybaT5FwAAAQA"]
[Thu Mar 26 06:30:44.366569 2026] [:error] [pid 19712:tid 19793] [client 132.164.249.185:14226] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "acRiFNWhKhRNqm23vFPEPAAAAJE"]
[Thu Mar 26 06:30:45.870539 2026] [:error] [pid 19712:tid 19797] [client 132.164.249.185:9212] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "acRiFdWhKhRNqm23vFPESQAAAJU"]
[Thu Mar 26 06:30:46.778350 2026] [:error] [pid 19711:tid 19750] [client 132.164.249.185:19326] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "acRiFmj3l1y81GYfluQt4QAAAEE"]
[Thu Mar 26 06:30:47.574325 2026] [:error] [pid 60829:tid 60841] [client 132.164.249.185:20075] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acRiF_TdjHKeZokybaT5NgAAAQo"]
[Thu Mar 26 06:30:49.009630 2026] [:error] [pid 19712:tid 19797] [client 132.164.249.185:12558] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acRiGdWhKhRNqm23vFPEWAAAAJU"]
[Thu Mar 26 06:30:49.725584 2026] [:error] [pid 60829:tid 60844] [client 132.164.249.185:16437] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acRiGfTdjHKeZokybaT5SwAAAQ0"]
[Thu Mar 26 06:30:50.418886 2026] [:error] [pid 19712:tid 19798] [client 132.164.249.185:2360] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acRiGtWhKhRNqm23vFPEYAAAAJY"]
[Thu Mar 26 06:30:50.932787 2026] [:error] [pid 19818:tid 19837] [client 132.164.249.185:12201] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "acRiGszaSnm3d1BeM5VqfQAAANE"]
[Thu Mar 26 06:30:51.520941 2026] [:error] [pid 60829:tid 60847] [client 132.164.249.185:12402] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "acRiG_TdjHKeZokybaT5VwAAARA"]
[Thu Mar 26 06:30:52.087873 2026] [:error] [pid 19712:tid 19797] [client 132.164.249.185:12389] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "acRiHNWhKhRNqm23vFPEbAAAAJU"]
[Thu Mar 26 06:30:52.804000 2026] [:error] [pid 19712:tid 19786] [client 132.164.249.185:12200] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "acRiHNWhKhRNqm23vFPEdAAAAIo"]
[Thu Mar 26 06:30:53.366483 2026] [:error] [pid 19712:tid 19778] [client 132.164.249.185:14827] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acRiHdWhKhRNqm23vFPEdwAAAII"]
[Thu Mar 26 06:30:53.933317 2026] [:error] [pid 60829:tid 60851] [client 132.164.249.185:19000] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acRiHfTdjHKeZokybaT5aAAAARQ"]
[Thu Mar 26 06:30:54.702865 2026] [:error] [pid 19712:tid 19786] [client 132.164.249.185:2736] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acRiHtWhKhRNqm23vFPEfwAAAIo"]
[Thu Mar 26 06:30:56.334867 2026] [:error] [pid 60829:tid 60831] [client 132.164.249.185:12557] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acRiIPTdjHKeZokybaT5dAAAAQA"]
[Thu Mar 26 06:30:57.056939 2026] [:error] [pid 60829:tid 60840] [client 132.164.249.185:11399] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acRiIfTdjHKeZokybaT5ewAAAQk"]
[Thu Mar 26 06:30:57.865613 2026] [:error] [pid 60829:tid 60855] [client 132.164.249.185:14128] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acRiIfTdjHKeZokybaT5fwAAARg"]
[Thu Mar 26 06:30:58.688792 2026] [:error] [pid 60829:tid 60850] [client 132.164.249.185:20073] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acRiIvTdjHKeZokybaT5iQAAARM"]
[Thu Mar 26 06:30:59.582802 2026] [:error] [pid 60829:tid 60845] [client 132.164.249.185:16410] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acRiI_TdjHKeZokybaT5kAAAAQ4"]
[Thu Mar 26 06:31:00.258293 2026] [:error] [pid 60829:tid 60855] [client 132.164.249.185:16394] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "acRiJPTdjHKeZokybaT5lQAAARg"]
[Thu Mar 26 06:31:01.048465 2026] [:error] [pid 60829:tid 60847] [client 132.164.249.185:2361] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "acRiJfTdjHKeZokybaT5mwAAARA"]
[Thu Mar 26 06:31:01.787978 2026] [:error] [pid 60829:tid 60845] [client 132.164.249.185:14114] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "acRiJfTdjHKeZokybaT5oAAAAQ4"]
[Thu Mar 26 06:31:02.538865 2026] [:error] [pid 60829:tid 60837] [client 132.164.249.185:16422] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "acRiJvTdjHKeZokybaT5pAAAAQY"]
[Thu Mar 26 06:31:04.085790 2026] [:error] [pid 19712:tid 19784] [client 132.164.249.185:12355] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "acRiKNWhKhRNqm23vFPEjgAAAIg"]
[Thu Mar 26 06:31:05.781947 2026] [:error] [pid 19818:tid 19834] [client 132.164.249.185:12175] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "acRiKczaSnm3d1BeM5VqpwAAAM4"]
[Thu Mar 26 06:31:07.776841 2026] [:error] [pid 19712:tid 19786] [client 132.164.249.185:17010] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "acRiK9WhKhRNqm23vFPEkAAAAIo"]
[Thu Mar 26 06:31:08.954999 2026] [:error] [pid 19711:tid 19764] [client 132.164.249.185:11397] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "acRiLGj3l1y81GYfluQt_AAAAE8"]
[Thu Mar 26 06:31:09.528174 2026] [:error] [pid 19711:tid 19757] [client 132.164.249.185:7546] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acRiLWj3l1y81GYfluQt_wAAAEg"]
[Thu Mar 26 06:31:10.362463 2026] [:error] [pid 19818:tid 19832] [client 132.164.249.185:20378] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acRiLszaSnm3d1BeM5VqrwAAAMw"]
[Thu Mar 26 06:31:11.122274 2026] [:error] [pid 60829:tid 60846] [client 132.164.249.185:16974] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acRiL_TdjHKeZokybaT5yAAAAQ8"]
[Thu Mar 26 06:31:11.651791 2026] [:error] [pid 19818:tid 19842] [client 132.164.249.185:12188] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acRiL8zaSnm3d1BeM5VqswAAANY"]
[Thu Mar 26 06:31:12.519216 2026] [:error] [pid 19712:tid 19779] [client 132.164.249.185:11425] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acRiMNWhKhRNqm23vFPEnAAAAIM"]
[Thu Mar 26 06:31:13.071055 2026] [:error] [pid 19712:tid 19799] [client 132.164.249.185:17023] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acRiMdWhKhRNqm23vFPEngAAAJc"]
[Thu Mar 26 06:31:14.060578 2026] [:error] [pid 19712:tid 19782] [client 132.164.249.185:2645] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acRiMtWhKhRNqm23vFPEowAAAIY"]
[Thu Mar 26 06:31:15.092576 2026] [:error] [pid 60829:tid 60833] [client 132.164.249.185:20597] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "acRiM_TdjHKeZokybaT50wAAAQI"]
[Thu Mar 26 06:31:15.819028 2026] [:error] [pid 60829:tid 60848] [client 132.164.249.185:13929] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "acRiM_TdjHKeZokybaT53QAAARE"]
[Thu Mar 26 06:31:16.489392 2026] [:error] [pid 60829:tid 60853] [client 132.164.249.185:9261] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "acRiNPTdjHKeZokybaT54wAAARY"]
[Thu Mar 26 06:31:17.217626 2026] [:error] [pid 60829:tid 60844] [client 132.164.249.185:15304] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "acRiNfTdjHKeZokybaT56QAAAQ0"]
[Thu Mar 26 06:31:17.969593 2026] [:error] [pid 60829:tid 60841] [client 132.164.249.185:13833] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "acRiNfTdjHKeZokybaT57wAAAQo"]
[Thu Mar 26 06:31:18.564467 2026] [:error] [pid 19818:tid 19827] [client 132.164.249.185:19520] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acRiNszaSnm3d1BeM5VqvwAAAMc"]
[Thu Mar 26 06:31:19.865931 2026] [:error] [pid 19711:tid 19762] [client 132.164.249.185:13651] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acRiN2j3l1y81GYfluQuDAAAAE0"]
[Thu Mar 26 06:31:25.647450 2026] [:error] [pid 19818:tid 19828] [client 132.164.249.185:18433] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acRiPczaSnm3d1BeM5Vq5wAAAMg"]
[Thu Mar 26 06:31:26.292437 2026] [:error] [pid 19712:tid 19783] [client 132.164.249.185:20546] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acRiPtWhKhRNqm23vFPErwAAAIc"]
[Thu Mar 26 06:31:27.572246 2026] [:error] [pid 19711:tid 19760] [client 132.164.249.185:19555] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "acRiP2j3l1y81GYfluQuFgAAAEs"]
[Thu Mar 26 06:31:28.355078 2026] [:error] [pid 19712:tid 19800] [client 132.164.249.185:16184] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "acRiQNWhKhRNqm23vFPEugAAAJg"]
[Thu Mar 26 06:31:28.943058 2026] [:error] [pid 60829:tid 60850] [client 132.164.249.185:13695] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "acRiQPTdjHKeZokybaT6GAAAARM"]
[Thu Mar 26 06:31:29.749569 2026] [:error] [pid 19818:tid 19838] [client 132.164.249.185:19569] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "acRiQczaSnm3d1BeM5Vq7wAAANI"]
[Thu Mar 26 06:31:30.409065 2026] [:error] [pid 19818:tid 19839] [client 132.164.249.185:12046] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acRiQszaSnm3d1BeM5Vq8wAAANM"]
[Thu Mar 26 06:31:31.104904 2026] [:error] [pid 19711:tid 19773] [client 132.164.249.185:11246] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acRiQ2j3l1y81GYfluQuIQAAAFg"]
[Thu Mar 26 06:31:31.795717 2026] [:error] [pid 19711:tid 19757] [client 132.164.249.185:20563] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acRiQ2j3l1y81GYfluQuJgAAAEg"]
[Thu Mar 26 06:31:32.912628 2026] [:error] [pid 19818:tid 19843] [client 132.164.249.185:17155] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acRiRMzaSnm3d1BeM5VrAAAAANc"]
[Thu Mar 26 06:31:33.630978 2026] [:error] [pid 19818:tid 19838] [client 132.164.249.185:19522] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acRiRczaSnm3d1BeM5VrBgAAANI"]
[Thu Mar 26 06:31:34.331903 2026] [:error] [pid 60829:tid 60839] [client 132.164.249.185:15840] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acRiRvTdjHKeZokybaT6LQAAAQg"]
[Thu Mar 26 06:31:35.019728 2026] [:error] [pid 60829:tid 60832] [client 132.164.249.185:13814] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acRiR_TdjHKeZokybaT6MgAAAQE"]
[Thu Mar 26 06:31:35.542500 2026] [:error] [pid 60829:tid 60840] [client 132.164.249.185:2828] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acRiR_TdjHKeZokybaT6OAAAAQk"]
[Thu Mar 26 06:31:36.154658 2026] [:error] [pid 60829:tid 60853] [client 132.164.249.185:16178] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "acRiSPTdjHKeZokybaT6QAAAARY"]
[Thu Mar 26 06:31:36.847682 2026] [:error] [pid 19712:tid 19797] [client 132.164.249.185:16156] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "acRiSNWhKhRNqm23vFPE1QAAAJU"]
[Thu Mar 26 06:31:39.025552 2026] [proxy_fcgi:error] [pid 19712:tid 19789] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:39.310325 2026] [proxy_fcgi:error] [pid 19712:tid 19785] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:39.588815 2026] [proxy_fcgi:error] [pid 19712:tid 19797] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:39.861209 2026] [proxy_fcgi:error] [pid 19712:tid 19790] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:40.407252 2026] [proxy_fcgi:error] [pid 19712:tid 19794] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:40.683051 2026] [proxy_fcgi:error] [pid 19712:tid 19781] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:40.955577 2026] [proxy_fcgi:error] [pid 19712:tid 19796] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:41.227688 2026] [proxy_fcgi:error] [pid 19712:tid 19778] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:41.500635 2026] [proxy_fcgi:error] [pid 19712:tid 19784] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:41.772559 2026] [proxy_fcgi:error] [pid 19712:tid 19795] [client 132.164.249.185:16066] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:31:42.044439 2026] [:error] [pid 19712:tid 19785] [client 132.164.249.185:16066] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acRiTtWhKhRNqm23vFPE7wAAAIk"]
[Thu Mar 26 06:31:42.766522 2026] [:error] [pid 60829:tid 60838] [client 132.164.249.185:2837] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acRiTvTdjHKeZokybaT6YQAAAQc"]
[Thu Mar 26 06:31:43.534686 2026] [:error] [pid 60829:tid 60853] [client 132.164.249.185:13764] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acRiT_TdjHKeZokybaT6awAAARY"]
[Thu Mar 26 06:31:44.172323 2026] [:error] [pid 19712:tid 19786] [client 132.164.249.185:2817] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acRiUNWhKhRNqm23vFPE8wAAAIo"]
[Thu Mar 26 06:31:44.786504 2026] [:error] [pid 60829:tid 60849] [client 132.164.249.185:9059] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "acRiUPTdjHKeZokybaT6ewAAARI"]
[Thu Mar 26 06:31:45.731020 2026] [:error] [pid 60829:tid 60847] [client 132.164.249.185:7751] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "acRiUfTdjHKeZokybaT6gQAAARA"]
[Thu Mar 26 06:31:47.219646 2026] [:error] [pid 60829:tid 60835] [client 132.164.249.185:11262] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "acRiU_TdjHKeZokybaT6jgAAAQQ"]
[Thu Mar 26 06:32:00.914012 2026] [:error] [pid 19818:tid 19832] [client 132.164.249.185:2072] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acRiYMzaSnm3d1BeM5VrVgAAAMw"]
[Thu Mar 26 06:32:04.332669 2026] [:error] [pid 19710:tid 19746] [client 132.164.249.185:13199] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acRiZAVEWP8Ar68Njk6Y3AAAABg"]
[Thu Mar 26 06:32:07.119747 2026] [:error] [pid 19711:tid 19763] [client 132.164.249.185:7763] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acRiZ2j3l1y81GYfluQufwAAAE4"]
[Thu Mar 26 06:32:09.277560 2026] [:error] [pid 19818:tid 19822] [client 132.164.249.185:20808] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acRiaczaSnm3d1BeM5VrfgAAAMI"]
[Thu Mar 26 06:32:10.773879 2026] [:error] [pid 19710:tid 19741] [client 132.164.249.185:11287] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "acRiagVEWP8Ar68Njk6Y4wAAABM"]
[Thu Mar 26 06:32:11.560866 2026] [:error] [pid 19818:tid 19836] [client 132.164.249.185:8420] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "acRia8zaSnm3d1BeM5VrjQAAANA"]
[Thu Mar 26 06:32:12.213482 2026] [:error] [pid 19712:tid 19796] [client 132.164.249.185:17439] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "acRibNWhKhRNqm23vFPFPwAAAJQ"]
[Thu Mar 26 06:32:12.816650 2026] [:error] [pid 19711:tid 19759] [client 132.164.249.185:13197] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "acRibGj3l1y81GYfluQuiQAAAEo"]
[Thu Mar 26 06:32:14.097095 2026] [:error] [pid 19818:tid 19842] [client 132.164.249.185:11878] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acRibszaSnm3d1BeM5VrlAAAANY"]
[Thu Mar 26 06:32:15.094067 2026] [:error] [pid 19712:tid 19783] [client 132.164.249.185:19847] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acRib9WhKhRNqm23vFPFTQAAAIc"]
[Thu Mar 26 06:32:15.955101 2026] [:error] [pid 19818:tid 19822] [client 132.164.249.185:7874] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acRib8zaSnm3d1BeM5VrmgAAAMI"]
[Thu Mar 26 06:32:16.675885 2026] [:error] [pid 60829:tid 60842] [client 132.164.249.185:7875] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acRicPTdjHKeZokybaT7MwAAAQs"]
[Thu Mar 26 06:32:17.428577 2026] [:error] [pid 19712:tid 19797] [client 132.164.249.185:10992] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "acRicdWhKhRNqm23vFPFUgAAAJU"]
[Thu Mar 26 06:32:18.099014 2026] [:error] [pid 19711:tid 19765] [client 132.164.249.185:8275] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "acRicmj3l1y81GYfluQukQAAAFA"]
[Thu Mar 26 06:32:18.779921 2026] [:error] [pid 60829:tid 60834] [client 132.164.249.185:10309] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "acRicvTdjHKeZokybaT7NwAAAQM"]
[Thu Mar 26 06:32:19.440085 2026] [:error] [pid 19818:tid 19830] [client 132.164.249.185:11862] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "acRic8zaSnm3d1BeM5VrnQAAAMo"]
[Thu Mar 26 06:32:20.311299 2026] [:error] [pid 60829:tid 60842] [client 132.164.249.185:10314] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acRidPTdjHKeZokybaT7PgAAAQs"]
[Thu Mar 26 06:32:20.912894 2026] [:error] [pid 19710:tid 19746] [client 132.164.249.185:7876] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acRidAVEWP8Ar68Njk6Y8AAAABg"]
[Thu Mar 26 06:32:21.540432 2026] [:error] [pid 19712:tid 19792] [client 132.164.249.185:10977] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acRiddWhKhRNqm23vFPFXAAAAJA"]
[Thu Mar 26 06:32:22.159069 2026] [:error] [pid 19818:tid 19825] [client 132.164.249.185:7892] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acRidszaSnm3d1BeM5VrpAAAAMU"]
[Thu Mar 26 06:32:22.817855 2026] [:error] [pid 60829:tid 60841] [client 132.164.249.185:13397] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acRidvTdjHKeZokybaT7SAAAAQo"]
[Thu Mar 26 06:32:23.455550 2026] [:error] [pid 19818:tid 19839] [client 132.164.249.185:16681] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acRid8zaSnm3d1BeM5VrqAAAANM"]
[Thu Mar 26 06:32:24.184881 2026] [:error] [pid 60829:tid 60832] [client 132.164.249.185:10987] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acRiePTdjHKeZokybaT7SQAAAQE"]
[Thu Mar 26 06:32:24.981644 2026] [:error] [pid 19818:tid 19841] [client 132.164.249.185:17427] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "acRieMzaSnm3d1BeM5VrrAAAANU"]
[Thu Mar 26 06:32:25.693350 2026] [:error] [pid 60829:tid 60842] [client 132.164.249.185:8865] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acRiefTdjHKeZokybaT7TwAAAQs"]
[Thu Mar 26 06:32:26.465102 2026] [:error] [pid 19712:tid 19794] [client 132.164.249.185:16690] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acRietWhKhRNqm23vFPFZgAAAJI"]
[Thu Mar 26 06:32:27.057916 2026] [:error] [pid 19710:tid 19746] [client 132.164.249.185:10360] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acRiewVEWP8Ar68Njk6Y-gAAABg"]
[Thu Mar 26 06:32:28.494950 2026] [:error] [pid 60829:tid 60833] [client 132.164.249.185:11885] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acRifPTdjHKeZokybaT7WwAAAQI"]
[Thu Mar 26 06:32:29.272019 2026] [:error] [pid 19818:tid 19831] [client 132.164.249.185:11170] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acRifczaSnm3d1BeM5VrswAAAMs"]
[Thu Mar 26 06:32:29.906306 2026] [:error] [pid 19818:tid 19842] [client 132.164.249.185:10655] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acRifczaSnm3d1BeM5VrtgAAANY"]
[Thu Mar 26 06:32:30.992924 2026] [:error] [pid 19818:tid 19843] [client 132.164.249.185:19849] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acRifszaSnm3d1BeM5VrwAAAANc"]
[Thu Mar 26 06:32:31.660013 2026] [:error] [pid 60829:tid 60851] [client 132.164.249.185:10948] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acRif_TdjHKeZokybaT7aQAAARQ"]
[Thu Mar 26 06:32:32.280683 2026] [:error] [pid 19711:tid 19755] [client 132.164.249.185:19868] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "acRigGj3l1y81GYfluQuowAAAEY"]
[Thu Mar 26 06:32:32.920552 2026] [:error] [pid 19712:tid 19786] [client 132.164.249.185:11140] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "acRigNWhKhRNqm23vFPFcQAAAIo"]
[Thu Mar 26 06:32:33.474360 2026] [:error] [pid 60829:tid 60843] [client 132.164.249.185:8273] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "acRigfTdjHKeZokybaT7bwAAAQw"]
[Thu Mar 26 06:32:34.177088 2026] [:error] [pid 19818:tid 19835] [client 132.164.249.185:15804] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "acRigszaSnm3d1BeM5VryAAAAM8"]
[Thu Mar 26 06:32:34.802611 2026] [:error] [pid 60829:tid 60851] [client 132.164.249.185:8859] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "acRigvTdjHKeZokybaT7fQAAARQ"]
[Thu Mar 26 06:32:35.576455 2026] [:error] [pid 60829:tid 60842] [client 132.164.249.185:2790] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "acRig_TdjHKeZokybaT7hQAAAQs"]
[Thu Mar 26 06:32:36.763198 2026] [:error] [pid 60829:tid 60846] [client 132.164.249.185:8852] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "acRihPTdjHKeZokybaT7jAAAAQ8"]
[Thu Mar 26 06:32:37.411311 2026] [:error] [pid 60829:tid 60834] [client 132.164.249.185:8845] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "acRihfTdjHKeZokybaT7kwAAAQM"]
[Thu Mar 26 06:32:38.179406 2026] [:error] [pid 19711:tid 19767] [client 132.164.249.185:10998] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "acRihmj3l1y81GYfluQusgAAAFI"]
[Thu Mar 26 06:32:38.970144 2026] [:error] [pid 19818:tid 19823] [client 132.164.249.185:19790] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "acRihszaSnm3d1BeM5Vr1gAAAMM"]
[Thu Mar 26 06:32:39.829388 2026] [:error] [pid 19818:tid 19840] [client 132.164.249.185:8029] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "acRih8zaSnm3d1BeM5Vr3QAAANQ"]
[Thu Mar 26 06:32:40.405352 2026] [:error] [pid 19818:tid 19834] [client 132.164.249.185:8033] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "acRiiMzaSnm3d1BeM5Vr4QAAAM4"]
[Thu Mar 26 06:32:41.266900 2026] [proxy_fcgi:error] [pid 19818:tid 19840] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:41.533313 2026] [proxy_fcgi:error] [pid 19818:tid 19837] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:42.064668 2026] [proxy_fcgi:error] [pid 19818:tid 19821] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:42.331989 2026] [proxy_fcgi:error] [pid 19818:tid 19826] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:42.620761 2026] [proxy_fcgi:error] [pid 19818:tid 19828] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:43.054627 2026] [proxy_fcgi:error] [pid 19818:tid 19829] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:43.323902 2026] [proxy_fcgi:error] [pid 19818:tid 19839] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:43.647730 2026] [proxy_fcgi:error] [pid 19818:tid 19830] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:43.914404 2026] [proxy_fcgi:error] [pid 19818:tid 19823] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:44.179329 2026] [proxy_fcgi:error] [pid 19818:tid 19832] [client 132.164.249.185:8850] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:32:44.441422 2026] [:error] [pid 19818:tid 19831] [client 132.164.249.185:8850] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acRijMzaSnm3d1BeM5Vr-QAAAMs"]
[Thu Mar 26 06:32:45.172223 2026] [:error] [pid 19712:tid 19798] [client 132.164.249.185:13401] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acRijdWhKhRNqm23vFPFiAAAAJY"]
[Thu Mar 26 06:32:45.948641 2026] [:error] [pid 19711:tid 19762] [client 132.164.249.185:17066] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acRijWj3l1y81GYfluQuvwAAAE0"]
[Thu Mar 26 06:32:46.718195 2026] [:error] [pid 19711:tid 19757] [client 132.164.249.185:16687] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acRijmj3l1y81GYfluQuxAAAAEg"]
[Thu Mar 26 06:32:47.543412 2026] [:error] [pid 19712:tid 19800] [client 132.164.249.185:2789] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acRij9WhKhRNqm23vFPFnwAAAJg"]
[Thu Mar 26 06:32:48.438149 2026] [:error] [pid 19711:tid 19755] [client 132.164.249.185:12702] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acRikGj3l1y81GYfluQuxwAAAEY"]
[Thu Mar 26 06:32:49.350468 2026] [:error] [pid 19818:tid 19835] [client 132.164.249.185:12314] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acRikczaSnm3d1BeM5VsGQAAAM8"]
[Thu Mar 26 06:32:50.132507 2026] [:error] [pid 60829:tid 60834] [client 132.164.249.185:8691] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acRikvTdjHKeZokybaT70QAAAQM"]
[Thu Mar 26 06:32:50.811796 2026] [:error] [pid 60829:tid 60840] [client 132.164.249.185:14670] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-footer.php"] [unique_id "acRikvTdjHKeZokybaT71QAAAQk"]
[Thu Mar 26 06:32:51.564687 2026] [:error] [pid 19818:tid 19826] [client 132.164.249.185:10626] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-footer.php"] [unique_id "acRik8zaSnm3d1BeM5VsMAAAAMY"]
[Thu Mar 26 06:32:52.226808 2026] [:error] [pid 19711:tid 19750] [client 132.164.249.185:8389] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-footer.php"] [unique_id "acRilGj3l1y81GYfluQu1gAAAEE"]
[Thu Mar 26 06:32:52.782383 2026] [:error] [pid 19711:tid 19771] [client 132.164.249.185:2794] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-footer.php"] [unique_id "acRilGj3l1y81GYfluQu2AAAAFY"]
[Thu Mar 26 06:32:53.392708 2026] [:error] [pid 19711:tid 19759] [client 132.164.249.185:10733] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acRilWj3l1y81GYfluQu2QAAAEo"]
[Thu Mar 26 06:32:54.275663 2026] [:error] [pid 60829:tid 60854] [client 132.164.249.185:15800] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acRilvTdjHKeZokybaT7_AAAARc"]
[Thu Mar 26 06:32:55.280867 2026] [:error] [pid 60829:tid 60849] [client 132.164.249.185:20563] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acRil_TdjHKeZokybaT8BwAAARI"]
[Thu Mar 26 06:32:56.235576 2026] [:error] [pid 60829:tid 60853] [client 132.164.249.185:10332] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acRimPTdjHKeZokybaT8CwAAARY"]
[Thu Mar 26 06:32:57.083146 2026] [:error] [pid 19712:tid 19788] [client 132.164.249.185:19355] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "acRimdWhKhRNqm23vFPFvQAAAIw"]
[Thu Mar 26 06:32:57.913493 2026] [:error] [pid 60829:tid 60839] [client 132.164.249.185:11364] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "acRimfTdjHKeZokybaT8HAAAAQg"]
[Thu Mar 26 06:32:58.726179 2026] [:error] [pid 19712:tid 19785] [client 132.164.249.185:19832] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "acRimtWhKhRNqm23vFPFwgAAAIk"]
[Thu Mar 26 06:32:59.263189 2026] [:error] [pid 19711:tid 19762] [client 132.164.249.185:20308] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "acRim2j3l1y81GYfluQu6QAAAE0"]
[Thu Mar 26 06:32:59.780690 2026] [:error] [pid 19710:tid 19725] [client 132.164.249.185:8396] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acRimwVEWP8Ar68Njk6ZHAAAAAM"]
[Thu Mar 26 06:33:00.550525 2026] [:error] [pid 19818:tid 19828] [client 132.164.249.185:20288] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acRinMzaSnm3d1BeM5VsSAAAAMg"]
[Thu Mar 26 06:33:01.342325 2026] [:error] [pid 19818:tid 19830] [client 132.164.249.185:11864] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acRinczaSnm3d1BeM5VsSgAAAMo"]
[Thu Mar 26 06:33:02.087791 2026] [:error] [pid 60829:tid 60850] [client 132.164.249.185:10728] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acRinvTdjHKeZokybaT8QQAAARM"]
[Thu Mar 26 06:33:02.746922 2026] [:error] [pid 19818:tid 19835] [client 132.164.249.185:8881] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/file.php"] [unique_id "acRinszaSnm3d1BeM5VsUwAAAM8"]
[Thu Mar 26 06:33:03.992649 2026] [:error] [pid 19712:tid 19787] [client 132.164.249.185:14992] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/file.php"] [unique_id "acRin9WhKhRNqm23vFPF1AAAAIs"]
[Thu Mar 26 06:33:04.550592 2026] [:error] [pid 60829:tid 60838] [client 132.164.249.185:19355] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/file.php"] [unique_id "acRioPTdjHKeZokybaT8SQAAAQc"]
[Thu Mar 26 06:33:05.326494 2026] [:error] [pid 19710:tid 19726] [client 132.164.249.185:11137] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/file.php"] [unique_id "acRioQVEWP8Ar68Njk6ZJwAAAAQ"]
[Thu Mar 26 06:33:06.162362 2026] [:error] [pid 60829:tid 60840] [client 132.164.249.185:8433] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acRiovTdjHKeZokybaT8UwAAAQk"]
[Thu Mar 26 06:33:06.821356 2026] [:error] [pid 60829:tid 60844] [client 132.164.249.185:19879] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acRiovTdjHKeZokybaT8WAAAAQ0"]
[Thu Mar 26 06:33:07.458801 2026] [:error] [pid 19818:tid 19827] [client 132.164.249.185:16693] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acRio8zaSnm3d1BeM5VsaQAAAMc"]
[Thu Mar 26 06:33:08.009769 2026] [:error] [pid 60829:tid 60844] [client 132.164.249.185:15786] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acRipPTdjHKeZokybaT8aAAAAQ0"]
[Thu Mar 26 06:33:08.668985 2026] [:error] [pid 19818:tid 19830] [client 132.164.249.185:11849] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws84.php"] [unique_id "acRipMzaSnm3d1BeM5VsbgAAAMo"]
[Thu Mar 26 06:33:09.500717 2026] [:error] [pid 19712:tid 19788] [client 132.164.249.185:16650] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws84.php"] [unique_id "acRipdWhKhRNqm23vFPF3wAAAIw"]
[Thu Mar 26 06:33:10.219342 2026] [:error] [pid 19712:tid 19785] [client 132.164.249.185:11293] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws84.php"] [unique_id "acRiptWhKhRNqm23vFPF4QAAAIk"]
[Thu Mar 26 06:33:11.568401 2026] [:error] [pid 60829:tid 60851] [client 132.164.249.185:13186] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws84.php"] [unique_id "acRip_TdjHKeZokybaT8eQAAARQ"]
[Thu Mar 26 06:33:13.452558 2026] [:error] [pid 19712:tid 19797] [client 132.164.249.185:11866] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "acRiqdWhKhRNqm23vFPF-AAAAJU"]
[Thu Mar 26 06:33:14.199747 2026] [:error] [pid 19712:tid 19783] [client 132.164.249.185:8851] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "acRiqtWhKhRNqm23vFPF_QAAAIc"]
[Thu Mar 26 06:33:14.929953 2026] [:error] [pid 19711:tid 19769] [client 132.164.249.185:11895] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "acRiqmj3l1y81GYfluQvEAAAAFQ"]
[Thu Mar 26 06:33:15.559080 2026] [:error] [pid 19712:tid 19794] [client 132.164.249.185:20816] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "acRiq9WhKhRNqm23vFPGAgAAAJI"]
[Thu Mar 26 06:33:16.472081 2026] [:error] [pid 19818:tid 19835] [client 132.164.249.185:17410] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acRirMzaSnm3d1BeM5VsigAAAM8"]
[Thu Mar 26 06:33:17.705393 2026] [:error] [pid 19712:tid 19783] [client 132.164.249.185:13240] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acRirdWhKhRNqm23vFPGEwAAAIc"]
[Thu Mar 26 06:33:18.773521 2026] [:error] [pid 60829:tid 60832] [client 132.164.249.185:11846] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acRirvTdjHKeZokybaT8gwAAAQE"]
[Thu Mar 26 06:33:20.386376 2026] [:error] [pid 60829:tid 60846] [client 132.164.249.185:7754] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acRisPTdjHKeZokybaT8kAAAAQ8"]
[Thu Mar 26 06:33:22.182218 2026] [:error] [pid 60829:tid 60833] [client 132.164.249.185:12308] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "acRisvTdjHKeZokybaT8mQAAAQI"]
[Thu Mar 26 06:33:23.866280 2026] [:error] [pid 19712:tid 19778] [client 132.164.249.185:7767] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "acRis9WhKhRNqm23vFPGNQAAAII"]
[Thu Mar 26 06:33:30.073271 2026] [:error] [pid 60829:tid 60838] [client 132.164.249.185:13236] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "acRiuvTdjHKeZokybaT8yAAAAQc"]
[Thu Mar 26 06:33:36.732171 2026] [:error] [pid 19818:tid 19842] [client 132.164.249.185:15811] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acRiwMzaSnm3d1BeM5VsygAAANY"]
[Thu Mar 26 06:33:37.673979 2026] [:error] [pid 60829:tid 60851] [client 132.164.249.185:18443] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acRiwfTdjHKeZokybaT87AAAARQ"]
[Thu Mar 26 06:33:38.369980 2026] [:error] [pid 19818:tid 19826] [client 132.164.249.185:11250] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acRiwszaSnm3d1BeM5Vs0wAAAMY"]
[Thu Mar 26 06:33:39.451618 2026] [:error] [pid 19818:tid 19821] [client 132.164.249.185:11231] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acRiw8zaSnm3d1BeM5Vs2AAAAME"]
[Thu Mar 26 06:33:41.678535 2026] [:error] [pid 60829:tid 60837] [client 132.164.249.185:12461] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "acRixfTdjHKeZokybaT9FQAAAQY"]
[Thu Mar 26 06:33:43.988277 2026] [:error] [pid 60829:tid 60845] [client 132.164.249.185:2834] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "acRix_TdjHKeZokybaT9KAAAAQ4"]
[Thu Mar 26 06:33:45.969761 2026] [proxy_fcgi:error] [pid 19818:tid 19824] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:46.275511 2026] [proxy_fcgi:error] [pid 19818:tid 19842] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:46.566088 2026] [proxy_fcgi:error] [pid 19818:tid 19833] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:46.849507 2026] [proxy_fcgi:error] [pid 19818:tid 19821] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:47.122490 2026] [proxy_fcgi:error] [pid 19818:tid 19843] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:47.409988 2026] [proxy_fcgi:error] [pid 19818:tid 19836] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:47.683513 2026] [proxy_fcgi:error] [pid 19818:tid 19844] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:47.973350 2026] [proxy_fcgi:error] [pid 19818:tid 19827] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:48.247819 2026] [proxy_fcgi:error] [pid 19818:tid 19835] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:48.544724 2026] [proxy_fcgi:error] [pid 19818:tid 19838] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:48.838443 2026] [proxy_fcgi:error] [pid 19818:tid 19824] [client 132.164.249.185:9828] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 06:33:49.107916 2026] [:error] [pid 19818:tid 19837] [client 132.164.249.185:9828] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "acRizczaSnm3d1BeM5Vs_QAAANE"]
[Thu Mar 26 06:33:51.672927 2026] [:error] [pid 19712:tid 19789] [client 132.164.249.185:9908] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "acRiz9WhKhRNqm23vFPGagAAAI0"]
[Thu Mar 26 06:33:52.367835 2026] [:error] [pid 19712:tid 19799] [client 132.164.249.185:9918] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "acRi0NWhKhRNqm23vFPGbAAAAJc"]
[Thu Mar 26 06:33:53.168433 2026] [:error] [pid 60829:tid 60844] [client 132.164.249.185:19543] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "acRi0fTdjHKeZokybaT9dAAAAQ0"]
[Thu Mar 26 06:33:53.849574 2026] [:error] [pid 19712:tid 19798] [client 132.164.249.185:9904] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "acRi0dWhKhRNqm23vFPGdQAAAJY"]
[Thu Mar 26 06:33:54.706920 2026] [:error] [pid 19818:tid 19839] [client 132.164.249.185:2659] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "acRi0szaSnm3d1BeM5VtEAAAANM"]
[Thu Mar 26 06:33:55.542597 2026] [:error] [pid 60829:tid 60854] [client 132.164.249.185:9825] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "acRi0_TdjHKeZokybaT9hgAAARc"]
[Thu Mar 26 06:33:56.534445 2026] [:error] [pid 60829:tid 60840] [client 132.164.249.185:20777] [client 132.164.249.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "acRi1PTdjHKeZokybaT9lAAAAQk"]
[Thu Mar 26 07:12:51.531504 2026] [:error] [pid 19710:tid 19724] [client 192.3.207.218:56384] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/artisan"] [unique_id "acRr8wVEWP8Ar68Njk6omQAAAAI"]
[Thu Mar 26 07:12:51.955821 2026] [:error] [pid 19710:tid 19741] [client 192.3.207.218:56823] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/artisan"] [unique_id "acRr8wVEWP8Ar68Njk6onQAAABM"]
[Thu Mar 26 07:12:53.288252 2026] [:error] [pid 19711:tid 19759] [client 192.3.207.218:57362] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/artisan"] [unique_id "acRr9Wj3l1y81GYfluRJbAAAAEo"]
[Thu Mar 26 07:12:53.713985 2026] [:error] [pid 19712:tid 19788] [client 192.3.207.218:57936] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/artisan"] [unique_id "acRr9dWhKhRNqm23vFPeKgAAAIw"]
[Thu Mar 26 07:12:54.575273 2026] [:error] [pid 19818:tid 19822] [client 192.3.207.218:58248] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "acRr9szaSnm3d1BeM5WNywAAAMI"]
[Thu Mar 26 07:12:54.996908 2026] [:error] [pid 19710:tid 19731] [client 192.3.207.218:58939] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pRwAAAAk"]
[Thu Mar 26 07:12:55.962188 2026] [:error] [pid 31670:tid 31691] [client 192.3.207.218:59354] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "acRr9zXVthXxCnWjOTQx2QAAAVM"]
[Thu Mar 26 07:12:56.389124 2026] [:error] [pid 19818:tid 19843] [client 192.3.207.218:60392] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "acRr-MzaSnm3d1BeM5WN9QAAANc"]
[Thu Mar 26 07:24:22.971182 2026] [:error] [pid 31670:tid 31686] [client 185.223.152.222:38571] [client 185.223.152.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.222, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "acRupjXVthXxCnWjOTQ6IwAAAU4"]
[Thu Mar 26 07:24:22.975321 2026] [proxy_fcgi:error] [pid 31670:tid 31686] [client 185.223.152.222:38571] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 07:34:28.249550 2026] [:error] [pid 31780:tid 31829] [client 49.235.136.28:59318] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acRxBJJDwZsy5O4ZXEimfgAAAgg"]
[Thu Mar 26 10:40:52.846695 2026] [:error] [pid 31670:tid 31680] [client 101.33.55.204:48724] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acSctDXVthXxCnWjOTSdmwAAAUg"]
[Thu Mar 26 12:02:10.627310 2026] [:error] [pid 31717:tid 31732] [client 43.157.43.147:60584] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acSvwr-SCF7YDISDX4-jBAAAAYo"]
[Thu Mar 26 13:48:22.733642 2026] [:error] [pid 31780:tid 31834] [client 193.165.236.138:51662] [client 193.165.236.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.165.236.138, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acTIppJDwZsy5O4ZXEg2zwAAAg0"]
[Thu Mar 26 13:48:22.744985 2026] [proxy_fcgi:error] [pid 31780:tid 31834] [client 193.165.236.138:51662] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 16:20:26.374988 2026] [:error] [pid 31778:tid 31794] [client 170.106.181.163:41196] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acTsSg3kybI2o-xasmDWeQAAAcE"]
[Thu Mar 26 17:43:20.824153 2026] [:error] [pid 31670:tid 31675] [client 43.135.142.37:59854] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acT_uDXVthXxCnWjOTRkMgAAAUM"]
[Thu Mar 26 21:46:11.788863 2026] [:error] [pid 31717:tid 31734] [client 43.156.156.96:33412] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acU4o7-SCF7YDISDX4_6iwAAAYw"]
[Thu Mar 26 22:33:29.509898 2026] [:error] [pid 19818:tid 19835] [client 122.51.236.174:55780] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acVDuczaSnm3d1BeM5VBlQAAAM8"]
[Thu Mar 26 22:54:38.512476 2026] [proxy_fcgi:error] [pid 19711:tid 19759] [client 4.206.17.96:20103] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 22:54:38.927371 2026] [:error] [pid 19711:tid 19772] [client 4.206.17.96:20103] [client 4.206.17.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.206.17.96, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acVIrmj3l1y81GYfluTP8AAAAFc"]
[Thu Mar 26 22:54:39.141083 2026] [proxy_fcgi:error] [pid 19711:tid 19755] [client 4.206.17.96:20103] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 22:54:39.979772 2026] [proxy_fcgi:error] [pid 19711:tid 19760] [client 4.206.17.96:20103] AH01071: Got error 'Primary script unknown'
[Thu Mar 26 22:54:40.395602 2026] [:error] [pid 19711:tid 19767] [client 4.206.17.96:20103] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "acVIsGj3l1y81GYfluTQAAAAAFI"]
[Thu Mar 26 22:54:41.219911 2026] [:error] [pid 31717:tid 31736] [client 4.206.17.96:20098] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "acVIsb-SCF7YDISDX48ArQAAAY4"]
[Thu Mar 26 22:54:42.046193 2026] [:error] [pid 19710:tid 19739] [client 4.206.17.96:19623] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "acVIsgVEWP8Ar68Njk4-RwAAABE"]
[Thu Mar 26 22:54:42.881766 2026] [:error] [pid 19710:tid 19732] [client 4.206.17.96:19621] [client 4.206.17.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "acVIsgVEWP8Ar68Njk4-TQAAAAo"]
[Fri Mar 27 01:37:29.816333 2026] [:error] [pid 44058:tid 44075] [client 185.169.4.152:60999] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "acVu2eqp9u5CVRGdZPH_JQAAAI8"]
[Fri Mar 27 06:11:52.035667 2026] [:error] [pid 27851:tid 27860] [client 182.42.111.156:42528] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acWvKHR2ccxe3RMCLboUqAAAAMI"]
[Fri Mar 27 08:46:37.523327 2026] [:error] [pid 63897:tid 63921] [client 152.233.20.36:62123] [client 152.233.20.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acXTbWVSkmYmLu7ycYhHawAAARY"], referer: https://www.imdb.com
[Fri Mar 27 08:46:39.770921 2026] [:error] [pid 4293:tid 4313] [client 152.233.20.36:49719] [client 152.233.20.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acXTb5LjeJUC3OKtEx_OTAAAAVI"], referer: https://www.discord.com
[Fri Mar 27 08:46:43.189885 2026] [:error] [pid 27851:tid 27860] [client 152.233.20.36:53395] [client 152.233.20.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acXTc3R2ccxe3RMCLbo_iAAAAMI"], referer: https://www.imdb.com
[Fri Mar 27 08:46:45.345513 2026] [:error] [pid 27851:tid 27863] [client 152.233.20.36:57338] [client 152.233.20.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acXTdXR2ccxe3RMCLbo_iwAAAMU"], referer: https://www.reddit.com/r/movies
[Fri Mar 27 09:27:47.772676 2026] [proxy_fcgi:error] [pid 4341:tid 4358] [client 132.196.91.16:22269] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 09:27:47.967323 2026] [proxy_fcgi:error] [pid 4341:tid 4364] [client 132.196.91.16:22269] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 09:27:48.161755 2026] [proxy_fcgi:error] [pid 4341:tid 4356] [client 132.196.91.16:22269] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 09:27:48.353843 2026] [proxy_fcgi:error] [pid 4341:tid 4355] [client 132.196.91.16:22269] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 09:27:52.297194 2026] [proxy_fcgi:error] [pid 4341:tid 4343] [client 132.196.91.16:22269] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 09:27:52.874518 2026] [:error] [pid 4341:tid 4367] [client 132.196.91.16:22269] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Content/Type/index.php"] [unique_id "acXdGOKJWrNB5dMlERFgVgAAAZg"]
[Fri Mar 27 09:27:53.622637 2026] [:error] [pid 27750:tid 27821] [client 132.196.91.16:22216] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Content/Type/index.php"] [unique_id "acXdGYaSil5rd17ieLxmpAAAAIM"]
[Fri Mar 27 09:27:54.368953 2026] [:error] [pid 27750:tid 27822] [client 132.196.91.16:22221] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Content/Type/index.php"] [unique_id "acXdGoaSil5rd17ieLxmpgAAAIQ"]
[Fri Mar 27 09:27:55.123901 2026] [:error] [pid 4293:tid 4312] [client 132.196.91.16:22152] [client 132.196.91.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Content/Type/index.php"] [unique_id "acXdG5LjeJUC3OKtEx_niQAAAVE"]
[Fri Mar 27 10:16:33.525249 2026] [:error] [pid 4341:tid 4366] [client 67.174.211.123:50525] [client 67.174.211.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.174.211.123, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acXogeKJWrNB5dMlERFyGwAAAZc"]
[Fri Mar 27 10:16:33.537023 2026] [proxy_fcgi:error] [pid 4341:tid 4366] [client 67.174.211.123:50525] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 10:16:50.851072 2026] [:error] [pid 27743:tid 27774] [client 43.159.128.237:47696] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acXokiA46UYYLqzw99Ak_QAAAAo"]
[Fri Mar 27 11:42:14.358502 2026] [:error] [pid 27749:tid 27796] [client 43.157.52.37:45642] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acX8lsEqyoMni2Q6_X6dswAAAEU"]
[Fri Mar 27 11:43:37.119119 2026] [:error] [pid 4341:tid 4343] [client 103.36.11.25:58381] [client 103.36.11.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.36.11.25, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acX86eKJWrNB5dMlERGi7QAAAYA"]
[Fri Mar 27 11:43:37.130287 2026] [proxy_fcgi:error] [pid 4341:tid 4343] [client 103.36.11.25:58381] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 13:11:20.754396 2026] [:error] [pid 63897:tid 63921] [client 125.94.144.102:44533] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acYReGVSkmYmLu7ycYjF-QAAARY"]
[Fri Mar 27 16:16:36.320187 2026] [:error] [pid 27851:tid 27875] [client 114.10.42.30:52826] [client 114.10.42.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.42.30, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acY85HR2ccxe3RMCLbq6XgAAANE"]
[Fri Mar 27 16:16:36.332161 2026] [proxy_fcgi:error] [pid 27851:tid 27875] [client 114.10.42.30:52826] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 18:37:09.718476 2026] [:error] [pid 4293:tid 4312] [client 43.133.220.37:50488] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acZd1ZLjeJUC3OKtEx9G7gAAAVE"]
[Fri Mar 27 20:01:46.164989 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:46.427442 2026] [proxy_fcgi:error] [pid 4293:tid 4297] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:46.742468 2026] [proxy_fcgi:error] [pid 4293:tid 4296] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:47.083406 2026] [proxy_fcgi:error] [pid 4293:tid 4308] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:48.694365 2026] [proxy_fcgi:error] [pid 4293:tid 4301] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:49.017165 2026] [proxy_fcgi:error] [pid 4293:tid 4307] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:49.281092 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:50.739724 2026] [proxy_fcgi:error] [pid 4293:tid 4305] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:51.066290 2026] [proxy_fcgi:error] [pid 4293:tid 4307] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:51.670423 2026] [proxy_fcgi:error] [pid 4293:tid 4299] [client 20.100.196.81:31366] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:01:52.282581 2026] [:error] [pid 4293:tid 4318] [client 20.100.196.81:31366] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bootstrap.php"] [unique_id "acZxsJLjeJUC3OKtEx98pAAAAVc"]
[Fri Mar 27 20:01:53.737543 2026] [:error] [pid 4293:tid 4302] [client 20.100.196.81:45601] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bootstrap.php"] [unique_id "acZxsZLjeJUC3OKtEx98rgAAAUc"]
[Fri Mar 27 20:01:57.238181 2026] [:error] [pid 63897:tid 63905] [client 20.100.196.81:35619] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bootstrap.php"] [unique_id "acZxtWVSkmYmLu7ycYhL5AAAAQY"]
[Fri Mar 27 20:01:59.785951 2026] [:error] [pid 27749:tid 27801] [client 20.100.196.81:48986] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bootstrap.php"] [unique_id "acZxt8EqyoMni2Q6_X7wYQAAAEo"]
[Fri Mar 27 20:02:00.865201 2026] [:error] [pid 27743:tid 27764] [client 20.100.196.81:57003] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "acZxuCA46UYYLqzw99Dc5QAAAAA"]
[Fri Mar 27 20:02:03.383436 2026] [:error] [pid 27743:tid 27781] [client 20.100.196.81:48989] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "acZxuyA46UYYLqzw99Dc8AAAABE"]
[Fri Mar 27 20:02:06.803276 2026] [:error] [pid 27851:tid 27881] [client 20.100.196.81:46877] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "acZxvnR2ccxe3RMCLbrtKwAAANc"]
[Fri Mar 27 20:02:07.675048 2026] [:error] [pid 4293:tid 4311] [client 20.100.196.81:56514] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "acZxv5LjeJUC3OKtEx98wgAAAVA"]
[Fri Mar 27 20:02:10.550662 2026] [:error] [pid 63897:tid 63915] [client 20.100.196.81:46851] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "acZxwmVSkmYmLu7ycYhL8AAAARA"]
[Fri Mar 27 20:02:12.225477 2026] [:error] [pid 27743:tid 27767] [client 20.100.196.81:29864] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "acZxxCA46UYYLqzw99DdXwAAAAM"]
[Fri Mar 27 20:02:13.628550 2026] [:error] [pid 4341:tid 4354] [client 20.100.196.81:35603] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "acZxxeKJWrNB5dMlERGf_gAAAYs"]
[Fri Mar 27 20:02:15.958007 2026] [:error] [pid 27749:tid 27797] [client 20.100.196.81:46885] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "acZxx8EqyoMni2Q6_X7waQAAAEY"]
[Fri Mar 27 20:02:16.951836 2026] [:error] [pid 27749:tid 27791] [client 20.100.196.81:56533] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "acZxyMEqyoMni2Q6_X7wawAAAEA"]
[Fri Mar 27 20:02:19.156325 2026] [:error] [pid 27743:tid 27767] [client 20.100.196.81:55923] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "acZxyyA46UYYLqzw99DddwAAAAM"]
[Fri Mar 27 20:02:23.099438 2026] [:error] [pid 4293:tid 4302] [client 20.100.196.81:56526] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "acZxz5LjeJUC3OKtEx99BgAAAUc"]
[Fri Mar 27 20:02:26.941565 2026] [:error] [pid 27851:tid 27859] [client 20.100.196.81:32823] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "acZx0nR2ccxe3RMCLbrtOAAAAME"]
[Fri Mar 27 20:02:28.736202 2026] [:error] [pid 4293:tid 4301] [client 20.100.196.81:2756] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "acZx1JLjeJUC3OKtEx99EQAAAUY"]
[Fri Mar 27 20:02:30.230196 2026] [:error] [pid 4341:tid 4362] [client 20.100.196.81:61900] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "acZx1uKJWrNB5dMlERGgHwAAAZM"]
[Fri Mar 27 20:02:31.049879 2026] [:error] [pid 4341:tid 4365] [client 20.100.196.81:51580] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "acZx1-KJWrNB5dMlERGgIgAAAZY"]
[Fri Mar 27 20:02:33.419930 2026] [:error] [pid 4341:tid 4351] [client 20.100.196.81:17772] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "acZx2eKJWrNB5dMlERGgMgAAAYg"]
[Fri Mar 27 20:02:34.302219 2026] [:error] [pid 63897:tid 63923] [client 20.100.196.81:38414] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxfyf.php"] [unique_id "acZx2mVSkmYmLu7ycYhMAgAAARg"]
[Fri Mar 27 20:02:35.690249 2026] [:error] [pid 4293:tid 4298] [client 20.100.196.81:56981] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxfyf.php"] [unique_id "acZx25LjeJUC3OKtEx99JAAAAUM"]
[Fri Mar 27 20:02:36.671193 2026] [:error] [pid 4293:tid 4308] [client 20.100.196.81:32796] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxfyf.php"] [unique_id "acZx3JLjeJUC3OKtEx99KQAAAU0"]
[Fri Mar 27 20:02:38.031514 2026] [:error] [pid 27750:tid 27841] [client 20.100.196.81:51556] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxfyf.php"] [unique_id "acZx3oaSil5rd17ieLzvwgAAAJc"]
[Fri Mar 27 20:02:38.698864 2026] [:error] [pid 27750:tid 27836] [client 20.100.196.81:61927] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "acZx3oaSil5rd17ieLzvyAAAAJI"]
[Fri Mar 27 20:02:39.622600 2026] [:error] [pid 27750:tid 27829] [client 20.100.196.81:14285] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "acZx34aSil5rd17ieLzvygAAAIs"]
[Fri Mar 27 20:02:40.553503 2026] [:error] [pid 27750:tid 27833] [client 20.100.196.81:48979] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "acZx4IaSil5rd17ieLzvzgAAAI8"]
[Fri Mar 27 20:02:41.197455 2026] [:error] [pid 27851:tid 27868] [client 20.100.196.81:46910] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "acZx4XR2ccxe3RMCLbrtQQAAAMo"]
[Fri Mar 27 20:02:42.148940 2026] [:error] [pid 4341:tid 4365] [client 20.100.196.81:28826] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acZx4uKJWrNB5dMlERGgQgAAAZY"]
[Fri Mar 27 20:02:42.919465 2026] [:error] [pid 27750:tid 27837] [client 20.100.196.81:2556] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acZx4oaSil5rd17ieLzv0gAAAJM"]
[Fri Mar 27 20:02:44.570863 2026] [:error] [pid 63897:tid 63923] [client 20.100.196.81:2772] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acZx5GVSkmYmLu7ycYhMFQAAARg"]
[Fri Mar 27 20:02:46.143384 2026] [:error] [pid 63897:tid 63918] [client 20.100.196.81:15405] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acZx5mVSkmYmLu7ycYhMFgAAARM"]
[Fri Mar 27 20:02:47.340927 2026] [:error] [pid 27743:tid 27788] [client 20.100.196.81:51522] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ne2026.php"] [unique_id "acZx5yA46UYYLqzw99DdoAAAABg"]
[Fri Mar 27 20:02:50.755968 2026] [:error] [pid 63897:tid 63923] [client 20.100.196.81:2811] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ne2026.php"] [unique_id "acZx6mVSkmYmLu7ycYhMGQAAARg"]
[Fri Mar 27 20:02:55.848111 2026] [proxy_fcgi:error] [pid 4293:tid 4302] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:57.161339 2026] [proxy_fcgi:error] [pid 4293:tid 4295] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:57.771668 2026] [proxy_fcgi:error] [pid 4293:tid 4306] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:58.033944 2026] [proxy_fcgi:error] [pid 4293:tid 4299] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:58.294773 2026] [proxy_fcgi:error] [pid 4293:tid 4311] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:58.801315 2026] [proxy_fcgi:error] [pid 4293:tid 4307] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:59.070717 2026] [proxy_fcgi:error] [pid 4293:tid 4314] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:59.335789 2026] [proxy_fcgi:error] [pid 4293:tid 4305] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:59.610446 2026] [proxy_fcgi:error] [pid 4293:tid 4295] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:02:59.929672 2026] [proxy_fcgi:error] [pid 4293:tid 4308] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:03:00.913202 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 20.100.196.81:51561] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:03:01.210253 2026] [:error] [pid 4293:tid 4302] [client 20.100.196.81:51561] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acZx9ZLjeJUC3OKtEx99bwAAAUc"]
[Fri Mar 27 20:03:06.546530 2026] [:error] [pid 27851:tid 27866] [client 20.100.196.81:36991] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acZx-nR2ccxe3RMCLbrtYAAAAMg"]
[Fri Mar 27 20:03:09.822326 2026] [:error] [pid 63897:tid 63902] [client 20.100.196.81:36933] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acZx_WVSkmYmLu7ycYhMKQAAAQM"]
[Fri Mar 27 20:03:12.231740 2026] [:error] [pid 4293:tid 4312] [client 20.100.196.81:2381] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bjfl.php"] [unique_id "acZyAJLjeJUC3OKtEx99dQAAAVE"]
[Fri Mar 27 20:03:16.196698 2026] [:error] [pid 4293:tid 4318] [client 20.100.196.81:36967] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acZyBJLjeJUC3OKtEx99igAAAVc"]
[Fri Mar 27 20:03:17.483328 2026] [:error] [pid 27749:tid 27815] [client 20.100.196.81:18114] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acZyBcEqyoMni2Q6_X7whAAAAFg"]
[Fri Mar 27 20:03:18.608270 2026] [:error] [pid 27743:tid 27771] [client 20.100.196.81:15383] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acZyBiA46UYYLqzw99DdzQAAAAc"]
[Fri Mar 27 20:03:19.521560 2026] [:error] [pid 4293:tid 4309] [client 20.100.196.81:28841] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buc.php"] [unique_id "acZyB5LjeJUC3OKtEx99nAAAAU4"]
[Fri Mar 27 20:03:20.486529 2026] [:error] [pid 27743:tid 27767] [client 20.100.196.81:38507] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "acZyCCA46UYYLqzw99Dd1AAAAAM"]
[Fri Mar 27 20:03:22.434113 2026] [:error] [pid 27743:tid 27784] [client 20.100.196.81:51576] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "acZyCiA46UYYLqzw99Dd4gAAABQ"]
[Fri Mar 27 20:03:23.720612 2026] [:error] [pid 4341:tid 4361] [client 20.100.196.81:15378] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "acZyC-KJWrNB5dMlERGgiQAAAZI"]
[Fri Mar 27 20:03:26.631862 2026] [:error] [pid 4341:tid 4348] [client 20.100.196.81:11537] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "acZyDuKJWrNB5dMlERGgkAAAAYU"]
[Fri Mar 27 20:03:27.570132 2026] [:error] [pid 4293:tid 4304] [client 20.100.196.81:32485] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acZyD5LjeJUC3OKtEx99tgAAAUk"]
[Fri Mar 27 20:03:29.275561 2026] [:error] [pid 4293:tid 4304] [client 20.100.196.81:15001] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acZyEZLjeJUC3OKtEx99wQAAAUk"]
[Fri Mar 27 20:03:30.980536 2026] [:error] [pid 27851:tid 27861] [client 20.100.196.81:29368] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acZyEnR2ccxe3RMCLbrtbQAAAMM"]
[Fri Mar 27 20:03:31.997107 2026] [:error] [pid 63897:tid 63907] [client 20.100.196.81:38515] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acZyE2VSkmYmLu7ycYhMNQAAAQg"]
[Fri Mar 27 20:03:33.526542 2026] [:error] [pid 63897:tid 63899] [client 20.100.196.81:11525] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acZyFWVSkmYmLu7ycYhMOgAAAQA"]
[Fri Mar 27 20:03:34.535340 2026] [:error] [pid 27743:tid 27776] [client 20.100.196.81:54652] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acZyFiA46UYYLqzw99DeAQAAAAw"]
[Fri Mar 27 20:03:37.306497 2026] [:error] [pid 27743:tid 27769] [client 20.100.196.81:37996] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acZyGSA46UYYLqzw99DeEAAAAAU"]
[Fri Mar 27 20:03:38.571545 2026] [:error] [pid 27851:tid 27877] [client 20.100.196.81:21761] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acZyGnR2ccxe3RMCLbrtegAAANM"]
[Fri Mar 27 20:03:39.901497 2026] [:error] [pid 27743:tid 27766] [client 20.100.196.81:15823] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfun.php"] [unique_id "acZyGyA46UYYLqzw99DeJAAAAAI"]
[Fri Mar 27 20:03:41.100323 2026] [:error] [pid 27743:tid 27780] [client 20.100.196.81:44603] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfun.php"] [unique_id "acZyHSA46UYYLqzw99DeLAAAABA"]
[Fri Mar 27 20:03:46.585822 2026] [:error] [pid 4293:tid 4308] [client 20.100.196.81:37391] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xfun.php"] [unique_id "acZyIpLjeJUC3OKtEx994QAAAU0"]
[Fri Mar 27 20:04:24.827925 2026] [proxy_fcgi:error] [pid 4293:tid 4314] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:25.225271 2026] [proxy_fcgi:error] [pid 4293:tid 4295] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:25.818719 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:26.365979 2026] [proxy_fcgi:error] [pid 4293:tid 4298] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:26.632104 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:26.897265 2026] [proxy_fcgi:error] [pid 4293:tid 4313] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:27.278565 2026] [proxy_fcgi:error] [pid 4293:tid 4295] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:27.618914 2026] [proxy_fcgi:error] [pid 4293:tid 4299] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:27.882609 2026] [proxy_fcgi:error] [pid 4293:tid 4315] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:28.226510 2026] [proxy_fcgi:error] [pid 4293:tid 4296] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:28.491098 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 20.100.196.81:21831] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:04:28.796137 2026] [:error] [pid 4293:tid 4310] [client 20.100.196.81:21831] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "acZyTJLjeJUC3OKtEx9-nwAAAU8"]
[Fri Mar 27 20:04:30.985003 2026] [:error] [pid 27851:tid 27880] [client 20.100.196.81:28317] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "acZyTnR2ccxe3RMCLbruDwAAANY"]
[Fri Mar 27 20:04:32.720104 2026] [:error] [pid 4341:tid 4351] [client 20.100.196.81:27123] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "acZyUOKJWrNB5dMlERGhFAAAAYg"]
[Fri Mar 27 20:04:35.772027 2026] [:error] [pid 27743:tid 27775] [client 20.100.196.81:14208] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "acZyUyA46UYYLqzw99DesgAAAAs"]
[Fri Mar 27 20:04:40.610942 2026] [:error] [pid 4293:tid 4304] [client 20.100.196.81:44667] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "acZyWJLjeJUC3OKtEx9-uAAAAUk"]
[Fri Mar 27 20:04:45.280173 2026] [:error] [pid 27743:tid 27779] [client 20.100.196.81:34951] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "acZyXSA46UYYLqzw99DeuAAAAA8"]
[Fri Mar 27 20:04:48.917757 2026] [:error] [pid 27750:tid 27821] [client 20.100.196.81:15375] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "acZyYIaSil5rd17ieLzwOwAAAIM"]
[Fri Mar 27 20:04:50.378801 2026] [:error] [pid 4293:tid 4297] [client 20.100.196.81:51565] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "acZyYpLjeJUC3OKtEx9-yAAAAUI"]
[Fri Mar 27 20:04:54.430484 2026] [:error] [pid 27743:tid 27770] [client 20.100.196.81:29881] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acZyZiA46UYYLqzw99DexQAAAAY"]
[Fri Mar 27 20:04:55.360970 2026] [:error] [pid 4341:tid 4346] [client 20.100.196.81:2512] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acZyZ-KJWrNB5dMlERGhIgAAAYM"]
[Fri Mar 27 20:04:57.776923 2026] [:error] [pid 4341:tid 4365] [client 20.100.196.81:61943] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acZyaeKJWrNB5dMlERGhJwAAAZY"]
[Fri Mar 27 20:04:59.176798 2026] [:error] [pid 27851:tid 27882] [client 20.100.196.81:32829] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acZya3R2ccxe3RMCLbruMQAAANg"]
[Fri Mar 27 20:05:00.010662 2026] [:error] [pid 63897:tid 63904] [client 20.100.196.81:33993] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "acZybGVSkmYmLu7ycYhMuQAAAQU"]
[Fri Mar 27 20:05:03.108163 2026] [:error] [pid 4341:tid 4362] [client 20.100.196.81:55877] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "acZyb-KJWrNB5dMlERGhMgAAAZM"]
[Fri Mar 27 20:05:04.083492 2026] [:error] [pid 4341:tid 4356] [client 20.100.196.81:61196] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "acZycOKJWrNB5dMlERGhNAAAAY0"]
[Fri Mar 27 20:05:06.007575 2026] [:error] [pid 4341:tid 4357] [client 20.100.196.81:33937] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "acZycuKJWrNB5dMlERGhNQAAAY4"]
[Fri Mar 27 20:05:09.108332 2026] [:error] [pid 4293:tid 4310] [client 20.100.196.81:16166] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "acZydZLjeJUC3OKtEx9-1wAAAU8"]
[Fri Mar 27 20:05:10.054765 2026] [:error] [pid 4293:tid 4306] [client 20.100.196.81:24296] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "acZydpLjeJUC3OKtEx9-3gAAAUs"]
[Fri Mar 27 20:05:11.822102 2026] [:error] [pid 4293:tid 4310] [client 20.100.196.81:49315] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "acZyd5LjeJUC3OKtEx9-8gAAAU8"]
[Fri Mar 27 20:05:12.632985 2026] [:error] [pid 63897:tid 63911] [client 20.100.196.81:55925] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "acZyeGVSkmYmLu7ycYhMzQAAAQw"]
[Fri Mar 27 20:05:13.897800 2026] [:error] [pid 27750:tid 27842] [client 20.100.196.81:13826] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acZyeYaSil5rd17ieLzwTgAAAJg"]
[Fri Mar 27 20:05:15.261601 2026] [:error] [pid 27750:tid 27822] [client 20.100.196.81:37918] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acZye4aSil5rd17ieLzwVAAAAIQ"]
[Fri Mar 27 20:05:16.366069 2026] [:error] [pid 27851:tid 27875] [client 20.100.196.81:50364] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acZyfHR2ccxe3RMCLbruRQAAANE"]
[Fri Mar 27 20:05:18.613314 2026] [:error] [pid 27743:tid 27773] [client 20.100.196.81:33949] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "acZyfiA46UYYLqzw99DfAAAAAAk"]
[Fri Mar 27 20:05:23.449961 2026] [:error] [pid 27851:tid 27882] [client 20.100.196.81:3025] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acZyg3R2ccxe3RMCLbruUgAAANg"]
[Fri Mar 27 20:05:25.357047 2026] [:error] [pid 63897:tid 63923] [client 20.100.196.81:32828] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acZyhWVSkmYmLu7ycYhM2wAAARg"]
[Fri Mar 27 20:05:26.133843 2026] [:error] [pid 4341:tid 4357] [client 20.100.196.81:50305] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acZyhuKJWrNB5dMlERGhUwAAAY4"]
[Fri Mar 27 20:05:27.913513 2026] [:error] [pid 27743:tid 27783] [client 20.100.196.81:25643] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "acZyhyA46UYYLqzw99DfKgAAABM"]
[Fri Mar 27 20:05:30.528864 2026] [proxy_fcgi:error] [pid 4341:tid 4363] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:31.480249 2026] [proxy_fcgi:error] [pid 4341:tid 4362] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:32.005789 2026] [proxy_fcgi:error] [pid 4341:tid 4359] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:32.384836 2026] [proxy_fcgi:error] [pid 4341:tid 4357] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:32.670182 2026] [proxy_fcgi:error] [pid 4341:tid 4351] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:32.963941 2026] [proxy_fcgi:error] [pid 4341:tid 4346] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:33.230047 2026] [proxy_fcgi:error] [pid 4341:tid 4353] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:33.493968 2026] [proxy_fcgi:error] [pid 4341:tid 4344] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:33.970793 2026] [proxy_fcgi:error] [pid 4341:tid 4349] [client 20.100.196.81:55895] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:05:34.229557 2026] [:error] [pid 4341:tid 4343] [client 20.100.196.81:55895] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "acZyjuKJWrNB5dMlERGhaQAAAYA"]
[Fri Mar 27 20:05:36.949482 2026] [:error] [pid 27743:tid 27784] [client 20.100.196.81:49321] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "acZykCA46UYYLqzw99DfSwAAABQ"]
[Fri Mar 27 20:05:40.132068 2026] [:error] [pid 27743:tid 27785] [client 20.100.196.81:11643] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "acZylCA46UYYLqzw99DfYwAAABU"]
[Fri Mar 27 20:05:45.126261 2026] [:error] [pid 27851:tid 27870] [client 20.100.196.81:11260] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "acZymXR2ccxe3RMCLbruYQAAAMw"]
[Fri Mar 27 20:05:47.134136 2026] [:error] [pid 27743:tid 27778] [client 20.100.196.81:20059] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acZymyA46UYYLqzw99DfkAAAAA4"]
[Fri Mar 27 20:05:48.543690 2026] [:error] [pid 27750:tid 27832] [client 20.100.196.81:42051] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acZynIaSil5rd17ieLzwdAAAAI4"]
[Fri Mar 27 20:05:50.651978 2026] [:error] [pid 4293:tid 4295] [client 20.100.196.81:33951] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acZynpLjeJUC3OKtEx9_JwAAAUA"]
[Fri Mar 27 20:05:52.334913 2026] [:error] [pid 4293:tid 4303] [client 20.100.196.81:16189] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "acZyoJLjeJUC3OKtEx9_NAAAAUg"]
[Fri Mar 27 20:05:53.314156 2026] [:error] [pid 4293:tid 4315] [client 20.100.196.81:12361] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "acZyoZLjeJUC3OKtEx9_OwAAAVQ"]
[Fri Mar 27 20:05:54.606980 2026] [:error] [pid 4293:tid 4297] [client 20.100.196.81:20850] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "acZyopLjeJUC3OKtEx9_QwAAAUI"]
[Fri Mar 27 20:05:56.599515 2026] [:error] [pid 27749:tid 27801] [client 20.100.196.81:12392] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "acZypMEqyoMni2Q6_X7w7AAAAEo"]
[Fri Mar 27 20:05:58.525582 2026] [:error] [pid 4341:tid 4349] [client 20.100.196.81:20843] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "acZypuKJWrNB5dMlERGhfwAAAYY"]
[Fri Mar 27 20:05:59.858939 2026] [:error] [pid 4293:tid 4318] [client 20.100.196.81:18057] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acZyp5LjeJUC3OKtEx9_VwAAAVc"]
[Fri Mar 27 20:06:00.842640 2026] [:error] [pid 4341:tid 4362] [client 20.100.196.81:11631] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acZyqOKJWrNB5dMlERGhhAAAAZM"]
[Fri Mar 27 20:06:01.934834 2026] [:error] [pid 4293:tid 4317] [client 20.100.196.81:2604] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acZyqZLjeJUC3OKtEx9_ZAAAAVY"]
[Fri Mar 27 20:06:02.812743 2026] [:error] [pid 27750:tid 27826] [client 20.100.196.81:32431] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "acZyqoaSil5rd17ieLzwkAAAAIg"]
[Fri Mar 27 20:06:06.260474 2026] [:error] [pid 4293:tid 4303] [client 20.100.196.81:13119] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acZyrpLjeJUC3OKtEx9_cwAAAUg"]
[Fri Mar 27 20:06:08.664483 2026] [:error] [pid 27743:tid 27778] [client 20.100.196.81:62509] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acZysCA46UYYLqzw99Df2QAAAA4"]
[Fri Mar 27 20:06:09.956871 2026] [:error] [pid 4293:tid 4304] [client 20.100.196.81:22149] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acZysZLjeJUC3OKtEx9_gQAAAUk"]
[Fri Mar 27 20:06:12.152455 2026] [:error] [pid 4341:tid 4354] [client 20.100.196.81:3002] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "acZytOKJWrNB5dMlERGhmgAAAYs"]
[Fri Mar 27 20:06:15.437186 2026] [:error] [pid 63897:tid 63916] [client 20.100.196.81:25722] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acZyt2VSkmYmLu7ycYhNOAAAARE"]
[Fri Mar 27 20:06:16.733634 2026] [:error] [pid 63897:tid 63899] [client 20.100.196.81:25724] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acZyuGVSkmYmLu7ycYhNQAAAAQA"]
[Fri Mar 27 20:06:18.448428 2026] [:error] [pid 27743:tid 27775] [client 20.100.196.81:30368] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acZyuiA46UYYLqzw99Df7AAAAAs"]
[Fri Mar 27 20:06:19.747461 2026] [:error] [pid 4341:tid 4345] [client 20.100.196.81:21166] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "acZyu-KJWrNB5dMlERGhqAAAAYI"]
[Fri Mar 27 20:06:22.326312 2026] [:error] [pid 4293:tid 4301] [client 20.100.196.81:21147] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZyvpLjeJUC3OKtEx9_rQAAAUY"]
[Fri Mar 27 20:06:23.642313 2026] [:error] [pid 4341:tid 4359] [client 20.100.196.81:26122] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZyv-KJWrNB5dMlERGhrAAAAZA"]
[Fri Mar 27 20:06:24.341738 2026] [:error] [pid 27749:tid 27808] [client 20.100.196.81:60022] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZywMEqyoMni2Q6_X7w_wAAAFE"]
[Fri Mar 27 20:06:25.534012 2026] [:error] [pid 27743:tid 27786] [client 20.100.196.81:46294] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "acZywSA46UYYLqzw99Df-AAAABY"]
[Fri Mar 27 20:06:27.431177 2026] [:error] [pid 4293:tid 4303] [client 20.100.196.81:26132] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acZyw5LjeJUC3OKtEx9_xwAAAUg"]
[Fri Mar 27 20:06:28.418586 2026] [:error] [pid 4341:tid 4357] [client 20.100.196.81:39035] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acZyxOKJWrNB5dMlERGhsQAAAY4"]
[Fri Mar 27 20:06:30.716069 2026] [:error] [pid 27750:tid 27831] [client 20.100.196.81:48394] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acZyxoaSil5rd17ieLzwqgAAAI0"]
[Fri Mar 27 20:06:34.256896 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:34.519572 2026] [proxy_fcgi:error] [pid 4293:tid 4314] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:34.871142 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:35.134026 2026] [proxy_fcgi:error] [pid 4293:tid 4306] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:35.439503 2026] [proxy_fcgi:error] [pid 4293:tid 4304] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:36.121716 2026] [proxy_fcgi:error] [pid 4293:tid 4301] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:36.459814 2026] [proxy_fcgi:error] [pid 4293:tid 4296] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:36.796905 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:37.089057 2026] [proxy_fcgi:error] [pid 4293:tid 4304] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:37.353444 2026] [proxy_fcgi:error] [pid 4293:tid 4307] [client 20.100.196.81:40784] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:06:37.612703 2026] [:error] [pid 4293:tid 4315] [client 20.100.196.81:40784] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acZyzZLjeJUC3OKtEx9_-QAAAVQ"]
[Fri Mar 27 20:06:39.075177 2026] [:error] [pid 27750:tid 27825] [client 20.100.196.81:50403] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acZyz4aSil5rd17ieLzwsQAAAIc"]
[Fri Mar 27 20:06:40.998876 2026] [:error] [pid 63897:tid 63921] [client 20.100.196.81:15098] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acZy0GVSkmYmLu7ycYhNdgAAARY"]
[Fri Mar 27 20:06:42.106925 2026] [:error] [pid 4293:tid 4313] [client 20.100.196.81:11927] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "acZy0pLjeJUC3OKtEx-AFgAAAVI"]
[Fri Mar 27 20:06:42.822682 2026] [:error] [pid 63897:tid 63899] [client 20.100.196.81:30963] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "acZy0mVSkmYmLu7ycYhNeAAAAQA"]
[Fri Mar 27 20:06:43.768172 2026] [:error] [pid 63897:tid 63916] [client 20.100.196.81:13932] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "acZy02VSkmYmLu7ycYhNgAAAARE"]
[Fri Mar 27 20:06:44.866581 2026] [:error] [pid 27750:tid 27837] [client 20.100.196.81:50382] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "acZy1IaSil5rd17ieLzwtAAAAJM"]
[Fri Mar 27 20:06:45.513248 2026] [:error] [pid 4341:tid 4346] [client 20.100.196.81:31967] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "acZy1eKJWrNB5dMlERGh2AAAAYM"]
[Fri Mar 27 20:06:46.637932 2026] [:error] [pid 27743:tid 27768] [client 20.100.196.81:16968] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "acZy1iA46UYYLqzw99DgFgAAAAQ"]
[Fri Mar 27 20:06:47.956253 2026] [:error] [pid 27743:tid 27772] [client 20.100.196.81:11918] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "acZy1yA46UYYLqzw99DgHAAAAAg"]
[Fri Mar 27 20:06:48.629204 2026] [:error] [pid 27743:tid 27780] [client 20.100.196.81:50368] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "acZy2CA46UYYLqzw99DgIAAAABA"]
[Fri Mar 27 20:06:50.173460 2026] [:error] [pid 4293:tid 4303] [client 20.100.196.81:11964] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "acZy2pLjeJUC3OKtEx-AKgAAAUg"]
[Fri Mar 27 20:06:51.188733 2026] [:error] [pid 4293:tid 4313] [client 20.100.196.81:45130] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "acZy25LjeJUC3OKtEx-AMAAAAVI"]
[Fri Mar 27 20:06:52.521230 2026] [:error] [pid 4293:tid 4315] [client 20.100.196.81:30921] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "acZy3JLjeJUC3OKtEx-ANwAAAVQ"]
[Fri Mar 27 20:06:53.892495 2026] [:error] [pid 4293:tid 4297] [client 20.100.196.81:27910] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "acZy3ZLjeJUC3OKtEx-APgAAAUI"]
[Fri Mar 27 20:06:55.490945 2026] [:error] [pid 27743:tid 27765] [client 20.100.196.81:16976] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "acZy3yA46UYYLqzw99DgOAAAAAE"]
[Fri Mar 27 20:06:56.372390 2026] [:error] [pid 4293:tid 4301] [client 20.100.196.81:13120] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acZy4JLjeJUC3OKtEx-AUAAAAUY"]
[Fri Mar 27 20:06:59.988149 2026] [:error] [pid 4293:tid 4306] [client 20.100.196.81:13899] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acZy45LjeJUC3OKtEx-AXwAAAUs"]
[Fri Mar 27 20:07:02.671857 2026] [:error] [pid 4341:tid 4362] [client 20.100.196.81:12340] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acZy5uKJWrNB5dMlERGh9AAAAZM"]
[Fri Mar 27 20:07:03.674419 2026] [:error] [pid 27743:tid 27787] [client 20.100.196.81:13172] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acZy5yA46UYYLqzw99DgRwAAABc"]
[Fri Mar 27 20:07:04.704063 2026] [:error] [pid 4341:tid 4360] [client 20.100.196.81:2200] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acZy6OKJWrNB5dMlERGh9QAAAZE"]
[Fri Mar 27 20:07:06.454650 2026] [:error] [pid 27743:tid 27767] [client 20.100.196.81:2222] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acZy6iA46UYYLqzw99DgTAAAAAM"]
[Fri Mar 27 20:07:07.970574 2026] [:error] [pid 27743:tid 27780] [client 20.100.196.81:11917] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acZy6yA46UYYLqzw99DgUAAAABA"]
[Fri Mar 27 20:07:10.344828 2026] [:error] [pid 27851:tid 27874] [client 20.100.196.81:27927] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "acZy7nR2ccxe3RMCLbrurgAAANA"]
[Fri Mar 27 20:07:11.758580 2026] [:error] [pid 27743:tid 27783] [client 20.100.196.81:27935] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "acZy7yA46UYYLqzw99DgXwAAABM"]
[Fri Mar 27 20:07:14.104377 2026] [:error] [pid 63897:tid 63903] [client 20.100.196.81:2214] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "acZy8mVSkmYmLu7ycYhNlwAAAQQ"]
[Fri Mar 27 20:07:16.124421 2026] [:error] [pid 4293:tid 4318] [client 20.100.196.81:29397] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "acZy9JLjeJUC3OKtEx-AkAAAAVc"]
[Fri Mar 27 20:07:19.141844 2026] [:error] [pid 4341:tid 4359] [client 20.100.196.81:2301] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "acZy9-KJWrNB5dMlERGiDgAAAZA"]
[Fri Mar 27 20:07:20.626754 2026] [:error] [pid 4341:tid 4350] [client 20.100.196.81:45591] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "acZy-OKJWrNB5dMlERGiEwAAAYc"]
[Fri Mar 27 20:07:21.819889 2026] [:error] [pid 4293:tid 4318] [client 20.100.196.81:2222] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "acZy-ZLjeJUC3OKtEx-AlwAAAVc"]
[Fri Mar 27 20:07:22.593087 2026] [:error] [pid 4293:tid 4319] [client 20.100.196.81:43152] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "acZy-pLjeJUC3OKtEx-AoAAAAVg"]
[Fri Mar 27 20:07:24.067394 2026] [:error] [pid 27851:tid 27860] [client 20.100.196.81:2905] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "acZy_HR2ccxe3RMCLbruuwAAAMI"]
[Fri Mar 27 20:07:26.122585 2026] [:error] [pid 27851:tid 27867] [client 20.100.196.81:27907] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "acZy_nR2ccxe3RMCLbruvgAAAMk"]
[Fri Mar 27 20:07:29.379762 2026] [:error] [pid 4341:tid 4349] [client 20.100.196.81:56531] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "acZzAeKJWrNB5dMlERGiHwAAAYY"]
[Fri Mar 27 20:07:38.935021 2026] [proxy_fcgi:error] [pid 4293:tid 4312] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:39.199077 2026] [proxy_fcgi:error] [pid 4293:tid 4302] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:39.597108 2026] [proxy_fcgi:error] [pid 4293:tid 4314] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:39.860545 2026] [proxy_fcgi:error] [pid 4293:tid 4296] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:40.125466 2026] [proxy_fcgi:error] [pid 4293:tid 4310] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:40.605601 2026] [proxy_fcgi:error] [pid 4293:tid 4303] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:40.893633 2026] [proxy_fcgi:error] [pid 4293:tid 4300] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:41.156651 2026] [proxy_fcgi:error] [pid 4293:tid 4304] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:41.477096 2026] [proxy_fcgi:error] [pid 4293:tid 4299] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:42.261197 2026] [proxy_fcgi:error] [pid 4293:tid 4297] [client 20.100.196.81:34487] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:07:42.521732 2026] [:error] [pid 4293:tid 4309] [client 20.100.196.81:34487] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acZzDpLjeJUC3OKtEx-A2wAAAU4"]
[Fri Mar 27 20:07:44.918465 2026] [:error] [pid 63897:tid 63907] [client 20.100.196.81:28375] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acZzEGVSkmYmLu7ycYhN0gAAAQg"]
[Fri Mar 27 20:07:48.271923 2026] [:error] [pid 27743:tid 27773] [client 20.100.196.81:27623] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acZzFCA46UYYLqzw99DgzQAAAAk"]
[Fri Mar 27 20:08:02.634803 2026] [:error] [pid 4293:tid 4298] [client 20.100.196.81:61836] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "acZzIpLjeJUC3OKtEx-BFwAAAUM"]
[Fri Mar 27 20:08:05.486726 2026] [:error] [pid 27851:tid 27878] [client 20.100.196.81:42708] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "acZzJXR2ccxe3RMCLbrvAgAAANQ"]
[Fri Mar 27 20:08:06.559018 2026] [:error] [pid 4293:tid 4318] [client 20.100.196.81:48995] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "acZzJpLjeJUC3OKtEx-BJwAAAVc"]
[Fri Mar 27 20:08:07.674201 2026] [:error] [pid 4341:tid 4365] [client 20.100.196.81:42716] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "acZzJ-KJWrNB5dMlERGiVAAAAZY"]
[Fri Mar 27 20:08:09.881387 2026] [:error] [pid 27743:tid 27786] [client 20.100.196.81:2913] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "acZzKSA46UYYLqzw99Dg_QAAABY"]
[Fri Mar 27 20:08:12.036013 2026] [:error] [pid 4341:tid 4344] [client 20.100.196.81:33173] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "acZzLOKJWrNB5dMlERGiVwAAAYE"]
[Fri Mar 27 20:08:15.750433 2026] [:error] [pid 27743:tid 27787] [client 20.100.196.81:36245] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "acZzLyA46UYYLqzw99DhBwAAABc"]
[Fri Mar 27 20:08:29.525459 2026] [:error] [pid 4341:tid 4349] [client 20.100.196.81:61883] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "acZzPeKJWrNB5dMlERGicwAAAYY"]
[Fri Mar 27 20:08:34.130706 2026] [:error] [pid 27851:tid 27880] [client 20.100.196.81:44136] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "acZzQnR2ccxe3RMCLbrvFAAAANY"]
[Fri Mar 27 20:08:36.199422 2026] [:error] [pid 27743:tid 27769] [client 20.100.196.81:13516] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "acZzRCA46UYYLqzw99DhLQAAAAU"]
[Fri Mar 27 20:08:38.325544 2026] [:error] [pid 4293:tid 4309] [client 20.100.196.81:17694] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "acZzRpLjeJUC3OKtEx-BiAAAAU4"]
[Fri Mar 27 20:08:39.963757 2026] [:error] [pid 27743:tid 27775] [client 20.100.196.81:38922] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "acZzRyA46UYYLqzw99DhOQAAAAs"]
[Fri Mar 27 20:08:41.805197 2026] [:error] [pid 4341:tid 4345] [client 20.100.196.81:19654] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "acZzSeKJWrNB5dMlERGiiAAAAYI"]
[Fri Mar 27 20:08:42.949151 2026] [proxy_fcgi:error] [pid 27851:tid 27859] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:43.219355 2026] [proxy_fcgi:error] [pid 27851:tid 27875] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:43.481702 2026] [proxy_fcgi:error] [pid 27851:tid 27871] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:43.756282 2026] [proxy_fcgi:error] [pid 27851:tid 27860] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:44.021673 2026] [proxy_fcgi:error] [pid 27851:tid 27868] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:44.604714 2026] [proxy_fcgi:error] [pid 27851:tid 27865] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:45.014704 2026] [proxy_fcgi:error] [pid 27851:tid 27869] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:45.423492 2026] [proxy_fcgi:error] [pid 27851:tid 27864] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:45.695557 2026] [proxy_fcgi:error] [pid 27851:tid 27862] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:46.001843 2026] [proxy_fcgi:error] [pid 27851:tid 27880] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:46.616310 2026] [proxy_fcgi:error] [pid 27851:tid 27878] [client 20.100.196.81:60626] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:08:46.996328 2026] [:error] [pid 27851:tid 27872] [client 20.100.196.81:60626] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "acZzTnR2ccxe3RMCLbrvKAAAAM4"]
[Fri Mar 27 20:08:48.124296 2026] [:error] [pid 27743:tid 27786] [client 20.100.196.81:21429] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "acZzUCA46UYYLqzw99DhVQAAABY"]
[Fri Mar 27 20:08:51.743469 2026] [:error] [pid 27851:tid 27860] [client 20.100.196.81:30437] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "acZzU3R2ccxe3RMCLbrvMQAAAMI"]
[Fri Mar 27 20:08:52.698608 2026] [:error] [pid 4293:tid 4299] [client 20.100.196.81:28888] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "acZzVJLjeJUC3OKtEx-ByAAAAUQ"]
[Fri Mar 27 20:08:55.638311 2026] [:error] [pid 4293:tid 4304] [client 20.100.196.81:34992] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "acZzV5LjeJUC3OKtEx-B3QAAAUk"]
[Fri Mar 27 20:08:57.295890 2026] [:error] [pid 4341:tid 4361] [client 20.100.196.81:16912] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "acZzWeKJWrNB5dMlERGipwAAAZI"]
[Fri Mar 27 20:08:58.577117 2026] [:error] [pid 27743:tid 27781] [client 20.100.196.81:44671] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "acZzWiA46UYYLqzw99DhcgAAABE"]
[Fri Mar 27 20:09:01.224935 2026] [:error] [pid 27743:tid 27766] [client 20.100.196.81:34993] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "acZzXSA46UYYLqzw99DhegAAAAI"]
[Fri Mar 27 20:09:04.588875 2026] [:error] [pid 27743:tid 27773] [client 20.100.196.81:44645] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "acZzYCA46UYYLqzw99DhhwAAAAk"]
[Fri Mar 27 20:09:06.381465 2026] [:error] [pid 4293:tid 4296] [client 20.100.196.81:18115] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "acZzYpLjeJUC3OKtEx-CBQAAAUE"]
[Fri Mar 27 20:09:08.612451 2026] [:error] [pid 4293:tid 4315] [client 20.100.196.81:38002] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "acZzZJLjeJUC3OKtEx-CDQAAAVQ"]
[Fri Mar 27 20:09:10.589328 2026] [:error] [pid 27743:tid 27776] [client 20.100.196.81:35696] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "acZzZiA46UYYLqzw99DhpgAAAAw"]
[Fri Mar 27 20:09:12.828309 2026] [:error] [pid 27851:tid 27872] [client 20.100.196.81:20369] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "acZzaHR2ccxe3RMCLbrvTAAAAM4"]
[Fri Mar 27 20:09:14.890369 2026] [:error] [pid 27749:tid 27810] [client 20.100.196.81:34965] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "acZzasEqyoMni2Q6_X7xWAAAAFM"]
[Fri Mar 27 20:09:17.889897 2026] [:error] [pid 4341:tid 4362] [client 20.100.196.81:26224] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "acZzbeKJWrNB5dMlERGi0AAAAZM"]
[Fri Mar 27 20:09:20.623814 2026] [:error] [pid 4293:tid 4307] [client 20.100.196.81:2145] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "acZzcJLjeJUC3OKtEx-CLgAAAUw"]
[Fri Mar 27 20:09:31.273808 2026] [:error] [pid 4293:tid 4300] [client 20.100.196.81:40734] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "acZze5LjeJUC3OKtEx-CawAAAUU"]
[Fri Mar 27 20:09:33.592882 2026] [:error] [pid 27750:tid 27834] [client 20.100.196.81:48953] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "acZzfYaSil5rd17ieLzxOgAAAJA"]
[Fri Mar 27 20:09:34.677381 2026] [:error] [pid 27743:tid 27771] [client 20.100.196.81:16907] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "acZzfiA46UYYLqzw99Dh3AAAAAc"]
[Fri Mar 27 20:09:35.460316 2026] [:error] [pid 27743:tid 27764] [client 20.100.196.81:31872] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "acZzfyA46UYYLqzw99Dh3QAAAAA"]
[Fri Mar 27 20:09:36.405079 2026] [:error] [pid 4341:tid 4357] [client 20.100.196.81:14243] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZzgOKJWrNB5dMlERGjAgAAAY4"]
[Fri Mar 27 20:09:37.356268 2026] [:error] [pid 27851:tid 27868] [client 20.100.196.81:43242] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZzgXR2ccxe3RMCLbrvZAAAAMo"]
[Fri Mar 27 20:09:38.350478 2026] [:error] [pid 27743:tid 27775] [client 20.100.196.81:28338] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZzgiA46UYYLqzw99Dh5wAAAAs"]
[Fri Mar 27 20:09:39.151294 2026] [:error] [pid 4341:tid 4356] [client 20.100.196.81:46937] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "acZzg-KJWrNB5dMlERGjDgAAAY0"]
[Fri Mar 27 20:09:40.138403 2026] [:error] [pid 4341:tid 4352] [client 20.100.196.81:37398] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "acZzhOKJWrNB5dMlERGjGQAAAYk"]
[Fri Mar 27 20:09:41.112795 2026] [:error] [pid 27750:tid 27839] [client 20.100.196.81:24770] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "acZzhYaSil5rd17ieLzxPwAAAJU"]
[Fri Mar 27 20:09:41.845918 2026] [:error] [pid 27851:tid 27875] [client 20.100.196.81:60654] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "acZzhXR2ccxe3RMCLbrvbAAAANE"]
[Fri Mar 27 20:09:42.640451 2026] [:error] [pid 63897:tid 63920] [client 20.100.196.81:17665] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "acZzhmVSkmYmLu7ycYhORQAAARU"]
[Fri Mar 27 20:09:43.476579 2026] [:error] [pid 4341:tid 4362] [client 20.100.196.81:2818] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "acZzh-KJWrNB5dMlERGjLAAAAZM"]
[Fri Mar 27 20:09:44.546387 2026] [:error] [pid 27750:tid 27828] [client 20.100.196.81:13520] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "acZziIaSil5rd17ieLzxRgAAAIo"]
[Fri Mar 27 20:09:45.200944 2026] [:error] [pid 4293:tid 4319] [client 20.100.196.81:13530] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "acZziZLjeJUC3OKtEx-CjAAAAVg"]
[Fri Mar 27 20:09:46.154056 2026] [proxy_fcgi:error] [pid 4341:tid 4353] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:46.439049 2026] [proxy_fcgi:error] [pid 4341:tid 4349] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:46.765545 2026] [proxy_fcgi:error] [pid 4341:tid 4359] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:47.028527 2026] [proxy_fcgi:error] [pid 4341:tid 4363] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:47.373636 2026] [proxy_fcgi:error] [pid 4341:tid 4362] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:47.636565 2026] [proxy_fcgi:error] [pid 4341:tid 4360] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:47.957107 2026] [proxy_fcgi:error] [pid 4341:tid 4349] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:48.228829 2026] [proxy_fcgi:error] [pid 4341:tid 4358] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:48.493821 2026] [proxy_fcgi:error] [pid 4341:tid 4359] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:48.759936 2026] [proxy_fcgi:error] [pid 4341:tid 4343] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:49.025933 2026] [proxy_fcgi:error] [pid 4341:tid 4344] [client 20.100.196.81:19704] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:09:49.289070 2026] [:error] [pid 4341:tid 4366] [client 20.100.196.81:19704] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acZzjeKJWrNB5dMlERGjWwAAAZc"]
[Fri Mar 27 20:09:50.375449 2026] [:error] [pid 27749:tid 27815] [client 20.100.196.81:29899] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acZzjsEqyoMni2Q6_X7xcAAAAFg"]
[Fri Mar 27 20:09:51.154706 2026] [:error] [pid 27743:tid 27787] [client 20.100.196.81:34461] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acZzjyA46UYYLqzw99DiBgAAABc"]
[Fri Mar 27 20:09:51.859242 2026] [:error] [pid 27743:tid 27769] [client 20.100.196.81:31384] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acZzjyA46UYYLqzw99DiCwAAAAU"]
[Fri Mar 27 20:09:53.625791 2026] [:error] [pid 27750:tid 27825] [client 20.100.196.81:45614] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "acZzkYaSil5rd17ieLzxTgAAAIc"]
[Fri Mar 27 20:09:56.057016 2026] [:error] [pid 63897:tid 63905] [client 20.100.196.81:13922] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "acZzlGVSkmYmLu7ycYhOVwAAAQY"]
[Fri Mar 27 20:09:59.060158 2026] [:error] [pid 4293:tid 4305] [client 20.100.196.81:29406] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "acZzl5LjeJUC3OKtEx-CsgAAAUo"]
[Fri Mar 27 20:10:01.085068 2026] [:error] [pid 63897:tid 63920] [client 20.100.196.81:30933] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "acZzmWVSkmYmLu7ycYhOXwAAARU"]
[Fri Mar 27 20:10:04.146905 2026] [:error] [pid 4293:tid 4297] [client 20.100.196.81:15070] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acZznJLjeJUC3OKtEx-C3wAAAUI"]
[Fri Mar 27 20:10:05.155916 2026] [:error] [pid 63897:tid 63901] [client 20.100.196.81:13161] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acZznWVSkmYmLu7ycYhOYwAAAQI"]
[Fri Mar 27 20:10:06.549606 2026] [:error] [pid 27851:tid 27858] [client 20.100.196.81:13134] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acZznnR2ccxe3RMCLbrvjQAAAMA"]
[Fri Mar 27 20:10:08.829797 2026] [:error] [pid 4341:tid 4361] [client 20.100.196.81:27536] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "acZzoOKJWrNB5dMlERGjsAAAAZI"]
[Fri Mar 27 20:10:11.387598 2026] [:error] [pid 27750:tid 27825] [client 20.100.196.81:11945] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "acZzo4aSil5rd17ieLzxWQAAAIc"]
[Fri Mar 27 20:10:12.568838 2026] [:error] [pid 27750:tid 27819] [client 20.100.196.81:38513] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "acZzpIaSil5rd17ieLzxWgAAAIE"]
[Fri Mar 27 20:10:13.297984 2026] [:error] [pid 27743:tid 27778] [client 20.100.196.81:31940] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "acZzpSA46UYYLqzw99DiLwAAAA4"]
[Fri Mar 27 20:10:14.600192 2026] [:error] [pid 4341:tid 4352] [client 20.100.196.81:55880] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "acZzpuKJWrNB5dMlERGjtgAAAYk"]
[Fri Mar 27 20:10:16.302151 2026] [:error] [pid 27750:tid 27823] [client 20.100.196.81:19704] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "acZzqIaSil5rd17ieLzxXQAAAIU"]
[Fri Mar 27 20:10:19.286406 2026] [:error] [pid 4341:tid 4358] [client 20.100.196.81:32856] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "acZzq-KJWrNB5dMlERGjwAAAAY8"]
[Fri Mar 27 20:10:28.491002 2026] [:error] [pid 27750:tid 27822] [client 20.100.196.81:30954] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "acZztIaSil5rd17ieLzxbwAAAIQ"]
[Fri Mar 27 20:10:31.519663 2026] [:error] [pid 27749:tid 27801] [client 20.100.196.81:27524] [client 20.100.196.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/callback.php"] [unique_id "acZzt8EqyoMni2Q6_X7xfwAAAEo"]
[Fri Mar 27 20:10:49.839978 2026] [proxy_fcgi:error] [pid 27743:tid 27782] [client 20.100.196.81:31431] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:10:50.219271 2026] [proxy_fcgi:error] [pid 27743:tid 27771] [client 20.100.196.81:31431] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:10:50.546882 2026] [proxy_fcgi:error] [pid 27743:tid 27787] [client 20.100.196.81:31431] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 20:52:01.972834 2026] [:error] [pid 27851:tid 27872] [client 138.97.135.20:15702] [client 138.97.135.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.97.135.20, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acZ9cXR2ccxe3RMCLbr3yQAAAM4"]
[Fri Mar 27 20:52:01.984775 2026] [proxy_fcgi:error] [pid 27851:tid 27872] [client 138.97.135.20:15702] AH01071: Got error 'Primary script unknown'
[Fri Mar 27 22:49:13.703168 2026] [:error] [pid 27749:tid 27793] [client 43.152.72.244:38732] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acaY6cEqyoMni2Q6_X4afgAAAEI"]
[Sat Mar 28 01:37:57.473783 2026] [:error] [pid 11325:tid 11755] [client 103.178.208.43:65420] [client 103.178.208.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.208.43, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acbAdY9aMci1IHcmG6L0ygAAAM4"]
[Sat Mar 28 01:37:57.486342 2026] [proxy_fcgi:error] [pid 11325:tid 11755] [client 103.178.208.43:65420] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 04:19:37.591766 2026] [:error] [pid 64859:tid 64896] [client 1.15.52.154:38242] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acbmWW3qEBHXq3rHdBmB4wAAAA8"]
[Sat Mar 28 08:55:22.930862 2026] [:error] [pid 64860:tid 64929] [client 43.133.253.253:45792] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "accm-hkU3N0pg_4aEL8EgAAAAFU"]
[Sat Mar 28 11:08:05.512070 2026] [:error] [pid 43578:tid 43603] [client 49.51.183.220:45428] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acdGFXNG2YdGm41aN8InLAAAAlY"]
[Sat Mar 28 11:47:18.577409 2026] [:error] [pid 43578:tid 43590] [client 125.75.66.97:44692] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acdPRnNG2YdGm41aN8I55wAAAkk"]
[Sat Mar 28 17:53:50.188832 2026] [:error] [pid 64861:tid 64952] [client 43.167.245.18:37328] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acelLuxK22_lUN2kvnUYJgAAAJE"]
[Sat Mar 28 17:58:57.168996 2026] [:error] [pid 43578:tid 43595] [client 61.1.151.176:65388] [client 61.1.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.151.176, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acemYXNG2YdGm41aN8LJkgAAAk4"]
[Sat Mar 28 17:58:57.181737 2026] [proxy_fcgi:error] [pid 43578:tid 43595] [client 61.1.151.176:65388] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 19:03:11.259838 2026] [:error] [pid 64859:tid 64888] [client 49.150.106.140:40872] [client 49.150.106.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.106.140, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ace1b23qEBHXq3rHdBk-oQAAAAc"]
[Sat Mar 28 19:03:11.272290 2026] [proxy_fcgi:error] [pid 64859:tid 64888] [client 49.150.106.140:40872] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 22:10:34.281615 2026] [:error] [pid 64860:tid 64911] [client 43.153.15.51:35234] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acfhWhkU3N0pg_4aEL-rTgAAAEM"]
[Sat Mar 28 23:15:56.408158 2026] [:error] [pid 64861:tid 64950] [client 179.108.59.227:32478] [client 179.108.59.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.59.227, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acfwrOxK22_lUN2kvnWr5wAAAI8"]
[Sat Mar 28 23:15:56.420958 2026] [proxy_fcgi:error] [pid 64861:tid 64950] [client 179.108.59.227:32478] AH01071: Got error 'Primary script unknown'
[Sat Mar 28 23:34:06.942730 2026] [:error] [pid 64860:tid 64923] [client 43.133.253.253:49384] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acf07hkU3N0pg_4aEL-6xQAAAE8"]
[Sun Mar 29 03:01:05.518406 2026] [:error] [pid 60346:tid 60369] [client 195.178.110.34:46458] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.svn/wc.db"] [unique_id "acglcXVrXSgLxlxLi9BXngAAARI"]
[Sun Mar 29 03:01:18.171020 2026] [:error] [pid 60346:tid 60375] [client 195.178.110.34:47400] [client 195.178.110.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.svn/entries"] [unique_id "acglfnVrXSgLxlxLi9BXtQAAARg"]
[Sun Mar 29 07:33:41.023940 2026] [:error] [pid 32257:tid 32340] [client 150.109.46.88:41770] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "achlVSE3TArOFrUtgWpVtgAAAJY"]
[Sun Mar 29 10:00:08.485534 2026] [:error] [pid 23250:tid 23276] [client 177.21.37.90:54613] [client 177.21.37.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.21.37.90, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aciHqJxrpj-dQjy1cvptXgAAAlg"]
[Sun Mar 29 10:00:08.497032 2026] [proxy_fcgi:error] [pid 23250:tid 23276] [client 177.21.37.90:54613] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 10:11:49.829571 2026] [:error] [pid 32257:tid 32340] [client 106.54.62.156:59010] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aciKZSE3TArOFrUtgWpvNgAAAJY"]
[Sun Mar 29 13:13:37.409535 2026] [:error] [pid 23167:tid 23176] [client 150.109.46.88:36864] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aci1ARIAHJCFaHff3_cJTQAAAcY"]
[Sun Mar 29 13:55:01.373015 2026] [:error] [pid 23167:tid 23182] [client 217.216.37.56:64585] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aci-tRIAHJCFaHff3_ceQAAAAcw"]
[Sun Mar 29 13:55:01.583964 2026] [:error] [pid 32255:tid 32294] [client 217.216.37.56:61069] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aci-tWnfn-AtRoMbquwPfAAAAEM"]
[Sun Mar 29 13:55:03.664937 2026] [:error] [pid 23284:tid 23288] [client 217.216.37.56:54337] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "aci-t4zBujdPHsq7wyTMdwAAAoI"]
[Sun Mar 29 14:51:38.795580 2026] [:error] [pid 23167:tid 23175] [client 43.130.110.130:60364] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acjL-hIAHJCFaHff3_c3KAAAAcU"]
[Sun Mar 29 16:28:48.860983 2026] [:error] [pid 32255:tid 32305] [client 105.235.137.88:54095] [client 105.235.137.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.137.88, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acjiwGnfn-AtRoMbquxPKgAAAE4"]
[Sun Mar 29 16:28:48.914851 2026] [proxy_fcgi:error] [pid 32255:tid 32305] [client 105.235.137.88:54095] AH01071: Got error 'Primary script unknown'
[Sun Mar 29 23:00:57.887481 2026] [:error] [pid 23168:tid 23206] [client 104.28.164.109:26234] [client 104.28.164.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.109, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ack-qWP8p0yRL8ot_2-z9AAAAgk"]
[Sun Mar 29 23:00:58.206823 2026] [proxy_fcgi:error] [pid 23168:tid 23206] [client 104.28.164.109:26234] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:16:42.554537 2026] [:error] [pid 23168:tid 23204] [client 221.229.106.25:36808] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acleemP8p0yRL8ot_2_nnQAAAgc"]
[Mon Mar 30 01:45:47.608307 2026] [proxy_fcgi:error] [pid 32255:tid 32309] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:47.802497 2026] [proxy_fcgi:error] [pid 32255:tid 32306] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:48.202142 2026] [proxy_fcgi:error] [pid 32255:tid 32315] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:49.784886 2026] [proxy_fcgi:error] [pid 32255:tid 32297] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:50.173383 2026] [proxy_fcgi:error] [pid 32255:tid 32302] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:50.373959 2026] [proxy_fcgi:error] [pid 32255:tid 32307] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:50.568406 2026] [proxy_fcgi:error] [pid 32255:tid 32294] [client 68.155.154.154:30996] AH01071: Got error 'Primary script unknown'
[Mon Mar 30 01:45:50.957814 2026] [:error] [pid 32255:tid 32292] [client 68.155.154.154:30996] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "acllTmnfn-AtRoMbquxecgAAAEE"]
[Mon Mar 30 01:45:51.742341 2026] [:error] [pid 32255:tid 32312] [client 68.155.154.154:31019] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "acllT2nfn-AtRoMbquxedgAAAFU"]
[Mon Mar 30 01:45:52.582214 2026] [:error] [pid 32255:tid 32294] [client 68.155.154.154:31007] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "acllUGnfn-AtRoMbquxeegAAAEM"]
[Mon Mar 30 01:45:53.349595 2026] [:error] [pid 23284:tid 23293] [client 68.155.154.154:30750] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "acllUYzBujdPHsq7wyRI6gAAAoc"]
[Mon Mar 30 03:10:42.193244 2026] [:error] [pid 23284:tid 23286] [client 43.166.136.24:57712] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acl5MozBujdPHsq7wyR0eAAAAoA"]
[Mon Mar 30 08:01:00.086534 2026] [:error] [pid 35343:tid 35368] [client 43.157.50.58:36350] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acm9PKP5HurqmbvwN-LuwwAAABc"]
[Mon Mar 30 09:43:46.894931 2026] [:error] [pid 35343:tid 35369] [client 43.153.10.13:47424] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acnVUqP5HurqmbvwN-IvKQAAABg"]
[Mon Mar 30 10:48:57.132649 2026] [autoindex:error] [pid 35343:tid 35359] [client 185.21.13.119:60318] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Mar 30 12:43:08.970388 2026] [:error] [pid 35343:tid 35347] [client 20.239.139.3:7233] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7206/index.php"] [unique_id "acn_XKP5HurqmbvwN-KQRAAAAAI"]
[Mon Mar 30 12:43:09.447373 2026] [:error] [pid 35343:tid 35363] [client 20.239.139.3:1783] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7206/index.php"] [unique_id "acn_XaP5HurqmbvwN-KQXAAAABI"]
[Mon Mar 30 12:43:09.953661 2026] [:error] [pid 35343:tid 35359] [client 20.239.139.3:7020] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7206/index.php"] [unique_id "acn_XaP5HurqmbvwN-KQaQAAAA4"]
[Mon Mar 30 12:43:10.450076 2026] [:error] [pid 35343:tid 35348] [client 20.239.139.3:6981] [client 20.239.139.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.trash7206/index.php"] [unique_id "acn_XqP5HurqmbvwN-KQeQAAAAM"]
[Mon Mar 30 13:44:09.414275 2026] [:error] [pid 41941:tid 41950] [client 185.171.30.36:26242] [client 185.171.30.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "acoNqSB2g7BNCXGBOJOudwAAAQc"]
[Mon Mar 30 14:33:57.364440 2026] [:error] [pid 35248:tid 35254] [client 43.165.65.75:45400] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acoZVb3igMCgAQPFS_9RBgAAAEA"]
[Mon Mar 30 15:58:07.616728 2026] [:error] [pid 35250:tid 35325] [client 43.154.127.188:50858] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acotD4aKM1MR6zcp2YMOgQAAAM4"]
[Mon Mar 30 20:14:24.863667 2026] [:error] [pid 35250:tid 35330] [client 43.157.170.13:34844] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acppIIaKM1MR6zcp2YNxwQAAANM"]
[Mon Mar 30 21:49:17.386609 2026] [:error] [pid 60835:tid 60861] [client 120.71.59.24:39812] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acp_XQIOJ4Lc0iJVRzzMJwAAABg"]
[Mon Mar 30 23:37:19.061439 2026] [:error] [pid 60745:tid 60750] [client 98.159.37.247:42763] [client 98.159.37.247] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "acqYryQDBn75QnHaPb9V8QAAAEE"]
[Tue Mar 31 03:24:54.523964 2026] [proxy_fcgi:error] [pid 15454:tid 15549] [client 20.220.217.186:49127] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 03:24:54.729701 2026] [:error] [pid 15454:tid 15537] [client 20.220.217.186:49127] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "acrOBnCerH-ZHr3-moQo6AAAAIk"]
[Tue Mar 31 03:24:55.556143 2026] [:error] [pid 15454:tid 15543] [client 20.220.217.186:48532] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "acrOB3CerH-ZHr3-moQo6wAAAI8"]
[Tue Mar 31 03:24:56.382103 2026] [:error] [pid 15567:tid 15583] [client 20.220.217.186:49149] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "acrOCJx4rriuHvPbfx28FgAAAMw"]
[Tue Mar 31 03:24:57.219097 2026] [:error] [pid 15454:tid 15545] [client 20.220.217.186:49089] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "acrOCXCerH-ZHr3-moQo7wAAAJE"]
[Tue Mar 31 03:30:30.145912 2026] [:error] [pid 15454:tid 15535] [client 43.130.16.140:57376] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acrPVnCerH-ZHr3-moQsgAAAAIc"]
[Tue Mar 31 03:52:38.362080 2026] [autoindex:error] [pid 18333:tid 18399] [client 80.85.246.74:58948] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Mar 31 08:13:46.025912 2026] [:error] [pid 41421:tid 41431] [client 49.51.183.84:41328] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acsRuhSaDjY9kKFtUQBL1gAAAQc"]
[Tue Mar 31 09:43:43.223028 2026] [:error] [pid 36890:tid 36911] [client 43.166.245.120:39546] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acsmz58FASPd_uH8z7dgwAAAABA"]
[Tue Mar 31 14:11:19.030597 2026] [:error] [pid 6548:tid 6569] [client 170.106.187.106:55772] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "actlh7gIz9HgMl9YwE5c9QAAAVM"]
[Tue Mar 31 15:31:35.452215 2026] [:error] [pid 36890:tid 36896] [client 43.133.187.11:54094] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "act4V58FASPd_uH8z7fX2QAAAAE"]
[Tue Mar 31 16:34:50.309396 2026] [:error] [pid 6548:tid 6566] [client 106.54.62.156:58546] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acuHKrgIz9HgMl9YwE6pGAAAAVA"]
[Tue Mar 31 17:39:59.722544 2026] [proxy_fcgi:error] [pid 36982:tid 37007] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:39:59.961611 2026] [proxy_fcgi:error] [pid 36982:tid 37001] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:00.211120 2026] [proxy_fcgi:error] [pid 36982:tid 36999] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:00.451254 2026] [proxy_fcgi:error] [pid 36982:tid 36986] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:00.690321 2026] [proxy_fcgi:error] [pid 36982:tid 36993] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:00.929042 2026] [proxy_fcgi:error] [pid 36982:tid 36991] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:01.167637 2026] [proxy_fcgi:error] [pid 36982:tid 37009] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:01.407647 2026] [proxy_fcgi:error] [pid 36982:tid 36999] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:01.648725 2026] [proxy_fcgi:error] [pid 36982:tid 36997] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:01.889254 2026] [proxy_fcgi:error] [pid 36982:tid 36996] [client 172.161.1.56:7047] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:40:02.124635 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:7047] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "acuWcvlMmeoQKN0r_GNM4AAAAM0"]
[Tue Mar 31 17:40:02.642220 2026] [:error] [pid 36892:tid 36975] [client 172.161.1.56:7116] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "acuWckyj9S4G0ek3O4JnwQAAAJg"]
[Tue Mar 31 17:40:03.120124 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:7129] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "acuWc7gIz9HgMl9YwE7YzQAAAUg"]
[Tue Mar 31 17:40:03.597636 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:7049] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "acuWc7gIz9HgMl9YwE7YzgAAAVE"]
[Tue Mar 31 17:40:04.072183 2026] [:error] [pid 41421:tid 41444] [client 172.161.1.56:7122] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "acuWdBSaDjY9kKFtUQBdlQAAARQ"]
[Tue Mar 31 17:40:04.545706 2026] [:error] [pid 41421:tid 41429] [client 172.161.1.56:7165] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "acuWdBSaDjY9kKFtUQBdlgAAAQU"]
[Tue Mar 31 17:40:05.020715 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:7149] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "acuWdflMmeoQKN0r_GNM5wAAANY"]
[Tue Mar 31 17:40:05.493293 2026] [:error] [pid 36890:tid 36909] [client 172.161.1.56:7080] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "acuWdZ8FASPd_uH8z7cGJAAAAA4"]
[Tue Mar 31 17:40:05.978724 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:7040] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acuWdflMmeoQKN0r_GNM6gAAAMw"]
[Tue Mar 31 17:40:06.452519 2026] [:error] [pid 36890:tid 36900] [client 172.161.1.56:7151] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acuWdp8FASPd_uH8z7cGJgAAAAU"]
[Tue Mar 31 17:40:06.925481 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:7059] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acuWdvlMmeoQKN0r_GNM8QAAANM"]
[Tue Mar 31 17:40:07.396348 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:7143] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acuWd_lMmeoQKN0r_GNM9wAAANI"]
[Tue Mar 31 17:40:07.870079 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:7139] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "acuWdxSaDjY9kKFtUQBdmQAAARU"]
[Tue Mar 31 17:40:08.340274 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:7042] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "acuWeBSaDjY9kKFtUQBdmgAAARA"]
[Tue Mar 31 17:40:08.814089 2026] [:error] [pid 36890:tid 36910] [client 172.161.1.56:7073] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "acuWeJ8FASPd_uH8z7cGKAAAAA8"]
[Tue Mar 31 17:40:09.287155 2026] [:error] [pid 36982:tid 36992] [client 172.161.1.56:7148] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "acuWeflMmeoQKN0r_GNM-wAAAMc"]
[Tue Mar 31 17:40:09.766443 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:7055] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acuWeflMmeoQKN0r_GNM_AAAANc"]
[Tue Mar 31 17:40:10.254345 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:7113] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acuWevlMmeoQKN0r_GNM_wAAAMg"]
[Tue Mar 31 17:40:10.727537 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:7133] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acuWevlMmeoQKN0r_GNNAwAAAMU"]
[Tue Mar 31 17:40:11.202338 2026] [:error] [pid 41421:tid 41427] [client 172.161.1.56:7145] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acuWexSaDjY9kKFtUQBdoAAAAQM"]
[Tue Mar 31 17:40:11.673580 2026] [:error] [pid 41421:tid 41433] [client 172.161.1.56:7132] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "acuWexSaDjY9kKFtUQBdogAAAQk"]
[Tue Mar 31 17:40:12.145102 2026] [:error] [pid 36890:tid 36903] [client 172.161.1.56:7158] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "acuWfJ8FASPd_uH8z7cGMQAAAAg"]
[Tue Mar 31 17:40:12.617434 2026] [:error] [pid 36890:tid 36900] [client 172.161.1.56:7125] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "acuWfJ8FASPd_uH8z7cGNgAAAAU"]
[Tue Mar 31 17:40:13.088799 2026] [:error] [pid 36892:tid 36965] [client 172.161.1.56:7060] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "acuWfUyj9S4G0ek3O4JnzQAAAI4"]
[Tue Mar 31 17:40:13.561475 2026] [:error] [pid 36892:tid 36972] [client 172.161.1.56:7077] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "acuWfUyj9S4G0ek3O4JnzgAAAJU"]
[Tue Mar 31 17:40:14.033593 2026] [:error] [pid 36890:tid 36895] [client 172.161.1.56:7108] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "acuWfp8FASPd_uH8z7cGOAAAAAA"]
[Tue Mar 31 17:40:14.506270 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:7041] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "acuWfvlMmeoQKN0r_GNNBwAAAMU"]
[Tue Mar 31 17:40:14.977446 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:7117] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "acuWfvlMmeoQKN0r_GNNCQAAAME"]
[Tue Mar 31 17:40:15.459005 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:7167] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "acuWf_lMmeoQKN0r_GNNCwAAANI"]
[Tue Mar 31 17:40:15.930422 2026] [:error] [pid 36982:tid 37004] [client 172.161.1.56:7081] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "acuWf_lMmeoQKN0r_GNNEAAAANM"]
[Tue Mar 31 17:40:16.405829 2026] [:error] [pid 6548:tid 6555] [client 172.161.1.56:7134] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "acuWgLgIz9HgMl9YwE7Y4AAAAUU"]
[Tue Mar 31 17:40:16.880993 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:7109] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "acuWgPlMmeoQKN0r_GNNFwAAANY"]
[Tue Mar 31 17:40:17.354176 2026] [:error] [pid 6548:tid 6556] [client 172.161.1.56:7119] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "acuWgbgIz9HgMl9YwE7Y4wAAAUY"]
[Tue Mar 31 17:40:17.829283 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:7087] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "acuWgbgIz9HgMl9YwE7Y5wAAAUw"]
[Tue Mar 31 17:40:18.301165 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:7164] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "acuWgvlMmeoQKN0r_GNNGgAAAMQ"]
[Tue Mar 31 17:40:18.777506 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:7107] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "acuWgvlMmeoQKN0r_GNNHgAAAM4"]
[Tue Mar 31 17:40:19.249230 2026] [:error] [pid 36890:tid 36900] [client 172.161.1.56:7048] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acuWg58FASPd_uH8z7cGQQAAAAU"]
[Tue Mar 31 17:40:19.724364 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:7112] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acuWg7gIz9HgMl9YwE7Y7gAAAVg"]
[Tue Mar 31 17:40:20.199043 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:7045] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acuWhPlMmeoQKN0r_GNNIwAAAMw"]
[Tue Mar 31 17:40:20.673938 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:7141] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "acuWhPlMmeoQKN0r_GNNJAAAANE"]
[Tue Mar 31 17:40:21.147933 2026] [:error] [pid 36890:tid 36915] [client 172.161.1.56:7126] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acuWhZ8FASPd_uH8z7cGQgAAABQ"]
[Tue Mar 31 17:40:21.623920 2026] [:error] [pid 36890:tid 36901] [client 172.161.1.56:7101] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acuWhZ8FASPd_uH8z7cGRAAAAAY"]
[Tue Mar 31 17:40:22.099858 2026] [:error] [pid 41421:tid 41443] [client 172.161.1.56:7115] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acuWhhSaDjY9kKFtUQBdrgAAARM"]
[Tue Mar 31 17:40:22.575340 2026] [:error] [pid 36892:tid 36967] [client 172.161.1.56:7166] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "acuWhkyj9S4G0ek3O4Jn1AAAAJA"]
[Tue Mar 31 17:40:23.058845 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:7155] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "acuWh58FASPd_uH8z7cGSQAAABA"]
[Tue Mar 31 17:40:23.531061 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:7160] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "acuWh7gIz9HgMl9YwE7Y9AAAAUI"]
[Tue Mar 31 17:40:24.016541 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:6981] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "acuWiLgIz9HgMl9YwE7Y9QAAAUA"]
[Tue Mar 31 17:40:24.487749 2026] [:error] [pid 6548:tid 6567] [client 172.161.1.56:7043] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "acuWiLgIz9HgMl9YwE7Y9wAAAVE"]
[Tue Mar 31 17:40:24.959476 2026] [:error] [pid 36891:tid 36927] [client 172.161.1.56:7056] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acuWiJJhiMaJUqoqfl6wxgAAAEM"]
[Tue Mar 31 17:40:25.431870 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:7118] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acuWibgIz9HgMl9YwE7Y-wAAAUs"]
[Tue Mar 31 17:40:25.911465 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:7064] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acuWibgIz9HgMl9YwE7Y_AAAAUI"]
[Tue Mar 31 17:40:26.385577 2026] [:error] [pid 36890:tid 36897] [client 172.161.1.56:7159] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "acuWip8FASPd_uH8z7cGUAAAAAI"]
[Tue Mar 31 17:40:26.857028 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:7163] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "acuWivlMmeoQKN0r_GNNLgAAANc"]
[Tue Mar 31 17:40:27.329791 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:6994] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "acuWi_lMmeoQKN0r_GNNMwAAAMQ"]
[Tue Mar 31 17:40:27.802290 2026] [:error] [pid 41421:tid 41434] [client 172.161.1.56:7138] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "acuWixSaDjY9kKFtUQBdugAAAQo"]
[Tue Mar 31 17:40:28.281718 2026] [:error] [pid 36891:tid 36947] [client 172.161.1.56:7053] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "acuWjJJhiMaJUqoqfl6wxwAAAFc"]
[Tue Mar 31 17:40:28.757138 2026] [:error] [pid 36890:tid 36905] [client 172.161.1.56:7052] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h02ugyh.php"] [unique_id "acuWjJ8FASPd_uH8z7cGUQAAAAo"]
[Tue Mar 31 17:40:29.235935 2026] [:error] [pid 36892:tid 36971] [client 172.161.1.56:6984] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h02ugyh.php"] [unique_id "acuWjUyj9S4G0ek3O4Jn2AAAAJQ"]
[Tue Mar 31 17:40:29.706856 2026] [:error] [pid 36892:tid 36955] [client 172.161.1.56:6978] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h02ugyh.php"] [unique_id "acuWjUyj9S4G0ek3O4Jn2QAAAIQ"]
[Tue Mar 31 17:40:30.181428 2026] [:error] [pid 6548:tid 6552] [client 172.161.1.56:7091] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h02ugyh.php"] [unique_id "acuWjrgIz9HgMl9YwE7ZCQAAAUI"]
[Tue Mar 31 17:40:30.656681 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:6980] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad.php"] [unique_id "acuWjrgIz9HgMl9YwE7ZCwAAAUo"]
[Tue Mar 31 17:40:31.127081 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:7130] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad.php"] [unique_id "acuWj7gIz9HgMl9YwE7ZDgAAAVQ"]
[Tue Mar 31 17:40:31.598663 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:7096] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad.php"] [unique_id "acuWj_lMmeoQKN0r_GNNOgAAAMU"]
[Tue Mar 31 17:40:32.074388 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:7078] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ad.php"] [unique_id "acuWkPlMmeoQKN0r_GNNOwAAAMQ"]
[Tue Mar 31 17:40:32.549038 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:7034] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z60.php"] [unique_id "acuWkPlMmeoQKN0r_GNNPQAAANI"]
[Tue Mar 31 17:40:33.023922 2026] [:error] [pid 36982:tid 37005] [client 172.161.1.56:6424] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z60.php"] [unique_id "acuWkflMmeoQKN0r_GNNPwAAANQ"]
[Tue Mar 31 17:40:33.496546 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:7046] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z60.php"] [unique_id "acuWkflMmeoQKN0r_GNNRwAAAME"]
[Tue Mar 31 17:40:33.967918 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:7066] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z60.php"] [unique_id "acuWkflMmeoQKN0r_GNNSgAAANI"]
[Tue Mar 31 17:40:34.441835 2026] [:error] [pid 36891:tid 36932] [client 172.161.1.56:7097] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acuWkpJhiMaJUqoqfl6wywAAAEg"]
[Tue Mar 31 17:40:34.916463 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:6995] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acuWkrgIz9HgMl9YwE7ZEwAAAUo"]
[Tue Mar 31 17:40:35.388643 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:7152] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acuWkxSaDjY9kKFtUQBdzAAAAQ4"]
[Tue Mar 31 17:40:35.864444 2026] [:error] [pid 41421:tid 41424] [client 172.161.1.56:7051] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acuWkxSaDjY9kKFtUQBd0wAAAQA"]
[Tue Mar 31 17:40:36.338694 2026] [:error] [pid 6548:tid 6574] [client 172.161.1.56:7093] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuWlLgIz9HgMl9YwE7ZJgAAAVg"]
[Tue Mar 31 17:40:36.811442 2026] [:error] [pid 36891:tid 36943] [client 172.161.1.56:7144] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuWlJJhiMaJUqoqfl6wzgAAAFM"]
[Tue Mar 31 17:40:37.284446 2026] [:error] [pid 36890:tid 36916] [client 172.161.1.56:7050] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuWlZ8FASPd_uH8z7cGXQAAABU"]
[Tue Mar 31 17:40:37.764268 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:7135] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wta.php"] [unique_id "acuWlbgIz9HgMl9YwE7ZLwAAAUo"]
[Tue Mar 31 17:40:38.235876 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:7142] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php"] [unique_id "acuWlrgIz9HgMl9YwE7ZMQAAAVQ"]
[Tue Mar 31 17:40:38.710517 2026] [:error] [pid 36890:tid 36918] [client 172.161.1.56:7136] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php"] [unique_id "acuWlp8FASPd_uH8z7cGXwAAABc"]
[Tue Mar 31 17:40:39.186137 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:7088] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php"] [unique_id "acuWl58FASPd_uH8z7cGYQAAABA"]
[Tue Mar 31 17:40:39.661008 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:7063] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sql.php"] [unique_id "acuWlxSaDjY9kKFtUQBd3AAAARU"]
[Tue Mar 31 17:40:40.155117 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:7131] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acuWmBSaDjY9kKFtUQBd3QAAARA"]
[Tue Mar 31 17:40:40.630313 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:6985] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acuWmBSaDjY9kKFtUQBd4QAAAQ4"]
[Tue Mar 31 17:40:41.105020 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:6976] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acuWmbgIz9HgMl9YwE7ZNgAAAU4"]
[Tue Mar 31 17:40:41.602764 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:7019] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "acuWmbgIz9HgMl9YwE7ZOAAAAUk"]
[Tue Mar 31 17:40:42.075323 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:7150] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "acuWmvlMmeoQKN0r_GNNXQAAAMU"]
[Tue Mar 31 17:40:42.546128 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:7057] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "acuWmvlMmeoQKN0r_GNNZAAAANg"]
[Tue Mar 31 17:40:43.023002 2026] [:error] [pid 36982:tid 36985] [client 172.161.1.56:7011] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "acuWm_lMmeoQKN0r_GNNZwAAAMA"]
[Tue Mar 31 17:40:43.493383 2026] [:error] [pid 36890:tid 36905] [client 172.161.1.56:7008] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "acuWm58FASPd_uH8z7cGZwAAAAo"]
[Tue Mar 31 17:40:43.969569 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:7104] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "acuWmxSaDjY9kKFtUQBd6QAAARA"]
[Tue Mar 31 17:40:44.450863 2026] [:error] [pid 36892:tid 36954] [client 172.161.1.56:6990] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "acuWnEyj9S4G0ek3O4Jn6gAAAIM"]
[Tue Mar 31 17:40:44.926434 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:7007] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "acuWnBSaDjY9kKFtUQBd7QAAAQ4"]
[Tue Mar 31 17:40:45.415692 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:7110] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "acuWnflMmeoQKN0r_GNNbAAAAMQ"]
[Tue Mar 31 17:40:45.899179 2026] [:error] [pid 36890:tid 36895] [client 172.161.1.56:7140] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "acuWnZ8FASPd_uH8z7cGbwAAAAA"]
[Tue Mar 31 17:40:46.373057 2026] [:error] [pid 36892:tid 36962] [client 172.161.1.56:7137] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "acuWnkyj9S4G0ek3O4Jn6wAAAIs"]
[Tue Mar 31 17:40:46.844748 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:7124] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "acuWnvlMmeoQKN0r_GNNbwAAAMw"]
[Tue Mar 31 17:40:47.317178 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:7072] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "acuWn_lMmeoQKN0r_GNNcgAAANI"]
[Tue Mar 31 17:40:47.789928 2026] [:error] [pid 36982:tid 36994] [client 172.161.1.56:7094] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "acuWn_lMmeoQKN0r_GNNdgAAAMk"]
[Tue Mar 31 17:40:48.270029 2026] [:error] [pid 36890:tid 36898] [client 172.161.1.56:7099] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "acuWoJ8FASPd_uH8z7cGcgAAAAM"]
[Tue Mar 31 17:40:48.757903 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:7058] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "acuWoBSaDjY9kKFtUQBd8wAAARc"]
[Tue Mar 31 17:40:49.229048 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:7079] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "acuWoflMmeoQKN0r_GNNfAAAAMY"]
[Tue Mar 31 17:40:49.711135 2026] [:error] [pid 36890:tid 36919] [client 172.161.1.56:7156] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "acuWoZ8FASPd_uH8z7cGdgAAABg"]
[Tue Mar 31 17:40:50.187044 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:7061] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "acuWovlMmeoQKN0r_GNNfgAAAMQ"]
[Tue Mar 31 17:40:50.661187 2026] [:error] [pid 41421:tid 41433] [client 172.161.1.56:7153] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "acuWohSaDjY9kKFtUQBd-QAAAQk"]
[Tue Mar 31 17:40:51.135767 2026] [:error] [pid 36892:tid 36955] [client 172.161.1.56:7146] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "acuWo0yj9S4G0ek3O4Jn8AAAAIQ"]
[Tue Mar 31 17:40:51.607587 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:7071] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "acuWo7gIz9HgMl9YwE7ZQgAAAVQ"]
[Tue Mar 31 17:40:52.085097 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:6998] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "acuWpJ8FASPd_uH8z7cGeQAAAAs"]
[Tue Mar 31 17:40:52.559050 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:7103] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "acuWpLgIz9HgMl9YwE7ZRAAAAUA"]
[Tue Mar 31 17:40:53.034744 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:6428] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "acuWpbgIz9HgMl9YwE7ZRwAAAU4"]
[Tue Mar 31 17:40:53.510625 2026] [:error] [pid 6548:tid 6551] [client 172.161.1.56:7069] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "acuWpbgIz9HgMl9YwE7ZSQAAAUE"]
[Tue Mar 31 17:40:53.986667 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:7044] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "acuWpflMmeoQKN0r_GNNkQAAANE"]
[Tue Mar 31 17:40:54.460826 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:7002] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "acuWprgIz9HgMl9YwE7ZUQAAAUw"]
[Tue Mar 31 17:40:54.934825 2026] [:error] [pid 36891:tid 36944] [client 172.161.1.56:7098] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "acuWppJhiMaJUqoqfl6w1gAAAFQ"]
[Tue Mar 31 17:40:55.407538 2026] [:error] [pid 41421:tid 41429] [client 172.161.1.56:7054] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acuWpxSaDjY9kKFtUQBd_QAAAQU"]
[Tue Mar 31 17:40:55.891521 2026] [:error] [pid 36982:tid 36998] [client 172.161.1.56:7082] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acuWp_lMmeoQKN0r_GNNmwAAAM0"]
[Tue Mar 31 17:40:56.364003 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:7024] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acuWqPlMmeoQKN0r_GNNoQAAANE"]
[Tue Mar 31 17:40:56.837040 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:7154] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "acuWqPlMmeoQKN0r_GNNpwAAANI"]
[Tue Mar 31 17:40:57.312448 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:6996] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "acuWqflMmeoQKN0r_GNNsQAAANg"]
[Tue Mar 31 17:40:57.786463 2026] [:error] [pid 36892:tid 36960] [client 172.161.1.56:7102] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "acuWqUyj9S4G0ek3O4JoJwAAAIk"]
[Tue Mar 31 17:40:58.263751 2026] [:error] [pid 36891:tid 36940] [client 172.161.1.56:7123] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "acuWqpJhiMaJUqoqfl6w4AAAAFA"]
[Tue Mar 31 17:40:58.735460 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:6413] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "acuWqrgIz9HgMl9YwE7ZWgAAAVY"]
[Tue Mar 31 17:40:59.206905 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:7018] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acuWq_lMmeoQKN0r_GNNxQAAAM4"]
[Tue Mar 31 17:40:59.681731 2026] [:error] [pid 36982:tid 37001] [client 172.161.1.56:7068] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acuWq_lMmeoQKN0r_GNNywAAANA"]
[Tue Mar 31 17:41:00.156660 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:6426] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "acuWrPlMmeoQKN0r_GNNzwAAAM4"]
[Tue Mar 31 17:41:00.641421 2026] [:error] [pid 36891:tid 36930] [client 172.161.1.56:6403] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "acuWrJJhiMaJUqoqfl6w4wAAAEY"]
[Tue Mar 31 17:41:01.123463 2026] [proxy_fcgi:error] [pid 41421:tid 41431] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:01.360725 2026] [proxy_fcgi:error] [pid 41421:tid 41447] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:01.600397 2026] [proxy_fcgi:error] [pid 41421:tid 41436] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:01.839977 2026] [proxy_fcgi:error] [pid 41421:tid 41434] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:02.080381 2026] [proxy_fcgi:error] [pid 41421:tid 41425] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:02.320478 2026] [proxy_fcgi:error] [pid 41421:tid 41444] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:02.560960 2026] [proxy_fcgi:error] [pid 41421:tid 41438] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:02.800877 2026] [proxy_fcgi:error] [pid 41421:tid 41439] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:03.054438 2026] [proxy_fcgi:error] [pid 41421:tid 41447] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:03.294473 2026] [proxy_fcgi:error] [pid 41421:tid 41429] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:03.534649 2026] [proxy_fcgi:error] [pid 41421:tid 41445] [client 172.161.1.56:7095] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:41:05.119015 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:7095] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acuWsRSaDjY9kKFtUQBeHwAAAQ4"]
[Tue Mar 31 17:41:05.590449 2026] [:error] [pid 41421:tid 41436] [client 172.161.1.56:7028] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acuWsRSaDjY9kKFtUQBeJQAAAQw"]
[Tue Mar 31 17:41:06.066246 2026] [:error] [pid 36891:tid 36935] [client 172.161.1.56:6423] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acuWspJhiMaJUqoqfl6w5QAAAEs"]
[Tue Mar 31 17:41:06.541974 2026] [:error] [pid 36892:tid 36962] [client 172.161.1.56:6986] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "acuWskyj9S4G0ek3O4JoRwAAAIs"]
[Tue Mar 31 17:41:07.016442 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:7075] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "acuWsxSaDjY9kKFtUQBeKgAAARA"]
[Tue Mar 31 17:41:07.498145 2026] [:error] [pid 36890:tid 36919] [client 172.161.1.56:7025] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "acuWs58FASPd_uH8z7cGkgAAABg"]
[Tue Mar 31 17:41:07.975703 2026] [:error] [pid 6548:tid 6565] [client 172.161.1.56:7070] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "acuWs7gIz9HgMl9YwE7ZfAAAAU8"]
[Tue Mar 31 17:41:08.447965 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:6987] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ant.php"] [unique_id "acuWtPlMmeoQKN0r_GNN8wAAANY"]
[Tue Mar 31 17:41:08.920385 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:6997] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "acuWtPlMmeoQKN0r_GNN9gAAAMs"]
[Tue Mar 31 17:41:09.408304 2026] [:error] [pid 36982:tid 36987] [client 172.161.1.56:7090] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "acuWtflMmeoQKN0r_GNN_AAAAMI"]
[Tue Mar 31 17:41:09.888034 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:7005] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "acuWtflMmeoQKN0r_GNOAQAAAM8"]
[Tue Mar 31 17:41:10.363323 2026] [:error] [pid 36982:tid 36989] [client 172.161.1.56:7121] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "acuWtvlMmeoQKN0r_GNOCAAAAMQ"]
[Tue Mar 31 17:41:10.860170 2026] [:error] [pid 6548:tid 6554] [client 172.161.1.56:6993] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acuWtrgIz9HgMl9YwE7ZggAAAUQ"]
[Tue Mar 31 17:41:11.333313 2026] [:error] [pid 41421:tid 41439] [client 172.161.1.56:6410] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acuWtxSaDjY9kKFtUQBeLgAAAQ8"]
[Tue Mar 31 17:41:11.805428 2026] [:error] [pid 36891:tid 36934] [client 172.161.1.56:7012] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acuWt5JhiMaJUqoqfl6w6gAAAEo"]
[Tue Mar 31 17:41:12.279796 2026] [:error] [pid 36982:tid 36997] [client 172.161.1.56:6415] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "acuWuPlMmeoQKN0r_GNOCwAAAMw"]
[Tue Mar 31 17:41:12.752725 2026] [:error] [pid 36892:tid 36970] [client 172.161.1.56:6461] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "acuWuEyj9S4G0ek3O4JoTwAAAJM"]
[Tue Mar 31 17:41:13.226496 2026] [:error] [pid 41421:tid 41425] [client 172.161.1.56:7092] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "acuWuRSaDjY9kKFtUQBeMgAAAQE"]
[Tue Mar 31 17:41:13.699078 2026] [:error] [pid 41421:tid 41431] [client 172.161.1.56:7157] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "acuWuRSaDjY9kKFtUQBeNQAAAQc"]
[Tue Mar 31 17:41:14.170699 2026] [:error] [pid 41421:tid 41435] [client 172.161.1.56:7003] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "acuWuhSaDjY9kKFtUQBeOQAAAQs"]
[Tue Mar 31 17:41:14.643224 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:7154] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "acuWurgIz9HgMl9YwE7ZiwAAAVM"]
[Tue Mar 31 17:41:15.123952 2026] [:error] [pid 36982:tid 37001] [client 172.161.1.56:7067] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "acuWu_lMmeoQKN0r_GNOEQAAANA"]
[Tue Mar 31 17:41:15.595003 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:6991] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "acuWu58FASPd_uH8z7cGmQAAABA"]
[Tue Mar 31 17:41:16.066850 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:7009] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classgoto24.php"] [unique_id "acuWvPlMmeoQKN0r_GNOGgAAAM4"]
[Tue Mar 31 17:41:16.539434 2026] [:error] [pid 41421:tid 41424] [client 172.161.1.56:7083] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "acuWvBSaDjY9kKFtUQBePQAAAQA"]
[Tue Mar 31 17:41:17.014268 2026] [:error] [pid 41421:tid 41425] [client 172.161.1.56:7006] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "acuWvRSaDjY9kKFtUQBeQAAAAQE"]
[Tue Mar 31 17:41:17.488385 2026] [:error] [pid 36891:tid 36926] [client 172.161.1.56:7039] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "acuWvZJhiMaJUqoqfl6w7AAAAEI"]
[Tue Mar 31 17:41:17.968128 2026] [:error] [pid 36891:tid 36925] [client 172.161.1.56:6401] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "acuWvZJhiMaJUqoqfl6w7gAAAEE"]
[Tue Mar 31 17:41:18.446298 2026] [:error] [pid 41421:tid 41443] [client 172.161.1.56:6999] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "acuWvhSaDjY9kKFtUQBeQwAAARM"]
[Tue Mar 31 17:41:18.922889 2026] [:error] [pid 6548:tid 6555] [client 172.161.1.56:7111] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "acuWvrgIz9HgMl9YwE7ZlQAAAUU"]
[Tue Mar 31 17:41:19.412832 2026] [:error] [pid 36890:tid 36914] [client 172.161.1.56:7084] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "acuWv58FASPd_uH8z7cGngAAABM"]
[Tue Mar 31 17:41:19.885798 2026] [:error] [pid 6548:tid 6564] [client 172.161.1.56:6916] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "acuWv7gIz9HgMl9YwE7ZlwAAAU4"]
[Tue Mar 31 17:41:20.358987 2026] [:error] [pid 6548:tid 6570] [client 172.161.1.56:7032] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "acuWwLgIz9HgMl9YwE7ZmgAAAVQ"]
[Tue Mar 31 17:41:20.833369 2026] [:error] [pid 36890:tid 36904] [client 172.161.1.56:7020] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "acuWwJ8FASPd_uH8z7cGowAAAAk"]
[Tue Mar 31 17:41:21.308102 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:7086] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "acuWwbgIz9HgMl9YwE7ZnAAAAUk"]
[Tue Mar 31 17:41:21.781612 2026] [:error] [pid 41421:tid 41427] [client 172.161.1.56:6432] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "acuWwRSaDjY9kKFtUQBeSAAAAQM"]
[Tue Mar 31 17:41:22.260185 2026] [:error] [pid 41421:tid 41440] [client 172.161.1.56:6444] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acuWwhSaDjY9kKFtUQBeSQAAARA"]
[Tue Mar 31 17:41:22.735462 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:7015] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acuWwhSaDjY9kKFtUQBeTAAAARU"]
[Tue Mar 31 17:41:23.208892 2026] [:error] [pid 36892:tid 36969] [client 172.161.1.56:6992] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acuWw0yj9S4G0ek3O4JoVwAAAJI"]
[Tue Mar 31 17:41:23.680416 2026] [:error] [pid 36982:tid 36992] [client 172.161.1.56:6409] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "acuWw_lMmeoQKN0r_GNOHwAAAMc"]
[Tue Mar 31 17:41:24.159573 2026] [:error] [pid 6548:tid 6562] [client 172.161.1.56:7026] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acuWxLgIz9HgMl9YwE7ZpAAAAUw"]
[Tue Mar 31 17:41:24.632384 2026] [:error] [pid 36891:tid 36930] [client 172.161.1.56:7162] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acuWxJJhiMaJUqoqfl6w9wAAAEY"]
[Tue Mar 31 17:41:25.102856 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:6402] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acuWxflMmeoQKN0r_GNOKAAAANU"]
[Tue Mar 31 17:41:25.580627 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:6419] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "acuWxZ8FASPd_uH8z7cGrgAAAAs"]
[Tue Mar 31 17:41:26.056728 2026] [:error] [pid 36982:tid 36993] [client 172.161.1.56:6918] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "acuWxvlMmeoQKN0r_GNOLQAAAMg"]
[Tue Mar 31 17:41:26.550904 2026] [:error] [pid 41421:tid 41426] [client 172.161.1.56:7029] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "acuWxhSaDjY9kKFtUQBeVQAAAQI"]
[Tue Mar 31 17:41:27.027790 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:6983] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "acuWx7gIz9HgMl9YwE7ZpwAAAUA"]
[Tue Mar 31 17:41:27.502621 2026] [:error] [pid 6548:tid 6559] [client 172.161.1.56:6451] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "acuWx7gIz9HgMl9YwE7ZqgAAAUk"]
[Tue Mar 31 17:41:27.974406 2026] [:error] [pid 41421:tid 41430] [client 172.161.1.56:6420] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acuWxxSaDjY9kKFtUQBeVwAAAQY"]
[Tue Mar 31 17:41:28.447441 2026] [:error] [pid 41421:tid 41447] [client 172.161.1.56:6989] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acuWyBSaDjY9kKFtUQBeWgAAARc"]
[Tue Mar 31 17:41:28.919323 2026] [:error] [pid 36982:tid 36999] [client 172.161.1.56:7000] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acuWyPlMmeoQKN0r_GNOOgAAAM4"]
[Tue Mar 31 17:41:29.393054 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:6418] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "acuWyflMmeoQKN0r_GNOPwAAAMs"]
[Tue Mar 31 17:41:29.866454 2026] [:error] [pid 6548:tid 6555] [client 172.161.1.56:7147] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "acuWybgIz9HgMl9YwE7ZrQAAAUU"]
[Tue Mar 31 17:41:30.342805 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:7065] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "acuWyvlMmeoQKN0r_GNOSAAAAM8"]
[Tue Mar 31 17:41:30.814167 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:6414] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "acuWyvlMmeoQKN0r_GNOSgAAAME"]
[Tue Mar 31 17:41:31.289044 2026] [:error] [pid 6548:tid 6554] [client 172.161.1.56:6925] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "acuWy7gIz9HgMl9YwE7ZsQAAAUQ"]
[Tue Mar 31 17:41:31.779882 2026] [:error] [pid 36890:tid 36913] [client 172.161.1.56:6425] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acuWy58FASPd_uH8z7cGyQAAABI"]
[Tue Mar 31 17:41:32.253356 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:7128] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acuWzPlMmeoQKN0r_GNOUQAAANg"]
[Tue Mar 31 17:41:32.723890 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:7038] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acuWzLgIz9HgMl9YwE7ZugAAAVM"]
[Tue Mar 31 17:41:33.199007 2026] [:error] [pid 6548:tid 6561] [client 172.161.1.56:6440] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "acuWzbgIz9HgMl9YwE7ZvgAAAUs"]
[Tue Mar 31 17:41:33.672291 2026] [:error] [pid 36982:tid 36991] [client 172.161.1.56:6977] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acuWzflMmeoQKN0r_GNOVQAAAMY"]
[Tue Mar 31 17:41:34.141687 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:7017] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acuWzp8FASPd_uH8z7cG2AAAAAs"]
[Tue Mar 31 17:41:34.616567 2026] [:error] [pid 41421:tid 41429] [client 172.161.1.56:6447] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acuWzhSaDjY9kKFtUQBeaQAAAQU"]
[Tue Mar 31 17:41:35.089137 2026] [:error] [pid 36982:tid 36996] [client 172.161.1.56:6988] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "acuWz_lMmeoQKN0r_GNOWQAAAMs"]
[Tue Mar 31 17:41:35.565726 2026] [:error] [pid 36890:tid 36911] [client 172.161.1.56:6461] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "acuWz58FASPd_uH8z7cG2wAAABA"]
[Tue Mar 31 17:41:36.077509 2026] [:error] [pid 36892:tid 36971] [client 172.161.1.56:6431] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "acuW0Eyj9S4G0ek3O4JoXwAAAJQ"]
[Tue Mar 31 17:41:36.558038 2026] [:error] [pid 36891:tid 36940] [client 172.161.1.56:6927] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "acuW0JJhiMaJUqoqfl6xAQAAAFA"]
[Tue Mar 31 17:41:37.069656 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:7085] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "acuW0RSaDjY9kKFtUQBebgAAARU"]
[Tue Mar 31 17:41:37.540403 2026] [:error] [pid 41421:tid 41425] [client 172.161.1.56:7016] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "acuW0RSaDjY9kKFtUQBecAAAAQE"]
[Tue Mar 31 17:41:38.010802 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:6435] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "acuW0vlMmeoQKN0r_GNOXAAAAME"]
[Tue Mar 31 17:41:38.490124 2026] [:error] [pid 36890:tid 36903] [client 172.161.1.56:7014] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "acuW0p8FASPd_uH8z7cG5AAAAAg"]
[Tue Mar 31 17:41:38.962995 2026] [:error] [pid 36982:tid 37006] [client 172.161.1.56:6920] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "acuW0vlMmeoQKN0r_GNOXwAAANU"]
[Tue Mar 31 17:41:39.438558 2026] [:error] [pid 41421:tid 41436] [client 172.161.1.56:6429] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuW0xSaDjY9kKFtUQBedwAAAQw"]
[Tue Mar 31 17:41:39.917805 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:7031] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuW0_lMmeoQKN0r_GNOZgAAAM8"]
[Tue Mar 31 17:41:40.390101 2026] [:error] [pid 41421:tid 41430] [client 172.161.1.56:6446] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuW1BSaDjY9kKFtUQBehAAAAQY"]
[Tue Mar 31 17:41:40.862993 2026] [:error] [pid 41421:tid 41437] [client 172.161.1.56:6408] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "acuW1BSaDjY9kKFtUQBeiwAAAQ0"]
[Tue Mar 31 17:41:41.339365 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:6463] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "acuW1bgIz9HgMl9YwE7Z3gAAAVY"]
[Tue Mar 31 17:41:41.812687 2026] [:error] [pid 41421:tid 41443] [client 172.161.1.56:6930] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "acuW1RSaDjY9kKFtUQBejwAAARM"]
[Tue Mar 31 17:41:42.282749 2026] [:error] [pid 41421:tid 41446] [client 172.161.1.56:6935] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "acuW1hSaDjY9kKFtUQBelQAAARY"]
[Tue Mar 31 17:41:42.757454 2026] [:error] [pid 6548:tid 6560] [client 172.161.1.56:6406] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "acuW1rgIz9HgMl9YwE7Z4QAAAUo"]
[Tue Mar 31 17:41:43.245739 2026] [:error] [pid 36892:tid 36961] [client 172.161.1.56:6943] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "acuW10yj9S4G0ek3O4JobgAAAIo"]
[Tue Mar 31 17:41:43.720082 2026] [:error] [pid 41421:tid 41444] [client 172.161.1.56:7037] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "acuW1xSaDjY9kKFtUQBemQAAARQ"]
[Tue Mar 31 17:41:44.192210 2026] [:error] [pid 36891:tid 36933] [client 172.161.1.56:6979] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "acuW2JJhiMaJUqoqfl6xBgAAAEk"]
[Tue Mar 31 17:41:44.662700 2026] [:error] [pid 36982:tid 37008] [client 172.161.1.56:6913] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "acuW2PlMmeoQKN0r_GNOdgAAANc"]
[Tue Mar 31 17:41:45.135935 2026] [:error] [pid 36982:tid 37009] [client 172.161.1.56:6405] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "acuW2flMmeoQKN0r_GNOegAAANg"]
[Tue Mar 31 17:41:45.619507 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:6452] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "acuW2flMmeoQKN0r_GNOfgAAAME"]
[Tue Mar 31 17:41:46.094337 2026] [:error] [pid 36982:tid 37003] [client 172.161.1.56:6942] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "acuW2vlMmeoQKN0r_GNOhAAAANI"]
[Tue Mar 31 17:41:46.565633 2026] [:error] [pid 36890:tid 36919] [client 172.161.1.56:6439] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "acuW2p8FASPd_uH8z7cG7QAAABg"]
[Tue Mar 31 17:41:47.038693 2026] [:error] [pid 36892:tid 36969] [client 172.161.1.56:6416] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acuW20yj9S4G0ek3O4JocwAAAJI"]
[Tue Mar 31 17:41:47.509458 2026] [:error] [pid 36890:tid 36905] [client 172.161.1.56:7114] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acuW258FASPd_uH8z7cG8QAAAAo"]
[Tue Mar 31 17:41:47.981126 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:7013] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acuW27gIz9HgMl9YwE7Z8QAAAVM"]
[Tue Mar 31 17:41:48.450899 2026] [:error] [pid 6548:tid 6572] [client 172.161.1.56:6411] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "acuW3LgIz9HgMl9YwE7Z9AAAAVY"]
[Tue Mar 31 17:41:48.923551 2026] [:error] [pid 36892:tid 36975] [client 172.161.1.56:6460] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "acuW3Eyj9S4G0ek3O4JodgAAAJg"]
[Tue Mar 31 17:41:49.396381 2026] [:error] [pid 41421:tid 41446] [client 172.161.1.56:6929] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "acuW3RSaDjY9kKFtUQBepwAAARY"]
[Tue Mar 31 17:41:49.869674 2026] [:error] [pid 36890:tid 36910] [client 172.161.1.56:6973] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "acuW3Z8FASPd_uH8z7cG-AAAAA8"]
[Tue Mar 31 17:41:50.351117 2026] [:error] [pid 36890:tid 36912] [client 172.161.1.56:6448] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "acuW3p8FASPd_uH8z7cG-QAAABE"]
[Tue Mar 31 17:41:50.822864 2026] [:error] [pid 36890:tid 36913] [client 172.161.1.56:6430] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "acuW3p8FASPd_uH8z7cG_QAAABI"]
[Tue Mar 31 17:41:51.296769 2026] [:error] [pid 6548:tid 6550] [client 172.161.1.56:6436] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "acuW37gIz9HgMl9YwE7Z-wAAAUA"]
[Tue Mar 31 17:41:51.769473 2026] [:error] [pid 36891:tid 36926] [client 172.161.1.56:7100] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "acuW35JhiMaJUqoqfl6xDgAAAEI"]
[Tue Mar 31 17:41:52.244650 2026] [:error] [pid 36982:tid 36990] [client 172.161.1.56:6914] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "acuW4PlMmeoQKN0r_GNOjAAAAMU"]
[Tue Mar 31 17:41:52.717849 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:6455] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "acuW4LgIz9HgMl9YwE7aAAAAAVM"]
[Tue Mar 31 17:41:53.189403 2026] [:error] [pid 36890:tid 36906] [client 172.161.1.56:6932] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "acuW4Z8FASPd_uH8z7cHBAAAAAs"]
[Tue Mar 31 17:41:53.660558 2026] [:error] [pid 36892:tid 36964] [client 172.161.1.56:6427] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "acuW4Uyj9S4G0ek3O4JofAAAAI0"]
[Tue Mar 31 17:41:54.132689 2026] [:error] [pid 6548:tid 6558] [client 172.161.1.56:6972] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v.php"] [unique_id "acuW4rgIz9HgMl9YwE7aBwAAAUg"]
[Tue Mar 31 17:41:54.604578 2026] [:error] [pid 41421:tid 41438] [client 172.161.1.56:7074] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "acuW4hSaDjY9kKFtUQBeswAAAQ4"]
[Tue Mar 31 17:41:55.111415 2026] [:error] [pid 36892:tid 36954] [client 172.161.1.56:6975] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "acuW40yj9S4G0ek3O4JogQAAAIM"]
[Tue Mar 31 17:41:55.586205 2026] [:error] [pid 6548:tid 6569] [client 172.161.1.56:6438] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "acuW47gIz9HgMl9YwE7aEwAAAVM"]
[Tue Mar 31 17:41:56.058102 2026] [:error] [pid 36982:tid 37000] [client 172.161.1.56:6958] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d2.php"] [unique_id "acuW5PlMmeoQKN0r_GNOkgAAAM8"]
[Tue Mar 31 17:41:56.530951 2026] [:error] [pid 36982:tid 36995] [client 172.161.1.56:6928] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc.php"] [unique_id "acuW5PlMmeoQKN0r_GNOlwAAAMo"]
[Tue Mar 31 17:41:57.007368 2026] [:error] [pid 6548:tid 6563] [client 172.161.1.56:7023] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc.php"] [unique_id "acuW5bgIz9HgMl9YwE7aHQAAAU0"]
[Tue Mar 31 17:41:57.481471 2026] [:error] [pid 6548:tid 6568] [client 172.161.1.56:6949] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc.php"] [unique_id "acuW5bgIz9HgMl9YwE7aIgAAAVI"]
[Tue Mar 31 17:41:57.953550 2026] [:error] [pid 6548:tid 6571] [client 172.161.1.56:7004] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc.php"] [unique_id "acuW5bgIz9HgMl9YwE7aIwAAAVU"]
[Tue Mar 31 17:41:58.427993 2026] [:error] [pid 41421:tid 41445] [client 172.161.1.56:7106] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "acuW5hSaDjY9kKFtUQBeuQAAARU"]
[Tue Mar 31 17:41:58.899172 2026] [:error] [pid 36982:tid 37002] [client 172.161.1.56:6941] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "acuW5vlMmeoQKN0r_GNOpAAAANE"]
[Tue Mar 31 17:41:59.370432 2026] [:error] [pid 36982:tid 36986] [client 172.161.1.56:6893] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "acuW5_lMmeoQKN0r_GNOqQAAAME"]
[Tue Mar 31 17:41:59.845070 2026] [:error] [pid 36982:tid 37007] [client 172.161.1.56:6857] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "acuW5_lMmeoQKN0r_GNOrAAAANY"]
[Tue Mar 31 17:42:00.319838 2026] [:error] [pid 36890:tid 36913] [client 172.161.1.56:7036] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "acuW6J8FASPd_uH8z7cHEgAAABI"]
[Tue Mar 31 17:42:00.798285 2026] [:error] [pid 41421:tid 41442] [client 172.161.1.56:6938] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "acuW6BSaDjY9kKFtUQBewQAAARI"]
[Tue Mar 31 17:42:01.277425 2026] [:error] [pid 41421:tid 41428] [client 172.161.1.56:6856] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "acuW6RSaDjY9kKFtUQBexAAAAQQ"]
[Tue Mar 31 17:42:01.753936 2026] [:error] [pid 6548:tid 6573] [client 172.161.1.56:7033] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gmo.php"] [unique_id "acuW6bgIz9HgMl9YwE7aLQAAAVc"]
[Tue Mar 31 17:42:02.233433 2026] [:error] [pid 36891:tid 36926] [client 172.161.1.56:6931] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "acuW6pJhiMaJUqoqfl6xFgAAAEI"]
[Tue Mar 31 17:42:02.706788 2026] [:error] [pid 36890:tid 36908] [client 172.161.1.56:6946] [client 172.161.1.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "acuW6p8FASPd_uH8z7cHFQAAAA0"]
[Tue Mar 31 17:42:03.181879 2026] [proxy_fcgi:error] [pid 36892:tid 36970] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:42:03.423774 2026] [proxy_fcgi:error] [pid 36892:tid 36952] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:42:03.663481 2026] [proxy_fcgi:error] [pid 36892:tid 36958] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:42:03.908306 2026] [proxy_fcgi:error] [pid 36892:tid 36954] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:42:04.147987 2026] [proxy_fcgi:error] [pid 36892:tid 36969] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:42:04.386209 2026] [proxy_fcgi:error] [pid 36892:tid 36961] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 17:42:04.624458 2026] [proxy_fcgi:error] [pid 36892:tid 36971] [client 172.161.1.56:6952] AH01071: Got error 'Primary script unknown'
[Tue Mar 31 19:52:17.532994 2026] [:error] [pid 36982:tid 36989] [client 43.166.136.202:40358] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acu1cflMmeoQKN0r_GOjNwAAAMQ"]
[Tue Mar 31 22:51:15.850528 2026] [:error] [pid 36890:tid 36896] [client 185.93.89.27:42904] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "acvfY58FASPd_uH8z7dq8AAAAAE"]
[Tue Mar 31 22:51:15.855785 2026] [:error] [pid 6548:tid 6562] [client 185.93.89.27:42916] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/my-app/.env"] [unique_id "acvfY7gIz9HgMl9YwE51PwAAAUw"]
[Tue Mar 31 22:51:17.816140 2026] [:error] [pid 41421:tid 41433] [client 185.93.89.27:53752] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "acvfZRSaDjY9kKFtUQDIRwAAAQk"]
[Tue Mar 31 22:51:17.816789 2026] [:error] [pid 41421:tid 41428] [client 185.93.89.27:53766] [client 185.93.89.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/my-app/.env"] [unique_id "acvfZRSaDjY9kKFtUQDISAAAAQQ"]
[Tue Mar 31 23:18:59.144846 2026] [:error] [pid 2836:tid 2847] [client 117.33.163.216:35114] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acvl4ypQtaf_GRF3iPfmOgAAAgQ"]
[Wed Apr 01 01:55:08.915036 2026] [:error] [pid 52836:tid 52893] [client 43.159.144.16:37010] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acwKfJjk_YTY8bXnEz5OFAAAAEE"]
[Wed Apr 01 03:36:09.278162 2026] [:error] [pid 45613:tid 45689] [client 43.153.123.3:40118] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acwiKXVVWWw8hrj-8EumWgAAAIE"]
[Wed Apr 01 04:48:46.154496 2026] [proxy_fcgi:error] [pid 23819:tid 23828] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:46.279943 2026] [proxy_fcgi:error] [pid 23819:tid 23843] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:46.426172 2026] [proxy_fcgi:error] [pid 23819:tid 23823] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:46.551612 2026] [proxy_fcgi:error] [pid 23819:tid 23830] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:46.812041 2026] [proxy_fcgi:error] [pid 23819:tid 23832] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:46.938516 2026] [proxy_fcgi:error] [pid 23819:tid 23825] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:47.064470 2026] [proxy_fcgi:error] [pid 23819:tid 23841] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:47.317478 2026] [proxy_fcgi:error] [pid 23819:tid 23842] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:47.443855 2026] [proxy_fcgi:error] [pid 23819:tid 23833] [client 20.205.1.146:1040] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 04:48:47.565809 2026] [:error] [pid 23819:tid 23829] [client 20.205.1.146:1040] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "acwzL9dfUS_37wFAM77PDAAAAMc"]
[Wed Apr 01 04:48:48.073634 2026] [:error] [pid 23714:tid 23754] [client 20.205.1.146:1563] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "acwzMEHxDDU2ETcG9DSDaAAAABQ"]
[Wed Apr 01 04:48:48.590077 2026] [:error] [pid 23715:tid 23776] [client 20.205.1.146:1542] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "acwzMK-REzOruNbiT9wRTQAAAE8"]
[Wed Apr 01 04:48:49.072084 2026] [:error] [pid 23714:tid 23738] [client 20.205.1.146:1024] [client 20.205.1.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nc4.php"] [unique_id "acwzMUHxDDU2ETcG9DSDcAAAAAQ"]
[Wed Apr 01 05:21:47.449588 2026] [proxy_fcgi:error] [pid 24348:tid 24395] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:47.690335 2026] [proxy_fcgi:error] [pid 24348:tid 24394] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:47.930286 2026] [proxy_fcgi:error] [pid 24348:tid 24386] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:48.173693 2026] [proxy_fcgi:error] [pid 24348:tid 24383] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:48.415139 2026] [proxy_fcgi:error] [pid 24348:tid 24382] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:48.656325 2026] [proxy_fcgi:error] [pid 24348:tid 24379] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:48.897522 2026] [proxy_fcgi:error] [pid 24348:tid 24401] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:49.137900 2026] [proxy_fcgi:error] [pid 24348:tid 24391] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:50.775578 2026] [proxy_fcgi:error] [pid 24348:tid 24387] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:51.017498 2026] [proxy_fcgi:error] [pid 24348:tid 24402] [client 20.203.130.156:41175] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 05:21:51.254345 2026] [:error] [pid 24348:tid 24393] [client 20.203.130.156:41175] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asudo.php"] [unique_id "acw6720Vs69Y5nF1HA-7WwAAAY4"]
[Wed Apr 01 05:21:51.725737 2026] [:error] [pid 24314:tid 24339] [client 20.203.130.156:39926] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asudo.php"] [unique_id "acw675RF3FCzjmMUX5bRqwAAARU"]
[Wed Apr 01 05:21:52.196007 2026] [:error] [pid 24314:tid 24334] [client 20.203.130.156:65137] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asudo.php"] [unique_id "acw68JRF3FCzjmMUX5bRrQAAARA"]
[Wed Apr 01 05:21:52.666730 2026] [:error] [pid 24314:tid 24319] [client 20.203.130.156:39897] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asudo.php"] [unique_id "acw68JRF3FCzjmMUX5bRrgAAAQE"]
[Wed Apr 01 05:21:53.136922 2026] [:error] [pid 24346:tid 24360] [client 20.203.130.156:43077] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-moonka.php"] [unique_id "acw68bc1l8kg9MhGHIJyqgAAAUg"]
[Wed Apr 01 05:21:53.606970 2026] [:error] [pid 23715:tid 23773] [client 20.203.130.156:39935] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-moonka.php"] [unique_id "acw68a-REzOruNbiT9wiPwAAAEw"]
[Wed Apr 01 05:21:54.079280 2026] [:error] [pid 23714:tid 23752] [client 20.203.130.156:54876] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-moonka.php"] [unique_id "acw68kHxDDU2ETcG9DSY9AAAABI"]
[Wed Apr 01 05:21:54.550937 2026] [:error] [pid 24346:tid 24374] [client 20.203.130.156:54899] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-moonka.php"] [unique_id "acw68rc1l8kg9MhGHIJyqwAAAVY"]
[Wed Apr 01 05:21:55.022796 2026] [:error] [pid 24348:tid 24390] [client 20.203.130.156:54872] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "acw6820Vs69Y5nF1HA-7YAAAAYs"]
[Wed Apr 01 05:21:55.496188 2026] [:error] [pid 23716:tid 23790] [client 20.203.130.156:50816] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "acw683VtFUg_mx-RYb5ZWwAAAII"]
[Wed Apr 01 05:21:55.969186 2026] [:error] [pid 23714:tid 23747] [client 20.203.130.156:54883] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "acw680HxDDU2ETcG9DSY9QAAAA0"]
[Wed Apr 01 05:21:56.440905 2026] [:error] [pid 24346:tid 24373] [client 20.203.130.156:26110] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "acw69Lc1l8kg9MhGHIJyrAAAAVU"]
[Wed Apr 01 05:21:56.911349 2026] [:error] [pid 23714:tid 23744] [client 20.203.130.156:65107] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zlnckdxn.php"] [unique_id "acw69EHxDDU2ETcG9DSY-gAAAAo"]
[Wed Apr 01 05:21:57.384355 2026] [:error] [pid 23714:tid 23743] [client 20.203.130.156:54857] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zlnckdxn.php"] [unique_id "acw69UHxDDU2ETcG9DSY_gAAAAk"]
[Wed Apr 01 05:21:57.855289 2026] [:error] [pid 23714:tid 23747] [client 20.203.130.156:51719] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zlnckdxn.php"] [unique_id "acw69UHxDDU2ETcG9DSY_wAAAA0"]
[Wed Apr 01 05:21:58.327722 2026] [:error] [pid 23715:tid 23766] [client 20.203.130.156:26087] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zlnckdxn.php"] [unique_id "acw69q-REzOruNbiT9wiSAAAAEU"]
[Wed Apr 01 05:21:58.801026 2026] [:error] [pid 23716:tid 23807] [client 20.203.130.156:51747] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-thi.php"] [unique_id "acw69nVtFUg_mx-RYb5ZYQAAAJM"]
[Wed Apr 01 05:21:59.275878 2026] [:error] [pid 24346:tid 24364] [client 20.203.130.156:54863] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-thi.php"] [unique_id "acw697c1l8kg9MhGHIJyrQAAAUw"]
[Wed Apr 01 05:21:59.747299 2026] [:error] [pid 23715:tid 23771] [client 20.203.130.156:65098] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-thi.php"] [unique_id "acw696-REzOruNbiT9wiTAAAAEo"]
[Wed Apr 01 05:22:00.218362 2026] [:error] [pid 23716:tid 23789] [client 20.203.130.156:54890] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-thi.php"] [unique_id "acw6-HVtFUg_mx-RYb5ZYgAAAIE"]
[Wed Apr 01 05:22:00.689949 2026] [:error] [pid 24346:tid 24358] [client 20.203.130.156:39893] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "acw6-Lc1l8kg9MhGHIJysQAAAUY"]
[Wed Apr 01 05:22:01.161837 2026] [:error] [pid 23716:tid 23795] [client 20.203.130.156:41179] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "acw6-XVtFUg_mx-RYb5ZYwAAAIc"]
[Wed Apr 01 05:22:01.640883 2026] [:error] [pid 24348:tid 24402] [client 20.203.130.156:26097] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "acw6-W0Vs69Y5nF1HA-7ZQAAAZc"]
[Wed Apr 01 05:22:02.111473 2026] [:error] [pid 24348:tid 24389] [client 20.203.130.156:54895] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "acw6-m0Vs69Y5nF1HA-7ZgAAAYo"]
[Wed Apr 01 05:22:02.582481 2026] [:error] [pid 23715:tid 23763] [client 20.203.130.156:26064] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acw6-q-REzOruNbiT9wiUAAAAEI"]
[Wed Apr 01 05:22:03.056102 2026] [:error] [pid 23715:tid 23785] [client 20.203.130.156:39925] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acw6-6-REzOruNbiT9wiUQAAAFg"]
[Wed Apr 01 05:22:03.528812 2026] [:error] [pid 23715:tid 23772] [client 20.203.130.156:65142] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acw6-6-REzOruNbiT9wiVQAAAEs"]
[Wed Apr 01 05:22:04.000974 2026] [:error] [pid 23714:tid 23748] [client 20.203.130.156:51734] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "acw6-0HxDDU2ETcG9DSZFgAAAA4"]
[Wed Apr 01 05:22:04.480661 2026] [:error] [pid 23714:tid 23736] [client 20.203.130.156:50862] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "acw6_EHxDDU2ETcG9DSZGAAAAAI"]
[Wed Apr 01 05:22:04.956015 2026] [:error] [pid 23714:tid 23747] [client 20.203.130.156:41183] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "acw6_EHxDDU2ETcG9DSZHQAAAA0"]
[Wed Apr 01 05:22:05.430106 2026] [:error] [pid 24346:tid 24357] [client 20.203.130.156:54854] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "acw6_bc1l8kg9MhGHIJyuQAAAUU"]
[Wed Apr 01 05:22:05.906282 2026] [:error] [pid 23714:tid 23739] [client 20.203.130.156:41196] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "acw6_UHxDDU2ETcG9DSZIwAAAAU"]
[Wed Apr 01 05:22:06.393393 2026] [:error] [pid 24348:tid 24392] [client 20.203.130.156:26080] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "acw6_m0Vs69Y5nF1HA-7aAAAAY0"]
[Wed Apr 01 05:22:06.867641 2026] [:error] [pid 23714:tid 23755] [client 20.203.130.156:39894] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "acw6_kHxDDU2ETcG9DSZJwAAABU"]
[Wed Apr 01 05:22:07.338559 2026] [:error] [pid 23714:tid 23741] [client 20.203.130.156:65134] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "acw6_0HxDDU2ETcG9DSZLAAAAAc"]
[Wed Apr 01 05:22:07.810897 2026] [:error] [pid 23714:tid 23754] [client 20.203.130.156:51764] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "acw6_0HxDDU2ETcG9DSZMQAAABQ"]
[Wed Apr 01 05:22:08.287679 2026] [:error] [pid 23716:tid 23791] [client 20.203.130.156:12026] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dichku.php"] [unique_id "acw7AHVtFUg_mx-RYb5ZZQAAAIM"]
[Wed Apr 01 05:22:08.760129 2026] [:error] [pid 23715:tid 23782] [client 20.203.130.156:51738] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dichku.php"] [unique_id "acw7AK-REzOruNbiT9wiYQAAAFU"]
[Wed Apr 01 05:22:09.238242 2026] [:error] [pid 23715:tid 23771] [client 20.203.130.156:39888] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dichku.php"] [unique_id "acw7Aa-REzOruNbiT9wiYwAAAEo"]
[Wed Apr 01 05:22:09.712831 2026] [:error] [pid 23715:tid 23777] [client 20.203.130.156:51773] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dichku.php"] [unique_id "acw7Aa-REzOruNbiT9wiZAAAAFA"]
[Wed Apr 01 05:22:10.187281 2026] [:error] [pid 23715:tid 23765] [client 20.203.130.156:65088] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "acw7Aq-REzOruNbiT9wiZQAAAEQ"]
[Wed Apr 01 05:22:10.661018 2026] [:error] [pid 24314:tid 24336] [client 20.203.130.156:26069] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "acw7ApRF3FCzjmMUX5bRuAAAARI"]
[Wed Apr 01 05:22:11.141740 2026] [:error] [pid 23714:tid 23741] [client 20.203.130.156:41188] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "acw7A0HxDDU2ETcG9DSZNQAAAAc"]
[Wed Apr 01 05:22:11.614605 2026] [:error] [pid 24346:tid 24355] [client 20.203.130.156:39908] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "acw7A7c1l8kg9MhGHIJyvgAAAUM"]
[Wed Apr 01 05:22:12.085679 2026] [:error] [pid 23714:tid 23734] [client 20.203.130.156:39901] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vvedr.php"] [unique_id "acw7BEHxDDU2ETcG9DSZOwAAAAA"]
[Wed Apr 01 05:22:12.557703 2026] [:error] [pid 23715:tid 23774] [client 20.203.130.156:26085] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vvedr.php"] [unique_id "acw7BK-REzOruNbiT9wiagAAAE0"]
[Wed Apr 01 05:22:13.028580 2026] [:error] [pid 23819:tid 23834] [client 20.203.130.156:51751] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vvedr.php"] [unique_id "acw7BddfUS_37wFAM77V-QAAAMw"]
[Wed Apr 01 05:22:13.509688 2026] [:error] [pid 23714:tid 23747] [client 20.203.130.156:51741] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vvedr.php"] [unique_id "acw7BUHxDDU2ETcG9DSZQgAAAA0"]
[Wed Apr 01 05:22:13.979955 2026] [:error] [pid 24314:tid 24324] [client 20.203.130.156:54880] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "acw7BZRF3FCzjmMUX5bRuwAAAQY"]
[Wed Apr 01 05:22:14.451145 2026] [:error] [pid 24346:tid 24370] [client 20.203.130.156:41167] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "acw7Brc1l8kg9MhGHIJywAAAAVI"]
[Wed Apr 01 05:22:14.922589 2026] [:error] [pid 23715:tid 23778] [client 20.203.130.156:39911] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "acw7Bq-REzOruNbiT9wibAAAAFE"]
[Wed Apr 01 05:22:15.400201 2026] [:error] [pid 23714:tid 23755] [client 20.203.130.156:65108] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "acw7B0HxDDU2ETcG9DSZSAAAABU"]
[Wed Apr 01 05:22:15.871662 2026] [:error] [pid 24346:tid 24367] [client 20.203.130.156:26056] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acw7B7c1l8kg9MhGHIJywwAAAU8"]
[Wed Apr 01 05:22:16.354721 2026] [:error] [pid 24346:tid 24362] [client 20.203.130.156:51758] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acw7CLc1l8kg9MhGHIJyxAAAAUo"]
[Wed Apr 01 05:22:16.827190 2026] [:error] [pid 24348:tid 24397] [client 20.203.130.156:43074] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acw7CG0Vs69Y5nF1HA-7cgAAAZI"]
[Wed Apr 01 05:22:17.303676 2026] [:error] [pid 24348:tid 24381] [client 20.203.130.156:11983] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "acw7CW0Vs69Y5nF1HA-7dAAAAYI"]
[Wed Apr 01 05:22:17.775096 2026] [:error] [pid 24346:tid 24375] [client 20.203.130.156:39872] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "acw7Cbc1l8kg9MhGHIJyyAAAAVc"]
[Wed Apr 01 05:22:18.259464 2026] [:error] [pid 24346:tid 24363] [client 20.203.130.156:43117] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "acw7Crc1l8kg9MhGHIJyywAAAUs"]
[Wed Apr 01 05:22:18.733185 2026] [:error] [pid 24348:tid 24403] [client 20.203.130.156:12256] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "acw7Cm0Vs69Y5nF1HA-7eQAAAZg"]
[Wed Apr 01 05:22:19.215138 2026] [:error] [pid 23714:tid 23758] [client 20.203.130.156:39900] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "acw7C0HxDDU2ETcG9DSZSgAAABg"]
[Wed Apr 01 05:22:19.686245 2026] [:error] [pid 24346:tid 24372] [client 20.203.130.156:41153] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "acw7C7c1l8kg9MhGHIJy0AAAAVQ"]
[Wed Apr 01 05:22:20.158088 2026] [:error] [pid 24348:tid 24396] [client 20.203.130.156:50848] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "acw7DG0Vs69Y5nF1HA-7fQAAAZE"]
[Wed Apr 01 05:22:20.630915 2026] [:error] [pid 23715:tid 23772] [client 20.203.130.156:54868] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "acw7DK-REzOruNbiT9widAAAAEs"]
[Wed Apr 01 05:22:21.101970 2026] [:error] [pid 24348:tid 24389] [client 20.203.130.156:26105] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "acw7DW0Vs69Y5nF1HA-7ggAAAYo"]
[Wed Apr 01 05:22:21.582776 2026] [:error] [pid 24348:tid 24384] [client 20.203.130.156:65105] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xhejulap.php"] [unique_id "acw7DW0Vs69Y5nF1HA-7gwAAAYU"]
[Wed Apr 01 05:22:22.058970 2026] [:error] [pid 23714:tid 23758] [client 20.203.130.156:54907] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xhejulap.php"] [unique_id "acw7DkHxDDU2ETcG9DSZUQAAABg"]
[Wed Apr 01 05:22:22.534876 2026] [:error] [pid 23715:tid 23763] [client 20.203.130.156:41205] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xhejulap.php"] [unique_id "acw7Dq-REzOruNbiT9widgAAAEI"]
[Wed Apr 01 05:22:23.005866 2026] [:error] [pid 23715:tid 23785] [client 20.203.130.156:51770] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xhejulap.php"] [unique_id "acw7D6-REzOruNbiT9widwAAAFg"]
[Wed Apr 01 05:22:23.480193 2026] [:error] [pid 23819:tid 23827] [client 20.203.130.156:65132] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acw7D9dfUS_37wFAM77WAQAAAMU"]
[Wed Apr 01 05:22:23.950320 2026] [:error] [pid 23714:tid 23748] [client 20.203.130.156:51752] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acw7D0HxDDU2ETcG9DSZVQAAAA4"]
[Wed Apr 01 05:22:24.434302 2026] [:error] [pid 24348:tid 24401] [client 20.203.130.156:43088] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acw7EG0Vs69Y5nF1HA-7hAAAAZY"]
[Wed Apr 01 05:22:24.929847 2026] [:error] [pid 23714:tid 23757] [client 20.203.130.156:39931] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "acw7EEHxDDU2ETcG9DSZWAAAABc"]
[Wed Apr 01 05:22:25.580854 2026] [:error] [pid 24346:tid 24370] [client 20.203.130.156:26108] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8pewqMTX.php"] [unique_id "acw7Ebc1l8kg9MhGHIJy1gAAAVI"]
[Wed Apr 01 05:22:26.055552 2026] [:error] [pid 23716:tid 23799] [client 20.203.130.156:41156] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8pewqMTX.php"] [unique_id "acw7EnVtFUg_mx-RYb5ZcQAAAIs"]
[Wed Apr 01 05:22:26.535371 2026] [:error] [pid 23716:tid 23794] [client 20.203.130.156:41168] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8pewqMTX.php"] [unique_id "acw7EnVtFUg_mx-RYb5ZcgAAAIY"]
[Wed Apr 01 05:22:27.007913 2026] [:error] [pid 23715:tid 23761] [client 20.203.130.156:43082] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8pewqMTX.php"] [unique_id "acw7E6-REzOruNbiT9wifwAAAEA"]
[Wed Apr 01 05:22:27.554389 2026] [:error] [pid 24346:tid 24357] [client 20.203.130.156:26072] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddpxi.php"] [unique_id "acw7E7c1l8kg9MhGHIJy2wAAAUU"]
[Wed Apr 01 05:22:28.035810 2026] [:error] [pid 23715:tid 23771] [client 20.203.130.156:51755] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddpxi.php"] [unique_id "acw7FK-REzOruNbiT9wiggAAAEo"]
[Wed Apr 01 05:22:28.510883 2026] [:error] [pid 24348:tid 24387] [client 20.203.130.156:51760] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddpxi.php"] [unique_id "acw7FG0Vs69Y5nF1HA-7iQAAAYg"]
[Wed Apr 01 05:22:29.087870 2026] [:error] [pid 23715:tid 23770] [client 20.203.130.156:65112] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ddpxi.php"] [unique_id "acw7Fa-REzOruNbiT9wihwAAAEk"]
[Wed Apr 01 05:22:29.616317 2026] [:error] [pid 23715:tid 23783] [client 20.203.130.156:50849] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdkfu.php"] [unique_id "acw7Fa-REzOruNbiT9wijAAAAFY"]
[Wed Apr 01 05:22:30.119164 2026] [:error] [pid 23715:tid 23774] [client 20.203.130.156:59473] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdkfu.php"] [unique_id "acw7Fq-REzOruNbiT9wijgAAAE0"]
[Wed Apr 01 05:22:30.611206 2026] [:error] [pid 23715:tid 23772] [client 20.203.130.156:26065] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdkfu.php"] [unique_id "acw7Fq-REzOruNbiT9wikAAAAEs"]
[Wed Apr 01 05:22:31.153761 2026] [:error] [pid 23715:tid 23767] [client 20.203.130.156:50856] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdkfu.php"] [unique_id "acw7F6-REzOruNbiT9wilQAAAEY"]
[Wed Apr 01 05:22:31.643684 2026] [:error] [pid 23715:tid 23775] [client 20.203.130.156:26077] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/IcC7p.php"] [unique_id "acw7F6-REzOruNbiT9wilwAAAE4"]
[Wed Apr 01 05:22:32.126643 2026] [:error] [pid 23819:tid 23829] [client 20.203.130.156:41204] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/IcC7p.php"] [unique_id "acw7GNdfUS_37wFAM77WAwAAAMc"]
[Wed Apr 01 05:22:32.612796 2026] [:error] [pid 23714:tid 23758] [client 20.203.130.156:39923] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/IcC7p.php"] [unique_id "acw7GEHxDDU2ETcG9DSZZgAAABg"]
[Wed Apr 01 05:22:33.101083 2026] [:error] [pid 24314:tid 24334] [client 20.203.130.156:41177] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/IcC7p.php"] [unique_id "acw7GZRF3FCzjmMUX5bRyQAAARA"]
[Wed Apr 01 05:22:33.586675 2026] [:error] [pid 24348:tid 24387] [client 20.203.130.156:51748] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "acw7GW0Vs69Y5nF1HA-7kAAAAYg"]
[Wed Apr 01 05:22:34.059373 2026] [:error] [pid 23715:tid 23773] [client 20.203.130.156:39904] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "acw7Gq-REzOruNbiT9wimgAAAEw"]
[Wed Apr 01 05:22:34.562589 2026] [:error] [pid 23819:tid 23839] [client 20.203.130.156:41197] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "acw7GtdfUS_37wFAM77WBwAAANE"]
[Wed Apr 01 05:22:35.035911 2026] [:error] [pid 24348:tid 24403] [client 20.203.130.156:54856] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "acw7G20Vs69Y5nF1HA-7mgAAAZg"]
[Wed Apr 01 05:22:35.516967 2026] [:error] [pid 24348:tid 24399] [client 20.203.130.156:54878] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "acw7G20Vs69Y5nF1HA-7nAAAAZQ"]
[Wed Apr 01 05:22:35.989729 2026] [:error] [pid 24348:tid 24396] [client 20.203.130.156:43079] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "acw7G20Vs69Y5nF1HA-7oAAAAZE"]
[Wed Apr 01 05:22:36.461207 2026] [:error] [pid 24348:tid 24393] [client 20.203.130.156:65120] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "acw7HG0Vs69Y5nF1HA-7owAAAY4"]
[Wed Apr 01 05:22:36.931164 2026] [:error] [pid 24346:tid 24352] [client 20.203.130.156:39883] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "acw7HLc1l8kg9MhGHIJy3gAAAUA"]
[Wed Apr 01 05:22:37.420548 2026] [:error] [pid 24346:tid 24373] [client 20.203.130.156:54867] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-temp.php"] [unique_id "acw7Hbc1l8kg9MhGHIJy4AAAAVU"]
[Wed Apr 01 05:45:42.321547 2026] [:error] [pid 24346:tid 24362] [client 43.140.247.223:57008] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acxAhrc1l8kg9MhGHIJ6fwAAAUo"]
[Wed Apr 01 06:09:48.178082 2026] [proxy_fcgi:error] [pid 23714:tid 23757] [client 195.154.174.107:53046] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:54:02.306165 2026] [proxy_fcgi:error] [pid 23714:tid 23750] [client 20.203.130.156:31749] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 06:54:02.547055 2026] [proxy_fcgi:error] [pid 23714:tid 23758] [client 20.203.130.156:31749] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 07:10:56.367136 2026] [proxy_fcgi:error] [pid 24348:tid 24383] [client 172.213.216.93:22637] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 07:10:56.603923 2026] [proxy_fcgi:error] [pid 24348:tid 24401] [client 172.213.216.93:22637] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 08:28:21.662774 2026] [:error] [pid 24314:tid 24339] [client 43.130.15.147:55520] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acxmpZRF3FCzjmMUX5b75wAAARU"]
[Wed Apr 01 10:07:04.194172 2026] [:error] [pid 23716:tid 23806] [client 43.167.232.38:40506] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acx9yHVtFUg_mx-RYb6v3wAAAJI"]
[Wed Apr 01 12:03:43.090554 2026] [:error] [pid 23716:tid 23795] [client 114.96.103.33:36762] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "acyZH3VtFUg_mx-RYb7uMwAAAIc"]
[Wed Apr 01 14:35:45.998419 2026] [:error] [pid 8910:tid 8988] [client 43.153.123.4:50518] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "acy8waJZINUcF3tYgEzsrAAAARQ"]
[Wed Apr 01 15:30:18.814832 2026] [:error] [pid 8908:tid 8924] [client 84.247.168.251:63226] [client 84.247.168.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.251, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aczJivkmxtJXGnLdvgDdlgAAAIs"]
[Wed Apr 01 15:30:18.819646 2026] [proxy_fcgi:error] [pid 8908:tid 8924] [client 84.247.168.251:63226] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 15:48:57.475816 2026] [:error] [pid 17856:tid 17872] [client 173.239.218.58:24415] [client 173.239.218.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aczN6T7Idlm5j9frhqRX4wAAAE4"]
[Wed Apr 01 19:18:20.152034 2026] [:error] [pid 8908:tid 8936] [client 122.3.150.61:51758] [client 122.3.150.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.3.150.61, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "acz-_PkmxtJXGnLdvgBXDQAAAJc"]
[Wed Apr 01 19:18:20.163025 2026] [proxy_fcgi:error] [pid 8908:tid 8936] [client 122.3.150.61:51758] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:56.245955 2026] [proxy_fcgi:error] [pid 62559:tid 62564] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:56.488914 2026] [proxy_fcgi:error] [pid 62559:tid 62574] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:56.837899 2026] [proxy_fcgi:error] [pid 62559:tid 62573] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:57.080857 2026] [proxy_fcgi:error] [pid 62559:tid 62578] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:57.540979 2026] [proxy_fcgi:error] [pid 62559:tid 62581] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:57.895352 2026] [proxy_fcgi:error] [pid 62559:tid 62569] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:58.173289 2026] [proxy_fcgi:error] [pid 62559:tid 62571] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:58.527566 2026] [proxy_fcgi:error] [pid 62559:tid 62584] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:58.856896 2026] [proxy_fcgi:error] [pid 62559:tid 62578] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:59.240412 2026] [proxy_fcgi:error] [pid 62559:tid 62580] [client 158.158.32.26:31488] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:25:59.545405 2026] [:error] [pid 62559:tid 62579] [client 158.158.32.26:31488] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "ac0q9y7NKI8IaNKZFIfC1gAAAVI"]
[Wed Apr 01 22:26:00.869099 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:23119] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "ac0q-DvP_a0662gDl6D2nAAAAMk"]
[Wed Apr 01 22:26:01.874463 2026] [:error] [pid 17856:tid 17874] [client 158.158.32.26:31531] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "ac0q-T7Idlm5j9frhqRnxAAAAFA"]
[Wed Apr 01 22:26:03.355926 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:4619] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-true.php"] [unique_id "ac0q-zvP_a0662gDl6D2ogAAAMU"]
[Wed Apr 01 22:26:04.368180 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:39937] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "ac0q_PkmxtJXGnLdvgCv1gAAAIY"]
[Wed Apr 01 22:26:05.300859 2026] [:error] [pid 17856:tid 17859] [client 158.158.32.26:25431] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "ac0q_T7Idlm5j9frhqRnywAAAEE"]
[Wed Apr 01 22:26:06.150103 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:23163] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "ac0q_jvP_a0662gDl6D2qAAAANY"]
[Wed Apr 01 22:26:07.203938 2026] [:error] [pid 8908:tid 8925] [client 158.158.32.26:35369] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws42.php"] [unique_id "ac0q__kmxtJXGnLdvgCv2wAAAIw"]
[Wed Apr 01 22:26:08.311920 2026] [:error] [pid 8910:tid 8974] [client 158.158.32.26:36662] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "ac0rAKJZINUcF3tYgEx09AAAAQY"]
[Wed Apr 01 22:26:09.433483 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:31555] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "ac0rATvP_a0662gDl6D2sQAAAMk"]
[Wed Apr 01 22:26:10.369021 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:24999] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "ac0rAvkmxtJXGnLdvgCv5QAAAI0"]
[Wed Apr 01 22:26:11.156969 2026] [:error] [pid 62559:tid 62574] [client 158.158.32.26:4665] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "ac0rAy7NKI8IaNKZFIfC2QAAAU0"]
[Wed Apr 01 22:26:12.227581 2026] [:error] [pid 8910:tid 8975] [client 158.158.32.26:38233] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ac0rBKJZINUcF3tYgEx0-AAAAQc"]
[Wed Apr 01 22:26:14.279002 2026] [:error] [pid 8995:tid 9008] [client 158.158.32.26:35381] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ac0rBuonaBjs3qxcRefhEQAAAAo"]
[Wed Apr 01 22:26:15.227941 2026] [:error] [pid 8995:tid 9019] [client 158.158.32.26:31552] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ac0rB-onaBjs3qxcRefhEgAAABU"]
[Wed Apr 01 22:26:16.067441 2026] [:error] [pid 17856:tid 17867] [client 158.158.32.26:35343] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "ac0rCD7Idlm5j9frhqRn2AAAAEk"]
[Wed Apr 01 22:26:16.846862 2026] [:error] [pid 8910:tid 8983] [client 158.158.32.26:35330] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ac0rCKJZINUcF3tYgEx0_gAAAQ8"]
[Wed Apr 01 22:26:18.051406 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:4620] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ac0rCj7Idlm5j9frhqRn3AAAAFQ"]
[Wed Apr 01 22:26:19.209116 2026] [:error] [pid 8908:tid 8932] [client 158.158.32.26:34965] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ac0rC_kmxtJXGnLdvgCv8wAAAJM"]
[Wed Apr 01 22:26:20.756623 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:23125] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ac0rDPkmxtJXGnLdvgCv9AAAAIU"]
[Wed Apr 01 22:26:22.425148 2026] [:error] [pid 8908:tid 8934] [client 158.158.32.26:33088] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "ac0rDvkmxtJXGnLdvgCwAAAAAJU"]
[Wed Apr 01 22:26:23.176393 2026] [:error] [pid 8908:tid 8924] [client 158.158.32.26:31504] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "ac0rD_kmxtJXGnLdvgCwAgAAAIs"]
[Wed Apr 01 22:26:23.994151 2026] [:error] [pid 8909:tid 8960] [client 158.158.32.26:39975] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "ac0rDzvP_a0662gDl6D2uQAAANM"]
[Wed Apr 01 22:26:24.929692 2026] [:error] [pid 62559:tid 62567] [client 158.158.32.26:31528] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/north1.php"] [unique_id "ac0rEC7NKI8IaNKZFIfC_QAAAUY"]
[Wed Apr 01 22:26:26.107813 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:35385] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "ac0rEi7NKI8IaNKZFIfDAgAAAU4"]
[Wed Apr 01 22:26:27.579477 2026] [:error] [pid 8909:tid 8942] [client 158.158.32.26:31593] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "ac0rEzvP_a0662gDl6D2wQAAAME"]
[Wed Apr 01 22:26:28.175151 2026] [:error] [pid 8995:tid 9007] [client 158.158.32.26:28848] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "ac0rFOonaBjs3qxcRefhHwAAAAk"]
[Wed Apr 01 22:26:29.043710 2026] [:error] [pid 62559:tid 62569] [client 158.158.32.26:34610] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "ac0rFS7NKI8IaNKZFIfDBgAAAUg"]
[Wed Apr 01 22:26:30.156192 2026] [:error] [pid 62559:tid 62576] [client 158.158.32.26:21130] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ac0rFi7NKI8IaNKZFIfDDQAAAU8"]
[Wed Apr 01 22:26:30.789315 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:4714] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ac0rFjvP_a0662gDl6D20QAAAMU"]
[Wed Apr 01 22:26:31.807294 2026] [:error] [pid 62559:tid 62579] [client 158.158.32.26:4652] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ac0rFy7NKI8IaNKZFIfDEAAAAVI"]
[Wed Apr 01 22:26:33.146611 2026] [:error] [pid 8995:tid 9015] [client 158.158.32.26:23831] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ac0rGeonaBjs3qxcRefhJQAAABE"]
[Wed Apr 01 22:26:35.174852 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:40201] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "ac0rG_kmxtJXGnLdvgCwDwAAAIU"]
[Wed Apr 01 22:26:36.063562 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:40218] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "ac0rHPkmxtJXGnLdvgCwEwAAAIA"]
[Wed Apr 01 22:26:37.029723 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:34946] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "ac0rHTvP_a0662gDl6D29wAAAM8"]
[Wed Apr 01 22:26:37.779968 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:26608] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin.php"] [unique_id "ac0rHTvP_a0662gDl6D2_QAAANc"]
[Wed Apr 01 22:26:38.842014 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:12123] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "ac0rHj7Idlm5j9frhqRn-gAAAFQ"]
[Wed Apr 01 22:26:41.189280 2026] [:error] [pid 17856:tid 17865] [client 158.158.32.26:31196] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "ac0rIT7Idlm5j9frhqRn_gAAAEc"]
[Wed Apr 01 22:26:43.271975 2026] [:error] [pid 8910:tid 8990] [client 158.158.32.26:35380] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "ac0rI6JZINUcF3tYgEx1EgAAARY"]
[Wed Apr 01 22:26:44.163285 2026] [:error] [pid 8910:tid 8986] [client 158.158.32.26:12142] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "ac0rJKJZINUcF3tYgEx1EwAAARI"]
[Wed Apr 01 22:26:45.702324 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:12100] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "ac0rJfkmxtJXGnLdvgCwHgAAAIY"]
[Wed Apr 01 22:26:48.362481 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:35386] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "ac0rKC7NKI8IaNKZFIfDHgAAAUE"]
[Wed Apr 01 22:26:49.100209 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:26569] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "ac0rKTvP_a0662gDl6D3MwAAAMI"]
[Wed Apr 01 22:26:50.011826 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:26613] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gpt-sh.php"] [unique_id "ac0rKi7NKI8IaNKZFIfDIgAAAVY"]
[Wed Apr 01 22:26:50.966091 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:26581] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "ac0rKvkmxtJXGnLdvgCwKwAAAIY"]
[Wed Apr 01 22:26:51.888557 2026] [:error] [pid 8995:tid 9011] [client 158.158.32.26:38749] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "ac0rK-onaBjs3qxcRefhRAAAAA0"]
[Wed Apr 01 22:26:52.752857 2026] [:error] [pid 8908:tid 8930] [client 158.158.32.26:31564] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "ac0rLPkmxtJXGnLdvgCwMgAAAJE"]
[Wed Apr 01 22:26:53.548303 2026] [:error] [pid 8908:tid 8934] [client 158.158.32.26:34599] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "ac0rLfkmxtJXGnLdvgCwNQAAAJU"]
[Wed Apr 01 22:26:54.269619 2026] [:error] [pid 8995:tid 9000] [client 158.158.32.26:36660] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ac0rLuonaBjs3qxcRefhRQAAAAI"]
[Wed Apr 01 22:26:54.977911 2026] [:error] [pid 8908:tid 8922] [client 158.158.32.26:39949] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ac0rLvkmxtJXGnLdvgCwPAAAAIk"]
[Wed Apr 01 22:26:55.798959 2026] [:error] [pid 8909:tid 8960] [client 158.158.32.26:36644] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ac0rLzvP_a0662gDl6D3PAAAANM"]
[Wed Apr 01 22:26:56.784090 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:31612] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ac0rMOonaBjs3qxcRefhRwAAAAs"]
[Wed Apr 01 22:26:57.611372 2026] [:error] [pid 8995:tid 8999] [client 158.158.32.26:4608] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ac0rMeonaBjs3qxcRefhSQAAAAE"]
[Wed Apr 01 22:26:58.238718 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:31583] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ac0rMvkmxtJXGnLdvgCwRgAAAJY"]
[Wed Apr 01 22:26:58.892337 2026] [:error] [pid 8908:tid 8927] [client 158.158.32.26:35335] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "ac0rMvkmxtJXGnLdvgCwSQAAAI4"]
[Wed Apr 01 22:26:59.657084 2026] [proxy_fcgi:error] [pid 8910:tid 8969] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:01.217603 2026] [proxy_fcgi:error] [pid 8910:tid 8973] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:01.520479 2026] [proxy_fcgi:error] [pid 8910:tid 8992] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:01.832576 2026] [proxy_fcgi:error] [pid 8910:tid 8970] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:03.439205 2026] [proxy_fcgi:error] [pid 8910:tid 8989] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:03.975777 2026] [proxy_fcgi:error] [pid 8910:tid 8985] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:04.224061 2026] [proxy_fcgi:error] [pid 8910:tid 8990] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:04.466456 2026] [proxy_fcgi:error] [pid 8910:tid 8991] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:04.712425 2026] [proxy_fcgi:error] [pid 8910:tid 8977] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:05.008786 2026] [proxy_fcgi:error] [pid 8910:tid 8972] [client 158.158.32.26:38778] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:27:05.330977 2026] [:error] [pid 8910:tid 8969] [client 158.158.32.26:38778] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "ac0rOaJZINUcF3tYgEx1LgAAAQE"]
[Wed Apr 01 22:27:05.977630 2026] [:error] [pid 8908:tid 8937] [client 158.158.32.26:38656] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "ac0rOfkmxtJXGnLdvgCwewAAAJg"]
[Wed Apr 01 22:27:06.713335 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:12109] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "ac0rOvkmxtJXGnLdvgCwfwAAAI0"]
[Wed Apr 01 22:27:07.235919 2026] [:error] [pid 8910:tid 8971] [client 158.158.32.26:34570] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uang.php"] [unique_id "ac0rO6JZINUcF3tYgEx1MAAAAQM"]
[Wed Apr 01 22:27:07.950251 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:19253] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "ac0rO-onaBjs3qxcRefhUwAAAAA"]
[Wed Apr 01 22:27:08.746770 2026] [:error] [pid 8995:tid 9002] [client 158.158.32.26:10954] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "ac0rPOonaBjs3qxcRefhVQAAAAQ"]
[Wed Apr 01 22:27:09.710209 2026] [:error] [pid 8995:tid 9005] [client 158.158.32.26:42997] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "ac0rPeonaBjs3qxcRefhVgAAAAc"]
[Wed Apr 01 22:27:10.681777 2026] [:error] [pid 62559:tid 62584] [client 158.158.32.26:20358] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/save.php"] [unique_id "ac0rPi7NKI8IaNKZFIfDUQAAAVc"]
[Wed Apr 01 22:27:11.838376 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:12535] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ac0rPzvP_a0662gDl6D3XwAAAMU"]
[Wed Apr 01 22:27:12.882824 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:36639] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ac0rQDvP_a0662gDl6D3YgAAAM8"]
[Wed Apr 01 22:27:14.133523 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:20378] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ac0rQi7NKI8IaNKZFIfDYgAAAVY"]
[Wed Apr 01 22:27:14.980201 2026] [:error] [pid 62559:tid 62582] [client 158.158.32.26:35329] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ac0rQi7NKI8IaNKZFIfDZwAAAVU"]
[Wed Apr 01 22:27:15.728156 2026] [:error] [pid 8908:tid 8936] [client 158.158.32.26:31597] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ac0rQ_kmxtJXGnLdvgCwhwAAAJc"]
[Wed Apr 01 22:27:17.303880 2026] [:error] [pid 62559:tid 62578] [client 158.158.32.26:38753] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ac0rRS7NKI8IaNKZFIfDcQAAAVE"]
[Wed Apr 01 22:27:18.676978 2026] [:error] [pid 8908:tid 8915] [client 158.158.32.26:31568] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ac0rRvkmxtJXGnLdvgCwjQAAAII"]
[Wed Apr 01 22:27:19.920453 2026] [:error] [pid 17856:tid 17868] [client 158.158.32.26:12492] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ac0rRz7Idlm5j9frhqRoLwAAAEo"]
[Wed Apr 01 22:27:21.081898 2026] [:error] [pid 8995:tid 9005] [client 158.158.32.26:10977] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ac0rSeonaBjs3qxcRefhYQAAAAc"]
[Wed Apr 01 22:27:22.803395 2026] [:error] [pid 8910:tid 8992] [client 158.158.32.26:34996] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ac0rSqJZINUcF3tYgEx1QwAAARg"]
[Wed Apr 01 22:27:23.808823 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:38724] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ac0rSzvP_a0662gDl6D3bgAAAM8"]
[Wed Apr 01 22:27:24.493823 2026] [:error] [pid 62559:tid 62574] [client 158.158.32.26:12106] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ac0rTC7NKI8IaNKZFIfDgQAAAU0"]
[Wed Apr 01 22:27:25.154072 2026] [:error] [pid 62559:tid 62567] [client 158.158.32.26:42323] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "ac0rTS7NKI8IaNKZFIfDgwAAAUY"]
[Wed Apr 01 22:27:26.078863 2026] [:error] [pid 8995:tid 9019] [client 158.158.32.26:37127] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "ac0rTuonaBjs3qxcRefhZQAAABU"]
[Wed Apr 01 22:27:27.189597 2026] [:error] [pid 8910:tid 8975] [client 158.158.32.26:12532] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "ac0rT6JZINUcF3tYgEx1RwAAAQc"]
[Wed Apr 01 22:27:28.100368 2026] [:error] [pid 8908:tid 8937] [client 158.158.32.26:12542] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "ac0rUPkmxtJXGnLdvgCwowAAAJg"]
[Wed Apr 01 22:27:28.823005 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:12115] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ac0rUPkmxtJXGnLdvgCwqAAAAI0"]
[Wed Apr 01 22:27:29.569085 2026] [:error] [pid 8908:tid 8920] [client 158.158.32.26:20390] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ac0rUfkmxtJXGnLdvgCwrQAAAIc"]
[Wed Apr 01 22:27:30.369213 2026] [:error] [pid 8909:tid 8953] [client 158.158.32.26:42362] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ac0rUjvP_a0662gDl6D3dgAAAMw"]
[Wed Apr 01 22:27:31.151075 2026] [:error] [pid 8908:tid 8929] [client 158.158.32.26:26605] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ac0rU_kmxtJXGnLdvgCwsQAAAJA"]
[Wed Apr 01 22:27:32.169517 2026] [:error] [pid 8908:tid 8928] [client 158.158.32.26:12503] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ac0rVPkmxtJXGnLdvgCwswAAAI8"]
[Wed Apr 01 22:27:33.053395 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:37712] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ac0rVTvP_a0662gDl6D3egAAANI"]
[Wed Apr 01 22:27:33.802955 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:34568] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ac0rVfkmxtJXGnLdvgCwuQAAAI0"]
[Wed Apr 01 22:27:34.536759 2026] [:error] [pid 62559:tid 62570] [client 158.158.32.26:34984] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ac0rVi7NKI8IaNKZFIfDlQAAAUk"]
[Wed Apr 01 22:27:35.376603 2026] [:error] [pid 8908:tid 8934] [client 158.158.32.26:12148] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ac0rV_kmxtJXGnLdvgCwvgAAAJU"]
[Wed Apr 01 22:27:36.424788 2026] [:error] [pid 62559:tid 62577] [client 158.158.32.26:26604] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ac0rWC7NKI8IaNKZFIfDogAAAVA"]
[Wed Apr 01 22:27:37.435753 2026] [:error] [pid 62559:tid 62567] [client 158.158.32.26:34993] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ac0rWS7NKI8IaNKZFIfDqQAAAUY"]
[Wed Apr 01 22:27:38.288261 2026] [:error] [pid 8908:tid 8920] [client 158.158.32.26:42009] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ac0rWvkmxtJXGnLdvgCw1QAAAIc"]
[Wed Apr 01 22:27:39.158863 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:28925] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sweg.php"] [unique_id "ac0rW_kmxtJXGnLdvgCw2AAAAIQ"]
[Wed Apr 01 22:27:40.144312 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:34251] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sweg.php"] [unique_id "ac0rXC7NKI8IaNKZFIfDtwAAAUE"]
[Wed Apr 01 22:27:41.130837 2026] [:error] [pid 62559:tid 62579] [client 158.158.32.26:42349] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sweg.php"] [unique_id "ac0rXS7NKI8IaNKZFIfDvgAAAVI"]
[Wed Apr 01 22:27:41.726277 2026] [:error] [pid 8910:tid 8977] [client 158.158.32.26:20406] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sweg.php"] [unique_id "ac0rXaJZINUcF3tYgEx1TwAAAQk"]
[Wed Apr 01 22:27:42.401905 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:38748] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "ac0rXj7Idlm5j9frhqRoQAAAAFM"]
[Wed Apr 01 22:27:43.743383 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:16720] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "ac0rXzvP_a0662gDl6D3gwAAAMk"]
[Wed Apr 01 22:27:44.685688 2026] [:error] [pid 8908:tid 8929] [client 158.158.32.26:32706] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "ac0rYPkmxtJXGnLdvgCw5wAAAJA"]
[Wed Apr 01 22:27:45.622149 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:34563] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xpwer1.php"] [unique_id "ac0rYTvP_a0662gDl6D3hwAAANI"]
[Wed Apr 01 22:27:46.299924 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:42039] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws40.php"] [unique_id "ac0rYj7Idlm5j9frhqRoRgAAAFI"]
[Wed Apr 01 22:27:47.166209 2026] [:error] [pid 17856:tid 17872] [client 158.158.32.26:28865] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws40.php"] [unique_id "ac0rYz7Idlm5j9frhqRoSgAAAE4"]
[Wed Apr 01 22:27:48.242670 2026] [:error] [pid 8910:tid 8991] [client 158.158.32.26:26587] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws40.php"] [unique_id "ac0rZKJZINUcF3tYgEx1VwAAARc"]
[Wed Apr 01 22:27:49.045175 2026] [:error] [pid 62559:tid 62568] [client 158.158.32.26:16710] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws40.php"] [unique_id "ac0rZS7NKI8IaNKZFIfD-gAAAUc"]
[Wed Apr 01 22:27:49.767260 2026] [:error] [pid 8995:tid 9016] [client 158.158.32.26:32746] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ac0rZeonaBjs3qxcRefhbQAAABI"]
[Wed Apr 01 22:27:50.591271 2026] [:error] [pid 8995:tid 9017] [client 158.158.32.26:34288] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ac0rZuonaBjs3qxcRefhbwAAABM"]
[Wed Apr 01 22:27:51.415439 2026] [:error] [pid 8995:tid 9021] [client 158.158.32.26:12101] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ac0rZ-onaBjs3qxcRefhcAAAABc"]
[Wed Apr 01 22:27:52.687103 2026] [:error] [pid 8908:tid 8929] [client 158.158.32.26:42363] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "ac0raPkmxtJXGnLdvgCw9wAAAJA"]
[Wed Apr 01 22:27:54.439011 2026] [:error] [pid 62559:tid 62576] [client 158.158.32.26:37164] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ac0rai7NKI8IaNKZFIfEBQAAAU8"]
[Wed Apr 01 22:27:55.404546 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:56043] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ac0ray7NKI8IaNKZFIfECwAAAUU"]
[Wed Apr 01 22:27:56.742021 2026] [:error] [pid 8909:tid 8942] [client 158.158.32.26:31546] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ac0rbDvP_a0662gDl6D3mgAAAME"]
[Wed Apr 01 22:27:57.731883 2026] [:error] [pid 8908:tid 8932] [client 158.158.32.26:36648] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "ac0rbfkmxtJXGnLdvgCxAAAAAJM"]
[Wed Apr 01 22:28:00.673348 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:38780] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shellerr.php"] [unique_id "ac0rcDvP_a0662gDl6D3nwAAANg"]
[Wed Apr 01 22:28:03.033949 2026] [:error] [pid 17856:tid 17860] [client 158.158.32.26:12145] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shellerr.php"] [unique_id "ac0rcz7Idlm5j9frhqRoWAAAAEI"]
[Wed Apr 01 22:28:04.152136 2026] [:error] [pid 17856:tid 17865] [client 158.158.32.26:37170] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shellerr.php"] [unique_id "ac0rdD7Idlm5j9frhqRoWgAAAEc"]
[Wed Apr 01 22:28:05.541846 2026] [proxy_fcgi:error] [pid 62559:tid 62561] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:05.894358 2026] [proxy_fcgi:error] [pid 62559:tid 62572] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:06.163474 2026] [proxy_fcgi:error] [pid 62559:tid 62565] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:06.411693 2026] [proxy_fcgi:error] [pid 62559:tid 62568] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:06.654663 2026] [proxy_fcgi:error] [pid 62559:tid 62579] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:07.020541 2026] [proxy_fcgi:error] [pid 62559:tid 62564] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:07.328507 2026] [proxy_fcgi:error] [pid 62559:tid 62562] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:07.607715 2026] [proxy_fcgi:error] [pid 62559:tid 62581] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:07.915734 2026] [proxy_fcgi:error] [pid 62559:tid 62583] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:08.238661 2026] [proxy_fcgi:error] [pid 62559:tid 62565] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:08.565046 2026] [proxy_fcgi:error] [pid 62559:tid 62568] [client 158.158.32.26:20380] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:28:08.899426 2026] [:error] [pid 62559:tid 62567] [client 158.158.32.26:20380] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "ac0reC7NKI8IaNKZFIfEPwAAAUY"]
[Wed Apr 01 22:28:09.745188 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:10980] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "ac0reS7NKI8IaNKZFIfERAAAAUo"]
[Wed Apr 01 22:28:10.628737 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:38680] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "ac0revkmxtJXGnLdvgCxKgAAAIY"]
[Wed Apr 01 22:28:11.994551 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:38692] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws43.php"] [unique_id "ac0rey7NKI8IaNKZFIfESgAAAUE"]
[Wed Apr 01 22:28:12.837423 2026] [:error] [pid 8909:tid 8949] [client 158.158.32.26:19230] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "ac0rfDvP_a0662gDl6D3rQAAAMg"]
[Wed Apr 01 22:28:13.487206 2026] [:error] [pid 8909:tid 8947] [client 158.158.32.26:31510] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "ac0rfTvP_a0662gDl6D3rgAAAMY"]
[Wed Apr 01 22:28:14.257842 2026] [:error] [pid 8995:tid 9019] [client 158.158.32.26:31578] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "ac0rfuonaBjs3qxcRefhmQAAABU"]
[Wed Apr 01 22:28:15.554480 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:36400] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gec.php"] [unique_id "ac0rfzvP_a0662gDl6D3tQAAAMk"]
[Wed Apr 01 22:28:16.658054 2026] [:error] [pid 8909:tid 8951] [client 158.158.32.26:12485] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ac0rgDvP_a0662gDl6D3uQAAAMo"]
[Wed Apr 01 22:28:17.799186 2026] [:error] [pid 8909:tid 8948] [client 158.158.32.26:34955] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ac0rgTvP_a0662gDl6D3vwAAAMc"]
[Wed Apr 01 22:28:18.560263 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:38718] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ac0rgjvP_a0662gDl6D3wAAAAMM"]
[Wed Apr 01 22:28:19.324763 2026] [:error] [pid 8909:tid 8952] [client 158.158.32.26:12536] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ac0rgzvP_a0662gDl6D3wQAAAMs"]
[Wed Apr 01 22:28:20.319653 2026] [:error] [pid 17856:tid 17869] [client 158.158.32.26:34999] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ac0rhD7Idlm5j9frhqRoeQAAAEs"]
[Wed Apr 01 22:28:21.644130 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:38745] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ac0rhfkmxtJXGnLdvgCxOgAAAIo"]
[Wed Apr 01 22:28:23.058426 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:38209] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ac0rh_kmxtJXGnLdvgCxRAAAAJI"]
[Wed Apr 01 22:28:24.084402 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:28810] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ac0riPkmxtJXGnLdvgCxTQAAAI0"]
[Wed Apr 01 22:28:24.813225 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:23833] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "ac0riC7NKI8IaNKZFIfEVgAAAUQ"]
[Wed Apr 01 22:28:25.873194 2026] [:error] [pid 62559:tid 62582] [client 158.158.32.26:40246] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "ac0riS7NKI8IaNKZFIfEWQAAAVU"]
[Wed Apr 01 22:28:27.035350 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:4612] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "ac0riy7NKI8IaNKZFIfEXwAAAU4"]
[Wed Apr 01 22:28:28.185559 2026] [:error] [pid 8908:tid 8934] [client 158.158.32.26:4413] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/size.php"] [unique_id "ac0rjPkmxtJXGnLdvgCxVAAAAJU"]
[Wed Apr 01 22:28:29.055827 2026] [:error] [pid 8908:tid 8937] [client 158.158.32.26:31520] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ac0rjfkmxtJXGnLdvgCxVwAAAJg"]
[Wed Apr 01 22:28:30.477399 2026] [:error] [pid 62559:tid 62564] [client 158.158.32.26:38228] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ac0rji7NKI8IaNKZFIfEawAAAUM"]
[Wed Apr 01 22:28:31.571813 2026] [:error] [pid 8995:tid 9011] [client 158.158.32.26:12137] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ac0rj-onaBjs3qxcRefhpgAAAA0"]
[Wed Apr 01 22:28:32.722732 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:29302] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ac0rkPkmxtJXGnLdvgCxWwAAAIA"]
[Wed Apr 01 22:28:34.009784 2026] [:error] [pid 8909:tid 8958] [client 158.158.32.26:4660] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "ac0rkjvP_a0662gDl6D3zAAAANE"]
[Wed Apr 01 22:28:35.002788 2026] [:error] [pid 8910:tid 8970] [client 158.158.32.26:23840] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "ac0rk6JZINUcF3tYgEx1cgAAAQI"]
[Wed Apr 01 22:28:35.836437 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:31586] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "ac0rky7NKI8IaNKZFIfEeAAAAUE"]
[Wed Apr 01 22:28:37.153536 2026] [:error] [pid 17856:tid 17862] [client 158.158.32.26:22362] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "ac0rlT7Idlm5j9frhqRohAAAAEQ"]
[Wed Apr 01 22:28:38.263799 2026] [:error] [pid 62559:tid 62580] [client 158.158.32.26:35376] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ac0rli7NKI8IaNKZFIfEhwAAAVM"]
[Wed Apr 01 22:28:39.179203 2026] [:error] [pid 8995:tid 9002] [client 158.158.32.26:21178] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ac0rl-onaBjs3qxcRefhsAAAAAQ"]
[Wed Apr 01 22:28:39.831777 2026] [:error] [pid 8995:tid 9018] [client 158.158.32.26:38271] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ac0rl-onaBjs3qxcRefhsgAAABQ"]
[Wed Apr 01 22:28:40.829363 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:36619] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "ac0rmOonaBjs3qxcRefhuQAAAAs"]
[Wed Apr 01 22:28:41.938740 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:31515] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ac0rmTvP_a0662gDl6D33wAAAMU"]
[Wed Apr 01 22:28:43.473932 2026] [:error] [pid 62559:tid 62585] [client 158.158.32.26:31514] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ac0rmy7NKI8IaNKZFIfEkgAAAVg"]
[Wed Apr 01 22:28:44.496682 2026] [:error] [pid 62559:tid 62579] [client 158.158.32.26:38658] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ac0rnC7NKI8IaNKZFIfEnAAAAVI"]
[Wed Apr 01 22:28:45.300812 2026] [:error] [pid 8909:tid 8945] [client 158.158.32.26:38659] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ac0rnTvP_a0662gDl6D35gAAAMQ"]
[Wed Apr 01 22:28:46.023776 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:12098] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "ac0rnj7Idlm5j9frhqRoiQAAAFM"]
[Wed Apr 01 22:28:47.001898 2026] [:error] [pid 8995:tid 9008] [client 158.158.32.26:33141] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "ac0rn-onaBjs3qxcRefh0AAAAAo"]
[Wed Apr 01 22:28:48.278494 2026] [:error] [pid 62559:tid 62569] [client 158.158.32.26:36942] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "ac0roC7NKI8IaNKZFIfEowAAAUg"]
[Wed Apr 01 22:28:49.213937 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:33113] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vaza.php"] [unique_id "ac0rofkmxtJXGnLdvgCxYQAAAI0"]
[Wed Apr 01 22:28:50.222659 2026] [:error] [pid 17856:tid 17880] [client 158.158.32.26:14808] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ac0roj7Idlm5j9frhqRojwAAAFY"]
[Wed Apr 01 22:28:51.317830 2026] [:error] [pid 8995:tid 9005] [client 158.158.32.26:4693] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ac0ro-onaBjs3qxcRefh0QAAAAc"]
[Wed Apr 01 22:28:52.172318 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:4648] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ac0rpOonaBjs3qxcRefh1AAAAAs"]
[Wed Apr 01 22:28:52.820907 2026] [:error] [pid 62559:tid 62570] [client 158.158.32.26:22351] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ac0rpC7NKI8IaNKZFIfEsQAAAUk"]
[Wed Apr 01 22:28:54.823366 2026] [:error] [pid 8995:tid 9018] [client 158.158.32.26:39485] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0rpuonaBjs3qxcRefh3QAAABQ"]
[Wed Apr 01 22:28:55.614417 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:42984] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0rpy7NKI8IaNKZFIfEuAAAAUQ"]
[Wed Apr 01 22:28:56.695410 2026] [:error] [pid 8909:tid 8960] [client 158.158.32.26:39469] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0rqDvP_a0662gDl6D39wAAANM"]
[Wed Apr 01 22:28:57.882870 2026] [:error] [pid 8910:tid 8971] [client 158.158.32.26:33090] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0rqaJZINUcF3tYgEx1fwAAAQM"]
[Wed Apr 01 22:28:58.696563 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:39944] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "ac0rqi7NKI8IaNKZFIfEwQAAAVY"]
[Wed Apr 01 22:28:59.297283 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:42998] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "ac0rqy7NKI8IaNKZFIfEwwAAAUo"]
[Wed Apr 01 22:28:59.948034 2026] [:error] [pid 8910:tid 8968] [client 158.158.32.26:36898] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "ac0rq6JZINUcF3tYgEx1gwAAAQA"]
[Wed Apr 01 22:29:00.707158 2026] [:error] [pid 62559:tid 62582] [client 158.158.32.26:38244] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xc0252.php"] [unique_id "ac0rrC7NKI8IaNKZFIfExwAAAVU"]
[Wed Apr 01 22:29:01.370966 2026] [:error] [pid 8910:tid 8985] [client 158.158.32.26:14836] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ac0rraJZINUcF3tYgEx1iQAAARE"]
[Wed Apr 01 22:29:02.644554 2026] [:error] [pid 17856:tid 17871] [client 158.158.32.26:34984] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ac0rrj7Idlm5j9frhqRoowAAAE0"]
[Wed Apr 01 22:29:03.278514 2026] [:error] [pid 17856:tid 17881] [client 158.158.32.26:23110] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ac0rrz7Idlm5j9frhqRopgAAAFc"]
[Wed Apr 01 22:29:03.972874 2026] [:error] [pid 8995:tid 9010] [client 158.158.32.26:23838] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "ac0rr-onaBjs3qxcRefh4wAAAAw"]
[Wed Apr 01 22:29:04.691304 2026] [:error] [pid 62559:tid 62577] [client 158.158.32.26:33097] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ac0rsC7NKI8IaNKZFIfEywAAAVA"]
[Wed Apr 01 22:29:05.446490 2026] [:error] [pid 62559:tid 62584] [client 158.158.32.26:22349] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ac0rsS7NKI8IaNKZFIfEzgAAAVc"]
[Wed Apr 01 22:29:06.079425 2026] [:error] [pid 17856:tid 17866] [client 158.158.32.26:23156] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ac0rsj7Idlm5j9frhqRoqQAAAEg"]
[Wed Apr 01 22:29:06.719057 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:31541] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ac0rsvkmxtJXGnLdvgCxcQAAAJI"]
[Wed Apr 01 22:29:07.339164 2026] [:error] [pid 8910:tid 8981] [client 158.158.32.26:4410] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0rs6JZINUcF3tYgEx1ngAAAQ0"]
[Wed Apr 01 22:29:07.925300 2026] [:error] [pid 17856:tid 17871] [client 158.158.32.26:38246] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0rsz7Idlm5j9frhqRorQAAAE0"]
[Wed Apr 01 22:29:09.654497 2026] [proxy_fcgi:error] [pid 8909:tid 8951] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:09.918947 2026] [proxy_fcgi:error] [pid 8909:tid 8956] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:10.198859 2026] [proxy_fcgi:error] [pid 8909:tid 8941] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:10.596253 2026] [proxy_fcgi:error] [pid 8909:tid 8965] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:10.885578 2026] [proxy_fcgi:error] [pid 8909:tid 8945] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:11.162912 2026] [proxy_fcgi:error] [pid 8909:tid 8950] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:11.435679 2026] [proxy_fcgi:error] [pid 8909:tid 8953] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:11.679611 2026] [proxy_fcgi:error] [pid 8909:tid 8962] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:12.026483 2026] [proxy_fcgi:error] [pid 8909:tid 8963] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:12.270124 2026] [proxy_fcgi:error] [pid 8909:tid 8960] [client 158.158.32.26:4650] AH01071: Got error 'Primary script unknown'
[Wed Apr 01 22:29:13.449937 2026] [:error] [pid 8909:tid 8954] [client 158.158.32.26:4650] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "ac0ruTvP_a0662gDl6D4IwAAAM0"]
[Wed Apr 01 22:29:13.952760 2026] [:error] [pid 62559:tid 62569] [client 158.158.32.26:23111] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "ac0ruS7NKI8IaNKZFIfE5AAAAUg"]
[Wed Apr 01 22:29:14.506958 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:4381] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "ac0ruvkmxtJXGnLdvgCxgQAAAJY"]
[Wed Apr 01 22:29:15.050040 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:4700] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c.php"] [unique_id "ac0ruy7NKI8IaNKZFIfE5wAAAUo"]
[Wed Apr 01 22:29:15.618328 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:14840] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "ac0ruy7NKI8IaNKZFIfE6QAAAU4"]
[Wed Apr 01 22:29:16.138778 2026] [:error] [pid 62559:tid 62579] [client 158.158.32.26:34220] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "ac0rvC7NKI8IaNKZFIfE7AAAAVI"]
[Wed Apr 01 22:29:16.736985 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:23437] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "ac0rvC7NKI8IaNKZFIfE8AAAAUQ"]
[Wed Apr 01 22:29:17.352915 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:39786] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we2.php"] [unique_id "ac0rvS7NKI8IaNKZFIfE8gAAAUE"]
[Wed Apr 01 22:29:18.447912 2026] [:error] [pid 62559:tid 62572] [client 158.158.32.26:34180] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "ac0rvi7NKI8IaNKZFIfE_QAAAUs"]
[Wed Apr 01 22:29:19.019601 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:22661] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "ac0rvy7NKI8IaNKZFIfFAQAAAUU"]
[Wed Apr 01 22:29:19.587095 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:39754] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "ac0rv_kmxtJXGnLdvgCxjAAAAJY"]
[Wed Apr 01 22:29:20.182857 2026] [:error] [pid 8908:tid 8929] [client 158.158.32.26:12447] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/04.php"] [unique_id "ac0rwPkmxtJXGnLdvgCxkgAAAJA"]
[Wed Apr 01 22:29:20.725886 2026] [:error] [pid 62559:tid 62574] [client 158.158.32.26:43234] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "ac0rwC7NKI8IaNKZFIfFBQAAAU0"]
[Wed Apr 01 22:29:21.334333 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:26160] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "ac0rwfkmxtJXGnLdvgCxlgAAAIU"]
[Wed Apr 01 22:29:21.903791 2026] [:error] [pid 17856:tid 17866] [client 158.158.32.26:41049] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "ac0rwT7Idlm5j9frhqRoxwAAAEg"]
[Wed Apr 01 22:29:22.494458 2026] [:error] [pid 17856:tid 17868] [client 158.158.32.26:41032] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "ac0rwj7Idlm5j9frhqRoyAAAAEo"]
[Thu Apr 02 00:55:43.928795 2026] [:error] [pid 8387:tid 8444] [client 119.96.24.54:54874] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac1ODxdQYJ2y8LDYkv_3-QAAAAQ"]
[Thu Apr 02 04:03:05.327165 2026] [:error] [pid 59305:tid 59322] [client 43.157.22.57:35780] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac15-ar2tV4rDwKFxKfz7gAAAM0"]
[Thu Apr 02 06:33:32.594675 2026] [:error] [pid 37543:tid 37556] [client 217.216.37.56:54504] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac2dPHhdk2bEYJCvILYn3AAAAUs"]
[Thu Apr 02 06:33:32.815486 2026] [:error] [pid 29467:tid 29477] [client 217.216.37.56:58563] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac2dPL4VUBFCJAq-WOkpNQAAAQc"]
[Thu Apr 02 06:33:33.026769 2026] [:error] [pid 37543:tid 37557] [client 217.216.37.56:57394] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "ac2dPXhdk2bEYJCvILYn3wAAAUw"]
[Thu Apr 02 07:02:50.989881 2026] [:error] [pid 59305:tid 59330] [client 182.44.10.67:55298] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ac2kGqr2tV4rDwKFxKcfjwAAANU"]
[Thu Apr 02 07:03:34.918269 2026] [proxy_fcgi:error] [pid 59201:tid 59267] [client 20.111.63.125:14862] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:26:50.930570 2026] [proxy_fcgi:error] [pid 37543:tid 37562] [client 20.111.63.125:50138] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:26:51.289077 2026] [proxy_fcgi:error] [pid 37543:tid 37568] [client 20.111.63.125:50138] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:26:51.665510 2026] [proxy_fcgi:error] [pid 37543:tid 37558] [client 20.111.63.125:50138] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:26:51.914449 2026] [proxy_fcgi:error] [pid 37543:tid 37567] [client 20.111.63.125:50138] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:26:52.149545 2026] [:error] [pid 37543:tid 37554] [client 20.111.63.125:50138] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-cc.php"] [unique_id "ac2pvHhdk2bEYJCvILY-6AAAAUk"]
[Thu Apr 02 07:26:52.974866 2026] [:error] [pid 23927:tid 23933] [client 20.111.63.125:53977] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-cc.php"] [unique_id "ac2pvEsZwqCndhl9uKBo1AAAAYQ"]
[Thu Apr 02 07:26:53.853249 2026] [:error] [pid 59201:tid 59267] [client 20.111.63.125:53999] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-cc.php"] [unique_id "ac2pvcAC0Tw8eL6gzZ6W_gAAAIA"]
[Thu Apr 02 07:26:55.127099 2026] [:error] [pid 23927:tid 23935] [client 20.111.63.125:6582] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-cc.php"] [unique_id "ac2pv0sZwqCndhl9uKBo2gAAAYY"]
[Thu Apr 02 07:26:56.905293 2026] [:error] [pid 59305:tid 59315] [client 20.111.63.125:57560] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac2pwKr2tV4rDwKFxKcjggAAAMY"]
[Thu Apr 02 07:26:57.819262 2026] [:error] [pid 29467:tid 29489] [client 20.111.63.125:61898] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac2pwb4VUBFCJAq-WOk_wAAAARM"]
[Thu Apr 02 07:27:04.543756 2026] [:error] [pid 59305:tid 59328] [client 20.111.63.125:51385] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac2pyKr2tV4rDwKFxKcjhwAAANM"]
[Thu Apr 02 07:27:08.761744 2026] [:error] [pid 37543:tid 37561] [client 20.111.63.125:57585] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac2pzHhdk2bEYJCvILY--QAAAVA"]
[Thu Apr 02 07:27:10.532764 2026] [:error] [pid 29467:tid 29490] [client 20.111.63.125:53959] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/brtnd.php"] [unique_id "ac2pzr4VUBFCJAq-WOk_zgAAARQ"]
[Thu Apr 02 07:27:11.318269 2026] [:error] [pid 23927:tid 23933] [client 20.111.63.125:51375] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/brtnd.php"] [unique_id "ac2pz0sZwqCndhl9uKBo7AAAAYQ"]
[Thu Apr 02 07:27:14.018014 2026] [:error] [pid 29467:tid 29489] [client 20.111.63.125:53990] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/brtnd.php"] [unique_id "ac2p0r4VUBFCJAq-WOk_2AAAARM"]
[Thu Apr 02 07:27:16.126877 2026] [:error] [pid 59201:tid 59290] [client 20.111.63.125:57576] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/brtnd.php"] [unique_id "ac2p1MAC0Tw8eL6gzZ6XBQAAAJc"]
[Thu Apr 02 07:27:18.966906 2026] [:error] [pid 37543:tid 37551] [client 20.111.63.125:6579] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dtwpf.php"] [unique_id "ac2p1nhdk2bEYJCvILY_CAAAAUY"]
[Thu Apr 02 07:27:20.538764 2026] [:error] [pid 59200:tid 59252] [client 20.111.63.125:6580] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ac2p2LfP26txrdLs3EoIugAAAEw"]
[Thu Apr 02 07:27:21.603363 2026] [:error] [pid 59194:tid 59226] [client 20.111.63.125:57558] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "ac2p2RMpAeV11hcQehzpWAAAAA0"]
[Thu Apr 02 07:27:24.531341 2026] [:error] [pid 29467:tid 29481] [client 20.111.63.125:53961] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ac2p3L4VUBFCJAq-WOk_6QAAAQs"]
[Thu Apr 02 07:27:30.296782 2026] [:error] [pid 23927:tid 23944] [client 20.111.63.125:61925] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ac2p4ksZwqCndhl9uKBo_gAAAY8"]
[Thu Apr 02 07:27:32.252861 2026] [:error] [pid 37543:tid 37565] [client 20.111.63.125:51389] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ac2p5Hhdk2bEYJCvILY_EwAAAVQ"]
[Thu Apr 02 07:27:33.704170 2026] [:error] [pid 23927:tid 23935] [client 20.111.63.125:51334] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ac2p5UsZwqCndhl9uKBpAwAAAYY"]
[Thu Apr 02 07:27:35.792824 2026] [:error] [pid 29467:tid 29480] [client 20.111.63.125:51381] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac2p574VUBFCJAq-WOk_8QAAAQo"]
[Thu Apr 02 07:27:36.827117 2026] [:error] [pid 59200:tid 59243] [client 20.111.63.125:6590] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac2p6LfP26txrdLs3EoIwwAAAEM"]
[Thu Apr 02 07:27:37.564443 2026] [:error] [pid 59305:tid 59314] [client 20.111.63.125:50128] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac2p6ar2tV4rDwKFxKcjlQAAAMU"]
[Thu Apr 02 07:27:39.321513 2026] [:error] [pid 29467:tid 29490] [client 20.111.63.125:57537] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac2p674VUBFCJAq-WOk__QAAARQ"]
[Thu Apr 02 07:27:41.424985 2026] [:error] [pid 23927:tid 23946] [client 20.111.63.125:60921] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lef.php"] [unique_id "ac2p7UsZwqCndhl9uKBpCwAAAZE"]
[Thu Apr 02 07:27:43.656471 2026] [:error] [pid 59305:tid 59309] [client 20.111.63.125:57551] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "ac2p76r2tV4rDwKFxKcjmQAAAMA"]
[Thu Apr 02 07:27:44.372865 2026] [:error] [pid 37543:tid 37569] [client 20.111.63.125:50136] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "ac2p8Hhdk2bEYJCvILY_JgAAAVg"]
[Thu Apr 02 07:27:45.404867 2026] [:error] [pid 59305:tid 59325] [client 20.111.63.125:60899] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "ac2p8ar2tV4rDwKFxKcjmwAAANA"]
[Thu Apr 02 07:27:48.260037 2026] [:error] [pid 23927:tid 23937] [client 20.111.63.125:61941] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "ac2p9EsZwqCndhl9uKBpGgAAAYg"]
[Thu Apr 02 07:27:50.356636 2026] [:error] [pid 59201:tid 59273] [client 20.111.63.125:51378] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ccv.php"] [unique_id "ac2p9sAC0Tw8eL6gzZ6XHQAAAIY"]
[Thu Apr 02 07:27:52.236794 2026] [proxy_fcgi:error] [pid 29467:tid 29485] [client 20.111.63.125:6575] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:27:52.590509 2026] [proxy_fcgi:error] [pid 29467:tid 29483] [client 20.111.63.125:6575] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:27:52.842452 2026] [proxy_fcgi:error] [pid 29467:tid 29494] [client 20.111.63.125:6575] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:27:53.148692 2026] [proxy_fcgi:error] [pid 29467:tid 29471] [client 20.111.63.125:6575] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:27:54.702324 2026] [:error] [pid 29467:tid 29490] [client 20.111.63.125:6575] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ac2p-r4VUBFCJAq-WOlAFgAAARQ"]
[Thu Apr 02 07:27:59.296888 2026] [:error] [pid 23927:tid 23942] [client 20.111.63.125:50169] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ac2p_0sZwqCndhl9uKBpMwAAAY0"]
[Thu Apr 02 07:28:01.984882 2026] [:error] [pid 23927:tid 23948] [client 20.111.63.125:54008] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ac2qAUsZwqCndhl9uKBpOQAAAZM"]
[Thu Apr 02 07:28:02.940933 2026] [:error] [pid 37543:tid 37559] [client 20.111.63.125:53963] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "ac2qAnhdk2bEYJCvILY_OAAAAU4"]
[Thu Apr 02 07:28:04.133455 2026] [:error] [pid 23927:tid 23930] [client 20.111.63.125:61929] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilng.php"] [unique_id "ac2qBEsZwqCndhl9uKBpPwAAAYE"]
[Thu Apr 02 07:28:05.326142 2026] [:error] [pid 59305:tid 59311] [client 20.111.63.125:50149] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilng.php"] [unique_id "ac2qBar2tV4rDwKFxKcjtAAAAMI"]
[Thu Apr 02 07:28:09.542369 2026] [:error] [pid 23927:tid 23952] [client 20.111.63.125:57567] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilng.php"] [unique_id "ac2qCUsZwqCndhl9uKBpRwAAAZc"]
[Thu Apr 02 07:28:11.103678 2026] [:error] [pid 23927:tid 23930] [client 20.111.63.125:53430] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilng.php"] [unique_id "ac2qC0sZwqCndhl9uKBpTQAAAYE"]
[Thu Apr 02 07:28:12.088990 2026] [:error] [pid 37543:tid 37557] [client 20.111.63.125:51349] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f222.php"] [unique_id "ac2qDHhdk2bEYJCvILY_PwAAAUw"]
[Thu Apr 02 07:28:17.464792 2026] [:error] [pid 59194:tid 59219] [client 20.111.63.125:61943] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f222.php"] [unique_id "ac2qERMpAeV11hcQehzpZAAAAAY"]
[Thu Apr 02 07:28:29.081251 2026] [:error] [pid 37543:tid 37567] [client 20.111.63.125:54003] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "ac2qHXhdk2bEYJCvILY_UQAAAVY"]
[Thu Apr 02 07:28:31.389490 2026] [:error] [pid 37543:tid 37560] [client 20.111.63.125:50164] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "ac2qH3hdk2bEYJCvILY_VAAAAU8"]
[Thu Apr 02 07:28:37.595843 2026] [:error] [pid 23927:tid 23934] [client 20.111.63.125:57539] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "ac2qJUsZwqCndhl9uKBpeAAAAYU"]
[Thu Apr 02 07:28:41.659205 2026] [:error] [pid 59201:tid 59269] [client 20.111.63.125:60901] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "ac2qKcAC0Tw8eL6gzZ6XQwAAAII"]
[Thu Apr 02 07:28:43.987765 2026] [:error] [pid 23927:tid 23944] [client 20.111.63.125:60879] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "ac2qK0sZwqCndhl9uKBpjQAAAY8"]
[Thu Apr 02 07:28:46.249294 2026] [:error] [pid 23927:tid 23950] [client 20.111.63.125:51335] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "ac2qLksZwqCndhl9uKBplwAAAZU"]
[Thu Apr 02 07:28:47.400593 2026] [:error] [pid 37543:tid 37565] [client 20.111.63.125:50126] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "ac2qL3hdk2bEYJCvILY_XAAAAVQ"]
[Thu Apr 02 07:28:48.095219 2026] [:error] [pid 29467:tid 29473] [client 20.111.63.125:53378] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "ac2qML4VUBFCJAq-WOlAQQAAAQM"]
[Thu Apr 02 07:30:39.999846 2026] [proxy_fcgi:error] [pid 23927:tid 23953] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:40.286897 2026] [proxy_fcgi:error] [pid 23927:tid 23951] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:40.622210 2026] [proxy_fcgi:error] [pid 23927:tid 23929] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:40.882844 2026] [proxy_fcgi:error] [pid 23927:tid 23933] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:41.121661 2026] [proxy_fcgi:error] [pid 23927:tid 23930] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:41.447020 2026] [proxy_fcgi:error] [pid 23927:tid 23938] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:41.756446 2026] [proxy_fcgi:error] [pid 23927:tid 23948] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:42.094237 2026] [proxy_fcgi:error] [pid 23927:tid 23949] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:42.382675 2026] [proxy_fcgi:error] [pid 23927:tid 23947] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:42.736713 2026] [proxy_fcgi:error] [pid 23927:tid 23940] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:43.012083 2026] [proxy_fcgi:error] [pid 23927:tid 23943] [client 20.111.63.125:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:30:43.312419 2026] [:error] [pid 23927:tid 23942] [client 20.111.63.125:47189] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "ac2qo0sZwqCndhl9uKBqlQAAAY0"]
[Thu Apr 02 07:32:41.054330 2026] [proxy_fcgi:error] [pid 37543:tid 37554] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:41.355027 2026] [proxy_fcgi:error] [pid 37543:tid 37567] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:41.596337 2026] [proxy_fcgi:error] [pid 37543:tid 37546] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:41.905483 2026] [proxy_fcgi:error] [pid 37543:tid 37552] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:42.144889 2026] [proxy_fcgi:error] [pid 37543:tid 37561] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:42.502080 2026] [proxy_fcgi:error] [pid 37543:tid 37565] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:42.836362 2026] [proxy_fcgi:error] [pid 37543:tid 37549] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:43.186069 2026] [proxy_fcgi:error] [pid 37543:tid 37551] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 07:32:43.431557 2026] [proxy_fcgi:error] [pid 37543:tid 37547] [client 20.111.63.125:51351] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 09:00:06.228163 2026] [:error] [pid 37543:tid 37551] [client 43.135.133.241:40834] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ac2_lnhdk2bEYJCvILZVPwAAAUY"]
[Thu Apr 02 10:02:05.621743 2026] [:error] [pid 59194:tid 59237] [client 105.99.104.226:61731] [client 105.99.104.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.99.104.226, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ac3OHRMpAeV11hcQehz5TAAAABg"]
[Thu Apr 02 10:02:05.636805 2026] [proxy_fcgi:error] [pid 59194:tid 59237] [client 105.99.104.226:61731] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 10:36:21.937992 2026] [:error] [pid 59305:tid 59322] [client 43.130.3.120:50028] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac3WJar2tV4rDwKFxKddswAAAM0"]
[Thu Apr 02 13:47:11.579668 2026] [:error] [pid 29467:tid 29482] [client 123.187.240.242:57060] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac4C374VUBFCJAq-WOmkQgAAAQw"]
[Thu Apr 02 15:05:42.731096 2026] [:error] [pid 54384:tid 54409] [client 43.173.1.69:52420] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ac4VRtWWpaby3TVN7Mey_QAAAdc"]
[Thu Apr 02 21:01:12.805429 2026] [:error] [pid 29467:tid 29471] [client 43.159.152.184:34528] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ac5omL4VUBFCJAq-WOmqdQAAAQE"]
[Thu Apr 02 22:14:59.546882 2026] [:error] [pid 59305:tid 59311] [client 43.159.141.150:46148] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac5546r2tV4rDwKFxKfY6gAAAMI"]
[Thu Apr 02 23:21:12.756075 2026] [proxy_fcgi:error] [pid 59200:tid 59254] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:12.994962 2026] [proxy_fcgi:error] [pid 59200:tid 59251] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:13.255231 2026] [proxy_fcgi:error] [pid 59200:tid 59245] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:13.491634 2026] [proxy_fcgi:error] [pid 59200:tid 59258] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:15.039860 2026] [proxy_fcgi:error] [pid 59200:tid 59256] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:15.277088 2026] [proxy_fcgi:error] [pid 59200:tid 59255] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:15.539118 2026] [proxy_fcgi:error] [pid 59200:tid 59262] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:15.774641 2026] [proxy_fcgi:error] [pid 59200:tid 59264] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:16.011146 2026] [proxy_fcgi:error] [pid 59200:tid 59250] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:16.262896 2026] [proxy_fcgi:error] [pid 59200:tid 59244] [client 72.146.8.65:30161] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:21:16.497472 2026] [:error] [pid 59200:tid 59247] [client 72.146.8.65:30161] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hnphq.php"] [unique_id "ac6JbLfP26txrdLs3EqZfwAAAEc"]
[Thu Apr 02 23:21:19.291521 2026] [:error] [pid 23927:tid 23929] [client 72.146.8.65:30172] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hnphq.php"] [unique_id "ac6Jb0sZwqCndhl9uKD_hwAAAYA"]
[Thu Apr 02 23:21:20.208912 2026] [:error] [pid 29467:tid 29491] [client 72.146.8.65:30153] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hnphq.php"] [unique_id "ac6JcL4VUBFCJAq-WOkC0gAAARU"]
[Thu Apr 02 23:21:21.056673 2026] [:error] [pid 23927:tid 23939] [client 72.146.8.65:39914] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hnphq.php"] [unique_id "ac6JcUsZwqCndhl9uKD_jAAAAYo"]
[Thu Apr 02 23:21:22.309042 2026] [:error] [pid 23927:tid 23941] [client 72.146.8.65:30148] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6JcksZwqCndhl9uKD_lAAAAYw"]
[Thu Apr 02 23:21:22.967311 2026] [:error] [pid 23927:tid 23950] [client 72.146.8.65:57144] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6JcksZwqCndhl9uKD_mgAAAZU"]
[Thu Apr 02 23:21:23.699111 2026] [:error] [pid 54384:tid 54400] [client 72.146.8.65:18095] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6Jc9WWpaby3TVN7MdNnwAAAc4"]
[Thu Apr 02 23:21:24.460842 2026] [:error] [pid 54384:tid 54396] [client 72.146.8.65:31702] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6JdNWWpaby3TVN7MdNowAAAco"]
[Thu Apr 02 23:21:25.422337 2026] [:error] [pid 29467:tid 29491] [client 72.146.8.65:12527] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac6Jdb4VUBFCJAq-WOkC3wAAARU"]
[Thu Apr 02 23:21:26.191522 2026] [:error] [pid 29467:tid 29473] [client 72.146.8.65:18079] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac6Jdr4VUBFCJAq-WOkC4wAAAQM"]
[Thu Apr 02 23:21:26.888215 2026] [:error] [pid 59200:tid 59259] [client 72.146.8.65:51844] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac6JdrfP26txrdLs3EqZhAAAAFM"]
[Thu Apr 02 23:21:28.173444 2026] [:error] [pid 29467:tid 29494] [client 72.146.8.65:62742] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "ac6JeL4VUBFCJAq-WOkC7QAAARg"]
[Thu Apr 02 23:21:29.407542 2026] [:error] [pid 23927:tid 23934] [client 72.146.8.65:30155] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "ac6JeUsZwqCndhl9uKD_owAAAYU"]
[Thu Apr 02 23:21:30.522287 2026] [:error] [pid 54384:tid 54397] [client 72.146.8.65:31648] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "ac6JetWWpaby3TVN7MdNqgAAAcs"]
[Thu Apr 02 23:21:31.124624 2026] [:error] [pid 29467:tid 29470] [client 72.146.8.65:31677] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "ac6Je74VUBFCJAq-WOkC9wAAAQA"]
[Thu Apr 02 23:21:31.821418 2026] [:error] [pid 29467:tid 29485] [client 72.146.8.65:37656] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "ac6Je74VUBFCJAq-WOkC_QAAAQ8"]
[Thu Apr 02 23:21:32.394682 2026] [:error] [pid 59305:tid 59332] [client 72.146.8.65:12537] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6JfKr2tV4rDwKFxKcAAAAAANc"]
[Thu Apr 02 23:21:32.985467 2026] [:error] [pid 23927:tid 23947] [client 72.146.8.65:59475] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6JfEsZwqCndhl9uKD_qAAAAZI"]
[Thu Apr 02 23:21:33.502103 2026] [:error] [pid 59201:tid 59285] [client 72.146.8.65:57111] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6JfcAC0Tw8eL6gzZ5LWgAAAJI"]
[Thu Apr 02 23:21:34.516407 2026] [:error] [pid 59200:tid 59247] [client 72.146.8.65:63286] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6JfrfP26txrdLs3EqZkAAAAEc"]
[Thu Apr 02 23:21:36.499110 2026] [:error] [pid 29467:tid 29482] [client 72.146.8.65:20661] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6JgL4VUBFCJAq-WOkC_wAAAQw"]
[Thu Apr 02 23:21:37.817072 2026] [:error] [pid 59201:tid 59267] [client 72.146.8.65:37665] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6JgcAC0Tw8eL6gzZ5LYgAAAIA"]
[Thu Apr 02 23:21:39.191677 2026] [:error] [pid 54384:tid 54406] [client 72.146.8.65:30185] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6Jg9WWpaby3TVN7MdNsQAAAdQ"]
[Thu Apr 02 23:21:39.893923 2026] [:error] [pid 23927:tid 23931] [client 72.146.8.65:10660] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6Jg0sZwqCndhl9uKD_vgAAAYI"]
[Thu Apr 02 23:21:40.841198 2026] [:error] [pid 23927:tid 23947] [client 72.146.8.65:10624] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "ac6JhEsZwqCndhl9uKD_xQAAAZI"]
[Thu Apr 02 23:21:41.506615 2026] [:error] [pid 29467:tid 29491] [client 72.146.8.65:51855] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "ac6Jhb4VUBFCJAq-WOkDCQAAARU"]
[Thu Apr 02 23:21:41.996698 2026] [:error] [pid 23927:tid 23944] [client 72.146.8.65:26347] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "ac6JhUsZwqCndhl9uKD_zwAAAY8"]
[Thu Apr 02 23:21:42.527874 2026] [:error] [pid 29467:tid 29489] [client 72.146.8.65:22990] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Okxob.php"] [unique_id "ac6Jhr4VUBFCJAq-WOkDDgAAARM"]
[Thu Apr 02 23:21:43.089457 2026] [:error] [pid 54384:tid 54404] [client 72.146.8.65:59494] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6Jh9WWpaby3TVN7MdNtwAAAdI"]
[Thu Apr 02 23:21:43.700679 2026] [:error] [pid 59200:tid 59264] [client 72.146.8.65:37644] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6Jh7fP26txrdLs3EqZlwAAAFg"]
[Thu Apr 02 23:21:44.170797 2026] [:error] [pid 54384:tid 54403] [client 72.146.8.65:10646] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6JiNWWpaby3TVN7MdNuQAAAdE"]
[Thu Apr 02 23:21:44.687444 2026] [:error] [pid 54384:tid 54398] [client 72.146.8.65:57099] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6JiNWWpaby3TVN7MdNugAAAcw"]
[Thu Apr 02 23:21:45.192526 2026] [:error] [pid 59200:tid 59262] [client 72.146.8.65:18108] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6JibfP26txrdLs3EqZmgAAAFY"]
[Thu Apr 02 23:21:45.700619 2026] [:error] [pid 29467:tid 29474] [client 72.146.8.65:37645] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6Jib4VUBFCJAq-WOkDGgAAAQQ"]
[Thu Apr 02 23:21:46.170320 2026] [:error] [pid 29467:tid 29475] [client 72.146.8.65:43629] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6Jir4VUBFCJAq-WOkDHQAAAQU"]
[Thu Apr 02 23:21:46.651332 2026] [:error] [pid 23927:tid 23930] [client 72.146.8.65:31655] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6JiksZwqCndhl9uKD_0gAAAYE"]
[Thu Apr 02 23:21:47.122437 2026] [:error] [pid 29467:tid 29484] [client 72.146.8.65:63264] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "ac6Ji74VUBFCJAq-WOkDIAAAAQ4"]
[Thu Apr 02 23:21:47.689557 2026] [:error] [pid 29467:tid 29480] [client 72.146.8.65:31636] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "ac6Ji74VUBFCJAq-WOkDJgAAAQo"]
[Thu Apr 02 23:21:48.179369 2026] [:error] [pid 23927:tid 23946] [client 72.146.8.65:57617] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "ac6JjEsZwqCndhl9uKD_1gAAAZE"]
[Thu Apr 02 23:21:48.674697 2026] [:error] [pid 29467:tid 29490] [client 72.146.8.65:31616] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "ac6JjL4VUBFCJAq-WOkDLQAAARQ"]
[Thu Apr 02 23:21:49.160465 2026] [:error] [pid 59305:tid 59330] [client 72.146.8.65:59462] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/repurify.php"] [unique_id "ac6Jjar2tV4rDwKFxKcAEgAAANU"]
[Thu Apr 02 23:21:49.651780 2026] [:error] [pid 37543:tid 37547] [client 72.146.8.65:18048] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/repurify.php"] [unique_id "ac6JjXhdk2bEYJCvILYSLAAAAUI"]
[Thu Apr 02 23:21:50.153129 2026] [:error] [pid 37543:tid 37563] [client 72.146.8.65:18087] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/repurify.php"] [unique_id "ac6Jjnhdk2bEYJCvILYSLgAAAVI"]
[Thu Apr 02 23:21:50.622094 2026] [:error] [pid 23927:tid 23936] [client 72.146.8.65:34580] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/repurify.php"] [unique_id "ac6JjksZwqCndhl9uKD_3QAAAYc"]
[Thu Apr 02 23:21:51.101730 2026] [:error] [pid 54384:tid 54403] [client 72.146.8.65:51860] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tdsaz.php"] [unique_id "ac6Jj9WWpaby3TVN7MdN0QAAAdE"]
[Thu Apr 02 23:21:51.715905 2026] [:error] [pid 37543:tid 37550] [client 72.146.8.65:10635] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tdsaz.php"] [unique_id "ac6Jj3hdk2bEYJCvILYSMAAAAUU"]
[Thu Apr 02 23:21:52.260888 2026] [:error] [pid 59305:tid 59329] [client 72.146.8.65:16183] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tdsaz.php"] [unique_id "ac6JkKr2tV4rDwKFxKcAFQAAANQ"]
[Thu Apr 02 23:21:52.736714 2026] [:error] [pid 59305:tid 59322] [client 72.146.8.65:57658] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tdsaz.php"] [unique_id "ac6JkKr2tV4rDwKFxKcAGAAAAM0"]
[Thu Apr 02 23:21:53.224420 2026] [:error] [pid 59305:tid 59312] [client 72.146.8.65:51849] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ac6Jkar2tV4rDwKFxKcAHgAAAMM"]
[Thu Apr 02 23:21:53.747985 2026] [:error] [pid 54384:tid 54389] [client 72.146.8.65:63281] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ac6JkdWWpaby3TVN7MdN1wAAAcM"]
[Thu Apr 02 23:21:54.224197 2026] [:error] [pid 29467:tid 29478] [client 72.146.8.65:16190] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ac6Jkr4VUBFCJAq-WOkDPwAAAQg"]
[Thu Apr 02 23:21:54.856948 2026] [:error] [pid 23927:tid 23929] [client 72.146.8.65:23029] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ac6JkksZwqCndhl9uKD_5wAAAYA"]
[Thu Apr 02 23:21:55.387150 2026] [:error] [pid 59305:tid 59326] [client 72.146.8.65:31627] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hfles.php"] [unique_id "ac6Jk6r2tV4rDwKFxKcAJwAAANE"]
[Thu Apr 02 23:21:56.120394 2026] [:error] [pid 59201:tid 59279] [client 72.146.8.65:13589] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hfles.php"] [unique_id "ac6JlMAC0Tw8eL6gzZ5LcgAAAIw"]
[Thu Apr 02 23:21:58.413134 2026] [:error] [pid 59305:tid 59330] [client 72.146.8.65:34169] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hfles.php"] [unique_id "ac6Jlqr2tV4rDwKFxKcAKwAAANU"]
[Thu Apr 02 23:21:59.894312 2026] [:error] [pid 59194:tid 59223] [client 72.146.8.65:46341] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hfles.php"] [unique_id "ac6JlxMpAeV11hcQehxl4wAAAAo"]
[Thu Apr 02 23:22:00.656592 2026] [:error] [pid 59200:tid 59258] [client 72.146.8.65:48360] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6JmLfP26txrdLs3EqZogAAAFI"]
[Thu Apr 02 23:22:01.397440 2026] [:error] [pid 23927:tid 23949] [client 72.146.8.65:25747] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6JmUsZwqCndhl9uKD_7wAAAZQ"]
[Thu Apr 02 23:22:02.002661 2026] [:error] [pid 37543:tid 37547] [client 72.146.8.65:57174] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6Jmnhdk2bEYJCvILYSNwAAAUI"]
[Thu Apr 02 23:22:02.697344 2026] [:error] [pid 29467:tid 29494] [client 72.146.8.65:19631] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6Jmr4VUBFCJAq-WOkDQgAAARg"]
[Thu Apr 02 23:22:03.245084 2026] [:error] [pid 59305:tid 59316] [client 72.146.8.65:13577] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "ac6Jm6r2tV4rDwKFxKcANwAAAMc"]
[Thu Apr 02 23:22:03.787317 2026] [:error] [pid 59200:tid 59254] [client 72.146.8.65:19597] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "ac6Jm7fP26txrdLs3EqZpAAAAE4"]
[Thu Apr 02 23:22:04.296943 2026] [:error] [pid 59305:tid 59314] [client 72.146.8.65:23000] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "ac6JnKr2tV4rDwKFxKcAOAAAAMU"]
[Thu Apr 02 23:22:04.778624 2026] [:error] [pid 59200:tid 59262] [client 72.146.8.65:13572] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "ac6JnLfP26txrdLs3EqZpQAAAFY"]
[Thu Apr 02 23:22:05.328499 2026] [:error] [pid 59305:tid 59332] [client 72.146.8.65:57168] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6Jnar2tV4rDwKFxKcAOgAAANc"]
[Thu Apr 02 23:22:06.084043 2026] [:error] [pid 29467:tid 29481] [client 72.146.8.65:16181] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6Jnr4VUBFCJAq-WOkDUAAAAQs"]
[Thu Apr 02 23:22:06.719946 2026] [:error] [pid 23927:tid 23941] [client 72.146.8.65:13568] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6JnksZwqCndhl9uKD_-AAAAYw"]
[Thu Apr 02 23:22:07.269004 2026] [:error] [pid 29467:tid 29479] [client 72.146.8.65:34611] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6Jn74VUBFCJAq-WOkDWAAAAQk"]
[Thu Apr 02 23:22:09.497015 2026] [:error] [pid 29467:tid 29475] [client 72.146.8.65:40330] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ac6Job4VUBFCJAq-WOkDZgAAAQU"]
[Thu Apr 02 23:22:11.204143 2026] [:error] [pid 59194:tid 59222] [client 72.146.8.65:43599] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ac6JoxMpAeV11hcQehxl7wAAAAk"]
[Thu Apr 02 23:22:13.391874 2026] [:error] [pid 23927:tid 23953] [client 72.146.8.65:46989] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ac6JpUsZwqCndhl9uKAAAwAAAZg"]
[Thu Apr 02 23:22:14.346785 2026] [:error] [pid 54384:tid 54403] [client 72.146.8.65:25753] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ac6JptWWpaby3TVN7MdN6gAAAdE"]
[Thu Apr 02 23:22:39.754496 2026] [proxy_fcgi:error] [pid 29467:tid 29476] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:41.259410 2026] [proxy_fcgi:error] [pid 29467:tid 29484] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:41.517317 2026] [proxy_fcgi:error] [pid 29467:tid 29472] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:41.753755 2026] [proxy_fcgi:error] [pid 29467:tid 29494] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:41.990333 2026] [proxy_fcgi:error] [pid 29467:tid 29471] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:42.227987 2026] [proxy_fcgi:error] [pid 29467:tid 29487] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:42.468755 2026] [proxy_fcgi:error] [pid 29467:tid 29490] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:42.740737 2026] [proxy_fcgi:error] [pid 29467:tid 29483] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:42.986885 2026] [proxy_fcgi:error] [pid 29467:tid 29485] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:43.239293 2026] [proxy_fcgi:error] [pid 29467:tid 29477] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:43.526765 2026] [proxy_fcgi:error] [pid 29467:tid 29493] [client 72.146.8.65:56448] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:22:43.759994 2026] [:error] [pid 29467:tid 29486] [client 72.146.8.65:56448] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac6Jw74VUBFCJAq-WOkD7wAAARA"]
[Thu Apr 02 23:22:54.348418 2026] [:error] [pid 59194:tid 59214] [client 72.146.8.65:3848] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac6JzhMpAeV11hcQehxmCwAAAAE"]
[Thu Apr 02 23:22:55.890627 2026] [:error] [pid 59200:tid 59262] [client 72.146.8.65:14453] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac6Jz7fP26txrdLs3EqZyQAAAFY"]
[Thu Apr 02 23:22:56.582809 2026] [:error] [pid 23927:tid 23933] [client 72.146.8.65:32247] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htzevfl4k9ey5hoaywdwiCdefault.php"] [unique_id "ac6J0EsZwqCndhl9uKAALwAAAYQ"]
[Thu Apr 02 23:22:57.080583 2026] [:error] [pid 59305:tid 59327] [client 72.146.8.65:21386] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac6J0ar2tV4rDwKFxKcAnQAAANI"]
[Thu Apr 02 23:22:57.563771 2026] [:error] [pid 37543:tid 37553] [client 72.146.8.65:21777] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac6J0Xhdk2bEYJCvILYSZgAAAUg"]
[Thu Apr 02 23:22:58.200608 2026] [:error] [pid 59194:tid 59237] [client 72.146.8.65:47689] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac6J0hMpAeV11hcQehxmEwAAABg"]
[Thu Apr 02 23:22:58.719721 2026] [:error] [pid 59194:tid 59217] [client 72.146.8.65:27753] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ac6J0hMpAeV11hcQehxmFgAAAAQ"]
[Thu Apr 02 23:22:59.291022 2026] [:error] [pid 23927:tid 23944] [client 72.146.8.65:59403] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac6J00sZwqCndhl9uKAANAAAAY8"]
[Thu Apr 02 23:23:00.039276 2026] [:error] [pid 29467:tid 29491] [client 72.146.8.65:21770] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac6J1L4VUBFCJAq-WOkEBAAAARU"]
[Thu Apr 02 23:23:00.530009 2026] [:error] [pid 59201:tid 59285] [client 72.146.8.65:32238] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac6J1MAC0Tw8eL6gzZ5LkgAAAJI"]
[Thu Apr 02 23:23:01.292320 2026] [:error] [pid 54384:tid 54392] [client 72.146.8.65:3917] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac6J1dWWpaby3TVN7MdOKAAAAcY"]
[Thu Apr 02 23:23:01.857068 2026] [:error] [pid 29467:tid 29486] [client 72.146.8.65:14423] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac6J1b4VUBFCJAq-WOkEEgAAARA"]
[Thu Apr 02 23:23:02.644701 2026] [:error] [pid 29467:tid 29477] [client 72.146.8.65:32213] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac6J1r4VUBFCJAq-WOkEHQAAAQc"]
[Thu Apr 02 23:23:03.164289 2026] [:error] [pid 59194:tid 59227] [client 72.146.8.65:3916] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac6J1xMpAeV11hcQehxmGgAAAA4"]
[Thu Apr 02 23:23:03.713672 2026] [:error] [pid 59200:tid 59240] [client 72.146.8.65:58386] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "ac6J17fP26txrdLs3EqZzgAAAEA"]
[Thu Apr 02 23:23:04.314148 2026] [:error] [pid 59194:tid 59223] [client 72.146.8.65:39192] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6J2BMpAeV11hcQehxmHQAAAAo"]
[Thu Apr 02 23:23:04.957505 2026] [:error] [pid 59305:tid 59325] [client 72.146.8.65:14412] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6J2Kr2tV4rDwKFxKcAnwAAANA"]
[Thu Apr 02 23:23:05.655026 2026] [:error] [pid 29467:tid 29475] [client 72.146.8.65:47719] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6J2b4VUBFCJAq-WOkEJQAAAQU"]
[Thu Apr 02 23:23:06.146154 2026] [:error] [pid 29467:tid 29479] [client 72.146.8.65:14067] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac6J2r4VUBFCJAq-WOkEKAAAAQk"]
[Thu Apr 02 23:23:06.833003 2026] [:error] [pid 23927:tid 23941] [client 72.146.8.65:39197] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "ac6J2ksZwqCndhl9uKAAOQAAAYw"]
[Thu Apr 02 23:23:07.708247 2026] [:error] [pid 29467:tid 29479] [client 72.146.8.65:12070] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "ac6J274VUBFCJAq-WOkELwAAAQk"]
[Thu Apr 02 23:23:10.218956 2026] [:error] [pid 29467:tid 29490] [client 72.146.8.65:53350] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "ac6J3r4VUBFCJAq-WOkEPQAAARQ"]
[Thu Apr 02 23:23:17.253262 2026] [:error] [pid 37543:tid 37551] [client 72.146.8.65:30142] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "ac6J5Xhdk2bEYJCvILYSdgAAAUY"]
[Thu Apr 02 23:23:19.141088 2026] [:error] [pid 37543:tid 37557] [client 72.146.8.65:32162] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynjli.php"] [unique_id "ac6J53hdk2bEYJCvILYSewAAAUw"]
[Thu Apr 02 23:23:22.277809 2026] [:error] [pid 59201:tid 59271] [client 72.146.8.65:43560] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynjli.php"] [unique_id "ac6J6sAC0Tw8eL6gzZ5LtAAAAIQ"]
[Thu Apr 02 23:23:23.097128 2026] [:error] [pid 23927:tid 23938] [client 72.146.8.65:34686] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynjli.php"] [unique_id "ac6J60sZwqCndhl9uKAATwAAAYk"]
[Thu Apr 02 23:23:24.230769 2026] [:error] [pid 59194:tid 59237] [client 72.146.8.65:37020] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ynjli.php"] [unique_id "ac6J7BMpAeV11hcQehxmMwAAABg"]
[Thu Apr 02 23:23:25.736974 2026] [:error] [pid 23927:tid 23935] [client 72.146.8.65:20357] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a6.php"] [unique_id "ac6J7UsZwqCndhl9uKAAVgAAAYY"]
[Thu Apr 02 23:23:27.081974 2026] [:error] [pid 23927:tid 23937] [client 72.146.8.65:27671] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a6.php"] [unique_id "ac6J70sZwqCndhl9uKAAXAAAAYg"]
[Thu Apr 02 23:23:27.620100 2026] [:error] [pid 37543:tid 37564] [client 72.146.8.65:37032] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a6.php"] [unique_id "ac6J73hdk2bEYJCvILYSmgAAAVM"]
[Thu Apr 02 23:23:28.141914 2026] [:error] [pid 23927:tid 23936] [client 72.146.8.65:56517] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a6.php"] [unique_id "ac6J8EsZwqCndhl9uKAAYwAAAYc"]
[Thu Apr 02 23:23:28.612354 2026] [:error] [pid 59305:tid 59321] [client 72.146.8.65:22487] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6J8Kr2tV4rDwKFxKcArgAAAMw"]
[Thu Apr 02 23:23:29.093458 2026] [:error] [pid 23927:tid 23933] [client 72.146.8.65:36571] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6J8UsZwqCndhl9uKAAaQAAAYQ"]
[Thu Apr 02 23:23:29.681617 2026] [:error] [pid 59200:tid 59254] [client 72.146.8.65:27656] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6J8bfP26txrdLs3EqZ6QAAAE4"]
[Thu Apr 02 23:23:30.192204 2026] [:error] [pid 37543:tid 37551] [client 72.146.8.65:20414] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6J8nhdk2bEYJCvILYSnwAAAUY"]
[Thu Apr 02 23:23:30.761115 2026] [:error] [pid 54384:tid 54403] [client 72.146.8.65:20366] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sts.php"] [unique_id "ac6J8tWWpaby3TVN7MdORwAAAdE"]
[Thu Apr 02 23:23:31.229981 2026] [:error] [pid 37543:tid 37562] [client 72.146.8.65:39274] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sts.php"] [unique_id "ac6J83hdk2bEYJCvILYSoQAAAVE"]
[Thu Apr 02 23:23:31.859421 2026] [:error] [pid 37543:tid 37554] [client 72.146.8.65:64176] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sts.php"] [unique_id "ac6J83hdk2bEYJCvILYSogAAAUk"]
[Thu Apr 02 23:23:32.336261 2026] [:error] [pid 59200:tid 59252] [client 72.146.8.65:39249] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sts.php"] [unique_id "ac6J9LfP26txrdLs3EqZ8gAAAEw"]
[Thu Apr 02 23:23:32.863918 2026] [:error] [pid 59200:tid 59241] [client 72.146.8.65:18897] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6J9LfP26txrdLs3EqZ9AAAAEE"]
[Thu Apr 02 23:23:33.328603 2026] [:error] [pid 37543:tid 37566] [client 72.146.8.65:37016] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6J9Xhdk2bEYJCvILYSpAAAAVU"]
[Thu Apr 02 23:23:33.800611 2026] [:error] [pid 59200:tid 59261] [client 72.146.8.65:36565] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6J9bfP26txrdLs3EqZ9gAAAFU"]
[Thu Apr 02 23:23:34.288103 2026] [:error] [pid 59200:tid 59256] [client 72.146.8.65:34674] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6J9rfP26txrdLs3EqZ9wAAAFA"]
[Thu Apr 02 23:23:34.760531 2026] [:error] [pid 23927:tid 23930] [client 72.146.8.65:17323] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "ac6J9ksZwqCndhl9uKAAdwAAAYE"]
[Thu Apr 02 23:23:35.225878 2026] [:error] [pid 23927:tid 23940] [client 72.146.8.65:22490] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "ac6J90sZwqCndhl9uKAAfQAAAYs"]
[Thu Apr 02 23:23:35.863022 2026] [:error] [pid 59200:tid 59251] [client 72.146.8.65:39254] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "ac6J97fP26txrdLs3EqZ-wAAAEs"]
[Thu Apr 02 23:23:36.455395 2026] [:error] [pid 23927:tid 23932] [client 72.146.8.65:18895] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "ac6J-EsZwqCndhl9uKAAhwAAAYM"]
[Thu Apr 02 23:23:36.959561 2026] [:error] [pid 37543:tid 37547] [client 72.146.8.65:36489] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsgdjkl.php"] [unique_id "ac6J-Hhdk2bEYJCvILYSqAAAAUI"]
[Thu Apr 02 23:23:37.606144 2026] [:error] [pid 23927:tid 23942] [client 72.146.8.65:17337] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsgdjkl.php"] [unique_id "ac6J-UsZwqCndhl9uKAAjQAAAY0"]
[Thu Apr 02 23:23:38.325093 2026] [:error] [pid 59305:tid 59331] [client 72.146.8.65:12862] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsgdjkl.php"] [unique_id "ac6J-qr2tV4rDwKFxKcAwQAAANY"]
[Thu Apr 02 23:23:39.746263 2026] [:error] [pid 54384:tid 54400] [client 72.146.8.65:56516] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsgdjkl.php"] [unique_id "ac6J-9WWpaby3TVN7MdOVwAAAc4"]
[Thu Apr 02 23:23:40.518309 2026] [:error] [pid 37543:tid 37551] [client 72.146.8.65:18921] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6J_Hhdk2bEYJCvILYSrQAAAUY"]
[Thu Apr 02 23:23:41.523819 2026] [:error] [pid 23927:tid 23945] [client 72.146.8.65:17293] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6J_UsZwqCndhl9uKAAlwAAAZA"]
[Thu Apr 02 23:23:42.522618 2026] [:error] [pid 59194:tid 59216] [client 72.146.8.65:36498] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6J_hMpAeV11hcQehxmTAAAAAM"]
[Thu Apr 02 23:23:43.283993 2026] [proxy_fcgi:error] [pid 59305:tid 59319] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:43.522089 2026] [proxy_fcgi:error] [pid 59305:tid 59313] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:43.759455 2026] [proxy_fcgi:error] [pid 59305:tid 59333] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:43.995999 2026] [proxy_fcgi:error] [pid 59305:tid 59331] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:44.231862 2026] [proxy_fcgi:error] [pid 59305:tid 59330] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:44.468701 2026] [proxy_fcgi:error] [pid 59305:tid 59320] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:45.011154 2026] [proxy_fcgi:error] [pid 59305:tid 59316] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:45.247344 2026] [proxy_fcgi:error] [pid 59305:tid 59325] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:45.482497 2026] [proxy_fcgi:error] [pid 59305:tid 59327] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:45.717645 2026] [proxy_fcgi:error] [pid 59305:tid 59317] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:45.953994 2026] [proxy_fcgi:error] [pid 59305:tid 59321] [client 72.146.8.65:18930] AH01071: Got error 'Primary script unknown'
[Thu Apr 02 23:23:46.232128 2026] [:error] [pid 59305:tid 59329] [client 72.146.8.65:18930] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "ac6KAqr2tV4rDwKFxKcA1AAAANQ"]
[Thu Apr 02 23:23:47.366045 2026] [:error] [pid 37543:tid 37556] [client 72.146.8.65:12468] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "ac6KA3hdk2bEYJCvILYSuwAAAUs"]
[Thu Apr 02 23:23:48.602734 2026] [:error] [pid 59201:tid 59286] [client 72.146.8.65:64171] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "ac6KBMAC0Tw8eL6gzZ5LvQAAAJM"]
[Thu Apr 02 23:23:50.606420 2026] [:error] [pid 59194:tid 59233] [client 72.146.8.65:20014] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "ac6KBhMpAeV11hcQehxmUQAAABQ"]
[Thu Apr 02 23:23:56.357826 2026] [:error] [pid 54384:tid 54399] [client 72.146.8.65:37034] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "ac6KDNWWpaby3TVN7MdOpAAAAc0"]
[Thu Apr 02 23:23:59.538687 2026] [:error] [pid 54384:tid 54405] [client 72.146.8.65:13692] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "ac6KD9WWpaby3TVN7MdOuQAAAdM"]
[Thu Apr 02 23:24:01.009829 2026] [:error] [pid 23927:tid 23942] [client 72.146.8.65:42244] [client 72.146.8.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "ac6KEUsZwqCndhl9uKAArwAAAY0"]
[Fri Apr 03 02:00:09.919636 2026] [:error] [pid 25470:tid 25478] [client 106.195.3.179:34924] [client 106.195.3.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.195.3.179, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ac6uqXhROcck6_9HYyg17QAAAMY"]
[Fri Apr 03 02:00:09.930230 2026] [proxy_fcgi:error] [pid 25470:tid 25478] [client 106.195.3.179:34924] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 05:00:23.549431 2026] [:error] [pid 22673:tid 22770] [client 43.165.67.57:45076] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac7Y5--GlVDWdWxxwJBv4AAAAJg"]
[Fri Apr 03 10:13:06.271017 2026] [:error] [pid 40533:tid 40537] [client 43.152.72.247:47766] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ac8iMvbIAA8AViDmwstE_wAAAUI"]
[Fri Apr 03 15:24:10.060354 2026] [:error] [pid 33446:tid 33493] [client 182.42.105.144:43708] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ac9rGtg3dCqFYIIdw0q1LwAAAFA"]
[Fri Apr 03 17:11:47.668109 2026] [:error] [pid 40533:tid 40535] [client 45.131.195.82:40909] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac-EU_bIAA8AViDmwsuBfgAAAUA"]
[Fri Apr 03 19:03:32.789579 2026] [:error] [pid 33446:tid 33485] [client 103.10.31.79:37792] [client 103.10.31.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.10.31.79, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ac-ehNg3dCqFYIIdw0oWPwAAAEg"]
[Fri Apr 03 19:03:32.803761 2026] [proxy_fcgi:error] [pid 33446:tid 33485] [client 103.10.31.79:37792] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 19:03:35.273435 2026] [:error] [pid 33446:tid 33492] [client 117.198.99.189:53559] [client 117.198.99.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.198.99.189, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ac-eh9g3dCqFYIIdw0oWRgAAAE8"]
[Fri Apr 03 19:03:35.279795 2026] [proxy_fcgi:error] [pid 33446:tid 33492] [client 117.198.99.189:53559] AH01071: Got error 'Primary script unknown'
[Fri Apr 03 22:02:33.354358 2026] [:error] [pid 40562:tid 40574] [client 43.153.85.46:49406] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ac_IeTfFMXuP9zvqCeqVUgAAAYk"]
[Sat Apr 04 03:20:55.912073 2026] [proxy_fcgi:error] [pid 12089:tid 12131] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:56.153449 2026] [proxy_fcgi:error] [pid 12089:tid 12151] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:56.390735 2026] [proxy_fcgi:error] [pid 12089:tid 12130] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:56.631529 2026] [proxy_fcgi:error] [pid 12089:tid 12139] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:56.870815 2026] [proxy_fcgi:error] [pid 12089:tid 12144] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:57.112703 2026] [proxy_fcgi:error] [pid 12089:tid 12136] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:57.352078 2026] [proxy_fcgi:error] [pid 12089:tid 12138] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:57.590453 2026] [proxy_fcgi:error] [pid 12089:tid 12135] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:57.829301 2026] [proxy_fcgi:error] [pid 12089:tid 12133] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:58.120300 2026] [proxy_fcgi:error] [pid 12089:tid 12137] [client 20.250.11.224:50374] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 03:20:58.356672 2026] [:error] [pid 12089:tid 12128] [client 20.250.11.224:50374] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adATGkSCG1Z_hi7I_jKVdwAAAIE"]
[Sat Apr 04 03:20:58.828201 2026] [:error] [pid 12097:tid 12159] [client 20.250.11.224:55367] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adATGhnkcvJ01y2CY3njzwAAAMQ"]
[Sat Apr 04 03:20:59.303359 2026] [:error] [pid 12097:tid 12155] [client 20.250.11.224:55380] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adATGxnkcvJ01y2CY3nj1QAAAME"]
[Sat Apr 04 03:20:59.778965 2026] [:error] [pid 12097:tid 12163] [client 20.250.11.224:5520] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HLA-dd.php"] [unique_id "adATGxnkcvJ01y2CY3nj2AAAAMg"]
[Sat Apr 04 03:21:00.248992 2026] [:error] [pid 12081:tid 12108] [client 20.250.11.224:5554] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HLA-dd.php"] [unique_id "adATHKMJBCYerZTQdmI-owAAAEg"]
[Sat Apr 04 03:21:00.719998 2026] [:error] [pid 12081:tid 12112] [client 20.250.11.224:61492] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HLA-dd.php"] [unique_id "adATHKMJBCYerZTQdmI-pAAAAEw"]
[Sat Apr 04 03:21:01.188816 2026] [:error] [pid 12097:tid 12154] [client 20.250.11.224:46284] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HLA-dd.php"] [unique_id "adATHRnkcvJ01y2CY3nj4gAAAMA"]
[Sat Apr 04 03:21:01.660433 2026] [:error] [pid 12097:tid 12172] [client 20.250.11.224:41334] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsc.php"] [unique_id "adATHRnkcvJ01y2CY3nj5QAAANE"]
[Sat Apr 04 03:21:02.130799 2026] [:error] [pid 44382:tid 44403] [client 20.250.11.224:55369] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsc.php"] [unique_id "adATHppzSLFOX5FpZ8ru4gAAABM"]
[Sat Apr 04 03:21:02.609105 2026] [:error] [pid 12233:tid 12258] [client 20.250.11.224:41335] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsc.php"] [unique_id "adATHhQDAzkmdfiSgI0BwQAAARc"]
[Sat Apr 04 03:21:03.078469 2026] [:error] [pid 12081:tid 12106] [client 20.250.11.224:50387] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsc.php"] [unique_id "adATH6MJBCYerZTQdmI-qgAAAEY"]
[Sat Apr 04 03:21:03.548026 2026] [:error] [pid 12233:tid 12250] [client 20.250.11.224:50429] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dczem.php"] [unique_id "adATHxQDAzkmdfiSgI0ByAAAAQ8"]
[Sat Apr 04 03:21:04.015925 2026] [:error] [pid 12081:tid 12101] [client 20.250.11.224:50842] [client 20.250.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dczem.php"] [unique_id "adATIKMJBCYerZTQdmI-rAAAAEE"]
[Sat Apr 04 06:53:40.496786 2026] [:error] [pid 2567:tid 2598] [client 49.51.243.95:57428] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adBE9GJJmfRsTrAKjdSK6AAAANg"]
[Sat Apr 04 09:28:15.260630 2026] [:error] [pid 2567:tid 2594] [client 43.153.71.12:42290] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adBpL2JJmfRsTrAKjdT85wAAANQ"]
[Sat Apr 04 12:43:15.492312 2026] [:error] [pid 2457:tid 2494] [client 188.27.87.68:52065] [client 188.27.87.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.87.68, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adCW40mNHppaMd92Zpe7XQAAABE"]
[Sat Apr 04 12:43:15.497945 2026] [proxy_fcgi:error] [pid 2457:tid 2494] [client 188.27.87.68:52065] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 12:50:41.164616 2026] [:error] [pid 2458:tid 2508] [client 136.158.61.105:60343] [client 136.158.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.61.105, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adCYoSNozic5SuWqcllY5gAAAEQ"]
[Sat Apr 04 12:50:41.175100 2026] [proxy_fcgi:error] [pid 2458:tid 2508] [client 136.158.61.105:60343] AH01071: Got error 'Primary script unknown'
[Sat Apr 04 16:41:13.289997 2026] [:error] [pid 37114:tid 37130] [client 43.135.211.148:38356] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adDOqc-DnSj3fGMexeLxpgAAAQ4"]
[Sat Apr 04 17:47:32.046096 2026] [:error] [pid 2459:tid 2540] [client 173.239.214.72:33929] [client 173.239.214.72] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adDeNAefyCmu4LR_PlqXTgAAAIg"]
[Sat Apr 04 18:14:39.403651 2026] [:error] [pid 2459:tid 2532] [client 159.89.55.133:53628] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "adDkjwefyCmu4LR_Plqr1QAAAIE"]
[Sat Apr 04 20:57:36.692947 2026] [:error] [pid 2458:tid 2508] [client 43.166.128.187:42488] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adEKwCNozic5SuWqclkf5AAAAEQ"]
[Sun Apr 05 00:22:41.438835 2026] [:error] [pid 63487:tid 63496] [client 182.44.67.97:33958] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adE60WpqOMD5fJ8_5q1ZcgAAAUY"]
[Sun Apr 05 03:23:15.456421 2026] [:error] [pid 54081:tid 54166] [client 43.157.153.236:54664] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adFlI1JcnxTrqYU7_fpl_gAAANc"]
[Sun Apr 05 05:27:02.205396 2026] [:error] [pid 45305:tid 45378] [client 43.157.191.20:46250] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adGCJujDQjr7aWhjflD6HQAAAIc"]
[Sun Apr 05 06:46:52.341895 2026] [:error] [pid 45305:tid 45377] [client 182.44.2.148:50662] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adGU3OjDQjr7aWhjflBHHgAAAIY"]
[Sun Apr 05 07:35:21.595258 2026] [proxy_fcgi:error] [pid 30921:tid 30933] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:21.838030 2026] [proxy_fcgi:error] [pid 30921:tid 30945] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:22.080442 2026] [proxy_fcgi:error] [pid 30921:tid 30944] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:22.323224 2026] [proxy_fcgi:error] [pid 30921:tid 30938] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:22.566175 2026] [proxy_fcgi:error] [pid 30921:tid 30929] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:22.836420 2026] [proxy_fcgi:error] [pid 30921:tid 30931] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:23.096977 2026] [proxy_fcgi:error] [pid 30921:tid 30930] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:23.346328 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:23.588923 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:23.831480 2026] [proxy_fcgi:error] [pid 30921:tid 30940] [client 68.221.68.133:42655] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:35:24.071510 2026] [:error] [pid 30921:tid 30947] [client 68.221.68.133:42655] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adGgPGFGQVn8Q0ueB26ZBQAAARg"]
[Sun Apr 05 07:35:26.010074 2026] [:error] [pid 45409:tid 45417] [client 68.221.68.133:40385] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adGgPtHt_Oyw03gjCNgHaQAAAMY"]
[Sun Apr 05 07:35:27.356166 2026] [:error] [pid 45304:tid 45349] [client 68.221.68.133:40385] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adGgPw5jnqDKKovdRkkibQAAAEU"]
[Sun Apr 05 07:35:32.903328 2026] [:error] [pid 45304:tid 45354] [client 68.221.68.133:18989] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adGgRA5jnqDKKovdRkkifQAAAEo"]
[Sun Apr 05 07:35:39.144589 2026] [:error] [pid 45305:tid 45381] [client 68.221.68.133:20230] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adGgS-jDQjr7aWhjflBpIgAAAIo"]
[Sun Apr 05 07:35:40.990810 2026] [:error] [pid 30921:tid 30925] [client 68.221.68.133:43646] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adGgTGFGQVn8Q0ueB26ZJQAAAQI"]
[Sun Apr 05 07:35:42.604736 2026] [:error] [pid 45305:tid 45372] [client 68.221.68.133:48853] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adGgTujDQjr7aWhjflBpLQAAAIE"]
[Sun Apr 05 07:35:43.988519 2026] [:error] [pid 30921:tid 30938] [client 68.221.68.133:34426] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adGgT2FGQVn8Q0ueB26ZLAAAAQ8"]
[Sun Apr 05 07:35:46.205213 2026] [:error] [pid 30921:tid 30936] [client 68.221.68.133:48872] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adGgUmFGQVn8Q0ueB26ZNAAAAQ0"]
[Sun Apr 05 07:35:48.422714 2026] [:error] [pid 30921:tid 30923] [client 68.221.68.133:45406] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adGgVGFGQVn8Q0ueB26ZNwAAAQA"]
[Sun Apr 05 07:35:50.055416 2026] [:error] [pid 45409:tid 45425] [client 68.221.68.133:4681] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adGgVtHt_Oyw03gjCNgHswAAAM4"]
[Sun Apr 05 07:35:51.680439 2026] [:error] [pid 45305:tid 45388] [client 68.221.68.133:45376] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adGgV-jDQjr7aWhjflBpSwAAAJE"]
[Sun Apr 05 07:35:52.456560 2026] [:error] [pid 45304:tid 45366] [client 68.221.68.133:35530] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGgWA5jnqDKKovdRkkilwAAAFY"]
[Sun Apr 05 07:35:53.008554 2026] [:error] [pid 45304:tid 45355] [client 68.221.68.133:40346] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGgWQ5jnqDKKovdRkkimgAAAEs"]
[Sun Apr 05 07:35:54.093475 2026] [:error] [pid 30921:tid 30936] [client 68.221.68.133:25742] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGgWmFGQVn8Q0ueB26ZRQAAAQ0"]
[Sun Apr 05 07:35:55.338426 2026] [:error] [pid 45304:tid 45360] [client 68.221.68.133:4727] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adGgWw5jnqDKKovdRkkiogAAAFA"]
[Sun Apr 05 07:35:56.094706 2026] [:error] [pid 45303:tid 45336] [client 68.221.68.133:21872] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adGgXLboQ9eViZ4hdnmluAAAABM"]
[Sun Apr 05 07:35:56.858860 2026] [:error] [pid 45303:tid 45326] [client 68.221.68.133:19641] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adGgXLboQ9eViZ4hdnmlvQAAAAk"]
[Sun Apr 05 07:35:58.085115 2026] [:error] [pid 45304:tid 45354] [client 68.221.68.133:45391] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adGgXg5jnqDKKovdRkkirAAAAEo"]
[Sun Apr 05 07:35:59.005170 2026] [:error] [pid 45303:tid 45336] [client 68.221.68.133:19600] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adGgX7boQ9eViZ4hdnmlwgAAABM"]
[Sun Apr 05 07:36:00.209122 2026] [:error] [pid 30921:tid 30935] [client 68.221.68.133:57408] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGgYGFGQVn8Q0ueB26ZVAAAAQw"]
[Sun Apr 05 07:36:04.192871 2026] [:error] [pid 45409:tid 45426] [client 68.221.68.133:57438] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGgZNHt_Oyw03gjCNgH0AAAAM8"]
[Sun Apr 05 07:36:07.296217 2026] [:error] [pid 45305:tid 45394] [client 68.221.68.133:19051] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGgZ-jDQjr7aWhjflBpbAAAAJc"]
[Sun Apr 05 07:36:12.594432 2026] [:error] [pid 30921:tid 30924] [client 68.221.68.133:19062] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adGgbGFGQVn8Q0ueB26ZdgAAAQE"]
[Sun Apr 05 07:36:19.270091 2026] [:error] [pid 30921:tid 30930] [client 68.221.68.133:19584] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adGgc2FGQVn8Q0ueB26ZgQAAAQc"]
[Sun Apr 05 07:36:27.045957 2026] [proxy_fcgi:error] [pid 45305:tid 45374] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:27.288560 2026] [proxy_fcgi:error] [pid 45305:tid 45375] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:27.539780 2026] [proxy_fcgi:error] [pid 45305:tid 45381] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:28.113493 2026] [proxy_fcgi:error] [pid 45305:tid 45388] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:28.356501 2026] [proxy_fcgi:error] [pid 45305:tid 45391] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:28.599296 2026] [proxy_fcgi:error] [pid 45305:tid 45386] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:28.840695 2026] [proxy_fcgi:error] [pid 45305:tid 45378] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:29.100701 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:29.370775 2026] [proxy_fcgi:error] [pid 45305:tid 45385] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:29.615304 2026] [proxy_fcgi:error] [pid 45305:tid 45384] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:29.857732 2026] [proxy_fcgi:error] [pid 45305:tid 45390] [client 68.221.68.133:35638] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:36:30.096537 2026] [:error] [pid 45305:tid 45392] [client 68.221.68.133:35638] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adGgfujDQjr7aWhjflBp4QAAAJU"]
[Sun Apr 05 07:36:33.362877 2026] [:error] [pid 45409:tid 45430] [client 68.221.68.133:28193] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adGggdHt_Oyw03gjCNgIMAAAANM"]
[Sun Apr 05 07:36:36.136787 2026] [:error] [pid 45305:tid 45394] [client 68.221.68.133:51778] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adGghOjDQjr7aWhjflBp_QAAAJc"]
[Sun Apr 05 07:36:38.723503 2026] [:error] [pid 45305:tid 45395] [client 68.221.68.133:33547] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adGghujDQjr7aWhjflBqFAAAAJg"]
[Sun Apr 05 07:36:41.760179 2026] [:error] [pid 45305:tid 45378] [client 68.221.68.133:43366] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adGgiejDQjr7aWhjflBqGgAAAIc"]
[Sun Apr 05 07:36:44.383558 2026] [:error] [pid 30921:tid 30928] [client 68.221.68.133:26283] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adGgjGFGQVn8Q0ueB26ZsgAAAQU"]
[Sun Apr 05 07:36:47.418061 2026] [:error] [pid 45304:tid 45348] [client 68.221.68.133:57108] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adGgjw5jnqDKKovdRkki-QAAAEQ"]
[Sun Apr 05 07:36:52.314571 2026] [:error] [pid 45305:tid 45387] [client 68.221.68.133:4592] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adGglOjDQjr7aWhjflBqSgAAAJA"]
[Sun Apr 05 07:37:01.373193 2026] [:error] [pid 45303:tid 45340] [client 68.221.68.133:53936] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adGgnbboQ9eViZ4hdnmmIQAAABc"]
[Sun Apr 05 07:37:06.547512 2026] [:error] [pid 45303:tid 45327] [client 68.221.68.133:42972] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adGgorboQ9eViZ4hdnmmMAAAAAo"]
[Sun Apr 05 07:37:09.521420 2026] [:error] [pid 45305:tid 45391] [client 68.221.68.133:23122] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adGgpejDQjr7aWhjflBqbAAAAJQ"]
[Sun Apr 05 07:37:14.190088 2026] [:error] [pid 45305:tid 45377] [client 68.221.68.133:27748] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adGgqujDQjr7aWhjflBqegAAAIY"]
[Sun Apr 05 07:37:17.688328 2026] [:error] [pid 45305:tid 45384] [client 68.221.68.133:27758] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adGgrejDQjr7aWhjflBqhAAAAI0"]
[Sun Apr 05 07:37:21.324187 2026] [:error] [pid 45305:tid 45372] [client 68.221.68.133:47333] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adGgsejDQjr7aWhjflBqlQAAAIE"]
[Sun Apr 05 07:37:23.160161 2026] [:error] [pid 45303:tid 45337] [client 68.221.68.133:20293] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adGgs7boQ9eViZ4hdnmmUgAAABQ"]
[Sun Apr 05 07:37:24.002966 2026] [:error] [pid 45409:tid 45431] [client 68.221.68.133:36921] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adGgtNHt_Oyw03gjCNgIkQAAANQ"]
[Sun Apr 05 07:37:24.699257 2026] [:error] [pid 45305:tid 45391] [client 68.221.68.133:26254] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adGgtOjDQjr7aWhjflBqswAAAJQ"]
[Sun Apr 05 07:37:25.614697 2026] [:error] [pid 30921:tid 30943] [client 68.221.68.133:4952] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adGgtWFGQVn8Q0ueB26Z9AAAARQ"]
[Sun Apr 05 07:37:26.363632 2026] [:error] [pid 45304:tid 45366] [client 68.221.68.133:4936] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adGgtg5jnqDKKovdRkkjLgAAAFY"]
[Sun Apr 05 07:37:27.410698 2026] [:error] [pid 45304:tid 45362] [client 68.221.68.133:59059] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adGgtw5jnqDKKovdRkkjMAAAAFI"]
[Sun Apr 05 07:37:28.101780 2026] [:error] [pid 45305:tid 45375] [client 68.221.68.133:4569] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adGguOjDQjr7aWhjflBqzgAAAIQ"]
[Sun Apr 05 07:37:28.755270 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:49021] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adGguOjDQjr7aWhjflBq4QAAAII"]
[Sun Apr 05 07:37:29.522786 2026] [proxy_fcgi:error] [pid 30921:tid 30938] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:29.767156 2026] [proxy_fcgi:error] [pid 30921:tid 30947] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:30.257587 2026] [proxy_fcgi:error] [pid 30921:tid 30936] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:30.500766 2026] [proxy_fcgi:error] [pid 30921:tid 30929] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:30.743841 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:30.987390 2026] [proxy_fcgi:error] [pid 30921:tid 30925] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:31.232679 2026] [proxy_fcgi:error] [pid 30921:tid 30946] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:31.485718 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:31.729863 2026] [proxy_fcgi:error] [pid 30921:tid 30941] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:32.042864 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 68.221.68.133:23131] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:37:32.285885 2026] [:error] [pid 30921:tid 30929] [client 68.221.68.133:23131] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGgvGFGQVn8Q0ueB26aJAAAAQY"]
[Sun Apr 05 07:37:35.894607 2026] [:error] [pid 45305:tid 45388] [client 68.221.68.133:48144] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGgv-jDQjr7aWhjflBrBAAAAJE"]
[Sun Apr 05 07:37:37.287187 2026] [:error] [pid 45409:tid 45429] [client 68.221.68.133:47899] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGgwdHt_Oyw03gjCNgIsAAAANI"]
[Sun Apr 05 07:37:44.274398 2026] [:error] [pid 45305:tid 45380] [client 68.221.68.133:43631] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adGgyOjDQjr7aWhjflBrNwAAAIk"]
[Sun Apr 05 07:37:48.553457 2026] [:error] [pid 45305:tid 45382] [client 68.221.68.133:27804] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGgzOjDQjr7aWhjflBrQwAAAIs"]
[Sun Apr 05 07:37:51.444084 2026] [:error] [pid 45409:tid 45431] [client 68.221.68.133:28884] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGgz9Ht_Oyw03gjCNgI4QAAANQ"]
[Sun Apr 05 07:37:55.121831 2026] [:error] [pid 45409:tid 45432] [client 68.221.68.133:48458] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGg09Ht_Oyw03gjCNgI7gAAANU"]
[Sun Apr 05 07:37:59.219942 2026] [:error] [pid 45304:tid 45350] [client 68.221.68.133:55702] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adGg1w5jnqDKKovdRkkjYgAAAEY"]
[Sun Apr 05 07:38:04.231654 2026] [:error] [pid 45409:tid 45421] [client 68.221.68.133:43031] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGg3NHt_Oyw03gjCNgJDgAAAMo"]
[Sun Apr 05 07:38:06.292979 2026] [:error] [pid 45304:tid 45350] [client 68.221.68.133:24486] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGg3g5jnqDKKovdRkkjbQAAAEY"]
[Sun Apr 05 07:38:08.270249 2026] [:error] [pid 30921:tid 30943] [client 68.221.68.133:24463] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGg4GFGQVn8Q0ueB26aYwAAARQ"]
[Sun Apr 05 07:38:09.330155 2026] [:error] [pid 45305:tid 45383] [client 68.221.68.133:30336] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adGg4ejDQjr7aWhjflBregAAAIw"]
[Sun Apr 05 07:38:11.199124 2026] [:error] [pid 45304:tid 45349] [client 68.221.68.133:29649] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adGg4w5jnqDKKovdRkkjgQAAAEU"]
[Sun Apr 05 07:38:12.580260 2026] [:error] [pid 45304:tid 45353] [client 68.221.68.133:19249] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adGg5A5jnqDKKovdRkkjgwAAAEk"]
[Sun Apr 05 07:38:13.798017 2026] [:error] [pid 45303:tid 45328] [client 68.221.68.133:36830] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adGg5bboQ9eViZ4hdnmmqAAAAAs"]
[Sun Apr 05 07:38:15.389128 2026] [:error] [pid 45305:tid 45383] [client 68.221.68.133:23599] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adGg5-jDQjr7aWhjflBrhwAAAIw"]
[Sun Apr 05 07:38:18.343439 2026] [:error] [pid 45304:tid 45355] [client 68.221.68.133:48649] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adGg6g5jnqDKKovdRkkjkwAAAEs"]
[Sun Apr 05 07:38:19.962123 2026] [:error] [pid 45304:tid 45358] [client 68.221.68.133:21943] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adGg6w5jnqDKKovdRkkjmgAAAE4"]
[Sun Apr 05 07:38:21.275885 2026] [:error] [pid 45304:tid 45348] [client 68.221.68.133:21943] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adGg7Q5jnqDKKovdRkkjnQAAAEQ"]
[Sun Apr 05 07:38:22.536041 2026] [:error] [pid 30921:tid 30925] [client 68.221.68.133:31865] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adGg7mFGQVn8Q0ueB26aiwAAAQI"]
[Sun Apr 05 07:38:31.295948 2026] [:error] [pid 45305:tid 45384] [client 68.221.68.133:31854] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "adGg9-jDQjr7aWhjflBrxgAAAI0"]
[Sun Apr 05 07:38:34.314050 2026] [proxy_fcgi:error] [pid 45305:tid 45385] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:34.556610 2026] [proxy_fcgi:error] [pid 45305:tid 45378] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:34.800265 2026] [proxy_fcgi:error] [pid 45305:tid 45379] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:35.048965 2026] [proxy_fcgi:error] [pid 45305:tid 45392] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:35.296218 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:35.541367 2026] [proxy_fcgi:error] [pid 45305:tid 45391] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:35.807935 2026] [proxy_fcgi:error] [pid 45305:tid 45386] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:36.050571 2026] [proxy_fcgi:error] [pid 45305:tid 45389] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:36.373761 2026] [proxy_fcgi:error] [pid 45305:tid 45392] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:36.619143 2026] [proxy_fcgi:error] [pid 45305:tid 45385] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:36.951854 2026] [proxy_fcgi:error] [pid 45305:tid 45374] [client 68.221.68.133:23583] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:38:37.219494 2026] [:error] [pid 45305:tid 45372] [client 68.221.68.133:23583] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adGg_ejDQjr7aWhjflBr7wAAAIE"]
[Sun Apr 05 07:38:38.199529 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:22339] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adGg_ujDQjr7aWhjflBr9QAAAII"]
[Sun Apr 05 07:38:39.207917 2026] [:error] [pid 45303:tid 45337] [client 68.221.68.133:7151] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adGg_7boQ9eViZ4hdnmmxgAAABQ"]
[Sun Apr 05 07:38:40.248098 2026] [:error] [pid 45305:tid 45379] [client 68.221.68.133:57019] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adGhAOjDQjr7aWhjflBr_wAAAIg"]
[Sun Apr 05 07:38:41.653704 2026] [:error] [pid 45304:tid 45358] [client 68.221.68.133:46088] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adGhAQ5jnqDKKovdRkkjqgAAAE4"]
[Sun Apr 05 07:38:44.280008 2026] [:error] [pid 45305:tid 45381] [client 68.221.68.133:56808] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adGhBOjDQjr7aWhjflBsDwAAAIo"]
[Sun Apr 05 07:38:46.206293 2026] [:error] [pid 45409:tid 45423] [client 68.221.68.133:56825] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adGhBtHt_Oyw03gjCNgJUwAAAMw"]
[Sun Apr 05 07:38:47.279997 2026] [:error] [pid 30921:tid 30945] [client 68.221.68.133:7225] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adGhB2FGQVn8Q0ueB26asQAAARY"]
[Sun Apr 05 07:38:49.576827 2026] [:error] [pid 45305:tid 45384] [client 68.221.68.133:56816] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adGhCejDQjr7aWhjflBsHwAAAI0"]
[Sun Apr 05 07:38:52.985278 2026] [:error] [pid 30921:tid 30929] [client 68.221.68.133:56815] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adGhDGFGQVn8Q0ueB26avAAAAQY"]
[Sun Apr 05 07:38:59.264156 2026] [:error] [pid 45409:tid 45414] [client 68.221.68.133:24874] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adGhE9Ht_Oyw03gjCNgJfgAAAMM"]
[Sun Apr 05 07:39:08.390042 2026] [:error] [pid 45409:tid 45428] [client 68.221.68.133:28868] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adGhHNHt_Oyw03gjCNgJlAAAANE"]
[Sun Apr 05 07:39:17.461974 2026] [:error] [pid 45305:tid 45377] [client 68.221.68.133:58748] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adGhJejDQjr7aWhjflBsbgAAAIY"]
[Sun Apr 05 07:39:23.547290 2026] [:error] [pid 30921:tid 30940] [client 68.221.68.133:37336] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "adGhK2FGQVn8Q0ueB26bFwAAARE"]
[Sun Apr 05 07:39:30.578950 2026] [:error] [pid 45305:tid 45376] [client 68.221.68.133:38528] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "adGhMujDQjr7aWhjflBsqQAAAIU"]
[Sun Apr 05 07:39:34.295535 2026] [:error] [pid 45305:tid 45375] [client 68.221.68.133:48941] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "adGhNujDQjr7aWhjflBsuQAAAIQ"]
[Sun Apr 05 07:39:37.650516 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:37.896565 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:38.161056 2026] [proxy_fcgi:error] [pid 30921:tid 30926] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:38.405452 2026] [proxy_fcgi:error] [pid 30921:tid 30925] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:38.657315 2026] [proxy_fcgi:error] [pid 30921:tid 30932] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:38.900568 2026] [proxy_fcgi:error] [pid 30921:tid 30928] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:39.143718 2026] [proxy_fcgi:error] [pid 30921:tid 30935] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:39.408200 2026] [proxy_fcgi:error] [pid 30921:tid 30930] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:39.661010 2026] [proxy_fcgi:error] [pid 30921:tid 30945] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:39.904060 2026] [proxy_fcgi:error] [pid 30921:tid 30936] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:40.160408 2026] [proxy_fcgi:error] [pid 30921:tid 30924] [client 68.221.68.133:5061] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:39:40.399788 2026] [:error] [pid 30921:tid 30933] [client 68.221.68.133:5061] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adGhPGFGQVn8Q0ueB26bNgAAAQo"]
[Sun Apr 05 07:39:45.626642 2026] [:error] [pid 45409:tid 45416] [client 68.221.68.133:34945] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adGhQdHt_Oyw03gjCNgJ4gAAAMU"]
[Sun Apr 05 07:39:48.938935 2026] [:error] [pid 45303:tid 45332] [client 68.221.68.133:23791] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adGhRLboQ9eViZ4hdnmnQAAAAA8"]
[Sun Apr 05 07:39:53.663426 2026] [:error] [pid 45305:tid 45389] [client 68.221.68.133:46078] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adGhSejDQjr7aWhjflBtIwAAAJI"]
[Sun Apr 05 07:39:55.514386 2026] [:error] [pid 45303:tid 45334] [client 68.221.68.133:23768] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adGhS7boQ9eViZ4hdnmnSwAAABE"]
[Sun Apr 05 07:39:58.666019 2026] [:error] [pid 45305:tid 45374] [client 68.221.68.133:34400] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adGhTujDQjr7aWhjflBtMwAAAIM"]
[Sun Apr 05 07:40:01.757315 2026] [:error] [pid 45303:tid 45341] [client 68.221.68.133:39983] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adGhUbboQ9eViZ4hdnmnVQAAABg"]
[Sun Apr 05 07:40:05.115901 2026] [:error] [pid 45305:tid 45373] [client 68.221.68.133:20493] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adGhVejDQjr7aWhjflBtUQAAAII"]
[Sun Apr 05 07:40:10.806603 2026] [:error] [pid 45305:tid 45379] [client 68.221.68.133:21881] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "adGhWujDQjr7aWhjflBtcwAAAIg"]
[Sun Apr 05 07:40:15.294917 2026] [:error] [pid 45409:tid 45423] [client 68.221.68.133:42629] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "adGhX9Ht_Oyw03gjCNgKTgAAAMw"]
[Sun Apr 05 07:40:19.433839 2026] [:error] [pid 45303:tid 45321] [client 68.221.68.133:58902] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "adGhY7boQ9eViZ4hdnmnagAAAAQ"]
[Sun Apr 05 07:40:24.203564 2026] [:error] [pid 45305:tid 45386] [client 68.221.68.133:42630] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "adGhaOjDQjr7aWhjflBtoQAAAI8"]
[Sun Apr 05 07:40:28.857088 2026] [:error] [pid 45303:tid 45335] [client 68.221.68.133:58940] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "adGhbLboQ9eViZ4hdnmnfgAAABI"]
[Sun Apr 05 07:40:30.632956 2026] [:error] [pid 45305:tid 45391] [client 68.221.68.133:19605] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "adGhbujDQjr7aWhjflBtsgAAAJQ"]
[Sun Apr 05 07:40:34.914729 2026] [:error] [pid 30921:tid 30942] [client 68.221.68.133:40320] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "adGhcmFGQVn8Q0ueB26bkAAAARM"]
[Sun Apr 05 07:40:38.830517 2026] [:error] [pid 45409:tid 45419] [client 68.221.68.133:19639] [client 68.221.68.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "adGhdtHt_Oyw03gjCNgKcwAAAMg"]
[Sun Apr 05 07:40:41.788953 2026] [proxy_fcgi:error] [pid 45304:tid 45368] [client 68.221.68.133:19631] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:40:42.032959 2026] [proxy_fcgi:error] [pid 45304:tid 45354] [client 68.221.68.133:19631] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:40:42.279672 2026] [proxy_fcgi:error] [pid 45304:tid 45367] [client 68.221.68.133:19631] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:40:42.523769 2026] [proxy_fcgi:error] [pid 45304:tid 45358] [client 68.221.68.133:19631] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:40:42.766031 2026] [proxy_fcgi:error] [pid 45304:tid 45345] [client 68.221.68.133:19631] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:27.876174 2026] [proxy_fcgi:error] [pid 45409:tid 45427] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:28.111907 2026] [proxy_fcgi:error] [pid 45409:tid 45434] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:28.351999 2026] [proxy_fcgi:error] [pid 45409:tid 45431] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:28.596350 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:28.832137 2026] [proxy_fcgi:error] [pid 45409:tid 45427] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:29.074789 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:29.312171 2026] [proxy_fcgi:error] [pid 45409:tid 45434] [client 172.213.234.56:28427] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:45:29.857499 2026] [:error] [pid 45409:tid 45421] [client 172.213.234.56:28427] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGimdHt_Oyw03gjCNgNAAAAAMo"]
[Sun Apr 05 07:45:31.476791 2026] [:error] [pid 45303:tid 45335] [client 172.213.234.56:25855] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGim7boQ9eViZ4hdnmpdAAAABI"]
[Sun Apr 05 07:45:39.612510 2026] [:error] [pid 45409:tid 45430] [client 172.213.234.56:28470] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGio9Ht_Oyw03gjCNgNGwAAANM"]
[Sun Apr 05 07:45:42.220430 2026] [:error] [pid 45409:tid 45429] [client 172.213.234.56:58140] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGiptHt_Oyw03gjCNgNIAAAANI"]
[Sun Apr 05 07:45:44.752622 2026] [:error] [pid 45409:tid 45425] [client 172.213.234.56:45324] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adGiqNHt_Oyw03gjCNgNJQAAAM4"]
[Sun Apr 05 07:45:47.498207 2026] [:error] [pid 45303:tid 45336] [client 172.213.234.56:38590] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adGiq7boQ9eViZ4hdnmpggAAABM"]
[Sun Apr 05 07:45:50.888414 2026] [:error] [pid 45409:tid 45435] [client 172.213.234.56:28473] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adGirtHt_Oyw03gjCNgNMQAAANg"]
[Sun Apr 05 07:45:54.672875 2026] [:error] [pid 45305:tid 45395] [client 172.213.234.56:38529] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adGisujDQjr7aWhjflBxnwAAAJg"]
[Sun Apr 05 07:45:56.085109 2026] [:error] [pid 30921:tid 30924] [client 172.213.234.56:58148] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGitGFGQVn8Q0ueB26dogAAAQE"]
[Sun Apr 05 07:46:00.981049 2026] [:error] [pid 45303:tid 45317] [client 172.213.234.56:37923] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGiuLboQ9eViZ4hdnmpkgAAAAA"]
[Sun Apr 05 07:46:02.104894 2026] [:error] [pid 45304:tid 45368] [client 172.213.234.56:56666] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGiug5jnqDKKovdRkkl2wAAAFg"]
[Sun Apr 05 07:46:06.350727 2026] [:error] [pid 45409:tid 45432] [client 172.213.234.56:28443] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGivtHt_Oyw03gjCNgNSwAAANU"]
[Sun Apr 05 07:46:11.280948 2026] [:error] [pid 45305:tid 45384] [client 172.213.234.56:25809] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adGiw-jDQjr7aWhjflBxsgAAAI0"]
[Sun Apr 05 07:46:14.591211 2026] [:error] [pid 45303:tid 45329] [client 172.213.234.56:28478] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adGixrboQ9eViZ4hdnmpnAAAAAw"]
[Sun Apr 05 07:46:23.983244 2026] [:error] [pid 45305:tid 45383] [client 172.213.234.56:12748] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGiz-jDQjr7aWhjflBxyQAAAIw"]
[Sun Apr 05 07:46:25.858095 2026] [:error] [pid 45304:tid 45347] [client 172.213.234.56:37920] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGi0Q5jnqDKKovdRkkl7wAAAEM"]
[Sun Apr 05 07:46:28.358784 2026] [:error] [pid 45305:tid 45383] [client 172.213.234.56:38579] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGi1OjDQjr7aWhjflBx4wAAAIw"]
[Sun Apr 05 07:46:31.099458 2026] [proxy_fcgi:error] [pid 45305:tid 45373] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:31.342970 2026] [proxy_fcgi:error] [pid 45305:tid 45385] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:31.590161 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:31.826458 2026] [proxy_fcgi:error] [pid 45305:tid 45371] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:32.074982 2026] [proxy_fcgi:error] [pid 45305:tid 45372] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:32.318492 2026] [proxy_fcgi:error] [pid 45305:tid 45385] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:32.555229 2026] [proxy_fcgi:error] [pid 45305:tid 45395] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:32.796272 2026] [proxy_fcgi:error] [pid 45305:tid 45378] [client 172.213.234.56:38568] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 07:46:33.034706 2026] [:error] [pid 45305:tid 45379] [client 172.213.234.56:38568] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dczem.php"] [unique_id "adGi2ejDQjr7aWhjflByCAAAAIg"]
[Sun Apr 05 07:46:34.551472 2026] [:error] [pid 45304:tid 45351] [client 172.213.234.56:38546] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dczem.php"] [unique_id "adGi2g5jnqDKKovdRkkl8QAAAEc"]
[Sun Apr 05 07:46:37.232415 2026] [:error] [pid 30921:tid 30942] [client 172.213.234.56:41720] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dczem.php"] [unique_id "adGi3WFGQVn8Q0ueB26d0wAAARM"]
[Sun Apr 05 07:46:40.035180 2026] [:error] [pid 45305:tid 45374] [client 172.213.234.56:25810] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dczem.php"] [unique_id "adGi4OjDQjr7aWhjflByLAAAAIM"]
[Sun Apr 05 07:46:45.524884 2026] [:error] [pid 45409:tid 45418] [client 172.213.234.56:56685] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "adGi5dHt_Oyw03gjCNgNfwAAAMc"]
[Sun Apr 05 07:46:51.701770 2026] [:error] [pid 30921:tid 30934] [client 172.213.234.56:37862] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "adGi62FGQVn8Q0ueB26d5AAAAQs"]
[Sun Apr 05 08:45:46.778863 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:47.039793 2026] [proxy_fcgi:error] [pid 45303:tid 45328] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:47.300537 2026] [proxy_fcgi:error] [pid 45303:tid 45330] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:47.541702 2026] [proxy_fcgi:error] [pid 45303:tid 45322] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:47.783139 2026] [proxy_fcgi:error] [pid 45303:tid 45339] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:48.032779 2026] [proxy_fcgi:error] [pid 45303:tid 45337] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:48.289571 2026] [proxy_fcgi:error] [pid 45303:tid 45341] [client 20.199.97.195:57481] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:45:48.531408 2026] [:error] [pid 45303:tid 45338] [client 20.199.97.195:57481] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGwvLboQ9eViZ4hdnm7EAAAABU"]
[Sun Apr 05 08:45:50.806918 2026] [:error] [pid 45305:tid 45390] [client 20.199.97.195:47176] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGwvujDQjr7aWhjflCdVgAAAJM"]
[Sun Apr 05 08:45:52.356834 2026] [:error] [pid 45409:tid 45411] [client 20.199.97.195:59940] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGwwNHt_Oyw03gjCNgsLwAAAMA"]
[Sun Apr 05 08:45:53.602009 2026] [:error] [pid 45303:tid 45319] [client 20.199.97.195:58645] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxc.php"] [unique_id "adGwwbboQ9eViZ4hdnm7FwAAAAI"]
[Sun Apr 05 08:46:00.305135 2026] [:error] [pid 45409:tid 45414] [client 20.199.97.195:56849] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adGwyNHt_Oyw03gjCNgsQwAAAMM"]
[Sun Apr 05 08:46:14.961521 2026] [:error] [pid 45409:tid 45431] [client 20.199.97.195:47196] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGw1tHt_Oyw03gjCNgsZAAAANQ"]
[Sun Apr 05 08:46:18.224197 2026] [:error] [pid 45409:tid 45424] [client 20.199.97.195:58663] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGw2tHt_Oyw03gjCNgsZwAAAM0"]
[Sun Apr 05 08:46:20.190714 2026] [:error] [pid 45305:tid 45391] [client 20.199.97.195:46765] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGw3OjDQjr7aWhjflCdoAAAAJQ"]
[Sun Apr 05 08:46:23.297978 2026] [:error] [pid 45305:tid 45380] [client 20.199.97.195:57480] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "adGw3-jDQjr7aWhjflCdsgAAAIk"]
[Sun Apr 05 08:46:25.641429 2026] [:error] [pid 30921:tid 30940] [client 20.199.97.195:57494] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adGw4WFGQVn8Q0ueB26zwwAAARE"]
[Sun Apr 05 08:46:28.256069 2026] [:error] [pid 30921:tid 30924] [client 74.234.80.3:7165] [client 74.234.80.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGw5GFGQVn8Q0ueB26zywAAAQE"]
[Sun Apr 05 08:46:28.627194 2026] [:error] [pid 45409:tid 45415] [client 20.199.97.195:56863] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adGw5NHt_Oyw03gjCNgsdwAAAMQ"]
[Sun Apr 05 08:46:31.543909 2026] [:error] [pid 45303:tid 45341] [client 20.199.97.195:9888] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adGw57boQ9eViZ4hdnm7VAAAABg"]
[Sun Apr 05 08:46:32.755052 2026] [:error] [pid 45409:tid 45416] [client 20.199.97.195:9891] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55l453.php"] [unique_id "adGw6NHt_Oyw03gjCNgsfQAAAMU"]
[Sun Apr 05 08:46:33.875666 2026] [:error] [pid 45305:tid 45384] [client 20.199.97.195:46757] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGw6ejDQjr7aWhjflCePAAAAI0"]
[Sun Apr 05 08:46:37.062848 2026] [:error] [pid 45303:tid 45337] [client 20.199.97.195:57477] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGw7bboQ9eViZ4hdnm7WAAAABQ"]
[Sun Apr 05 08:46:38.801388 2026] [:error] [pid 45409:tid 45418] [client 20.199.97.195:9919] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGw7tHt_Oyw03gjCNgskAAAAMc"]
[Sun Apr 05 08:46:43.145530 2026] [:error] [pid 45305:tid 45388] [client 20.199.97.195:56833] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xx.php"] [unique_id "adGw8-jDQjr7aWhjflCeVwAAAJE"]
[Sun Apr 05 08:46:45.192387 2026] [:error] [pid 45304:tid 45359] [client 20.199.97.195:46767] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkyac.php"] [unique_id "adGw9Q5jnqDKKovdRkk1ewAAAE8"]
[Sun Apr 05 08:46:45.998633 2026] [:error] [pid 45304:tid 45346] [client 20.199.97.195:59919] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkyac.php"] [unique_id "adGw9Q5jnqDKKovdRkk1gAAAAEI"]
[Sun Apr 05 08:46:47.002891 2026] [:error] [pid 45305:tid 45389] [client 20.199.97.195:59905] [client 20.199.97.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkyac.php"] [unique_id "adGw9-jDQjr7aWhjflCeYAAAAJI"]
[Sun Apr 05 08:46:48.828339 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:49.079162 2026] [proxy_fcgi:error] [pid 45409:tid 45431] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:49.319140 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:49.558858 2026] [proxy_fcgi:error] [pid 45409:tid 45415] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:49.803579 2026] [proxy_fcgi:error] [pid 45409:tid 45412] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:50.044344 2026] [proxy_fcgi:error] [pid 45409:tid 45417] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:50.283947 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:50.526409 2026] [proxy_fcgi:error] [pid 45409:tid 45430] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 08:46:50.767541 2026] [proxy_fcgi:error] [pid 45409:tid 45427] [client 20.199.97.195:59958] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 09:53:11.617294 2026] [:error] [pid 45409:tid 45427] [client 74.248.146.253:57017] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAh9Ht_Oyw03gjCNhRwwAAANA"]
[Sun Apr 05 09:53:15.556072 2026] [:error] [pid 45305:tid 45385] [client 74.248.146.253:10878] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAi-jDQjr7aWhjflDSIAAAAI4"]
[Sun Apr 05 09:53:17.632553 2026] [:error] [pid 45305:tid 45372] [client 74.248.146.253:56977] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAjejDQjr7aWhjflDSKwAAAIE"]
[Sun Apr 05 09:53:21.293752 2026] [:error] [pid 45303:tid 45317] [client 74.248.146.253:34222] [client 74.248.146.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adHAkbboQ9eViZ4hdnnSMQAAAAA"]
[Sun Apr 05 11:13:30.559986 2026] [:error] [pid 45304:tid 45354] [client 43.135.211.148:60468] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adHTWg5jnqDKKovdRkli2wAAAEo"]
[Sun Apr 05 12:48:34.737013 2026] [:error] [pid 45304:tid 45358] [client 43.157.98.187:59148] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adHpog5jnqDKKovdRkl-nwAAAE4"]
[Sun Apr 05 13:31:29.484747 2026] [:error] [pid 45409:tid 45428] [client 109.107.253.17:39720] [client 109.107.253.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.107.253.17, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adHzsdHt_Oyw03gjCNjWkQAAANE"]
[Sun Apr 05 13:31:29.494751 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 109.107.253.17:39720] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 13:52:52.106360 2026] [proxy_fcgi:error] [pid 45304:tid 45363] [client 68.221.137.197:58010] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 17:39:16.968788 2026] [:error] [pid 45303:tid 45334] [client 43.159.144.16:35164] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adItxLboQ9eViZ4hdnmojAAAABE"]
[Sun Apr 05 19:01:38.650856 2026] [:error] [pid 45303:tid 45321] [client 170.106.140.110:55500] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adJBErboQ9eViZ4hdnnmvAAAAAQ"]
[Sun Apr 05 23:57:49.842577 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:50.081679 2026] [proxy_fcgi:error] [pid 45409:tid 45412] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:50.320772 2026] [proxy_fcgi:error] [pid 45409:tid 45415] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:50.575334 2026] [proxy_fcgi:error] [pid 45409:tid 45422] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:50.812813 2026] [proxy_fcgi:error] [pid 45409:tid 45421] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:51.089689 2026] [proxy_fcgi:error] [pid 45409:tid 45428] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:51.329489 2026] [proxy_fcgi:error] [pid 45409:tid 45413] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:51.588312 2026] [proxy_fcgi:error] [pid 45409:tid 45424] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:52.691214 2026] [proxy_fcgi:error] [pid 45409:tid 45416] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:52.954439 2026] [proxy_fcgi:error] [pid 45409:tid 45435] [client 20.111.51.163:65031] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:57:53.189534 2026] [:error] [pid 45409:tid 45411] [client 20.111.51.163:65031] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGgdHt_Oyw03gjCNic3AAAAMA"]
[Sun Apr 05 23:57:54.974393 2026] [:error] [pid 45303:tid 45328] [client 20.111.51.163:65072] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGgrboQ9eViZ4hdnmlngAAAAs"]
[Sun Apr 05 23:57:56.139306 2026] [:error] [pid 45303:tid 45323] [client 20.111.51.163:62774] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGhLboQ9eViZ4hdnmlpwAAAAY"]
[Sun Apr 05 23:57:57.340231 2026] [:error] [pid 45305:tid 45381] [client 20.111.51.163:65042] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adKGhejDQjr7aWhjflCfrQAAAIo"]
[Sun Apr 05 23:57:57.867784 2026] [:error] [pid 45305:tid 45387] [client 20.111.51.163:62750] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGhejDQjr7aWhjflCfrgAAAJA"]
[Sun Apr 05 23:57:58.574987 2026] [:error] [pid 45304:tid 45368] [client 20.111.51.163:62663] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGhg5jnqDKKovdRklTaAAAAFg"]
[Sun Apr 05 23:57:59.191769 2026] [:error] [pid 30921:tid 30925] [client 20.111.51.163:65029] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGh2FGQVn8Q0ueB25tCgAAAQI"]
[Sun Apr 05 23:58:00.004987 2026] [:error] [pid 45303:tid 45336] [client 20.111.51.163:62752] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adKGiLboQ9eViZ4hdnmlswAAABM"]
[Sun Apr 05 23:58:00.874422 2026] [:error] [pid 45305:tid 45386] [client 20.111.51.163:62661] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGiOjDQjr7aWhjflCftQAAAI8"]
[Sun Apr 05 23:58:01.733767 2026] [:error] [pid 30921:tid 30929] [client 20.111.51.163:65224] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGiWFGQVn8Q0ueB25tEwAAAQY"]
[Sun Apr 05 23:58:02.333092 2026] [:error] [pid 30921:tid 30937] [client 20.111.51.163:62779] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGimFGQVn8Q0ueB25tFgAAAQ4"]
[Sun Apr 05 23:58:02.981172 2026] [:error] [pid 45304:tid 45350] [client 20.111.51.163:65035] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKGig5jnqDKKovdRklTdwAAAEY"]
[Sun Apr 05 23:58:03.509447 2026] [:error] [pid 45304:tid 45347] [client 20.111.51.163:62766] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGiw5jnqDKKovdRklTeQAAAEM"]
[Sun Apr 05 23:58:04.094314 2026] [:error] [pid 30921:tid 30938] [client 20.111.51.163:65041] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGjGFGQVn8Q0ueB25tGwAAAQ8"]
[Sun Apr 05 23:58:04.882701 2026] [:error] [pid 45409:tid 45432] [client 20.111.51.163:62780] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGjNHt_Oyw03gjCNidAgAAANU"]
[Sun Apr 05 23:58:05.777791 2026] [:error] [pid 45409:tid 45413] [client 20.111.51.163:65034] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adKGjdHt_Oyw03gjCNidBwAAAMI"]
[Sun Apr 05 23:58:07.253061 2026] [:error] [pid 45304:tid 45361] [client 20.111.51.163:65079] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGjw5jnqDKKovdRklTggAAAFE"]
[Sun Apr 05 23:58:08.508481 2026] [:error] [pid 45409:tid 45434] [client 20.111.51.163:62782] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGkNHt_Oyw03gjCNidGAAAANc"]
[Sun Apr 05 23:58:09.306756 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:65053] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGkdHt_Oyw03gjCNidGwAAANA"]
[Sun Apr 05 23:58:09.993342 2026] [:error] [pid 45303:tid 45337] [client 20.111.51.163:65055] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "adKGkbboQ9eViZ4hdnml3AAAABQ"]
[Sun Apr 05 23:58:11.506217 2026] [:error] [pid 45409:tid 45421] [client 20.111.51.163:65087] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGk9Ht_Oyw03gjCNidIAAAAMo"]
[Sun Apr 05 23:58:12.971892 2026] [:error] [pid 45409:tid 45426] [client 20.111.51.163:65026] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGlNHt_Oyw03gjCNidLgAAAM8"]
[Sun Apr 05 23:58:15.087989 2026] [:error] [pid 45409:tid 45417] [client 20.111.51.163:62729] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGl9Ht_Oyw03gjCNidQQAAAMY"]
[Sun Apr 05 23:58:15.750303 2026] [:error] [pid 30921:tid 30931] [client 20.111.51.163:65292] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adKGl2FGQVn8Q0ueB25tPgAAAQg"]
[Sun Apr 05 23:58:16.310740 2026] [:error] [pid 45304:tid 45352] [client 20.111.51.163:65067] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGmA5jnqDKKovdRklTiAAAAEg"]
[Sun Apr 05 23:58:16.926741 2026] [:error] [pid 45305:tid 45374] [client 20.111.51.163:62722] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGmOjDQjr7aWhjflCfzwAAAIM"]
[Sun Apr 05 23:58:17.845817 2026] [:error] [pid 45305:tid 45376] [client 20.111.51.163:65046] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGmejDQjr7aWhjflCf0gAAAIU"]
[Sun Apr 05 23:58:18.580732 2026] [:error] [pid 45409:tid 45421] [client 20.111.51.163:65219] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adKGmtHt_Oyw03gjCNidVAAAAMo"]
[Sun Apr 05 23:58:19.324252 2026] [:error] [pid 45409:tid 45432] [client 20.111.51.163:62746] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGm9Ht_Oyw03gjCNidWQAAANU"]
[Sun Apr 05 23:58:20.034297 2026] [:error] [pid 45305:tid 45378] [client 20.111.51.163:62748] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGnOjDQjr7aWhjflCf3AAAAIc"]
[Sun Apr 05 23:58:20.528627 2026] [:error] [pid 45409:tid 45418] [client 20.111.51.163:62756] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGnNHt_Oyw03gjCNidYgAAAMc"]
[Sun Apr 05 23:58:21.024020 2026] [:error] [pid 45409:tid 45425] [client 20.111.51.163:62670] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "adKGndHt_Oyw03gjCNidZwAAAM4"]
[Sun Apr 05 23:58:21.716367 2026] [:error] [pid 45305:tid 45382] [client 20.111.51.163:65049] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGnejDQjr7aWhjflCf4gAAAIs"]
[Sun Apr 05 23:58:22.481991 2026] [:error] [pid 45305:tid 45373] [client 20.111.51.163:65085] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGnujDQjr7aWhjflCf5gAAAII"]
[Sun Apr 05 23:58:22.973099 2026] [:error] [pid 45305:tid 45378] [client 20.111.51.163:65059] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGnujDQjr7aWhjflCf6QAAAIc"]
[Sun Apr 05 23:58:23.855327 2026] [:error] [pid 45304:tid 45355] [client 20.111.51.163:62734] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKGnw5jnqDKKovdRklTlQAAAEs"]
[Sun Apr 05 23:58:24.360154 2026] [:error] [pid 45409:tid 45430] [client 20.111.51.163:64579] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGoNHt_Oyw03gjCNidcwAAANM"]
[Sun Apr 05 23:58:24.919574 2026] [:error] [pid 45409:tid 45422] [client 20.111.51.163:62775] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGoNHt_Oyw03gjCNiddgAAAMs"]
[Sun Apr 05 23:58:25.472764 2026] [:error] [pid 45409:tid 45426] [client 20.111.51.163:62749] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGodHt_Oyw03gjCNidewAAAM8"]
[Sun Apr 05 23:58:25.990539 2026] [:error] [pid 45409:tid 45417] [client 20.111.51.163:65033] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adKGodHt_Oyw03gjCNidfwAAAMY"]
[Sun Apr 05 23:58:26.558957 2026] [:error] [pid 30921:tid 30938] [client 20.111.51.163:62763] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGomFGQVn8Q0ueB25tTwAAAQ8"]
[Sun Apr 05 23:58:27.144480 2026] [:error] [pid 45409:tid 45415] [client 20.111.51.163:65036] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGo9Ht_Oyw03gjCNidhQAAAMQ"]
[Sun Apr 05 23:58:27.652884 2026] [:error] [pid 45409:tid 45420] [client 20.111.51.163:62781] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGo9Ht_Oyw03gjCNidiQAAAMk"]
[Sun Apr 05 23:58:28.139116 2026] [:error] [pid 45305:tid 45376] [client 20.111.51.163:62727] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adKGpOjDQjr7aWhjflCf-gAAAIU"]
[Sun Apr 05 23:58:28.666766 2026] [:error] [pid 45409:tid 45434] [client 20.111.51.163:62664] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGpNHt_Oyw03gjCNidmAAAANc"]
[Sun Apr 05 23:58:29.208391 2026] [:error] [pid 45303:tid 45326] [client 20.111.51.163:62665] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGpbboQ9eViZ4hdnmmJAAAAAk"]
[Sun Apr 05 23:58:29.720635 2026] [:error] [pid 45304:tid 45363] [client 20.111.51.163:62764] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGpQ5jnqDKKovdRklTmAAAAFM"]
[Sun Apr 05 23:58:30.312289 2026] [:error] [pid 45303:tid 45335] [client 20.111.51.163:62747] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adKGprboQ9eViZ4hdnmmLAAAABI"]
[Sun Apr 05 23:58:30.849603 2026] [:error] [pid 45305:tid 45374] [client 20.111.51.163:62714] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGpujDQjr7aWhjflCgBAAAAIM"]
[Sun Apr 05 23:58:31.422185 2026] [:error] [pid 30921:tid 30937] [client 20.111.51.163:62772] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGp2FGQVn8Q0ueB25tXgAAAQ4"]
[Sun Apr 05 23:58:31.906409 2026] [:error] [pid 45305:tid 45371] [client 20.111.51.163:62777] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGp-jDQjr7aWhjflCgEgAAAIA"]
[Sun Apr 05 23:58:32.382790 2026] [:error] [pid 45409:tid 45423] [client 20.111.51.163:65032] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adKGqNHt_Oyw03gjCNidpwAAAMw"]
[Sun Apr 05 23:58:32.881447 2026] [:error] [pid 45409:tid 45425] [client 20.111.51.163:65024] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGqNHt_Oyw03gjCNidqgAAAM4"]
[Sun Apr 05 23:58:33.414167 2026] [:error] [pid 45409:tid 45431] [client 20.111.51.163:65058] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGqdHt_Oyw03gjCNidrgAAANQ"]
[Sun Apr 05 23:58:34.008338 2026] [:error] [pid 30921:tid 30938] [client 20.111.51.163:62681] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGqmFGQVn8Q0ueB25tbgAAAQ8"]
[Sun Apr 05 23:58:34.526411 2026] [:error] [pid 30921:tid 30925] [client 20.111.51.163:62757] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adKGqmFGQVn8Q0ueB25tcAAAAQI"]
[Sun Apr 05 23:58:35.060293 2026] [:error] [pid 45305:tid 45380] [client 20.111.51.163:62657] [client 20.111.51.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "adKGq-jDQjr7aWhjflCgPwAAAIk"]
[Sun Apr 05 23:58:35.537492 2026] [:error] [pid 45305:tid 45387] [client 20.111.51.163:65071] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adKGq-jDQjr7aWhjflCgQQAAAJA"]
[Sun Apr 05 23:58:36.116418 2026] [:error] [pid 45409:tid 45423] [client 20.111.51.163:65061] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adKGrNHt_Oyw03gjCNidvAAAAMw"]
[Sun Apr 05 23:58:36.625666 2026] [:error] [pid 45303:tid 45324] [client 20.111.51.163:62760] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adKGrLboQ9eViZ4hdnmmPAAAAAc"]
[Sun Apr 05 23:58:37.099459 2026] [:error] [pid 45304:tid 45350] [client 20.111.51.163:62753] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adKGrQ5jnqDKKovdRklTygAAAEY"]
[Sun Apr 05 23:58:37.707403 2026] [:error] [pid 45303:tid 45330] [client 20.111.51.163:62687] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adKGrbboQ9eViZ4hdnmmQgAAAA0"]
[Sun Apr 05 23:58:38.210304 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:62762] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adKGrtHt_Oyw03gjCNidwwAAANA"]
[Sun Apr 05 23:58:38.734782 2026] [:error] [pid 45305:tid 45375] [client 20.111.51.163:65070] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adKGrujDQjr7aWhjflCgSQAAAIQ"]
[Sun Apr 05 23:58:39.332150 2026] [:error] [pid 45409:tid 45426] [client 20.111.51.163:65052] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adKGr9Ht_Oyw03gjCNidyQAAAM8"]
[Sun Apr 05 23:58:39.898501 2026] [:error] [pid 45409:tid 45425] [client 20.111.51.163:62656] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adKGr9Ht_Oyw03gjCNidzQAAAM4"]
[Sun Apr 05 23:58:40.438936 2026] [:error] [pid 45303:tid 45320] [client 20.111.51.163:62732] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adKGsLboQ9eViZ4hdnmmTwAAAAM"]
[Sun Apr 05 23:58:40.921250 2026] [:error] [pid 45303:tid 45325] [client 20.111.51.163:62658] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adKGsLboQ9eViZ4hdnmmUQAAAAg"]
[Sun Apr 05 23:58:41.631502 2026] [:error] [pid 30921:tid 30931] [client 20.111.51.163:65025] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adKGsWFGQVn8Q0ueB25tigAAAQg"]
[Sun Apr 05 23:58:42.493941 2026] [:error] [pid 45303:tid 45321] [client 20.111.51.163:65302] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adKGsrboQ9eViZ4hdnmmVQAAAAQ"]
[Sun Apr 05 23:58:44.928642 2026] [:error] [pid 30921:tid 30924] [client 20.111.51.163:65286] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adKGtGFGQVn8Q0ueB25tkwAAAQE"]
[Sun Apr 05 23:58:45.678995 2026] [:error] [pid 45409:tid 45415] [client 20.111.51.163:65074] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adKGtdHt_Oyw03gjCNid8gAAAMQ"]
[Sun Apr 05 23:58:47.134713 2026] [:error] [pid 45409:tid 45415] [client 20.111.51.163:65289] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adKGt9Ht_Oyw03gjCNid_wAAAMQ"]
[Sun Apr 05 23:58:48.410179 2026] [:error] [pid 45409:tid 45433] [client 20.111.51.163:62693] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adKGuNHt_Oyw03gjCNieCAAAANY"]
[Sun Apr 05 23:58:49.830085 2026] [:error] [pid 45409:tid 45419] [client 20.111.51.163:62666] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adKGudHt_Oyw03gjCNieGwAAAMg"]
[Sun Apr 05 23:58:51.718064 2026] [:error] [pid 30921:tid 30936] [client 20.111.51.163:65342] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adKGu2FGQVn8Q0ueB25tpAAAAQ0"]
[Sun Apr 05 23:58:53.506213 2026] [proxy_fcgi:error] [pid 45409:tid 45420] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:53.754922 2026] [proxy_fcgi:error] [pid 45409:tid 45429] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:54.018317 2026] [proxy_fcgi:error] [pid 45409:tid 45421] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:54.705630 2026] [proxy_fcgi:error] [pid 45409:tid 45414] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:54.946992 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:55.186599 2026] [proxy_fcgi:error] [pid 45409:tid 45416] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:55.425989 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:55.666867 2026] [proxy_fcgi:error] [pid 45409:tid 45430] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:55.905326 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:56.307662 2026] [proxy_fcgi:error] [pid 45409:tid 45419] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:56.556634 2026] [proxy_fcgi:error] [pid 45409:tid 45426] [client 20.111.51.163:62770] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:58:56.791609 2026] [:error] [pid 45409:tid 45425] [client 20.111.51.163:62770] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/villain.php"] [unique_id "adKGwNHt_Oyw03gjCNieUQAAAM4"]
[Sun Apr 05 23:58:57.821643 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:62708] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/villain.php"] [unique_id "adKGwdHt_Oyw03gjCNieWgAAANA"]
[Sun Apr 05 23:58:58.899811 2026] [:error] [pid 45409:tid 45435] [client 20.111.51.163:65301] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/villain.php"] [unique_id "adKGwtHt_Oyw03gjCNieZQAAANg"]
[Sun Apr 05 23:58:59.640917 2026] [:error] [pid 45304:tid 45361] [client 20.111.51.163:65057] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/villain.php"] [unique_id "adKGww5jnqDKKovdRklT5wAAAFE"]
[Sun Apr 05 23:59:00.570973 2026] [:error] [pid 45304:tid 45359] [client 20.111.51.163:62668] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-db.php"] [unique_id "adKGxA5jnqDKKovdRklT6AAAAE8"]
[Sun Apr 05 23:59:02.254454 2026] [:error] [pid 45304:tid 45353] [client 20.111.51.163:62771] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-db.php"] [unique_id "adKGxg5jnqDKKovdRklT7AAAAEk"]
[Sun Apr 05 23:59:04.037251 2026] [:error] [pid 30921:tid 30936] [client 20.111.51.163:65068] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-db.php"] [unique_id "adKGyGFGQVn8Q0ueB25txwAAAQ0"]
[Sun Apr 05 23:59:07.601324 2026] [:error] [pid 45304:tid 45347] [client 20.111.51.163:65222] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-db.php"] [unique_id "adKGyw5jnqDKKovdRklT9QAAAEM"]
[Sun Apr 05 23:59:09.954609 2026] [:error] [pid 45304:tid 45356] [client 20.111.51.163:62697] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adKGzQ5jnqDKKovdRklUAAAAAEw"]
[Sun Apr 05 23:59:11.193454 2026] [:error] [pid 30921:tid 30933] [client 20.111.51.163:62783] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adKGz2FGQVn8Q0ueB25t5wAAAQo"]
[Sun Apr 05 23:59:12.683859 2026] [:error] [pid 45409:tid 45429] [client 20.111.51.163:65303] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adKG0NHt_Oyw03gjCNieswAAANI"]
[Sun Apr 05 23:59:13.963420 2026] [:error] [pid 45305:tid 45392] [client 20.111.51.163:62735] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adKG0ejDQjr7aWhjflCghgAAAJU"]
[Sun Apr 05 23:59:15.164923 2026] [:error] [pid 30921:tid 30945] [client 20.111.51.163:65295] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "adKG02FGQVn8Q0ueB25t8gAAARY"]
[Sun Apr 05 23:59:15.807515 2026] [:error] [pid 30921:tid 30927] [client 20.111.51.163:62671] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "adKG02FGQVn8Q0ueB25t9wAAAQQ"]
[Sun Apr 05 23:59:16.640533 2026] [:error] [pid 45303:tid 45319] [client 20.111.51.163:65048] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "adKG1LboQ9eViZ4hdnmmnQAAAAI"]
[Sun Apr 05 23:59:17.282351 2026] [:error] [pid 45304:tid 45351] [client 20.111.51.163:62782] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an7.php"] [unique_id "adKG1Q5jnqDKKovdRklUBgAAAEc"]
[Sun Apr 05 23:59:17.984286 2026] [:error] [pid 45409:tid 45414] [client 20.111.51.163:65078] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adKG1dHt_Oyw03gjCNiexwAAAMM"]
[Sun Apr 05 23:59:18.607392 2026] [:error] [pid 45304:tid 45356] [client 20.111.51.163:62680] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adKG1g5jnqDKKovdRklUBwAAAEw"]
[Sun Apr 05 23:59:19.489814 2026] [:error] [pid 45303:tid 45325] [client 20.111.51.163:62677] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adKG17boQ9eViZ4hdnmmpwAAAAg"]
[Sun Apr 05 23:59:20.208470 2026] [:error] [pid 45303:tid 45334] [client 20.111.51.163:62685] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adKG2LboQ9eViZ4hdnmmqgAAABE"]
[Sun Apr 05 23:59:21.006808 2026] [:error] [pid 45304:tid 45364] [client 20.111.51.163:62754] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uxijj.php"] [unique_id "adKG2Q5jnqDKKovdRklUDQAAAFQ"]
[Sun Apr 05 23:59:21.732515 2026] [:error] [pid 45303:tid 45323] [client 20.111.51.163:62737] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uxijj.php"] [unique_id "adKG2bboQ9eViZ4hdnmmrwAAAAY"]
[Sun Apr 05 23:59:22.328788 2026] [:error] [pid 45303:tid 45330] [client 20.111.51.163:65060] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uxijj.php"] [unique_id "adKG2rboQ9eViZ4hdnmmswAAAA0"]
[Sun Apr 05 23:59:22.971400 2026] [:error] [pid 45409:tid 45420] [client 20.111.51.163:62739] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uxijj.php"] [unique_id "adKG2tHt_Oyw03gjCNie1gAAAMk"]
[Sun Apr 05 23:59:24.209754 2026] [:error] [pid 45303:tid 45336] [client 20.111.51.163:62723] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs7.php"] [unique_id "adKG3LboQ9eViZ4hdnmmuAAAABM"]
[Sun Apr 05 23:59:25.319727 2026] [:error] [pid 30921:tid 30944] [client 20.111.51.163:64582] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs7.php"] [unique_id "adKG3WFGQVn8Q0ueB25uBQAAARU"]
[Sun Apr 05 23:59:25.995014 2026] [:error] [pid 45303:tid 45324] [client 20.111.51.163:65220] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs7.php"] [unique_id "adKG3bboQ9eViZ4hdnmmwQAAAAc"]
[Sun Apr 05 23:59:27.564253 2026] [:error] [pid 45409:tid 45420] [client 20.111.51.163:62743] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs7.php"] [unique_id "adKG39Ht_Oyw03gjCNie3wAAAMk"]
[Sun Apr 05 23:59:28.963811 2026] [:error] [pid 45304:tid 45362] [client 20.111.51.163:65065] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool2.php"] [unique_id "adKG4A5jnqDKKovdRklUGAAAAFI"]
[Sun Apr 05 23:59:31.223013 2026] [:error] [pid 45304:tid 45361] [client 20.111.51.163:62776] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool2.php"] [unique_id "adKG4w5jnqDKKovdRklUKAAAAFE"]
[Sun Apr 05 23:59:32.420195 2026] [:error] [pid 45409:tid 45420] [client 20.111.51.163:62662] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool2.php"] [unique_id "adKG5NHt_Oyw03gjCNie6wAAAMk"]
[Sun Apr 05 23:59:33.585628 2026] [:error] [pid 30921:tid 30945] [client 20.111.51.163:65086] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool2.php"] [unique_id "adKG5WFGQVn8Q0ueB25uDgAAARY"]
[Sun Apr 05 23:59:34.722595 2026] [:error] [pid 45409:tid 45428] [client 20.111.51.163:65309] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zjllx.php"] [unique_id "adKG5tHt_Oyw03gjCNie8wAAANE"]
[Sun Apr 05 23:59:35.604320 2026] [:error] [pid 45305:tid 45377] [client 20.111.51.163:65050] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zjllx.php"] [unique_id "adKG5-jDQjr7aWhjflCgpAAAAIY"]
[Sun Apr 05 23:59:37.074842 2026] [:error] [pid 45303:tid 45333] [client 20.111.51.163:62694] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zjllx.php"] [unique_id "adKG6bboQ9eViZ4hdnmm6QAAABA"]
[Sun Apr 05 23:59:38.981201 2026] [:error] [pid 45304:tid 45357] [client 20.111.51.163:62761] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zjllx.php"] [unique_id "adKG6g5jnqDKKovdRklUMgAAAE0"]
[Sun Apr 05 23:59:39.772811 2026] [:error] [pid 45305:tid 45393] [client 20.111.51.163:65076] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "adKG6-jDQjr7aWhjflCgqQAAAJY"]
[Sun Apr 05 23:59:40.693755 2026] [:error] [pid 45305:tid 45384] [client 20.111.51.163:62674] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "adKG7OjDQjr7aWhjflCgqwAAAI0"]
[Sun Apr 05 23:59:41.683947 2026] [:error] [pid 30921:tid 30939] [client 20.111.51.163:62713] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "adKG7WFGQVn8Q0ueB25uGAAAARA"]
[Sun Apr 05 23:59:42.459929 2026] [:error] [pid 45409:tid 45423] [client 20.111.51.163:62701] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2.php"] [unique_id "adKG7tHt_Oyw03gjCNifAAAAAMw"]
[Sun Apr 05 23:59:43.515127 2026] [:error] [pid 45409:tid 45435] [client 20.111.51.163:65056] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adKG79Ht_Oyw03gjCNifCQAAANg"]
[Sun Apr 05 23:59:44.635998 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:62759] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adKG8NHt_Oyw03gjCNifDgAAANA"]
[Sun Apr 05 23:59:46.538673 2026] [:error] [pid 45409:tid 45434] [client 20.111.51.163:65037] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adKG8tHt_Oyw03gjCNifEgAAANc"]
[Sun Apr 05 23:59:47.574099 2026] [:error] [pid 45409:tid 45430] [client 20.111.51.163:65045] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adKG89Ht_Oyw03gjCNifFwAAANM"]
[Sun Apr 05 23:59:48.701200 2026] [:error] [pid 45303:tid 45341] [client 20.111.51.163:62728] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adKG9LboQ9eViZ4hdnmm-wAAABg"]
[Sun Apr 05 23:59:49.711379 2026] [:error] [pid 45409:tid 45434] [client 20.111.51.163:65039] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adKG9dHt_Oyw03gjCNifJAAAANc"]
[Sun Apr 05 23:59:50.799028 2026] [:error] [pid 45303:tid 45317] [client 20.111.51.163:65340] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adKG9rboQ9eViZ4hdnmnAgAAAAA"]
[Sun Apr 05 23:59:51.671710 2026] [:error] [pid 30921:tid 30942] [client 20.111.51.163:65228] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adKG92FGQVn8Q0ueB25uKAAAARM"]
[Sun Apr 05 23:59:52.392261 2026] [:error] [pid 45304:tid 45347] [client 20.111.51.163:65240] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dbc.php"] [unique_id "adKG-A5jnqDKKovdRklURQAAAEM"]
[Sun Apr 05 23:59:53.229917 2026] [:error] [pid 45305:tid 45373] [client 20.111.51.163:62726] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dbc.php"] [unique_id "adKG-ejDQjr7aWhjflCgxwAAAII"]
[Sun Apr 05 23:59:53.808285 2026] [:error] [pid 45305:tid 45380] [client 20.111.51.163:62689] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dbc.php"] [unique_id "adKG-ejDQjr7aWhjflCgyQAAAIk"]
[Sun Apr 05 23:59:54.523317 2026] [:error] [pid 45303:tid 45317] [client 20.111.51.163:62716] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dbc.php"] [unique_id "adKG-rboQ9eViZ4hdnmnEQAAAAA"]
[Sun Apr 05 23:59:55.333637 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:65054] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adKG-9Ht_Oyw03gjCNifOQAAANA"]
[Sun Apr 05 23:59:56.184503 2026] [proxy_fcgi:error] [pid 30921:tid 30924] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:56.423468 2026] [proxy_fcgi:error] [pid 30921:tid 30927] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:56.666043 2026] [proxy_fcgi:error] [pid 30921:tid 30933] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:56.912252 2026] [proxy_fcgi:error] [pid 30921:tid 30925] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:57.158029 2026] [proxy_fcgi:error] [pid 30921:tid 30942] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:57.397491 2026] [proxy_fcgi:error] [pid 30921:tid 30936] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:57.638087 2026] [proxy_fcgi:error] [pid 30921:tid 30923] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:57.876579 2026] [proxy_fcgi:error] [pid 30921:tid 30943] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:58.116220 2026] [proxy_fcgi:error] [pid 30921:tid 30937] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:58.355688 2026] [proxy_fcgi:error] [pid 30921:tid 30940] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:58.595340 2026] [proxy_fcgi:error] [pid 30921:tid 30924] [client 20.111.51.163:65051] AH01071: Got error 'Primary script unknown'
[Sun Apr 05 23:59:58.847773 2026] [:error] [pid 30921:tid 30929] [client 20.111.51.163:65051] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "adKG_mFGQVn8Q0ueB25uQAAAAQY"]
[Mon Apr 06 00:00:01.582799 2026] [:error] [pid 45303:tid 45337] [client 20.111.51.163:65298] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "adKHAbboQ9eViZ4hdnmnIAAAABQ"]
[Mon Apr 06 00:00:03.348880 2026] [:error] [pid 45409:tid 45420] [client 20.111.51.163:65063] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "adKHA9Ht_Oyw03gjCNifWwAAAMk"]
[Mon Apr 06 00:00:09.936461 2026] [:error] [pid 45305:tid 45383] [client 20.111.51.163:62744] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "adKHCejDQjr7aWhjflCg6wAAAIw"]
[Mon Apr 06 00:00:12.510436 2026] [:error] [pid 45409:tid 45414] [client 20.111.51.163:65252] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adKHDNHt_Oyw03gjCNifdgAAAMM"]
[Mon Apr 06 00:00:13.316726 2026] [:error] [pid 45305:tid 45379] [client 20.111.51.163:62683] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adKHDejDQjr7aWhjflCg9AAAAIg"]
[Mon Apr 06 00:00:14.067398 2026] [:error] [pid 45409:tid 45425] [client 20.111.51.163:62767] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adKHDtHt_Oyw03gjCNifegAAAM4"]
[Mon Apr 06 00:00:14.653322 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:65216] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adKHDtHt_Oyw03gjCNifgQAAANA"]
[Mon Apr 06 00:00:15.239701 2026] [:error] [pid 45303:tid 45336] [client 20.111.51.163:65283] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adKHD7boQ9eViZ4hdnmnRAAAABM"]
[Mon Apr 06 00:00:15.791287 2026] [:error] [pid 45409:tid 45422] [client 20.111.51.163:62660] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adKHD9Ht_Oyw03gjCNifhwAAAMs"]
[Mon Apr 06 00:00:16.473145 2026] [:error] [pid 30921:tid 30938] [client 20.111.51.163:65084] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adKHEGFGQVn8Q0ueB25uXwAAAQ8"]
[Mon Apr 06 00:00:17.169566 2026] [:error] [pid 45303:tid 45324] [client 20.111.51.163:65290] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adKHEbboQ9eViZ4hdnmnTQAAAAc"]
[Mon Apr 06 00:00:18.359558 2026] [:error] [pid 30921:tid 30937] [client 20.111.51.163:62778] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adKHEmFGQVn8Q0ueB25uagAAAQ4"]
[Mon Apr 06 00:00:18.956297 2026] [:error] [pid 30921:tid 30931] [client 20.111.51.163:65073] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adKHEmFGQVn8Q0ueB25ubAAAAQg"]
[Mon Apr 06 00:00:19.621894 2026] [:error] [pid 45303:tid 45341] [client 20.111.51.163:62730] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adKHE7boQ9eViZ4hdnmnVQAAABg"]
[Mon Apr 06 00:00:20.148360 2026] [:error] [pid 45305:tid 45388] [client 20.111.51.163:65236] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adKHFOjDQjr7aWhjflCg-wAAAJE"]
[Mon Apr 06 00:00:20.722670 2026] [:error] [pid 45304:tid 45363] [client 20.111.51.163:62705] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adKHFA5jnqDKKovdRklUZwAAAFM"]
[Mon Apr 06 00:00:21.229021 2026] [:error] [pid 45409:tid 45414] [client 20.111.51.163:62667] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adKHFdHt_Oyw03gjCNifowAAAMM"]
[Mon Apr 06 00:00:21.808653 2026] [:error] [pid 45303:tid 45340] [client 20.111.51.163:62768] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adKHFbboQ9eViZ4hdnmnWQAAABc"]
[Mon Apr 06 00:00:22.317457 2026] [:error] [pid 45303:tid 45319] [client 20.111.51.163:65341] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adKHFrboQ9eViZ4hdnmnWwAAAAI"]
[Mon Apr 06 00:00:22.962907 2026] [:error] [pid 45303:tid 45330] [client 20.111.51.163:62700] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adKHFrboQ9eViZ4hdnmnXQAAAA0"]
[Mon Apr 06 00:00:23.723959 2026] [:error] [pid 45304:tid 45345] [client 20.111.51.163:65308] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adKHFw5jnqDKKovdRklUaQAAAEE"]
[Mon Apr 06 00:00:24.339489 2026] [:error] [pid 45305:tid 45390] [client 20.111.51.163:62717] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adKHGOjDQjr7aWhjflChAwAAAJM"]
[Mon Apr 06 00:00:24.839428 2026] [:error] [pid 45305:tid 45373] [client 20.111.51.163:65312] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adKHGOjDQjr7aWhjflChBQAAAII"]
[Mon Apr 06 00:00:25.495077 2026] [:error] [pid 45305:tid 45383] [client 20.111.51.163:62688] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "adKHGejDQjr7aWhjflChCAAAAIw"]
[Mon Apr 06 00:00:26.337778 2026] [:error] [pid 30921:tid 30940] [client 20.111.51.163:65242] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "adKHGmFGQVn8Q0ueB25udwAAARE"]
[Mon Apr 06 00:00:27.028308 2026] [:error] [pid 45305:tid 45375] [client 20.111.51.163:65040] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "adKHG-jDQjr7aWhjflChDgAAAIQ"]
[Mon Apr 06 00:00:27.649692 2026] [:error] [pid 45303:tid 45327] [client 20.111.51.163:62679] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yussef.php"] [unique_id "adKHG7boQ9eViZ4hdnmnZgAAAAo"]
[Mon Apr 06 00:00:28.153705 2026] [:error] [pid 45303:tid 45330] [client 20.111.51.163:65028] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "adKHHLboQ9eViZ4hdnmnZwAAAA0"]
[Mon Apr 06 00:00:28.650011 2026] [:error] [pid 30921:tid 30924] [client 20.111.51.163:62758] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "adKHHGFGQVn8Q0ueB25uewAAAQE"]
[Mon Apr 06 00:00:29.246716 2026] [:error] [pid 45409:tid 45422] [client 20.111.51.163:65274] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "adKHHdHt_Oyw03gjCNifwwAAAMs"]
[Mon Apr 06 00:00:29.774724 2026] [:error] [pid 45303:tid 45320] [client 20.111.51.163:62765] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "adKHHbboQ9eViZ4hdnmncQAAAAM"]
[Mon Apr 06 00:00:30.414677 2026] [:error] [pid 45303:tid 45321] [client 20.111.51.163:65306] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adKHHrboQ9eViZ4hdnmndgAAAAQ"]
[Mon Apr 06 00:00:30.888116 2026] [:error] [pid 45304:tid 45352] [client 20.111.51.163:62773] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adKHHg5jnqDKKovdRklUeQAAAEg"]
[Mon Apr 06 00:00:31.408699 2026] [:error] [pid 45409:tid 45425] [client 20.111.51.163:65218] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adKHH9Ht_Oyw03gjCNifzAAAAM4"]
[Mon Apr 06 00:00:32.133371 2026] [:error] [pid 45409:tid 45422] [client 20.111.51.163:65285] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adKHINHt_Oyw03gjCNif0AAAAMs"]
[Mon Apr 06 00:00:32.701956 2026] [:error] [pid 45304:tid 45363] [client 20.111.51.163:65280] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adKHIA5jnqDKKovdRklUfgAAAFM"]
[Mon Apr 06 00:00:33.955855 2026] [:error] [pid 45303:tid 45321] [client 20.111.51.163:65304] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adKHIbboQ9eViZ4hdnmngAAAAAQ"]
[Mon Apr 06 00:00:35.490339 2026] [:error] [pid 45305:tid 45377] [client 20.111.51.163:64642] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adKHI-jDQjr7aWhjflChIQAAAIY"]
[Mon Apr 06 00:00:36.973120 2026] [:error] [pid 45304:tid 45345] [client 20.111.51.163:65313] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adKHJA5jnqDKKovdRklUggAAAEE"]
[Mon Apr 06 00:00:45.527668 2026] [:error] [pid 30921:tid 30940] [client 20.111.51.163:62669] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "adKHLWFGQVn8Q0ueB25uqQAAARE"]
[Mon Apr 06 00:00:47.568321 2026] [:error] [pid 45409:tid 45426] [client 20.111.51.163:62741] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "adKHL9Ht_Oyw03gjCNif9wAAAM8"]
[Mon Apr 06 00:00:50.467161 2026] [:error] [pid 30921:tid 30932] [client 20.111.51.163:62689] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x123x.php"] [unique_id "adKHMmFGQVn8Q0ueB25uswAAAQk"]
[Mon Apr 06 00:00:55.592333 2026] [:error] [pid 30921:tid 30925] [client 20.111.51.163:65248] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "adKHN2FGQVn8Q0ueB25uvgAAAQI"]
[Mon Apr 06 00:00:57.791297 2026] [:error] [pid 45409:tid 45416] [client 20.111.51.163:62740] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "adKHOdHt_Oyw03gjCNigPQAAAMU"]
[Mon Apr 06 00:00:59.393716 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:59.633307 2026] [proxy_fcgi:error] [pid 45303:tid 45326] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:00:59.876044 2026] [proxy_fcgi:error] [pid 45303:tid 45318] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:00.858599 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:01.100849 2026] [proxy_fcgi:error] [pid 45303:tid 45328] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:01.705103 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:01.943801 2026] [proxy_fcgi:error] [pid 45303:tid 45319] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:02.192173 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:02.432464 2026] [proxy_fcgi:error] [pid 45303:tid 45334] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:03.027683 2026] [proxy_fcgi:error] [pid 45303:tid 45332] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:03.266193 2026] [proxy_fcgi:error] [pid 45303:tid 45318] [client 20.111.51.163:62672] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:01:03.941775 2026] [:error] [pid 45303:tid 45339] [client 20.111.51.163:62672] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "adKHP7boQ9eViZ4hdnmnygAAABY"]
[Mon Apr 06 00:01:06.719168 2026] [:error] [pid 45409:tid 45435] [client 20.111.51.163:64585] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "adKHQtHt_Oyw03gjCNigUgAAANg"]
[Mon Apr 06 00:01:08.259677 2026] [:error] [pid 45409:tid 45412] [client 20.111.51.163:65328] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "adKHRNHt_Oyw03gjCNigWwAAAME"]
[Mon Apr 06 00:01:10.779795 2026] [:error] [pid 45409:tid 45433] [client 20.111.51.163:65300] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "adKHRtHt_Oyw03gjCNigaQAAANY"]
[Mon Apr 06 00:01:11.914020 2026] [:error] [pid 30921:tid 30932] [client 20.111.51.163:65315] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adKHR2FGQVn8Q0ueB25u2AAAAQk"]
[Mon Apr 06 00:01:13.905805 2026] [:error] [pid 45303:tid 45332] [client 20.111.51.163:65234] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adKHSbboQ9eViZ4hdnmn4wAAAA8"]
[Mon Apr 06 00:01:15.372081 2026] [:error] [pid 30921:tid 30933] [client 20.111.51.163:65297] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adKHS2FGQVn8Q0ueB25u4gAAAQo"]
[Mon Apr 06 00:01:16.392486 2026] [:error] [pid 45303:tid 45333] [client 20.111.51.163:65030] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adKHTLboQ9eViZ4hdnmn7wAAABA"]
[Mon Apr 06 00:01:17.647994 2026] [:error] [pid 45409:tid 45412] [client 20.111.51.163:62676] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adKHTdHt_Oyw03gjCNigkgAAAME"]
[Mon Apr 06 00:01:19.114498 2026] [:error] [pid 45304:tid 45368] [client 20.111.51.163:65310] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adKHTw5jnqDKKovdRklUrwAAAFg"]
[Mon Apr 06 00:01:20.489439 2026] [:error] [pid 45304:tid 45362] [client 20.111.51.163:65268] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adKHUA5jnqDKKovdRklUtgAAAFI"]
[Mon Apr 06 00:01:21.002323 2026] [:error] [pid 45409:tid 45430] [client 20.111.51.163:62675] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adKHUdHt_Oyw03gjCNignwAAANM"]
[Mon Apr 06 00:01:21.639490 2026] [:error] [pid 45303:tid 45330] [client 20.111.51.163:65038] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adKHUbboQ9eViZ4hdnmn_QAAAA0"]
[Mon Apr 06 00:01:22.321716 2026] [:error] [pid 45303:tid 45317] [client 20.111.51.163:65230] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adKHUrboQ9eViZ4hdnmoAwAAAAA"]
[Mon Apr 06 00:01:23.916004 2026] [:error] [pid 45303:tid 45328] [client 20.111.51.163:62695] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adKHU7boQ9eViZ4hdnmoCQAAAAs"]
[Mon Apr 06 00:01:25.194773 2026] [:error] [pid 45304:tid 45344] [client 20.111.51.163:62742] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adKHVQ5jnqDKKovdRklUwwAAAEA"]
[Mon Apr 06 00:01:26.063503 2026] [:error] [pid 45304:tid 45359] [client 20.111.51.163:62724] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ccv.php"] [unique_id "adKHVg5jnqDKKovdRklUxwAAAE8"]
[Mon Apr 06 00:01:26.835495 2026] [:error] [pid 45304:tid 45368] [client 20.111.51.163:65272] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ccv.php"] [unique_id "adKHVg5jnqDKKovdRklUywAAAFg"]
[Mon Apr 06 00:01:27.409759 2026] [:error] [pid 45304:tid 45344] [client 20.111.51.163:64653] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ccv.php"] [unique_id "adKHVw5jnqDKKovdRklU0QAAAEA"]
[Mon Apr 06 00:01:28.013041 2026] [:error] [pid 45304:tid 45356] [client 20.111.51.163:65332] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ccv.php"] [unique_id "adKHWA5jnqDKKovdRklU1AAAAEw"]
[Mon Apr 06 00:01:28.603847 2026] [:error] [pid 45303:tid 45332] [client 20.111.51.163:65066] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wo.php"] [unique_id "adKHWLboQ9eViZ4hdnmoFwAAAA8"]
[Mon Apr 06 00:01:29.136371 2026] [:error] [pid 45304:tid 45357] [client 20.111.51.163:62696] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wo.php"] [unique_id "adKHWQ5jnqDKKovdRklU2QAAAE0"]
[Mon Apr 06 00:01:29.682619 2026] [:error] [pid 45305:tid 45389] [client 20.111.51.163:65064] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wo.php"] [unique_id "adKHWejDQjr7aWhjflChiAAAAJI"]
[Mon Apr 06 00:01:30.321163 2026] [:error] [pid 45305:tid 45393] [client 20.111.51.163:65239] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wo.php"] [unique_id "adKHWujDQjr7aWhjflChiQAAAJY"]
[Mon Apr 06 00:01:30.805689 2026] [:error] [pid 45409:tid 45430] [client 20.111.51.163:62733] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adKHWtHt_Oyw03gjCNigvAAAANM"]
[Mon Apr 06 00:01:31.293096 2026] [:error] [pid 30921:tid 30929] [client 20.111.51.163:65273] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adKHW2FGQVn8Q0ueB25u6AAAAQY"]
[Mon Apr 06 00:01:31.908376 2026] [:error] [pid 45409:tid 45432] [client 20.111.51.163:65320] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adKHW9Ht_Oyw03gjCNigxAAAANU"]
[Mon Apr 06 00:01:32.443981 2026] [:error] [pid 45303:tid 45322] [client 20.111.51.163:65077] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adKHXLboQ9eViZ4hdnmoHQAAAAU"]
[Mon Apr 06 00:01:33.065838 2026] [:error] [pid 45303:tid 45332] [client 20.111.51.163:65316] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/floya.php"] [unique_id "adKHXbboQ9eViZ4hdnmoHwAAAA8"]
[Mon Apr 06 00:01:33.639443 2026] [:error] [pid 45303:tid 45341] [client 20.111.51.163:65325] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/floya.php"] [unique_id "adKHXbboQ9eViZ4hdnmoIwAAABg"]
[Mon Apr 06 00:01:34.277468 2026] [:error] [pid 30921:tid 30928] [client 20.111.51.163:65043] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/floya.php"] [unique_id "adKHXmFGQVn8Q0ueB25u7QAAAQU"]
[Mon Apr 06 00:01:35.351527 2026] [:error] [pid 45409:tid 45417] [client 20.111.51.163:62703] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/floya.php"] [unique_id "adKHX9Ht_Oyw03gjCNigyAAAAMY"]
[Mon Apr 06 00:01:35.869199 2026] [:error] [pid 30921:tid 30945] [client 20.111.51.163:65223] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adKHX2FGQVn8Q0ueB25u9wAAARY"]
[Mon Apr 06 00:01:36.829581 2026] [:error] [pid 45303:tid 45320] [client 20.111.51.163:64670] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adKHYLboQ9eViZ4hdnmoOAAAAAM"]
[Mon Apr 06 00:01:37.371693 2026] [:error] [pid 45303:tid 45324] [client 20.111.51.163:64655] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adKHYbboQ9eViZ4hdnmoPgAAAAc"]
[Mon Apr 06 00:01:37.980837 2026] [:error] [pid 45303:tid 45334] [client 20.111.51.163:65299] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adKHYbboQ9eViZ4hdnmoRgAAABE"]
[Mon Apr 06 00:01:38.520480 2026] [:error] [pid 45305:tid 45383] [client 20.111.51.163:62692] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "adKHYujDQjr7aWhjflChlAAAAIw"]
[Mon Apr 06 00:01:39.055736 2026] [:error] [pid 45409:tid 45424] [client 20.111.51.163:65225] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "adKHY9Ht_Oyw03gjCNig3QAAAM0"]
[Mon Apr 06 00:01:40.394845 2026] [:error] [pid 45409:tid 45431] [client 20.111.51.163:65083] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "adKHZNHt_Oyw03gjCNig5wAAANQ"]
[Mon Apr 06 00:01:41.614828 2026] [:error] [pid 45303:tid 45340] [client 20.111.51.163:65305] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/only.php"] [unique_id "adKHZbboQ9eViZ4hdnmoYQAAABc"]
[Mon Apr 06 00:01:42.829550 2026] [:error] [pid 45303:tid 45340] [client 20.111.51.163:62682] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vdb.php"] [unique_id "adKHZrboQ9eViZ4hdnmobQAAABc"]
[Mon Apr 06 00:01:43.796808 2026] [:error] [pid 30921:tid 30946] [client 20.111.51.163:62707] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vdb.php"] [unique_id "adKHZ2FGQVn8Q0ueB25vIwAAARc"]
[Mon Apr 06 00:01:44.592763 2026] [:error] [pid 45305:tid 45390] [client 20.111.51.163:62684] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vdb.php"] [unique_id "adKHaOjDQjr7aWhjflChnQAAAJM"]
[Mon Apr 06 00:01:45.465540 2026] [:error] [pid 45305:tid 45371] [client 20.111.51.163:62755] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vdb.php"] [unique_id "adKHaejDQjr7aWhjflChowAAAIA"]
[Mon Apr 06 00:01:47.110730 2026] [:error] [pid 45304:tid 45346] [client 20.111.51.163:62686] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adKHaw5jnqDKKovdRklVDQAAAEI"]
[Mon Apr 06 00:01:48.975737 2026] [:error] [pid 45303:tid 45334] [client 20.111.51.163:65251] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adKHbLboQ9eViZ4hdnmogQAAABE"]
[Mon Apr 06 00:01:50.160778 2026] [:error] [pid 45303:tid 45333] [client 20.111.51.163:65337] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adKHbrboQ9eViZ4hdnmoiQAAABA"]
[Mon Apr 06 00:01:51.169891 2026] [:error] [pid 45304:tid 45366] [client 20.111.51.163:62706] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adKHbw5jnqDKKovdRklVDwAAAFY"]
[Mon Apr 06 00:01:52.020101 2026] [:error] [pid 45409:tid 45411] [client 20.111.51.163:65336] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ox.php"] [unique_id "adKHcNHt_Oyw03gjCNihCQAAAMA"]
[Mon Apr 06 00:01:53.531228 2026] [:error] [pid 45304:tid 45347] [client 20.111.51.163:65314] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ox.php"] [unique_id "adKHcQ5jnqDKKovdRklVEQAAAEM"]
[Mon Apr 06 00:01:54.624080 2026] [:error] [pid 45409:tid 45418] [client 20.111.51.163:62709] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ox.php"] [unique_id "adKHctHt_Oyw03gjCNihEAAAAMc"]
[Mon Apr 06 00:01:55.306596 2026] [:error] [pid 45303:tid 45321] [client 20.111.51.163:64649] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ox.php"] [unique_id "adKHc7boQ9eViZ4hdnmomAAAAAQ"]
[Mon Apr 06 00:01:55.817924 2026] [:error] [pid 45304:tid 45360] [client 20.111.51.163:65254] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "adKHcw5jnqDKKovdRklVFgAAAFA"]
[Mon Apr 06 00:01:56.465683 2026] [:error] [pid 45305:tid 45374] [client 20.111.51.163:65044] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "adKHdOjDQjr7aWhjflChvAAAAIM"]
[Mon Apr 06 00:01:57.030657 2026] [:error] [pid 45409:tid 45431] [client 20.111.51.163:65333] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "adKHddHt_Oyw03gjCNihIwAAANQ"]
[Mon Apr 06 00:01:57.769307 2026] [:error] [pid 45303:tid 45328] [client 20.111.51.163:65296] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htto.php"] [unique_id "adKHdbboQ9eViZ4hdnmomwAAAAs"]
[Mon Apr 06 00:01:58.294425 2026] [:error] [pid 30921:tid 30947] [client 20.111.51.163:64694] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2h.php"] [unique_id "adKHdmFGQVn8Q0ueB25vPQAAARg"]
[Mon Apr 06 00:01:58.790604 2026] [:error] [pid 45305:tid 45372] [client 20.111.51.163:62720] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2h.php"] [unique_id "adKHdujDQjr7aWhjflChwQAAAIE"]
[Mon Apr 06 00:01:59.371516 2026] [:error] [pid 45304:tid 45345] [client 20.111.51.163:65047] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2h.php"] [unique_id "adKHdw5jnqDKKovdRklVFwAAAEE"]
[Mon Apr 06 00:01:59.843566 2026] [:error] [pid 45305:tid 45383] [client 20.111.51.163:62731] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h2h.php"] [unique_id "adKHd-jDQjr7aWhjflChxgAAAIw"]
[Mon Apr 06 00:02:00.341790 2026] [:error] [pid 45409:tid 45428] [client 20.111.51.163:65284] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adKHeNHt_Oyw03gjCNihMQAAANE"]
[Mon Apr 06 00:02:00.832031 2026] [:error] [pid 45303:tid 45337] [client 20.111.51.163:65288] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adKHeLboQ9eViZ4hdnmopwAAABQ"]
[Mon Apr 06 00:02:01.342397 2026] [:error] [pid 45409:tid 45428] [client 20.111.51.163:62745] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adKHedHt_Oyw03gjCNihNgAAANE"]
[Mon Apr 06 00:02:01.837532 2026] [:error] [pid 45303:tid 45338] [client 20.111.51.163:65270] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adKHebboQ9eViZ4hdnmorQAAABU"]
[Mon Apr 06 00:02:02.397324 2026] [:error] [pid 45409:tid 45433] [client 20.111.51.163:64645] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dichku.php"] [unique_id "adKHetHt_Oyw03gjCNihOwAAANY"]
[Mon Apr 06 00:02:02.945028 2026] [:error] [pid 45409:tid 45424] [client 20.111.51.163:65287] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dichku.php"] [unique_id "adKHetHt_Oyw03gjCNihPgAAAM0"]
[Mon Apr 06 00:02:03.874748 2026] [proxy_fcgi:error] [pid 45303:tid 45329] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:04.113546 2026] [proxy_fcgi:error] [pid 45303:tid 45330] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:04.375708 2026] [proxy_fcgi:error] [pid 45303:tid 45341] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:04.630364 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:04.868761 2026] [proxy_fcgi:error] [pid 45303:tid 45338] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:05.107581 2026] [proxy_fcgi:error] [pid 45303:tid 45319] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:05.442762 2026] [proxy_fcgi:error] [pid 45303:tid 45323] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:05.699758 2026] [proxy_fcgi:error] [pid 45303:tid 45325] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:05.941371 2026] [proxy_fcgi:error] [pid 45303:tid 45328] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:06.184087 2026] [proxy_fcgi:error] [pid 45303:tid 45333] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:06.446705 2026] [proxy_fcgi:error] [pid 45303:tid 45337] [client 20.111.51.163:64657] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:02:07.102808 2026] [:error] [pid 45303:tid 45324] [client 20.111.51.163:64657] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adKHf7boQ9eViZ4hdnmoxwAAAAc"]
[Mon Apr 06 00:02:07.752950 2026] [:error] [pid 45305:tid 45391] [client 20.111.51.163:64648] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adKHf-jDQjr7aWhjflCh3gAAAJQ"]
[Mon Apr 06 00:02:08.340518 2026] [:error] [pid 45409:tid 45427] [client 20.111.51.163:64654] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adKHgNHt_Oyw03gjCNihUQAAANA"]
[Mon Apr 06 00:02:09.081203 2026] [:error] [pid 30921:tid 30940] [client 20.111.51.163:65276] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adKHgWFGQVn8Q0ueB25vXAAAARE"]
[Mon Apr 06 00:02:09.626029 2026] [:error] [pid 45303:tid 45323] [client 20.111.51.163:65231] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHgbboQ9eViZ4hdnmoywAAAAY"]
[Mon Apr 06 00:02:10.199187 2026] [:error] [pid 45409:tid 45414] [client 20.111.51.163:62661] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHgtHt_Oyw03gjCNihWQAAAMM"]
[Mon Apr 06 00:02:10.700511 2026] [:error] [pid 45303:tid 45327] [client 20.111.51.163:65282] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHgrboQ9eViZ4hdnmozwAAAAo"]
[Mon Apr 06 00:02:11.420128 2026] [:error] [pid 45304:tid 45366] [client 20.111.51.163:62678] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ox9eoqdk.php"] [unique_id "adKHgw5jnqDKKovdRklVGgAAAFY"]
[Mon Apr 06 00:02:12.443822 2026] [:error] [pid 45409:tid 45414] [client 20.111.51.163:65238] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-4qtafzz.php"] [unique_id "adKHhNHt_Oyw03gjCNihZwAAAMM"]
[Mon Apr 06 00:02:13.257209 2026] [:error] [pid 45303:tid 45338] [client 20.111.51.163:62663] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-4qtafzz.php"] [unique_id "adKHhbboQ9eViZ4hdnmo2gAAABU"]
[Mon Apr 06 00:02:13.946471 2026] [:error] [pid 45303:tid 45325] [client 20.111.51.163:65233] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-4qtafzz.php"] [unique_id "adKHhbboQ9eViZ4hdnmo3wAAAAg"]
[Mon Apr 06 00:02:14.727511 2026] [:error] [pid 45409:tid 45422] [client 20.111.51.163:65027] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-4qtafzz.php"] [unique_id "adKHhtHt_Oyw03gjCNihcAAAAMs"]
[Mon Apr 06 00:02:15.524571 2026] [:error] [pid 45409:tid 45415] [client 20.111.51.163:65324] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gilo.php"] [unique_id "adKHh9Ht_Oyw03gjCNiheQAAAMQ"]
[Mon Apr 06 00:02:16.087570 2026] [:error] [pid 45409:tid 45417] [client 20.111.51.163:65281] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gilo.php"] [unique_id "adKHiNHt_Oyw03gjCNihfQAAAMY"]
[Mon Apr 06 00:02:16.686313 2026] [:error] [pid 45409:tid 45433] [client 20.111.51.163:62736] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gilo.php"] [unique_id "adKHiNHt_Oyw03gjCNihhQAAANY"]
[Mon Apr 06 00:02:17.445158 2026] [:error] [pid 45409:tid 45421] [client 20.111.51.163:65271] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gilo.php"] [unique_id "adKHidHt_Oyw03gjCNihigAAAMo"]
[Mon Apr 06 00:02:17.967404 2026] [:error] [pid 45303:tid 45335] [client 20.111.51.163:64659] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adKHibboQ9eViZ4hdnmo5gAAABI"]
[Mon Apr 06 00:02:18.451675 2026] [:error] [pid 45305:tid 45389] [client 20.111.51.163:65035] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adKHiujDQjr7aWhjflCh6gAAAJI"]
[Mon Apr 06 00:02:18.995822 2026] [:error] [pid 45409:tid 45435] [client 20.111.51.163:65327] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adKHitHt_Oyw03gjCNihlAAAANg"]
[Mon Apr 06 00:02:19.538907 2026] [:error] [pid 45409:tid 45435] [client 20.111.51.163:62721] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adKHi9Ht_Oyw03gjCNihoAAAANg"]
[Mon Apr 06 00:02:20.144476 2026] [:error] [pid 45304:tid 45350] [client 20.111.51.163:62718] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7r.php"] [unique_id "adKHjA5jnqDKKovdRklVIwAAAEY"]
[Mon Apr 06 00:02:20.906534 2026] [:error] [pid 45305:tid 45377] [client 20.111.51.163:65330] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7r.php"] [unique_id "adKHjOjDQjr7aWhjflCh7AAAAIY"]
[Mon Apr 06 00:02:21.796035 2026] [:error] [pid 45409:tid 45433] [client 20.111.51.163:65269] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7r.php"] [unique_id "adKHjdHt_Oyw03gjCNihtAAAANY"]
[Mon Apr 06 00:02:22.521507 2026] [:error] [pid 45409:tid 45430] [client 20.111.51.163:64600] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x7r.php"] [unique_id "adKHjtHt_Oyw03gjCNihugAAANM"]
[Mon Apr 06 00:02:23.442203 2026] [:error] [pid 45303:tid 45329] [client 20.111.51.163:64597] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2kpf7h.php"] [unique_id "adKHj7boQ9eViZ4hdnmo-QAAAAw"]
[Mon Apr 06 00:02:24.627190 2026] [:error] [pid 45409:tid 45422] [client 20.111.51.163:64021] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2kpf7h.php"] [unique_id "adKHkNHt_Oyw03gjCNihwQAAAMs"]
[Mon Apr 06 00:02:25.326414 2026] [:error] [pid 45305:tid 45393] [client 20.111.51.163:65307] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2kpf7h.php"] [unique_id "adKHkejDQjr7aWhjflCh8gAAAJY"]
[Mon Apr 06 00:02:27.360064 2026] [:error] [pid 45409:tid 45419] [client 20.111.51.163:64596] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2kpf7h.php"] [unique_id "adKHk9Ht_Oyw03gjCNihywAAAMg"]
[Mon Apr 06 00:02:30.315902 2026] [:error] [pid 45303:tid 45336] [client 20.111.51.163:64640] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-3x94erjd.php"] [unique_id "adKHlrboQ9eViZ4hdnmpGQAAABM"]
[Mon Apr 06 00:02:31.856199 2026] [:error] [pid 30921:tid 30944] [client 20.111.51.163:65042] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-3x94erjd.php"] [unique_id "adKHl2FGQVn8Q0ueB25vdwAAARU"]
[Mon Apr 06 00:02:32.873337 2026] [:error] [pid 45409:tid 45418] [client 20.111.51.163:62670] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-3x94erjd.php"] [unique_id "adKHmNHt_Oyw03gjCNih7gAAAMc"]
[Mon Apr 06 00:02:33.997461 2026] [:error] [pid 45305:tid 45395] [client 20.111.51.163:65343] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-3x94erjd.php"] [unique_id "adKHmejDQjr7aWhjflCh-QAAAJg"]
[Mon Apr 06 00:02:36.516672 2026] [:error] [pid 45409:tid 45416] [client 20.111.51.163:65049] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adKHnNHt_Oyw03gjCNiiAQAAAMU"]
[Mon Apr 06 00:02:38.648827 2026] [:error] [pid 45409:tid 45416] [client 20.111.51.163:62775] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adKHntHt_Oyw03gjCNiiCgAAAMU"]
[Mon Apr 06 00:02:40.626249 2026] [:error] [pid 45409:tid 45435] [client 20.111.51.163:65258] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adKHoNHt_Oyw03gjCNiiFQAAANg"]
[Mon Apr 06 00:02:41.643847 2026] [:error] [pid 45303:tid 45340] [client 20.111.51.163:62763] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adKHobboQ9eViZ4hdnmpRAAAABc"]
[Mon Apr 06 00:02:42.691294 2026] [:error] [pid 45409:tid 45432] [client 20.111.51.163:62659] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "adKHotHt_Oyw03gjCNiiJgAAANU"]
[Mon Apr 06 00:02:43.449384 2026] [:error] [pid 45304:tid 45362] [client 20.111.51.163:65334] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "adKHow5jnqDKKovdRklVRQAAAFI"]
[Mon Apr 06 00:02:44.641450 2026] [:error] [pid 45304:tid 45345] [client 20.111.51.163:65061] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "adKHpA5jnqDKKovdRklVRgAAAEE"]
[Mon Apr 06 00:02:46.099978 2026] [:error] [pid 30921:tid 30946] [client 20.111.51.163:62664] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp3.php"] [unique_id "adKHpmFGQVn8Q0ueB25vlAAAARc"]
[Mon Apr 06 00:02:51.728518 2026] [:error] [pid 45304:tid 45352] [client 20.111.51.163:64699] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adKHqw5jnqDKKovdRklVUwAAAEg"]
[Mon Apr 06 00:02:56.733408 2026] [:error] [pid 45409:tid 45417] [client 20.111.51.163:62656] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adKHsNHt_Oyw03gjCNiiXQAAAMY"]
[Mon Apr 06 00:03:00.370128 2026] [:error] [pid 45303:tid 45341] [client 20.111.51.163:65267] [client 20.111.51.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adKHtLboQ9eViZ4hdnmpmgAAABg"]
[Mon Apr 06 00:03:09.041350 2026] [proxy_fcgi:error] [pid 45303:tid 45324] [client 20.111.51.163:64581] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:03:09.281158 2026] [proxy_fcgi:error] [pid 45303:tid 45332] [client 20.111.51.163:64581] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:03:09.531843 2026] [proxy_fcgi:error] [pid 45303:tid 45320] [client 20.111.51.163:64581] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:03:09.770632 2026] [proxy_fcgi:error] [pid 45303:tid 45327] [client 20.111.51.163:64581] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 00:32:02.684465 2026] [:error] [pid 51753:tid 51834] [client 43.130.12.43:43786] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adKOgq3pmp1JkaicYbs_CAAAARY"]
[Mon Apr 06 04:57:58.937192 2026] [proxy_fcgi:error] [pid 9442:tid 9447] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:57:59.206923 2026] [proxy_fcgi:error] [pid 9442:tid 9450] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:57:59.473545 2026] [proxy_fcgi:error] [pid 9442:tid 9459] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:57:59.739500 2026] [proxy_fcgi:error] [pid 9442:tid 9453] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:00.004599 2026] [proxy_fcgi:error] [pid 9442:tid 9452] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:00.271876 2026] [proxy_fcgi:error] [pid 9442:tid 9448] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:00.538211 2026] [proxy_fcgi:error] [pid 9442:tid 9449] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:00.837319 2026] [proxy_fcgi:error] [pid 9442:tid 9460] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:01.103600 2026] [proxy_fcgi:error] [pid 9442:tid 9468] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:01.370216 2026] [proxy_fcgi:error] [pid 9442:tid 9458] [client 4.223.110.88:7983] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:01.633800 2026] [:error] [pid 9442:tid 9447] [client 4.223.110.88:7983] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adLM2UPsNnAJTnmz6saaEAAAAQM"]
[Mon Apr 06 04:58:02.468120 2026] [:error] [pid 35686:tid 35711] [client 4.223.110.88:35894] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adLM2sMKdea6oORd2fw6aAAAAA8"]
[Mon Apr 06 04:58:03.248074 2026] [:error] [pid 35786:tid 35794] [client 4.223.110.88:45740] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adLM22gkfCKTaLhwaKQFmQAAAME"]
[Mon Apr 06 04:58:04.102398 2026] [:error] [pid 35786:tid 35816] [client 4.223.110.88:47227] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adLM3GgkfCKTaLhwaKQFmgAAANc"]
[Mon Apr 06 04:58:04.692401 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:45752] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adLM3EPsNnAJTnmz6saaHwAAAQQ"]
[Mon Apr 06 04:58:05.430769 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:41769] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adLM3UPsNnAJTnmz6saaJAAAAQE"]
[Mon Apr 06 04:58:06.371912 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:41776] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adLM3kPsNnAJTnmz6saaKQAAAQI"]
[Mon Apr 06 04:58:07.353691 2026] [:error] [pid 9442:tid 9458] [client 4.223.110.88:50428] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adLM30PsNnAJTnmz6saaLgAAAQ4"]
[Mon Apr 06 04:58:08.169751 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:47219] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adLM4EPsNnAJTnmz6saaMwAAAQE"]
[Mon Apr 06 04:58:09.148427 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:45726] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adLM4UPsNnAJTnmz6saaNgAAAQw"]
[Mon Apr 06 04:58:09.770646 2026] [:error] [pid 35786:tid 35808] [client 4.223.110.88:47177] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adLM4WgkfCKTaLhwaKQFpwAAAM8"]
[Mon Apr 06 04:58:10.341425 2026] [:error] [pid 35688:tid 35770] [client 4.223.110.88:7972] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adLM4uZ85qg4jLsRpQyYXwAAAJQ"]
[Mon Apr 06 04:58:11.091928 2026] [:error] [pid 9442:tid 9461] [client 4.223.110.88:41741] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adLM40PsNnAJTnmz6saaPQAAARE"]
[Mon Apr 06 04:58:11.836692 2026] [:error] [pid 35786:tid 35802] [client 4.223.110.88:24913] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adLM42gkfCKTaLhwaKQFqQAAAMk"]
[Mon Apr 06 04:58:12.402193 2026] [:error] [pid 9442:tid 9458] [client 4.223.110.88:50374] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adLM5EPsNnAJTnmz6saaQwAAAQ4"]
[Mon Apr 06 04:58:13.066777 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:41774] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adLM5UPsNnAJTnmz6saaRwAAAQE"]
[Mon Apr 06 04:58:13.728714 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:27515] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adLM5UPsNnAJTnmz6saaTAAAAQI"]
[Mon Apr 06 04:58:14.361271 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:50423] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adLM5sMKdea6oORd2fw6dQAAAAA"]
[Mon Apr 06 04:58:15.136989 2026] [:error] [pid 35686:tid 35713] [client 4.223.110.88:41754] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adLM58MKdea6oORd2fw6egAAABE"]
[Mon Apr 06 04:58:15.717257 2026] [:error] [pid 9442:tid 9462] [client 4.223.110.88:34552] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adLM50PsNnAJTnmz6saaWAAAARI"]
[Mon Apr 06 04:58:16.347572 2026] [:error] [pid 35688:tid 35765] [client 4.223.110.88:34507] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adLM6OZ85qg4jLsRpQyYYwAAAI8"]
[Mon Apr 06 04:58:17.056457 2026] [:error] [pid 35688:tid 35774] [client 4.223.110.88:35845] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adLM6eZ85qg4jLsRpQyYZAAAAJg"]
[Mon Apr 06 04:58:17.618379 2026] [:error] [pid 9442:tid 9466] [client 4.223.110.88:41745] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adLM6UPsNnAJTnmz6saaYgAAARY"]
[Mon Apr 06 04:58:18.333018 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:34519] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adLM6kPsNnAJTnmz6saaZAAAAQw"]
[Mon Apr 06 04:58:18.931266 2026] [:error] [pid 35688:tid 35751] [client 4.223.110.88:7959] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.yuf.php"] [unique_id "adLM6uZ85qg4jLsRpQyYagAAAIE"]
[Mon Apr 06 04:58:19.617451 2026] [:error] [pid 35786:tid 35802] [client 4.223.110.88:24922] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.yuf.php"] [unique_id "adLM62gkfCKTaLhwaKQFtQAAAMk"]
[Mon Apr 06 04:58:20.216365 2026] [:error] [pid 9442:tid 9455] [client 4.223.110.88:47201] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.yuf.php"] [unique_id "adLM7EPsNnAJTnmz6saabAAAAQs"]
[Mon Apr 06 04:58:21.032885 2026] [:error] [pid 35688:tid 35750] [client 4.223.110.88:27477] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.yuf.php"] [unique_id "adLM7eZ85qg4jLsRpQyYcAAAAIA"]
[Mon Apr 06 04:58:21.705344 2026] [:error] [pid 9442:tid 9457] [client 4.223.110.88:41755] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adLM7UPsNnAJTnmz6saacgAAAQ0"]
[Mon Apr 06 04:58:22.278457 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:47217] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adLM7kPsNnAJTnmz6saadQAAAQE"]
[Mon Apr 06 04:58:22.932297 2026] [:error] [pid 9442:tid 9468] [client 4.223.110.88:41790] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adLM7kPsNnAJTnmz6saadwAAARg"]
[Mon Apr 06 04:58:23.636513 2026] [:error] [pid 9442:tid 9454] [client 4.223.110.88:45720] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adLM70PsNnAJTnmz6saafwAAAQo"]
[Mon Apr 06 04:58:24.249058 2026] [:error] [pid 9442:tid 9451] [client 4.223.110.88:27487] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "adLM8EPsNnAJTnmz6saahQAAAQc"]
[Mon Apr 06 04:58:24.799409 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:7993] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "adLM8EPsNnAJTnmz6saaigAAAQE"]
[Mon Apr 06 04:58:25.534037 2026] [:error] [pid 35686:tid 35708] [client 4.223.110.88:45758] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "adLM8cMKdea6oORd2fw6jQAAAAw"]
[Mon Apr 06 04:58:26.088318 2026] [:error] [pid 35687:tid 35741] [client 4.223.110.88:7937] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "adLM8p3LtDozV0i8BiuOgAAAAFI"]
[Mon Apr 06 04:58:26.720974 2026] [:error] [pid 35686:tid 35701] [client 4.223.110.88:47180] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "adLM8sMKdea6oORd2fw6jgAAAAU"]
[Mon Apr 06 04:58:27.311831 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:27508] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "adLM80PsNnAJTnmz6saalgAAAQI"]
[Mon Apr 06 04:58:27.867365 2026] [:error] [pid 9442:tid 9447] [client 4.223.110.88:47211] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "adLM80PsNnAJTnmz6saamgAAAQM"]
[Mon Apr 06 04:58:28.456951 2026] [:error] [pid 9442:tid 9444] [client 4.223.110.88:41775] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "adLM9EPsNnAJTnmz6saaoQAAAQA"]
[Mon Apr 06 04:58:29.163057 2026] [:error] [pid 35686:tid 35716] [client 4.223.110.88:41765] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "adLM9cMKdea6oORd2fw6lwAAABQ"]
[Mon Apr 06 04:58:29.766541 2026] [:error] [pid 35786:tid 35803] [client 4.223.110.88:34514] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "adLM9WgkfCKTaLhwaKQFvwAAAMo"]
[Mon Apr 06 04:58:30.297034 2026] [:error] [pid 35687:tid 35738] [client 4.223.110.88:34559] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "adLM9p3LtDozV0i8BiuOhwAAAE8"]
[Mon Apr 06 04:58:30.513223 2026] [proxy_fcgi:error] [pid 35687:tid 35740] [client 20.172.36.113:62008] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:58:30.853287 2026] [:error] [pid 35687:tid 35733] [client 4.223.110.88:34544] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "adLM9p3LtDozV0i8BiuOiwAAAEo"]
[Mon Apr 06 04:58:31.483939 2026] [:error] [pid 35687:tid 35746] [client 4.223.110.88:47197] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file31.php"] [unique_id "adLM953LtDozV0i8BiuOjgAAAFc"]
[Mon Apr 06 04:58:32.042478 2026] [:error] [pid 35686:tid 35709] [client 4.223.110.88:7965] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file31.php"] [unique_id "adLM-MMKdea6oORd2fw6mwAAAA0"]
[Mon Apr 06 04:58:32.611852 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:27506] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file31.php"] [unique_id "adLM-MMKdea6oORd2fw6nQAAAAA"]
[Mon Apr 06 04:58:33.217441 2026] [:error] [pid 35687:tid 35734] [client 4.223.110.88:47224] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file31.php"] [unique_id "adLM-Z3LtDozV0i8BiuOkwAAAEs"]
[Mon Apr 06 04:58:33.780130 2026] [:error] [pid 35686:tid 35715] [client 4.223.110.88:45704] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "adLM-cMKdea6oORd2fw6oAAAABM"]
[Mon Apr 06 04:58:34.317501 2026] [:error] [pid 35686:tid 35711] [client 4.223.110.88:41736] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "adLM-sMKdea6oORd2fw6ogAAAA8"]
[Mon Apr 06 04:58:34.886009 2026] [:error] [pid 35686:tid 35698] [client 4.223.110.88:50380] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "adLM-sMKdea6oORd2fw6pgAAAAI"]
[Mon Apr 06 04:58:35.577669 2026] [:error] [pid 9442:tid 9450] [client 4.223.110.88:24933] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "adLM-0PsNnAJTnmz6saasAAAAQY"]
[Mon Apr 06 04:58:36.153443 2026] [:error] [pid 9442:tid 9460] [client 4.223.110.88:37868] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/control.php"] [unique_id "adLM_EPsNnAJTnmz6saasgAAARA"]
[Mon Apr 06 04:58:36.760615 2026] [:error] [pid 9442:tid 9451] [client 4.223.110.88:47191] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/control.php"] [unique_id "adLM_EPsNnAJTnmz6saatQAAAQc"]
[Mon Apr 06 04:58:37.432106 2026] [:error] [pid 9442:tid 9449] [client 4.223.110.88:50399] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/control.php"] [unique_id "adLM_UPsNnAJTnmz6saauQAAAQU"]
[Mon Apr 06 04:58:37.976328 2026] [:error] [pid 9442:tid 9454] [client 4.223.110.88:34547] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/control.php"] [unique_id "adLM_UPsNnAJTnmz6saauwAAAQo"]
[Mon Apr 06 04:58:38.533401 2026] [:error] [pid 9442:tid 9450] [client 4.223.110.88:45706] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "adLM_kPsNnAJTnmz6saavgAAAQY"]
[Mon Apr 06 04:58:39.099614 2026] [:error] [pid 35786:tid 35801] [client 4.223.110.88:41758] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "adLM_2gkfCKTaLhwaKQF1QAAAMg"]
[Mon Apr 06 04:58:39.739797 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:27516] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "adLM_0PsNnAJTnmz6saaxQAAAQQ"]
[Mon Apr 06 04:58:40.291314 2026] [:error] [pid 35786:tid 35814] [client 4.223.110.88:7968] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "adLNAGgkfCKTaLhwaKQF2AAAANU"]
[Mon Apr 06 04:58:41.008166 2026] [:error] [pid 35786:tid 35799] [client 4.223.110.88:27496] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1111.php"] [unique_id "adLNAWgkfCKTaLhwaKQF3AAAAMY"]
[Mon Apr 06 04:58:41.539572 2026] [:error] [pid 9442:tid 9462] [client 4.223.110.88:35886] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1111.php"] [unique_id "adLNAUPsNnAJTnmz6saazAAAARI"]
[Mon Apr 06 04:58:42.398483 2026] [:error] [pid 35786:tid 35803] [client 4.223.110.88:34505] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1111.php"] [unique_id "adLNAmgkfCKTaLhwaKQF3gAAAMo"]
[Mon Apr 06 04:58:43.151321 2026] [:error] [pid 35687:tid 35741] [client 4.223.110.88:24943] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1111.php"] [unique_id "adLNA53LtDozV0i8BiuOmAAAAFI"]
[Mon Apr 06 04:58:43.731002 2026] [:error] [pid 9442:tid 9467] [client 4.223.110.88:34511] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adLNA0PsNnAJTnmz6saa0gAAARc"]
[Mon Apr 06 04:58:44.354589 2026] [:error] [pid 35786:tid 35801] [client 4.223.110.88:34506] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adLNBGgkfCKTaLhwaKQF4AAAAMg"]
[Mon Apr 06 04:58:45.255578 2026] [:error] [pid 35687:tid 35744] [client 4.223.110.88:45710] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adLNBZ3LtDozV0i8BiuOmgAAAFU"]
[Mon Apr 06 04:58:46.093207 2026] [:error] [pid 35786:tid 35810] [client 4.223.110.88:34541] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adLNBmgkfCKTaLhwaKQF5gAAANE"]
[Mon Apr 06 04:58:46.952153 2026] [:error] [pid 9442:tid 9444] [client 4.223.110.88:24937] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "adLNBkPsNnAJTnmz6saa2wAAAQA"]
[Mon Apr 06 04:58:47.889843 2026] [:error] [pid 9442:tid 9449] [client 4.223.110.88:35860] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "adLNB0PsNnAJTnmz6saa4AAAAQU"]
[Mon Apr 06 04:58:48.902431 2026] [:error] [pid 35786:tid 35816] [client 4.223.110.88:50382] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "adLNCGgkfCKTaLhwaKQF7AAAANc"]
[Mon Apr 06 04:58:49.632362 2026] [:error] [pid 35688:tid 35768] [client 4.223.110.88:47189] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "adLNCeZ85qg4jLsRpQyYiQAAAJI"]
[Mon Apr 06 04:58:50.328049 2026] [:error] [pid 35688:tid 35759] [client 4.223.110.88:35851] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adLNCuZ85qg4jLsRpQyYjAAAAIk"]
[Mon Apr 06 04:58:51.634974 2026] [:error] [pid 9442:tid 9447] [client 4.223.110.88:47169] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adLNC0PsNnAJTnmz6saa6AAAAQM"]
[Mon Apr 06 04:58:52.227037 2026] [:error] [pid 35688:tid 35751] [client 4.223.110.88:34496] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adLNDOZ85qg4jLsRpQyYjgAAAIE"]
[Mon Apr 06 04:58:53.140263 2026] [:error] [pid 35688:tid 35762] [client 4.223.110.88:47220] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adLNDeZ85qg4jLsRpQyYjwAAAIw"]
[Mon Apr 06 04:58:53.775953 2026] [:error] [pid 35687:tid 35735] [client 4.223.110.88:47229] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adLNDZ3LtDozV0i8BiuOnwAAAEw"]
[Mon Apr 06 04:58:54.458035 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:45738] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adLNDkPsNnAJTnmz6saa9AAAAQQ"]
[Mon Apr 06 04:58:55.188030 2026] [:error] [pid 9442:tid 9459] [client 4.223.110.88:45750] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adLND0PsNnAJTnmz6saa-AAAAQ8"]
[Mon Apr 06 04:58:55.811444 2026] [:error] [pid 35686:tid 35718] [client 4.223.110.88:34535] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adLND8MKdea6oORd2fw6uAAAABY"]
[Mon Apr 06 04:58:56.631094 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:7992] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "adLNEMMKdea6oORd2fw6ugAAAAA"]
[Mon Apr 06 04:58:57.200842 2026] [:error] [pid 35786:tid 35804] [client 4.223.110.88:45719] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "adLNEWgkfCKTaLhwaKQF_gAAAMs"]
[Mon Apr 06 04:58:58.371020 2026] [:error] [pid 9442:tid 9467] [client 4.223.110.88:35855] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "adLNEkPsNnAJTnmz6sabAAAAARc"]
[Mon Apr 06 04:58:58.970933 2026] [:error] [pid 35688:tid 35761] [client 4.223.110.88:34502] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "adLNEuZ85qg4jLsRpQyYlAAAAIs"]
[Mon Apr 06 04:58:59.754859 2026] [:error] [pid 9442:tid 9455] [client 4.223.110.88:47215] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "adLNE0PsNnAJTnmz6sabCwAAAQs"]
[Mon Apr 06 04:59:00.559252 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:41784] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "adLNFGgkfCKTaLhwaKQGAAAAAMI"]
[Mon Apr 06 04:59:01.218788 2026] [proxy_fcgi:error] [pid 35786:tid 35812] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:01.512228 2026] [proxy_fcgi:error] [pid 35786:tid 35802] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:01.780692 2026] [proxy_fcgi:error] [pid 35786:tid 35811] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:02.047333 2026] [proxy_fcgi:error] [pid 35786:tid 35796] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:02.328167 2026] [proxy_fcgi:error] [pid 35786:tid 35804] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:02.597966 2026] [proxy_fcgi:error] [pid 35786:tid 35810] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:02.865250 2026] [proxy_fcgi:error] [pid 35786:tid 35805] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:03.137552 2026] [proxy_fcgi:error] [pid 35786:tid 35808] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:03.518896 2026] [proxy_fcgi:error] [pid 35786:tid 35812] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:03.792822 2026] [proxy_fcgi:error] [pid 35786:tid 35816] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:04.148104 2026] [proxy_fcgi:error] [pid 35786:tid 35800] [client 4.223.110.88:41763] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 04:59:04.411631 2026] [:error] [pid 35786:tid 35811] [client 4.223.110.88:41763] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mter.php"] [unique_id "adLNGGgkfCKTaLhwaKQGFgAAANI"]
[Mon Apr 06 04:59:05.576992 2026] [:error] [pid 35687:tid 35725] [client 4.223.110.88:7979] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mter.php"] [unique_id "adLNGZ3LtDozV0i8BiuOpwAAAEI"]
[Mon Apr 06 04:59:06.848181 2026] [:error] [pid 9442:tid 9458] [client 4.223.110.88:45709] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mter.php"] [unique_id "adLNGkPsNnAJTnmz6sabIwAAAQ4"]
[Mon Apr 06 04:59:08.203867 2026] [:error] [pid 9442:tid 9466] [client 4.223.110.88:7372] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mter.php"] [unique_id "adLNHEPsNnAJTnmz6sabKwAAARY"]
[Mon Apr 06 04:59:09.187822 2026] [:error] [pid 9442:tid 9461] [client 4.223.110.88:31951] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adLNHUPsNnAJTnmz6sabMgAAARE"]
[Mon Apr 06 04:59:10.385214 2026] [:error] [pid 35786:tid 35800] [client 4.223.110.88:35893] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adLNHmgkfCKTaLhwaKQGIQAAAMc"]
[Mon Apr 06 04:59:11.263557 2026] [:error] [pid 35686:tid 35705] [client 4.223.110.88:7974] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adLNH8MKdea6oORd2fw6yAAAAAk"]
[Mon Apr 06 04:59:12.010153 2026] [:error] [pid 35686:tid 35707] [client 4.223.110.88:50393] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adLNIMMKdea6oORd2fw6yQAAAAs"]
[Mon Apr 06 04:59:12.627037 2026] [:error] [pid 9442:tid 9451] [client 4.223.110.88:35858] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "adLNIEPsNnAJTnmz6sabOQAAAQc"]
[Mon Apr 06 04:59:13.268116 2026] [:error] [pid 35687:tid 35740] [client 4.223.110.88:45730] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "adLNIZ3LtDozV0i8BiuOsQAAAFE"]
[Mon Apr 06 04:59:14.020626 2026] [:error] [pid 35688:tid 35754] [client 4.223.110.88:47202] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "adLNIuZ85qg4jLsRpQyYmgAAAIQ"]
[Mon Apr 06 04:59:14.979630 2026] [:error] [pid 35687:tid 35744] [client 4.223.110.88:7954] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "adLNIp3LtDozV0i8BiuOtgAAAFU"]
[Mon Apr 06 04:59:15.705186 2026] [:error] [pid 35786:tid 35814] [client 4.223.110.88:41735] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNI2gkfCKTaLhwaKQGOAAAANU"]
[Mon Apr 06 04:59:16.491124 2026] [:error] [pid 35686:tid 35716] [client 4.223.110.88:47208] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNJMMKdea6oORd2fw6zAAAABQ"]
[Mon Apr 06 04:59:17.711328 2026] [:error] [pid 35687:tid 35726] [client 4.223.110.88:50401] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNJZ3LtDozV0i8BiuOvwAAAEM"]
[Mon Apr 06 04:59:18.323827 2026] [:error] [pid 35786:tid 35804] [client 4.223.110.88:7977] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNJmgkfCKTaLhwaKQGPwAAAMs"]
[Mon Apr 06 04:59:19.373099 2026] [:error] [pid 9442:tid 9444] [client 4.223.110.88:27511] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adLNJ0PsNnAJTnmz6sabSQAAAQA"]
[Mon Apr 06 04:59:20.114995 2026] [:error] [pid 35688:tid 35759] [client 4.223.110.88:41759] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adLNKOZ85qg4jLsRpQyYpAAAAIk"]
[Mon Apr 06 04:59:20.815807 2026] [:error] [pid 35687:tid 35724] [client 4.223.110.88:7942] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adLNKJ3LtDozV0i8BiuOwQAAAEE"]
[Mon Apr 06 04:59:21.639552 2026] [:error] [pid 35687:tid 35733] [client 4.223.110.88:34510] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adLNKZ3LtDozV0i8BiuOxgAAAEo"]
[Mon Apr 06 04:59:22.616637 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:26197] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adLNKkPsNnAJTnmz6sabUgAAARU"]
[Mon Apr 06 04:59:23.500088 2026] [:error] [pid 9442:tid 9463] [client 4.223.110.88:35887] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adLNK0PsNnAJTnmz6sabVwAAARM"]
[Mon Apr 06 04:59:24.272994 2026] [:error] [pid 35688:tid 35771] [client 4.223.110.88:24946] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adLNLOZ85qg4jLsRpQyYtgAAAJU"]
[Mon Apr 06 04:59:25.000466 2026] [:error] [pid 35786:tid 35793] [client 4.223.110.88:24897] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adLNLGgkfCKTaLhwaKQGRgAAAMA"]
[Mon Apr 06 04:59:25.966954 2026] [:error] [pid 9442:tid 9464] [client 4.223.110.88:27500] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adLNLUPsNnAJTnmz6sabWwAAARQ"]
[Mon Apr 06 04:59:26.851657 2026] [:error] [pid 35687:tid 35726] [client 4.223.110.88:34522] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adLNLp3LtDozV0i8BiuOygAAAEM"]
[Mon Apr 06 04:59:27.700724 2026] [:error] [pid 9442:tid 9457] [client 4.223.110.88:30778] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adLNL0PsNnAJTnmz6sabYQAAAQ0"]
[Mon Apr 06 04:59:28.723992 2026] [:error] [pid 35786:tid 35814] [client 4.223.110.88:45727] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adLNMGgkfCKTaLhwaKQGUAAAANU"]
[Mon Apr 06 04:59:29.684982 2026] [:error] [pid 35786:tid 35804] [client 4.223.110.88:35857] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "adLNMWgkfCKTaLhwaKQGVAAAAMs"]
[Mon Apr 06 04:59:30.598515 2026] [:error] [pid 35688:tid 35767] [client 4.223.110.88:27467] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "adLNMuZ85qg4jLsRpQyYwQAAAJE"]
[Mon Apr 06 04:59:31.455353 2026] [:error] [pid 35687:tid 35738] [client 4.223.110.88:34520] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "adLNM53LtDozV0i8BiuOzQAAAE8"]
[Mon Apr 06 04:59:32.295218 2026] [:error] [pid 35786:tid 35814] [client 4.223.110.88:44468] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eee.php"] [unique_id "adLNNGgkfCKTaLhwaKQGXQAAANU"]
[Mon Apr 06 04:59:33.128170 2026] [:error] [pid 9442:tid 9468] [client 4.223.110.88:7991] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adLNNUPsNnAJTnmz6sabeQAAARg"]
[Mon Apr 06 04:59:34.056977 2026] [:error] [pid 9442:tid 9455] [client 4.223.110.88:35879] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adLNNkPsNnAJTnmz6sabfwAAAQs"]
[Mon Apr 06 04:59:34.955367 2026] [:error] [pid 9442:tid 9468] [client 4.223.110.88:27491] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adLNNkPsNnAJTnmz6sabhQAAARg"]
[Mon Apr 06 04:59:35.675829 2026] [:error] [pid 9442:tid 9458] [client 4.223.110.88:34503] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adLNN0PsNnAJTnmz6sabjgAAAQ4"]
[Mon Apr 06 04:59:36.862645 2026] [:error] [pid 9442:tid 9460] [client 4.223.110.88:7949] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adLNOEPsNnAJTnmz6sabmAAAARA"]
[Mon Apr 06 04:59:37.819170 2026] [:error] [pid 35786:tid 35794] [client 4.223.110.88:27458] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adLNOWgkfCKTaLhwaKQGYwAAAME"]
[Mon Apr 06 04:59:38.780117 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:45700] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adLNOsMKdea6oORd2fw6_AAAAAA"]
[Mon Apr 06 04:59:39.393575 2026] [:error] [pid 9442:tid 9447] [client 4.223.110.88:7997] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adLNO0PsNnAJTnmz6sabogAAAQM"]
[Mon Apr 06 04:59:40.010964 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:24911] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/swallowable.php"] [unique_id "adLNPEPsNnAJTnmz6sabpgAAAQw"]
[Mon Apr 06 04:59:40.563927 2026] [:error] [pid 35786:tid 35808] [client 4.223.110.88:34557] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/swallowable.php"] [unique_id "adLNPGgkfCKTaLhwaKQGagAAAM8"]
[Mon Apr 06 04:59:41.300957 2026] [:error] [pid 35686:tid 35718] [client 4.223.110.88:35842] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/swallowable.php"] [unique_id "adLNPcMKdea6oORd2fw7AQAAABY"]
[Mon Apr 06 04:59:41.920836 2026] [:error] [pid 35687:tid 35744] [client 4.223.110.88:37859] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/swallowable.php"] [unique_id "adLNPZ3LtDozV0i8BiuO0wAAAFU"]
[Mon Apr 06 04:59:42.882739 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:45749] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adLNPkPsNnAJTnmz6sabrgAAAQw"]
[Mon Apr 06 04:59:43.884494 2026] [:error] [pid 35688:tid 35764] [client 4.223.110.88:34554] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adLNP-Z85qg4jLsRpQyY0wAAAI4"]
[Mon Apr 06 04:59:44.606729 2026] [:error] [pid 9442:tid 9458] [client 4.223.110.88:7953] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adLNQEPsNnAJTnmz6sabtgAAAQ4"]
[Mon Apr 06 04:59:45.523900 2026] [:error] [pid 9442:tid 9466] [client 4.223.110.88:27465] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adLNQUPsNnAJTnmz6sabvAAAARY"]
[Mon Apr 06 04:59:46.353836 2026] [:error] [pid 9442:tid 9462] [client 4.223.110.88:24951] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adLNQkPsNnAJTnmz6sabxwAAARI"]
[Mon Apr 06 04:59:47.300231 2026] [:error] [pid 35688:tid 35757] [client 4.223.110.88:27463] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adLNQ-Z85qg4jLsRpQyY1gAAAIc"]
[Mon Apr 06 04:59:48.253934 2026] [:error] [pid 35687:tid 35748] [client 4.223.110.88:24902] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adLNRJ3LtDozV0i8BiuO3AAAAFg"]
[Mon Apr 06 04:59:49.163854 2026] [:error] [pid 35786:tid 35809] [client 4.223.110.88:34539] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adLNRWgkfCKTaLhwaKQGgQAAANA"]
[Mon Apr 06 04:59:49.764585 2026] [:error] [pid 35687:tid 35742] [client 4.223.110.88:7984] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "adLNRZ3LtDozV0i8BiuO3gAAAFM"]
[Mon Apr 06 04:59:50.514303 2026] [:error] [pid 35786:tid 35808] [client 4.223.110.88:50403] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "adLNRmgkfCKTaLhwaKQGhwAAAM8"]
[Mon Apr 06 04:59:51.132415 2026] [:error] [pid 9442:tid 9451] [client 4.223.110.88:44441] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "adLNR0PsNnAJTnmz6sab4QAAAQc"]
[Mon Apr 06 04:59:51.939265 2026] [:error] [pid 35786:tid 35793] [client 4.223.110.88:47168] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "adLNR2gkfCKTaLhwaKQGjQAAAMA"]
[Mon Apr 06 04:59:52.896974 2026] [:error] [pid 35688:tid 35769] [client 4.223.110.88:41766] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adLNSOZ85qg4jLsRpQyY3QAAAJM"]
[Mon Apr 06 04:59:53.870547 2026] [:error] [pid 35686:tid 35705] [client 4.223.110.88:44459] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adLNScMKdea6oORd2fw7HQAAAAk"]
[Mon Apr 06 04:59:55.030276 2026] [:error] [pid 35786:tid 35814] [client 4.223.110.88:45696] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adLNS2gkfCKTaLhwaKQGlQAAANU"]
[Mon Apr 06 04:59:55.925162 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:34527] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adLNS0PsNnAJTnmz6sab8gAAAQQ"]
[Mon Apr 06 04:59:56.545544 2026] [:error] [pid 9442:tid 9453] [client 4.223.110.88:35843] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adLNTEPsNnAJTnmz6sab-wAAAQk"]
[Mon Apr 06 04:59:57.416960 2026] [:error] [pid 35686:tid 35719] [client 4.223.110.88:35891] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adLNTcMKdea6oORd2fw7JAAAABc"]
[Mon Apr 06 04:59:58.159737 2026] [:error] [pid 9442:tid 9468] [client 4.223.110.88:45743] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adLNTkPsNnAJTnmz6sacBwAAARg"]
[Mon Apr 06 04:59:59.008004 2026] [:error] [pid 35786:tid 35798] [client 4.223.110.88:41747] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adLNT2gkfCKTaLhwaKQGnQAAAMU"]
[Mon Apr 06 04:59:59.933688 2026] [:error] [pid 35686:tid 35707] [client 4.223.110.88:36600] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNT8MKdea6oORd2fw7KQAAAAs"]
[Mon Apr 06 05:00:00.551997 2026] [:error] [pid 35786:tid 35815] [client 4.223.110.88:35889] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNUGgkfCKTaLhwaKQGpQAAANY"]
[Mon Apr 06 05:00:01.238978 2026] [:error] [pid 35688:tid 35755] [client 4.223.110.88:47181] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNUeZ85qg4jLsRpQyY5wAAAIU"]
[Mon Apr 06 05:00:01.775811 2026] [:error] [pid 9442:tid 9447] [client 4.223.110.88:45702] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNUUPsNnAJTnmz6sacGgAAAQM"]
[Mon Apr 06 05:00:02.527886 2026] [:error] [pid 9442:tid 9459] [client 4.223.110.88:35847] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adLNUkPsNnAJTnmz6sacHgAAAQ8"]
[Mon Apr 06 05:00:03.170715 2026] [:error] [pid 35686:tid 35715] [client 4.223.110.88:45744] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adLNU8MKdea6oORd2fw7LgAAABM"]
[Mon Apr 06 05:00:03.863042 2026] [:error] [pid 35786:tid 35801] [client 4.223.110.88:35868] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adLNU2gkfCKTaLhwaKQGrQAAAMg"]
[Mon Apr 06 05:00:04.403197 2026] [proxy_fcgi:error] [pid 35786:tid 35794] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:04.689899 2026] [proxy_fcgi:error] [pid 35786:tid 35800] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:04.959453 2026] [proxy_fcgi:error] [pid 35786:tid 35813] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:05.253745 2026] [proxy_fcgi:error] [pid 35786:tid 35817] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:05.543297 2026] [proxy_fcgi:error] [pid 35786:tid 35804] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:05.839341 2026] [proxy_fcgi:error] [pid 35786:tid 35793] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:06.116021 2026] [proxy_fcgi:error] [pid 35786:tid 35795] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:06.381516 2026] [proxy_fcgi:error] [pid 35786:tid 35799] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:06.656438 2026] [proxy_fcgi:error] [pid 35786:tid 35807] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:07.269110 2026] [proxy_fcgi:error] [pid 35786:tid 35811] [client 4.223.110.88:34500] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:00:07.532627 2026] [:error] [pid 35786:tid 35796] [client 4.223.110.88:34500] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adLNV2gkfCKTaLhwaKQGvgAAAMM"]
[Mon Apr 06 05:00:08.142325 2026] [:error] [pid 35687:tid 35724] [client 4.223.110.88:41781] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adLNWJ3LtDozV0i8BiuO9AAAAEE"]
[Mon Apr 06 05:00:08.921051 2026] [:error] [pid 9442:tid 9464] [client 4.223.110.88:34508] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adLNWEPsNnAJTnmz6sacNwAAARQ"]
[Mon Apr 06 05:00:09.528097 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:24160] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adLNWUPsNnAJTnmz6sacOgAAAQI"]
[Mon Apr 06 05:00:10.268614 2026] [:error] [pid 35686:tid 35718] [client 4.223.110.88:41751] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "adLNWsMKdea6oORd2fw7NwAAABY"]
[Mon Apr 06 05:00:10.915529 2026] [:error] [pid 9442:tid 9462] [client 4.223.110.88:24906] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "adLNWkPsNnAJTnmz6sacQgAAARI"]
[Mon Apr 06 05:00:11.635756 2026] [:error] [pid 35786:tid 35807] [client 4.223.110.88:7969] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "adLNW2gkfCKTaLhwaKQGxAAAAM4"]
[Mon Apr 06 05:00:12.323789 2026] [:error] [pid 35786:tid 35810] [client 4.223.110.88:24941] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "adLNXGgkfCKTaLhwaKQGygAAANE"]
[Mon Apr 06 05:00:13.027275 2026] [:error] [pid 9442:tid 9461] [client 4.223.110.88:34524] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "adLNXUPsNnAJTnmz6sacTQAAARE"]
[Mon Apr 06 05:00:13.621160 2026] [:error] [pid 9442:tid 9464] [client 4.223.110.88:7944] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "adLNXUPsNnAJTnmz6sacUAAAARQ"]
[Mon Apr 06 05:00:14.211493 2026] [:error] [pid 35688:tid 35765] [client 4.223.110.88:35867] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "adLNXuZ85qg4jLsRpQyY9AAAAI8"]
[Mon Apr 06 05:00:14.989731 2026] [:error] [pid 35688:tid 35766] [client 4.223.110.88:47195] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "adLNXuZ85qg4jLsRpQyY-AAAAJA"]
[Mon Apr 06 05:00:15.838870 2026] [:error] [pid 35688:tid 35771] [client 4.223.110.88:24903] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "adLNX-Z85qg4jLsRpQyY_QAAAJU"]
[Mon Apr 06 05:00:16.621630 2026] [:error] [pid 35686:tid 35719] [client 4.223.110.88:34518] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "adLNYMMKdea6oORd2fw7QQAAABc"]
[Mon Apr 06 05:00:17.624570 2026] [:error] [pid 9442:tid 9444] [client 4.223.110.88:7998] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "adLNYUPsNnAJTnmz6sacXQAAAQA"]
[Mon Apr 06 05:00:18.369394 2026] [:error] [pid 35688:tid 35758] [client 4.223.110.88:44429] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "adLNYuZ85qg4jLsRpQyZAgAAAIg"]
[Mon Apr 06 05:00:19.229220 2026] [:error] [pid 35686:tid 35706] [client 4.223.110.88:35863] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adLNY8MKdea6oORd2fw7RAAAAAo"]
[Mon Apr 06 05:00:19.942535 2026] [:error] [pid 9442:tid 9449] [client 4.223.110.88:24899] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adLNY0PsNnAJTnmz6sacYQAAAQU"]
[Mon Apr 06 05:00:20.795606 2026] [:error] [pid 35687:tid 35728] [client 4.223.110.88:44435] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adLNZJ3LtDozV0i8BiuPCgAAAEU"]
[Mon Apr 06 05:00:22.082126 2026] [:error] [pid 35786:tid 35798] [client 4.223.110.88:31945] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "adLNZmgkfCKTaLhwaKQG2wAAAMU"]
[Mon Apr 06 05:00:23.412818 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:7945] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "adLNZ0PsNnAJTnmz6sacdAAAAQQ"]
[Mon Apr 06 05:00:24.019247 2026] [:error] [pid 35686:tid 35720] [client 4.223.110.88:27466] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "adLNaMMKdea6oORd2fw7SQAAABg"]
[Mon Apr 06 05:00:25.328262 2026] [:error] [pid 35688:tid 35757] [client 4.223.110.88:41761] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "adLNaeZ85qg4jLsRpQyZDgAAAIc"]
[Mon Apr 06 05:00:26.666547 2026] [:error] [pid 35686:tid 35708] [client 4.223.110.88:34525] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "adLNasMKdea6oORd2fw7TAAAAAw"]
[Mon Apr 06 05:00:27.652897 2026] [:error] [pid 9442:tid 9463] [client 4.223.110.88:50389] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "adLNa0PsNnAJTnmz6sacgwAAARM"]
[Mon Apr 06 05:00:28.639146 2026] [:error] [pid 35786:tid 35804] [client 4.223.110.88:41770] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "adLNbGgkfCKTaLhwaKQG6wAAAMs"]
[Mon Apr 06 05:00:29.575764 2026] [:error] [pid 35786:tid 35809] [client 4.223.110.88:45755] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "adLNbWgkfCKTaLhwaKQG7gAAANA"]
[Mon Apr 06 05:00:30.980249 2026] [:error] [pid 9442:tid 9459] [client 4.223.110.88:47183] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "adLNbkPsNnAJTnmz6saciAAAAQ8"]
[Mon Apr 06 05:00:32.032103 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:34558] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "adLNcEPsNnAJTnmz6sacjgAAAQI"]
[Mon Apr 06 05:00:32.994355 2026] [:error] [pid 35687:tid 35724] [client 4.223.110.88:44462] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "adLNcJ3LtDozV0i8BiuPGQAAAEE"]
[Mon Apr 06 05:00:33.872563 2026] [:error] [pid 35687:tid 35748] [client 4.223.110.88:22152] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "adLNcZ3LtDozV0i8BiuPHwAAAFg"]
[Mon Apr 06 05:00:34.590865 2026] [:error] [pid 9442:tid 9464] [client 4.223.110.88:44443] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "adLNckPsNnAJTnmz6sackgAAARQ"]
[Mon Apr 06 05:00:35.315747 2026] [:error] [pid 35786:tid 35802] [client 4.223.110.88:27459] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "adLNc2gkfCKTaLhwaKQHCAAAAMk"]
[Mon Apr 06 05:00:36.693629 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:27468] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "adLNdGgkfCKTaLhwaKQHCgAAAMI"]
[Mon Apr 06 05:00:37.570002 2026] [:error] [pid 35687:tid 35732] [client 4.223.110.88:24143] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "adLNdZ3LtDozV0i8BiuPJgAAAEk"]
[Mon Apr 06 05:00:38.889899 2026] [:error] [pid 9442:tid 9454] [client 4.223.110.88:7973] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "adLNdkPsNnAJTnmz6sacqgAAAQo"]
[Mon Apr 06 05:00:40.054491 2026] [:error] [pid 35688:tid 35774] [client 4.223.110.88:22198] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adLNeOZ85qg4jLsRpQyZHQAAAJg"]
[Mon Apr 06 05:00:41.145901 2026] [:error] [pid 9442:tid 9461] [client 4.223.110.88:30767] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adLNeUPsNnAJTnmz6sacuQAAARE"]
[Mon Apr 06 05:00:41.794316 2026] [:error] [pid 35786:tid 35793] [client 4.223.110.88:27509] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adLNeWgkfCKTaLhwaKQHGwAAAMA"]
[Mon Apr 06 05:00:42.514256 2026] [:error] [pid 35786:tid 35813] [client 4.223.110.88:7961] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adLNemgkfCKTaLhwaKQHHQAAANQ"]
[Mon Apr 06 05:00:43.325351 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:7975] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "adLNe0PsNnAJTnmz6sacxwAAAQw"]
[Mon Apr 06 05:00:44.006144 2026] [:error] [pid 9442:tid 9467] [client 4.223.110.88:41768] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "adLNfEPsNnAJTnmz6sacywAAARc"]
[Mon Apr 06 05:00:44.653689 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:22165] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "adLNfEPsNnAJTnmz6sac0wAAARU"]
[Mon Apr 06 05:00:45.410668 2026] [:error] [pid 9442:tid 9444] [client 4.223.110.88:35888] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "adLNfUPsNnAJTnmz6sac1wAAAQA"]
[Mon Apr 06 05:00:46.167551 2026] [:error] [pid 35786:tid 35815] [client 4.223.110.88:27513] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNfmgkfCKTaLhwaKQHIgAAANY"]
[Mon Apr 06 05:00:46.904760 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:27473] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNfkPsNnAJTnmz6sac3AAAARU"]
[Mon Apr 06 05:00:47.574420 2026] [:error] [pid 35786:tid 35809] [client 4.223.110.88:27501] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNf2gkfCKTaLhwaKQHKQAAANA"]
[Mon Apr 06 05:00:48.214680 2026] [:error] [pid 35786:tid 35805] [client 4.223.110.88:19739] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adLNgGgkfCKTaLhwaKQHLwAAAMw"]
[Mon Apr 06 05:00:48.847553 2026] [:error] [pid 35786:tid 35808] [client 4.223.110.88:44416] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNgGgkfCKTaLhwaKQHMgAAAM8"]
[Mon Apr 06 05:00:49.441853 2026] [:error] [pid 35686:tid 35720] [client 4.223.110.88:41783] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNgcMKdea6oORd2fw7ZwAAABg"]
[Mon Apr 06 05:00:50.171099 2026] [:error] [pid 35686:tid 35700] [client 4.223.110.88:27481] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNgsMKdea6oORd2fw7bQAAAAQ"]
[Mon Apr 06 05:00:51.097851 2026] [:error] [pid 35786:tid 35794] [client 4.223.110.88:34537] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNg2gkfCKTaLhwaKQHOwAAAME"]
[Mon Apr 06 05:00:51.725589 2026] [:error] [pid 35686:tid 35707] [client 4.223.110.88:27497] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adLNg8MKdea6oORd2fw7cgAAAAs"]
[Mon Apr 06 05:00:52.716684 2026] [:error] [pid 35786:tid 35813] [client 4.223.110.88:44460] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adLNhGgkfCKTaLhwaKQHRgAAANQ"]
[Mon Apr 06 05:00:53.742801 2026] [:error] [pid 35786:tid 35802] [client 4.223.110.88:19730] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adLNhWgkfCKTaLhwaKQHUgAAAMk"]
[Mon Apr 06 05:00:54.410178 2026] [:error] [pid 35688:tid 35755] [client 4.223.110.88:35896] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adLNhuZ85qg4jLsRpQyZJQAAAIU"]
[Mon Apr 06 05:00:55.364994 2026] [:error] [pid 35688:tid 35756] [client 4.223.110.88:24956] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adLNh-Z85qg4jLsRpQyZJgAAAIY"]
[Mon Apr 06 05:00:56.075184 2026] [:error] [pid 35688:tid 35757] [client 4.223.110.88:34556] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adLNiOZ85qg4jLsRpQyZKQAAAIc"]
[Mon Apr 06 05:00:57.020145 2026] [:error] [pid 35786:tid 35794] [client 4.223.110.88:7948] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adLNiWgkfCKTaLhwaKQHXgAAAME"]
[Mon Apr 06 05:00:58.478164 2026] [:error] [pid 35786:tid 35808] [client 4.223.110.88:24917] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adLNimgkfCKTaLhwaKQHYwAAAM8"]
[Mon Apr 06 05:00:59.224092 2026] [:error] [pid 35686:tid 35714] [client 4.223.110.88:50395] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNi8MKdea6oORd2fw7egAAABI"]
[Mon Apr 06 05:01:00.338712 2026] [:error] [pid 35688:tid 35768] [client 4.223.110.88:27482] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNjOZ85qg4jLsRpQyZNgAAAJI"]
[Mon Apr 06 05:01:02.425221 2026] [:error] [pid 35688:tid 35774] [client 4.223.110.88:44463] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNjuZ85qg4jLsRpQyZOgAAAJg"]
[Mon Apr 06 05:01:04.042775 2026] [:error] [pid 35686:tid 35697] [client 4.223.110.88:19406] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adLNkMMKdea6oORd2fw7igAAAAE"]
[Mon Apr 06 05:01:04.917518 2026] [:error] [pid 35687:tid 35724] [client 4.223.110.88:24158] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adLNkJ3LtDozV0i8BiuPUwAAAEE"]
[Mon Apr 06 05:01:05.965144 2026] [:error] [pid 35688:tid 35772] [client 4.223.110.88:27519] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adLNkeZ85qg4jLsRpQyZPQAAAJY"]
[Mon Apr 06 05:01:07.114274 2026] [proxy_fcgi:error] [pid 35687:tid 35731] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:07.441318 2026] [proxy_fcgi:error] [pid 35687:tid 35748] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:07.707694 2026] [proxy_fcgi:error] [pid 35687:tid 35746] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:11.847313 2026] [proxy_fcgi:error] [pid 35687:tid 35746] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:12.113903 2026] [proxy_fcgi:error] [pid 35687:tid 35744] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:12.382390 2026] [proxy_fcgi:error] [pid 35687:tid 35740] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:12.649298 2026] [proxy_fcgi:error] [pid 35687:tid 35734] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:12.930327 2026] [proxy_fcgi:error] [pid 35687:tid 35730] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:13.651682 2026] [proxy_fcgi:error] [pid 35687:tid 35737] [client 4.223.110.88:7978] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:01:13.913870 2026] [:error] [pid 35687:tid 35739] [client 4.223.110.88:7978] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adLNmZ3LtDozV0i8BiuPcAAAAFA"]
[Mon Apr 06 05:01:14.998606 2026] [:error] [pid 35688:tid 35753] [client 4.223.110.88:45730] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adLNmuZ85qg4jLsRpQyZTAAAAIM"]
[Mon Apr 06 05:01:16.385732 2026] [:error] [pid 35786:tid 35805] [client 4.223.110.88:41780] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adLNnGgkfCKTaLhwaKQHdwAAAMw"]
[Mon Apr 06 05:01:17.372195 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:22171] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adLNnUPsNnAJTnmz6sadIAAAAQQ"]
[Mon Apr 06 05:01:18.551661 2026] [:error] [pid 35786:tid 35797] [client 4.223.110.88:44436] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adLNnmgkfCKTaLhwaKQHhgAAAMQ"]
[Mon Apr 06 05:01:19.355432 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:45731] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adLNn2gkfCKTaLhwaKQHigAAAMI"]
[Mon Apr 06 05:01:20.486414 2026] [:error] [pid 35786:tid 35806] [client 4.223.110.88:29686] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adLNoGgkfCKTaLhwaKQHjAAAAM0"]
[Mon Apr 06 05:01:21.723308 2026] [:error] [pid 35688:tid 35762] [client 4.223.110.88:45817] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adLNoeZ85qg4jLsRpQyZWQAAAIw"]
[Mon Apr 06 05:01:22.402958 2026] [:error] [pid 35786:tid 35793] [client 4.223.110.88:19411] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adLNomgkfCKTaLhwaKQHkwAAAMA"]
[Mon Apr 06 05:01:23.260563 2026] [:error] [pid 35686:tid 35707] [client 4.223.110.88:19760] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adLNo8MKdea6oORd2fw7xAAAAAs"]
[Mon Apr 06 05:01:24.387114 2026] [:error] [pid 35686:tid 35705] [client 4.223.110.88:22184] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adLNpMMKdea6oORd2fw7yQAAAAk"]
[Mon Apr 06 05:01:26.318415 2026] [:error] [pid 9442:tid 9457] [client 4.223.110.88:29673] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adLNpkPsNnAJTnmz6sadMwAAAQ0"]
[Mon Apr 06 05:01:28.121761 2026] [:error] [pid 35687:tid 35726] [client 4.223.110.88:19454] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adLNqJ3LtDozV0i8BiuPeQAAAEM"]
[Mon Apr 06 05:01:29.026494 2026] [:error] [pid 35786:tid 35811] [client 4.223.110.88:47230] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adLNqWgkfCKTaLhwaKQHoAAAANI"]
[Mon Apr 06 05:01:29.986997 2026] [:error] [pid 35686:tid 35701] [client 4.223.110.88:19446] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adLNqcMKdea6oORd2fw72gAAAAU"]
[Mon Apr 06 05:01:34.424751 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:23488] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "adLNrmgkfCKTaLhwaKQHtgAAAMI"]
[Mon Apr 06 05:01:35.574876 2026] [:error] [pid 35786:tid 35809] [client 4.223.110.88:45805] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNr2gkfCKTaLhwaKQHuQAAANA"]
[Mon Apr 06 05:01:36.267515 2026] [:error] [pid 35688:tid 35771] [client 4.223.110.88:63400] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNsOZ85qg4jLsRpQyZawAAAJU"]
[Mon Apr 06 05:01:36.976659 2026] [:error] [pid 35686:tid 35705] [client 4.223.110.88:19772] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNsMMKdea6oORd2fw74gAAAAk"]
[Mon Apr 06 05:01:37.717220 2026] [:error] [pid 35686:tid 35718] [client 4.223.110.88:46512] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adLNscMKdea6oORd2fw75AAAABY"]
[Mon Apr 06 05:01:38.710131 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:45780] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adLNskPsNnAJTnmz6sadTgAAAQQ"]
[Mon Apr 06 05:01:39.763444 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:45801] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adLNs0PsNnAJTnmz6sadUAAAAQE"]
[Mon Apr 06 05:01:41.246345 2026] [:error] [pid 35687:tid 35746] [client 4.223.110.88:22801] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adLNtZ3LtDozV0i8BiuPlgAAAFc"]
[Mon Apr 06 05:01:42.365097 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:37811] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adLNtmgkfCKTaLhwaKQH0QAAAMI"]
[Mon Apr 06 05:01:43.183025 2026] [:error] [pid 35786:tid 35799] [client 4.223.110.88:60172] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adLNt2gkfCKTaLhwaKQH1QAAAMY"]
[Mon Apr 06 05:01:43.982131 2026] [:error] [pid 35786:tid 35810] [client 4.223.110.88:37785] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adLNt2gkfCKTaLhwaKQH2AAAANE"]
[Mon Apr 06 05:01:45.934586 2026] [:error] [pid 9442:tid 9452] [client 4.223.110.88:63387] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adLNuUPsNnAJTnmz6sadWwAAAQg"]
[Mon Apr 06 05:01:47.098755 2026] [:error] [pid 9442:tid 9467] [client 4.223.110.88:45770] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adLNu0PsNnAJTnmz6sadXgAAARc"]
[Mon Apr 06 05:01:48.307487 2026] [:error] [pid 35786:tid 35801] [client 4.223.110.88:60184] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adLNvGgkfCKTaLhwaKQH4wAAAMg"]
[Mon Apr 06 05:01:49.111949 2026] [:error] [pid 9442:tid 9468] [client 4.223.110.88:37761] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adLNvUPsNnAJTnmz6sadaAAAARg"]
[Mon Apr 06 05:01:49.794450 2026] [:error] [pid 35687:tid 35742] [client 4.223.110.88:33984] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adLNvZ3LtDozV0i8BiuPnwAAAFM"]
[Mon Apr 06 05:01:51.162488 2026] [:error] [pid 9442:tid 9449] [client 4.223.110.88:46472] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adLNv0PsNnAJTnmz6sadcAAAAQU"]
[Mon Apr 06 05:01:51.851340 2026] [:error] [pid 9442:tid 9463] [client 4.223.110.88:24906] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "adLNv0PsNnAJTnmz6saddgAAARM"]
[Mon Apr 06 05:01:52.696049 2026] [:error] [pid 35688:tid 35766] [client 4.223.110.88:37799] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "adLNwOZ85qg4jLsRpQyZfgAAAJA"]
[Mon Apr 06 05:01:53.682396 2026] [:error] [pid 9442:tid 9451] [client 4.223.110.88:60184] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "adLNwUPsNnAJTnmz6sadggAAAQc"]
[Mon Apr 06 05:01:54.706776 2026] [:error] [pid 9442:tid 9452] [client 4.223.110.88:34024] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "adLNwkPsNnAJTnmz6sadiQAAAQg"]
[Mon Apr 06 05:01:55.753350 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:7218] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about2.php"] [unique_id "adLNw0PsNnAJTnmz6sadjQAAAQI"]
[Mon Apr 06 05:01:56.561553 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:60222] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about2.php"] [unique_id "adLNxEPsNnAJTnmz6sadkgAAAQw"]
[Mon Apr 06 05:01:57.376088 2026] [:error] [pid 35687:tid 35729] [client 4.223.110.88:22808] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about2.php"] [unique_id "adLNxZ3LtDozV0i8BiuPogAAAEY"]
[Mon Apr 06 05:01:58.460668 2026] [:error] [pid 35786:tid 35808] [client 4.223.110.88:46519] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about2.php"] [unique_id "adLNxmgkfCKTaLhwaKQH8gAAAM8"]
[Mon Apr 06 05:01:59.562330 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:7450] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "adLNx8MKdea6oORd2fw7_QAAAAA"]
[Mon Apr 06 05:02:01.116809 2026] [:error] [pid 35687:tid 35740] [client 4.223.110.88:7485] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "adLNyZ3LtDozV0i8BiuPqgAAAFE"]
[Mon Apr 06 05:02:01.904859 2026] [:error] [pid 35687:tid 35743] [client 4.223.110.88:22833] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "adLNyZ3LtDozV0i8BiuPrgAAAFQ"]
[Mon Apr 06 05:02:03.442469 2026] [:error] [pid 35686:tid 35699] [client 4.223.110.88:22792] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "adLNy8MKdea6oORd2fw7_gAAAAM"]
[Mon Apr 06 05:02:04.413438 2026] [:error] [pid 35688:tid 35763] [client 4.223.110.88:24906] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "adLNzOZ85qg4jLsRpQyZhAAAAI0"]
[Mon Apr 06 05:02:05.279066 2026] [:error] [pid 35687:tid 35745] [client 4.223.110.88:7223] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "adLNzZ3LtDozV0i8BiuPtQAAAFY"]
[Mon Apr 06 05:02:06.065391 2026] [:error] [pid 9442:tid 9462] [client 4.223.110.88:19356] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "adLNzkPsNnAJTnmz6saduQAAARI"]
[Mon Apr 06 05:02:06.868675 2026] [:error] [pid 9442:tid 9464] [client 4.223.110.88:22842] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "adLNzkPsNnAJTnmz6sadwAAAARQ"]
[Mon Apr 06 05:02:07.540344 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:22791] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "adLNz0PsNnAJTnmz6sadxgAAARU"]
[Mon Apr 06 05:02:08.298801 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:19340] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "adLN0EPsNnAJTnmz6sadygAAAQI"]
[Mon Apr 06 05:02:09.051274 2026] [:error] [pid 35786:tid 35814] [client 4.223.110.88:22832] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "adLN0WgkfCKTaLhwaKQIDQAAANU"]
[Mon Apr 06 05:02:09.814671 2026] [:error] [pid 35687:tid 35736] [client 4.223.110.88:37764] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "adLN0Z3LtDozV0i8BiuPvQAAAE0"]
[Mon Apr 06 05:02:10.838511 2026] [:error] [pid 35686:tid 35710] [client 4.223.110.88:22846] [client 4.223.110.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adLN0sMKdea6oORd2fw8CAAAAA4"]
[Mon Apr 06 05:02:11.521121 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:63360] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "adLN08MKdea6oORd2fw8CwAAAAA"]
[Mon Apr 06 05:02:12.185564 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:19378] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "adLN1EPsNnAJTnmz6sad3QAAAQE"]
[Mon Apr 06 05:02:12.939814 2026] [:error] [pid 9442:tid 9452] [client 4.223.110.88:45774] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "adLN1EPsNnAJTnmz6sad4AAAAQg"]
[Mon Apr 06 05:02:13.560596 2026] [proxy_fcgi:error] [pid 35786:tid 35814] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:14.378106 2026] [proxy_fcgi:error] [pid 35786:tid 35797] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:14.643039 2026] [proxy_fcgi:error] [pid 35786:tid 35809] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:14.909769 2026] [proxy_fcgi:error] [pid 35786:tid 35799] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:15.174832 2026] [proxy_fcgi:error] [pid 35786:tid 35815] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:15.507378 2026] [proxy_fcgi:error] [pid 35786:tid 35805] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:15.774282 2026] [proxy_fcgi:error] [pid 35786:tid 35808] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:16.039409 2026] [proxy_fcgi:error] [pid 35786:tid 35803] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:16.314490 2026] [proxy_fcgi:error] [pid 35786:tid 35814] [client 4.223.110.88:45798] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:02:16.577871 2026] [:error] [pid 35786:tid 35794] [client 4.223.110.88:45798] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adLN2GgkfCKTaLhwaKQIMAAAAME"]
[Mon Apr 06 05:02:17.341123 2026] [:error] [pid 9442:tid 9463] [client 4.223.110.88:22789] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adLN2UPsNnAJTnmz6sad-QAAARM"]
[Mon Apr 06 05:02:18.244379 2026] [:error] [pid 35786:tid 35807] [client 4.223.110.88:60171] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adLN2mgkfCKTaLhwaKQINgAAAM4"]
[Mon Apr 06 05:02:18.842916 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:34044] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adLN2kPsNnAJTnmz6saeAwAAAQI"]
[Mon Apr 06 05:02:19.555553 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:22831] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adLN22gkfCKTaLhwaKQIPQAAAMI"]
[Mon Apr 06 05:02:20.322018 2026] [:error] [pid 35786:tid 35798] [client 4.223.110.88:37804] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adLN3GgkfCKTaLhwaKQIQgAAAMU"]
[Mon Apr 06 05:02:21.334668 2026] [:error] [pid 9442:tid 9463] [client 4.223.110.88:63365] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adLN3UPsNnAJTnmz6saeBQAAARM"]
[Mon Apr 06 05:02:22.387992 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:7215] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adLN3kPsNnAJTnmz6saeCQAAAQQ"]
[Mon Apr 06 05:02:23.681933 2026] [:error] [pid 35686:tid 35700] [client 4.223.110.88:7172] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adLN38MKdea6oORd2fw8GQAAAAQ"]
[Mon Apr 06 05:02:24.741109 2026] [:error] [pid 9442:tid 9461] [client 4.223.110.88:63378] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adLN4EPsNnAJTnmz6saeGwAAARE"]
[Mon Apr 06 05:02:25.649152 2026] [:error] [pid 35786:tid 35796] [client 4.223.110.88:19335] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adLN4WgkfCKTaLhwaKQIVAAAAMM"]
[Mon Apr 06 05:02:26.510140 2026] [:error] [pid 35688:tid 35765] [client 4.223.110.88:7429] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adLN4uZ85qg4jLsRpQyZjQAAAI8"]
[Mon Apr 06 05:02:28.009415 2026] [:error] [pid 9442:tid 9452] [client 4.223.110.88:60203] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adLN5EPsNnAJTnmz6saeKAAAAQg"]
[Mon Apr 06 05:02:28.854560 2026] [:error] [pid 35687:tid 35743] [client 4.223.110.88:46517] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adLN5J3LtDozV0i8BiuP1gAAAFQ"]
[Mon Apr 06 05:02:29.819006 2026] [:error] [pid 35687:tid 35739] [client 4.223.110.88:22797] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adLN5Z3LtDozV0i8BiuP1wAAAFA"]
[Mon Apr 06 05:02:30.577686 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:7437] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adLN5kPsNnAJTnmz6saeNQAAARU"]
[Mon Apr 06 05:02:31.750592 2026] [:error] [pid 35686:tid 35704] [client 4.223.110.88:19362] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adLN58MKdea6oORd2fw8HgAAAAg"]
[Mon Apr 06 05:02:32.543914 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:60189] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adLN6EPsNnAJTnmz6saePAAAAQQ"]
[Mon Apr 06 05:02:33.584657 2026] [:error] [pid 35786:tid 35813] [client 4.223.110.88:60218] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adLN6WgkfCKTaLhwaKQIaAAAANQ"]
[Mon Apr 06 05:02:34.149405 2026] [:error] [pid 9442:tid 9456] [client 4.223.110.88:19342] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adLN6kPsNnAJTnmz6saeQgAAAQw"]
[Mon Apr 06 05:02:35.219054 2026] [:error] [pid 35686:tid 35716] [client 4.223.110.88:33990] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adLN68MKdea6oORd2fw8IgAAABQ"]
[Mon Apr 06 05:02:35.841697 2026] [:error] [pid 9442:tid 9468] [client 4.223.110.88:63377] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adLN60PsNnAJTnmz6saeSAAAARg"]
[Mon Apr 06 05:02:36.482655 2026] [:error] [pid 35786:tid 35809] [client 4.223.110.88:7208] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adLN7GgkfCKTaLhwaKQIbwAAANA"]
[Mon Apr 06 05:02:37.166388 2026] [:error] [pid 35786:tid 35811] [client 4.223.110.88:63412] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adLN7WgkfCKTaLhwaKQIcgAAANI"]
[Mon Apr 06 05:02:37.839378 2026] [:error] [pid 35786:tid 35795] [client 4.223.110.88:22825] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adLN7WgkfCKTaLhwaKQIegAAAMI"]
[Mon Apr 06 05:02:38.571883 2026] [:error] [pid 35786:tid 35811] [client 4.223.110.88:63392] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adLN7mgkfCKTaLhwaKQIfgAAANI"]
[Mon Apr 06 05:02:39.342735 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:22796] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adLN70PsNnAJTnmz6saeSgAAARU"]
[Mon Apr 06 05:02:40.128097 2026] [:error] [pid 35686:tid 35701] [client 4.223.110.88:60215] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adLN8MMKdea6oORd2fw8KAAAAAU"]
[Mon Apr 06 05:02:40.908909 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:22834] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adLN8MMKdea6oORd2fw8KgAAAAA"]
[Mon Apr 06 05:02:41.726415 2026] [:error] [pid 35786:tid 35813] [client 4.223.110.88:19391] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adLN8WgkfCKTaLhwaKQIjQAAANQ"]
[Mon Apr 06 05:02:42.501776 2026] [:error] [pid 35688:tid 35763] [client 4.223.110.88:19747] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adLN8uZ85qg4jLsRpQyZnQAAAI0"]
[Mon Apr 06 05:02:43.256028 2026] [:error] [pid 35688:tid 35757] [client 4.223.110.88:63423] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adLN8-Z85qg4jLsRpQyZngAAAIc"]
[Mon Apr 06 05:02:44.073319 2026] [:error] [pid 35688:tid 35766] [client 4.223.110.88:7456] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adLN9OZ85qg4jLsRpQyZogAAAJA"]
[Mon Apr 06 05:02:44.977562 2026] [:error] [pid 35686:tid 35716] [client 4.223.110.88:7483] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adLN9MMKdea6oORd2fw8MQAAABQ"]
[Mon Apr 06 05:02:45.712889 2026] [:error] [pid 9442:tid 9460] [client 4.223.110.88:45789] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adLN9UPsNnAJTnmz6saeVQAAARA"]
[Mon Apr 06 05:02:46.309576 2026] [:error] [pid 35786:tid 35793] [client 4.223.110.88:63375] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adLN9mgkfCKTaLhwaKQIkwAAAMA"]
[Mon Apr 06 05:02:46.912145 2026] [:error] [pid 9442:tid 9465] [client 4.223.110.88:34031] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adLN9kPsNnAJTnmz6saeWAAAARU"]
[Mon Apr 06 05:02:47.537703 2026] [:error] [pid 35687:tid 35727] [client 4.223.110.88:23500] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adLN953LtDozV0i8BiuP9AAAAEQ"]
[Mon Apr 06 05:02:48.263693 2026] [:error] [pid 35688:tid 35763] [client 4.223.110.88:19721] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adLN-OZ85qg4jLsRpQyZpwAAAI0"]
[Mon Apr 06 05:02:48.875604 2026] [:error] [pid 35688:tid 35772] [client 4.223.110.88:45818] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adLN-OZ85qg4jLsRpQyZqQAAAJY"]
[Mon Apr 06 05:02:49.526935 2026] [:error] [pid 35688:tid 35755] [client 4.223.110.88:60173] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adLN-eZ85qg4jLsRpQyZrAAAAIU"]
[Mon Apr 06 05:02:50.240610 2026] [:error] [pid 35688:tid 35773] [client 4.223.110.88:63383] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adLN-uZ85qg4jLsRpQyZsAAAAJc"]
[Mon Apr 06 05:02:50.829180 2026] [:error] [pid 35786:tid 35810] [client 4.223.110.88:19347] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adLN-mgkfCKTaLhwaKQInQAAANE"]
[Mon Apr 06 05:02:51.496868 2026] [:error] [pid 35786:tid 35794] [client 4.223.110.88:7184] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adLN-2gkfCKTaLhwaKQIoAAAAME"]
[Mon Apr 06 05:02:52.174448 2026] [:error] [pid 35686:tid 35702] [client 4.223.110.88:7434] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adLN_MMKdea6oORd2fw8QgAAAAY"]
[Mon Apr 06 05:02:52.761541 2026] [:error] [pid 35686:tid 35697] [client 4.223.110.88:22794] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adLN_MMKdea6oORd2fw8RAAAAAE"]
[Mon Apr 06 05:02:53.391662 2026] [:error] [pid 35686:tid 35718] [client 4.223.110.88:7454] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adLN_cMKdea6oORd2fw8RwAAABY"]
[Mon Apr 06 05:02:54.089169 2026] [:error] [pid 35687:tid 35723] [client 4.223.110.88:37778] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adLN_p3LtDozV0i8BiuP-gAAAEA"]
[Mon Apr 06 05:02:54.744599 2026] [:error] [pid 35786:tid 35810] [client 4.223.110.88:37777] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adLN_mgkfCKTaLhwaKQIpwAAANE"]
[Mon Apr 06 05:02:55.396571 2026] [:error] [pid 35786:tid 35806] [client 4.223.110.88:37800] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adLN_2gkfCKTaLhwaKQIrAAAAM0"]
[Mon Apr 06 05:02:56.071342 2026] [:error] [pid 35686:tid 35702] [client 4.223.110.88:60186] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adLOAMMKdea6oORd2fw8TwAAAAY"]
[Mon Apr 06 05:02:56.691706 2026] [:error] [pid 35686:tid 35697] [client 4.223.110.88:22800] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adLOAMMKdea6oORd2fw8UQAAAAE"]
[Mon Apr 06 05:02:57.338156 2026] [:error] [pid 35686:tid 35696] [client 4.223.110.88:37793] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adLOAcMKdea6oORd2fw8UwAAAAA"]
[Mon Apr 06 05:02:57.959979 2026] [:error] [pid 35688:tid 35771] [client 4.223.110.88:63417] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adLOAeZ85qg4jLsRpQyZugAAAJU"]
[Mon Apr 06 05:02:58.670310 2026] [:error] [pid 35688:tid 35773] [client 4.223.110.88:60169] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adLOAuZ85qg4jLsRpQyZuwAAAJc"]
[Mon Apr 06 05:02:59.294287 2026] [:error] [pid 9442:tid 9448] [client 4.223.110.88:37773] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adLOA0PsNnAJTnmz6saebQAAAQQ"]
[Mon Apr 06 05:02:59.991487 2026] [:error] [pid 9442:tid 9452] [client 4.223.110.88:45781] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "adLOA0PsNnAJTnmz6saecQAAAQg"]
[Mon Apr 06 05:03:00.628988 2026] [:error] [pid 35686:tid 35707] [client 4.223.110.88:63371] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "adLOBMMKdea6oORd2fw8WQAAAAs"]
[Mon Apr 06 05:03:01.209654 2026] [:error] [pid 9442:tid 9446] [client 4.223.110.88:22798] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "adLOBUPsNnAJTnmz6saedgAAAQI"]
[Mon Apr 06 05:03:01.809245 2026] [:error] [pid 35686:tid 35698] [client 4.223.110.88:37792] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "adLOBcMKdea6oORd2fw8XAAAAAI"]
[Mon Apr 06 05:03:02.405807 2026] [:error] [pid 9442:tid 9464] [client 4.223.110.88:63401] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "adLOBkPsNnAJTnmz6saeewAAARQ"]
[Mon Apr 06 05:03:03.147586 2026] [:error] [pid 35786:tid 35802] [client 4.223.110.88:7458] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "adLOB2gkfCKTaLhwaKQIxgAAAMk"]
[Mon Apr 06 05:03:03.812028 2026] [:error] [pid 35687:tid 35739] [client 4.223.110.88:37812] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "adLOB53LtDozV0i8BiuQAQAAAFA"]
[Mon Apr 06 05:03:04.451083 2026] [:error] [pid 35687:tid 35741] [client 4.223.110.88:19333] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "adLOCJ3LtDozV0i8BiuQAgAAAFI"]
[Mon Apr 06 05:03:04.990381 2026] [:error] [pid 9442:tid 9463] [client 4.223.110.88:29687] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "adLOCEPsNnAJTnmz6saeggAAARM"]
[Mon Apr 06 05:03:05.535164 2026] [:error] [pid 9442:tid 9460] [client 4.223.110.88:63390] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "adLOCUPsNnAJTnmz6saegwAAARA"]
[Mon Apr 06 05:03:06.104498 2026] [:error] [pid 35688:tid 35762] [client 4.223.110.88:34009] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "adLOCuZ85qg4jLsRpQyZwAAAAIw"]
[Mon Apr 06 05:03:06.723039 2026] [:error] [pid 9442:tid 9455] [client 4.223.110.88:63391] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/efile.php"] [unique_id "adLOCkPsNnAJTnmz6saeiQAAAQs"]
[Mon Apr 06 05:03:07.312982 2026] [:error] [pid 35686:tid 35702] [client 4.223.110.88:37772] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/afile.php"] [unique_id "adLOC8MKdea6oORd2fw8ZwAAAAY"]
[Mon Apr 06 05:03:08.045087 2026] [:error] [pid 9442:tid 9467] [client 4.223.110.88:19387] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/afile.php"] [unique_id "adLODEPsNnAJTnmz6saekAAAARc"]
[Mon Apr 06 05:03:08.618429 2026] [:error] [pid 9442:tid 9451] [client 4.223.110.88:34023] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/afile.php"] [unique_id "adLODEPsNnAJTnmz6saekwAAAQc"]
[Mon Apr 06 05:03:09.261670 2026] [:error] [pid 9442:tid 9458] [client 4.223.110.88:63382] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/afile.php"] [unique_id "adLODUPsNnAJTnmz6saelgAAAQ4"]
[Mon Apr 06 05:03:09.945418 2026] [:error] [pid 35687:tid 35724] [client 4.223.110.88:34004] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "adLODZ3LtDozV0i8BiuQCQAAAEE"]
[Mon Apr 06 05:03:10.538395 2026] [:error] [pid 35786:tid 35804] [client 4.223.110.88:34017] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "adLODmgkfCKTaLhwaKQI0QAAAMs"]
[Mon Apr 06 05:03:11.172617 2026] [:error] [pid 9442:tid 9445] [client 4.223.110.88:37806] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "adLOD0PsNnAJTnmz6saeoAAAAQE"]
[Mon Apr 06 05:03:11.717496 2026] [:error] [pid 35786:tid 35815] [client 4.223.110.88:7467] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "adLOD2gkfCKTaLhwaKQI1QAAANY"]
[Mon Apr 06 05:03:12.263058 2026] [:error] [pid 35786:tid 35807] [client 4.223.110.88:7227] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adLOEGgkfCKTaLhwaKQI1wAAAM4"]
[Mon Apr 06 05:03:12.811326 2026] [:error] [pid 35786:tid 35798] [client 4.223.110.88:63386] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adLOEGgkfCKTaLhwaKQI2QAAAMU"]
[Mon Apr 06 05:03:13.339515 2026] [:error] [pid 35786:tid 35797] [client 4.223.110.88:45767] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adLOEWgkfCKTaLhwaKQI2wAAAMQ"]
[Mon Apr 06 05:03:13.885627 2026] [:error] [pid 35786:tid 35799] [client 4.223.110.88:29673] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adLOEWgkfCKTaLhwaKQI3QAAAMY"]
[Mon Apr 06 05:03:14.650550 2026] [:error] [pid 35687:tid 35730] [client 4.223.110.88:34046] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "adLOEp3LtDozV0i8BiuQDAAAAEc"]
[Mon Apr 06 05:03:15.349542 2026] [:error] [pid 35686:tid 35702] [client 4.223.110.88:45791] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "adLOE8MKdea6oORd2fw8cgAAAAY"]
[Mon Apr 06 05:03:15.984455 2026] [:error] [pid 35686:tid 35714] [client 4.223.110.88:7214] [client 4.223.110.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "adLOE8MKdea6oORd2fw8dgAAABI"]
[Mon Apr 06 05:03:16.563295 2026] [proxy_fcgi:error] [pid 35786:tid 35806] [client 4.223.110.88:37782] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:03:16.831206 2026] [proxy_fcgi:error] [pid 35786:tid 35803] [client 4.223.110.88:37782] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:03:17.148044 2026] [proxy_fcgi:error] [pid 35786:tid 35814] [client 4.223.110.88:37782] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 05:35:25.689563 2026] [:error] [pid 35688:tid 35766] [client 43.166.239.145:43186] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adLVneZ85qg4jLsRpQylqgAAAJA"]
[Mon Apr 06 06:08:35.811874 2026] [proxy_fcgi:error] [pid 35786:tid 35796] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:36.055514 2026] [proxy_fcgi:error] [pid 35786:tid 35797] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:36.342729 2026] [proxy_fcgi:error] [pid 35786:tid 35809] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:36.655687 2026] [proxy_fcgi:error] [pid 35786:tid 35811] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:36.898065 2026] [proxy_fcgi:error] [pid 35786:tid 35807] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:37.140755 2026] [proxy_fcgi:error] [pid 35786:tid 35794] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:37.384732 2026] [proxy_fcgi:error] [pid 35786:tid 35810] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:37.629148 2026] [proxy_fcgi:error] [pid 35786:tid 35809] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:37.874091 2026] [proxy_fcgi:error] [pid 35786:tid 35811] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:38.130078 2026] [proxy_fcgi:error] [pid 35786:tid 35801] [client 158.158.105.166:17503] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 06:08:38.371037 2026] [:error] [pid 35786:tid 35816] [client 158.158.105.166:17503] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adLdZmgkfCKTaLhwaKQvZwAAANc"]
[Mon Apr 06 06:08:39.073718 2026] [:error] [pid 35686:tid 35712] [client 158.158.105.166:13934] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adLdZ8MKdea6oORd2fxaIgAAABA"]
[Mon Apr 06 06:08:39.612376 2026] [:error] [pid 35686:tid 35716] [client 158.158.105.166:17518] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adLdZ8MKdea6oORd2fxaKAAAABQ"]
[Mon Apr 06 06:08:40.259073 2026] [:error] [pid 9442:tid 9464] [client 158.158.105.166:10184] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adLdaEPsNnAJTnmz6sbaBAAAARQ"]
[Mon Apr 06 06:08:40.816364 2026] [:error] [pid 35688:tid 35771] [client 158.158.105.166:13967] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/act.php"] [unique_id "adLdaOZ85qg4jLsRpQyxMgAAAJU"]
[Mon Apr 06 06:08:41.455311 2026] [:error] [pid 35786:tid 35807] [client 158.158.105.166:14013] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/act.php"] [unique_id "adLdaWgkfCKTaLhwaKQvcAAAAM4"]
[Mon Apr 06 06:08:42.086721 2026] [:error] [pid 35686:tid 35710] [client 158.158.105.166:10210] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/act.php"] [unique_id "adLdasMKdea6oORd2fxaMwAAAA4"]
[Mon Apr 06 06:08:42.770420 2026] [:error] [pid 35686:tid 35703] [client 158.158.105.166:13965] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/act.php"] [unique_id "adLdasMKdea6oORd2fxaNwAAAAc"]
[Mon Apr 06 06:08:43.485933 2026] [:error] [pid 35687:tid 35728] [client 158.158.105.166:17438] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adLda53LtDozV0i8BiujogAAAEU"]
[Mon Apr 06 06:08:44.037551 2026] [:error] [pid 9442:tid 9447] [client 158.158.105.166:13996] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adLdbEPsNnAJTnmz6sbaHQAAAQM"]
[Mon Apr 06 06:08:44.834819 2026] [:error] [pid 9442:tid 9449] [client 158.158.105.166:10228] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adLdbEPsNnAJTnmz6sbaIQAAAQU"]
[Mon Apr 06 06:08:45.417194 2026] [:error] [pid 35688:tid 35755] [client 158.158.105.166:17444] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adLdbeZ85qg4jLsRpQyxNAAAAIU"]
[Mon Apr 06 06:08:45.968373 2026] [:error] [pid 9442:tid 9447] [client 158.158.105.166:17471] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prosell2.php"] [unique_id "adLdbUPsNnAJTnmz6sbaJgAAAQM"]
[Mon Apr 06 06:08:46.574868 2026] [:error] [pid 9442:tid 9468] [client 158.158.105.166:17454] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prosell2.php"] [unique_id "adLdbkPsNnAJTnmz6sbaKwAAARg"]
[Mon Apr 06 06:08:47.167138 2026] [:error] [pid 35786:tid 35794] [client 158.158.105.166:17493] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prosell2.php"] [unique_id "adLdb2gkfCKTaLhwaKQvigAAAME"]
[Mon Apr 06 06:08:47.773924 2026] [:error] [pid 35786:tid 35793] [client 158.158.105.166:17419] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prosell2.php"] [unique_id "adLdb2gkfCKTaLhwaKQvjwAAAMA"]
[Mon Apr 06 06:08:48.302809 2026] [:error] [pid 9442:tid 9467] [client 158.158.105.166:10183] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bdktk.php"] [unique_id "adLdcEPsNnAJTnmz6sbaMgAAARc"]
[Mon Apr 06 06:08:48.967325 2026] [:error] [pid 9442:tid 9466] [client 158.158.105.166:17501] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bdktk.php"] [unique_id "adLdcEPsNnAJTnmz6sbaNgAAARY"]
[Mon Apr 06 06:08:49.551783 2026] [:error] [pid 35688:tid 35762] [client 158.158.105.166:10395] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bdktk.php"] [unique_id "adLdceZ85qg4jLsRpQyxPgAAAIw"]
[Mon Apr 06 06:08:50.122890 2026] [:error] [pid 9442:tid 9452] [client 158.158.105.166:10368] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bdktk.php"] [unique_id "adLdckPsNnAJTnmz6sbaOQAAAQg"]
[Mon Apr 06 06:08:50.848402 2026] [:error] [pid 35786:tid 35817] [client 158.158.105.166:10370] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "adLdcmgkfCKTaLhwaKQvnwAAANg"]
[Mon Apr 06 06:08:51.387841 2026] [:error] [pid 9442:tid 9456] [client 158.158.105.166:10208] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "adLdc0PsNnAJTnmz6sbaPwAAAQw"]
[Mon Apr 06 06:08:51.940326 2026] [:error] [pid 35688:tid 35767] [client 158.158.105.166:17459] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "adLdc-Z85qg4jLsRpQyxQQAAAJE"]
[Mon Apr 06 06:08:52.559026 2026] [:error] [pid 35687:tid 35746] [client 158.158.105.166:13929] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "adLddJ3LtDozV0i8BiujrAAAAFc"]
[Mon Apr 06 06:08:53.430716 2026] [:error] [pid 9442:tid 9466] [client 158.158.105.166:19210] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bx.php"] [unique_id "adLddUPsNnAJTnmz6sbaTwAAARY"]
[Mon Apr 06 06:08:53.976727 2026] [:error] [pid 9442:tid 9461] [client 158.158.105.166:10239] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bx.php"] [unique_id "adLddUPsNnAJTnmz6sbaVAAAARE"]
[Mon Apr 06 06:08:54.471821 2026] [:error] [pid 9442:tid 9458] [client 158.158.105.166:17451] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bx.php"] [unique_id "adLddkPsNnAJTnmz6sbaVgAAAQ4"]
[Mon Apr 06 06:08:54.991976 2026] [:error] [pid 9442:tid 9448] [client 158.158.105.166:19239] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bx.php"] [unique_id "adLddkPsNnAJTnmz6sbaWwAAAQQ"]
[Mon Apr 06 06:08:55.519104 2026] [:error] [pid 9442:tid 9461] [client 158.158.105.166:10398] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unloathness.php"] [unique_id "adLdd0PsNnAJTnmz6sbaYAAAARE"]
[Mon Apr 06 06:08:56.107696 2026] [:error] [pid 35786:tid 35804] [client 158.158.105.166:10384] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unloathness.php"] [unique_id "adLdeGgkfCKTaLhwaKQvsQAAAMs"]
[Mon Apr 06 06:08:56.635896 2026] [:error] [pid 35688:tid 35759] [client 158.158.105.166:13936] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unloathness.php"] [unique_id "adLdeOZ85qg4jLsRpQyxSAAAAIk"]
[Mon Apr 06 06:08:57.218863 2026] [:error] [pid 35688:tid 35767] [client 158.158.105.166:18094] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/unloathness.php"] [unique_id "adLdeeZ85qg4jLsRpQyxTAAAAJE"]
[Mon Apr 06 06:08:57.820564 2026] [:error] [pid 35687:tid 35725] [client 158.158.105.166:10369] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-stat.php"] [unique_id "adLdeZ3LtDozV0i8BiujuAAAAEI"]
[Mon Apr 06 06:08:58.314278 2026] [:error] [pid 35687:tid 35729] [client 158.158.105.166:13995] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-stat.php"] [unique_id "adLdep3LtDozV0i8BiujvAAAAEY"]
[Mon Apr 06 06:08:58.847775 2026] [:error] [pid 35687:tid 35735] [client 158.158.105.166:13943] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-stat.php"] [unique_id "adLdep3LtDozV0i8BiujwAAAAEw"]
[Mon Apr 06 06:08:59.336904 2026] [:error] [pid 9442:tid 9452] [client 158.158.105.166:17461] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-stat.php"] [unique_id "adLde0PsNnAJTnmz6sbagwAAAQg"]
[Mon Apr 06 06:08:59.833866 2026] [:error] [pid 35686:tid 35719] [client 158.158.105.166:17463] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl9.php"] [unique_id "adLde8MKdea6oORd2fxaagAAABc"]
[Mon Apr 06 06:09:00.458195 2026] [:error] [pid 9442:tid 9466] [client 158.158.105.166:17434] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl9.php"] [unique_id "adLdfEPsNnAJTnmz6sbaiAAAARY"]
[Mon Apr 06 06:09:00.996410 2026] [:error] [pid 9442:tid 9444] [client 158.158.105.166:14004] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl9.php"] [unique_id "adLdfEPsNnAJTnmz6sbajAAAAQA"]
[Mon Apr 06 06:09:01.801963 2026] [:error] [pid 35688:tid 35765] [client 158.158.105.166:10234] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xl9.php"] [unique_id "adLdfeZ85qg4jLsRpQyxTwAAAI8"]
[Mon Apr 06 06:09:02.387829 2026] [:error] [pid 9442:tid 9466] [client 158.158.105.166:10222] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "adLdfkPsNnAJTnmz6sbakwAAARY"]
[Mon Apr 06 06:09:02.913006 2026] [:error] [pid 9442:tid 9448] [client 158.158.105.166:13963] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "adLdfkPsNnAJTnmz6sbalgAAAQQ"]
[Mon Apr 06 06:09:03.443917 2026] [:error] [pid 9442:tid 9452] [client 158.158.105.166:17429] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "adLdf0PsNnAJTnmz6sbangAAAQg"]
[Mon Apr 06 06:09:04.043436 2026] [:error] [pid 35686:tid 35701] [client 158.158.105.166:13977] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "adLdgMMKdea6oORd2fxacQAAAAU"]
[Mon Apr 06 06:09:04.759456 2026] [:error] [pid 9442:tid 9464] [client 158.158.105.166:17499] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adLdgEPsNnAJTnmz6sbapgAAARQ"]
[Mon Apr 06 06:09:05.278868 2026] [:error] [pid 9442:tid 9447] [client 158.158.105.166:13971] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adLdgUPsNnAJTnmz6sbaqAAAAQM"]
[Mon Apr 06 06:09:05.894660 2026] [:error] [pid 35686:tid 35705] [client 158.158.105.166:10195] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adLdgcMKdea6oORd2fxadQAAAAk"]
[Mon Apr 06 06:09:06.456862 2026] [:error] [pid 35786:tid 35811] [client 158.158.105.166:17456] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adLdgmgkfCKTaLhwaKQv1QAAANI"]
[Mon Apr 06 06:09:06.944145 2026] [:error] [pid 9442:tid 9447] [client 158.158.105.166:10209] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs9.php"] [unique_id "adLdgkPsNnAJTnmz6sbaswAAAQM"]
[Mon Apr 06 06:09:07.614956 2026] [:error] [pid 9442:tid 9446] [client 158.158.105.166:13987] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs9.php"] [unique_id "adLdg0PsNnAJTnmz6sbatQAAAQI"]
[Mon Apr 06 06:09:08.211999 2026] [:error] [pid 9442:tid 9454] [client 158.158.105.166:10212] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs9.php"] [unique_id "adLdhEPsNnAJTnmz6sbauQAAAQo"]
[Mon Apr 06 06:09:08.783642 2026] [:error] [pid 35786:tid 35805] [client 158.158.105.166:13904] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs9.php"] [unique_id "adLdhGgkfCKTaLhwaKQv4QAAAMw"]
[Mon Apr 06 06:09:09.284079 2026] [:error] [pid 35786:tid 35803] [client 158.158.105.166:17411] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "adLdhWgkfCKTaLhwaKQv5QAAAMo"]
[Mon Apr 06 06:09:10.010118 2026] [:error] [pid 35686:tid 35720] [client 158.158.105.166:10238] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "adLdhsMKdea6oORd2fxafgAAABg"]
[Mon Apr 06 06:09:10.540161 2026] [:error] [pid 35686:tid 35696] [client 158.158.105.166:17443] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "adLdhsMKdea6oORd2fxagAAAAAA"]
[Mon Apr 06 06:09:11.063810 2026] [:error] [pid 35786:tid 35793] [client 158.158.105.166:17515] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "adLdh2gkfCKTaLhwaKQv6QAAAMA"]
[Mon Apr 06 06:09:11.673018 2026] [:error] [pid 35786:tid 35801] [client 158.158.105.166:18993] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adLdh2gkfCKTaLhwaKQv6wAAAMg"]
[Mon Apr 06 06:09:12.220520 2026] [:error] [pid 35786:tid 35816] [client 158.158.105.166:19019] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adLdiGgkfCKTaLhwaKQv7AAAANc"]
[Mon Apr 06 06:09:12.706234 2026] [:error] [pid 35687:tid 35732] [client 158.158.105.166:18966] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adLdiJ3LtDozV0i8BiujxwAAAEk"]
[Mon Apr 06 06:09:13.333506 2026] [:error] [pid 35688:tid 35758] [client 158.158.105.166:17455] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "adLdieZ85qg4jLsRpQyxYgAAAIg"]
[Mon Apr 06 06:09:13.999812 2026] [:error] [pid 35686:tid 35712] [client 158.158.105.166:13978] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/congeree.php"] [unique_id "adLdicMKdea6oORd2fxajAAAABA"]
[Mon Apr 06 06:09:14.537084 2026] [:error] [pid 35687:tid 35735] [client 158.158.105.166:19000] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/congeree.php"] [unique_id "adLdip3LtDozV0i8BiujzwAAAEw"]
[Mon Apr 06 06:09:15.153799 2026] [:error] [pid 35688:tid 35757] [client 158.158.105.166:17504] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/congeree.php"] [unique_id "adLdi-Z85qg4jLsRpQyxaAAAAIc"]
[Mon Apr 06 06:09:15.759367 2026] [:error] [pid 35688:tid 35772] [client 158.158.105.166:17500] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/congeree.php"] [unique_id "adLdi-Z85qg4jLsRpQyxawAAAJY"]
[Mon Apr 06 06:09:16.388125 2026] [:error] [pid 35786:tid 35799] [client 158.158.105.166:13924] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "adLdjGgkfCKTaLhwaKQv8gAAAMY"]
[Mon Apr 06 06:09:16.981613 2026] [:error] [pid 35786:tid 35797] [client 158.158.105.166:19033] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "adLdjGgkfCKTaLhwaKQv9gAAAMQ"]
[Mon Apr 06 06:09:17.500640 2026] [:error] [pid 35686:tid 35716] [client 158.158.105.166:17415] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "adLdjcMKdea6oORd2fxakwAAABQ"]
[Mon Apr 06 06:09:18.471117 2026] [:error] [pid 35688:tid 35774] [client 158.158.105.166:18968] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/snus.php"] [unique_id "adLdjuZ85qg4jLsRpQyxcgAAAJg"]
[Mon Apr 06 06:09:19.056710 2026] [:error] [pid 9442:tid 9459] [client 158.158.105.166:13918] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "adLdj0PsNnAJTnmz6sbaxgAAAQ8"]
[Mon Apr 06 06:09:19.685166 2026] [:error] [pid 35786:tid 35802] [client 158.158.105.166:19064] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "adLdj2gkfCKTaLhwaKQwAAAAAMk"]
[Mon Apr 06 06:09:20.248780 2026] [:error] [pid 35686:tid 35714] [client 158.158.105.166:13926] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "adLdkMMKdea6oORd2fxamwAAABI"]
[Mon Apr 06 06:09:20.777805 2026] [:error] [pid 35786:tid 35810] [client 158.158.105.166:13957] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "adLdkGgkfCKTaLhwaKQwAwAAANE"]
[Mon Apr 06 06:09:21.409574 2026] [:error] [pid 9442:tid 9454] [client 158.158.105.166:17433] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amxloxxr.php"] [unique_id "adLdkUPsNnAJTnmz6sba1wAAAQo"]
[Mon Apr 06 06:09:21.909390 2026] [:error] [pid 9442:tid 9445] [client 158.158.105.166:13899] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amxloxxr.php"] [unique_id "adLdkUPsNnAJTnmz6sba3AAAAQE"]
[Mon Apr 06 06:09:22.390791 2026] [:error] [pid 9442:tid 9451] [client 158.158.105.166:19007] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amxloxxr.php"] [unique_id "adLdkkPsNnAJTnmz6sba4AAAAQc"]
[Mon Apr 06 06:09:22.880935 2026] [:error] [pid 35688:tid 35773] [client 158.158.105.166:13931] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amxloxxr.php"] [unique_id "adLdkuZ85qg4jLsRpQyxeQAAAJc"]
[Mon Apr 06 06:09:23.401414 2026] [:error] [pid 35688:tid 35764] [client 158.158.105.166:17441] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "adLdk-Z85qg4jLsRpQyxewAAAI4"]
[Mon Apr 06 06:09:23.882815 2026] [:error] [pid 35786:tid 35804] [client 158.158.105.166:14012] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "adLdk2gkfCKTaLhwaKQwCgAAAMs"]
[Mon Apr 06 06:09:24.402210 2026] [:error] [pid 35686:tid 35708] [client 158.158.105.166:13894] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "adLdlMMKdea6oORd2fxaoQAAAAw"]
[Mon Apr 06 06:09:24.930104 2026] [:error] [pid 35686:tid 35714] [client 158.158.105.166:17496] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "adLdlMMKdea6oORd2fxapAAAABI"]
[Mon Apr 06 06:09:25.420114 2026] [:error] [pid 9442:tid 9457] [client 158.158.105.166:18981] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/index.php"] [unique_id "adLdlUPsNnAJTnmz6sba6wAAAQ0"]
[Mon Apr 06 06:09:25.922705 2026] [:error] [pid 9442:tid 9448] [client 158.158.105.166:19010] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/index.php"] [unique_id "adLdlUPsNnAJTnmz6sba7QAAAQQ"]
[Mon Apr 06 06:09:26.421012 2026] [:error] [pid 9442:tid 9450] [client 158.158.105.166:19060] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/index.php"] [unique_id "adLdlkPsNnAJTnmz6sba8AAAAQY"]
[Mon Apr 06 06:09:26.909671 2026] [:error] [pid 9442:tid 9460] [client 158.158.105.166:18978] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uploads/index.php"] [unique_id "adLdlkPsNnAJTnmz6sba9AAAARA"]
[Mon Apr 06 06:09:27.397662 2026] [:error] [pid 9442:tid 9448] [client 158.158.105.166:18956] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/multirole.php"] [unique_id "adLdl0PsNnAJTnmz6sba9QAAAQQ"]
[Mon Apr 06 06:09:27.889934 2026] [:error] [pid 35686:tid 35710] [client 158.158.105.166:14009] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/multirole.php"] [unique_id "adLdl8MKdea6oORd2fxaqwAAAA4"]
[Mon Apr 06 06:09:28.388861 2026] [:error] [pid 9442:tid 9466] [client 158.158.105.166:17442] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/multirole.php"] [unique_id "adLdmEPsNnAJTnmz6sba_AAAARY"]
[Mon Apr 06 06:09:28.886666 2026] [:error] [pid 35687:tid 35724] [client 158.158.105.166:17529] [client 158.158.105.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/multirole.php"] [unique_id "adLdmJ3LtDozV0i8Biuj5QAAAEE"]
[Mon Apr 06 07:04:18.581656 2026] [:error] [pid 9442:tid 9463] [client 170.106.35.137:42120] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adLqckPsNnAJTnmz6sYEaAAAARM"]
[Mon Apr 06 19:09:25.468805 2026] [:error] [pid 10280:tid 10298] [client 162.62.213.165:35302] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adOUZV8QUJkf8g-BFfPUJgAAAc8"]
[Mon Apr 06 22:00:38.254576 2026] [:error] [pid 1827:tid 1833] [client 182.44.12.37:57868] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adO8huVeb6S_DnjZ2xEsRQAAAgQ"]
[Mon Apr 06 23:14:44.400200 2026] [:error] [pid 9442:tid 9459] [client 43.130.32.245:39378] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adPN5EPsNnAJTnmz6sZWwQAAAQ8"]
[Tue Apr 07 00:32:33.738983 2026] [:error] [pid 39329:tid 39413] [client 49.51.245.241:51540] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adPgIVb3ztKMBQDfFByNpQAAAEs"]
[Tue Apr 07 04:29:17.608928 2026] [:error] [pid 37597:tid 37651] [client 223.244.35.77:54489] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adQXnQ6uAY0QAy-8EEIlIQAAAFE"]
[Tue Apr 07 07:42:31.660167 2026] [:error] [pid 12948:tid 12952] [client 45.55.136.183:56422] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adRE58beSPAN8LvMqsZ55QAAAQE"]
[Tue Apr 07 07:42:34.837801 2026] [:error] [pid 12948:tid 12973] [client 45.55.136.183:54354] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adRE6sbeSPAN8LvMqsZ5-wAAARY"]
[Tue Apr 07 08:46:17.259097 2026] [proxy_fcgi:error] [pid 12948:tid 12975] [client 145.239.10.137:49833] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/c15.php
[Tue Apr 07 10:41:57.437485 2026] [:error] [pid 12948:tid 12951] [client 45.55.136.183:40784] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adRu9cbeSPAN8LvMqsYoKAAAAQA"]
[Tue Apr 07 10:42:00.510509 2026] [:error] [pid 12948:tid 12951] [client 45.55.136.183:38264] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adRu-MbeSPAN8LvMqsYoMwAAAQA"]
[Tue Apr 07 10:56:42.444095 2026] [:error] [pid 12948:tid 12966] [client 217.216.72.68:50709] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adRyasbeSPAN8LvMqsY2TwAAAQ8"]
[Tue Apr 07 10:56:42.566724 2026] [:error] [pid 12948:tid 12956] [client 217.216.72.68:50598] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/"] [unique_id "adRyasbeSPAN8LvMqsY2UAAAAQU"]
[Tue Apr 07 10:56:53.334869 2026] [:error] [pid 37597:tid 37643] [client 217.216.72.68:59217] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "adRydQ6uAY0QAy-8EEK_pwAAAEk"]
[Tue Apr 07 10:56:55.394809 2026] [:error] [pid 37597:tid 37647] [client 217.216.72.68:59233] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adRydw6uAY0QAy-8EEK_rAAAAE0"]
[Tue Apr 07 10:56:55.513799 2026] [:error] [pid 12948:tid 12961] [client 217.216.72.68:50892] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adRyd8beSPAN8LvMqsY2ywAAAQo"]
[Tue Apr 07 10:57:04.546715 2026] [:error] [pid 59490:tid 59510] [client 217.216.72.68:49492] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/"] [unique_id "adRygEcw8OFbiUZ7Rx0R2gAAAVI"]
[Tue Apr 07 10:57:10.160704 2026] [:error] [pid 37598:tid 37661] [client 217.216.72.68:53545] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/readme.html"] [unique_id "adRyhu9g7q_cV2WhPawTiAAAAIA"]
[Tue Apr 07 10:57:10.298761 2026] [:error] [pid 59490:tid 59498] [client 217.216.72.68:53526] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "adRyhkcw8OFbiUZ7Rx0R-AAAAUY"]
[Tue Apr 07 11:24:06.280284 2026] [:error] [pid 37597:tid 37658] [client 43.135.182.95:40854] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adR41g6uAY0QAy-8EELZowAAAFg"]
[Tue Apr 07 11:33:08.807201 2026] [:error] [pid 37597:tid 37658] [client 159.223.184.140:44280] [client 159.223.184.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adR69A6uAY0QAy-8EELglQAAAFg"]
[Tue Apr 07 12:47:26.983807 2026] [:error] [pid 59804:tid 59829] [client 43.159.152.4:59450] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adSMXnYVIXiPh5_eJTkSmwAAAhc"]
[Tue Apr 07 13:21:03.613631 2026] [:error] [pid 59490:tid 59502] [client 103.111.230.153:49809] [client 103.111.230.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.111.230.153, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adSUP0cw8OFbiUZ7Rx0mhQAAAUo"]
[Tue Apr 07 13:21:03.619372 2026] [proxy_fcgi:error] [pid 59490:tid 59502] [client 103.111.230.153:49809] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 14:21:30.872960 2026] [:error] [pid 37719:tid 37735] [client 45.55.136.183:36254] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adSiak09Xv52u2xXGLBImQAAAM0"]
[Tue Apr 07 14:21:33.574165 2026] [:error] [pid 37597:tid 37641] [client 45.55.136.183:55284] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adSibQ6uAY0QAy-8EEJWwQAAAEc"]
[Tue Apr 07 17:05:50.611359 2026] [:error] [pid 37596:tid 37624] [client 43.140.247.223:51320] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adTI7qpaAOZHEjRWjP1-6wAAABI"]
[Wed Apr 08 00:16:58.266320 2026] [:error] [pid 12948:tid 12953] [client 206.212.255.116:52326] [client 206.212.255.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.212.255.116, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "adUt-sbeSPAN8LvMqsbU2gAAAQI"]
[Wed Apr 08 00:16:58.276490 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 206.212.255.116:52326] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:21:26.503482 2026] [:error] [pid 37598:tid 37674] [client 170.106.192.208:45634] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adUvBu9g7q_cV2WhPazt8QAAAI0"]
[Wed Apr 08 02:41:20.355297 2026] [proxy_fcgi:error] [pid 5337:tid 5371] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:20.615371 2026] [proxy_fcgi:error] [pid 5337:tid 5380] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:20.873777 2026] [proxy_fcgi:error] [pid 5337:tid 5369] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:21.185649 2026] [proxy_fcgi:error] [pid 5337:tid 5364] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:21.447732 2026] [proxy_fcgi:error] [pid 5337:tid 5367] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:21.707315 2026] [proxy_fcgi:error] [pid 5337:tid 5358] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:22.226203 2026] [proxy_fcgi:error] [pid 5337:tid 5382] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 02:41:22.484681 2026] [proxy_fcgi:error] [pid 5337:tid 5371] [client 20.215.49.238:6356] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 05:37:00.265613 2026] [:error] [pid 47732:tid 47747] [client 43.153.85.46:57552] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adV4_Im4N5QW9Mh7G1060gAAAM0"]
[Wed Apr 08 07:06:31.893256 2026] [:error] [pid 47732:tid 47749] [client 43.153.86.78:57954] [client 43.153.86.78] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adWN94m4N5QW9Mh7G110FwAAAM8"]
[Wed Apr 08 08:32:16.934997 2026] [:error] [pid 16630:tid 16645] [client 78.137.218.133:3706] [client 78.137.218.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.137.218.133, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adWiECjfVAkPG-jgJEonTwAAAQ0"]
[Wed Apr 08 08:32:16.948142 2026] [proxy_fcgi:error] [pid 16630:tid 16645] [client 78.137.218.133:3706] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 09:25:34.325761 2026] [:error] [pid 47627:tid 47718] [client 103.168.67.159:3770] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adWujnOljf1Quv_kDjn0kwAAAJM"]
[Wed Apr 08 09:25:35.046762 2026] [:error] [pid 47732:tid 47749] [client 103.168.67.159:4320] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adWuj4m4N5QW9Mh7G128BgAAAM8"]
[Wed Apr 08 09:25:35.778932 2026] [:error] [pid 544:tid 555] [client 103.168.67.159:4894] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adWujzieLKSoiLVA6YfDEgAAAYY"]
[Wed Apr 08 09:25:36.505872 2026] [:error] [pid 47732:tid 47758] [client 103.168.67.159:5474] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adWukIm4N5QW9Mh7G128HwAAANg"]
[Wed Apr 08 09:25:37.247893 2026] [:error] [pid 49984:tid 50000] [client 103.168.67.159:5956] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dashboard"] [unique_id "adWukeYY_Bz5lRHcJIE-lQAAAUo"]
[Wed Apr 08 09:25:37.978074 2026] [:error] [pid 47732:tid 47755] [client 103.168.67.159:6510] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dashboard"] [unique_id "adWukYm4N5QW9Mh7G128PAAAANU"]
[Wed Apr 08 09:25:38.686930 2026] [:error] [pid 16630:tid 16640] [client 103.168.67.159:6982] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dashboard"] [unique_id "adWukijfVAkPG-jgJEpRMAAAAQg"]
[Wed Apr 08 09:25:39.387401 2026] [:error] [pid 16630:tid 16641] [client 103.168.67.159:7436] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dashboard"] [unique_id "adWukyjfVAkPG-jgJEpRPgAAAQk"]
[Wed Apr 08 11:40:37.623114 2026] [:error] [pid 544:tid 565] [client 158.94.209.109:62476] [client 158.94.209.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adXONTieLKSoiLVA6YfrJQAAAZA"]
[Wed Apr 08 11:50:32.669399 2026] [:error] [pid 47732:tid 47739] [client 173.239.214.44:40291] [client 173.239.214.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adXQiIm4N5QW9Mh7G132IgAAAMU"]
[Wed Apr 08 11:50:46.712942 2026] [:error] [pid 47732:tid 47745] [client 43.134.28.2:54622] [client 43.134.28.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adXQlom4N5QW9Mh7G132ZQAAAMs"]
[Wed Apr 08 19:06:33.316667 2026] [:error] [pid 7047:tid 7065] [client 43.163.95.253:54628] [client 43.163.95.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adY2ueNh3oGO3pKiCzzbTgAAAZA"]
[Wed Apr 08 23:23:33.940521 2026] [:error] [pid 64066:tid 64072] [client 43.157.172.39:51690] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adZy9VR3WucJgr2vZGaRkQAAAUM"]
[Thu Apr 09 07:12:13.089174 2026] [:error] [pid 20641:tid 20650] [client 43.164.197.177:51492] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adbgzW3LksBSF-6rlkaN7QAAAMU"]
[Thu Apr 09 07:23:33.356155 2026] [proxy_fcgi:error] [pid 20536:tid 20579] [client 20.220.57.112:30694] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:23:33.568400 2026] [proxy_fcgi:error] [pid 20536:tid 20582] [client 20.220.57.112:30694] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 07:23:33.776992 2026] [:error] [pid 20536:tid 20586] [client 20.220.57.112:30694] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxcs.php"] [unique_id "adbjdcPqyUJM1s3YpIY8zgAAAE8"]
[Thu Apr 09 07:23:34.832508 2026] [:error] [pid 22627:tid 22637] [client 20.220.57.112:36366] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxcs.php"] [unique_id "adbjdvr8glsF_jKQpr5NdQAAAQc"]
[Thu Apr 09 07:23:35.595619 2026] [:error] [pid 20535:tid 20554] [client 20.220.57.112:36381] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxcs.php"] [unique_id "adbjdwWiD9hWnEUHWdNaMwAAAAo"]
[Thu Apr 09 07:23:36.022420 2026] [:error] [pid 22627:tid 22651] [client 20.220.57.112:57560] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zxcs.php"] [unique_id "adbjePr8glsF_jKQpr5NewAAARU"]
[Thu Apr 09 07:23:36.619301 2026] [:error] [pid 22627:tid 22632] [client 20.220.57.112:36393] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adbjePr8glsF_jKQpr5NfgAAAQI"]
[Thu Apr 09 07:23:37.259672 2026] [:error] [pid 20536:tid 20577] [client 20.220.57.112:36399] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adbjecPqyUJM1s3YpIY80AAAAEY"]
[Thu Apr 09 07:23:38.151386 2026] [:error] [pid 20536:tid 20590] [client 20.220.57.112:36377] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adbjesPqyUJM1s3YpIY81AAAAFM"]
[Thu Apr 09 07:23:39.126900 2026] [:error] [pid 20535:tid 20561] [client 20.220.57.112:57551] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/btx25.php"] [unique_id "adbjewWiD9hWnEUHWdNaNwAAABE"]
[Thu Apr 09 07:23:40.059568 2026] [:error] [pid 20537:tid 20600] [client 20.220.57.112:36398] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca-022.php"] [unique_id "adbjfMSTjpSeyrxLmN4yaQAAAII"]
[Thu Apr 09 07:23:40.870519 2026] [:error] [pid 20641:tid 20645] [client 20.220.57.112:36400] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca-022.php"] [unique_id "adbjfG3LksBSF-6rlkaUCwAAAMA"]
[Thu Apr 09 07:23:41.556652 2026] [:error] [pid 20535:tid 20552] [client 20.220.57.112:28792] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca-022.php"] [unique_id "adbjfQWiD9hWnEUHWdNaPgAAAAg"]
[Thu Apr 09 07:23:42.134153 2026] [:error] [pid 20535:tid 20565] [client 20.220.57.112:29484] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca-022.php"] [unique_id "adbjfgWiD9hWnEUHWdNaQAAAABU"]
[Thu Apr 09 07:23:42.988305 2026] [:error] [pid 20537:tid 20618] [client 20.220.57.112:57540] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbjfsSTjpSeyrxLmN4ybgAAAJQ"]
[Thu Apr 09 07:23:43.916211 2026] [:error] [pid 20535:tid 20545] [client 20.220.57.112:13489] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbjfwWiD9hWnEUHWdNaRQAAAAE"]
[Thu Apr 09 07:23:44.480903 2026] [:error] [pid 20536:tid 20592] [client 20.220.57.112:14080] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbjgMPqyUJM1s3YpIY83AAAAFU"]
[Thu Apr 09 07:23:45.130554 2026] [:error] [pid 20536:tid 20591] [client 20.220.57.112:36379] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbjgcPqyUJM1s3YpIY83wAAAFQ"]
[Thu Apr 09 07:23:45.657116 2026] [:error] [pid 20535:tid 20567] [client 20.220.57.112:29501] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbjgQWiD9hWnEUHWdNaSgAAABc"]
[Thu Apr 09 07:23:46.435214 2026] [:error] [pid 20536:tid 20571] [client 20.220.57.112:57590] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbjgsPqyUJM1s3YpIY85wAAAEA"]
[Thu Apr 09 07:23:46.922521 2026] [:error] [pid 20536:tid 20583] [client 20.220.57.112:14133] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbjgsPqyUJM1s3YpIY86QAAAEw"]
[Thu Apr 09 07:23:48.186813 2026] [:error] [pid 20535:tid 20565] [client 20.220.57.112:29487] [client 20.220.57.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbjhAWiD9hWnEUHWdNaUwAAABU"]
[Thu Apr 09 08:22:41.404319 2026] [proxy_fcgi:error] [pid 20535:tid 20558] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:22:41.615650 2026] [proxy_fcgi:error] [pid 20535:tid 20557] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:22:41.824028 2026] [proxy_fcgi:error] [pid 20535:tid 20567] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:22:42.035925 2026] [proxy_fcgi:error] [pid 20535:tid 20560] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:22:42.246201 2026] [proxy_fcgi:error] [pid 20535:tid 20546] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:22:42.456496 2026] [proxy_fcgi:error] [pid 20535:tid 20554] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:22:42.677522 2026] [proxy_fcgi:error] [pid 20535:tid 20561] [client 20.63.32.44:26764] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:32:06.846806 2026] [proxy_fcgi:error] [pid 22627:tid 22642] [client 20.63.32.44:1181] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:32:07.058253 2026] [proxy_fcgi:error] [pid 22627:tid 22641] [client 20.63.32.44:1181] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:32:07.269759 2026] [proxy_fcgi:error] [pid 22627:tid 22654] [client 20.63.32.44:1181] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:32:07.484096 2026] [proxy_fcgi:error] [pid 22627:tid 22635] [client 20.63.32.44:1181] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:32:07.694920 2026] [proxy_fcgi:error] [pid 22627:tid 22652] [client 20.63.32.44:1181] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 08:32:07.902539 2026] [:error] [pid 22627:tid 22636] [client 20.63.32.44:1181] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbzh_r8glsF_jKQpr6MRwAAAQY"]
[Thu Apr 09 08:32:08.316537 2026] [:error] [pid 20537:tid 20618] [client 20.63.32.44:60718] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbziMSTjpSeyrxLmN5L5wAAAJQ"]
[Thu Apr 09 08:32:08.728298 2026] [:error] [pid 20535:tid 20549] [client 20.63.32.44:63287] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbziAWiD9hWnEUHWdOIoAAAAAU"]
[Thu Apr 09 08:32:09.153045 2026] [:error] [pid 20535:tid 20546] [client 20.63.32.44:63294] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rnenu.php"] [unique_id "adbziQWiD9hWnEUHWdOIogAAAAI"]
[Thu Apr 09 08:32:09.566321 2026] [:error] [pid 20535:tid 20560] [client 20.63.32.44:63279] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbziQWiD9hWnEUHWdOIpgAAABA"]
[Thu Apr 09 08:32:09.979898 2026] [:error] [pid 20535:tid 20550] [client 20.63.32.44:63264] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbziQWiD9hWnEUHWdOIqAAAAAY"]
[Thu Apr 09 08:32:10.421460 2026] [:error] [pid 22627:tid 22641] [client 20.63.32.44:60694] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbzivr8glsF_jKQpr6MSQAAAQs"]
[Thu Apr 09 08:32:10.843940 2026] [:error] [pid 22627:tid 22635] [client 20.63.32.44:1171] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fallbackapi.php"] [unique_id "adbzivr8glsF_jKQpr6MTQAAAQU"]
[Thu Apr 09 13:17:17.409295 2026] [autoindex:error] [pid 24624:tid 24638] [client 80.85.245.145:60926] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 14:12:24.073922 2026] [:error] [pid 24927:tid 24938] [client 101.33.81.73:36020] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "addDSDXObuzEuw8mNJtrLgAAAQg"]
[Thu Apr 09 15:30:43.412393 2026] [:error] [pid 18477:tid 18484] [client 43.157.147.3:37746] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "addVo8De826HlFeoLPIybgAAAUU"]
[Thu Apr 09 19:05:09.537483 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:09.831621 2026] [proxy_fcgi:error] [pid 24927:tid 24952] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:10.118070 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:10.398039 2026] [proxy_fcgi:error] [pid 24927:tid 24942] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:10.676783 2026] [proxy_fcgi:error] [pid 24927:tid 24934] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:10.949110 2026] [proxy_fcgi:error] [pid 24927:tid 24946] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:11.238474 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:11.506043 2026] [proxy_fcgi:error] [pid 24927:tid 24947] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:11.791791 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:12.059285 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 20.240.63.86:22074] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:05:12.323030 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:22074] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cxx.php"] [unique_id "adeH6DXObuzEuw8mNJsMDAAAARc"]
[Thu Apr 09 19:05:12.860949 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:47005] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cxx.php"] [unique_id "adeH6O4Jn-WvK1ZBTvjBLgAAAM4"]
[Thu Apr 09 19:05:13.416971 2026] [:error] [pid 24624:tid 24634] [client 20.240.63.86:46996] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cxx.php"] [unique_id "adeH6e4Jn-WvK1ZBTvjBLwAAAMg"]
[Thu Apr 09 19:05:13.996731 2026] [:error] [pid 24517:tid 24575] [client 20.240.63.86:22128] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cxx.php"] [unique_id "adeH6XboYEn2ZFM_PS92JAAAAIE"]
[Thu Apr 09 19:05:14.537980 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:10267] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "adeH6jXObuzEuw8mNJsMDwAAARY"]
[Thu Apr 09 19:05:15.079218 2026] [:error] [pid 24515:tid 24521] [client 20.240.63.86:35672] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "adeH661OMnvM2fMnB1OHZgAAAAI"]
[Thu Apr 09 19:05:15.616617 2026] [:error] [pid 24515:tid 24535] [client 20.240.63.86:34640] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "adeH661OMnvM2fMnB1OHZwAAABA"]
[Thu Apr 09 19:05:16.204585 2026] [:error] [pid 24624:tid 24632] [client 20.240.63.86:35666] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "adeH7O4Jn-WvK1ZBTvjBMAAAAMY"]
[Thu Apr 09 19:05:16.777953 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:35709] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeH7MDe826HlFeoLPKIZgAAAVY"]
[Thu Apr 09 19:05:17.337741 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:22111] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeH7cDe826HlFeoLPKIagAAAUA"]
[Thu Apr 09 19:05:17.896909 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:42620] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeH7cDe826HlFeoLPKIbAAAAVU"]
[Thu Apr 09 19:05:18.485336 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:35655] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeH7jXObuzEuw8mNJsMFgAAAQo"]
[Thu Apr 09 19:05:19.026479 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:35671] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeH79hW7vSS-UkeWCUkswAAAEM"]
[Thu Apr 09 19:05:19.649887 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:46993] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeH78De826HlFeoLPKIcAAAAU4"]
[Thu Apr 09 19:05:20.211384 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:35650] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeH8MDe826HlFeoLPKIcQAAAVI"]
[Thu Apr 09 19:05:20.759186 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:47076] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeH8MDe826HlFeoLPKIdQAAAVY"]
[Thu Apr 09 19:05:21.288154 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:22087] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "adeH8cDe826HlFeoLPKIeAAAAUQ"]
[Thu Apr 09 19:05:21.812008 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:22112] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "adeH8cDe826HlFeoLPKIegAAAVc"]
[Thu Apr 09 19:05:22.352548 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:22081] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "adeH8sDe826HlFeoLPKIfAAAAVU"]
[Thu Apr 09 19:05:22.884652 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:22107] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "adeH8sDe826HlFeoLPKIfQAAAVA"]
[Thu Apr 09 19:05:23.411346 2026] [:error] [pid 20837:tid 20857] [client 20.240.63.86:35675] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "adeH8_SL71FHZkjrGzPSbgAAAZI"]
[Thu Apr 09 19:05:23.938016 2026] [:error] [pid 18477:tid 18487] [client 20.240.63.86:47023] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "adeH88De826HlFeoLPKIgAAAAUg"]
[Thu Apr 09 19:05:24.472041 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:34675] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "adeH9MDe826HlFeoLPKIgQAAAVI"]
[Thu Apr 09 19:05:25.011140 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:47080] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "adeH9cDe826HlFeoLPKIhQAAAVg"]
[Thu Apr 09 19:05:25.566640 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:35670] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "adeH9cDe826HlFeoLPKIiAAAAUA"]
[Thu Apr 09 19:05:26.113982 2026] [:error] [pid 24516:tid 24558] [client 20.240.63.86:42601] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "adeH9thW7vSS-UkeWCUktgAAAEs"]
[Thu Apr 09 19:05:26.686363 2026] [:error] [pid 24517:tid 24590] [client 20.240.63.86:34673] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "adeH9nboYEn2ZFM_PS92JgAAAJA"]
[Thu Apr 09 19:05:27.215482 2026] [:error] [pid 20837:tid 20854] [client 20.240.63.86:34682] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "adeH9_SL71FHZkjrGzPScQAAAY8"]
[Thu Apr 09 19:05:27.754447 2026] [:error] [pid 24517:tid 24585] [client 20.240.63.86:42581] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "adeH93boYEn2ZFM_PS92KAAAAIs"]
[Thu Apr 09 19:05:28.282450 2026] [:error] [pid 24517:tid 24589] [client 20.240.63.86:47020] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "adeH-HboYEn2ZFM_PS92KQAAAI8"]
[Thu Apr 09 19:05:28.857552 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:47100] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "adeH-K1OMnvM2fMnB1OHbgAAAAY"]
[Thu Apr 09 19:05:29.388570 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:34635] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "adeH-a1OMnvM2fMnB1OHcAAAAAs"]
[Thu Apr 09 19:05:29.919680 2026] [:error] [pid 24624:tid 24636] [client 20.240.63.86:22080] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "adeH-e4Jn-WvK1ZBTvjBNQAAAMo"]
[Thu Apr 09 19:05:30.484378 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:35700] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "adeH-thW7vSS-UkeWCUktwAAAEE"]
[Thu Apr 09 19:05:31.011997 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:35695] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "adeH-61OMnvM2fMnB1OHcQAAAAQ"]
[Thu Apr 09 19:05:31.587401 2026] [:error] [pid 20837:tid 20848] [client 20.240.63.86:22119] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "adeH-_SL71FHZkjrGzPSdAAAAYk"]
[Thu Apr 09 19:05:32.204073 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:22115] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adeH_K1OMnvM2fMnB1OHcgAAAAo"]
[Thu Apr 09 19:05:32.743979 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:47053] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adeH_K1OMnvM2fMnB1OHdAAAAAc"]
[Thu Apr 09 19:05:33.288620 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:42596] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adeH_TXObuzEuw8mNJsMIgAAAQo"]
[Thu Apr 09 19:05:33.836061 2026] [:error] [pid 24517:tid 24598] [client 20.240.63.86:42559] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adeH_XboYEn2ZFM_PS92MAAAAJg"]
[Thu Apr 09 19:05:34.363888 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:47054] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "adeH_jXObuzEuw8mNJsMIwAAARI"]
[Thu Apr 09 19:05:34.917297 2026] [:error] [pid 20837:tid 20843] [client 20.240.63.86:42500] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "adeH_vSL71FHZkjrGzPSeAAAAYQ"]
[Thu Apr 09 19:05:35.452403 2026] [:error] [pid 24517:tid 24594] [client 20.240.63.86:22113] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "adeH_3boYEn2ZFM_PS92MQAAAJQ"]
[Thu Apr 09 19:05:35.989114 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:34651] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "adeH_8De826HlFeoLPKIigAAAVA"]
[Thu Apr 09 19:05:36.521748 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:34664] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "adeIAMDe826HlFeoLPKIjQAAAUo"]
[Thu Apr 09 19:05:37.075650 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:47047] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "adeIATXObuzEuw8mNJsMKwAAARE"]
[Thu Apr 09 19:05:37.610333 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:35662] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "adeIAcDe826HlFeoLPKIkAAAAVI"]
[Thu Apr 09 19:05:38.161646 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:35688] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "adeIAjXObuzEuw8mNJsMMQAAAQM"]
[Thu Apr 09 19:05:38.694604 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:22139] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "adeIAjXObuzEuw8mNJsMMwAAARA"]
[Thu Apr 09 19:05:39.232611 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:42501] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "adeIAzXObuzEuw8mNJsMNgAAAQU"]
[Thu Apr 09 19:05:39.761712 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:22096] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "adeIAzXObuzEuw8mNJsMOAAAAQQ"]
[Thu Apr 09 19:05:40.302623 2026] [:error] [pid 20837:tid 20844] [client 20.240.63.86:22131] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "adeIBPSL71FHZkjrGzPSegAAAYU"]
[Thu Apr 09 19:05:40.844202 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:34631] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "adeIBK1OMnvM2fMnB1OHvAAAAAU"]
[Thu Apr 09 19:05:41.407454 2026] [:error] [pid 24515:tid 24540] [client 20.240.63.86:42580] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "adeIBa1OMnvM2fMnB1OHvQAAABU"]
[Thu Apr 09 19:05:41.943643 2026] [:error] [pid 20837:tid 20849] [client 20.240.63.86:47033] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "adeIBfSL71FHZkjrGzPSfwAAAYo"]
[Thu Apr 09 19:05:42.481872 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:22038] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "adeIBvSL71FHZkjrGzPSggAAAZg"]
[Thu Apr 09 19:05:43.013199 2026] [:error] [pid 20837:tid 20850] [client 20.240.63.86:35696] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adeIB_SL71FHZkjrGzPShAAAAYs"]
[Thu Apr 09 19:05:43.620469 2026] [:error] [pid 24517:tid 24597] [client 20.240.63.86:35704] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adeIB3boYEn2ZFM_PS92NgAAAJc"]
[Thu Apr 09 19:05:44.148508 2026] [:error] [pid 24517:tid 24589] [client 20.240.63.86:46994] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adeICHboYEn2ZFM_PS92OAAAAI8"]
[Thu Apr 09 19:05:44.715085 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:22105] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adeICMDe826HlFeoLPKIlAAAAVY"]
[Thu Apr 09 19:05:45.250133 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:46995] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "adeICcDe826HlFeoLPKIlQAAAUQ"]
[Thu Apr 09 19:05:45.790627 2026] [:error] [pid 20837:tid 20859] [client 20.240.63.86:35661] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "adeICfSL71FHZkjrGzPSiAAAAZQ"]
[Thu Apr 09 19:05:46.374057 2026] [:error] [pid 18477:tid 18486] [client 20.240.63.86:42498] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "adeICsDe826HlFeoLPKImAAAAUc"]
[Thu Apr 09 19:05:46.969663 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:35659] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "adeICsDe826HlFeoLPKImwAAAVU"]
[Thu Apr 09 19:05:47.498573 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:42562] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adeIC-4Jn-WvK1ZBTvjBNwAAANc"]
[Thu Apr 09 19:05:48.054685 2026] [:error] [pid 24517:tid 24596] [client 20.240.63.86:47061] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adeIDHboYEn2ZFM_PS92OQAAAJY"]
[Thu Apr 09 19:05:48.665145 2026] [:error] [pid 24517:tid 24592] [client 20.240.63.86:22120] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adeIDHboYEn2ZFM_PS92OwAAAJI"]
[Thu Apr 09 19:05:49.195484 2026] [:error] [pid 20837:tid 20840] [client 20.240.63.86:46981] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adeIDfSL71FHZkjrGzPSigAAAYE"]
[Thu Apr 09 19:05:49.784358 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:12110] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeIDcDe826HlFeoLPKIoQAAAUM"]
[Thu Apr 09 19:05:50.324552 2026] [:error] [pid 18477:tid 18487] [client 20.240.63.86:47012] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeIDsDe826HlFeoLPKIowAAAUg"]
[Thu Apr 09 19:05:50.888159 2026] [:error] [pid 18477:tid 18496] [client 20.240.63.86:12124] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeIDsDe826HlFeoLPKIpQAAAVE"]
[Thu Apr 09 19:05:51.427456 2026] [:error] [pid 20837:tid 20856] [client 20.240.63.86:47097] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeID_SL71FHZkjrGzPSjAAAAZE"]
[Thu Apr 09 19:05:51.972607 2026] [:error] [pid 18477:tid 18484] [client 20.240.63.86:34677] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "adeID8De826HlFeoLPKIqgAAAUU"]
[Thu Apr 09 19:05:52.537788 2026] [:error] [pid 24624:tid 24631] [client 20.240.63.86:42520] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "adeIEO4Jn-WvK1ZBTvjBOgAAAMU"]
[Thu Apr 09 19:05:53.103726 2026] [:error] [pid 24515:tid 24522] [client 20.240.63.86:42561] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "adeIEa1OMnvM2fMnB1OHyAAAAAM"]
[Thu Apr 09 19:05:53.637498 2026] [:error] [pid 24517:tid 24586] [client 20.240.63.86:47091] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "adeIEXboYEn2ZFM_PS92PAAAAIw"]
[Thu Apr 09 19:05:54.179586 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:47055] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adeIEjXObuzEuw8mNJsMRQAAARE"]
[Thu Apr 09 19:05:54.718058 2026] [:error] [pid 20837:tid 20853] [client 20.240.63.86:42602] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adeIEvSL71FHZkjrGzPSjgAAAY4"]
[Thu Apr 09 19:05:55.290334 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:42529] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adeIE61OMnvM2fMnB1OHzAAAAAc"]
[Thu Apr 09 19:05:55.842340 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:42595] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "adeIEzXObuzEuw8mNJsMRwAAAQo"]
[Thu Apr 09 19:05:56.402802 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:12142] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adeIFMDe826HlFeoLPKIsAAAAVU"]
[Thu Apr 09 19:05:56.931906 2026] [:error] [pid 20837:tid 20839] [client 20.240.63.86:34662] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adeIFPSL71FHZkjrGzPSjwAAAYA"]
[Thu Apr 09 19:05:57.505695 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:34635] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adeIFTXObuzEuw8mNJsMTQAAARY"]
[Thu Apr 09 19:05:58.034565 2026] [:error] [pid 24927:tid 24943] [client 20.240.63.86:12112] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "adeIFjXObuzEuw8mNJsMUAAAAQ0"]
[Thu Apr 09 19:05:58.597532 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:42600] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adeIFjXObuzEuw8mNJsMUgAAARA"]
[Thu Apr 09 19:05:59.160752 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:12349] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adeIF8De826HlFeoLPKItAAAAUM"]
[Thu Apr 09 19:05:59.712251 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:47018] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adeIF-4Jn-WvK1ZBTvjBQwAAAMk"]
[Thu Apr 09 19:06:00.250678 2026] [:error] [pid 24624:tid 24636] [client 20.240.63.86:12128] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "adeIGO4Jn-WvK1ZBTvjBRgAAAMo"]
[Thu Apr 09 19:06:00.794329 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:42532] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeIGDXObuzEuw8mNJsMVwAAAQs"]
[Thu Apr 09 19:06:01.329620 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:12106] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeIGTXObuzEuw8mNJsMWwAAARM"]
[Thu Apr 09 19:06:01.863627 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:12147] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeIGe4Jn-WvK1ZBTvjBSQAAANg"]
[Thu Apr 09 19:06:02.451375 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:12111] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeIGsDe826HlFeoLPKIuQAAAUQ"]
[Thu Apr 09 19:06:02.998226 2026] [:error] [pid 18477:tid 18486] [client 20.240.63.86:35669] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adeIGsDe826HlFeoLPKIvAAAAUc"]
[Thu Apr 09 19:06:03.528010 2026] [:error] [pid 24517:tid 24591] [client 20.240.63.86:42609] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adeIG3boYEn2ZFM_PS92PwAAAJE"]
[Thu Apr 09 19:06:04.072327 2026] [:error] [pid 20837:tid 20847] [client 20.240.63.86:42535] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adeIHPSL71FHZkjrGzPSkwAAAYg"]
[Thu Apr 09 19:06:04.602686 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:47050] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "adeIHO4Jn-WvK1ZBTvjBUQAAANA"]
[Thu Apr 09 19:06:05.162256 2026] [:error] [pid 24624:tid 24647] [client 20.240.63.86:42550] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adeIHe4Jn-WvK1ZBTvjBVQAAANU"]
[Thu Apr 09 19:06:05.711609 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:42517] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adeIHe4Jn-WvK1ZBTvjBWAAAANQ"]
[Thu Apr 09 19:06:06.251614 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:42551] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adeIHsDe826HlFeoLPKIvgAAAU8"]
[Thu Apr 09 19:06:06.785741 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:12344] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "adeIHsDe826HlFeoLPKIvwAAAUA"]
[Thu Apr 09 19:06:07.322333 2026] [:error] [pid 24517:tid 24583] [client 20.240.63.86:42552] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adeIH3boYEn2ZFM_PS92QwAAAIk"]
[Thu Apr 09 19:06:07.854470 2026] [:error] [pid 18477:tid 18495] [client 20.240.63.86:42566] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adeIH8De826HlFeoLPKIwAAAAVA"]
[Thu Apr 09 19:06:08.385903 2026] [:error] [pid 18477:tid 18496] [client 20.240.63.86:12146] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adeIIMDe826HlFeoLPKIxAAAAVE"]
[Thu Apr 09 19:06:08.936730 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:12291] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adeIINhW7vSS-UkeWCUk1wAAAFA"]
[Thu Apr 09 19:06:09.507244 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:42599] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adeIIdhW7vSS-UkeWCUk2QAAAEQ"]
[Thu Apr 09 19:06:10.049957 2026] [:error] [pid 20837:tid 20845] [client 20.240.63.86:46999] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adeIIvSL71FHZkjrGzPSlwAAAYY"]
[Thu Apr 09 19:06:10.577608 2026] [:error] [pid 24517:tid 24575] [client 20.240.63.86:35692] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adeIInboYEn2ZFM_PS92RAAAAIE"]
[Thu Apr 09 19:06:11.108556 2026] [:error] [pid 24517:tid 24588] [client 20.240.63.86:34660] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "adeII3boYEn2ZFM_PS92RQAAAI4"]
[Thu Apr 09 19:06:11.640621 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:47021] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "adeII-4Jn-WvK1ZBTvjBZAAAAM0"]
[Thu Apr 09 19:06:12.177449 2026] [proxy_fcgi:error] [pid 20837:tid 20840] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:13.631116 2026] [proxy_fcgi:error] [pid 20837:tid 20841] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:13.897065 2026] [proxy_fcgi:error] [pid 20837:tid 20856] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:14.162672 2026] [proxy_fcgi:error] [pid 20837:tid 20858] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:14.436988 2026] [proxy_fcgi:error] [pid 20837:tid 20844] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:14.702952 2026] [proxy_fcgi:error] [pid 20837:tid 20839] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:14.968425 2026] [proxy_fcgi:error] [pid 20837:tid 20849] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:15.240809 2026] [proxy_fcgi:error] [pid 20837:tid 20850] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:15.507142 2026] [proxy_fcgi:error] [pid 20837:tid 20857] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:15.775547 2026] [proxy_fcgi:error] [pid 20837:tid 20854] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:16.065877 2026] [proxy_fcgi:error] [pid 20837:tid 20846] [client 20.240.63.86:42616] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:06:16.328382 2026] [:error] [pid 20837:tid 20845] [client 20.240.63.86:42616] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "adeIKPSL71FHZkjrGzPSrAAAAYY"]
[Thu Apr 09 19:06:16.854706 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:35710] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "adeIKK1OMnvM2fMnB1OH2wAAAAc"]
[Thu Apr 09 19:06:17.417766 2026] [:error] [pid 24517:tid 24589] [client 20.240.63.86:47042] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "adeIKXboYEn2ZFM_PS92SAAAAI8"]
[Thu Apr 09 19:06:17.959596 2026] [:error] [pid 24515:tid 24538] [client 20.240.63.86:12119] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "adeIKa1OMnvM2fMnB1OH3gAAABM"]
[Thu Apr 09 19:06:18.492880 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:12154] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adeIKu4Jn-WvK1ZBTvjBcgAAAMk"]
[Thu Apr 09 19:06:19.041318 2026] [:error] [pid 24516:tid 24549] [client 20.240.63.86:12107] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adeIK9hW7vSS-UkeWCUk3QAAAEI"]
[Thu Apr 09 19:06:19.598091 2026] [:error] [pid 24516:tid 24548] [client 20.240.63.86:42506] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adeIK9hW7vSS-UkeWCUk3gAAAEE"]
[Thu Apr 09 19:06:20.144410 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:12097] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adeILO4Jn-WvK1ZBTvjBdAAAAMQ"]
[Thu Apr 09 19:06:20.737402 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:15499] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "adeILDXObuzEuw8mNJsMYAAAARE"]
[Thu Apr 09 19:06:21.329012 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:12105] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "adeILe4Jn-WvK1ZBTvjBdgAAANg"]
[Thu Apr 09 19:06:21.889765 2026] [:error] [pid 24624:tid 24627] [client 20.240.63.86:15505] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "adeILe4Jn-WvK1ZBTvjBdwAAAME"]
[Thu Apr 09 19:06:22.444457 2026] [:error] [pid 24624:tid 24629] [client 20.240.63.86:47019] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "adeILu4Jn-WvK1ZBTvjBeAAAAMM"]
[Thu Apr 09 19:06:23.031883 2026] [:error] [pid 24624:tid 24647] [client 20.240.63.86:42576] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "adeIL-4Jn-WvK1ZBTvjBewAAANU"]
[Thu Apr 09 19:06:23.602630 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:47029] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "adeIL9hW7vSS-UkeWCUk3wAAAEw"]
[Thu Apr 09 19:06:24.133451 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:42575] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "adeIMNhW7vSS-UkeWCUk4QAAAEY"]
[Thu Apr 09 19:06:24.695685 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:15538] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "adeIMNhW7vSS-UkeWCUk4gAAAFI"]
[Thu Apr 09 19:06:25.247050 2026] [:error] [pid 24927:tid 24936] [client 20.240.63.86:47013] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adeIMTXObuzEuw8mNJsMYwAAAQY"]
[Thu Apr 09 19:06:25.807031 2026] [:error] [pid 20837:tid 20844] [client 20.240.63.86:15539] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adeIMfSL71FHZkjrGzPSsgAAAYU"]
[Thu Apr 09 19:06:26.365422 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:12321] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adeIMjXObuzEuw8mNJsMZQAAARM"]
[Thu Apr 09 19:06:26.923030 2026] [:error] [pid 18477:tid 18480] [client 20.240.63.86:47084] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adeIMsDe826HlFeoLPKIywAAAUE"]
[Thu Apr 09 19:06:27.469485 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:12153] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adeIMzXObuzEuw8mNJsMdwAAARU"]
[Thu Apr 09 19:06:28.000098 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:42545] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adeIM8De826HlFeoLPKIzAAAAU8"]
[Thu Apr 09 19:06:28.561618 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:15120] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adeINO4Jn-WvK1ZBTvjBgAAAAMk"]
[Thu Apr 09 19:06:29.086706 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:12338] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "adeINcDe826HlFeoLPKIzgAAAUA"]
[Thu Apr 09 19:06:29.645846 2026] [:error] [pid 18477:tid 18489] [client 20.240.63.86:15543] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adeINcDe826HlFeoLPKI0AAAAUo"]
[Thu Apr 09 19:06:30.196494 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:34628] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adeINjXObuzEuw8mNJsMnAAAAQE"]
[Thu Apr 09 19:06:30.723168 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:12138] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adeINsDe826HlFeoLPKI1AAAAU4"]
[Thu Apr 09 19:06:31.273659 2026] [:error] [pid 20837:tid 20859] [client 20.240.63.86:12129] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adeIN_SL71FHZkjrGzPS2AAAAZQ"]
[Thu Apr 09 19:06:31.798908 2026] [:error] [pid 20837:tid 20852] [client 20.240.63.86:12340] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adeIN_SL71FHZkjrGzPS2QAAAY0"]
[Thu Apr 09 19:06:32.333625 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:15130] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adeIOPSL71FHZkjrGzPS2gAAAYw"]
[Thu Apr 09 19:06:32.873723 2026] [:error] [pid 20837:tid 20841] [client 20.240.63.86:12318] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adeIOPSL71FHZkjrGzPS3QAAAYI"]
[Thu Apr 09 19:06:33.422479 2026] [:error] [pid 24517:tid 24594] [client 20.240.63.86:42598] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "adeIOXboYEn2ZFM_PS92TQAAAJQ"]
[Thu Apr 09 19:06:33.962096 2026] [:error] [pid 24517:tid 24581] [client 20.240.63.86:15545] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adeIOXboYEn2ZFM_PS92TgAAAIc"]
[Thu Apr 09 19:06:34.516085 2026] [:error] [pid 24517:tid 24576] [client 20.240.63.86:47068] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adeIOnboYEn2ZFM_PS92UAAAAII"]
[Thu Apr 09 19:06:35.052907 2026] [:error] [pid 24624:tid 24627] [client 20.240.63.86:47059] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adeIO-4Jn-WvK1ZBTvjBiQAAAME"]
[Thu Apr 09 19:06:35.621704 2026] [:error] [pid 24624:tid 24647] [client 20.240.63.86:12096] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "adeIO-4Jn-WvK1ZBTvjBjQAAANU"]
[Thu Apr 09 19:06:36.162171 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:15492] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adeIPMDe826HlFeoLPKI7gAAAVc"]
[Thu Apr 09 19:06:36.703178 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:12350] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adeIPMDe826HlFeoLPKI8QAAAVU"]
[Thu Apr 09 19:06:37.235670 2026] [:error] [pid 24624:tid 24632] [client 20.240.63.86:42554] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adeIPe4Jn-WvK1ZBTvjBlAAAAMY"]
[Thu Apr 09 19:06:37.814878 2026] [:error] [pid 24516:tid 24571] [client 20.240.63.86:47045] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "adeIPdhW7vSS-UkeWCUk-wAAAFg"]
[Thu Apr 09 19:06:38.359968 2026] [:error] [pid 18477:tid 18494] [client 20.240.63.86:15115] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adeIPsDe826HlFeoLPKI9gAAAU8"]
[Thu Apr 09 19:06:38.887817 2026] [:error] [pid 18477:tid 18499] [client 20.240.63.86:22052] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adeIPsDe826HlFeoLPKI-gAAAVQ"]
[Thu Apr 09 19:06:39.416301 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:15491] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adeIP8De826HlFeoLPKJAAAAAVY"]
[Thu Apr 09 19:06:39.960960 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:15494] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "adeIP-4Jn-WvK1ZBTvjBngAAAM4"]
[Thu Apr 09 19:06:40.600968 2026] [:error] [pid 24927:tid 24944] [client 20.240.63.86:42592] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adeIQDXObuzEuw8mNJsMpAAAAQ4"]
[Thu Apr 09 19:06:41.151883 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:15157] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adeIQTXObuzEuw8mNJsMpQAAAQs"]
[Thu Apr 09 19:06:41.680622 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:15146] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adeIQTXObuzEuw8mNJsMqAAAARg"]
[Thu Apr 09 19:06:42.222450 2026] [:error] [pid 24927:tid 24940] [client 20.240.63.86:15529] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "adeIQjXObuzEuw8mNJsMrwAAAQo"]
[Thu Apr 09 19:06:42.754437 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:42519] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adeIQjXObuzEuw8mNJsMtgAAAQA"]
[Thu Apr 09 19:06:43.287212 2026] [:error] [pid 18477:tid 18484] [client 20.240.63.86:12125] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adeIQ8De826HlFeoLPKJFwAAAUU"]
[Thu Apr 09 19:06:43.834382 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:12155] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adeIQ61OMnvM2fMnB1OH_AAAAAU"]
[Thu Apr 09 19:06:44.640451 2026] [:error] [pid 24515:tid 24540] [client 20.240.63.86:12148] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adeIRK1OMnvM2fMnB1OH_QAAABU"]
[Thu Apr 09 19:06:45.170067 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:34683] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adeIRa1OMnvM2fMnB1OIAAAAAA0"]
[Thu Apr 09 19:06:45.761270 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:47017] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adeIRa1OMnvM2fMnB1OIAQAAAAQ"]
[Thu Apr 09 19:06:46.293328 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:12307] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adeIRu4Jn-WvK1ZBTvjBpAAAANc"]
[Thu Apr 09 19:06:46.844385 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:46989] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adeIRnboYEn2ZFM_PS92UgAAAJM"]
[Thu Apr 09 19:06:47.367845 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:42539] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adeIR9hW7vSS-UkeWCUlCAAAAFI"]
[Thu Apr 09 19:06:47.900324 2026] [:error] [pid 20837:tid 20839] [client 20.240.63.86:47015] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adeIR_SL71FHZkjrGzPTCgAAAYA"]
[Thu Apr 09 19:06:48.443686 2026] [:error] [pid 20837:tid 20842] [client 20.240.63.86:12159] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adeISPSL71FHZkjrGzPTCwAAAYM"]
[Thu Apr 09 19:06:48.999584 2026] [:error] [pid 18477:tid 18502] [client 20.240.63.86:42590] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "adeISMDe826HlFeoLPKJHgAAAVc"]
[Thu Apr 09 19:06:49.552167 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:15827] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adeISdhW7vSS-UkeWCUlCQAAAEo"]
[Thu Apr 09 19:06:50.331580 2026] [:error] [pid 24517:tid 24585] [client 20.240.63.86:42507] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adeISnboYEn2ZFM_PS92VAAAAIs"]
[Thu Apr 09 19:06:51.220573 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:15508] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adeISzXObuzEuw8mNJsMwQAAAQM"]
[Thu Apr 09 19:06:52.124226 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:15126] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "adeITDXObuzEuw8mNJsMwgAAAQc"]
[Thu Apr 09 19:06:52.871079 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:47102] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adeITMDe826HlFeoLPKJHwAAAUk"]
[Thu Apr 09 19:06:53.421748 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:15532] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adeITcDe826HlFeoLPKJIwAAAVY"]
[Thu Apr 09 19:06:53.977855 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:15551] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adeITTXObuzEuw8mNJsMxQAAAQk"]
[Thu Apr 09 19:06:54.510322 2026] [:error] [pid 24927:tid 24934] [client 20.240.63.86:15513] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adeITjXObuzEuw8mNJsMxgAAAQQ"]
[Thu Apr 09 19:06:55.062104 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:15160] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "adeITzXObuzEuw8mNJsMygAAAQE"]
[Thu Apr 09 19:06:55.624727 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:47043] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "adeITzXObuzEuw8mNJsMzAAAAQw"]
[Thu Apr 09 19:06:56.221357 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:12322] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "adeIUDXObuzEuw8mNJsMzgAAAQ8"]
[Thu Apr 09 19:06:56.836880 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:47099] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "adeIUDXObuzEuw8mNJsM0AAAARE"]
[Thu Apr 09 19:06:57.421115 2026] [:error] [pid 24516:tid 24571] [client 20.240.63.86:12108] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "adeIUdhW7vSS-UkeWCUlDwAAAFg"]
[Thu Apr 09 19:06:58.041746 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:15504] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "adeIUjXObuzEuw8mNJsM0QAAARQ"]
[Thu Apr 09 19:06:58.639427 2026] [:error] [pid 20837:tid 20850] [client 20.240.63.86:15522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "adeIUvSL71FHZkjrGzPTDQAAAYs"]
[Thu Apr 09 19:06:59.168832 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:22138] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "adeIU_SL71FHZkjrGzPTDgAAAZg"]
[Thu Apr 09 19:06:59.748103 2026] [:error] [pid 20837:tid 20861] [client 20.240.63.86:21548] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adeIU_SL71FHZkjrGzPTDwAAAZY"]
[Thu Apr 09 19:07:00.301445 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:47010] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adeIVNhW7vSS-UkeWCUlEAAAAFE"]
[Thu Apr 09 19:07:00.996245 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:12325] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adeIVMDe826HlFeoLPKJKAAAAVM"]
[Thu Apr 09 19:07:01.553678 2026] [:error] [pid 24516:tid 24568] [client 20.240.63.86:21512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adeIVdhW7vSS-UkeWCUlEgAAAFU"]
[Thu Apr 09 19:07:02.170078 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:22683] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "adeIVsDe826HlFeoLPKJKQAAAUI"]
[Thu Apr 09 19:07:02.743531 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:15536] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "adeIVsDe826HlFeoLPKJKwAAAVI"]
[Thu Apr 09 19:07:03.325199 2026] [:error] [pid 20837:tid 20846] [client 20.240.63.86:12149] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "adeIV_SL71FHZkjrGzPTEQAAAYc"]
[Thu Apr 09 19:07:03.935264 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:12304] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "adeIV9hW7vSS-UkeWCUlFQAAAEQ"]
[Thu Apr 09 19:07:04.485104 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:22711] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "adeIWO4Jn-WvK1ZBTvjBrQAAANQ"]
[Thu Apr 09 19:07:05.084098 2026] [:error] [pid 24515:tid 24533] [client 20.240.63.86:22658] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "adeIWa1OMnvM2fMnB1OIBQAAAA4"]
[Thu Apr 09 19:07:05.638366 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:12327] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "adeIWTXObuzEuw8mNJsM1AAAAQc"]
[Thu Apr 09 19:07:06.235182 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:12301] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "adeIWq1OMnvM2fMnB1OIEAAAAAY"]
[Thu Apr 09 19:07:06.796762 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:46984] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adeIWthW7vSS-UkeWCUlHAAAAFI"]
[Thu Apr 09 19:07:07.370556 2026] [:error] [pid 24516:tid 24557] [client 20.240.63.86:15119] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adeIW9hW7vSS-UkeWCUlHQAAAEo"]
[Thu Apr 09 19:07:07.925916 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:21556] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adeIW8De826HlFeoLPKJNAAAAUQ"]
[Thu Apr 09 19:07:08.486762 2026] [:error] [pid 18477:tid 18490] [client 20.240.63.86:34679] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "adeIXMDe826HlFeoLPKJNgAAAUs"]
[Thu Apr 09 19:07:09.031807 2026] [:error] [pid 24516:tid 24562] [client 20.240.63.86:42522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adeIXdhW7vSS-UkeWCUlHgAAAE8"]
[Thu Apr 09 19:07:09.570266 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:22718] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adeIXcDe826HlFeoLPKJOAAAAVM"]
[Thu Apr 09 19:07:10.117790 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:42531] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adeIXthW7vSS-UkeWCUlIQAAAFQ"]
[Thu Apr 09 19:07:10.662197 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:22656] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adeIXu4Jn-WvK1ZBTvjBrwAAANA"]
[Thu Apr 09 19:07:11.212315 2026] [:error] [pid 24516:tid 24571] [client 20.240.63.86:12333] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "adeIX9hW7vSS-UkeWCUlJAAAAFg"]
[Thu Apr 09 19:07:11.823954 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:21519] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "adeIXzXObuzEuw8mNJsM3gAAAQI"]
[Thu Apr 09 19:07:12.391318 2026] [:error] [pid 24927:tid 24951] [client 20.240.63.86:47051] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "adeIYDXObuzEuw8mNJsM4AAAARU"]
[Thu Apr 09 19:07:12.922024 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:12341] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "adeIYK1OMnvM2fMnB1OIFQAAABI"]
[Thu Apr 09 19:07:13.486167 2026] [:error] [pid 24515:tid 24535] [client 20.240.63.86:12120] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adeIYa1OMnvM2fMnB1OIFgAAABA"]
[Thu Apr 09 19:07:14.021307 2026] [:error] [pid 24515:tid 24521] [client 20.240.63.86:12121] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adeIYq1OMnvM2fMnB1OIFwAAAAI"]
[Thu Apr 09 19:07:14.601410 2026] [:error] [pid 24927:tid 24931] [client 20.240.63.86:46990] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adeIYjXObuzEuw8mNJsM6AAAAQE"]
[Thu Apr 09 19:07:15.151442 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:42569] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "adeIY9hW7vSS-UkeWCUlJwAAAEQ"]
[Thu Apr 09 19:07:15.694420 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:21522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "adeIY61OMnvM2fMnB1OIGAAAAAs"]
[Thu Apr 09 19:07:16.238934 2026] [proxy_fcgi:error] [pid 24927:tid 24950] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:16.510879 2026] [proxy_fcgi:error] [pid 24927:tid 24949] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:16.778457 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:17.046457 2026] [proxy_fcgi:error] [pid 24927:tid 24937] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:17.602425 2026] [proxy_fcgi:error] [pid 24927:tid 24954] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:17.887828 2026] [proxy_fcgi:error] [pid 24927:tid 24939] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:18.160651 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:18.432303 2026] [proxy_fcgi:error] [pid 24927:tid 24941] [client 20.240.63.86:15105] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:07:19.243472 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:15105] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIZzXObuzEuw8mNJsM_gAAARI"]
[Thu Apr 09 19:07:19.775422 2026] [:error] [pid 24516:tid 24553] [client 20.240.63.86:22026] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIZ9hW7vSS-UkeWCUlKwAAAEY"]
[Thu Apr 09 19:07:20.320768 2026] [:error] [pid 20837:tid 20859] [client 20.240.63.86:15864] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIaPSL71FHZkjrGzPTEwAAAZQ"]
[Thu Apr 09 19:07:20.857432 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:12103] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIaHboYEn2ZFM_PS92WQAAAIQ"]
[Thu Apr 09 19:07:21.484651 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:22121] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adeIafSL71FHZkjrGzPTFAAAAZM"]
[Thu Apr 09 19:07:22.186752 2026] [:error] [pid 24515:tid 24522] [client 20.240.63.86:30507] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adeIaq1OMnvM2fMnB1OIHQAAAAM"]
[Thu Apr 09 19:07:22.716775 2026] [:error] [pid 24517:tid 24594] [client 20.240.63.86:47075] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adeIanboYEn2ZFM_PS92WgAAAJQ"]
[Thu Apr 09 19:07:23.251966 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:31502] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "adeIa61OMnvM2fMnB1OIHgAAAA0"]
[Thu Apr 09 19:07:23.814320 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:31533] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adeIa61OMnvM2fMnB1OIIAAAABQ"]
[Thu Apr 09 19:07:24.343410 2026] [:error] [pid 24624:tid 24635] [client 20.240.63.86:15117] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adeIbO4Jn-WvK1ZBTvjBsgAAAMk"]
[Thu Apr 09 19:07:24.910295 2026] [:error] [pid 24927:tid 24953] [client 20.240.63.86:22697] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adeIbDXObuzEuw8mNJsM_wAAARc"]
[Thu Apr 09 19:07:25.473554 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:22679] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "adeIbe4Jn-WvK1ZBTvjBtQAAAMQ"]
[Thu Apr 09 19:07:26.006613 2026] [:error] [pid 24624:tid 24648] [client 20.240.63.86:15514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIbu4Jn-WvK1ZBTvjBtwAAANY"]
[Thu Apr 09 19:07:26.564275 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:21520] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIbu4Jn-WvK1ZBTvjBuQAAAMw"]
[Thu Apr 09 19:07:27.116830 2026] [:error] [pid 24624:tid 24628] [client 20.240.63.86:15509] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIb-4Jn-WvK1ZBTvjBvAAAAMI"]
[Thu Apr 09 19:07:27.664902 2026] [:error] [pid 24515:tid 24526] [client 20.240.63.86:31550] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adeIb61OMnvM2fMnB1OIIwAAAAc"]
[Thu Apr 09 19:07:28.232881 2026] [:error] [pid 24516:tid 24547] [client 20.240.63.86:30508] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adeIcNhW7vSS-UkeWCUlLgAAAEA"]
[Thu Apr 09 19:07:28.770136 2026] [:error] [pid 20837:tid 20849] [client 20.240.63.86:15145] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adeIcPSL71FHZkjrGzPTHAAAAYo"]
[Thu Apr 09 19:07:29.314113 2026] [:error] [pid 24516:tid 24570] [client 20.240.63.86:31508] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adeIcdhW7vSS-UkeWCUlLwAAAFc"]
[Thu Apr 09 19:07:29.872782 2026] [:error] [pid 24927:tid 24938] [client 20.240.63.86:21510] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adeIcTXObuzEuw8mNJsNAAAAAQg"]
[Thu Apr 09 19:07:30.406190 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:22666] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "adeIcjXObuzEuw8mNJsNBQAAAQA"]
[Thu Apr 09 19:07:30.981619 2026] [:error] [pid 20837:tid 20857] [client 20.240.63.86:12134] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "adeIcvSL71FHZkjrGzPTHQAAAZI"]
[Thu Apr 09 19:07:31.524554 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:12152] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "adeIc-4Jn-WvK1ZBTvjBwAAAANA"]
[Thu Apr 09 19:07:32.052246 2026] [:error] [pid 24516:tid 24564] [client 20.240.63.86:47040] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "adeIdNhW7vSS-UkeWCUlMAAAAFE"]
[Thu Apr 09 19:07:32.631171 2026] [:error] [pid 24517:tid 24576] [client 20.240.63.86:12343] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "adeIdHboYEn2ZFM_PS92XAAAAII"]
[Thu Apr 09 19:07:33.169452 2026] [:error] [pid 24624:tid 24636] [client 20.240.63.86:22708] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "adeIde4Jn-WvK1ZBTvjBwgAAAMo"]
[Thu Apr 09 19:07:33.723365 2026] [:error] [pid 24624:tid 24630] [client 20.240.63.86:47028] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "adeIde4Jn-WvK1ZBTvjBxAAAAMQ"]
[Thu Apr 09 19:07:34.280928 2026] [:error] [pid 24517:tid 24587] [client 20.240.63.86:30464] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "adeIdnboYEn2ZFM_PS92XQAAAI0"]
[Thu Apr 09 19:07:34.834446 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:15155] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeIdu4Jn-WvK1ZBTvjBxQAAAMw"]
[Thu Apr 09 19:07:35.368018 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:15500] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeIdzXObuzEuw8mNJsNCgAAAQs"]
[Thu Apr 09 19:07:35.903694 2026] [:error] [pid 24624:tid 24639] [client 20.240.63.86:12140] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeId-4Jn-WvK1ZBTvjByAAAAM0"]
[Thu Apr 09 19:07:36.442349 2026] [:error] [pid 24927:tid 24932] [client 20.240.63.86:22680] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeIeDXObuzEuw8mNJsNDAAAAQI"]
[Thu Apr 09 19:07:36.989383 2026] [:error] [pid 24515:tid 24521] [client 20.240.63.86:12097] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "adeIeK1OMnvM2fMnB1OIKAAAAAI"]
[Thu Apr 09 19:07:37.527582 2026] [:error] [pid 24517:tid 24588] [client 20.240.63.86:21546] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "adeIeXboYEn2ZFM_PS92YQAAAI4"]
[Thu Apr 09 19:07:38.056509 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:12345] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "adeIenboYEn2ZFM_PS92YwAAAIo"]
[Thu Apr 09 19:07:38.618572 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:31495] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "adeIeq1OMnvM2fMnB1OIKgAAAAU"]
[Thu Apr 09 19:07:39.215057 2026] [:error] [pid 18477:tid 18482] [client 20.240.63.86:35702] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "adeIe8De826HlFeoLPKJOwAAAUM"]
[Thu Apr 09 19:07:39.748212 2026] [:error] [pid 20837:tid 20841] [client 20.240.63.86:31505] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "adeIe_SL71FHZkjrGzPTIgAAAYI"]
[Thu Apr 09 19:07:40.280547 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:21514] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "adeIfK1OMnvM2fMnB1OILAAAAAE"]
[Thu Apr 09 19:07:40.835879 2026] [:error] [pid 24515:tid 24536] [client 20.240.63.86:15153] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "adeIfK1OMnvM2fMnB1OILgAAABE"]
[Thu Apr 09 19:07:41.366058 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:15104] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "adeIfTXObuzEuw8mNJsNEAAAARY"]
[Thu Apr 09 19:07:41.901478 2026] [:error] [pid 24515:tid 24532] [client 20.240.63.86:15495] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "adeIfa1OMnvM2fMnB1OILwAAAA0"]
[Thu Apr 09 19:07:42.554165 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:15159] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "adeIfjXObuzEuw8mNJsNFQAAAQM"]
[Thu Apr 09 19:07:43.094923 2026] [:error] [pid 24624:tid 24641] [client 20.240.63.86:31537] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "adeIf-4Jn-WvK1ZBTvjByQAAAM8"]
[Thu Apr 09 19:07:43.643206 2026] [:error] [pid 24624:tid 24631] [client 20.240.63.86:21517] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "adeIf-4Jn-WvK1ZBTvjBygAAAMU"]
[Thu Apr 09 19:07:44.252036 2026] [:error] [pid 24927:tid 24948] [client 20.240.63.86:12334] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "adeIgDXObuzEuw8mNJsNGgAAARI"]
[Thu Apr 09 19:07:45.014842 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:21513] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "adeIgTXObuzEuw8mNJsNHgAAARQ"]
[Thu Apr 09 19:07:45.748279 2026] [:error] [pid 24927:tid 24952] [client 20.240.63.86:22688] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "adeIgTXObuzEuw8mNJsNJAAAARY"]
[Thu Apr 09 19:07:46.388167 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:12328] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeIgjXObuzEuw8mNJsNKAAAARE"]
[Thu Apr 09 19:07:47.172496 2026] [:error] [pid 24624:tid 24642] [client 20.240.63.86:12337] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeIg-4Jn-WvK1ZBTvjBzAAAANA"]
[Thu Apr 09 19:07:47.875432 2026] [:error] [pid 20837:tid 20857] [client 20.240.63.86:22719] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeIg_SL71FHZkjrGzPTKAAAAZI"]
[Thu Apr 09 19:08:08.792743 2026] [:error] [pid 20837:tid 20860] [client 20.240.63.86:30503] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "adeImPSL71FHZkjrGzPTKwAAAZU"]
[Thu Apr 09 19:08:09.326073 2026] [:error] [pid 20837:tid 20856] [client 20.240.63.86:31519] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "adeImfSL71FHZkjrGzPTLQAAAZE"]
[Thu Apr 09 19:08:09.862208 2026] [:error] [pid 24515:tid 24541] [client 20.240.63.86:15521] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "adeIma1OMnvM2fMnB1OIRwAAABY"]
[Thu Apr 09 19:08:10.386432 2026] [:error] [pid 24516:tid 24558] [client 20.240.63.86:31523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "adeImthW7vSS-UkeWCUlOAAAAEs"]
[Thu Apr 09 19:08:10.935160 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:30488] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "adeImsDe826HlFeoLPKJTwAAAUA"]
[Thu Apr 09 19:08:11.490441 2026] [:error] [pid 24516:tid 24549] [client 20.240.63.86:21526] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "adeIm9hW7vSS-UkeWCUlOQAAAEI"]
[Thu Apr 09 19:08:12.038548 2026] [:error] [pid 20837:tid 20857] [client 20.240.63.86:15540] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "adeInPSL71FHZkjrGzPTMAAAAZI"]
[Thu Apr 09 19:08:12.640952 2026] [:error] [pid 24515:tid 24529] [client 20.240.63.86:54267] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "adeInK1OMnvM2fMnB1OITgAAAAo"]
[Thu Apr 09 19:08:13.288750 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:54228] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adeIna1OMnvM2fMnB1OITwAAABI"]
[Thu Apr 09 19:08:13.882435 2026] [:error] [pid 24515:tid 24534] [client 20.240.63.86:54241] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adeIna1OMnvM2fMnB1OIUQAAAA8"]
[Thu Apr 09 19:08:14.420001 2026] [:error] [pid 18477:tid 18488] [client 20.240.63.86:15108] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adeInsDe826HlFeoLPKJVgAAAUk"]
[Thu Apr 09 19:08:14.984704 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:30516] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "adeInu4Jn-WvK1ZBTvjB1wAAAM4"]
[Thu Apr 09 19:08:15.541142 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:56651] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adeIn8De826HlFeoLPKJWQAAAVg"]
[Thu Apr 09 19:08:16.076834 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:22667] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adeIoMDe826HlFeoLPKJXgAAAU4"]
[Thu Apr 09 19:08:16.712306 2026] [:error] [pid 18477:tid 18479] [client 20.240.63.86:56677] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adeIoMDe826HlFeoLPKJYAAAAUA"]
[Thu Apr 09 19:08:17.255402 2026] [:error] [pid 24516:tid 24567] [client 20.240.63.86:30493] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adeIodhW7vSS-UkeWCUlPQAAAFQ"]
[Thu Apr 09 19:08:17.786447 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:21539] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adeIocDe826HlFeoLPKJYgAAAUI"]
[Thu Apr 09 19:08:18.389329 2026] [proxy_fcgi:error] [pid 18477:tid 18502] [client 20.240.63.86:21557] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:18.924380 2026] [proxy_fcgi:error] [pid 18477:tid 18482] [client 20.240.63.86:21557] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:19.462283 2026] [proxy_fcgi:error] [pid 18477:tid 18490] [client 20.240.63.86:21557] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:19.731396 2026] [proxy_fcgi:error] [pid 18477:tid 18485] [client 20.240.63.86:21557] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:19.999072 2026] [proxy_fcgi:error] [pid 18477:tid 18498] [client 20.240.63.86:21557] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:20.266216 2026] [proxy_fcgi:error] [pid 18477:tid 18499] [client 20.240.63.86:21557] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:20.808028 2026] [:error] [pid 18477:tid 18480] [client 20.240.63.86:21557] [client 20.240.63.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adeIpMDe826HlFeoLPKJbgAAAUE"]
[Thu Apr 09 19:08:21.360319 2026] [proxy_fcgi:error] [pid 24516:tid 24561] [client 20.240.63.86:30466] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:08:21.893837 2026] [:error] [pid 24516:tid 24550] [client 20.240.63.86:30466] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adeIpdhW7vSS-UkeWCUlRAAAAEM"]
[Thu Apr 09 19:08:22.451047 2026] [:error] [pid 24516:tid 24568] [client 20.240.63.86:15524] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adeIpthW7vSS-UkeWCUlRQAAAFU"]
[Thu Apr 09 19:08:22.989737 2026] [:error] [pid 24515:tid 24525] [client 20.240.63.86:54238] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adeIpq1OMnvM2fMnB1OIVQAAAAY"]
[Thu Apr 09 19:08:23.534851 2026] [:error] [pid 18477:tid 18481] [client 20.240.63.86:30483] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "adeIp8De826HlFeoLPKJcQAAAUI"]
[Thu Apr 09 19:08:24.070472 2026] [:error] [pid 24516:tid 24555] [client 20.240.63.86:21540] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "adeIqNhW7vSS-UkeWCUlSAAAAEg"]
[Thu Apr 09 19:08:24.602249 2026] [:error] [pid 18477:tid 18487] [client 20.240.63.86:15136] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "adeIqMDe826HlFeoLPKJdAAAAUg"]
[Thu Apr 09 19:08:25.130857 2026] [:error] [pid 18477:tid 18503] [client 20.240.63.86:31512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "adeIqcDe826HlFeoLPKJeAAAAVg"]
[Thu Apr 09 19:08:25.694069 2026] [:error] [pid 18477:tid 18498] [client 20.240.63.86:22685] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "adeIqcDe826HlFeoLPKJfAAAAVM"]
[Thu Apr 09 19:08:26.245506 2026] [:error] [pid 24624:tid 24650] [client 20.240.63.86:31516] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "adeIqu4Jn-WvK1ZBTvjB3gAAANg"]
[Thu Apr 09 19:08:26.805199 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:47031] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "adeIqsDe826HlFeoLPKJfgAAAU4"]
[Thu Apr 09 19:08:27.335765 2026] [:error] [pid 18477:tid 18497] [client 20.240.63.86:54230] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "adeIq8De826HlFeoLPKJfwAAAVI"]
[Thu Apr 09 19:08:27.866664 2026] [:error] [pid 20837:tid 20845] [client 20.240.63.86:54259] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "adeIq_SL71FHZkjrGzPTMgAAAYY"]
[Thu Apr 09 19:08:28.416512 2026] [:error] [pid 24516:tid 24560] [client 20.240.63.86:54252] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "adeIrNhW7vSS-UkeWCUlSQAAAE0"]
[Thu Apr 09 19:08:28.961210 2026] [:error] [pid 24927:tid 24942] [client 20.240.63.86:15523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "adeIrDXObuzEuw8mNJsNUAAAAQw"]
[Thu Apr 09 19:08:29.622634 2026] [:error] [pid 24927:tid 24946] [client 20.240.63.86:54231] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "adeIrTXObuzEuw8mNJsNVgAAARA"]
[Thu Apr 09 19:08:30.288613 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:15511] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "adeIrjXObuzEuw8mNJsNWgAAAQc"]
[Thu Apr 09 19:08:30.820403 2026] [:error] [pid 24927:tid 24939] [client 20.240.63.86:56671] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "adeIrjXObuzEuw8mNJsNXAAAAQk"]
[Thu Apr 09 19:08:31.350601 2026] [:error] [pid 24517:tid 24584] [client 20.240.63.86:15502] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "adeIr3boYEn2ZFM_PS92cQAAAIo"]
[Thu Apr 09 19:08:31.922620 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:30484] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "adeIrzXObuzEuw8mNJsNXwAAARQ"]
[Thu Apr 09 19:08:32.464221 2026] [:error] [pid 20837:tid 20848] [client 20.240.63.86:22661] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "adeIsPSL71FHZkjrGzPTNAAAAYk"]
[Thu Apr 09 19:08:33.029409 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:47103] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "adeIsa1OMnvM2fMnB1OIWgAAABI"]
[Thu Apr 09 19:08:33.715575 2026] [:error] [pid 24515:tid 24542] [client 20.240.63.86:22707] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "adeIsa1OMnvM2fMnB1OIXQAAABc"]
[Thu Apr 09 19:08:34.257125 2026] [:error] [pid 24515:tid 24524] [client 20.240.63.86:56675] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "adeIsq1OMnvM2fMnB1OIXgAAAAU"]
[Thu Apr 09 19:08:34.799831 2026] [:error] [pid 18477:tid 18499] [client 20.240.63.86:15520] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "adeIssDe826HlFeoLPKJhAAAAVQ"]
[Thu Apr 09 19:08:35.387173 2026] [:error] [pid 24624:tid 24644] [client 20.240.63.86:21560] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "adeIs-4Jn-WvK1ZBTvjB6QAAANI"]
[Thu Apr 09 19:08:36.066349 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:21528] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "adeItDXObuzEuw8mNJsNZwAAAQM"]
[Thu Apr 09 19:08:36.601962 2026] [:error] [pid 24927:tid 24945] [client 20.240.63.86:15125] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "adeItDXObuzEuw8mNJsNagAAAQ8"]
[Thu Apr 09 19:08:37.134514 2026] [:error] [pid 24517:tid 24590] [client 20.240.63.86:34659] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "adeItXboYEn2ZFM_PS92dQAAAJA"]
[Thu Apr 09 19:08:37.760705 2026] [:error] [pid 24515:tid 24535] [client 20.240.63.86:22659] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adeIta1OMnvM2fMnB1OIYQAAABA"]
[Thu Apr 09 19:08:38.341794 2026] [:error] [pid 24624:tid 24645] [client 20.240.63.86:15526] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adeItu4Jn-WvK1ZBTvjB7gAAANM"]
[Thu Apr 09 19:08:38.972871 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:54260] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adeItq1OMnvM2fMnB1OIZAAAAAE"]
[Thu Apr 09 19:08:39.564048 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:31530] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adeIt_SL71FHZkjrGzPTNgAAAYw"]
[Thu Apr 09 19:08:40.595965 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:15510] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "adeIuMDe826HlFeoLPKJjQAAAVU"]
[Thu Apr 09 19:08:41.361388 2026] [:error] [pid 24516:tid 24554] [client 20.240.63.86:30522] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "adeIudhW7vSS-UkeWCUlTgAAAEc"]
[Thu Apr 09 19:08:42.624727 2026] [:error] [pid 20837:tid 20852] [client 20.240.63.86:22110] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "adeIuvSL71FHZkjrGzPTNwAAAY0"]
[Thu Apr 09 19:08:43.386802 2026] [:error] [pid 18477:tid 18501] [client 20.240.63.86:56650] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "adeIu8De826HlFeoLPKJlQAAAVY"]
[Thu Apr 09 19:08:45.277168 2026] [:error] [pid 18477:tid 18493] [client 20.240.63.86:31523] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adeIvcDe826HlFeoLPKJnAAAAU4"]
[Thu Apr 09 19:08:46.139667 2026] [:error] [pid 24516:tid 24568] [client 20.240.63.86:15550] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adeIvthW7vSS-UkeWCUlUwAAAFU"]
[Thu Apr 09 19:08:47.177084 2026] [:error] [pid 18477:tid 18500] [client 20.240.63.86:54233] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adeIv8De826HlFeoLPKJnwAAAVU"]
[Thu Apr 09 19:08:47.878665 2026] [:error] [pid 18477:tid 18499] [client 20.240.63.86:31501] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bengi.php"] [unique_id "adeIv8De826HlFeoLPKJpAAAAVQ"]
[Thu Apr 09 19:08:48.551598 2026] [:error] [pid 24516:tid 24563] [client 20.240.63.86:21504] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeIwNhW7vSS-UkeWCUlVAAAAFA"]
[Thu Apr 09 19:08:49.136911 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:22669] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeIwa1OMnvM2fMnB1OIagAAABI"]
[Thu Apr 09 19:08:49.895601 2026] [:error] [pid 24515:tid 24539] [client 20.240.63.86:15501] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeIwa1OMnvM2fMnB1OIawAAABQ"]
[Thu Apr 09 19:08:51.206580 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:15132] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adeIw-4Jn-WvK1ZBTvjB-QAAANQ"]
[Thu Apr 09 19:08:52.241273 2026] [:error] [pid 18477:tid 18491] [client 20.240.63.86:42582] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adeIxMDe826HlFeoLPKJqwAAAUw"]
[Thu Apr 09 19:08:53.621708 2026] [:error] [pid 24927:tid 24930] [client 20.240.63.86:56667] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adeIxTXObuzEuw8mNJsNdAAAAQA"]
[Thu Apr 09 19:08:54.182578 2026] [:error] [pid 18477:tid 18499] [client 20.240.63.86:30512] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adeIxsDe826HlFeoLPKJsAAAAVQ"]
[Thu Apr 09 19:08:55.097598 2026] [:error] [pid 20837:tid 20861] [client 20.240.63.86:56684] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "adeIx_SL71FHZkjrGzPTPwAAAZY"]
[Thu Apr 09 19:08:55.817447 2026] [:error] [pid 24624:tid 24634] [client 20.240.63.86:54236] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adeIx-4Jn-WvK1ZBTvjCAQAAAMg"]
[Thu Apr 09 19:08:56.426904 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:54221] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adeIyDXObuzEuw8mNJsNdwAAARM"]
[Thu Apr 09 19:08:57.323253 2026] [:error] [pid 24927:tid 24935] [client 20.240.63.86:54253] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adeIyTXObuzEuw8mNJsNeQAAAQU"]
[Thu Apr 09 19:08:58.036351 2026] [:error] [pid 18477:tid 18492] [client 20.240.63.86:30476] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "adeIysDe826HlFeoLPKJsgAAAU0"]
[Thu Apr 09 19:08:58.668374 2026] [:error] [pid 24927:tid 24954] [client 20.240.63.86:15134] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adeIyjXObuzEuw8mNJsNewAAARg"]
[Thu Apr 09 19:08:59.240193 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:56680] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adeIyzXObuzEuw8mNJsNfQAAAQc"]
[Thu Apr 09 19:08:59.829125 2026] [:error] [pid 24515:tid 24530] [client 20.240.63.86:21545] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adeIy61OMnvM2fMnB1OIcAAAAAs"]
[Thu Apr 09 19:09:00.393352 2026] [:error] [pid 24624:tid 24632] [client 20.240.63.86:12109] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "adeIzO4Jn-WvK1ZBTvjCAwAAAMY"]
[Thu Apr 09 19:09:00.919118 2026] [:error] [pid 24515:tid 24520] [client 20.240.63.86:21505] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adeIzK1OMnvM2fMnB1OIcQAAAAE"]
[Thu Apr 09 19:09:01.470782 2026] [:error] [pid 24515:tid 24541] [client 20.240.63.86:31528] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adeIza1OMnvM2fMnB1OIcgAAABY"]
[Thu Apr 09 19:09:02.038222 2026] [:error] [pid 24517:tid 24578] [client 20.240.63.86:15163] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adeIznboYEn2ZFM_PS92ewAAAIQ"]
[Thu Apr 09 19:09:02.586364 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:22681] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "adeIzjXObuzEuw8mNJsNgAAAARE"]
[Thu Apr 09 19:09:03.123563 2026] [:error] [pid 24927:tid 24950] [client 20.240.63.86:15110] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adeIzzXObuzEuw8mNJsNggAAARQ"]
[Thu Apr 09 19:09:03.655285 2026] [:error] [pid 24927:tid 24944] [client 20.240.63.86:21527] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adeIzzXObuzEuw8mNJsNhQAAAQ4"]
[Thu Apr 09 19:09:04.236711 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:15549] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adeI0PSL71FHZkjrGzPTQQAAAZc"]
[Thu Apr 09 19:09:04.772945 2026] [:error] [pid 20837:tid 20853] [client 20.240.63.86:56700] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "adeI0PSL71FHZkjrGzPTQgAAAY4"]
[Thu Apr 09 19:09:05.302806 2026] [:error] [pid 20837:tid 20858] [client 20.240.63.86:30506] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adeI0fSL71FHZkjrGzPTRAAAAZM"]
[Thu Apr 09 19:09:05.848439 2026] [:error] [pid 24515:tid 24527] [client 20.240.63.86:47066] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adeI0a1OMnvM2fMnB1OIeAAAAAg"]
[Thu Apr 09 19:09:06.379804 2026] [:error] [pid 24515:tid 24523] [client 20.240.63.86:21516] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adeI0q1OMnvM2fMnB1OIeQAAAAQ"]
[Thu Apr 09 19:09:06.905107 2026] [:error] [pid 24624:tid 24640] [client 20.240.63.86:15113] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "adeI0u4Jn-WvK1ZBTvjCBwAAAM4"]
[Thu Apr 09 19:09:07.439215 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:22712] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeI0zXObuzEuw8mNJsNiQAAARM"]
[Thu Apr 09 19:09:07.980312 2026] [:error] [pid 24927:tid 24937] [client 20.240.63.86:31493] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeI0zXObuzEuw8mNJsNjAAAAQc"]
[Thu Apr 09 19:09:08.509090 2026] [:error] [pid 24927:tid 24933] [client 20.240.63.86:54265] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeI1DXObuzEuw8mNJsNjgAAAQM"]
[Thu Apr 09 19:09:09.034826 2026] [:error] [pid 24927:tid 24947] [client 20.240.63.86:30511] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "adeI1TXObuzEuw8mNJsNkgAAARE"]
[Thu Apr 09 19:09:09.567092 2026] [:error] [pid 24927:tid 24941] [client 20.240.63.86:47025] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adeI1TXObuzEuw8mNJsNlQAAAQs"]
[Thu Apr 09 19:09:10.110715 2026] [:error] [pid 24516:tid 24565] [client 20.240.63.86:31515] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adeI1thW7vSS-UkeWCUlWAAAAFI"]
[Thu Apr 09 19:09:10.655752 2026] [:error] [pid 24516:tid 24559] [client 20.240.63.86:15158] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adeI1thW7vSS-UkeWCUlWQAAAEw"]
[Thu Apr 09 19:09:11.195624 2026] [:error] [pid 24624:tid 24646] [client 20.240.63.86:21517] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "adeI1-4Jn-WvK1ZBTvjCCAAAANQ"]
[Thu Apr 09 19:09:11.744797 2026] [:error] [pid 24927:tid 24949] [client 20.240.63.86:54268] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adeI1zXObuzEuw8mNJsNmAAAARM"]
[Thu Apr 09 19:09:12.276809 2026] [:error] [pid 24517:tid 24587] [client 20.240.63.86:56645] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adeI2HboYEn2ZFM_PS92fQAAAI0"]
[Thu Apr 09 19:09:12.808884 2026] [:error] [pid 24624:tid 24638] [client 20.240.63.86:56673] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adeI2O4Jn-WvK1ZBTvjCCgAAAMw"]
[Thu Apr 09 19:09:13.346280 2026] [:error] [pid 24517:tid 24583] [client 20.240.63.86:54218] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "adeI2XboYEn2ZFM_PS92fwAAAIk"]
[Thu Apr 09 19:09:13.885602 2026] [:error] [pid 24517:tid 24593] [client 20.240.63.86:21524] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adeI2XboYEn2ZFM_PS92ggAAAJM"]
[Thu Apr 09 19:09:14.418182 2026] [:error] [pid 20837:tid 20863] [client 20.240.63.86:30480] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adeI2vSL71FHZkjrGzPTTQAAAZg"]
[Thu Apr 09 19:09:14.955935 2026] [:error] [pid 20837:tid 20862] [client 20.240.63.86:12310] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adeI2vSL71FHZkjrGzPTTwAAAZc"]
[Thu Apr 09 19:09:15.489732 2026] [:error] [pid 20837:tid 20853] [client 20.240.63.86:31548] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "adeI2_SL71FHZkjrGzPTUQAAAY4"]
[Thu Apr 09 19:09:16.041276 2026] [:error] [pid 24515:tid 24537] [client 20.240.63.86:54223] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adeI3K1OMnvM2fMnB1OIegAAABI"]
[Thu Apr 09 19:09:16.574397 2026] [:error] [pid 24624:tid 24649] [client 20.240.63.86:42513] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adeI3O4Jn-WvK1ZBTvjCDQAAANc"]
[Thu Apr 09 19:09:17.108336 2026] [:error] [pid 20837:tid 20851] [client 20.240.63.86:22674] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adeI3fSL71FHZkjrGzPTUwAAAYw"]
[Thu Apr 09 19:09:17.642871 2026] [:error] [pid 24624:tid 24645] [client 20.240.63.86:31507] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "adeI3e4Jn-WvK1ZBTvjCDgAAANM"]
[Thu Apr 09 19:09:18.183203 2026] [:error] [pid 24516:tid 24551] [client 20.240.63.86:22128] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adeI3thW7vSS-UkeWCUlYgAAAEQ"]
[Thu Apr 09 19:09:18.731211 2026] [:error] [pid 20837:tid 20860] [client 20.240.63.86:47085] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adeI3vSL71FHZkjrGzPTVQAAAZU"]
[Thu Apr 09 19:09:19.271621 2026] [:error] [pid 24515:tid 24543] [client 20.240.63.86:12145] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adeI361OMnvM2fMnB1OIfgAAABg"]
[Thu Apr 09 19:09:19.798145 2026] [:error] [pid 18477:tid 18483] [client 20.240.63.86:56694] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "adeI38De826HlFeoLPKJtAAAAUQ"]
[Thu Apr 09 19:09:20.331593 2026] [:error] [pid 20837:tid 20856] [client 20.240.63.86:31538] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "adeI4PSL71FHZkjrGzPTVgAAAZE"]
[Thu Apr 09 19:09:20.864138 2026] [:error] [pid 24624:tid 24626] [client 20.240.63.86:42534] [client 20.240.63.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "adeI4O4Jn-WvK1ZBTvjCFAAAAMA"]
[Thu Apr 09 19:09:21.400203 2026] [proxy_fcgi:error] [pid 24516:tid 24563] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:09:21.671889 2026] [proxy_fcgi:error] [pid 24516:tid 24558] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:09:21.939192 2026] [proxy_fcgi:error] [pid 24516:tid 24566] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:09:22.223302 2026] [proxy_fcgi:error] [pid 24516:tid 24552] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:09:22.509423 2026] [proxy_fcgi:error] [pid 24516:tid 24549] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:09:22.777147 2026] [proxy_fcgi:error] [pid 24516:tid 24553] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:09:23.044648 2026] [proxy_fcgi:error] [pid 24516:tid 24548] [client 20.240.63.86:56660] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 19:53:30.754488 2026] [:error] [pid 20837:tid 20847] [client 49.51.72.236:58072] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adeTOvSL71FHZkjrGzPemwAAAYg"]
[Thu Apr 09 20:15:42.012846 2026] [proxy_fcgi:error] [pid 24927:tid 24930] [client 51.103.121.50:9165] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:42.252196 2026] [proxy_fcgi:error] [pid 24927:tid 24938] [client 51.103.121.50:9165] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:42.492495 2026] [proxy_fcgi:error] [pid 24927:tid 24936] [client 51.103.121.50:9165] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:42.731068 2026] [proxy_fcgi:error] [pid 24927:tid 24931] [client 51.103.121.50:9165] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:42.975769 2026] [proxy_fcgi:error] [pid 24927:tid 24948] [client 51.103.121.50:9165] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:43.211027 2026] [:error] [pid 24927:tid 24943] [client 51.103.121.50:9165] [client 51.103.121.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Ipv6.php"] [unique_id "adeYbzXObuzEuw8mNJschQAAAQ0"]
[Thu Apr 09 20:15:44.706045 2026] [proxy_fcgi:error] [pid 63331:tid 63342] [client 51.103.121.50:9166] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:44.950709 2026] [proxy_fcgi:error] [pid 63331:tid 63336] [client 51.103.121.50:9166] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:45.189998 2026] [proxy_fcgi:error] [pid 63331:tid 63345] [client 51.103.121.50:9166] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:45.545539 2026] [proxy_fcgi:error] [pid 63331:tid 63344] [client 51.103.121.50:9166] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:45.788657 2026] [proxy_fcgi:error] [pid 63331:tid 63340] [client 51.103.121.50:9166] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:15:46.032440 2026] [:error] [pid 63331:tid 63350] [client 51.103.121.50:9166] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "adeYcibKfIYuVjWbE4VXuAAAAdE"]
[Thu Apr 09 20:15:46.547218 2026] [:error] [pid 20837:tid 20841] [client 51.103.121.50:9164] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "adeYcvSL71FHZkjrGzPmqgAAAYI"]
[Thu Apr 09 20:15:47.030710 2026] [:error] [pid 63331:tid 63352] [client 51.103.121.50:9173] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "adeYcybKfIYuVjWbE4VXuwAAAdM"]
[Thu Apr 09 20:15:47.565903 2026] [:error] [pid 24927:tid 24948] [client 51.103.121.50:9168] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "adeYczXObuzEuw8mNJsclAAAARI"]
[Thu Apr 09 20:15:48.246431 2026] [:error] [pid 24517:tid 24587] [client 51.103.121.50:9188] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adeYdHboYEn2ZFM_PS98uQAAAI0"]
[Thu Apr 09 20:15:48.790571 2026] [:error] [pid 24517:tid 24575] [client 51.103.121.50:9162] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adeYdHboYEn2ZFM_PS98ugAAAIE"]
[Thu Apr 09 20:15:49.335390 2026] [:error] [pid 24624:tid 24645] [client 51.103.121.50:9189] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adeYde4Jn-WvK1ZBTvjTKgAAANM"]
[Thu Apr 09 20:15:50.189229 2026] [:error] [pid 24624:tid 24643] [client 51.103.121.50:9106] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adeYdu4Jn-WvK1ZBTvjTMAAAANE"]
[Thu Apr 09 20:15:50.910297 2026] [:error] [pid 18477:tid 18495] [client 51.103.121.50:9110] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adeYdsDe826HlFeoLPKXhgAAAVA"]
[Thu Apr 09 20:15:51.881937 2026] [:error] [pid 63331:tid 63356] [client 51.103.121.50:9190] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adeYdybKfIYuVjWbE4VXxAAAAdc"]
[Thu Apr 09 20:15:53.990437 2026] [:error] [pid 63331:tid 63351] [client 51.103.121.50:9177] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adeYeSbKfIYuVjWbE4VXywAAAdI"]
[Thu Apr 09 20:15:55.603583 2026] [:error] [pid 18477:tid 18498] [client 51.103.121.50:9170] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adeYe8De826HlFeoLPKXiAAAAVM"]
[Thu Apr 09 20:15:56.418784 2026] [:error] [pid 24515:tid 24539] [client 51.103.121.50:9197] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adeYfK1OMnvM2fMnB1OiBAAAABQ"]
[Thu Apr 09 20:15:56.951762 2026] [:error] [pid 24515:tid 24541] [client 51.103.121.50:9200] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adeYfK1OMnvM2fMnB1OiBgAAABY"]
[Thu Apr 09 20:15:57.438984 2026] [:error] [pid 63331:tid 63344] [client 51.103.121.50:9100] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adeYfSbKfIYuVjWbE4VX1wAAAcs"]
[Thu Apr 09 20:15:58.186220 2026] [:error] [pid 63331:tid 63338] [client 51.103.121.50:9094] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adeYfibKfIYuVjWbE4VX2QAAAcU"]
[Thu Apr 09 20:15:59.165457 2026] [:error] [pid 20837:tid 20856] [client 51.103.121.50:9178] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adeYf_SL71FHZkjrGzPmuQAAAZE"]
[Thu Apr 09 20:16:00.457925 2026] [:error] [pid 63331:tid 63345] [client 51.103.121.50:9204] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adeYgCbKfIYuVjWbE4VX5gAAAcw"]
[Thu Apr 09 20:16:01.309602 2026] [:error] [pid 63331:tid 63355] [client 51.103.121.50:9154] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adeYgSbKfIYuVjWbE4VX6QAAAdY"]
[Thu Apr 09 20:16:01.959424 2026] [:error] [pid 63331:tid 63351] [client 51.103.121.50:9105] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adeYgSbKfIYuVjWbE4VX7gAAAdI"]
[Thu Apr 09 20:16:02.823132 2026] [:error] [pid 20837:tid 20843] [client 51.103.121.50:9123] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adeYgvSL71FHZkjrGzPmyAAAAYQ"]
[Thu Apr 09 20:16:03.771174 2026] [:error] [pid 24515:tid 24542] [client 51.103.121.50:9171] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adeYg61OMnvM2fMnB1OiEgAAABc"]
[Thu Apr 09 20:16:04.511848 2026] [:error] [pid 63331:tid 63341] [client 51.103.121.50:9191] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adeYhCbKfIYuVjWbE4VX-gAAAcg"]
[Thu Apr 09 20:16:05.417546 2026] [:error] [pid 24624:tid 24642] [client 51.103.121.50:9187] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adeYhe4Jn-WvK1ZBTvjTRAAAANA"]
[Thu Apr 09 20:16:06.082516 2026] [:error] [pid 63331:tid 63340] [client 51.103.121.50:9099] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeYhibKfIYuVjWbE4VYAwAAAcc"]
[Thu Apr 09 20:16:06.921593 2026] [:error] [pid 24927:tid 24934] [client 51.103.121.50:9184] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeYhjXObuzEuw8mNJsctAAAAQQ"]
[Thu Apr 09 20:16:07.981498 2026] [:error] [pid 24517:tid 24583] [client 51.103.121.50:9089] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeYh3boYEn2ZFM_PS98vQAAAIk"]
[Thu Apr 09 20:16:08.495942 2026] [:error] [pid 63331:tid 63336] [client 51.103.121.50:9156] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adeYiCbKfIYuVjWbE4VYCgAAAcM"]
[Thu Apr 09 20:16:09.191896 2026] [:error] [pid 24515:tid 24535] [client 51.103.121.50:9214] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adeYia1OMnvM2fMnB1OiGAAAABA"]
[Thu Apr 09 20:16:10.012100 2026] [:error] [pid 63331:tid 63339] [client 51.103.121.50:9185] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adeYiibKfIYuVjWbE4VYDwAAAcY"]
[Thu Apr 09 20:16:10.728321 2026] [:error] [pid 24927:tid 24944] [client 51.103.121.50:9212] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adeYijXObuzEuw8mNJscwAAAAQ4"]
[Thu Apr 09 20:16:11.306246 2026] [:error] [pid 24927:tid 24947] [client 51.103.121.50:9134] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adeYizXObuzEuw8mNJscwQAAARE"]
[Thu Apr 09 20:16:12.061192 2026] [:error] [pid 24927:tid 24945] [client 51.103.121.50:9102] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adeYjDXObuzEuw8mNJscxwAAAQ8"]
[Thu Apr 09 20:16:12.904347 2026] [:error] [pid 24515:tid 24533] [client 51.103.121.50:9209] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adeYjK1OMnvM2fMnB1OiHQAAAA4"]
[Thu Apr 09 20:16:13.596945 2026] [:error] [pid 24515:tid 24529] [client 51.103.121.50:9201] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adeYja1OMnvM2fMnB1OiIQAAAAo"]
[Thu Apr 09 20:16:14.105448 2026] [:error] [pid 24515:tid 24543] [client 51.103.121.50:9103] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adeYjq1OMnvM2fMnB1OiJgAAABg"]
[Thu Apr 09 20:16:14.582663 2026] [:error] [pid 24515:tid 24534] [client 51.103.121.50:9194] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adeYjq1OMnvM2fMnB1OiKQAAAA8"]
[Thu Apr 09 20:16:15.072116 2026] [:error] [pid 63331:tid 63334] [client 51.103.121.50:9113] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adeYjybKfIYuVjWbE4VYFwAAAcE"]
[Thu Apr 09 20:16:15.580759 2026] [:error] [pid 24515:tid 24541] [client 51.103.121.50:9207] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adeYj61OMnvM2fMnB1OiLgAAABY"]
[Thu Apr 09 20:16:16.121000 2026] [:error] [pid 20837:tid 20862] [client 51.103.121.50:9210] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adeYkPSL71FHZkjrGzPm8AAAAZc"]
[Thu Apr 09 20:16:16.595847 2026] [:error] [pid 24515:tid 24542] [client 51.103.121.50:9160] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adeYkK1OMnvM2fMnB1OiOAAAABc"]
[Thu Apr 09 20:16:17.066643 2026] [:error] [pid 20837:tid 20845] [client 51.103.121.50:9066] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adeYkfSL71FHZkjrGzPm8wAAAYY"]
[Thu Apr 09 20:16:17.602162 2026] [:error] [pid 20837:tid 20856] [client 51.103.121.50:9192] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adeYkfSL71FHZkjrGzPm9wAAAZE"]
[Thu Apr 09 20:16:18.102484 2026] [:error] [pid 24624:tid 24640] [client 51.103.121.50:9028] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adeYku4Jn-WvK1ZBTvjTYgAAAM4"]
[Thu Apr 09 20:16:18.581910 2026] [:error] [pid 24624:tid 24637] [client 51.103.121.50:9161] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeYku4Jn-WvK1ZBTvjTZQAAAMs"]
[Thu Apr 09 20:16:19.125783 2026] [:error] [pid 24517:tid 24593] [client 51.103.121.50:9182] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeYk3boYEn2ZFM_PS98ygAAAJM"]
[Thu Apr 09 20:16:19.637810 2026] [:error] [pid 24927:tid 24945] [client 51.103.121.50:9135] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeYkzXObuzEuw8mNJsc1QAAAQ8"]
[Thu Apr 09 20:16:20.231971 2026] [:error] [pid 63331:tid 63352] [client 51.103.121.50:9186] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "adeYlCbKfIYuVjWbE4VYHAAAAdM"]
[Thu Apr 09 20:16:20.712057 2026] [:error] [pid 63331:tid 63349] [client 51.103.121.50:9176] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adeYlCbKfIYuVjWbE4VYHwAAAdA"]
[Thu Apr 09 20:16:21.198316 2026] [:error] [pid 63331:tid 63341] [client 51.103.121.50:9095] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adeYlSbKfIYuVjWbE4VYJAAAAcg"]
[Thu Apr 09 20:16:21.704572 2026] [:error] [pid 63331:tid 63336] [client 51.103.121.50:9179] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adeYlSbKfIYuVjWbE4VYKQAAAcM"]
[Thu Apr 09 20:16:22.216806 2026] [:error] [pid 20837:tid 20842] [client 51.103.121.50:9063] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adeYlvSL71FHZkjrGzPm-gAAAYM"]
[Thu Apr 09 20:16:22.720417 2026] [:error] [pid 24624:tid 24643] [client 51.103.121.50:9104] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adeYlu4Jn-WvK1ZBTvjTawAAANE"]
[Thu Apr 09 20:16:23.211143 2026] [:error] [pid 24624:tid 24646] [client 51.103.121.50:9193] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adeYl-4Jn-WvK1ZBTvjTbAAAANQ"]
[Thu Apr 09 20:16:23.741620 2026] [:error] [pid 24624:tid 24650] [client 51.103.121.50:9091] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adeYl-4Jn-WvK1ZBTvjTbwAAANg"]
[Thu Apr 09 20:16:24.245443 2026] [:error] [pid 24624:tid 24639] [client 51.103.121.50:9157] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adeYmO4Jn-WvK1ZBTvjTcQAAAM0"]
[Thu Apr 09 20:16:24.870665 2026] [:error] [pid 24624:tid 24635] [client 51.103.121.50:9101] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adeYmO4Jn-WvK1ZBTvjTcwAAAMk"]
[Thu Apr 09 20:16:25.408670 2026] [:error] [pid 24624:tid 24633] [client 51.103.121.50:9205] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adeYme4Jn-WvK1ZBTvjTdgAAAMc"]
[Thu Apr 09 20:16:25.996869 2026] [:error] [pid 24624:tid 24648] [client 51.103.121.50:8975] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adeYme4Jn-WvK1ZBTvjTegAAANY"]
[Thu Apr 09 20:16:26.750802 2026] [:error] [pid 24927:tid 24943] [client 51.103.121.50:9138] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adeYmjXObuzEuw8mNJsc2gAAAQ0"]
[Thu Apr 09 20:16:27.543830 2026] [:error] [pid 63331:tid 63354] [client 51.103.121.50:9098] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adeYmybKfIYuVjWbE4VYPQAAAdU"]
[Thu Apr 09 20:16:28.147814 2026] [:error] [pid 24515:tid 24536] [client 51.103.121.50:9149] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adeYnK1OMnvM2fMnB1OiQgAAABE"]
[Thu Apr 09 20:16:28.873195 2026] [:error] [pid 24515:tid 24519] [client 51.103.121.50:9172] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adeYnK1OMnvM2fMnB1OiSAAAAAA"]
[Thu Apr 09 20:16:29.531481 2026] [:error] [pid 24515:tid 24540] [client 51.103.121.50:9174] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adeYna1OMnvM2fMnB1OiSwAAABU"]
[Thu Apr 09 20:16:30.450582 2026] [:error] [pid 24515:tid 24529] [client 51.103.121.50:9026] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adeYnq1OMnvM2fMnB1OiUQAAAAo"]
[Thu Apr 09 20:16:32.010348 2026] [:error] [pid 24624:tid 24646] [client 51.103.121.50:9159] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adeYoO4Jn-WvK1ZBTvjTfwAAANQ"]
[Thu Apr 09 20:16:32.660041 2026] [:error] [pid 63331:tid 63341] [client 51.103.121.50:9183] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adeYoCbKfIYuVjWbE4VYUQAAAcg"]
[Thu Apr 09 20:16:33.328956 2026] [:error] [pid 63331:tid 63346] [client 51.103.121.50:9125] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kolda.php"] [unique_id "adeYoSbKfIYuVjWbE4VYWAAAAc0"]
[Thu Apr 09 20:16:33.969223 2026] [:error] [pid 24515:tid 24533] [client 51.103.121.50:9181] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adeYoa1OMnvM2fMnB1OiVgAAAA4"]
[Thu Apr 09 20:16:34.559891 2026] [:error] [pid 24515:tid 24519] [client 51.103.121.50:9077] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adeYoq1OMnvM2fMnB1OiVwAAAAA"]
[Thu Apr 09 20:16:35.218265 2026] [:error] [pid 24516:tid 24563] [client 51.103.121.50:9206] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adeYo9hW7vSS-UkeWCUszgAAAFA"]
[Thu Apr 09 20:16:36.001723 2026] [:error] [pid 24624:tid 24629] [client 51.103.121.50:9202] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adeYpO4Jn-WvK1ZBTvjTigAAAMM"]
[Thu Apr 09 20:16:36.981300 2026] [:error] [pid 18477:tid 18492] [client 51.103.121.50:9097] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adeYpMDe826HlFeoLPKXkgAAAU0"]
[Thu Apr 09 20:16:38.302056 2026] [:error] [pid 20837:tid 20839] [client 51.103.121.50:9167] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adeYpvSL71FHZkjrGzPm-wAAAYA"]
[Thu Apr 09 20:16:39.472488 2026] [:error] [pid 24624:tid 24628] [client 51.103.121.50:9199] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adeYp-4Jn-WvK1ZBTvjTjQAAAMI"]
[Thu Apr 09 20:16:40.408887 2026] [:error] [pid 24624:tid 24634] [client 51.103.121.50:9070] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adeYqO4Jn-WvK1ZBTvjTjgAAAMg"]
[Thu Apr 09 20:16:41.054763 2026] [:error] [pid 24624:tid 24646] [client 51.103.121.50:9122] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adeYqe4Jn-WvK1ZBTvjTkQAAANQ"]
[Thu Apr 09 20:16:41.622695 2026] [:error] [pid 24624:tid 24640] [client 51.103.121.50:9195] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adeYqe4Jn-WvK1ZBTvjTlAAAAM4"]
[Thu Apr 09 20:16:42.287779 2026] [:error] [pid 63331:tid 63344] [client 51.103.121.50:9150] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adeYqibKfIYuVjWbE4VYZQAAAcs"]
[Thu Apr 09 20:16:43.015737 2026] [:error] [pid 24927:tid 24934] [client 51.103.121.50:9088] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adeYqzXObuzEuw8mNJsc8wAAAQQ"]
[Thu Apr 09 20:16:43.799366 2026] [:error] [pid 20837:tid 20844] [client 51.103.121.50:9033] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adeYq_SL71FHZkjrGzPnAgAAAYU"]
[Thu Apr 09 20:16:44.389830 2026] [:error] [pid 24515:tid 24542] [client 51.103.121.50:9114] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adeYrK1OMnvM2fMnB1OiYQAAABc"]
[Thu Apr 09 20:16:45.240271 2026] [proxy_fcgi:error] [pid 24515:tid 24520] [client 51.103.121.50:9146] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:45.502158 2026] [proxy_fcgi:error] [pid 24515:tid 24533] [client 51.103.121.50:9146] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:45.746932 2026] [proxy_fcgi:error] [pid 24515:tid 24534] [client 51.103.121.50:9146] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:47.425462 2026] [proxy_fcgi:error] [pid 24515:tid 24540] [client 51.103.121.50:9146] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:47.661565 2026] [:error] [pid 24515:tid 24523] [client 51.103.121.50:9146] [client 51.103.121.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adeYr61OMnvM2fMnB1OibwAAAAQ"]
[Thu Apr 09 20:16:48.420445 2026] [proxy_fcgi:error] [pid 63331:tid 63357] [client 51.103.121.50:9130] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:48.678601 2026] [proxy_fcgi:error] [pid 63331:tid 63334] [client 51.103.121.50:9130] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:48.917884 2026] [:error] [pid 63331:tid 63337] [client 51.103.121.50:9130] [client 51.103.121.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "adeYsCbKfIYuVjWbE4VYegAAAcQ"]
[Thu Apr 09 20:16:49.586331 2026] [proxy_fcgi:error] [pid 24624:tid 24642] [client 51.103.121.50:9208] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:49.994808 2026] [proxy_fcgi:error] [pid 24624:tid 24627] [client 51.103.121.50:9208] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:50.238338 2026] [proxy_fcgi:error] [pid 24624:tid 24638] [client 51.103.121.50:9208] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:50.477915 2026] [proxy_fcgi:error] [pid 24624:tid 24639] [client 51.103.121.50:9208] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:50.718304 2026] [proxy_fcgi:error] [pid 24624:tid 24635] [client 51.103.121.50:9208] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:16:50.953932 2026] [:error] [pid 24624:tid 24644] [client 51.103.121.50:9208] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adeYsu4Jn-WvK1ZBTvjTqwAAANI"]
[Thu Apr 09 20:16:51.531089 2026] [:error] [pid 24515:tid 24535] [client 51.103.121.50:9142] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adeYs61OMnvM2fMnB1OigAAAABA"]
[Thu Apr 09 20:16:52.708254 2026] [:error] [pid 24624:tid 24626] [client 51.103.121.50:9213] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adeYtO4Jn-WvK1ZBTvjTrQAAAMA"]
[Thu Apr 09 20:16:53.837517 2026] [:error] [pid 24624:tid 24629] [client 51.103.121.50:9211] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adeYte4Jn-WvK1ZBTvjTsgAAAMM"]
[Thu Apr 09 20:16:54.834281 2026] [:error] [pid 24517:tid 24587] [client 51.103.121.50:9198] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeYtnboYEn2ZFM_PS982QAAAI0"]
[Thu Apr 09 20:16:56.430783 2026] [:error] [pid 24624:tid 24627] [client 51.103.121.50:9042] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeYuO4Jn-WvK1ZBTvjTtAAAAME"]
[Thu Apr 09 20:16:57.457496 2026] [:error] [pid 63331:tid 63350] [client 51.103.121.50:9092] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeYuSbKfIYuVjWbE4VYhQAAAdE"]
[Thu Apr 09 20:16:58.504461 2026] [:error] [pid 20837:tid 20854] [client 51.103.121.50:9112] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adeYuvSL71FHZkjrGzPnHwAAAY8"]
[Thu Apr 09 20:16:59.227098 2026] [:error] [pid 24515:tid 24525] [client 51.103.121.50:9148] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adeYu61OMnvM2fMnB1OigwAAAAY"]
[Thu Apr 09 20:16:59.810769 2026] [:error] [pid 24517:tid 24580] [client 51.103.121.50:9030] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adeYu3boYEn2ZFM_PS983AAAAIY"]
[Thu Apr 09 20:17:01.365730 2026] [:error] [pid 24517:tid 24577] [client 51.103.121.50:8997] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adeYvXboYEn2ZFM_PS983gAAAIM"]
[Thu Apr 09 20:17:01.901442 2026] [:error] [pid 24515:tid 24538] [client 51.103.121.50:9145] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adeYva1OMnvM2fMnB1OiigAAABM"]
[Thu Apr 09 20:17:02.601068 2026] [:error] [pid 63331:tid 63350] [client 51.103.121.50:9069] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adeYvibKfIYuVjWbE4VYmwAAAdE"]
[Thu Apr 09 20:17:03.224749 2026] [:error] [pid 63331:tid 63336] [client 51.103.121.50:9169] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adeYvybKfIYuVjWbE4VYnwAAAcM"]
[Thu Apr 09 20:17:04.042003 2026] [:error] [pid 63331:tid 63337] [client 51.103.121.50:9109] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adeYwCbKfIYuVjWbE4VYpQAAAcQ"]
[Thu Apr 09 20:17:04.954663 2026] [:error] [pid 24515:tid 24533] [client 51.103.121.50:9096] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adeYwK1OMnvM2fMnB1OijgAAAA4"]
[Thu Apr 09 20:17:05.685811 2026] [:error] [pid 24515:tid 24539] [client 51.103.121.50:9203] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "adeYwa1OMnvM2fMnB1OikgAAABQ"]
[Thu Apr 09 20:17:06.354832 2026] [:error] [pid 63331:tid 63352] [client 51.103.121.50:9055] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "adeYwibKfIYuVjWbE4VYugAAAdM"]
[Thu Apr 09 20:17:07.018329 2026] [:error] [pid 63331:tid 63353] [client 51.103.121.50:9048] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "adeYwybKfIYuVjWbE4VYwAAAAdQ"]
[Thu Apr 09 20:17:07.657339 2026] [:error] [pid 63331:tid 63345] [client 51.103.121.50:9140] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awh.php"] [unique_id "adeYwybKfIYuVjWbE4VYwwAAAcw"]
[Thu Apr 09 20:17:08.452553 2026] [:error] [pid 63331:tid 63342] [client 51.103.121.50:9107] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "adeYxCbKfIYuVjWbE4VYzAAAAck"]
[Thu Apr 09 20:17:09.471122 2026] [:error] [pid 63331:tid 63349] [client 51.103.121.50:9127] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "adeYxSbKfIYuVjWbE4VY1AAAAdA"]
[Thu Apr 09 20:17:10.228354 2026] [:error] [pid 63331:tid 63342] [client 51.103.121.50:9049] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "adeYxibKfIYuVjWbE4VY2gAAAck"]
[Thu Apr 09 20:17:10.869673 2026] [:error] [pid 63331:tid 63340] [client 51.103.121.50:9038] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "adeYxibKfIYuVjWbE4VY4wAAAcc"]
[Thu Apr 09 20:17:11.603620 2026] [:error] [pid 63331:tid 63352] [client 51.103.121.50:9119] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeYxybKfIYuVjWbE4VY6AAAAdM"]
[Thu Apr 09 20:17:12.220409 2026] [:error] [pid 63331:tid 63343] [client 51.103.121.50:9111] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeYyCbKfIYuVjWbE4VY7gAAAco"]
[Thu Apr 09 20:17:13.141113 2026] [:error] [pid 63331:tid 63333] [client 51.103.121.50:9132] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeYySbKfIYuVjWbE4VY-QAAAcA"]
[Thu Apr 09 20:17:14.378238 2026] [:error] [pid 24515:tid 24529] [client 51.103.121.50:9139] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "adeYyq1OMnvM2fMnB1OipQAAAAo"]
[Thu Apr 09 20:17:15.423967 2026] [:error] [pid 24624:tid 24630] [client 51.103.121.50:9128] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "adeYy-4Jn-WvK1ZBTvjTvQAAAMQ"]
[Thu Apr 09 20:17:16.033161 2026] [:error] [pid 24515:tid 24535] [client 51.103.121.50:9115] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "adeYzK1OMnvM2fMnB1OirgAAABA"]
[Thu Apr 09 20:17:17.049944 2026] [:error] [pid 63331:tid 63351] [client 51.103.121.50:9067] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "adeYzSbKfIYuVjWbE4VZDgAAAdI"]
[Thu Apr 09 20:17:17.788220 2026] [:error] [pid 24624:tid 24637] [client 51.103.121.50:9035] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "adeYze4Jn-WvK1ZBTvjTvwAAAMs"]
[Thu Apr 09 20:17:19.137444 2026] [:error] [pid 24624:tid 24631] [client 51.103.121.50:9043] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adeYz-4Jn-WvK1ZBTvjTwQAAAMU"]
[Thu Apr 09 20:17:20.133407 2026] [:error] [pid 63331:tid 63345] [client 51.103.121.50:9041] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adeY0CbKfIYuVjWbE4VZKQAAAcw"]
[Thu Apr 09 20:17:21.223231 2026] [:error] [pid 20837:tid 20850] [client 51.103.121.50:9126] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adeY0fSL71FHZkjrGzPnJgAAAYs"]
[Thu Apr 09 20:17:21.865356 2026] [:error] [pid 20837:tid 20855] [client 51.103.121.50:9061] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "adeY0fSL71FHZkjrGzPnKwAAAZA"]
[Thu Apr 09 20:17:22.508876 2026] [:error] [pid 18477:tid 18502] [client 51.103.121.50:9153] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adeY0sDe826HlFeoLPKXlwAAAVc"]
[Thu Apr 09 20:17:23.214717 2026] [:error] [pid 24516:tid 24556] [client 51.103.121.50:9019] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adeY09hW7vSS-UkeWCUs2gAAAEk"]
[Thu Apr 09 20:17:23.728400 2026] [:error] [pid 24927:tid 24941] [client 51.103.121.50:9108] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adeY0zXObuzEuw8mNJsc_QAAAQs"]
[Thu Apr 09 20:17:24.341713 2026] [:error] [pid 63331:tid 63353] [client 51.103.121.50:9093] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/riz.php"] [unique_id "adeY1CbKfIYuVjWbE4VZRQAAAdQ"]
[Thu Apr 09 20:17:25.937717 2026] [:error] [pid 20837:tid 20850] [client 51.103.121.50:8961] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adeY1fSL71FHZkjrGzPnNgAAAYs"]
[Thu Apr 09 20:17:27.308248 2026] [:error] [pid 20837:tid 20860] [client 51.103.121.50:9141] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adeY1_SL71FHZkjrGzPnPAAAAZU"]
[Thu Apr 09 20:17:29.273809 2026] [:error] [pid 24515:tid 24522] [client 51.103.121.50:9129] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adeY2a1OMnvM2fMnB1OiswAAAAM"]
[Thu Apr 09 20:17:31.227644 2026] [:error] [pid 24927:tid 24942] [client 51.103.121.50:9053] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "adeY2zXObuzEuw8mNJsdBAAAAQw"]
[Thu Apr 09 20:17:32.193652 2026] [:error] [pid 20837:tid 20857] [client 51.103.121.50:9118] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adeY3PSL71FHZkjrGzPnQQAAAZI"]
[Thu Apr 09 20:17:33.847315 2026] [:error] [pid 24624:tid 24638] [client 51.103.121.50:9031] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adeY3e4Jn-WvK1ZBTvjTyQAAAMw"]
[Thu Apr 09 20:17:35.275298 2026] [:error] [pid 63331:tid 63335] [client 51.103.121.50:9163] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adeY3ybKfIYuVjWbE4VZgAAAAcI"]
[Thu Apr 09 20:17:36.594887 2026] [:error] [pid 24515:tid 24528] [client 51.103.121.50:9137] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/om.php"] [unique_id "adeY4K1OMnvM2fMnB1OiugAAAAk"]
[Thu Apr 09 20:17:38.595058 2026] [:error] [pid 24515:tid 24536] [client 51.103.121.50:9151] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "adeY4q1OMnvM2fMnB1OivAAAABE"]
[Thu Apr 09 20:17:39.787095 2026] [:error] [pid 24624:tid 24633] [client 51.103.121.50:9131] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "adeY4-4Jn-WvK1ZBTvjTzgAAAMc"]
[Thu Apr 09 20:17:40.709471 2026] [:error] [pid 24515:tid 24534] [client 51.103.121.50:9144] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "adeY5K1OMnvM2fMnB1OivwAAAA8"]
[Thu Apr 09 20:17:41.226585 2026] [:error] [pid 20837:tid 20852] [client 51.103.121.50:9075] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "adeY5fSL71FHZkjrGzPnRwAAAY0"]
[Thu Apr 09 20:17:41.757080 2026] [:error] [pid 63331:tid 63344] [client 51.103.121.50:8989] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adeY5SbKfIYuVjWbE4VZqQAAAcs"]
[Thu Apr 09 20:17:42.466552 2026] [:error] [pid 24515:tid 24526] [client 51.103.121.50:9025] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adeY5q1OMnvM2fMnB1OiwAAAAAc"]
[Thu Apr 09 20:17:42.989809 2026] [:error] [pid 24515:tid 24521] [client 51.103.121.50:9078] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adeY5q1OMnvM2fMnB1OiwwAAAAI"]
[Thu Apr 09 20:17:43.541043 2026] [:error] [pid 63331:tid 63354] [client 51.103.121.50:9173] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adeY5ybKfIYuVjWbE4VZtAAAAdU"]
[Thu Apr 09 20:17:44.103865 2026] [:error] [pid 24515:tid 24531] [client 51.103.121.50:9037] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adeY6K1OMnvM2fMnB1OixAAAAAw"]
[Thu Apr 09 20:17:44.798247 2026] [:error] [pid 63331:tid 63337] [client 51.103.121.50:9060] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adeY6CbKfIYuVjWbE4VZvQAAAcQ"]
[Thu Apr 09 20:17:45.324869 2026] [:error] [pid 24927:tid 24930] [client 51.103.121.50:9196] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adeY6TXObuzEuw8mNJsdCQAAAQA"]
[Thu Apr 09 20:17:45.874680 2026] [:error] [pid 20837:tid 20841] [client 51.103.121.50:9116] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adeY6fSL71FHZkjrGzPnSQAAAYI"]
[Thu Apr 09 20:17:46.361545 2026] [:error] [pid 24624:tid 24637] [client 51.103.121.50:9071] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adeY6u4Jn-WvK1ZBTvjT0QAAAMs"]
[Thu Apr 09 20:17:46.845137 2026] [:error] [pid 24927:tid 24940] [client 51.103.121.50:9117] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adeY6jXObuzEuw8mNJsdDQAAAQo"]
[Thu Apr 09 20:17:47.367466 2026] [:error] [pid 24927:tid 24936] [client 51.103.121.50:8988] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adeY6zXObuzEuw8mNJsdDgAAAQY"]
[Thu Apr 09 20:17:47.863760 2026] [:error] [pid 20837:tid 20863] [client 51.103.121.50:9027] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adeY6_SL71FHZkjrGzPnTAAAAZg"]
[Thu Apr 09 20:17:48.485362 2026] [:error] [pid 20837:tid 20845] [client 51.103.121.50:8972] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adeY7PSL71FHZkjrGzPnTQAAAYY"]
[Thu Apr 09 20:17:48.963262 2026] [:error] [pid 20837:tid 20856] [client 51.103.121.50:9039] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adeY7PSL71FHZkjrGzPnTwAAAZE"]
[Thu Apr 09 20:17:49.435503 2026] [:error] [pid 24516:tid 24567] [client 51.103.121.50:9072] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adeY7dhW7vSS-UkeWCUs3gAAAFQ"]
[Thu Apr 09 20:17:49.998094 2026] [:error] [pid 24517:tid 24589] [client 51.103.121.50:9040] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adeY7XboYEn2ZFM_PS984gAAAI8"]
[Thu Apr 09 20:17:50.482008 2026] [proxy_fcgi:error] [pid 63331:tid 63354] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:50.721317 2026] [proxy_fcgi:error] [pid 63331:tid 63347] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:50.978779 2026] [proxy_fcgi:error] [pid 63331:tid 63352] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:51.313490 2026] [proxy_fcgi:error] [pid 63331:tid 63351] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:51.553811 2026] [proxy_fcgi:error] [pid 63331:tid 63338] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:51.794357 2026] [proxy_fcgi:error] [pid 63331:tid 63333] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:52.034612 2026] [proxy_fcgi:error] [pid 63331:tid 63353] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:52.290700 2026] [proxy_fcgi:error] [pid 63331:tid 63354] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:52.803318 2026] [proxy_fcgi:error] [pid 63331:tid 63352] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:53.044074 2026] [proxy_fcgi:error] [pid 63331:tid 63343] [client 51.103.121.50:8979] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 20:17:53.374604 2026] [:error] [pid 63331:tid 63341] [client 51.103.121.50:8979] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeY8SbKfIYuVjWbE4VZ-AAAAcg"]
[Thu Apr 09 20:17:54.289580 2026] [:error] [pid 63331:tid 63333] [client 51.103.121.50:9032] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeY8ibKfIYuVjWbE4VaAQAAAcA"]
[Thu Apr 09 20:17:55.049345 2026] [:error] [pid 24624:tid 24636] [client 51.103.121.50:9147] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeY8-4Jn-WvK1ZBTvjT1wAAAMo"]
[Thu Apr 09 20:17:55.673944 2026] [:error] [pid 18477:tid 18484] [client 51.103.121.50:9058] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adeY88De826HlFeoLPKXqAAAAUU"]
[Thu Apr 09 20:17:56.303408 2026] [:error] [pid 18477:tid 18502] [client 51.103.121.50:8968] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adeY9MDe826HlFeoLPKXqQAAAVc"]
[Thu Apr 09 20:17:56.906285 2026] [:error] [pid 20837:tid 20862] [client 51.103.121.50:9065] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adeY9PSL71FHZkjrGzPnVwAAAZc"]
[Thu Apr 09 20:17:57.405730 2026] [:error] [pid 18477:tid 18501] [client 51.103.121.50:9024] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adeY9cDe826HlFeoLPKXqgAAAVY"]
[Thu Apr 09 20:17:58.165167 2026] [:error] [pid 24515:tid 24538] [client 51.103.121.50:9085] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adeY9q1OMnvM2fMnB1Oi2gAAABM"]
[Thu Apr 09 20:17:58.817441 2026] [:error] [pid 63331:tid 63335] [client 51.103.121.50:8980] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adeY9ibKfIYuVjWbE4VaIQAAAcI"]
[Thu Apr 09 20:17:59.399091 2026] [:error] [pid 63331:tid 63350] [client 51.103.121.50:9082] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adeY9ybKfIYuVjWbE4VaJQAAAdE"]
[Thu Apr 09 20:17:59.995326 2026] [:error] [pid 24515:tid 24522] [client 51.103.121.50:9121] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adeY961OMnvM2fMnB1Oi6gAAAAM"]
[Thu Apr 09 20:18:00.804062 2026] [:error] [pid 63331:tid 63337] [client 51.103.121.50:8981] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adeY-CbKfIYuVjWbE4VaLQAAAcQ"]
[Thu Apr 09 20:18:01.661990 2026] [:error] [pid 20837:tid 20844] [client 51.103.121.50:8905] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeY-fSL71FHZkjrGzPnYAAAAYU"]
[Thu Apr 09 20:18:02.366294 2026] [:error] [pid 20837:tid 20845] [client 51.103.121.50:9036] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeY-vSL71FHZkjrGzPnYQAAAYY"]
[Thu Apr 09 20:18:02.877780 2026] [:error] [pid 24927:tid 24946] [client 51.103.121.50:9047] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeY-jXObuzEuw8mNJsdFQAAARA"]
[Thu Apr 09 20:18:03.432700 2026] [:error] [pid 24624:tid 24634] [client 51.103.121.50:8898] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adeY--4Jn-WvK1ZBTvjT7wAAAMg"]
[Thu Apr 09 20:18:04.424336 2026] [:error] [pid 20837:tid 20862] [client 51.103.121.50:8978] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adeY_PSL71FHZkjrGzPnaAAAAZc"]
[Thu Apr 09 20:18:05.432401 2026] [:error] [pid 20837:tid 20855] [client 51.103.121.50:9090] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adeY_fSL71FHZkjrGzPnbwAAAZA"]
[Thu Apr 09 20:18:06.637328 2026] [:error] [pid 63331:tid 63338] [client 51.103.121.50:8962] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adeY_ibKfIYuVjWbE4VaTwAAAcU"]
[Thu Apr 09 20:18:07.668531 2026] [:error] [pid 20837:tid 20850] [client 51.103.121.50:9057] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adeY__SL71FHZkjrGzPncwAAAYs"]
[Thu Apr 09 20:18:09.010667 2026] [:error] [pid 63331:tid 63347] [client 51.103.121.50:8963] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adeZASbKfIYuVjWbE4VaWgAAAc4"]
[Thu Apr 09 20:18:09.734768 2026] [:error] [pid 63331:tid 63350] [client 51.103.121.50:9062] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adeZASbKfIYuVjWbE4VaXwAAAdE"]
[Thu Apr 09 20:18:10.292932 2026] [:error] [pid 24517:tid 24581] [client 51.103.121.50:8993] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adeZAnboYEn2ZFM_PS987wAAAIc"]
[Thu Apr 09 20:18:11.020917 2026] [:error] [pid 18477:tid 18495] [client 51.103.121.50:9083] [client 51.103.121.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adeZA8De826HlFeoLPKXrAAAAVA"]
[Thu Apr 09 22:30:21.011622 2026] [autoindex:error] [pid 24927:tid 24941] [client 188.120.250.114:44770] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 23:50:06.427858 2026] [:error] [pid 63331:tid 63354] [client 34.11.42.77:40940] [client 34.11.42.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adfKribKfIYuVjWbE4WsBQAAAdU"]
[Thu Apr 09 23:50:06.918316 2026] [:error] [pid 24624:tid 24637] [client 34.11.42.77:40946] [client 34.11.42.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adfKru4Jn-WvK1ZBTvj_ywAAAMs"]
[Fri Apr 10 01:35:11.429776 2026] [:error] [pid 36399:tid 36477] [client 170.106.193.108:33804] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adfjT68Hkxpyh6_TlVQ4RQAAAJY"]
[Fri Apr 10 02:13:32.501515 2026] [:error] [pid 36397:tid 36409] [client 197.186.42.173:17] [client 197.186.42.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.186.42.173, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adfsTGhis4RvVEWEv9v4vwAAAAg"]
[Fri Apr 10 02:13:32.513903 2026] [proxy_fcgi:error] [pid 36397:tid 36409] [client 197.186.42.173:17] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 04:26:20.463357 2026] [autoindex:error] [pid 12685:tid 12687] [client 212.47.77.99:51525] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 10 07:34:18.050201 2026] [:error] [pid 12575:tid 12624] [client 13.40.198.103:63042] [client 13.40.198.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adg3eijFTOT5X6zsPClUiwAAAEI"], referer: https://www.twitter.com
[Fri Apr 10 07:34:26.483286 2026] [:error] [pid 12574:tid 12601] [client 13.40.198.103:51618] [client 13.40.198.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adg3gnw-1tvJISKJyrTe4AAAAAc"], referer: https://www.reddit.com/r/music
[Fri Apr 10 07:34:36.137676 2026] [:error] [pid 59286:tid 59304] [client 13.40.198.103:59439] [client 13.40.198.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adg3jG1gMezN4JEr-RW6LAAAAdA"], referer: https://www.reddit.com/r/science
[Fri Apr 10 07:34:45.361336 2026] [:error] [pid 59286:tid 59295] [client 13.40.198.103:50445] [client 13.40.198.103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adg3lW1gMezN4JEr-RW6MAAAAcc"], referer: https://www.reddit.com/r/lifeprotips
[Fri Apr 10 07:36:11.194934 2026] [:error] [pid 12576:tid 12666] [client 185.198.240.23:43007] [client 185.198.240.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adg36wZp1JUS4li1Qnu8LQAAAJE"]
[Fri Apr 10 08:36:36.278552 2026] [:error] [pid 59286:tid 59312] [client 49.51.233.46:55628] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adhGFG1gMezN4JEr-RXQhAAAAdg"]
[Fri Apr 10 10:18:55.999718 2026] [:error] [pid 13189:tid 13205] [client 43.130.131.18:37564] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adheD5AxiJKPums3eBD4ygAAAE0"]
[Fri Apr 10 14:37:52.470661 2026] [autoindex:error] [pid 3934:tid 3957] [client 82.146.34.134:42208] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Fri Apr 10 14:59:46.166532 2026] [:error] [pid 3934:tid 3941] [client 170.106.65.93:38594] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adif4oa41m-BS8mg82e1wQAAAMI"]
[Fri Apr 10 18:53:40.684629 2026] [:error] [pid 13100:tid 13126] [client 113.19.183.18:35063] [client 113.19.183.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.18, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adjWtFzg-ZkZ0InWIP2PoQAAARU"]
[Fri Apr 10 18:53:40.699101 2026] [proxy_fcgi:error] [pid 13100:tid 13126] [client 113.19.183.18:35063] AH01071: Got error 'Primary script unknown'
[Fri Apr 10 20:47:49.419371 2026] [:error] [pid 13102:tid 13175] [client 43.156.204.134:40710] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adjxdf9xLvjW2guI55a2IwAAAA8"]
[Fri Apr 10 21:58:57.548334 2026] [:error] [pid 62710:tid 62737] [client 182.44.2.148:39461] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adkCIeME7qrf5xEWWJshZAAAAhg"]
[Fri Apr 10 22:05:17.047807 2026] [:error] [pid 62884:tid 62906] [client 43.130.106.18:39006] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adkDneUCK1xrhnnmpo2JdQAAAs8"]
[Fri Apr 10 22:16:22.834119 2026] [:error] [pid 13189:tid 13211] [client 98.159.37.74:24523] [client 98.159.37.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adkGNpAxiJKPums3eBDU7QAAAFM"]
[Fri Apr 10 23:15:20.435774 2026] [:error] [pid 63134:tid 63146] [client 137.184.149.57:54138] [client 137.184.149.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adkUCNFALqPDwWi6eJLDbgAAA8k"]
[Fri Apr 10 23:15:22.682054 2026] [:error] [pid 62819:tid 62835] [client 137.184.149.57:37304] [client 137.184.149.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adkUCvU20EyPf7NlsleAFAAAAo0"]
[Sat Apr 11 00:54:47.827959 2026] [proxy_fcgi:error] [pid 21706:tid 21726] [client 158.158.45.58:4236] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:48.068302 2026] [proxy_fcgi:error] [pid 21706:tid 21719] [client 158.158.45.58:4236] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:48.309172 2026] [proxy_fcgi:error] [pid 21706:tid 21708] [client 158.158.45.58:4236] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:48.576910 2026] [proxy_fcgi:error] [pid 21706:tid 21713] [client 158.158.45.58:4236] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:48.817938 2026] [proxy_fcgi:error] [pid 21706:tid 21714] [client 158.158.45.58:4236] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:49.054576 2026] [:error] [pid 21706:tid 21708] [client 158.158.45.58:4236] [client 158.158.45.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Ipv6.php"] [unique_id "adkrWSGQ1M5d8fQSsLFqEAAAAAA"]
[Sat Apr 11 00:54:49.534357 2026] [proxy_fcgi:error] [pid 21570:tid 21672] [client 158.158.45.58:5032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:49.776020 2026] [proxy_fcgi:error] [pid 21570:tid 21681] [client 158.158.45.58:5032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:50.018331 2026] [proxy_fcgi:error] [pid 21570:tid 21668] [client 158.158.45.58:5032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:50.258552 2026] [proxy_fcgi:error] [pid 21570:tid 21693] [client 158.158.45.58:5032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:50.499635 2026] [proxy_fcgi:error] [pid 21570:tid 21685] [client 158.158.45.58:5032] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:54:50.755375 2026] [:error] [pid 21570:tid 21673] [client 158.158.45.58:5032] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adkrWjKs5t9xRSNL6cmgXQAAAEY"]
[Sat Apr 11 00:54:51.228641 2026] [:error] [pid 21568:tid 21576] [client 158.158.45.58:4111] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adkrW4iz5v_ljZxkpR-ecQAAAQQ"]
[Sat Apr 11 00:54:51.701536 2026] [:error] [pid 21568:tid 21584] [client 158.158.45.58:4529] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adkrW4iz5v_ljZxkpR-edAAAAQw"]
[Sat Apr 11 00:54:52.182569 2026] [:error] [pid 21569:tid 21653] [client 158.158.45.58:4147] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "adkrXHAvQTgvXJ6vHop78QAAAIg"]
[Sat Apr 11 00:54:52.650707 2026] [:error] [pid 21570:tid 21668] [client 158.158.45.58:4817] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adkrXDKs5t9xRSNL6cmgYwAAAEM"]
[Sat Apr 11 00:54:53.124511 2026] [:error] [pid 21569:tid 21647] [client 158.158.45.58:4135] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adkrXXAvQTgvXJ6vHop79QAAAII"]
[Sat Apr 11 00:54:53.596105 2026] [:error] [pid 21569:tid 21664] [client 158.158.45.58:4492] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adkrXXAvQTgvXJ6vHop79wAAAJA"]
[Sat Apr 11 00:54:54.078289 2026] [:error] [pid 21570:tid 21677] [client 158.158.45.58:4638] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "adkrXjKs5t9xRSNL6cmgbQAAAEg"]
[Sat Apr 11 00:54:54.565400 2026] [:error] [pid 21569:tid 21655] [client 158.158.45.58:4667] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adkrXnAvQTgvXJ6vHop7_QAAAIo"]
[Sat Apr 11 00:54:55.054457 2026] [:error] [pid 21570:tid 21661] [client 158.158.45.58:4633] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adkrXzKs5t9xRSNL6cmgcQAAAEA"]
[Sat Apr 11 00:54:55.525232 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:4846] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adkrXyGQ1M5d8fQSsLFqSwAAAAg"]
[Sat Apr 11 00:54:56.031153 2026] [:error] [pid 21569:tid 21664] [client 158.158.45.58:4126] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "adkrYHAvQTgvXJ6vHop8DAAAAJA"]
[Sat Apr 11 00:54:56.501658 2026] [:error] [pid 21568:tid 21574] [client 158.158.45.58:4572] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adkrYIiz5v_ljZxkpR-egwAAAQI"]
[Sat Apr 11 00:54:56.974131 2026] [:error] [pid 21569:tid 21656] [client 158.158.45.58:4577] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adkrYHAvQTgvXJ6vHop8FQAAAIs"]
[Sat Apr 11 00:54:57.446536 2026] [:error] [pid 21568:tid 21590] [client 158.158.45.58:4647] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adkrYYiz5v_ljZxkpR-eigAAARI"]
[Sat Apr 11 00:54:57.919009 2026] [:error] [pid 21706:tid 21728] [client 158.158.45.58:4517] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "adkrYSGQ1M5d8fQSsLFqYgAAABQ"]
[Sat Apr 11 00:54:58.411409 2026] [:error] [pid 21568:tid 21588] [client 158.158.45.58:4122] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adkrYoiz5v_ljZxkpR-ekwAAARA"]
[Sat Apr 11 00:54:58.882697 2026] [:error] [pid 21569:tid 21680] [client 158.158.45.58:4109] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adkrYnAvQTgvXJ6vHop8GQAAAJc"]
[Sat Apr 11 00:54:59.358844 2026] [:error] [pid 21568:tid 21595] [client 158.158.45.58:4512] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adkrY4iz5v_ljZxkpR-engAAARc"]
[Sat Apr 11 00:54:59.829547 2026] [:error] [pid 21570:tid 21688] [client 158.158.45.58:4993] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "adkrYzKs5t9xRSNL6cmgiQAAAE4"]
[Sat Apr 11 00:55:00.302508 2026] [:error] [pid 21568:tid 21579] [client 158.158.45.58:4537] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adkrZIiz5v_ljZxkpR-eswAAAQc"]
[Sat Apr 11 00:55:00.776256 2026] [:error] [pid 21568:tid 21581] [client 158.158.45.58:5005] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adkrZIiz5v_ljZxkpR-etgAAAQk"]
[Sat Apr 11 00:55:01.246096 2026] [:error] [pid 21568:tid 21589] [client 158.158.45.58:4569] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adkrZYiz5v_ljZxkpR-evQAAARE"]
[Sat Apr 11 00:55:01.720675 2026] [:error] [pid 21570:tid 21663] [client 158.158.45.58:4800] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "adkrZTKs5t9xRSNL6cmgkQAAAEE"]
[Sat Apr 11 00:55:02.191286 2026] [:error] [pid 21706:tid 21722] [client 158.158.45.58:4535] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adkrZiGQ1M5d8fQSsLFqeAAAAA4"]
[Sat Apr 11 00:55:02.674249 2026] [:error] [pid 21706:tid 21731] [client 158.158.45.58:4241] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adkrZiGQ1M5d8fQSsLFqgQAAABc"]
[Sat Apr 11 00:55:03.146809 2026] [:error] [pid 21706:tid 21711] [client 158.158.45.58:5003] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adkrZyGQ1M5d8fQSsLFqhgAAAAM"]
[Sat Apr 11 00:55:03.618768 2026] [:error] [pid 21570:tid 21687] [client 158.158.45.58:4831] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adkrZzKs5t9xRSNL6cmglAAAAE0"]
[Sat Apr 11 00:55:04.098684 2026] [:error] [pid 21706:tid 21727] [client 158.158.45.58:4107] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adkraCGQ1M5d8fQSsLFqiwAAABM"]
[Sat Apr 11 00:55:04.570117 2026] [:error] [pid 21570:tid 21682] [client 158.158.45.58:5025] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adkraDKs5t9xRSNL6cmgmwAAAEs"]
[Sat Apr 11 00:55:05.085635 2026] [:error] [pid 21706:tid 21717] [client 158.158.45.58:4498] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adkraSGQ1M5d8fQSsLFqlAAAAAk"]
[Sat Apr 11 00:55:05.562074 2026] [:error] [pid 21570:tid 21690] [client 158.158.45.58:4625] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wswer1.php"] [unique_id "adkraTKs5t9xRSNL6cmgnAAAAFA"]
[Sat Apr 11 00:55:06.043720 2026] [:error] [pid 21568:tid 21574] [client 158.158.45.58:4663] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adkraoiz5v_ljZxkpR-e6gAAAQI"]
[Sat Apr 11 00:55:06.519832 2026] [:error] [pid 21568:tid 21594] [client 158.158.45.58:5051] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adkraoiz5v_ljZxkpR-e7gAAARY"]
[Sat Apr 11 00:55:07.044129 2026] [:error] [pid 21570:tid 21696] [client 158.158.45.58:4848] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adkrazKs5t9xRSNL6cmgowAAAFY"]
[Sat Apr 11 00:55:07.514045 2026] [:error] [pid 21568:tid 21589] [client 158.158.45.58:4142] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "adkra4iz5v_ljZxkpR-e9gAAARE"]
[Sat Apr 11 00:55:07.991292 2026] [:error] [pid 21706:tid 21719] [client 158.158.45.58:4610] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adkrayGQ1M5d8fQSsLFqpwAAAAs"]
[Sat Apr 11 00:55:08.465249 2026] [:error] [pid 21570:tid 21690] [client 158.158.45.58:4630] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adkrbDKs5t9xRSNL6cmgqgAAAFA"]
[Sat Apr 11 00:55:08.934549 2026] [:error] [pid 21568:tid 21582] [client 158.158.45.58:4129] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adkrbIiz5v_ljZxkpR-fAwAAAQo"]
[Sat Apr 11 00:55:09.402703 2026] [:error] [pid 21569:tid 21645] [client 158.158.45.58:4671] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "adkrbXAvQTgvXJ6vHop8OQAAAIA"]
[Sat Apr 11 00:55:09.873399 2026] [:error] [pid 21706:tid 21731] [client 158.158.45.58:4393] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adkrbSGQ1M5d8fQSsLFqsAAAABc"]
[Sat Apr 11 00:55:10.343869 2026] [:error] [pid 21570:tid 21696] [client 158.158.45.58:4814] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adkrbjKs5t9xRSNL6cmgtQAAAFY"]
[Sat Apr 11 00:55:10.816062 2026] [:error] [pid 21570:tid 21682] [client 158.158.45.58:4856] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adkrbjKs5t9xRSNL6cmgtgAAAEs"]
[Sat Apr 11 00:55:11.335282 2026] [:error] [pid 21568:tid 21594] [client 158.158.45.58:4527] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "adkrb4iz5v_ljZxkpR-fHwAAARY"]
[Sat Apr 11 00:55:11.813186 2026] [:error] [pid 21706:tid 21712] [client 158.158.45.58:4570] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adkrbyGQ1M5d8fQSsLFqugAAAAQ"]
[Sat Apr 11 00:55:12.313909 2026] [:error] [pid 21570:tid 21688] [client 158.158.45.58:5011] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adkrcDKs5t9xRSNL6cmgvQAAAE4"]
[Sat Apr 11 00:55:12.786685 2026] [:error] [pid 21706:tid 21721] [client 158.158.45.58:4115] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adkrcCGQ1M5d8fQSsLFqvwAAAA0"]
[Sat Apr 11 00:55:13.261963 2026] [:error] [pid 21570:tid 21694] [client 158.158.45.58:5027] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adkrcTKs5t9xRSNL6cmgxQAAAFQ"]
[Sat Apr 11 00:55:13.743100 2026] [:error] [pid 21569:tid 21678] [client 158.158.45.58:4130] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adkrcXAvQTgvXJ6vHop8RwAAAJY"]
[Sat Apr 11 00:55:14.225108 2026] [:error] [pid 21570:tid 21679] [client 158.158.45.58:4842] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adkrcjKs5t9xRSNL6cmg1gAAAEk"]
[Sat Apr 11 00:55:14.698136 2026] [:error] [pid 21570:tid 21698] [client 158.158.45.58:4998] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adkrcjKs5t9xRSNL6cmg2gAAAFg"]
[Sat Apr 11 00:55:15.170014 2026] [:error] [pid 21570:tid 21693] [client 158.158.45.58:4152] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-turn.php"] [unique_id "adkrczKs5t9xRSNL6cmg3QAAAFM"]
[Sat Apr 11 00:55:15.640641 2026] [:error] [pid 21569:tid 21648] [client 158.158.45.58:4612] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adkrc3AvQTgvXJ6vHop8UQAAAIM"]
[Sat Apr 11 00:55:16.112350 2026] [:error] [pid 21568:tid 21582] [client 158.158.45.58:4228] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adkrdIiz5v_ljZxkpR-fRQAAAQo"]
[Sat Apr 11 00:55:16.607983 2026] [:error] [pid 21706:tid 21714] [client 158.158.45.58:4609] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adkrdCGQ1M5d8fQSsLFqyQAAAAY"]
[Sat Apr 11 00:55:17.079708 2026] [:error] [pid 21570:tid 21688] [client 158.158.45.58:4815] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "adkrdTKs5t9xRSNL6cmg4QAAAE4"]
[Sat Apr 11 00:55:17.551578 2026] [:error] [pid 21570:tid 21673] [client 158.158.45.58:4555] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adkrdTKs5t9xRSNL6cmg4gAAAEY"]
[Sat Apr 11 00:55:18.025339 2026] [:error] [pid 21570:tid 21696] [client 158.158.45.58:4580] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adkrdjKs5t9xRSNL6cmg5QAAAFY"]
[Sat Apr 11 00:55:18.499314 2026] [:error] [pid 21569:tid 21653] [client 158.158.45.58:4491] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adkrdnAvQTgvXJ6vHop8WwAAAIg"]
[Sat Apr 11 00:55:18.971180 2026] [:error] [pid 21570:tid 21681] [client 158.158.45.58:4607] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/red.php"] [unique_id "adkrdjKs5t9xRSNL6cmg6gAAAEo"]
[Sat Apr 11 00:55:19.444653 2026] [:error] [pid 21569:tid 21683] [client 158.158.45.58:4229] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adkrd3AvQTgvXJ6vHop8YgAAAJg"]
[Sat Apr 11 00:55:19.918786 2026] [:error] [pid 21569:tid 21653] [client 158.158.45.58:4560] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adkrd3AvQTgvXJ6vHop8bAAAAIg"]
[Sat Apr 11 00:55:20.392976 2026] [:error] [pid 21568:tid 21588] [client 158.158.45.58:4623] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adkreIiz5v_ljZxkpR-fXQAAARA"]
[Sat Apr 11 00:55:20.864276 2026] [:error] [pid 21569:tid 21651] [client 158.158.45.58:4116] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "adkreHAvQTgvXJ6vHop8cwAAAIY"]
[Sat Apr 11 00:55:21.336945 2026] [:error] [pid 21570:tid 21681] [client 158.158.45.58:4653] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adkreTKs5t9xRSNL6cmg9gAAAEo"]
[Sat Apr 11 00:55:21.812215 2026] [:error] [pid 21570:tid 21697] [client 158.158.45.58:5009] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adkreTKs5t9xRSNL6cmg_AAAAFc"]
[Sat Apr 11 00:55:22.287533 2026] [:error] [pid 21569:tid 21664] [client 158.158.45.58:4245] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adkrenAvQTgvXJ6vHop8eAAAAJA"]
[Sat Apr 11 00:55:22.765784 2026] [:error] [pid 21706:tid 21724] [client 158.158.45.58:5044] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adkreiGQ1M5d8fQSsLFq1wAAABA"]
[Sat Apr 11 00:55:23.233248 2026] [:error] [pid 21569:tid 21676] [client 158.158.45.58:4626] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "adkre3AvQTgvXJ6vHop8fAAAAJU"]
[Sat Apr 11 00:55:23.705051 2026] [:error] [pid 21706:tid 21727] [client 158.158.45.58:4588] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "adkreyGQ1M5d8fQSsLFq3QAAABM"]
[Sat Apr 11 00:55:24.177695 2026] [:error] [pid 21568:tid 21586] [client 158.158.45.58:4099] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "adkrfIiz5v_ljZxkpR-fYAAAAQ4"]
[Sat Apr 11 00:55:24.649286 2026] [:error] [pid 21570:tid 21665] [client 158.158.45.58:4853] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "adkrfDKs5t9xRSNL6cmhCAAAAEI"]
[Sat Apr 11 00:55:25.122656 2026] [:error] [pid 21569:tid 21647] [client 158.158.45.58:4113] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adkrfXAvQTgvXJ6vHop8iwAAAII"]
[Sat Apr 11 00:55:25.591364 2026] [:error] [pid 21569:tid 21646] [client 158.158.45.58:4118] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adkrfXAvQTgvXJ6vHop8kAAAAIE"]
[Sat Apr 11 00:55:26.104386 2026] [:error] [pid 21569:tid 21660] [client 158.158.45.58:5018] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adkrfnAvQTgvXJ6vHop8lgAAAI4"]
[Sat Apr 11 00:55:26.580835 2026] [:error] [pid 21568:tid 21577] [client 158.158.45.58:4594] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "adkrfoiz5v_ljZxkpR-fbQAAAQU"]
[Sat Apr 11 00:55:27.115404 2026] [:error] [pid 21570:tid 21675] [client 158.158.45.58:5039] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "adkrfzKs5t9xRSNL6cmhDwAAAEc"]
[Sat Apr 11 00:55:27.587586 2026] [:error] [pid 21570:tid 21663] [client 158.158.45.58:4665] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "adkrfzKs5t9xRSNL6cmhEgAAAEE"]
[Sat Apr 11 00:55:28.092617 2026] [:error] [pid 21706:tid 21712] [client 158.158.45.58:4439] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "adkrgCGQ1M5d8fQSsLFq8gAAAAQ"]
[Sat Apr 11 00:55:28.562987 2026] [:error] [pid 21706:tid 21720] [client 158.158.45.58:4648] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "adkrgCGQ1M5d8fQSsLFq9wAAAAw"]
[Sat Apr 11 00:55:29.039412 2026] [:error] [pid 21568:tid 21582] [client 158.158.45.58:4849] [client 158.158.45.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adkrgYiz5v_ljZxkpR-fdwAAAQo"]
[Sat Apr 11 00:55:29.522778 2026] [:error] [pid 21706:tid 21726] [client 158.158.45.58:4511] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "adkrgSGQ1M5d8fQSsLFq_gAAABI"]
[Sat Apr 11 00:55:29.997852 2026] [:error] [pid 21706:tid 21725] [client 158.158.45.58:4242] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "adkrgSGQ1M5d8fQSsLFrAQAAABE"]
[Sat Apr 11 00:55:30.478114 2026] [:error] [pid 21706:tid 21724] [client 158.158.45.58:4822] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pp.php"] [unique_id "adkrgiGQ1M5d8fQSsLFrCQAAABA"]
[Sat Apr 11 00:55:30.953698 2026] [:error] [pid 21706:tid 21721] [client 158.158.45.58:5008] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myy.php"] [unique_id "adkrgiGQ1M5d8fQSsLFrCwAAAA0"]
[Sat Apr 11 00:55:31.427209 2026] [:error] [pid 21568:tid 21572] [client 158.158.45.58:4719] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myy.php"] [unique_id "adkrg4iz5v_ljZxkpR-fgAAAAQA"]
[Sat Apr 11 00:55:31.912796 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:4861] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myy.php"] [unique_id "adkrgyGQ1M5d8fQSsLFrFQAAAAg"]
[Sat Apr 11 00:55:32.386853 2026] [:error] [pid 21568:tid 21596] [client 158.158.45.58:4999] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myy.php"] [unique_id "adkrhIiz5v_ljZxkpR-fhAAAARg"]
[Sat Apr 11 00:55:32.863752 2026] [:error] [pid 21568:tid 21594] [client 158.158.45.58:4157] [client 158.158.45.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "adkrhIiz5v_ljZxkpR-fhQAAARY"]
[Sat Apr 11 00:55:33.341175 2026] [:error] [pid 21570:tid 21695] [client 158.158.45.58:4600] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adkrhTKs5t9xRSNL6cmhKAAAAFU"]
[Sat Apr 11 00:55:33.814142 2026] [:error] [pid 21570:tid 21692] [client 158.158.45.58:4224] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adkrhTKs5t9xRSNL6cmhMAAAAFI"]
[Sat Apr 11 00:55:34.285722 2026] [:error] [pid 21568:tid 21573] [client 158.158.45.58:4995] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wdone1.php"] [unique_id "adkrhoiz5v_ljZxkpR-fhgAAAQE"]
[Sat Apr 11 00:55:34.765855 2026] [:error] [pid 21568:tid 21584] [client 158.158.45.58:4240] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adkrhoiz5v_ljZxkpR-fhwAAAQw"]
[Sat Apr 11 00:55:35.238367 2026] [:error] [pid 21569:tid 21648] [client 158.158.45.58:4859] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adkrh3AvQTgvXJ6vHop8sAAAAIM"]
[Sat Apr 11 00:55:35.709575 2026] [:error] [pid 21568:tid 21576] [client 158.158.45.58:4624] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adkrh4iz5v_ljZxkpR-fiQAAAQQ"]
[Sat Apr 11 00:55:36.181700 2026] [:error] [pid 21706:tid 21727] [client 158.158.45.58:4110] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "adkriCGQ1M5d8fQSsLFrJwAAABM"]
[Sat Apr 11 00:55:36.655251 2026] [:error] [pid 21570:tid 21673] [client 158.158.45.58:4576] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adkriDKs5t9xRSNL6cmhQgAAAEY"]
[Sat Apr 11 00:55:37.130063 2026] [:error] [pid 21569:tid 21662] [client 158.158.45.58:4562] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adkriXAvQTgvXJ6vHop8uwAAAI8"]
[Sat Apr 11 00:55:37.605446 2026] [:error] [pid 21570:tid 21681] [client 158.158.45.58:4806] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adkriTKs5t9xRSNL6cmhTAAAAEo"]
[Sat Apr 11 00:55:38.118321 2026] [:error] [pid 21706:tid 21714] [client 158.158.45.58:4636] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wsheet1.php"] [unique_id "adkriiGQ1M5d8fQSsLFrLgAAAAY"]
[Sat Apr 11 00:55:38.600777 2026] [:error] [pid 21570:tid 21688] [client 158.158.45.58:5013] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "adkrijKs5t9xRSNL6cmhUgAAAE4"]
[Sat Apr 11 00:55:39.148465 2026] [:error] [pid 21570:tid 21665] [client 158.158.45.58:4261] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "adkrizKs5t9xRSNL6cmhWAAAAEI"]
[Sat Apr 11 00:55:39.623089 2026] [:error] [pid 21570:tid 21691] [client 158.158.45.58:5004] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "adkrizKs5t9xRSNL6cmhXQAAAFE"]
[Sat Apr 11 00:55:40.223840 2026] [:error] [pid 21569:tid 21657] [client 158.158.45.58:4996] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "adkrjHAvQTgvXJ6vHop8yAAAAIw"]
[Sat Apr 11 00:55:40.706648 2026] [:error] [pid 21570:tid 21675] [client 158.158.45.58:4603] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "adkrjDKs5t9xRSNL6cmhZAAAAEc"]
[Sat Apr 11 00:55:41.356163 2026] [:error] [pid 21706:tid 21708] [client 158.158.45.58:4658] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "adkrjSGQ1M5d8fQSsLFrMwAAAAA"]
[Sat Apr 11 00:55:41.841929 2026] [:error] [pid 21570:tid 21675] [client 158.158.45.58:4546] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "adkrjTKs5t9xRSNL6cmhbwAAAEc"]
[Sat Apr 11 00:55:42.621880 2026] [:error] [pid 21706:tid 21720] [client 158.158.45.58:4635] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "adkrjiGQ1M5d8fQSsLFrPAAAAAw"]
[Sat Apr 11 00:55:43.131290 2026] [:error] [pid 21706:tid 21711] [client 158.158.45.58:4551] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adkrjyGQ1M5d8fQSsLFrQAAAAAM"]
[Sat Apr 11 00:55:43.680050 2026] [:error] [pid 21568:tid 21594] [client 158.158.45.58:5012] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adkrj4iz5v_ljZxkpR-fqgAAARY"]
[Sat Apr 11 00:55:44.175871 2026] [:error] [pid 21568:tid 21590] [client 158.158.45.58:4398] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adkrkIiz5v_ljZxkpR-frwAAARI"]
[Sat Apr 11 00:55:44.659422 2026] [:error] [pid 21570:tid 21694] [client 158.158.45.58:4114] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adkrkDKs5t9xRSNL6cmhfQAAAFQ"]
[Sat Apr 11 00:55:45.140164 2026] [:error] [pid 21706:tid 21711] [client 158.158.45.58:4804] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adkrkSGQ1M5d8fQSsLFrTQAAAAM"]
[Sat Apr 11 00:55:45.700260 2026] [:error] [pid 21568:tid 21582] [client 158.158.45.58:4471] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adkrkYiz5v_ljZxkpR-fswAAAQo"]
[Sat Apr 11 00:55:46.193376 2026] [:error] [pid 21569:tid 21674] [client 158.158.45.58:4629] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adkrknAvQTgvXJ6vHop81QAAAJQ"]
[Sat Apr 11 00:55:46.668348 2026] [:error] [pid 21569:tid 21657] [client 158.158.45.58:4581] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "adkrknAvQTgvXJ6vHop82QAAAIw"]
[Sat Apr 11 00:55:47.158173 2026] [:error] [pid 21706:tid 21710] [client 158.158.45.58:4151] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adkrkyGQ1M5d8fQSsLFrUQAAAAI"]
[Sat Apr 11 00:55:47.672428 2026] [:error] [pid 21706:tid 21712] [client 158.158.45.58:4634] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adkrkyGQ1M5d8fQSsLFrVAAAAAQ"]
[Sat Apr 11 00:55:48.142929 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:4595] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adkrlCGQ1M5d8fQSsLFrWAAAAAg"]
[Sat Apr 11 00:55:48.690046 2026] [:error] [pid 21570:tid 21675] [client 158.158.45.58:4124] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "adkrlDKs5t9xRSNL6cmhkgAAAEc"]
[Sat Apr 11 00:55:49.162755 2026] [:error] [pid 21570:tid 21690] [client 158.158.45.58:4277] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "adkrlTKs5t9xRSNL6cmhkwAAAFA"]
[Sat Apr 11 00:55:50.071086 2026] [proxy_fcgi:error] [pid 21706:tid 21712] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:50.312789 2026] [proxy_fcgi:error] [pid 21706:tid 21719] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:50.557417 2026] [proxy_fcgi:error] [pid 21706:tid 21728] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:50.797424 2026] [proxy_fcgi:error] [pid 21706:tid 21711] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:51.038368 2026] [proxy_fcgi:error] [pid 21706:tid 21717] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:51.278116 2026] [proxy_fcgi:error] [pid 21706:tid 21729] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:51.540279 2026] [proxy_fcgi:error] [pid 21706:tid 21710] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:51.837969 2026] [proxy_fcgi:error] [pid 21706:tid 21709] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:52.079654 2026] [proxy_fcgi:error] [pid 21706:tid 21725] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:52.320954 2026] [proxy_fcgi:error] [pid 21706:tid 21721] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:52.560983 2026] [proxy_fcgi:error] [pid 21706:tid 21729] [client 158.158.45.58:5038] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 00:55:52.797461 2026] [:error] [pid 21706:tid 21715] [client 158.158.45.58:5038] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adkrmCGQ1M5d8fQSsLFrigAAAAc"]
[Sat Apr 11 00:55:53.391513 2026] [:error] [pid 21568:tid 21594] [client 158.158.45.58:4946] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adkrmYiz5v_ljZxkpR-f0QAAARY"]
[Sat Apr 11 00:55:55.722845 2026] [:error] [pid 21706:tid 21725] [client 158.158.45.58:4571] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adkrmyGQ1M5d8fQSsLFrrwAAABE"]
[Sat Apr 11 00:55:57.026650 2026] [:error] [pid 21706:tid 21726] [client 158.158.45.58:4824] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "adkrnSGQ1M5d8fQSsLFrvAAAABI"]
[Sat Apr 11 00:55:57.568594 2026] [:error] [pid 21706:tid 21718] [client 158.158.45.58:4158] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adkrnSGQ1M5d8fQSsLFrxAAAAAo"]
[Sat Apr 11 00:55:58.231101 2026] [:error] [pid 21569:tid 21678] [client 158.158.45.58:4834] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adkrnnAvQTgvXJ6vHop86gAAAJY"]
[Sat Apr 11 00:55:58.710554 2026] [:error] [pid 21568:tid 21585] [client 158.158.45.58:5029] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adkrnoiz5v_ljZxkpR-f4wAAAQ0"]
[Sat Apr 11 00:55:59.229497 2026] [:error] [pid 21569:tid 21683] [client 158.158.45.58:4146] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolf.php"] [unique_id "adkrn3AvQTgvXJ6vHop87wAAAJg"]
[Sat Apr 11 00:55:59.702709 2026] [:error] [pid 21706:tid 21721] [client 158.158.45.58:4827] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adkrnyGQ1M5d8fQSsLFr0wAAAA0"]
[Sat Apr 11 00:56:00.216347 2026] [:error] [pid 21569:tid 21664] [client 158.158.45.58:4602] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adkroHAvQTgvXJ6vHop8-QAAAJA"]
[Sat Apr 11 00:56:00.723629 2026] [:error] [pid 21570:tid 21670] [client 158.158.45.58:4568] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adkroDKs5t9xRSNL6cmhswAAAEQ"]
[Sat Apr 11 00:56:01.197327 2026] [:error] [pid 21706:tid 21710] [client 158.158.45.58:4880] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "adkroSGQ1M5d8fQSsLFr3QAAAAI"]
[Sat Apr 11 00:56:01.692033 2026] [:error] [pid 21706:tid 21725] [client 158.158.45.58:4234] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adkroSGQ1M5d8fQSsLFr4AAAABE"]
[Sat Apr 11 00:56:02.174293 2026] [:error] [pid 21706:tid 21708] [client 158.158.45.58:4818] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adkroiGQ1M5d8fQSsLFr5gAAAAA"]
[Sat Apr 11 00:56:02.651878 2026] [:error] [pid 21569:tid 21659] [client 158.158.45.58:4602] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adkronAvQTgvXJ6vHop9AQAAAI0"]
[Sat Apr 11 00:56:03.123336 2026] [:error] [pid 21570:tid 21697] [client 158.158.45.58:4125] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "adkrozKs5t9xRSNL6cmhvAAAAFc"]
[Sat Apr 11 00:56:03.594501 2026] [:error] [pid 21706:tid 21721] [client 158.158.45.58:4554] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkroyGQ1M5d8fQSsLFr7wAAAA0"]
[Sat Apr 11 00:56:04.066574 2026] [:error] [pid 21568:tid 21578] [client 158.158.45.58:4619] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkrpIiz5v_ljZxkpR-f8gAAAQY"]
[Sat Apr 11 00:56:04.538540 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:5045] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkrpCGQ1M5d8fQSsLFr-QAAAAg"]
[Sat Apr 11 00:56:05.014652 2026] [:error] [pid 21706:tid 21721] [client 158.158.45.58:4810] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkrpSGQ1M5d8fQSsLFr_gAAAA0"]
[Sat Apr 11 00:56:05.496312 2026] [:error] [pid 21570:tid 21663] [client 158.158.45.58:4441] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkrpTKs5t9xRSNL6cmhygAAAEE"]
[Sat Apr 11 00:56:05.971266 2026] [:error] [pid 21706:tid 21718] [client 158.158.45.58:4858] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkrpSGQ1M5d8fQSsLFsCgAAAAo"]
[Sat Apr 11 00:56:06.460965 2026] [:error] [pid 21706:tid 21727] [client 158.158.45.58:4550] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkrpiGQ1M5d8fQSsLFsEQAAABM"]
[Sat Apr 11 00:56:06.935340 2026] [:error] [pid 21706:tid 21732] [client 158.158.45.58:4854] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkrpiGQ1M5d8fQSsLFsFQAAABg"]
[Sat Apr 11 00:56:07.405101 2026] [:error] [pid 21706:tid 21726] [client 158.158.45.58:4523] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkrpyGQ1M5d8fQSsLFsHAAAABI"]
[Sat Apr 11 00:56:07.886762 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:4575] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkrpyGQ1M5d8fQSsLFsIQAAAAg"]
[Sat Apr 11 00:56:08.361600 2026] [:error] [pid 21568:tid 21585] [client 158.158.45.58:4544] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkrqIiz5v_ljZxkpR-f_gAAAQ0"]
[Sat Apr 11 00:56:08.854694 2026] [:error] [pid 21570:tid 21689] [client 158.158.45.58:4526] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkrqDKs5t9xRSNL6cmh0QAAAE8"]
[Sat Apr 11 00:56:09.328839 2026] [:error] [pid 21706:tid 21723] [client 158.158.45.58:4442] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/image.php"] [unique_id "adkrqSGQ1M5d8fQSsLFsKwAAAA8"]
[Sat Apr 11 00:56:09.830039 2026] [:error] [pid 21706:tid 21724] [client 158.158.45.58:4500] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/image.php"] [unique_id "adkrqSGQ1M5d8fQSsLFsMwAAABA"]
[Sat Apr 11 00:56:10.303539 2026] [:error] [pid 21706:tid 21715] [client 158.158.45.58:4136] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/image.php"] [unique_id "adkrqiGQ1M5d8fQSsLFsOQAAAAc"]
[Sat Apr 11 00:56:10.781689 2026] [:error] [pid 21706:tid 21717] [client 158.158.45.58:4902] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/image.php"] [unique_id "adkrqiGQ1M5d8fQSsLFsPQAAAAk"]
[Sat Apr 11 00:56:11.256176 2026] [:error] [pid 21569:tid 21647] [client 158.158.45.58:4103] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkrq3AvQTgvXJ6vHop9CQAAAII"]
[Sat Apr 11 00:56:11.728162 2026] [:error] [pid 21568:tid 21576] [client 158.158.45.58:4608] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkrq4iz5v_ljZxkpR-gDwAAAQQ"]
[Sat Apr 11 00:56:12.227831 2026] [:error] [pid 21569:tid 21651] [client 158.158.45.58:4540] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkrrHAvQTgvXJ6vHop9DgAAAIY"]
[Sat Apr 11 00:56:12.704169 2026] [:error] [pid 21569:tid 21662] [client 158.158.45.58:5055] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkrrHAvQTgvXJ6vHop9EAAAAI8"]
[Sat Apr 11 00:56:13.220210 2026] [:error] [pid 21706:tid 21718] [client 158.158.45.58:4414] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkrrSGQ1M5d8fQSsLFsQgAAAAo"]
[Sat Apr 11 00:56:13.697443 2026] [:error] [pid 21569:tid 21683] [client 158.158.45.58:5036] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkrrXAvQTgvXJ6vHop9FgAAAJg"]
[Sat Apr 11 00:56:14.181995 2026] [:error] [pid 21570:tid 21694] [client 158.158.45.58:4820] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkrrjKs5t9xRSNL6cmh2AAAAFQ"]
[Sat Apr 11 00:56:14.654722 2026] [:error] [pid 21568:tid 21595] [client 158.158.45.58:4894] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkrroiz5v_ljZxkpR-gHQAAARc"]
[Sat Apr 11 00:56:15.144527 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:4386] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkrryGQ1M5d8fQSsLFsSQAAAAg"]
[Sat Apr 11 00:56:15.644221 2026] [:error] [pid 21568:tid 21589] [client 158.158.45.58:4248] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkrr4iz5v_ljZxkpR-gHwAAARE"]
[Sat Apr 11 00:56:16.140065 2026] [:error] [pid 21706:tid 21715] [client 158.158.45.58:5052] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkrsCGQ1M5d8fQSsLFsUAAAAAc"]
[Sat Apr 11 00:56:16.627246 2026] [:error] [pid 21706:tid 21709] [client 158.158.45.58:4233] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkrsCGQ1M5d8fQSsLFsVwAAAAE"]
[Sat Apr 11 00:56:17.101919 2026] [:error] [pid 21706:tid 21716] [client 158.158.45.58:4640] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adkrsSGQ1M5d8fQSsLFsWwAAAAg"]
[Sat Apr 11 00:56:17.611757 2026] [:error] [pid 21570:tid 21675] [client 158.158.45.58:4614] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adkrsTKs5t9xRSNL6cmh4gAAAEc"]
[Sat Apr 11 00:56:18.086442 2026] [:error] [pid 21706:tid 21714] [client 158.158.45.58:4628] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adkrsiGQ1M5d8fQSsLFsYgAAAAY"]
[Sat Apr 11 00:56:18.567509 2026] [:error] [pid 21568:tid 21572] [client 158.158.45.58:4482] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "adkrsoiz5v_ljZxkpR-gJwAAAQA"]
[Sat Apr 11 00:56:19.035748 2026] [:error] [pid 21706:tid 21722] [client 158.158.45.58:4547] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "adkrsyGQ1M5d8fQSsLFsagAAAA4"]
[Sat Apr 11 00:56:19.508185 2026] [:error] [pid 21706:tid 21714] [client 158.158.45.58:5007] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "adkrsyGQ1M5d8fQSsLFscQAAAAY"]
[Sat Apr 11 00:56:19.980157 2026] [:error] [pid 21570:tid 21668] [client 158.158.45.58:4138] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "adkrszKs5t9xRSNL6cmh6QAAAEM"]
[Sat Apr 11 00:56:20.456132 2026] [:error] [pid 21569:tid 21659] [client 158.158.45.58:5002] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "adkrtHAvQTgvXJ6vHop9HQAAAI0"]
[Sat Apr 11 00:56:20.928849 2026] [:error] [pid 21568:tid 21586] [client 158.158.45.58:5028] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkrtIiz5v_ljZxkpR-gMwAAAQ4"]
[Sat Apr 11 00:56:21.401166 2026] [:error] [pid 21570:tid 21689] [client 158.158.45.58:4494] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkrtTKs5t9xRSNL6cmh7AAAAE8"]
[Sat Apr 11 00:56:21.873738 2026] [:error] [pid 21706:tid 21732] [client 158.158.45.58:4525] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkrtSGQ1M5d8fQSsLFsgAAAABg"]
[Sat Apr 11 00:56:22.349099 2026] [:error] [pid 21570:tid 21698] [client 158.158.45.58:4609] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkrtjKs5t9xRSNL6cmh8AAAAFg"]
[Sat Apr 11 00:56:22.855864 2026] [:error] [pid 21568:tid 21589] [client 158.158.45.58:4267] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkrtoiz5v_ljZxkpR-gOgAAARE"]
[Sat Apr 11 00:56:23.325822 2026] [:error] [pid 21706:tid 21722] [client 158.158.45.58:4519] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkrtyGQ1M5d8fQSsLFsigAAAA4"]
[Sat Apr 11 00:56:23.798564 2026] [:error] [pid 21706:tid 21714] [client 158.158.45.58:4994] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkrtyGQ1M5d8fQSsLFskAAAAAY"]
[Sat Apr 11 00:56:24.271748 2026] [:error] [pid 21570:tid 21695] [client 158.158.45.58:4599] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkruDKs5t9xRSNL6cmh9wAAAFU"]
[Sat Apr 11 00:56:24.746454 2026] [:error] [pid 21570:tid 21665] [client 158.158.45.58:4368] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adkruDKs5t9xRSNL6cmh-wAAAEI"]
[Sat Apr 11 00:56:25.218944 2026] [:error] [pid 21568:tid 21583] [client 158.158.45.58:5042] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adkruYiz5v_ljZxkpR-gQQAAAQs"]
[Sat Apr 11 00:56:25.690408 2026] [:error] [pid 21569:tid 21655] [client 158.158.45.58:4836] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adkruXAvQTgvXJ6vHop9KwAAAIo"]
[Sat Apr 11 00:56:26.166025 2026] [:error] [pid 21568:tid 21579] [client 158.158.45.58:4145] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1aa.php"] [unique_id "adkruoiz5v_ljZxkpR-gSAAAAQc"]
[Sat Apr 11 00:56:26.638852 2026] [:error] [pid 21569:tid 21651] [client 158.158.45.58:4275] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkrunAvQTgvXJ6vHop9NQAAAIY"]
[Sat Apr 11 00:56:27.113961 2026] [:error] [pid 21569:tid 21660] [client 158.158.45.58:4106] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkru3AvQTgvXJ6vHop9OgAAAI4"]
[Sat Apr 11 00:56:27.587464 2026] [:error] [pid 21569:tid 21662] [client 158.158.45.58:4801] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkru3AvQTgvXJ6vHop9OwAAAI8"]
[Sat Apr 11 00:56:28.072718 2026] [:error] [pid 21706:tid 21732] [client 158.158.45.58:4649] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkrvCGQ1M5d8fQSsLFsnQAAABg"]
[Sat Apr 11 00:56:28.545123 2026] [:error] [pid 21569:tid 21647] [client 158.158.45.58:4549] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adkrvHAvQTgvXJ6vHop9QQAAAII"]
[Sat Apr 11 00:56:29.054840 2026] [:error] [pid 21570:tid 21691] [client 158.158.45.58:4706] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adkrvTKs5t9xRSNL6cmiCAAAAFE"]
[Sat Apr 11 00:56:29.550091 2026] [:error] [pid 21568:tid 21596] [client 158.158.45.58:4360] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adkrvYiz5v_ljZxkpR-gYQAAARg"]
[Sat Apr 11 00:56:30.022728 2026] [:error] [pid 21569:tid 21651] [client 158.158.45.58:4641] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "adkrvnAvQTgvXJ6vHop9QwAAAIY"]
[Sat Apr 11 00:56:30.537901 2026] [:error] [pid 21568:tid 21586] [client 158.158.45.58:5031] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkrvoiz5v_ljZxkpR-gbAAAAQ4"]
[Sat Apr 11 00:56:31.012813 2026] [:error] [pid 21568:tid 21592] [client 158.158.45.58:4597] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkrv4iz5v_ljZxkpR-gbgAAARQ"]
[Sat Apr 11 00:56:31.488085 2026] [:error] [pid 21706:tid 21726] [client 158.158.45.58:4737] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkrvyGQ1M5d8fQSsLFspAAAABI"]
[Sat Apr 11 00:56:31.960597 2026] [:error] [pid 21568:tid 21582] [client 158.158.45.58:4803] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkrv4iz5v_ljZxkpR-gdQAAAQo"]
[Sat Apr 11 00:56:32.432916 2026] [:error] [pid 21706:tid 21722] [client 158.158.45.58:4840] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkrwCGQ1M5d8fQSsLFsqQAAAA4"]
[Sat Apr 11 00:56:32.933102 2026] [:error] [pid 21706:tid 21728] [client 158.158.45.58:4843] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkrwCGQ1M5d8fQSsLFsqwAAABQ"]
[Sat Apr 11 00:56:33.580543 2026] [:error] [pid 21706:tid 21725] [client 158.158.45.58:4254] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkrwSGQ1M5d8fQSsLFssQAAABE"]
[Sat Apr 11 00:56:34.232801 2026] [:error] [pid 21568:tid 21574] [client 158.158.45.58:4837] [client 158.158.45.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkrwoiz5v_ljZxkpR-gggAAAQI"]
[Sat Apr 11 04:30:36.207955 2026] [:error] [pid 33172:tid 33237] [client 182.42.105.144:38908] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adld7Dn2G0IJw5EZY9kEuwAAAFM"]
[Sat Apr 11 05:06:21.868546 2026] [:error] [pid 33288:tid 33312] [client 43.153.10.83:35138] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adlmTWJmwJFFPEgRHfEOIgAAANY"]
[Sat Apr 11 05:08:36.995463 2026] [proxy_fcgi:error] [pid 33171:tid 33188] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:37.254822 2026] [proxy_fcgi:error] [pid 33171:tid 33193] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:37.509575 2026] [proxy_fcgi:error] [pid 33171:tid 33207] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:37.768493 2026] [proxy_fcgi:error] [pid 33171:tid 33189] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:38.028200 2026] [proxy_fcgi:error] [pid 33171:tid 33204] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:38.280078 2026] [proxy_fcgi:error] [pid 33171:tid 33196] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:38.531876 2026] [proxy_fcgi:error] [pid 33171:tid 33186] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:38.783540 2026] [proxy_fcgi:error] [pid 33171:tid 33190] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:39.035145 2026] [proxy_fcgi:error] [pid 33171:tid 33192] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:39.287543 2026] [proxy_fcgi:error] [pid 33171:tid 33206] [client 4.245.205.135:64009] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:08:39.535645 2026] [:error] [pid 33171:tid 33189] [client 4.245.205.135:64009] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlm17oqTMlo30hcVw9GyAAAAAM"]
[Sat Apr 11 05:08:40.031512 2026] [:error] [pid 33172:tid 33230] [client 4.245.205.135:52023] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlm2Dn2G0IJw5EZY9kftQAAAEw"]
[Sat Apr 11 05:08:40.527537 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:64038] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlm2GJmwJFFPEgRHfERUAAAAMM"]
[Sat Apr 11 05:08:41.068777 2026] [:error] [pid 33288:tid 33294] [client 4.245.205.135:52028] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "adlm2WJmwJFFPEgRHfERVAAAAMQ"]
[Sat Apr 11 05:08:41.567771 2026] [:error] [pid 33172:tid 33219] [client 4.245.205.135:53361] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "adlm2Tn2G0IJw5EZY9kfuwAAAEE"]
[Sat Apr 11 05:08:42.068357 2026] [:error] [pid 33173:tid 33267] [client 4.245.205.135:64644] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "adlm2q8109xRDP2izWi2fwAAAJY"]
[Sat Apr 11 05:08:42.565295 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:51980] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "adlm2mJmwJFFPEgRHfERWwAAAMo"]
[Sat Apr 11 05:08:43.061655 2026] [:error] [pid 33173:tid 33268] [client 4.245.205.135:53356] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "adlm268109xRDP2izWi2gQAAAJc"]
[Sat Apr 11 05:08:43.560312 2026] [:error] [pid 33173:tid 33251] [client 4.245.205.135:64044] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlm268109xRDP2izWi2gwAAAIY"]
[Sat Apr 11 05:08:44.060980 2026] [:error] [pid 33172:tid 33231] [client 4.245.205.135:64677] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlm3Dn2G0IJw5EZY9kfyQAAAE0"]
[Sat Apr 11 05:08:44.572724 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:64021] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlm3GJmwJFFPEgRHfERZQAAAMY"]
[Sat Apr 11 05:08:45.074168 2026] [:error] [pid 33172:tid 33220] [client 4.245.205.135:64648] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlm3Tn2G0IJw5EZY9kfzgAAAEI"]
[Sat Apr 11 05:08:45.576025 2026] [:error] [pid 33172:tid 33240] [client 4.245.205.135:52004] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "adlm3Tn2G0IJw5EZY9kf0AAAAFY"]
[Sat Apr 11 05:08:46.077461 2026] [:error] [pid 33173:tid 33253] [client 4.245.205.135:64676] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "adlm3q8109xRDP2izWi2kQAAAIg"]
[Sat Apr 11 05:08:46.575492 2026] [:error] [pid 33172:tid 33242] [client 4.245.205.135:64673] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "adlm3jn2G0IJw5EZY9kf1AAAAFg"]
[Sat Apr 11 05:08:47.073592 2026] [:error] [pid 33172:tid 33237] [client 4.245.205.135:51981] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "adlm3zn2G0IJw5EZY9kf1QAAAFM"]
[Sat Apr 11 05:08:47.572352 2026] [:error] [pid 33171:tid 33204] [client 4.245.205.135:52008] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "adlm37oqTMlo30hcVw9G0AAAABI"]
[Sat Apr 11 05:08:48.067156 2026] [:error] [pid 33171:tid 33188] [client 4.245.205.135:53368] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "adlm4LoqTMlo30hcVw9G0QAAAAI"]
[Sat Apr 11 05:08:48.578160 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:64694] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "adlm4GJmwJFFPEgRHfERdgAAAMo"]
[Sat Apr 11 05:08:49.076518 2026] [:error] [pid 33171:tid 33186] [client 4.245.205.135:53358] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "adlm4boqTMlo30hcVw9G1gAAAAA"]
[Sat Apr 11 05:08:49.577574 2026] [:error] [pid 33173:tid 33265] [client 4.245.205.135:51983] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "adlm4a8109xRDP2izWi2oQAAAJQ"]
[Sat Apr 11 05:08:50.090252 2026] [:error] [pid 33173:tid 33258] [client 4.245.205.135:52001] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "adlm4q8109xRDP2izWi2pwAAAI0"]
[Sat Apr 11 05:08:50.585175 2026] [:error] [pid 33173:tid 33265] [client 4.245.205.135:34901] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "adlm4q8109xRDP2izWi2sAAAAJQ"]
[Sat Apr 11 05:08:51.084440 2026] [:error] [pid 33171:tid 33194] [client 4.245.205.135:53367] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "adlm47oqTMlo30hcVw9G2QAAAAg"]
[Sat Apr 11 05:08:51.589210 2026] [:error] [pid 33288:tid 33297] [client 4.245.205.135:53317] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "adlm42JmwJFFPEgRHfERgAAAAMc"]
[Sat Apr 11 05:08:52.086411 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:64022] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "adlm5GJmwJFFPEgRHfERhAAAAMY"]
[Sat Apr 11 05:08:52.587767 2026] [:error] [pid 33288:tid 33314] [client 4.245.205.135:53371] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "adlm5GJmwJFFPEgRHfERhwAAANg"]
[Sat Apr 11 05:08:53.106654 2026] [:error] [pid 33173:tid 33260] [client 4.245.205.135:34908] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "adlm5a8109xRDP2izWi2xQAAAI8"]
[Sat Apr 11 05:08:53.603683 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:34912] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlm5WJmwJFFPEgRHfERkAAAAMk"]
[Sat Apr 11 05:08:54.103207 2026] [:error] [pid 33288:tid 33294] [client 4.245.205.135:64055] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlm5mJmwJFFPEgRHfERlQAAAMQ"]
[Sat Apr 11 05:08:54.612170 2026] [:error] [pid 33288:tid 33298] [client 4.245.205.135:53353] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlm5mJmwJFFPEgRHfERmQAAAMg"]
[Sat Apr 11 05:08:55.110657 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:64649] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlm52JmwJFFPEgRHfERnQAAAMk"]
[Sat Apr 11 05:08:55.607893 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:51993] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "adlm52JmwJFFPEgRHfERogAAAMY"]
[Sat Apr 11 05:08:56.108289 2026] [:error] [pid 33173:tid 33259] [client 4.245.205.135:52016] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "adlm6K8109xRDP2izWi20AAAAI4"]
[Sat Apr 11 05:08:56.606475 2026] [:error] [pid 33171:tid 33208] [client 4.245.205.135:64679] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "adlm6LoqTMlo30hcVw9G3QAAABY"]
[Sat Apr 11 05:08:57.099634 2026] [:error] [pid 33171:tid 33195] [client 4.245.205.135:64662] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "adlm6boqTMlo30hcVw9G4AAAAAk"]
[Sat Apr 11 05:08:57.608250 2026] [:error] [pid 33173:tid 33248] [client 4.245.205.135:64058] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "adlm6a8109xRDP2izWi21gAAAIM"]
[Sat Apr 11 05:08:58.100457 2026] [:error] [pid 33172:tid 33221] [client 4.245.205.135:64659] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "adlm6jn2G0IJw5EZY9kf5QAAAEM"]
[Sat Apr 11 05:08:58.595285 2026] [:error] [pid 33171:tid 33202] [client 4.245.205.135:64037] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "adlm6roqTMlo30hcVw9G4wAAABA"]
[Sat Apr 11 05:08:59.093975 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:64035] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "adlm62JmwJFFPEgRHfERswAAAMo"]
[Sat Apr 11 05:08:59.593765 2026] [:error] [pid 33288:tid 33310] [client 4.245.205.135:64655] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "adlm62JmwJFFPEgRHfERtQAAANQ"]
[Sat Apr 11 05:09:00.088707 2026] [:error] [pid 33173:tid 33249] [client 4.245.205.135:51977] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "adlm7K8109xRDP2izWi23AAAAIQ"]
[Sat Apr 11 05:09:00.604258 2026] [:error] [pid 33173:tid 33248] [client 4.245.205.135:52020] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "adlm7K8109xRDP2izWi23QAAAIM"]
[Sat Apr 11 05:09:01.102957 2026] [:error] [pid 33173:tid 33264] [client 4.245.205.135:53337] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "adlm7a8109xRDP2izWi24AAAAJM"]
[Sat Apr 11 05:09:01.650484 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:52024] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "adlm7WJmwJFFPEgRHfERvwAAAMk"]
[Sat Apr 11 05:09:02.151290 2026] [:error] [pid 33288:tid 33304] [client 4.245.205.135:53322] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "adlm7mJmwJFFPEgRHfERwQAAAM4"]
[Sat Apr 11 05:09:02.650381 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:51994] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "adlm7mJmwJFFPEgRHfERxgAAAMY"]
[Sat Apr 11 05:09:03.146383 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:34886] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "adlm72JmwJFFPEgRHfERyQAAAMk"]
[Sat Apr 11 05:09:03.733321 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:64054] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adlm768109xRDP2izWi25QAAAJE"]
[Sat Apr 11 05:09:04.229081 2026] [:error] [pid 33288:tid 33314] [client 4.245.205.135:34836] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adlm8GJmwJFFPEgRHfER1gAAANg"]
[Sat Apr 11 05:09:04.735676 2026] [:error] [pid 33172:tid 33230] [client 4.245.205.135:64697] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adlm8Dn2G0IJw5EZY9kf_AAAAEw"]
[Sat Apr 11 05:09:05.235890 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:64056] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "adlm8WJmwJFFPEgRHfER3QAAAMs"]
[Sat Apr 11 05:09:05.731456 2026] [:error] [pid 33173:tid 33257] [client 4.245.205.135:64020] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlm8a8109xRDP2izWi26gAAAIw"]
[Sat Apr 11 05:09:06.246791 2026] [:error] [pid 33173:tid 33252] [client 4.245.205.135:64674] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlm8q8109xRDP2izWi27AAAAIc"]
[Sat Apr 11 05:09:06.744638 2026] [:error] [pid 33173:tid 33265] [client 4.245.205.135:52029] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlm8q8109xRDP2izWi27QAAAJQ"]
[Sat Apr 11 05:09:07.245294 2026] [:error] [pid 33173:tid 33260] [client 4.245.205.135:52013] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlm868109xRDP2izWi29AAAAI8"]
[Sat Apr 11 05:09:07.744857 2026] [:error] [pid 33173:tid 33257] [client 4.245.205.135:53329] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlm868109xRDP2izWi2-gAAAIw"]
[Sat Apr 11 05:09:08.252451 2026] [:error] [pid 33173:tid 33268] [client 4.245.205.135:34887] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlm9K8109xRDP2izWi2_QAAAJc"]
[Sat Apr 11 05:09:08.750064 2026] [:error] [pid 33288:tid 33303] [client 4.245.205.135:34851] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlm9GJmwJFFPEgRHfER8AAAAM0"]
[Sat Apr 11 05:09:09.241643 2026] [:error] [pid 33288:tid 33313] [client 4.245.205.135:64689] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "adlm9WJmwJFFPEgRHfER8gAAANc"]
[Sat Apr 11 05:09:09.756808 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:53325] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "adlm9WJmwJFFPEgRHfER-QAAAMU"]
[Sat Apr 11 05:09:10.278532 2026] [:error] [pid 33288:tid 33313] [client 4.245.205.135:64008] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "adlm9mJmwJFFPEgRHfER_wAAANc"]
[Sat Apr 11 05:09:10.776228 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:64642] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "adlm9mJmwJFFPEgRHfESAwAAAMs"]
[Sat Apr 11 05:09:11.352398 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:64062] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "adlm92JmwJFFPEgRHfESCgAAAMY"]
[Sat Apr 11 05:09:11.862676 2026] [:error] [pid 33173:tid 33263] [client 4.245.205.135:64059] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "adlm968109xRDP2izWi3BAAAAJI"]
[Sat Apr 11 05:09:12.360100 2026] [:error] [pid 33173:tid 33246] [client 4.245.205.135:53363] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "adlm-K8109xRDP2izWi3BwAAAIE"]
[Sat Apr 11 05:09:12.852118 2026] [:error] [pid 33173:tid 33254] [client 4.245.205.135:64686] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "adlm-K8109xRDP2izWi3CAAAAIk"]
[Sat Apr 11 05:09:13.349527 2026] [:error] [pid 33171:tid 33209] [client 4.245.205.135:51996] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "adlm-boqTMlo30hcVw9G9QAAABc"]
[Sat Apr 11 05:09:13.853389 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:34918] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlm-WJmwJFFPEgRHfESGgAAAMs"]
[Sat Apr 11 05:09:14.349061 2026] [:error] [pid 33172:tid 33226] [client 4.245.205.135:34900] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlm-jn2G0IJw5EZY9kgEAAAAEg"]
[Sat Apr 11 05:09:14.857853 2026] [:error] [pid 33288:tid 33310] [client 4.245.205.135:53330] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlm-mJmwJFFPEgRHfESHwAAANQ"]
[Sat Apr 11 05:09:15.353536 2026] [:error] [pid 33173:tid 33257] [client 4.245.205.135:64057] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlm-68109xRDP2izWi3EwAAAIw"]
[Sat Apr 11 05:09:15.850600 2026] [:error] [pid 33173:tid 33260] [client 4.245.205.135:34838] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "adlm-68109xRDP2izWi3GwAAAI8"]
[Sat Apr 11 05:09:16.351950 2026] [:error] [pid 33171:tid 33188] [client 4.245.205.135:34894] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "adlm_LoqTMlo30hcVw9G-gAAAAI"]
[Sat Apr 11 05:09:16.871122 2026] [:error] [pid 33172:tid 33224] [client 4.245.205.135:64665] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "adlm_Dn2G0IJw5EZY9kgFgAAAEY"]
[Sat Apr 11 05:09:17.368876 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:53357] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "adlm_WJmwJFFPEgRHfESJgAAAMM"]
[Sat Apr 11 05:09:17.877323 2026] [:error] [pid 33288:tid 33313] [client 4.245.205.135:53326] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "adlm_WJmwJFFPEgRHfESKQAAANc"]
[Sat Apr 11 05:09:18.397474 2026] [:error] [pid 33288:tid 33304] [client 4.245.205.135:64698] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "adlm_mJmwJFFPEgRHfESLQAAAM4"]
[Sat Apr 11 05:09:18.892690 2026] [:error] [pid 33288:tid 33311] [client 4.245.205.135:64672] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "adlm_mJmwJFFPEgRHfESMQAAANU"]
[Sat Apr 11 05:09:19.399185 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:64012] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "adlm_zn2G0IJw5EZY9kgGwAAAEc"]
[Sat Apr 11 05:09:19.900338 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:64015] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "adlm_2JmwJFFPEgRHfESOgAAAMs"]
[Sat Apr 11 05:09:20.413333 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:34891] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "adlnAK8109xRDP2izWi3MAAAAJE"]
[Sat Apr 11 05:09:20.924323 2026] [:error] [pid 33173:tid 33261] [client 4.245.205.135:34909] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "adlnAK8109xRDP2izWi3NAAAAJA"]
[Sat Apr 11 05:09:21.431013 2026] [:error] [pid 33288:tid 33290] [client 4.245.205.135:52009] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "adlnAWJmwJFFPEgRHfESQQAAAMA"]
[Sat Apr 11 05:09:21.931972 2026] [:error] [pid 33172:tid 33235] [client 4.245.205.135:34902] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "adlnATn2G0IJw5EZY9kgIAAAAFE"]
[Sat Apr 11 05:09:22.429045 2026] [:error] [pid 33172:tid 33224] [client 4.245.205.135:64700] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "adlnAjn2G0IJw5EZY9kgIwAAAEY"]
[Sat Apr 11 05:09:22.922109 2026] [:error] [pid 33172:tid 33229] [client 4.245.205.135:53331] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "adlnAjn2G0IJw5EZY9kgJgAAAEs"]
[Sat Apr 11 05:09:23.419398 2026] [:error] [pid 33172:tid 33223] [client 4.245.205.135:64046] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "adlnAzn2G0IJw5EZY9kgKwAAAEU"]
[Sat Apr 11 05:09:23.928389 2026] [:error] [pid 33171:tid 33186] [client 4.245.205.135:53375] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "adlnA7oqTMlo30hcVw9HEAAAAAA"]
[Sat Apr 11 05:09:24.430062 2026] [:error] [pid 33171:tid 33206] [client 4.245.205.135:51998] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "adlnBLoqTMlo30hcVw9HFQAAABQ"]
[Sat Apr 11 05:09:24.929928 2026] [:error] [pid 33173:tid 33256] [client 4.245.205.135:64048] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "adlnBK8109xRDP2izWi3QwAAAIs"]
[Sat Apr 11 05:09:25.434660 2026] [:error] [pid 33171:tid 33195] [client 4.245.205.135:51990] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "adlnBboqTMlo30hcVw9HHwAAAAk"]
[Sat Apr 11 05:09:25.934991 2026] [:error] [pid 33288:tid 33297] [client 4.245.205.135:53336] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "adlnBWJmwJFFPEgRHfESSgAAAMc"]
[Sat Apr 11 05:09:26.438999 2026] [:error] [pid 33288:tid 33309] [client 4.245.205.135:52002] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "adlnBmJmwJFFPEgRHfESUwAAANM"]
[Sat Apr 11 05:09:26.962348 2026] [:error] [pid 33172:tid 33234] [client 4.245.205.135:34880] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "adlnBjn2G0IJw5EZY9kgMwAAAFA"]
[Sat Apr 11 05:09:27.477013 2026] [:error] [pid 33288:tid 33305] [client 4.245.205.135:64060] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "adlnB2JmwJFFPEgRHfESYAAAAM8"]
[Sat Apr 11 05:09:28.001810 2026] [:error] [pid 33173:tid 33256] [client 4.245.205.135:34925] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "adlnCK8109xRDP2izWi3UwAAAIs"]
[Sat Apr 11 05:09:28.504118 2026] [:error] [pid 33171:tid 33204] [client 4.245.205.135:53347] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "adlnCLoqTMlo30hcVw9HIgAAABI"]
[Sat Apr 11 05:09:29.000706 2026] [:error] [pid 33288:tid 33312] [client 4.245.205.135:61483] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "adlnCGJmwJFFPEgRHfESbAAAANY"]
[Sat Apr 11 05:09:29.495152 2026] [:error] [pid 33171:tid 33210] [client 4.245.205.135:53355] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "adlnCboqTMlo30hcVw9HJwAAABg"]
[Sat Apr 11 05:09:30.001195 2026] [:error] [pid 33171:tid 33186] [client 4.245.205.135:34877] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adlnCroqTMlo30hcVw9HKAAAAAA"]
[Sat Apr 11 05:09:30.499137 2026] [:error] [pid 33288:tid 33306] [client 4.245.205.135:34927] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adlnCmJmwJFFPEgRHfESeAAAANA"]
[Sat Apr 11 05:09:31.008392 2026] [:error] [pid 33171:tid 33193] [client 4.245.205.135:53364] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adlnC7oqTMlo30hcVw9HLQAAAAc"]
[Sat Apr 11 05:09:31.532328 2026] [:error] [pid 33172:tid 33232] [client 4.245.205.135:34882] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "adlnCzn2G0IJw5EZY9kgOwAAAE4"]
[Sat Apr 11 05:09:32.034301 2026] [:error] [pid 33172:tid 33224] [client 4.245.205.135:64019] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "adlnDDn2G0IJw5EZY9kgPgAAAEY"]
[Sat Apr 11 05:09:32.531802 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:64004] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "adlnDGJmwJFFPEgRHfESigAAAMM"]
[Sat Apr 11 05:09:33.028601 2026] [:error] [pid 33172:tid 33237] [client 4.245.205.135:64016] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "adlnDTn2G0IJw5EZY9kgQQAAAFM"]
[Sat Apr 11 05:09:33.538136 2026] [:error] [pid 33172:tid 33221] [client 4.245.205.135:53341] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "adlnDTn2G0IJw5EZY9kgQgAAAEM"]
[Sat Apr 11 05:09:34.037476 2026] [:error] [pid 33173:tid 33264] [client 4.245.205.135:53338] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-942.php"] [unique_id "adlnDq8109xRDP2izWi3cwAAAJM"]
[Sat Apr 11 05:09:34.531706 2026] [:error] [pid 33172:tid 33228] [client 4.245.205.135:52006] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-942.php"] [unique_id "adlnDjn2G0IJw5EZY9kgRwAAAEo"]
[Sat Apr 11 05:09:35.025678 2026] [:error] [pid 33172:tid 33235] [client 4.245.205.135:64657] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-942.php"] [unique_id "adlnDzn2G0IJw5EZY9kgSQAAAFE"]
[Sat Apr 11 05:09:35.526568 2026] [:error] [pid 33173:tid 33264] [client 4.245.205.135:64678] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-942.php"] [unique_id "adlnD68109xRDP2izWi3gQAAAJM"]
[Sat Apr 11 05:09:36.024628 2026] [:error] [pid 33288:tid 33306] [client 4.245.205.135:64675] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sde.php"] [unique_id "adlnEGJmwJFFPEgRHfESlAAAANA"]
[Sat Apr 11 05:09:36.534513 2026] [:error] [pid 33173:tid 33252] [client 4.245.205.135:51974] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sde.php"] [unique_id "adlnEK8109xRDP2izWi3jAAAAIc"]
[Sat Apr 11 05:09:37.032090 2026] [:error] [pid 33288:tid 33310] [client 4.245.205.135:53348] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sde.php"] [unique_id "adlnEWJmwJFFPEgRHfESlgAAANQ"]
[Sat Apr 11 05:09:37.533495 2026] [:error] [pid 33171:tid 33186] [client 4.245.205.135:34904] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sde.php"] [unique_id "adlnEboqTMlo30hcVw9HPQAAAAA"]
[Sat Apr 11 05:09:38.028407 2026] [:error] [pid 33171:tid 33201] [client 4.245.205.135:52027] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpb.php"] [unique_id "adlnEroqTMlo30hcVw9HQwAAAA8"]
[Sat Apr 11 05:09:38.524357 2026] [:error] [pid 33173:tid 33261] [client 4.245.205.135:34819] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpb.php"] [unique_id "adlnEq8109xRDP2izWi3lwAAAJA"]
[Sat Apr 11 05:09:39.028158 2026] [proxy_fcgi:error] [pid 33173:tid 33265] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:39.277671 2026] [proxy_fcgi:error] [pid 33173:tid 33253] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:39.528075 2026] [proxy_fcgi:error] [pid 33173:tid 33266] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:39.778175 2026] [proxy_fcgi:error] [pid 33173:tid 33246] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:40.027876 2026] [proxy_fcgi:error] [pid 33173:tid 33255] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:40.278121 2026] [proxy_fcgi:error] [pid 33173:tid 33247] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:40.538395 2026] [proxy_fcgi:error] [pid 33173:tid 33248] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:40.796635 2026] [proxy_fcgi:error] [pid 33173:tid 33256] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:41.048375 2026] [proxy_fcgi:error] [pid 33173:tid 33246] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:41.301810 2026] [proxy_fcgi:error] [pid 33173:tid 33261] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:41.551118 2026] [proxy_fcgi:error] [pid 33173:tid 33263] [client 4.245.205.135:53345] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:09:41.797312 2026] [:error] [pid 33173:tid 33265] [client 4.245.205.135:53345] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "adlnFa8109xRDP2izWi3twAAAJQ"]
[Sat Apr 11 05:09:42.296288 2026] [:error] [pid 33288:tid 33297] [client 4.245.205.135:64005] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "adlnFmJmwJFFPEgRHfESuwAAAMc"]
[Sat Apr 11 05:09:42.791658 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:64652] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "adlnFmJmwJFFPEgRHfESvwAAAMU"]
[Sat Apr 11 05:09:43.284307 2026] [:error] [pid 33288:tid 33292] [client 4.245.205.135:34845] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "adlnF2JmwJFFPEgRHfESwgAAAMI"]
[Sat Apr 11 05:09:43.782444 2026] [:error] [pid 33172:tid 33221] [client 4.245.205.135:64017] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlnFzn2G0IJw5EZY9kgYwAAAEM"]
[Sat Apr 11 05:09:44.283284 2026] [:error] [pid 33288:tid 33298] [client 4.245.205.135:51968] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlnGGJmwJFFPEgRHfESywAAAMg"]
[Sat Apr 11 05:09:44.773535 2026] [:error] [pid 33171:tid 33208] [client 4.245.205.135:34846] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlnGLoqTMlo30hcVw9HVwAAABY"]
[Sat Apr 11 05:09:45.270469 2026] [:error] [pid 33172:tid 33242] [client 4.245.205.135:52031] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlnGTn2G0IJw5EZY9kgbwAAAFg"]
[Sat Apr 11 05:09:45.762628 2026] [:error] [pid 33171:tid 33187] [client 4.245.205.135:52005] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlnGboqTMlo30hcVw9HXgAAAAE"]
[Sat Apr 11 05:09:46.284852 2026] [:error] [pid 33173:tid 33259] [client 4.245.205.135:34873] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlnGq8109xRDP2izWi3vAAAAI4"]
[Sat Apr 11 05:09:46.792880 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:34922] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlnGjn2G0IJw5EZY9kgdgAAAEc"]
[Sat Apr 11 05:09:47.287348 2026] [:error] [pid 33172:tid 33237] [client 4.245.205.135:64002] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlnGzn2G0IJw5EZY9kgdwAAAFM"]
[Sat Apr 11 05:09:47.779801 2026] [:error] [pid 33288:tid 33310] [client 4.245.205.135:64006] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "adlnG2JmwJFFPEgRHfES2AAAANQ"]
[Sat Apr 11 05:09:48.273180 2026] [:error] [pid 33288:tid 33290] [client 4.245.205.135:64041] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "adlnHGJmwJFFPEgRHfES3wAAAMA"]
[Sat Apr 11 05:09:48.780607 2026] [:error] [pid 33172:tid 33228] [client 4.245.205.135:61473] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "adlnHDn2G0IJw5EZY9kgegAAAEo"]
[Sat Apr 11 05:09:49.289180 2026] [:error] [pid 33172:tid 33222] [client 4.245.205.135:34888] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "adlnHTn2G0IJw5EZY9kggAAAAEQ"]
[Sat Apr 11 05:09:49.844842 2026] [:error] [pid 33171:tid 33187] [client 4.245.205.135:34817] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlnHboqTMlo30hcVw9HaAAAAAE"]
[Sat Apr 11 05:09:50.345607 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:60217] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlnHjn2G0IJw5EZY9kggwAAAEc"]
[Sat Apr 11 05:09:50.846630 2026] [:error] [pid 33172:tid 33230] [client 4.245.205.135:61498] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlnHjn2G0IJw5EZY9kgiAAAAEw"]
[Sat Apr 11 05:09:51.352744 2026] [:error] [pid 33172:tid 33233] [client 4.245.205.135:53327] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adlnHzn2G0IJw5EZY9kgiQAAAE8"]
[Sat Apr 11 05:09:51.854727 2026] [:error] [pid 33173:tid 33266] [client 4.245.205.135:52030] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "adlnH68109xRDP2izWi30wAAAJU"]
[Sat Apr 11 05:09:52.347917 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:64061] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "adlnIGJmwJFFPEgRHfES9AAAAMM"]
[Sat Apr 11 05:09:52.851635 2026] [:error] [pid 33172:tid 33223] [client 4.245.205.135:53321] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "adlnIDn2G0IJw5EZY9kgkQAAAEU"]
[Sat Apr 11 05:09:53.354175 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:61473] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "adlnIWJmwJFFPEgRHfES-gAAAMU"]
[Sat Apr 11 05:09:53.850755 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:52010] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxiviLDIot.php"] [unique_id "adlnIWJmwJFFPEgRHfES_AAAAMk"]
[Sat Apr 11 05:09:54.346494 2026] [:error] [pid 33173:tid 33246] [client 4.245.205.135:52019] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxiviLDIot.php"] [unique_id "adlnIq8109xRDP2izWi32wAAAIE"]
[Sat Apr 11 05:09:54.856216 2026] [:error] [pid 33173:tid 33267] [client 4.245.205.135:52018] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxiviLDIot.php"] [unique_id "adlnIq8109xRDP2izWi33wAAAJY"]
[Sat Apr 11 05:09:55.358180 2026] [:error] [pid 33172:tid 33222] [client 4.245.205.135:51992] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxiviLDIot.php"] [unique_id "adlnIzn2G0IJw5EZY9kgpgAAAEQ"]
[Sat Apr 11 05:09:55.858382 2026] [:error] [pid 33172:tid 33229] [client 4.245.205.135:52015] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hanyatersenyum.php"] [unique_id "adlnIzn2G0IJw5EZY9kgrQAAAEs"]
[Sat Apr 11 05:09:56.498437 2026] [:error] [pid 33172:tid 33240] [client 4.245.205.135:53366] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hanyatersenyum.php"] [unique_id "adlnJDn2G0IJw5EZY9kgtQAAAFY"]
[Sat Apr 11 05:09:57.219394 2026] [:error] [pid 33288:tid 33306] [client 4.245.205.135:34897] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hanyatersenyum.php"] [unique_id "adlnJWJmwJFFPEgRHfETCQAAANA"]
[Sat Apr 11 05:09:57.934911 2026] [:error] [pid 33171:tid 33198] [client 4.245.205.135:34839] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hanyatersenyum.php"] [unique_id "adlnJboqTMlo30hcVw9HfgAAAAw"]
[Sat Apr 11 05:09:59.088015 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:64661] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlnJ2JmwJFFPEgRHfETFwAAAMo"]
[Sat Apr 11 05:09:59.697932 2026] [:error] [pid 33288:tid 33294] [client 4.245.205.135:64658] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlnJ2JmwJFFPEgRHfETHwAAAMQ"]
[Sat Apr 11 05:10:00.280116 2026] [:error] [pid 33173:tid 33268] [client 4.245.205.135:34937] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlnKK8109xRDP2izWi4CAAAAJc"]
[Sat Apr 11 05:10:01.225783 2026] [:error] [pid 33173:tid 33254] [client 4.245.205.135:64684] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adlnKa8109xRDP2izWi4DAAAAIk"]
[Sat Apr 11 05:10:02.224573 2026] [:error] [pid 33173:tid 33255] [client 4.245.205.135:51999] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upll22.php"] [unique_id "adlnKq8109xRDP2izWi4FQAAAIo"]
[Sat Apr 11 05:10:02.853264 2026] [:error] [pid 33173:tid 33258] [client 4.245.205.135:53346] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upll22.php"] [unique_id "adlnKq8109xRDP2izWi4HQAAAI0"]
[Sat Apr 11 05:10:03.350397 2026] [:error] [pid 33171:tid 33208] [client 4.245.205.135:34931] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upll22.php"] [unique_id "adlnK7oqTMlo30hcVw9HlgAAABY"]
[Sat Apr 11 05:10:03.849647 2026] [:error] [pid 33288:tid 33307] [client 4.245.205.135:34913] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upll22.php"] [unique_id "adlnK2JmwJFFPEgRHfETNwAAANE"]
[Sat Apr 11 05:10:04.381625 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:61464] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adlnLDn2G0IJw5EZY9kg0AAAAEc"]
[Sat Apr 11 05:10:05.070103 2026] [:error] [pid 33172:tid 33238] [client 4.245.205.135:34841] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adlnLTn2G0IJw5EZY9kg1AAAAFQ"]
[Sat Apr 11 05:10:05.575058 2026] [:error] [pid 33172:tid 33221] [client 4.245.205.135:51975] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adlnLTn2G0IJw5EZY9kg2gAAAEM"]
[Sat Apr 11 05:10:06.081813 2026] [:error] [pid 33172:tid 33242] [client 4.245.205.135:51987] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "adlnLjn2G0IJw5EZY9kg4AAAAFg"]
[Sat Apr 11 05:10:06.700109 2026] [:error] [pid 33173:tid 33256] [client 4.245.205.135:64653] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adlnLq8109xRDP2izWi4KQAAAIs"]
[Sat Apr 11 05:10:07.296304 2026] [:error] [pid 33171:tid 33202] [client 4.245.205.135:53312] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adlnL7oqTMlo30hcVw9HpgAAABA"]
[Sat Apr 11 05:10:07.814906 2026] [:error] [pid 33171:tid 33210] [client 4.245.205.135:34889] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adlnL7oqTMlo30hcVw9HqQAAABg"]
[Sat Apr 11 05:10:08.361032 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:52021] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "adlnMGJmwJFFPEgRHfETSQAAAMM"]
[Sat Apr 11 05:10:08.913254 2026] [:error] [pid 33288:tid 33314] [client 4.245.205.135:51972] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-243.php"] [unique_id "adlnMGJmwJFFPEgRHfETTwAAANg"]
[Sat Apr 11 05:10:09.518079 2026] [:error] [pid 33172:tid 33242] [client 4.245.205.135:64030] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-243.php"] [unique_id "adlnMTn2G0IJw5EZY9kg7wAAAFg"]
[Sat Apr 11 05:10:10.028337 2026] [:error] [pid 33171:tid 33196] [client 4.245.205.135:52011] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-243.php"] [unique_id "adlnMroqTMlo30hcVw9HrgAAAAo"]
[Sat Apr 11 05:10:10.550902 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:64691] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-243.php"] [unique_id "adlnMjn2G0IJw5EZY9kg9AAAAEc"]
[Sat Apr 11 05:10:11.074379 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:34847] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlnM2JmwJFFPEgRHfETWwAAAMY"]
[Sat Apr 11 05:10:11.635882 2026] [:error] [pid 33288:tid 33304] [client 4.245.205.135:61450] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlnM2JmwJFFPEgRHfETYQAAAM4"]
[Sat Apr 11 05:10:12.133455 2026] [:error] [pid 33173:tid 33260] [client 4.245.205.135:34884] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlnNK8109xRDP2izWi4MAAAAI8"]
[Sat Apr 11 05:10:12.644930 2026] [:error] [pid 33173:tid 33247] [client 4.245.205.135:34885] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlnNK8109xRDP2izWi4NAAAAII"]
[Sat Apr 11 05:10:13.169100 2026] [:error] [pid 33171:tid 33198] [client 4.245.205.135:56577] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adlnNboqTMlo30hcVw9HvAAAAAw"]
[Sat Apr 11 05:10:13.671842 2026] [:error] [pid 33171:tid 33186] [client 4.245.205.135:34903] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adlnNboqTMlo30hcVw9HvQAAAAA"]
[Sat Apr 11 05:10:14.170684 2026] [:error] [pid 33171:tid 33202] [client 4.245.205.135:64036] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adlnNroqTMlo30hcVw9HwQAAABA"]
[Sat Apr 11 05:10:14.673981 2026] [:error] [pid 33288:tid 33303] [client 4.245.205.135:64023] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "adlnNmJmwJFFPEgRHfETawAAAM0"]
[Sat Apr 11 05:10:15.175056 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:51969] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adlnN2JmwJFFPEgRHfETcAAAAMU"]
[Sat Apr 11 05:10:15.683896 2026] [:error] [pid 33171:tid 33195] [client 4.245.205.135:64007] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adlnN7oqTMlo30hcVw9HxgAAAAk"]
[Sat Apr 11 05:10:16.182174 2026] [:error] [pid 33288:tid 33291] [client 4.245.205.135:53318] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adlnOGJmwJFFPEgRHfETewAAAME"]
[Sat Apr 11 05:10:16.691750 2026] [:error] [pid 33173:tid 33247] [client 4.245.205.135:61494] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adlnOK8109xRDP2izWi4QwAAAII"]
[Sat Apr 11 05:10:17.190178 2026] [:error] [pid 33288:tid 33307] [client 4.245.205.135:64643] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlnOWJmwJFFPEgRHfEThAAAANE"]
[Sat Apr 11 05:10:17.694796 2026] [:error] [pid 33173:tid 33254] [client 4.245.205.135:64646] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlnOa8109xRDP2izWi4SAAAAIk"]
[Sat Apr 11 05:10:18.192340 2026] [:error] [pid 33172:tid 33228] [client 4.245.205.135:34917] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlnOjn2G0IJw5EZY9khEwAAAEo"]
[Sat Apr 11 05:10:18.692651 2026] [:error] [pid 33171:tid 33199] [client 4.245.205.135:64014] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlnOroqTMlo30hcVw9HywAAAA0"]
[Sat Apr 11 05:10:19.208504 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:61488] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlnO2JmwJFFPEgRHfETjwAAAMo"]
[Sat Apr 11 05:10:19.711791 2026] [:error] [pid 33172:tid 33236] [client 4.245.205.135:34820] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlnOzn2G0IJw5EZY9khGwAAAFI"]
[Sat Apr 11 05:10:20.218394 2026] [:error] [pid 33171:tid 33193] [client 4.245.205.135:53334] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlnPLoqTMlo30hcVw9HzgAAAAc"]
[Sat Apr 11 05:10:20.714994 2026] [:error] [pid 33173:tid 33269] [client 4.245.205.135:51976] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlnPK8109xRDP2izWi4VgAAAJg"]
[Sat Apr 11 05:10:21.208634 2026] [:error] [pid 33173:tid 33263] [client 4.245.205.135:60176] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adlnPa8109xRDP2izWi4XgAAAJI"]
[Sat Apr 11 05:10:21.704191 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:60172] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adlnPTn2G0IJw5EZY9khIAAAAEc"]
[Sat Apr 11 05:10:22.208763 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:53342] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adlnPmJmwJFFPEgRHfEToAAAAMU"]
[Sat Apr 11 05:10:22.703529 2026] [:error] [pid 33171:tid 33195] [client 4.245.205.135:53359] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "adlnProqTMlo30hcVw9H0gAAAAk"]
[Sat Apr 11 05:10:23.215682 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:53315] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnP2JmwJFFPEgRHfETpgAAAMk"]
[Sat Apr 11 05:10:23.730029 2026] [:error] [pid 33171:tid 33207] [client 4.245.205.135:52014] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnP7oqTMlo30hcVw9H2wAAABU"]
[Sat Apr 11 05:10:24.225049 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:56166] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnQK8109xRDP2izWi4awAAAJE"]
[Sat Apr 11 05:10:24.719853 2026] [:error] [pid 33173:tid 33251] [client 4.245.205.135:61503] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnQK8109xRDP2izWi4bQAAAIY"]
[Sat Apr 11 05:10:25.220161 2026] [:error] [pid 33171:tid 33206] [client 4.245.205.135:64654] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adlnQboqTMlo30hcVw9H3gAAABQ"]
[Sat Apr 11 05:10:25.729090 2026] [:error] [pid 33171:tid 33188] [client 4.245.205.135:64682] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adlnQboqTMlo30hcVw9H4gAAAAI"]
[Sat Apr 11 05:10:26.232216 2026] [:error] [pid 33173:tid 33247] [client 4.245.205.135:61496] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adlnQq8109xRDP2izWi4cQAAAII"]
[Sat Apr 11 05:10:26.752414 2026] [:error] [pid 33171:tid 33187] [client 4.245.205.135:64001] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "adlnQroqTMlo30hcVw9H6QAAAAE"]
[Sat Apr 11 05:10:27.260178 2026] [:error] [pid 33173:tid 33267] [client 4.245.205.135:56576] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adlnQ68109xRDP2izWi4ewAAAJY"]
[Sat Apr 11 05:10:27.758646 2026] [:error] [pid 33173:tid 33263] [client 4.245.205.135:64027] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adlnQ68109xRDP2izWi4ggAAAJI"]
[Sat Apr 11 05:10:28.254174 2026] [:error] [pid 33171:tid 33193] [client 4.245.205.135:52003] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adlnRLoqTMlo30hcVw9H7gAAAAc"]
[Sat Apr 11 05:10:28.759918 2026] [:error] [pid 33173:tid 33260] [client 4.245.205.135:34876] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "adlnRK8109xRDP2izWi4iQAAAI8"]
[Sat Apr 11 05:10:29.268552 2026] [:error] [pid 33172:tid 33241] [client 4.245.205.135:34823] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "adlnRTn2G0IJw5EZY9khOQAAAFc"]
[Sat Apr 11 05:10:29.769490 2026] [:error] [pid 33288:tid 33310] [client 4.245.205.135:53332] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "adlnRWJmwJFFPEgRHfETsQAAANQ"]
[Sat Apr 11 05:10:30.270382 2026] [:error] [pid 33172:tid 33224] [client 4.245.205.135:34867] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "adlnRjn2G0IJw5EZY9khQAAAAEY"]
[Sat Apr 11 05:10:30.771335 2026] [:error] [pid 33171:tid 33192] [client 4.245.205.135:34830] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "adlnRroqTMlo30hcVw9IAgAAAAY"]
[Sat Apr 11 05:10:31.280313 2026] [:error] [pid 33288:tid 33303] [client 4.245.205.135:61472] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adlnR2JmwJFFPEgRHfETvQAAAM0"]
[Sat Apr 11 05:10:31.779100 2026] [:error] [pid 33172:tid 33234] [client 4.245.205.135:53360] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adlnRzn2G0IJw5EZY9khTAAAAFA"]
[Sat Apr 11 05:10:32.297527 2026] [:error] [pid 33288:tid 33302] [client 4.245.205.135:34868] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adlnSGJmwJFFPEgRHfETyAAAAMw"]
[Sat Apr 11 05:10:32.801048 2026] [:error] [pid 33288:tid 33294] [client 4.245.205.135:56620] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adlnSGJmwJFFPEgRHfETzgAAAMQ"]
[Sat Apr 11 05:10:33.304243 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:51985] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "adlnSWJmwJFFPEgRHfET1QAAAMU"]
[Sat Apr 11 05:10:33.817132 2026] [:error] [pid 33288:tid 33313] [client 4.245.205.135:64701] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "adlnSWJmwJFFPEgRHfET2gAAANc"]
[Sat Apr 11 05:10:34.322512 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:53373] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "adlnSmJmwJFFPEgRHfET4wAAAMM"]
[Sat Apr 11 05:10:34.834416 2026] [:error] [pid 33172:tid 33232] [client 4.245.205.135:64039] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "adlnSjn2G0IJw5EZY9khXQAAAE4"]
[Sat Apr 11 05:10:35.345513 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:64029] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adlnS2JmwJFFPEgRHfEUAgAAAMo"]
[Sat Apr 11 05:10:35.858059 2026] [:error] [pid 33173:tid 33261] [client 4.245.205.135:60197] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adlnS68109xRDP2izWi4mQAAAJA"]
[Sat Apr 11 05:10:36.357941 2026] [:error] [pid 33288:tid 33307] [client 4.245.205.135:60163] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adlnTGJmwJFFPEgRHfEUKQAAANE"]
[Sat Apr 11 05:10:36.861138 2026] [:error] [pid 33288:tid 33290] [client 4.245.205.135:34924] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "adlnTGJmwJFFPEgRHfEUOQAAAMA"]
[Sat Apr 11 05:10:37.363859 2026] [:error] [pid 33172:tid 33230] [client 4.245.205.135:34850] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adlnTTn2G0IJw5EZY9khcwAAAEw"]
[Sat Apr 11 05:10:37.866782 2026] [:error] [pid 33173:tid 33263] [client 4.245.205.135:34936] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adlnTa8109xRDP2izWi4oQAAAJI"]
[Sat Apr 11 05:10:38.370119 2026] [:error] [pid 33171:tid 33195] [client 4.245.205.135:64053] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adlnTroqTMlo30hcVw9IFAAAAAk"]
[Sat Apr 11 05:10:38.872820 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:51982] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adlnTmJmwJFFPEgRHfEUVwAAAMk"]
[Sat Apr 11 05:10:39.372822 2026] [:error] [pid 33173:tid 33268] [client 4.245.205.135:51991] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "adlnT68109xRDP2izWi4pgAAAJc"]
[Sat Apr 11 05:10:39.871757 2026] [:error] [pid 33288:tid 33291] [client 4.245.205.135:34860] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "adlnT2JmwJFFPEgRHfEUZAAAAME"]
[Sat Apr 11 05:10:40.367179 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:53372] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "adlnUGJmwJFFPEgRHfEUawAAAMM"]
[Sat Apr 11 05:10:40.862755 2026] [:error] [pid 33173:tid 33261] [client 4.245.205.135:61448] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "adlnUK8109xRDP2izWi4qQAAAJA"]
[Sat Apr 11 05:10:41.620185 2026] [proxy_fcgi:error] [pid 33172:tid 33240] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:41.870441 2026] [proxy_fcgi:error] [pid 33172:tid 33241] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:42.120118 2026] [proxy_fcgi:error] [pid 33172:tid 33219] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:42.371917 2026] [proxy_fcgi:error] [pid 33172:tid 33228] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:42.622596 2026] [proxy_fcgi:error] [pid 33172:tid 33227] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:42.871764 2026] [proxy_fcgi:error] [pid 33172:tid 33225] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:43.122372 2026] [proxy_fcgi:error] [pid 33172:tid 33233] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:43.372998 2026] [proxy_fcgi:error] [pid 33172:tid 33236] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:43.622872 2026] [proxy_fcgi:error] [pid 33172:tid 33234] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:45.125638 2026] [proxy_fcgi:error] [pid 33172:tid 33226] [client 4.245.205.135:60175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:10:45.372183 2026] [:error] [pid 33172:tid 33222] [client 4.245.205.135:60175] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adlnVTn2G0IJw5EZY9khoAAAAEQ"]
[Sat Apr 11 05:10:45.867771 2026] [:error] [pid 33173:tid 33266] [client 4.245.205.135:34849] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adlnVa8109xRDP2izWi4ugAAAJU"]
[Sat Apr 11 05:10:46.373575 2026] [:error] [pid 33288:tid 33304] [client 4.245.205.135:64690] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adlnVmJmwJFFPEgRHfEUiwAAAM4"]
[Sat Apr 11 05:10:46.874834 2026] [:error] [pid 33173:tid 33245] [client 4.245.205.135:53350] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adlnVq8109xRDP2izWi4wAAAAIA"]
[Sat Apr 11 05:10:47.377323 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:34938] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adlnV2JmwJFFPEgRHfEUlAAAAMk"]
[Sat Apr 11 05:10:47.873057 2026] [:error] [pid 33288:tid 33293] [client 4.245.205.135:64024] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adlnV2JmwJFFPEgRHfEUmwAAAMM"]
[Sat Apr 11 05:10:48.370369 2026] [:error] [pid 33288:tid 33298] [client 4.245.205.135:61453] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adlnWGJmwJFFPEgRHfEUngAAAMg"]
[Sat Apr 11 05:10:48.876292 2026] [:error] [pid 33173:tid 33247] [client 4.245.205.135:53335] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "adlnWK8109xRDP2izWi4yQAAAII"]
[Sat Apr 11 05:10:49.424477 2026] [:error] [pid 33288:tid 33312] [client 4.245.205.135:34910] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adlnWWJmwJFFPEgRHfEUpgAAANY"]
[Sat Apr 11 05:10:49.924984 2026] [:error] [pid 33288:tid 33298] [client 4.245.205.135:51986] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adlnWWJmwJFFPEgRHfEUrAAAAMg"]
[Sat Apr 11 05:10:50.429480 2026] [:error] [pid 33171:tid 33199] [client 4.245.205.135:61474] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adlnWroqTMlo30hcVw9IKgAAAA0"]
[Sat Apr 11 05:10:50.930075 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:64681] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adlnWmJmwJFFPEgRHfEUtwAAAMs"]
[Sat Apr 11 05:10:51.449835 2026] [:error] [pid 33288:tid 33304] [client 4.245.205.135:56163] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "adlnW2JmwJFFPEgRHfEUvwAAAM4"]
[Sat Apr 11 05:10:51.945587 2026] [:error] [pid 33173:tid 33253] [client 4.245.205.135:34921] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "adlnW68109xRDP2izWi42QAAAIg"]
[Sat Apr 11 05:10:52.471616 2026] [:error] [pid 33173:tid 33251] [client 4.245.205.135:60181] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "adlnXK8109xRDP2izWi43wAAAIY"]
[Sat Apr 11 05:10:52.976738 2026] [:error] [pid 33288:tid 33292] [client 4.245.205.135:52000] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "adlnXGJmwJFFPEgRHfEUyAAAAMI"]
[Sat Apr 11 05:10:53.473727 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:60173] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adlnXa8109xRDP2izWi45wAAAJE"]
[Sat Apr 11 05:10:53.967697 2026] [:error] [pid 33173:tid 33250] [client 4.245.205.135:60205] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adlnXa8109xRDP2izWi48AAAAIU"]
[Sat Apr 11 05:10:54.463012 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:34899] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adlnXq8109xRDP2izWi4-QAAAJE"]
[Sat Apr 11 05:10:54.996858 2026] [:error] [pid 33171:tid 33191] [client 4.245.205.135:56617] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adlnXroqTMlo30hcVw9IMQAAAAU"]
[Sat Apr 11 05:10:55.512245 2026] [:error] [pid 33171:tid 33188] [client 4.245.205.135:64703] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adlnX7oqTMlo30hcVw9INAAAAAI"]
[Sat Apr 11 05:10:56.028298 2026] [:error] [pid 33172:tid 33242] [client 4.245.205.135:34933] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adlnYDn2G0IJw5EZY9khuQAAAFg"]
[Sat Apr 11 05:10:56.527495 2026] [:error] [pid 33288:tid 33308] [client 4.245.205.135:60160] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adlnYGJmwJFFPEgRHfEU1gAAANI"]
[Sat Apr 11 05:10:57.022196 2026] [:error] [pid 33288:tid 33305] [client 4.245.205.135:53369] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adlnYWJmwJFFPEgRHfEU3QAAAM8"]
[Sat Apr 11 05:10:57.521595 2026] [:error] [pid 33172:tid 33220] [client 4.245.205.135:61467] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adlnYTn2G0IJw5EZY9khxAAAAEI"]
[Sat Apr 11 05:10:58.024799 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:53370] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adlnYmJmwJFFPEgRHfEU7AAAAMU"]
[Sat Apr 11 05:10:58.545033 2026] [:error] [pid 33288:tid 33290] [client 4.245.205.135:51970] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adlnYmJmwJFFPEgRHfEU9wAAAMA"]
[Sat Apr 11 05:10:59.050979 2026] [:error] [pid 33288:tid 33314] [client 4.245.205.135:64011] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adlnY2JmwJFFPEgRHfEU_QAAANg"]
[Sat Apr 11 05:10:59.545867 2026] [:error] [pid 33288:tid 33294] [client 4.245.205.135:64033] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnY2JmwJFFPEgRHfEVBAAAAMQ"]
[Sat Apr 11 05:11:00.068118 2026] [:error] [pid 33173:tid 33249] [client 4.245.205.135:61463] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnZK8109xRDP2izWi5GwAAAIQ"]
[Sat Apr 11 05:11:00.588972 2026] [:error] [pid 33172:tid 33239] [client 4.245.205.135:51971] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnZDn2G0IJw5EZY9kh0wAAAFU"]
[Sat Apr 11 05:11:01.101732 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:61454] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "adlnZWJmwJFFPEgRHfEVFAAAAMo"]
[Sat Apr 11 05:11:01.605366 2026] [:error] [pid 33173:tid 33254] [client 4.245.205.135:61460] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adlnZa8109xRDP2izWi5JQAAAIk"]
[Sat Apr 11 05:11:02.127192 2026] [:error] [pid 15244:tid 15246] [client 4.245.205.135:34862] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adlnZokdEsz5NeAq8w3hBgAAAQA"]
[Sat Apr 11 05:11:02.639959 2026] [:error] [pid 15244:tid 15250] [client 4.245.205.135:53324] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adlnZokdEsz5NeAq8w3hCAAAAQQ"]
[Sat Apr 11 05:11:03.139662 2026] [:error] [pid 33288:tid 33299] [client 4.245.205.135:64650] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "adlnZ2JmwJFFPEgRHfEVMQAAAMk"]
[Sat Apr 11 05:11:03.638972 2026] [:error] [pid 15244:tid 15259] [client 4.245.205.135:34926] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "adlnZ4kdEsz5NeAq8w3hDwAAAQ0"]
[Sat Apr 11 05:11:04.135034 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:61440] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "adlnaK8109xRDP2izWi5MwAAAJE"]
[Sat Apr 11 05:11:04.646910 2026] [:error] [pid 33288:tid 33305] [client 4.245.205.135:61485] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "adlnaGJmwJFFPEgRHfEVOwAAAM8"]
[Sat Apr 11 05:11:05.147337 2026] [:error] [pid 15244:tid 15270] [client 4.245.205.135:53328] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "adlnaYkdEsz5NeAq8w3hFgAAARg"]
[Sat Apr 11 05:11:05.648197 2026] [:error] [pid 33173:tid 33269] [client 4.245.205.135:51995] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlnaa8109xRDP2izWi5RAAAAJg"]
[Sat Apr 11 05:11:06.143499 2026] [:error] [pid 15244:tid 15255] [client 4.245.205.135:64034] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlnaokdEsz5NeAq8w3hGQAAAQk"]
[Sat Apr 11 05:11:06.636512 2026] [:error] [pid 33288:tid 33296] [client 4.245.205.135:53354] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlnamJmwJFFPEgRHfEVRAAAAMY"]
[Sat Apr 11 05:11:07.156901 2026] [:error] [pid 33288:tid 33297] [client 4.245.205.135:61481] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlna2JmwJFFPEgRHfEVRwAAAMc"]
[Sat Apr 11 05:11:07.655023 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:34932] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adlna2JmwJFFPEgRHfEVUAAAAMs"]
[Sat Apr 11 05:11:08.147048 2026] [:error] [pid 15244:tid 15267] [client 4.245.205.135:61444] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adlnbIkdEsz5NeAq8w3hIQAAARU"]
[Sat Apr 11 05:11:08.652740 2026] [:error] [pid 15244:tid 15251] [client 4.245.205.135:56152] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adlnbIkdEsz5NeAq8w3hJAAAAQU"]
[Sat Apr 11 05:11:09.157548 2026] [:error] [pid 15244:tid 15260] [client 4.245.205.135:64040] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adlnbYkdEsz5NeAq8w3hLgAAAQ4"]
[Sat Apr 11 05:11:09.662956 2026] [:error] [pid 15244:tid 15255] [client 4.245.205.135:52011] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlnbYkdEsz5NeAq8w3hMgAAAQk"]
[Sat Apr 11 05:11:10.172878 2026] [:error] [pid 15244:tid 15265] [client 4.245.205.135:64669] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlnbokdEsz5NeAq8w3hNwAAARM"]
[Sat Apr 11 05:11:10.681916 2026] [:error] [pid 15244:tid 15269] [client 4.245.205.135:34821] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlnbokdEsz5NeAq8w3hOgAAARc"]
[Sat Apr 11 05:11:11.178330 2026] [:error] [pid 15244:tid 15267] [client 4.245.205.135:34864] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlnb4kdEsz5NeAq8w3hQAAAARU"]
[Sat Apr 11 05:11:11.692611 2026] [:error] [pid 33171:tid 33188] [client 4.245.205.135:53351] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "adlnb7oqTMlo30hcVw9IVwAAAAI"]
[Sat Apr 11 05:11:12.189017 2026] [:error] [pid 15244:tid 15263] [client 4.245.205.135:61476] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "adlncIkdEsz5NeAq8w3hSQAAARE"]
[Sat Apr 11 05:11:12.689518 2026] [:error] [pid 15244:tid 15270] [client 4.245.205.135:64671] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "adlncIkdEsz5NeAq8w3hTAAAARg"]
[Sat Apr 11 05:11:13.189904 2026] [:error] [pid 33171:tid 33190] [client 4.245.205.135:64692] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "adlncboqTMlo30hcVw9IXAAAAAQ"]
[Sat Apr 11 05:11:13.698395 2026] [:error] [pid 33171:tid 33193] [client 4.245.205.135:51978] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlncboqTMlo30hcVw9IXQAAAAc"]
[Sat Apr 11 05:11:14.217608 2026] [:error] [pid 15244:tid 15267] [client 4.245.205.135:34853] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlncokdEsz5NeAq8w3hXgAAARU"]
[Sat Apr 11 05:11:14.714421 2026] [:error] [pid 33288:tid 33314] [client 4.245.205.135:61442] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlncmJmwJFFPEgRHfEVWwAAANg"]
[Sat Apr 11 05:11:15.213855 2026] [:error] [pid 33171:tid 33203] [client 4.245.205.135:64685] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adlnc7oqTMlo30hcVw9IZwAAABE"]
[Sat Apr 11 05:11:15.709644 2026] [:error] [pid 33288:tid 33297] [client 4.245.205.135:64026] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "adlnc2JmwJFFPEgRHfEVXQAAAMc"]
[Sat Apr 11 05:11:16.207528 2026] [:error] [pid 33171:tid 33195] [client 4.245.205.135:64699] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "adlndLoqTMlo30hcVw9IagAAAAk"]
[Sat Apr 11 05:11:16.706724 2026] [:error] [pid 33288:tid 33301] [client 4.245.205.135:34939] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "adlndGJmwJFFPEgRHfEVZwAAAMs"]
[Sat Apr 11 05:11:17.203486 2026] [:error] [pid 33288:tid 33311] [client 4.245.205.135:60168] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "adlndWJmwJFFPEgRHfEVbQAAANU"]
[Sat Apr 11 05:11:17.716581 2026] [:error] [pid 33172:tid 33230] [client 4.245.205.135:34831] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adlndTn2G0IJw5EZY9kh7wAAAEw"]
[Sat Apr 11 05:11:18.229703 2026] [:error] [pid 33172:tid 33226] [client 4.245.205.135:64025] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adlndjn2G0IJw5EZY9kh8wAAAEg"]
[Sat Apr 11 05:11:18.735447 2026] [:error] [pid 33172:tid 33232] [client 4.245.205.135:34907] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adlndjn2G0IJw5EZY9kh9gAAAE4"]
[Sat Apr 11 05:11:19.231456 2026] [:error] [pid 33171:tid 33203] [client 4.245.205.135:34829] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "adlnd7oqTMlo30hcVw9IcwAAABE"]
[Sat Apr 11 05:11:19.727048 2026] [:error] [pid 33173:tid 33262] [client 4.245.205.135:51997] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adlnd68109xRDP2izWi5gAAAAJE"]
[Sat Apr 11 05:11:20.223376 2026] [:error] [pid 33171:tid 33196] [client 4.245.205.135:34843] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adlneLoqTMlo30hcVw9IdwAAAAo"]
[Sat Apr 11 05:11:20.722455 2026] [:error] [pid 15244:tid 15246] [client 4.245.205.135:61490] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adlneIkdEsz5NeAq8w3hcwAAAQA"]
[Sat Apr 11 05:11:21.224008 2026] [:error] [pid 15244:tid 15268] [client 4.245.205.135:61492] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "adlneYkdEsz5NeAq8w3heAAAARY"]
[Sat Apr 11 05:11:21.719498 2026] [:error] [pid 33173:tid 33256] [client 4.245.205.135:52885] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "adlnea8109xRDP2izWi5kgAAAIs"]
[Sat Apr 11 05:11:22.213494 2026] [:error] [pid 33173:tid 33257] [client 4.245.205.135:61499] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "adlneq8109xRDP2izWi5lgAAAIw"]
[Sat Apr 11 05:11:22.710985 2026] [:error] [pid 33288:tid 33295] [client 4.245.205.135:60188] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "adlnemJmwJFFPEgRHfEVegAAAMU"]
[Sat Apr 11 05:11:23.216496 2026] [:error] [pid 15244:tid 15264] [client 4.245.205.135:61478] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "adlne4kdEsz5NeAq8w3hgAAAARI"]
[Sat Apr 11 05:11:23.715336 2026] [:error] [pid 15244:tid 15260] [client 4.245.205.135:64056] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "adlne4kdEsz5NeAq8w3hgwAAAQ4"]
[Sat Apr 11 05:11:24.209190 2026] [:error] [pid 15244:tid 15252] [client 4.245.205.135:34928] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "adlnfIkdEsz5NeAq8w3hhQAAAQY"]
[Sat Apr 11 05:11:24.703479 2026] [:error] [pid 15244:tid 15268] [client 4.245.205.135:56632] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "adlnfIkdEsz5NeAq8w3hhgAAARY"]
[Sat Apr 11 05:11:25.201747 2026] [:error] [pid 15244:tid 15250] [client 4.245.205.135:60162] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "adlnfYkdEsz5NeAq8w3hiQAAAQQ"]
[Sat Apr 11 05:11:25.701369 2026] [:error] [pid 33288:tid 33298] [client 4.245.205.135:64050] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adlnfWJmwJFFPEgRHfEVkAAAAMg"]
[Sat Apr 11 05:11:26.196996 2026] [:error] [pid 15244:tid 15263] [client 4.245.205.135:64018] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adlnfokdEsz5NeAq8w3hkQAAARE"]
[Sat Apr 11 05:11:26.694704 2026] [:error] [pid 33173:tid 33258] [client 4.245.205.135:52895] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adlnfq8109xRDP2izWi5nQAAAI0"]
[Sat Apr 11 05:11:27.188649 2026] [:error] [pid 33172:tid 33221] [client 4.245.205.135:61447] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "adlnfzn2G0IJw5EZY9kiAAAAAEM"]
[Sat Apr 11 05:11:27.686921 2026] [:error] [pid 33172:tid 33226] [client 4.245.205.135:34832] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adlnfzn2G0IJw5EZY9kiAgAAAEg"]
[Sat Apr 11 05:11:28.186107 2026] [:error] [pid 33172:tid 33224] [client 4.245.205.135:64042] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adlngDn2G0IJw5EZY9kiBwAAAEY"]
[Sat Apr 11 05:11:28.680995 2026] [:error] [pid 15244:tid 15246] [client 4.245.205.135:34906] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adlngIkdEsz5NeAq8w3hlgAAAQA"]
[Sat Apr 11 05:11:29.176476 2026] [:error] [pid 33172:tid 33231] [client 4.245.205.135:64667] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "adlngTn2G0IJw5EZY9kiDAAAAE0"]
[Sat Apr 11 05:11:29.669344 2026] [:error] [pid 33172:tid 33233] [client 4.245.205.135:60196] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adlngTn2G0IJw5EZY9kiEQAAAE8"]
[Sat Apr 11 05:11:30.166164 2026] [:error] [pid 33172:tid 33225] [client 4.245.205.135:56628] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adlngjn2G0IJw5EZY9kiFAAAAEc"]
[Sat Apr 11 05:11:30.658733 2026] [:error] [pid 33173:tid 33249] [client 4.245.205.135:56626] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adlngq8109xRDP2izWi5qwAAAIQ"]
[Sat Apr 11 05:11:31.157421 2026] [:error] [pid 33173:tid 33251] [client 4.245.205.135:34828] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "adlng68109xRDP2izWi5rgAAAIY"]
[Sat Apr 11 05:11:31.666360 2026] [:error] [pid 33173:tid 33268] [client 4.245.205.135:34866] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adlng68109xRDP2izWi5sQAAAJc"]
[Sat Apr 11 05:11:32.167222 2026] [:error] [pid 33172:tid 33218] [client 4.245.205.135:56157] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adlnhDn2G0IJw5EZY9kiHQAAAEA"]
[Sat Apr 11 05:11:32.666948 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:60192] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adlnhGJmwJFFPEgRHfEVqAAAAMo"]
[Sat Apr 11 05:11:33.174198 2026] [:error] [pid 15244:tid 15254] [client 4.245.205.135:53339] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adlnhYkdEsz5NeAq8w3hmQAAAQg"]
[Sat Apr 11 05:11:33.678964 2026] [:error] [pid 33288:tid 33307] [client 4.245.205.135:64687] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "adlnhWJmwJFFPEgRHfEVqgAAANE"]
[Sat Apr 11 05:11:34.180698 2026] [:error] [pid 15244:tid 15253] [client 4.245.205.135:53333] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "adlnhokdEsz5NeAq8w3hpgAAAQc"]
[Sat Apr 11 05:11:34.674287 2026] [:error] [pid 15244:tid 15270] [client 4.245.205.135:53316] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "adlnhokdEsz5NeAq8w3hqgAAARg"]
[Sat Apr 11 05:11:35.175743 2026] [:error] [pid 15244:tid 15252] [client 4.245.205.135:60164] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "adlnh4kdEsz5NeAq8w3hsgAAAQY"]
[Sat Apr 11 05:11:35.672295 2026] [:error] [pid 33172:tid 33231] [client 4.245.205.135:56598] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "adlnhzn2G0IJw5EZY9kiKAAAAE0"]
[Sat Apr 11 05:11:36.167773 2026] [:error] [pid 15244:tid 15248] [client 4.245.205.135:64032] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "adlniIkdEsz5NeAq8w3huAAAAQI"]
[Sat Apr 11 05:11:36.668097 2026] [:error] [pid 15244:tid 15257] [client 4.245.205.135:61458] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "adlniIkdEsz5NeAq8w3huwAAAQs"]
[Sat Apr 11 05:11:37.166178 2026] [:error] [pid 15244:tid 15251] [client 4.245.205.135:52230] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "adlniYkdEsz5NeAq8w3hwAAAAQU"]
[Sat Apr 11 05:11:37.661829 2026] [:error] [pid 15244:tid 15269] [client 4.245.205.135:51989] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adlniYkdEsz5NeAq8w3hxQAAARc"]
[Sat Apr 11 05:11:38.161418 2026] [:error] [pid 33288:tid 33292] [client 4.245.205.135:52922] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adlnimJmwJFFPEgRHfEVswAAAMI"]
[Sat Apr 11 05:11:38.662835 2026] [:error] [pid 33288:tid 33297] [client 4.245.205.135:34942] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adlnimJmwJFFPEgRHfEVtQAAAMc"]
[Sat Apr 11 05:11:39.156773 2026] [:error] [pid 33172:tid 33241] [client 4.245.205.135:61495] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adlnizn2G0IJw5EZY9kiLQAAAFc"]
[Sat Apr 11 05:11:39.649260 2026] [:error] [pid 15244:tid 15266] [client 4.245.205.135:34898] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adlni4kdEsz5NeAq8w3hywAAARQ"]
[Sat Apr 11 05:11:40.144094 2026] [:error] [pid 33171:tid 33210] [client 4.245.205.135:61479] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adlnjLoqTMlo30hcVw9IkQAAABg"]
[Sat Apr 11 05:11:40.636504 2026] [:error] [pid 33172:tid 33240] [client 4.245.205.135:60216] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adlnjDn2G0IJw5EZY9kiLwAAAFY"]
[Sat Apr 11 05:11:41.130597 2026] [:error] [pid 33171:tid 33208] [client 4.245.205.135:34878] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "adlnjboqTMlo30hcVw9IkwAAABY"]
[Sat Apr 11 05:11:41.630511 2026] [:error] [pid 33173:tid 33266] [client 4.245.205.135:64047] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "adlnja8109xRDP2izWi5twAAAJU"]
[Sat Apr 11 05:11:42.125736 2026] [:error] [pid 33288:tid 33294] [client 4.245.205.135:34893] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "adlnjmJmwJFFPEgRHfEVvAAAAMQ"]
[Sat Apr 11 05:11:42.623246 2026] [:error] [pid 33173:tid 33246] [client 4.245.205.135:34834] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "adlnjq8109xRDP2izWi5vAAAAIE"]
[Sat Apr 11 05:11:43.133383 2026] [:error] [pid 15244:tid 15258] [client 4.245.205.135:56143] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "adlnj4kdEsz5NeAq8w3h1wAAAQw"]
[Sat Apr 11 05:11:43.640661 2026] [:error] [pid 33288:tid 33300] [client 4.245.205.135:60171] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "adlnj2JmwJFFPEgRHfEVvwAAAMo"]
[Sat Apr 11 05:11:44.151977 2026] [:error] [pid 33173:tid 33261] [client 4.245.205.135:64049] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "adlnkK8109xRDP2izWi5wAAAAJA"]
[Sat Apr 11 05:11:44.650506 2026] [:error] [pid 15244:tid 15267] [client 4.245.205.135:34879] [client 4.245.205.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "adlnkIkdEsz5NeAq8w3h2QAAARU"]
[Sat Apr 11 05:11:45.432945 2026] [proxy_fcgi:error] [pid 33173:tid 33266] [client 4.245.205.135:34881] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:11:45.681960 2026] [proxy_fcgi:error] [pid 33173:tid 33264] [client 4.245.205.135:34881] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:11:45.930762 2026] [proxy_fcgi:error] [pid 33173:tid 33259] [client 4.245.205.135:34881] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:11:46.180913 2026] [proxy_fcgi:error] [pid 33173:tid 33250] [client 4.245.205.135:34881] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:11:46.431076 2026] [proxy_fcgi:error] [pid 33173:tid 33267] [client 4.245.205.135:34881] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 05:11:46.680729 2026] [proxy_fcgi:error] [pid 33173:tid 33245] [client 4.245.205.135:34881] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:21.966884 2026] [proxy_fcgi:error] [pid 33171:tid 33196] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:22.235801 2026] [proxy_fcgi:error] [pid 33171:tid 33191] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:22.480800 2026] [proxy_fcgi:error] [pid 33171:tid 33197] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:22.737294 2026] [proxy_fcgi:error] [pid 33171:tid 33199] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:23.147756 2026] [proxy_fcgi:error] [pid 33171:tid 33205] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:23.385116 2026] [proxy_fcgi:error] [pid 33171:tid 33202] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:23.628003 2026] [proxy_fcgi:error] [pid 33171:tid 33210] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:23.897624 2026] [proxy_fcgi:error] [pid 33171:tid 33194] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:24.141546 2026] [proxy_fcgi:error] [pid 33171:tid 33190] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:24.405860 2026] [proxy_fcgi:error] [pid 33171:tid 33207] [client 51.107.88.105:12396] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:00:24.684734 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:12396] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "admBCLoqTMlo30hcVw96KQAAAAA"]
[Sat Apr 11 07:00:25.269856 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:60012] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "admBCWJmwJFFPEgRHfFxzgAAAM0"]
[Sat Apr 11 07:00:25.829891 2026] [:error] [pid 33171:tid 33198] [client 51.107.88.105:46249] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "admBCboqTMlo30hcVw96KgAAAAw"]
[Sat Apr 11 07:00:26.312769 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:13173] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "admBCroqTMlo30hcVw96LAAAAA8"]
[Sat Apr 11 07:00:26.897531 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:43017] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "admBCjn2G0IJw5EZY9lcCgAAAEw"]
[Sat Apr 11 07:00:27.421995 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:12373] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "admBC2JmwJFFPEgRHfFx6AAAANE"]
[Sat Apr 11 07:00:27.982922 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:59993] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "admBC68109xRDP2izWgAogAAAIQ"]
[Sat Apr 11 07:00:28.502184 2026] [:error] [pid 33288:tid 33292] [client 51.107.88.105:13157] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "admBDGJmwJFFPEgRHfFx8AAAAMI"]
[Sat Apr 11 07:00:29.126056 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:60016] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admBDYkdEsz5NeAq8w1d1AAAAQ4"]
[Sat Apr 11 07:00:29.651615 2026] [:error] [pid 33171:tid 33204] [client 51.107.88.105:46226] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admBDboqTMlo30hcVw96LgAAABI"]
[Sat Apr 11 07:00:30.152544 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:12363] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admBDokdEsz5NeAq8w1d2QAAARM"]
[Sat Apr 11 07:00:30.798291 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:12444] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admBDokdEsz5NeAq8w1d4gAAARE"]
[Sat Apr 11 07:00:31.422150 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:59980] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "admBD68109xRDP2izWgApQAAAIA"]
[Sat Apr 11 07:00:31.930249 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:46268] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "admBD68109xRDP2izWgAqQAAAIc"]
[Sat Apr 11 07:00:32.458071 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:43037] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "admBEIkdEsz5NeAq8w1d8wAAARY"]
[Sat Apr 11 07:00:33.020898 2026] [:error] [pid 33172:tid 33221] [client 51.107.88.105:12467] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "admBETn2G0IJw5EZY9lcEQAAAEM"]
[Sat Apr 11 07:00:34.514311 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:12413] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "admBEq8109xRDP2izWgArgAAAJE"]
[Sat Apr 11 07:00:35.020856 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:12882] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "admBE4kdEsz5NeAq8w1d-wAAAQ8"]
[Sat Apr 11 07:00:35.490902 2026] [:error] [pid 33171:tid 33198] [client 51.107.88.105:13168] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "admBE7oqTMlo30hcVw96NAAAAAw"]
[Sat Apr 11 07:00:36.047782 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:13169] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "admBFK8109xRDP2izWgAsAAAAI0"]
[Sat Apr 11 07:00:36.622744 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:43022] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "admBFIkdEsz5NeAq8w1eCQAAARA"]
[Sat Apr 11 07:00:37.158991 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:12463] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "admBFWJmwJFFPEgRHfFyDQAAANU"]
[Sat Apr 11 07:00:37.638710 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:59998] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "admBFYkdEsz5NeAq8w1eEAAAARM"]
[Sat Apr 11 07:00:38.102578 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:59987] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "admBFroqTMlo30hcVw96PwAAABg"]
[Sat Apr 11 07:00:38.641161 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:12470] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admBFq8109xRDP2izWgAtQAAAIA"]
[Sat Apr 11 07:00:39.177004 2026] [:error] [pid 33172:tid 33238] [client 51.107.88.105:43029] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admBFzn2G0IJw5EZY9lcFQAAAFQ"]
[Sat Apr 11 07:00:39.647501 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:12469] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admBFzn2G0IJw5EZY9lcGAAAAEY"]
[Sat Apr 11 07:00:40.167753 2026] [:error] [pid 33171:tid 33196] [client 51.107.88.105:46269] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admBGLoqTMlo30hcVw96RwAAAAo"]
[Sat Apr 11 07:00:40.733803 2026] [:error] [pid 33171:tid 33191] [client 51.107.88.105:46233] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admBGLoqTMlo30hcVw96TAAAAAU"]
[Sat Apr 11 07:00:41.602653 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:12366] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admBGYkdEsz5NeAq8w1eGAAAAQM"]
[Sat Apr 11 07:00:42.417948 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:46252] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admBGq8109xRDP2izWgAuwAAAJI"]
[Sat Apr 11 07:00:42.892879 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:13083] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admBGokdEsz5NeAq8w1eJwAAARQ"]
[Sat Apr 11 07:00:43.407022 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:12437] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "admBG4kdEsz5NeAq8w1eLQAAAQQ"]
[Sat Apr 11 07:00:43.902790 2026] [:error] [pid 15244:tid 15257] [client 51.107.88.105:13076] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "admBG4kdEsz5NeAq8w1eMAAAAQs"]
[Sat Apr 11 07:00:44.503124 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:60024] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "admBHK8109xRDP2izWgAvQAAAJc"]
[Sat Apr 11 07:00:44.997350 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:13180] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "admBHIkdEsz5NeAq8w1eMQAAARQ"]
[Sat Apr 11 07:00:45.542371 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:59972] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "admBHTn2G0IJw5EZY9lcIgAAAFY"]
[Sat Apr 11 07:00:46.011615 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:12432] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "admBHmJmwJFFPEgRHfFyHwAAAM0"]
[Sat Apr 11 07:00:46.496611 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:43063] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "admBHq8109xRDP2izWgAwQAAAJU"]
[Sat Apr 11 07:00:47.042745 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:13182] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "admBH4kdEsz5NeAq8w1ePwAAARE"]
[Sat Apr 11 07:00:47.512347 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:43021] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "admBH4kdEsz5NeAq8w1eQwAAAQ4"]
[Sat Apr 11 07:00:48.082575 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:12428] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "admBIIkdEsz5NeAq8w1eRwAAAQg"]
[Sat Apr 11 07:00:48.617616 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:13171] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "admBIK8109xRDP2izWgAxwAAAI4"]
[Sat Apr 11 07:00:49.138343 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:13087] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blqjs.php"] [unique_id "admBIWJmwJFFPEgRHfFyJAAAAMg"]
[Sat Apr 11 07:00:49.649105 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:12415] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "admBIWJmwJFFPEgRHfFyJgAAAMY"]
[Sat Apr 11 07:00:50.114848 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:12418] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "admBIokdEsz5NeAq8w1eSwAAAQc"]
[Sat Apr 11 07:00:50.579108 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:43051] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "admBImJmwJFFPEgRHfFyLQAAAM8"]
[Sat Apr 11 07:00:51.090009 2026] [:error] [pid 33172:tid 33231] [client 51.107.88.105:43065] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sk25_1.php"] [unique_id "admBIzn2G0IJw5EZY9lcLwAAAE0"]
[Sat Apr 11 07:00:51.563567 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:12367] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "admBIzn2G0IJw5EZY9lcMgAAAFY"]
[Sat Apr 11 07:00:52.041964 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:46217] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "admBJK8109xRDP2izWgA0AAAAJM"]
[Sat Apr 11 07:00:52.517826 2026] [:error] [pid 33288:tid 33296] [client 51.107.88.105:46257] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "admBJGJmwJFFPEgRHfFyMgAAAMY"]
[Sat Apr 11 07:00:53.066310 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:12397] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fetch.php"] [unique_id "admBJTn2G0IJw5EZY9lcOAAAAEw"]
[Sat Apr 11 07:00:53.550093 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:13141] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admBJboqTMlo30hcVw96bAAAABU"]
[Sat Apr 11 07:00:54.040454 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:46254] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admBJmJmwJFFPEgRHfFyPAAAAMU"]
[Sat Apr 11 07:00:54.597953 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:12414] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admBJmJmwJFFPEgRHfFyPwAAANA"]
[Sat Apr 11 07:00:55.078992 2026] [:error] [pid 33171:tid 33195] [client 51.107.88.105:59993] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "admBJ7oqTMlo30hcVw96bgAAAAk"]
[Sat Apr 11 07:00:55.590093 2026] [:error] [pid 15244:tid 15252] [client 51.107.88.105:13100] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "admBJ4kdEsz5NeAq8w1eXQAAAQY"]
[Sat Apr 11 07:00:56.105675 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:46222] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "admBKIkdEsz5NeAq8w1eYgAAAQE"]
[Sat Apr 11 07:00:56.628734 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:12387] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "admBKIkdEsz5NeAq8w1eZQAAAQc"]
[Sat Apr 11 07:00:57.153720 2026] [:error] [pid 33173:tid 33255] [client 51.107.88.105:12994] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "admBKa8109xRDP2izWgA3gAAAIo"]
[Sat Apr 11 07:00:57.639692 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:12394] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "admBKa8109xRDP2izWgA4QAAAIQ"]
[Sat Apr 11 07:00:58.121640 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:43044] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "admBKokdEsz5NeAq8w1ecAAAAQc"]
[Sat Apr 11 07:00:58.623278 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:59996] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "admBKokdEsz5NeAq8w1edAAAARg"]
[Sat Apr 11 07:00:59.086888 2026] [:error] [pid 33288:tid 33311] [client 51.107.88.105:12424] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "admBK2JmwJFFPEgRHfFySQAAANU"]
[Sat Apr 11 07:00:59.575869 2026] [:error] [pid 15244:tid 15259] [client 51.107.88.105:12391] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "admBK4kdEsz5NeAq8w1efgAAAQ0"]
[Sat Apr 11 07:01:00.120099 2026] [:error] [pid 33171:tid 33206] [client 51.107.88.105:13199] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "admBLLoqTMlo30hcVw96dgAAABQ"]
[Sat Apr 11 07:01:01.060865 2026] [:error] [pid 33171:tid 33199] [client 51.107.88.105:12386] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "admBLboqTMlo30hcVw96fAAAAA0"]
[Sat Apr 11 07:01:01.904663 2026] [:error] [pid 33171:tid 33198] [client 51.107.88.105:13166] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "admBLboqTMlo30hcVw96hAAAAAw"]
[Sat Apr 11 07:01:07.208729 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:46260] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admBM4kdEsz5NeAq8w1enwAAARY"]
[Sat Apr 11 07:01:13.164037 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:60014] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "admBOboqTMlo30hcVw96oAAAAA8"]
[Sat Apr 11 07:01:18.692045 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:60027] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "admBPjn2G0IJw5EZY9lcYwAAAEY"]
[Sat Apr 11 07:01:20.499557 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:12369] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "admBQK8109xRDP2izWgBLwAAAIU"]
[Sat Apr 11 07:01:21.956586 2026] [:error] [pid 33172:tid 33225] [client 51.107.88.105:12402] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "admBQTn2G0IJw5EZY9lcawAAAEc"]
[Sat Apr 11 07:01:23.031767 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:13172] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "admBQzn2G0IJw5EZY9lcbQAAAEI"]
[Sat Apr 11 07:01:24.756026 2026] [proxy_fcgi:error] [pid 33172:tid 33240] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:25.103852 2026] [proxy_fcgi:error] [pid 33172:tid 33227] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:25.341030 2026] [proxy_fcgi:error] [pid 33172:tid 33233] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:25.591819 2026] [proxy_fcgi:error] [pid 33172:tid 33228] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:25.857780 2026] [proxy_fcgi:error] [pid 33172:tid 33222] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:26.224343 2026] [proxy_fcgi:error] [pid 33172:tid 33224] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:26.491360 2026] [proxy_fcgi:error] [pid 33172:tid 33238] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:26.887087 2026] [proxy_fcgi:error] [pid 33172:tid 33234] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:27.223214 2026] [proxy_fcgi:error] [pid 33172:tid 33219] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:27.482050 2026] [proxy_fcgi:error] [pid 33172:tid 33229] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:27.857147 2026] [proxy_fcgi:error] [pid 33172:tid 33227] [client 51.107.88.105:12600] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:01:28.090418 2026] [:error] [pid 33172:tid 33233] [client 51.107.88.105:12600] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "admBSDn2G0IJw5EZY9lchgAAAE8"]
[Sat Apr 11 07:01:28.688943 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:60028] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "admBSIkdEsz5NeAq8w1e7wAAAQ4"]
[Sat Apr 11 07:01:29.512173 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:46255] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "admBSWJmwJFFPEgRHfFyigAAAM4"]
[Sat Apr 11 07:01:30.153334 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:12476] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Geforce.php"] [unique_id "admBSroqTMlo30hcVw96swAAABU"]
[Sat Apr 11 07:01:31.578919 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:13056] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9EaklzMysJ.php"] [unique_id "admBS4kdEsz5NeAq8w1fBAAAAQc"]
[Sat Apr 11 07:01:33.636596 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:12412] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9EaklzMysJ.php"] [unique_id "admBTboqTMlo30hcVw96xgAAABU"]
[Sat Apr 11 07:01:34.461722 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:13005] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9EaklzMysJ.php"] [unique_id "admBTmJmwJFFPEgRHfFykgAAAME"]
[Sat Apr 11 07:01:34.986143 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:13154] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9EaklzMysJ.php"] [unique_id "admBTmJmwJFFPEgRHfFylAAAANg"]
[Sat Apr 11 07:01:35.601867 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:12407] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpxl.php"] [unique_id "admBT4kdEsz5NeAq8w1fFQAAAQA"]
[Sat Apr 11 07:01:36.205886 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:43060] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpxl.php"] [unique_id "admBUGJmwJFFPEgRHfFymwAAAMc"]
[Sat Apr 11 07:01:37.248972 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:12357] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpxl.php"] [unique_id "admBUYkdEsz5NeAq8w1fIwAAARQ"]
[Sat Apr 11 07:01:37.981122 2026] [:error] [pid 33288:tid 33303] [client 51.107.88.105:59994] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpxl.php"] [unique_id "admBUWJmwJFFPEgRHfFypAAAAM0"]
[Sat Apr 11 07:01:38.665600 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:12401] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admBUokdEsz5NeAq8w1fKQAAAQA"]
[Sat Apr 11 07:01:39.397254 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:13138] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admBU4kdEsz5NeAq8w1fLQAAARY"]
[Sat Apr 11 07:01:40.406325 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:43062] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admBVIkdEsz5NeAq8w1fPQAAAQQ"]
[Sat Apr 11 07:01:41.114566 2026] [:error] [pid 15244:tid 15255] [client 51.107.88.105:13128] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admBVYkdEsz5NeAq8w1fRgAAAQk"]
[Sat Apr 11 07:01:42.011921 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:12435] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "admBVq8109xRDP2izWgBmQAAAIs"]
[Sat Apr 11 07:01:42.632547 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:12434] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "admBVokdEsz5NeAq8w1fVAAAARM"]
[Sat Apr 11 07:01:43.909309 2026] [:error] [pid 33288:tid 33304] [client 51.107.88.105:12422] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "admBV2JmwJFFPEgRHfFyxgAAAM4"]
[Sat Apr 11 07:01:44.564981 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:46243] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "admBWIkdEsz5NeAq8w1fWgAAAQI"]
[Sat Apr 11 07:01:45.324851 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:59973] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "admBWa8109xRDP2izWgBmwAAAI4"]
[Sat Apr 11 07:01:46.088131 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:46265] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "admBWokdEsz5NeAq8w1fZAAAAQ8"]
[Sat Apr 11 07:01:46.625302 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:59989] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "admBWmJmwJFFPEgRHfFyzQAAAM8"]
[Sat Apr 11 07:01:47.390897 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:60004] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "admBW68109xRDP2izWgBogAAAIA"]
[Sat Apr 11 07:01:47.983613 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:43008] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "admBW68109xRDP2izWgBpwAAAIY"]
[Sat Apr 11 07:01:48.535087 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:13080] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "admBXIkdEsz5NeAq8w1fawAAARc"]
[Sat Apr 11 07:01:49.206655 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:13121] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "admBXYkdEsz5NeAq8w1fbQAAAQA"]
[Sat Apr 11 07:01:49.770899 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:46229] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "admBXYkdEsz5NeAq8w1fcQAAARI"]
[Sat Apr 11 07:01:50.291741 2026] [:error] [pid 33172:tid 33242] [client 51.107.88.105:12365] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "admBXjn2G0IJw5EZY9lcnwAAAFg"]
[Sat Apr 11 07:01:51.065196 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:13020] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "admBXzn2G0IJw5EZY9lcowAAAEY"]
[Sat Apr 11 07:01:51.623589 2026] [:error] [pid 33288:tid 33310] [client 51.107.88.105:12445] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "admBX2JmwJFFPEgRHfFy3gAAANQ"]
[Sat Apr 11 07:01:52.718335 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:46245] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "admBYLoqTMlo30hcVw963gAAABU"]
[Sat Apr 11 07:01:53.539266 2026] [:error] [pid 33171:tid 33186] [client 51.107.88.105:13063] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admBYboqTMlo30hcVw965AAAAAA"]
[Sat Apr 11 07:01:54.078123 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:46250] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admBYq8109xRDP2izWgBuQAAAJU"]
[Sat Apr 11 07:01:54.637685 2026] [:error] [pid 33173:tid 33261] [client 51.107.88.105:43025] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admBYq8109xRDP2izWgBugAAAJA"]
[Sat Apr 11 07:01:55.177483 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:12376] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admBY68109xRDP2izWgBvAAAAIQ"]
[Sat Apr 11 07:01:55.751661 2026] [:error] [pid 33288:tid 33298] [client 51.107.88.105:12466] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "admBY2JmwJFFPEgRHfFy7AAAAMg"]
[Sat Apr 11 07:01:56.277530 2026] [:error] [pid 15244:tid 15267] [client 51.107.88.105:13231] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "admBZIkdEsz5NeAq8w1feQAAARU"]
[Sat Apr 11 07:01:56.927515 2026] [:error] [pid 33172:tid 33236] [client 51.107.88.105:12461] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "admBZDn2G0IJw5EZY9lcsgAAAFI"]
[Sat Apr 11 07:02:15.012358 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:13120] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "admBd68109xRDP2izWgB7gAAAJc"]
[Sat Apr 11 07:02:16.178774 2026] [:error] [pid 33172:tid 33231] [client 51.107.88.105:46238] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "admBeDn2G0IJw5EZY9lc4AAAAE0"]
[Sat Apr 11 07:02:18.198605 2026] [:error] [pid 15244:tid 15259] [client 51.107.88.105:12597] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "admBeokdEsz5NeAq8w1fzAAAAQ0"]
[Sat Apr 11 07:02:21.344138 2026] [:error] [pid 33173:tid 33252] [client 51.107.88.105:60018] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "admBfa8109xRDP2izWgB_AAAAIc"]
[Sat Apr 11 07:02:22.071509 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:60005] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admBfjn2G0IJw5EZY9lc8gAAAEw"]
[Sat Apr 11 07:02:22.712136 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:12426] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admBfjn2G0IJw5EZY9lc9AAAAEs"]
[Sat Apr 11 07:02:23.533768 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:13029] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admBf4kdEsz5NeAq8w1f6gAAAQI"]
[Sat Apr 11 07:02:24.127905 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:12381] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "admBgDn2G0IJw5EZY9lc-QAAAEg"]
[Sat Apr 11 07:02:24.831517 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:13082] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admBgGJmwJFFPEgRHfFzRAAAAMM"]
[Sat Apr 11 07:02:25.401362 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:60000] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admBgTn2G0IJw5EZY9ldBAAAAEI"]
[Sat Apr 11 07:02:26.006474 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:13162] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admBgmJmwJFFPEgRHfFzSAAAAM8"]
[Sat Apr 11 07:02:26.737152 2026] [:error] [pid 33171:tid 33196] [client 51.107.88.105:13086] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "admBgroqTMlo30hcVw97IQAAAAo"]
[Sat Apr 11 07:02:27.459220 2026] [proxy_fcgi:error] [pid 33172:tid 33233] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:27.699459 2026] [proxy_fcgi:error] [pid 33172:tid 33231] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:28.104617 2026] [proxy_fcgi:error] [pid 33172:tid 33241] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:28.343953 2026] [proxy_fcgi:error] [pid 33172:tid 33232] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:28.581409 2026] [proxy_fcgi:error] [pid 33172:tid 33218] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:28.847163 2026] [proxy_fcgi:error] [pid 33172:tid 33235] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:29.084299 2026] [proxy_fcgi:error] [pid 33172:tid 33229] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:29.382458 2026] [proxy_fcgi:error] [pid 33172:tid 33223] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:30.921601 2026] [proxy_fcgi:error] [pid 33172:tid 33238] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:31.919645 2026] [proxy_fcgi:error] [pid 33172:tid 33218] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:32.364965 2026] [proxy_fcgi:error] [pid 33172:tid 33235] [client 51.107.88.105:13127] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:02:32.616455 2026] [:error] [pid 33172:tid 33222] [client 51.107.88.105:13127] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "admBiDn2G0IJw5EZY9ldFwAAAEQ"]
[Sat Apr 11 07:02:33.278060 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:60019] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "admBiYkdEsz5NeAq8w1gBAAAARE"]
[Sat Apr 11 07:02:33.929289 2026] [:error] [pid 33171:tid 33201] [client 51.107.88.105:12690] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "admBiboqTMlo30hcVw97PwAAAA8"]
[Sat Apr 11 07:02:34.604703 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:12676] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "admBijn2G0IJw5EZY9ldGgAAAFU"]
[Sat Apr 11 07:02:35.253522 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:13069] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "admBi68109xRDP2izWgCIwAAAII"]
[Sat Apr 11 07:02:36.426268 2026] [:error] [pid 33171:tid 33199] [client 51.107.88.105:59985] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "admBjLoqTMlo30hcVw97QQAAAA0"]
[Sat Apr 11 07:02:37.640495 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:13183] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "admBjYkdEsz5NeAq8w1gDgAAAQw"]
[Sat Apr 11 07:02:39.022119 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:46216] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "admBj7oqTMlo30hcVw97RAAAAAI"]
[Sat Apr 11 07:02:40.932551 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:12395] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admBkGJmwJFFPEgRHfFzZAAAAMM"]
[Sat Apr 11 07:02:42.100352 2026] [:error] [pid 33172:tid 33232] [client 51.107.88.105:13060] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admBkjn2G0IJw5EZY9ldNwAAAE4"]
[Sat Apr 11 07:02:42.984840 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:46214] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admBkroqTMlo30hcVw97RgAAABU"]
[Sat Apr 11 07:02:43.849655 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:13194] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admBk4kdEsz5NeAq8w1gGAAAAQ4"]
[Sat Apr 11 07:02:44.603079 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:12359] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admBlK8109xRDP2izWgCRQAAAJE"]
[Sat Apr 11 07:02:45.823183 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:12405] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admBlboqTMlo30hcVw97SQAAAAM"]
[Sat Apr 11 07:02:46.555284 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:46266] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admBlokdEsz5NeAq8w1gLAAAAQM"]
[Sat Apr 11 07:02:47.863136 2026] [:error] [pid 33288:tid 33301] [client 51.107.88.105:43648] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admBl2JmwJFFPEgRHfFzdgAAAMs"]
[Sat Apr 11 07:02:48.557211 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:13116] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "admBmK8109xRDP2izWgCSQAAAJI"]
[Sat Apr 11 07:02:49.307384 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:43694] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "admBmWJmwJFFPEgRHfFzgwAAAMw"]
[Sat Apr 11 07:02:49.988090 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:43027] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "admBmTn2G0IJw5EZY9ldUwAAAEg"]
[Sat Apr 11 07:02:50.698381 2026] [:error] [pid 33172:tid 33230] [client 51.107.88.105:13052] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "admBmjn2G0IJw5EZY9ldVQAAAEw"]
[Sat Apr 11 07:02:51.316304 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:12358] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBm68109xRDP2izWgCUQAAAIY"]
[Sat Apr 11 07:02:51.928129 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:13064] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBm4kdEsz5NeAq8w1gPAAAAQc"]
[Sat Apr 11 07:02:52.433581 2026] [:error] [pid 33173:tid 33258] [client 51.107.88.105:12465] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBnK8109xRDP2izWgCVgAAAI0"]
[Sat Apr 11 07:02:54.740035 2026] [:error] [pid 15244:tid 15262] [client 51.107.88.105:59976] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBnokdEsz5NeAq8w1gSQAAARA"]
[Sat Apr 11 07:03:01.226734 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:13115] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "admBpWJmwJFFPEgRHfFzsAAAANM"]
[Sat Apr 11 07:03:01.991186 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:13155] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "admBpYkdEsz5NeAq8w1gWQAAARI"]
[Sat Apr 11 07:03:02.710592 2026] [:error] [pid 33288:tid 33292] [client 51.107.88.105:13217] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "admBpmJmwJFFPEgRHfFzuAAAAMI"]
[Sat Apr 11 07:03:03.294443 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:43689] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "admBp68109xRDP2izWgCgwAAAII"]
[Sat Apr 11 07:03:03.868687 2026] [:error] [pid 33173:tid 33259] [client 51.107.88.105:13096] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "admBp68109xRDP2izWgChwAAAI4"]
[Sat Apr 11 07:03:04.467316 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:12865] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "admBqK8109xRDP2izWgCigAAAJU"]
[Sat Apr 11 07:03:05.180806 2026] [:error] [pid 33173:tid 33264] [client 51.107.88.105:46247] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "admBqa8109xRDP2izWgCjgAAAJM"]
[Sat Apr 11 07:03:05.898823 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:43048] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "admBqYkdEsz5NeAq8w1gaQAAAQ8"]
[Sat Apr 11 07:03:06.455117 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:43014] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "admBqmJmwJFFPEgRHfFzvgAAAM8"]
[Sat Apr 11 07:03:06.969744 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:12995] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "admBqjn2G0IJw5EZY9ldaAAAAEA"]
[Sat Apr 11 07:03:07.496180 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:43024] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "admBq4kdEsz5NeAq8w1gcAAAAQU"]
[Sat Apr 11 07:03:08.029320 2026] [:error] [pid 33288:tid 33310] [client 51.107.88.105:13192] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "admBrGJmwJFFPEgRHfFzyQAAANQ"]
[Sat Apr 11 07:03:08.648505 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:13066] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "admBrDn2G0IJw5EZY9ldawAAAEs"]
[Sat Apr 11 07:03:09.130776 2026] [:error] [pid 33172:tid 33224] [client 51.107.88.105:13139] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "admBrTn2G0IJw5EZY9ldbwAAAEY"]
[Sat Apr 11 07:03:09.619935 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:13179] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "admBrYkdEsz5NeAq8w1gewAAAQc"]
[Sat Apr 11 07:03:10.269317 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:12993] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "admBrokdEsz5NeAq8w1gfgAAAQI"]
[Sat Apr 11 07:03:10.863495 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:13158] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "admBrokdEsz5NeAq8w1ggQAAAQM"]
[Sat Apr 11 07:03:11.502363 2026] [:error] [pid 33172:tid 33239] [client 51.107.88.105:12443] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "admBrzn2G0IJw5EZY9lddQAAAFU"]
[Sat Apr 11 07:03:12.001574 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:13148] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "admBsK8109xRDP2izWgCqQAAAJI"]
[Sat Apr 11 07:03:13.103349 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:43011] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "admBsYkdEsz5NeAq8w1ghQAAAQg"]
[Sat Apr 11 07:03:13.725787 2026] [:error] [pid 33288:tid 33314] [client 51.107.88.105:13131] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "admBsWJmwJFFPEgRHfFzzwAAANg"]
[Sat Apr 11 07:03:14.244901 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:13140] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "admBsq8109xRDP2izWgCrAAAAIQ"]
[Sat Apr 11 07:03:15.393440 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:13049] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "admBszn2G0IJw5EZY9ldgwAAAEo"]
[Sat Apr 11 07:03:16.144307 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:12352] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "admBtDn2G0IJw5EZY9ldhAAAAEI"]
[Sat Apr 11 07:03:17.510251 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:13159] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admBtTn2G0IJw5EZY9ldkgAAAEI"]
[Sat Apr 11 07:03:18.669616 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:43667] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admBtokdEsz5NeAq8w1glgAAAQI"]
[Sat Apr 11 07:03:19.579497 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:12361] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admBt4kdEsz5NeAq8w1gnAAAARE"]
[Sat Apr 11 07:03:20.249659 2026] [:error] [pid 33171:tid 33192] [client 51.107.88.105:59994] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admBuLoqTMlo30hcVw97dwAAAAY"]
[Sat Apr 11 07:03:20.848829 2026] [:error] [pid 33288:tid 33305] [client 51.107.88.105:12455] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "admBuGJmwJFFPEgRHfFz5QAAAM8"]
[Sat Apr 11 07:03:21.744372 2026] [:error] [pid 33288:tid 33297] [client 51.107.88.105:46231] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "admBuWJmwJFFPEgRHfFz6gAAAMc"]
[Sat Apr 11 07:03:22.484945 2026] [:error] [pid 33288:tid 33306] [client 51.107.88.105:13073] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "admBumJmwJFFPEgRHfFz7wAAANA"]
[Sat Apr 11 07:03:23.169494 2026] [:error] [pid 33288:tid 33293] [client 51.107.88.105:12451] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "admBu2JmwJFFPEgRHfFz8wAAAMM"]
[Sat Apr 11 07:03:23.852179 2026] [:error] [pid 15244:tid 15270] [client 51.107.88.105:13196] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admBu4kdEsz5NeAq8w1grQAAARg"]
[Sat Apr 11 07:03:24.471047 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:13107] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admBvK8109xRDP2izWgCxgAAAIM"]
[Sat Apr 11 07:03:24.996308 2026] [:error] [pid 15244:tid 15258] [client 51.107.88.105:43651] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admBvIkdEsz5NeAq8w1gswAAAQw"]
[Sat Apr 11 07:03:25.475541 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:12594] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admBvWJmwJFFPEgRHfFz-AAAAMw"]
[Sat Apr 11 07:03:26.010864 2026] [:error] [pid 33172:tid 33218] [client 51.107.88.105:13142] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "admBvjn2G0IJw5EZY9ldogAAAEA"]
[Sat Apr 11 07:03:26.575183 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:13071] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "admBvokdEsz5NeAq8w1gugAAAQE"]
[Sat Apr 11 07:03:27.171857 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:13061] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "admBv4kdEsz5NeAq8w1gvwAAAQ8"]
[Sat Apr 11 07:03:27.669706 2026] [:error] [pid 33173:tid 33245] [client 51.107.88.105:60009] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "admBv68109xRDP2izWgC0QAAAIA"]
[Sat Apr 11 07:03:28.176977 2026] [:error] [pid 33173:tid 33266] [client 51.107.88.105:12411] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "admBwK8109xRDP2izWgC1wAAAJU"]
[Sat Apr 11 07:03:28.691852 2026] [:error] [pid 33173:tid 33256] [client 51.107.88.105:12590] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "admBwK8109xRDP2izWgC4AAAAIs"]
[Sat Apr 11 07:03:29.217681 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:12915] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "admBwa8109xRDP2izWgC6wAAAIQ"]
[Sat Apr 11 07:03:29.744424 2026] [:error] [pid 15244:tid 15255] [client 51.107.88.105:46237] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "admBwYkdEsz5NeAq8w1gxQAAAQk"]
[Sat Apr 11 07:03:30.367913 2026] [:error] [pid 15244:tid 15267] [client 51.107.88.105:13189] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admBwokdEsz5NeAq8w1gxwAAARU"]
[Sat Apr 11 07:03:30.956681 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:13123] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admBwq8109xRDP2izWgC9QAAAJQ"]
[Sat Apr 11 07:03:31.498977 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:60026] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admBw7oqTMlo30hcVw97jQAAABU"]
[Sat Apr 11 07:03:31.978523 2026] [:error] [pid 33173:tid 33254] [client 51.107.88.105:13075] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admBw68109xRDP2izWgC-QAAAIk"]
[Sat Apr 11 07:03:32.492794 2026] [proxy_fcgi:error] [pid 33173:tid 33245] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:32.728994 2026] [proxy_fcgi:error] [pid 33173:tid 33267] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:32.988083 2026] [proxy_fcgi:error] [pid 33173:tid 33249] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:33.242921 2026] [proxy_fcgi:error] [pid 33173:tid 33263] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:33.479393 2026] [proxy_fcgi:error] [pid 33173:tid 33259] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:33.736829 2026] [proxy_fcgi:error] [pid 33173:tid 33252] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:33.970674 2026] [proxy_fcgi:error] [pid 33173:tid 33245] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:34.207637 2026] [proxy_fcgi:error] [pid 33173:tid 33246] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:34.443441 2026] [proxy_fcgi:error] [pid 33173:tid 33248] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:34.680064 2026] [proxy_fcgi:error] [pid 33173:tid 33264] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:34.929761 2026] [proxy_fcgi:error] [pid 33173:tid 33262] [client 51.107.88.105:12368] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:03:35.161432 2026] [:error] [pid 33173:tid 33261] [client 51.107.88.105:12368] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "admBx68109xRDP2izWgDHAAAAJA"]
[Sat Apr 11 07:03:35.670307 2026] [:error] [pid 33172:tid 33237] [client 51.107.88.105:13112] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "admBxzn2G0IJw5EZY9ldwgAAAFM"]
[Sat Apr 11 07:03:36.229395 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:43033] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "admByIkdEsz5NeAq8w1g1QAAAQ4"]
[Sat Apr 11 07:03:36.820601 2026] [:error] [pid 33171:tid 33190] [client 51.107.88.105:46221] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "admByLoqTMlo30hcVw97kwAAAAQ"]
[Sat Apr 11 07:03:37.398016 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:59977] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "admByYkdEsz5NeAq8w1g3QAAARM"]
[Sat Apr 11 07:03:37.864683 2026] [:error] [pid 33172:tid 33221] [client 51.107.88.105:12392] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "admByTn2G0IJw5EZY9ldyQAAAEM"]
[Sat Apr 11 07:03:38.346698 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:13243] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "admBymJmwJFFPEgRHfF0EgAAANY"]
[Sat Apr 11 07:03:38.857906 2026] [:error] [pid 15244:tid 15269] [client 51.107.88.105:13043] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "admByokdEsz5NeAq8w1g5QAAARc"]
[Sat Apr 11 07:03:39.430396 2026] [:error] [pid 15244:tid 15246] [client 51.107.88.105:60007] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "admBy4kdEsz5NeAq8w1g6wAAAQA"]
[Sat Apr 11 07:03:39.912005 2026] [:error] [pid 33173:tid 33250] [client 51.107.88.105:12438] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "admBy68109xRDP2izWgDIwAAAIU"]
[Sat Apr 11 07:03:40.454471 2026] [:error] [pid 33173:tid 33263] [client 51.107.88.105:13150] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "admBzK8109xRDP2izWgDJQAAAJI"]
[Sat Apr 11 07:03:40.932766 2026] [:error] [pid 15244:tid 15264] [client 51.107.88.105:43692] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "admBzIkdEsz5NeAq8w1g_QAAARI"]
[Sat Apr 11 07:03:41.710904 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:13125] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBzYkdEsz5NeAq8w1hBAAAAQg"]
[Sat Apr 11 07:03:42.239956 2026] [:error] [pid 33171:tid 33197] [client 51.107.88.105:13077] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBzroqTMlo30hcVw97mwAAAAs"]
[Sat Apr 11 07:03:42.806320 2026] [:error] [pid 33172:tid 33226] [client 51.107.88.105:12409] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBzjn2G0IJw5EZY9ld2AAAAEg"]
[Sat Apr 11 07:03:43.293522 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:12894] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "admBz4kdEsz5NeAq8w1hBgAAARQ"]
[Sat Apr 11 07:03:43.842885 2026] [:error] [pid 15244:tid 15255] [client 51.107.88.105:12459] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "admBz4kdEsz5NeAq8w1hBwAAAQk"]
[Sat Apr 11 07:03:44.326485 2026] [:error] [pid 33172:tid 33235] [client 51.107.88.105:60023] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "admB0Dn2G0IJw5EZY9ld3gAAAFE"]
[Sat Apr 11 07:03:44.814475 2026] [:error] [pid 33172:tid 33220] [client 51.107.88.105:12562] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "admB0Dn2G0IJw5EZY9ld4AAAAEI"]
[Sat Apr 11 07:03:45.360658 2026] [:error] [pid 33172:tid 33229] [client 51.107.88.105:13135] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "admB0Tn2G0IJw5EZY9ld5QAAAEs"]
[Sat Apr 11 07:03:45.917313 2026] [:error] [pid 33173:tid 33260] [client 51.107.88.105:12548] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "admB0a8109xRDP2izWgDMQAAAI8"]
[Sat Apr 11 07:03:46.500749 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:43040] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "admB0q8109xRDP2izWgDNAAAAIY"]
[Sat Apr 11 07:03:47.034907 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:59990] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "admB07oqTMlo30hcVw97qAAAAAM"]
[Sat Apr 11 07:03:47.608370 2026] [:error] [pid 33173:tid 33248] [client 51.107.88.105:13205] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "admB068109xRDP2izWgDNgAAAIM"]
[Sat Apr 11 07:03:48.134275 2026] [:error] [pid 33171:tid 33203] [client 51.107.88.105:13002] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admB1LoqTMlo30hcVw97rgAAABE"]
[Sat Apr 11 07:03:48.702404 2026] [:error] [pid 33288:tid 33309] [client 51.107.88.105:46239] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admB1GJmwJFFPEgRHfF0GAAAANM"]
[Sat Apr 11 07:03:49.419677 2026] [:error] [pid 33172:tid 33221] [client 51.107.88.105:12883] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admB1Tn2G0IJw5EZY9ld8wAAAEM"]
[Sat Apr 11 07:03:52.274516 2026] [:error] [pid 15244:tid 15256] [client 51.107.88.105:46261] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admB2IkdEsz5NeAq8w1hLgAAAQo"]
[Sat Apr 11 07:03:53.287762 2026] [:error] [pid 33288:tid 33295] [client 51.107.88.105:12429] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "admB2WJmwJFFPEgRHfF0IgAAAMU"]
[Sat Apr 11 07:03:53.988132 2026] [:error] [pid 15244:tid 15261] [client 51.107.88.105:13049] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "admB2YkdEsz5NeAq8w1hOwAAAQ8"]
[Sat Apr 11 07:03:54.583351 2026] [:error] [pid 33288:tid 33313] [client 51.107.88.105:46253] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "admB2mJmwJFFPEgRHfF0JwAAANc"]
[Sat Apr 11 07:03:55.177346 2026] [:error] [pid 33173:tid 33268] [client 51.107.88.105:13036] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "admB268109xRDP2izWgDRgAAAJc"]
[Sat Apr 11 07:03:55.695859 2026] [:error] [pid 15244:tid 15252] [client 51.107.88.105:12417] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admB24kdEsz5NeAq8w1hSAAAAQY"]
[Sat Apr 11 07:03:56.637970 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:46251] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admB3IkdEsz5NeAq8w1hTAAAAQM"]
[Sat Apr 11 07:04:00.840791 2026] [:error] [pid 33288:tid 33302] [client 51.107.88.105:46236] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admB4GJmwJFFPEgRHfF0UAAAAMw"]
[Sat Apr 11 07:04:01.420913 2026] [:error] [pid 33172:tid 33228] [client 51.107.88.105:13011] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admB4Tn2G0IJw5EZY9ld_wAAAEo"]
[Sat Apr 11 07:04:02.437806 2026] [:error] [pid 33171:tid 33198] [client 51.107.88.105:12478] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "admB4roqTMlo30hcVw97xQAAAAw"]
[Sat Apr 11 07:04:03.022484 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:12371] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "admB44kdEsz5NeAq8w1hcQAAARY"]
[Sat Apr 11 07:04:03.560332 2026] [:error] [pid 33171:tid 33189] [client 51.107.88.105:46262] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "admB47oqTMlo30hcVw97zQAAAAM"]
[Sat Apr 11 07:04:04.046396 2026] [:error] [pid 33172:tid 33225] [client 51.107.88.105:12379] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "admB5Dn2G0IJw5EZY9leBQAAAEc"]
[Sat Apr 11 07:04:04.619055 2026] [:error] [pid 33172:tid 33241] [client 51.107.88.105:43056] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admB5Dn2G0IJw5EZY9leBwAAAFc"]
[Sat Apr 11 07:04:05.701921 2026] [:error] [pid 15244:tid 15252] [client 51.107.88.105:12559] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admB5YkdEsz5NeAq8w1hewAAAQY"]
[Sat Apr 11 07:04:06.256480 2026] [:error] [pid 15244:tid 15253] [client 51.107.88.105:60021] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admB5okdEsz5NeAq8w1hgQAAAQc"]
[Sat Apr 11 07:04:06.763740 2026] [:error] [pid 33173:tid 33249] [client 51.107.88.105:13163] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admB5q8109xRDP2izWgDXwAAAIQ"]
[Sat Apr 11 07:04:07.362184 2026] [:error] [pid 33171:tid 33207] [client 51.107.88.105:13132] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "admB57oqTMlo30hcVw971QAAABU"]
[Sat Apr 11 07:04:08.024416 2026] [:error] [pid 15244:tid 15255] [client 51.107.88.105:13037] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "admB6IkdEsz5NeAq8w1hjwAAAQk"]
[Sat Apr 11 07:04:10.884250 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:46220] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "admB6q8109xRDP2izWgDZwAAAII"]
[Sat Apr 11 07:04:21.917216 2026] [:error] [pid 33172:tid 33234] [client 51.107.88.105:12466] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/torsa1.php"] [unique_id "admB9Tn2G0IJw5EZY9leOgAAAFA"]
[Sat Apr 11 07:04:22.556495 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:13072] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "admB9okdEsz5NeAq8w1hygAAAQI"]
[Sat Apr 11 07:04:24.604892 2026] [:error] [pid 15244:tid 15265] [client 51.107.88.105:46248] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "admB-IkdEsz5NeAq8w1h2QAAARM"]
[Sat Apr 11 07:04:25.264632 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:13016] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "admB-WJmwJFFPEgRHfF0pQAAAMo"]
[Sat Apr 11 07:04:25.798337 2026] [:error] [pid 15244:tid 15268] [client 51.107.88.105:12460] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "admB-YkdEsz5NeAq8w1h6AAAARY"]
[Sat Apr 11 07:04:26.318379 2026] [:error] [pid 33173:tid 33261] [client 51.107.88.105:12420] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "admB-q8109xRDP2izWgDfAAAAJA"]
[Sat Apr 11 07:04:26.794385 2026] [:error] [pid 15244:tid 15248] [client 51.107.88.105:12457] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "admB-okdEsz5NeAq8w1h7wAAAQI"]
[Sat Apr 11 07:04:27.308307 2026] [:error] [pid 33288:tid 33291] [client 51.107.88.105:12423] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "admB-2JmwJFFPEgRHfF0qgAAAME"]
[Sat Apr 11 07:04:27.786455 2026] [:error] [pid 15244:tid 15251] [client 51.107.88.105:46263] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "admB-4kdEsz5NeAq8w1h-AAAAQU"]
[Sat Apr 11 07:04:28.409496 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:43655] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "admB_IkdEsz5NeAq8w1h_QAAAQ4"]
[Sat Apr 11 07:04:29.009613 2026] [:error] [pid 15244:tid 15267] [client 51.107.88.105:60015] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "admB_YkdEsz5NeAq8w1h_wAAARU"]
[Sat Apr 11 07:04:29.537148 2026] [:error] [pid 15244:tid 15254] [client 51.107.88.105:46241] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "admB_YkdEsz5NeAq8w1iAQAAAQg"]
[Sat Apr 11 07:04:30.071660 2026] [:error] [pid 15244:tid 15263] [client 51.107.88.105:13167] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "admB_okdEsz5NeAq8w1iBAAAARE"]
[Sat Apr 11 07:04:30.549807 2026] [:error] [pid 15244:tid 15266] [client 51.107.88.105:13208] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "admB_okdEsz5NeAq8w1iCAAAARQ"]
[Sat Apr 11 07:04:31.061445 2026] [:error] [pid 33288:tid 33307] [client 51.107.88.105:13164] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "admB_2JmwJFFPEgRHfF0tQAAANE"]
[Sat Apr 11 07:04:31.540903 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:59992] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "admB_68109xRDP2izWgDgAAAAJE"]
[Sat Apr 11 07:04:32.013134 2026] [:error] [pid 33171:tid 33192] [client 51.107.88.105:59997] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "admCALoqTMlo30hcVw977gAAAAY"]
[Sat Apr 11 07:04:32.534567 2026] [:error] [pid 33172:tid 33222] [client 51.107.88.105:13215] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "admCADn2G0IJw5EZY9leRAAAAEQ"]
[Sat Apr 11 07:04:33.024413 2026] [:error] [pid 15244:tid 15250] [client 51.107.88.105:43687] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "admCAYkdEsz5NeAq8w1iDQAAAQQ"]
[Sat Apr 11 07:04:33.490997 2026] [:error] [pid 33172:tid 33223] [client 51.107.88.105:13094] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "admCATn2G0IJw5EZY9leSAAAAEU"]
[Sat Apr 11 07:04:33.962785 2026] [:error] [pid 33173:tid 33247] [client 51.107.88.105:12462] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "admCAa8109xRDP2izWgDgwAAAII"]
[Sat Apr 11 07:04:34.454731 2026] [proxy_fcgi:error] [pid 15244:tid 15259] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:34.692432 2026] [proxy_fcgi:error] [pid 15244:tid 15260] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:34.930467 2026] [proxy_fcgi:error] [pid 15244:tid 15257] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:35.168298 2026] [proxy_fcgi:error] [pid 15244:tid 15252] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:35.407298 2026] [proxy_fcgi:error] [pid 15244:tid 15255] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:35.645362 2026] [proxy_fcgi:error] [pid 15244:tid 15261] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:35.884094 2026] [proxy_fcgi:error] [pid 15244:tid 15263] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:36.121026 2026] [proxy_fcgi:error] [pid 15244:tid 15270] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:36.603066 2026] [proxy_fcgi:error] [pid 15244:tid 15257] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:36.855543 2026] [proxy_fcgi:error] [pid 15244:tid 15267] [client 51.107.88.105:13175] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:04:37.110952 2026] [:error] [pid 15244:tid 15249] [client 51.107.88.105:13175] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "admCBYkdEsz5NeAq8w1iJgAAAQM"]
[Sat Apr 11 07:04:39.139993 2026] [:error] [pid 33172:tid 33222] [client 51.107.88.105:13068] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "admCBzn2G0IJw5EZY9leTwAAAEQ"]
[Sat Apr 11 07:04:43.775089 2026] [:error] [pid 15244:tid 15260] [client 51.107.88.105:46225] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "admCC4kdEsz5NeAq8w1iSwAAAQ4"]
[Sat Apr 11 07:04:44.658441 2026] [:error] [pid 33172:tid 33240] [client 51.107.88.105:12545] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "admCDDn2G0IJw5EZY9leWwAAAFY"]
[Sat Apr 11 07:04:45.367094 2026] [:error] [pid 33172:tid 33219] [client 51.107.88.105:13134] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "admCDTn2G0IJw5EZY9leXwAAAEE"]
[Sat Apr 11 07:04:45.871324 2026] [:error] [pid 33173:tid 33246] [client 51.107.88.105:43017] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "admCDa8109xRDP2izWgDpAAAAIE"]
[Sat Apr 11 07:04:46.540861 2026] [:error] [pid 33288:tid 33300] [client 51.107.88.105:12579] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "admCDmJmwJFFPEgRHfF0zwAAAMo"]
[Sat Apr 11 07:04:47.193189 2026] [:error] [pid 33173:tid 33251] [client 51.107.88.105:43058] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "admCD68109xRDP2izWgDqgAAAIY"]
[Sat Apr 11 07:04:47.838169 2026] [:error] [pid 33173:tid 33265] [client 51.107.88.105:12425] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admCD68109xRDP2izWgDrgAAAJQ"]
[Sat Apr 11 07:04:48.396827 2026] [:error] [pid 33172:tid 33225] [client 51.107.88.105:60017] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admCEDn2G0IJw5EZY9leagAAAEc"]
[Sat Apr 11 07:04:48.915141 2026] [:error] [pid 33173:tid 33262] [client 51.107.88.105:13233] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admCEK8109xRDP2izWgDsAAAAJE"]
[Sat Apr 11 07:04:49.516963 2026] [:error] [pid 33288:tid 33312] [client 51.107.88.105:12675] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "admCEWJmwJFFPEgRHfF01gAAANY"]
[Sat Apr 11 07:04:50.135273 2026] [:error] [pid 33288:tid 33290] [client 51.107.88.105:12601] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admCEmJmwJFFPEgRHfF02QAAAMA"]
[Sat Apr 11 07:04:50.671810 2026] [:error] [pid 33171:tid 33210] [client 51.107.88.105:13144] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admCEroqTMlo30hcVw98HwAAABg"]
[Sat Apr 11 07:04:51.268133 2026] [:error] [pid 15244:tid 15247] [client 51.107.88.105:13074] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admCE4kdEsz5NeAq8w1iWQAAAQE"]
[Sat Apr 11 07:04:51.860921 2026] [:error] [pid 33171:tid 33188] [client 51.107.88.105:46264] [client 51.107.88.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "admCE7oqTMlo30hcVw98JAAAAAI"]
[Sat Apr 11 07:12:32.562951 2026] [proxy_fcgi:error] [pid 33288:tid 33291] [client 20.250.31.31:46137] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:12:32.800288 2026] [proxy_fcgi:error] [pid 33288:tid 33303] [client 20.250.31.31:46137] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:12:33.037826 2026] [proxy_fcgi:error] [pid 33288:tid 33295] [client 20.250.31.31:46137] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:12:33.275144 2026] [proxy_fcgi:error] [pid 33288:tid 33312] [client 20.250.31.31:46137] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:12:33.513809 2026] [proxy_fcgi:error] [pid 33288:tid 33308] [client 20.250.31.31:46137] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:12:33.747563 2026] [:error] [pid 33288:tid 33296] [client 20.250.31.31:46137] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admD4WJmwJFFPEgRHfF7LwAAAMY"]
[Sat Apr 11 07:12:34.212654 2026] [:error] [pid 33173:tid 33259] [client 20.250.31.31:50569] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admD4q8109xRDP2izWgIqgAAAI4"]
[Sat Apr 11 07:12:34.679367 2026] [:error] [pid 33173:tid 33264] [client 20.250.31.31:52726] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admD4q8109xRDP2izWgIrAAAAJM"]
[Sat Apr 11 07:12:35.144110 2026] [:error] [pid 15244:tid 15257] [client 20.250.31.31:14166] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admD44kdEsz5NeAq8w1r2wAAAQs"]
[Sat Apr 11 07:12:35.608641 2026] [:error] [pid 33173:tid 33251] [client 20.250.31.31:46090] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "admD468109xRDP2izWgItAAAAIY"]
[Sat Apr 11 07:12:36.072620 2026] [:error] [pid 33173:tid 33264] [client 20.250.31.31:33899] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "admD5K8109xRDP2izWgIvAAAAJM"]
[Sat Apr 11 07:12:36.538645 2026] [:error] [pid 15244:tid 15265] [client 20.250.31.31:33908] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "admD5IkdEsz5NeAq8w1r4AAAARM"]
[Sat Apr 11 07:12:37.002790 2026] [:error] [pid 15244:tid 15247] [client 20.250.31.31:50570] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "admD5YkdEsz5NeAq8w1r5AAAAQE"]
[Sat Apr 11 07:51:30.070901 2026] [proxy_fcgi:error] [pid 15244:tid 15249] [client 72.146.8.12:39280] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:51:30.304181 2026] [proxy_fcgi:error] [pid 15244:tid 15264] [client 72.146.8.12:39280] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:51:30.537985 2026] [proxy_fcgi:error] [pid 15244:tid 15246] [client 72.146.8.12:39280] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:51:30.771076 2026] [proxy_fcgi:error] [pid 15244:tid 15266] [client 72.146.8.12:39280] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:51:31.015153 2026] [proxy_fcgi:error] [pid 15244:tid 15261] [client 72.146.8.12:39280] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:51:31.246934 2026] [:error] [pid 15244:tid 15249] [client 72.146.8.12:39280] [client 72.146.8.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admNA4kdEsz5NeAq8w2X4wAAAQM"]
[Sat Apr 11 07:51:31.703636 2026] [:error] [pid 33171:tid 33192] [client 72.146.8.12:39245] [client 72.146.8.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admNA7oqTMlo30hcVw-TEgAAAAY"]
[Sat Apr 11 07:51:32.164393 2026] [:error] [pid 15244:tid 15267] [client 72.146.8.12:58843] [client 72.146.8.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admNBIkdEsz5NeAq8w2X5QAAARU"]
[Sat Apr 11 07:51:32.625635 2026] [:error] [pid 33288:tid 33300] [client 72.146.8.12:4417] [client 72.146.8.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new2.php"] [unique_id "admNBGJmwJFFPEgRHfGdigAAAMo"]
[Sat Apr 11 07:51:33.086090 2026] [:error] [pid 33173:tid 33248] [client 72.146.8.12:58820] [client 72.146.8.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mjq.php"] [unique_id "admNBa8109xRDP2izWgfjQAAAIM"]
[Sat Apr 11 07:55:04.401139 2026] [proxy_fcgi:error] [pid 33172:tid 33229] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:55:04.637676 2026] [proxy_fcgi:error] [pid 33172:tid 33232] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:55:04.873510 2026] [proxy_fcgi:error] [pid 33172:tid 33235] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:55:05.110290 2026] [proxy_fcgi:error] [pid 33172:tid 33226] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:55:05.347481 2026] [proxy_fcgi:error] [pid 33172:tid 33224] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:55:05.583271 2026] [proxy_fcgi:error] [pid 33172:tid 33231] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 07:55:05.819062 2026] [proxy_fcgi:error] [pid 33172:tid 33220] [client 20.111.36.240:51208] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:36:59.048620 2026] [proxy_fcgi:error] [pid 58288:tid 58307] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:36:59.308091 2026] [proxy_fcgi:error] [pid 58288:tid 58314] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:36:59.566161 2026] [proxy_fcgi:error] [pid 58288:tid 58304] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:36:59.824107 2026] [proxy_fcgi:error] [pid 58288:tid 58310] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:00.083321 2026] [proxy_fcgi:error] [pid 58288:tid 58302] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:00.342420 2026] [proxy_fcgi:error] [pid 58288:tid 58297] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:00.600553 2026] [proxy_fcgi:error] [pid 58288:tid 58298] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:00.861924 2026] [proxy_fcgi:error] [pid 58288:tid 58295] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:01.121617 2026] [proxy_fcgi:error] [pid 58288:tid 58291] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:01.379966 2026] [proxy_fcgi:error] [pid 58288:tid 58305] [client 20.215.250.26:43129] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:37:01.644191 2026] [:error] [pid 58288:tid 58301] [client 20.215.250.26:43129] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-104.php"] [unique_id "admzzXf_USd3ofWlU3soGwAAAEs"]
[Sat Apr 11 10:37:02.199578 2026] [:error] [pid 58195:tid 58235] [client 20.215.250.26:58619] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-104.php"] [unique_id "admzzgPvj06vzrczQjv9vQAAAIg"]
[Sat Apr 11 10:37:02.738859 2026] [:error] [pid 58194:tid 58217] [client 20.215.250.26:22137] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-104.php"] [unique_id "admzzqT4IiVFj-rhcaX_IgAAARI"]
[Sat Apr 11 10:37:03.284567 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:18324] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-104.php"] [unique_id "admzz3f_USd3ofWlU3soIgAAAEg"]
[Sat Apr 11 10:37:03.863902 2026] [:error] [pid 58195:tid 58244] [client 20.215.250.26:54830] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rzki.php"] [unique_id "admzzwPvj06vzrczQjv9vwAAAJE"]
[Sat Apr 11 10:37:04.381394 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:21048] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rzki.php"] [unique_id "admz0Hf_USd3ofWlU3soJAAAAEM"]
[Sat Apr 11 10:37:04.889648 2026] [:error] [pid 58288:tid 58294] [client 20.215.250.26:22125] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rzki.php"] [unique_id "admz0Hf_USd3ofWlU3soJgAAAEQ"]
[Sat Apr 11 10:37:05.399396 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:43104] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rzki.php"] [unique_id "admz0aT4IiVFj-rhcaX_MQAAAQ8"]
[Sat Apr 11 10:37:05.982087 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:36377] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "admz0Xf_USd3ofWlU3soKgAAAEI"]
[Sat Apr 11 10:37:06.518677 2026] [:error] [pid 58194:tid 58212] [client 20.215.250.26:51928] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "admz0qT4IiVFj-rhcaX_OAAAAQ0"]
[Sat Apr 11 10:37:07.059042 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:43121] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "admz03f_USd3ofWlU3soLgAAAEw"]
[Sat Apr 11 10:37:07.582987 2026] [:error] [pid 58196:tid 58277] [client 20.215.250.26:18339] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "admz0xmf0L5kNLP6dTlJbgAAABc"]
[Sat Apr 11 10:37:08.162009 2026] [:error] [pid 58288:tid 58306] [client 20.215.250.26:46401] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "admz1Hf_USd3ofWlU3soMQAAAFA"]
[Sat Apr 11 10:37:08.679393 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:54840] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "admz1Bmf0L5kNLP6dTlJdAAAABQ"]
[Sat Apr 11 10:37:09.210433 2026] [:error] [pid 58194:tid 58219] [client 20.215.250.26:17026] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "admz1aT4IiVFj-rhcaX_QgAAARQ"]
[Sat Apr 11 10:37:09.730780 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:36375] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d12.php"] [unique_id "admz1QPvj06vzrczQjv9yQAAAIc"]
[Sat Apr 11 10:37:10.237832 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:44904] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxh.php"] [unique_id "admz1nf_USd3ofWlU3soOAAAAEI"]
[Sat Apr 11 10:37:10.750960 2026] [:error] [pid 58196:tid 58271] [client 20.215.250.26:36401] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxh.php"] [unique_id "admz1hmf0L5kNLP6dTlJgQAAABE"]
[Sat Apr 11 10:37:11.285672 2026] [:error] [pid 58288:tid 58291] [client 20.215.250.26:54809] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxh.php"] [unique_id "admz13f_USd3ofWlU3soPQAAAEE"]
[Sat Apr 11 10:37:11.806725 2026] [:error] [pid 58195:tid 58240] [client 20.215.250.26:53414] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/okxh.php"] [unique_id "admz1wPvj06vzrczQjv9ywAAAI0"]
[Sat Apr 11 10:37:12.320916 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:58609] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "admz2KT4IiVFj-rhcaX_SgAAARE"]
[Sat Apr 11 10:37:12.837444 2026] [:error] [pid 58194:tid 58201] [client 20.215.250.26:43091] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "admz2KT4IiVFj-rhcaX_TAAAAQI"]
[Sat Apr 11 10:37:13.374914 2026] [:error] [pid 58196:tid 58258] [client 20.215.250.26:53438] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "admz2Rmf0L5kNLP6dTlJhgAAAAQ"]
[Sat Apr 11 10:37:13.905949 2026] [:error] [pid 58196:tid 58256] [client 20.215.250.26:46410] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55b76.php"] [unique_id "admz2Rmf0L5kNLP6dTlJiAAAAAI"]
[Sat Apr 11 10:37:14.410669 2026] [:error] [pid 58194:tid 58220] [client 20.215.250.26:58630] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "admz2qT4IiVFj-rhcaX_VQAAARU"]
[Sat Apr 11 10:37:14.928003 2026] [:error] [pid 58288:tid 58305] [client 20.215.250.26:36404] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "admz2nf_USd3ofWlU3soTgAAAE8"]
[Sat Apr 11 10:37:15.440572 2026] [:error] [pid 58195:tid 58227] [client 20.215.250.26:21029] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "admz2wPvj06vzrczQjv90wAAAIA"]
[Sat Apr 11 10:37:15.987961 2026] [:error] [pid 58195:tid 58239] [client 20.215.250.26:40545] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "admz2wPvj06vzrczQjv91gAAAIw"]
[Sat Apr 11 10:37:16.516535 2026] [:error] [pid 58195:tid 58235] [client 20.215.250.26:62700] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "admz3APvj06vzrczQjv92gAAAIg"]
[Sat Apr 11 10:37:17.058401 2026] [:error] [pid 58288:tid 58309] [client 20.215.250.26:62683] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "admz3Xf_USd3ofWlU3soVQAAAFM"]
[Sat Apr 11 10:37:17.571023 2026] [:error] [pid 58195:tid 58233] [client 20.215.250.26:64725] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "admz3QPvj06vzrczQjv93AAAAIY"]
[Sat Apr 11 10:37:18.093926 2026] [:error] [pid 58195:tid 58231] [client 20.215.250.26:22100] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maul.php"] [unique_id "admz3gPvj06vzrczQjv94AAAAIQ"]
[Sat Apr 11 10:37:18.611777 2026] [:error] [pid 58288:tid 58307] [client 20.215.250.26:46456] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "admz3nf_USd3ofWlU3soXAAAAFE"]
[Sat Apr 11 10:37:19.135561 2026] [:error] [pid 58194:tid 58217] [client 20.215.250.26:36402] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "admz36T4IiVFj-rhcaX_WQAAARI"]
[Sat Apr 11 10:37:19.652082 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:62681] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "admz36T4IiVFj-rhcaX_XgAAARg"]
[Sat Apr 11 10:37:20.158021 2026] [:error] [pid 58288:tid 58299] [client 20.215.250.26:57360] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5b9ac.php"] [unique_id "admz4Hf_USd3ofWlU3soZQAAAEk"]
[Sat Apr 11 10:37:20.680773 2026] [:error] [pid 58288:tid 58308] [client 20.215.250.26:58634] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "admz4Hf_USd3ofWlU3soaQAAAFI"]
[Sat Apr 11 10:37:21.194196 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:44906] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "admz4aT4IiVFj-rhcaX_ZwAAAQc"]
[Sat Apr 11 10:37:21.702283 2026] [:error] [pid 58196:tid 58256] [client 20.215.250.26:65195] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "admz4Rmf0L5kNLP6dTlJpAAAAAI"]
[Sat Apr 11 10:37:22.228270 2026] [:error] [pid 58196:tid 58260] [client 20.215.250.26:46414] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehe.php"] [unique_id "admz4hmf0L5kNLP6dTlJpgAAAAY"]
[Sat Apr 11 10:37:22.737843 2026] [:error] [pid 58194:tid 58207] [client 20.215.250.26:32459] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "admz4qT4IiVFj-rhcaX_bQAAAQg"]
[Sat Apr 11 10:37:23.259366 2026] [:error] [pid 58196:tid 58276] [client 20.215.250.26:58601] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "admz4xmf0L5kNLP6dTlJrAAAABY"]
[Sat Apr 11 10:37:23.814565 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:25768] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "admz46T4IiVFj-rhcaX_bgAAARg"]
[Sat Apr 11 10:37:24.337410 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:22088] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6kDPjgFTmvS.php"] [unique_id "admz5KT4IiVFj-rhcaX_cgAAARE"]
[Sat Apr 11 10:37:24.862764 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:32491] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "admz5Hf_USd3ofWlU3soeAAAAEU"]
[Sat Apr 11 10:37:25.378867 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:32641] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "admz5aT4IiVFj-rhcaX_eQAAAQw"]
[Sat Apr 11 10:37:25.892823 2026] [:error] [pid 58195:tid 58229] [client 20.215.250.26:25770] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "admz5QPvj06vzrczQjv96QAAAII"]
[Sat Apr 11 10:37:26.398273 2026] [:error] [pid 58196:tid 58256] [client 20.215.250.26:40575] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/varb.php"] [unique_id "admz5hmf0L5kNLP6dTlJvgAAAAI"]
[Sat Apr 11 10:37:26.911389 2026] [:error] [pid 58195:tid 58230] [client 20.215.250.26:62659] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "admz5gPvj06vzrczQjv97AAAAIM"]
[Sat Apr 11 10:37:27.424030 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:58611] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "admz53f_USd3ofWlU3soggAAAEU"]
[Sat Apr 11 10:37:27.962808 2026] [:error] [pid 58195:tid 58243] [client 20.215.250.26:62695] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "admz5wPvj06vzrczQjv98AAAAJA"]
[Sat Apr 11 10:37:28.475047 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:62697] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lm15.php"] [unique_id "admz6APvj06vzrczQjv98QAAAJQ"]
[Sat Apr 11 10:37:28.981764 2026] [:error] [pid 58288:tid 58291] [client 20.215.250.26:54826] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "admz6Hf_USd3ofWlU3soiwAAAEE"]
[Sat Apr 11 10:37:29.504594 2026] [:error] [pid 58196:tid 58257] [client 20.215.250.26:44481] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "admz6Rmf0L5kNLP6dTlJygAAAAM"]
[Sat Apr 11 10:37:30.066426 2026] [:error] [pid 58196:tid 58267] [client 20.215.250.26:53422] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "admz6hmf0L5kNLP6dTlJywAAAA0"]
[Sat Apr 11 10:37:30.577075 2026] [:error] [pid 58288:tid 58305] [client 20.215.250.26:32450] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clss.php"] [unique_id "admz6nf_USd3ofWlU3sokAAAAE8"]
[Sat Apr 11 10:37:31.105983 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:64712] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "admz66T4IiVFj-rhcaX_jwAAAQk"]
[Sat Apr 11 10:37:31.631905 2026] [:error] [pid 58196:tid 58262] [client 20.215.250.26:4361] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "admz6xmf0L5kNLP6dTlJzwAAAAg"]
[Sat Apr 11 10:37:32.137314 2026] [:error] [pid 58195:tid 58246] [client 20.215.250.26:32678] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "admz7APvj06vzrczQjv99QAAAJM"]
[Sat Apr 11 10:37:32.687283 2026] [:error] [pid 58195:tid 58244] [client 20.215.250.26:53502] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/44.php"] [unique_id "admz7APvj06vzrczQjv99wAAAJE"]
[Sat Apr 11 10:37:33.202663 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:46630] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "admz7Xf_USd3ofWlU3somQAAAEM"]
[Sat Apr 11 10:37:33.723263 2026] [:error] [pid 58196:tid 58255] [client 20.215.250.26:46645] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "admz7Rmf0L5kNLP6dTlJ0gAAAAE"]
[Sat Apr 11 10:37:34.246033 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:53423] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "admz7nf_USd3ofWlU3sopAAAAEM"]
[Sat Apr 11 10:37:34.760018 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:32495] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5e0a.php"] [unique_id "admz7qT4IiVFj-rhcaX_nwAAAQs"]
[Sat Apr 11 10:37:35.283504 2026] [:error] [pid 58196:tid 58260] [client 20.215.250.26:46457] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "admz7xmf0L5kNLP6dTlJ2AAAAAY"]
[Sat Apr 11 10:37:35.854630 2026] [:error] [pid 58196:tid 58259] [client 20.215.250.26:53388] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "admz7xmf0L5kNLP6dTlJ2wAAAAU"]
[Sat Apr 11 10:37:36.382088 2026] [:error] [pid 58288:tid 58311] [client 20.215.250.26:19913] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "admz8Hf_USd3ofWlU3soqwAAAFU"]
[Sat Apr 11 10:37:36.895866 2026] [:error] [pid 58195:tid 58243] [client 20.215.250.26:51632] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bo.php"] [unique_id "admz8APvj06vzrczQjv-AAAAAJA"]
[Sat Apr 11 10:37:37.442281 2026] [:error] [pid 58196:tid 58273] [client 20.215.250.26:22131] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "admz8Rmf0L5kNLP6dTlJ3wAAABM"]
[Sat Apr 11 10:37:37.961678 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:64721] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "admz8aT4IiVFj-rhcaX_qwAAAQw"]
[Sat Apr 11 10:37:38.525498 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:40665] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "admz8qT4IiVFj-rhcaX_sAAAAQM"]
[Sat Apr 11 10:37:39.070092 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:44533] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/56c53.php"] [unique_id "admz8wPvj06vzrczQjv-BgAAAIc"]
[Sat Apr 11 10:37:39.582320 2026] [:error] [pid 58195:tid 58233] [client 20.215.250.26:65173] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx78.php"] [unique_id "admz8wPvj06vzrczQjv-BwAAAIY"]
[Sat Apr 11 10:37:40.132636 2026] [:error] [pid 58195:tid 58245] [client 20.215.250.26:32748] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx78.php"] [unique_id "admz9APvj06vzrczQjv-DAAAAJI"]
[Sat Apr 11 10:37:40.640656 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:53445] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx78.php"] [unique_id "admz9KT4IiVFj-rhcaX_vwAAAQ4"]
[Sat Apr 11 10:37:41.178641 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:32473] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx78.php"] [unique_id "admz9QPvj06vzrczQjv-EAAAAJQ"]
[Sat Apr 11 10:37:41.730148 2026] [:error] [pid 58195:tid 58249] [client 20.215.250.26:7415] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admz9QPvj06vzrczQjv-EgAAAJY"]
[Sat Apr 11 10:37:42.240340 2026] [:error] [pid 58288:tid 58305] [client 20.215.250.26:42584] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admz9nf_USd3ofWlU3sougAAAE8"]
[Sat Apr 11 10:37:42.768072 2026] [:error] [pid 58196:tid 58270] [client 20.215.250.26:57462] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admz9hmf0L5kNLP6dTlJ6AAAABA"]
[Sat Apr 11 10:37:43.279434 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:54721] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "admz96T4IiVFj-rhcaX_zQAAAQM"]
[Sat Apr 11 10:37:43.796281 2026] [:error] [pid 58194:tid 58207] [client 20.215.250.26:57414] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admz96T4IiVFj-rhcaX_zwAAAQg"]
[Sat Apr 11 10:37:44.313283 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:40655] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admz-KT4IiVFj-rhcaX_0QAAAQA"]
[Sat Apr 11 10:37:44.850019 2026] [:error] [pid 58194:tid 58212] [client 20.215.250.26:54736] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admz-KT4IiVFj-rhcaX_0wAAAQ0"]
[Sat Apr 11 10:37:45.384300 2026] [:error] [pid 58194:tid 58220] [client 20.215.250.26:32738] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "admz-aT4IiVFj-rhcaX_2gAAARU"]
[Sat Apr 11 10:37:45.890661 2026] [:error] [pid 58196:tid 58263] [client 20.215.250.26:56493] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "admz-Rmf0L5kNLP6dTlJ6wAAAAk"]
[Sat Apr 11 10:37:46.398049 2026] [:error] [pid 58195:tid 58229] [client 20.215.250.26:19919] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "admz-gPvj06vzrczQjv-FgAAAII"]
[Sat Apr 11 10:37:46.916503 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:4352] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "admz-qT4IiVFj-rhcaX_4wAAAQ8"]
[Sat Apr 11 10:37:47.425768 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:54735] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "admz-6T4IiVFj-rhcaX_6AAAAQw"]
[Sat Apr 11 10:37:47.992053 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:4382] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "admz-6T4IiVFj-rhcaX_8AAAAQ8"]
[Sat Apr 11 10:37:48.513389 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:56500] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "admz_KT4IiVFj-rhcaX_-AAAAQA"]
[Sat Apr 11 10:37:49.032563 2026] [:error] [pid 58288:tid 58291] [client 20.215.250.26:40670] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "admz_Xf_USd3ofWlU3so0wAAAEE"]
[Sat Apr 11 10:37:49.540794 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:56511] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "admz_Xf_USd3ofWlU3so2AAAAEM"]
[Sat Apr 11 10:37:50.077049 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:46864] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "admz_nf_USd3ofWlU3so2wAAAEw"]
[Sat Apr 11 10:37:50.610654 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:32637] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "admz_qT4IiVFj-rhcaUABgAAAQA"]
[Sat Apr 11 10:37:51.124394 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:7387] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "admz_6T4IiVFj-rhcaUACQAAARY"]
[Sat Apr 11 10:37:51.645207 2026] [:error] [pid 58195:tid 58245] [client 20.215.250.26:40683] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "admz_wPvj06vzrczQjv-GQAAAJI"]
[Sat Apr 11 10:37:52.216194 2026] [:error] [pid 58288:tid 58308] [client 20.215.250.26:37995] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "adm0AHf_USd3ofWlU3so5QAAAFI"]
[Sat Apr 11 10:37:52.749119 2026] [:error] [pid 58194:tid 58222] [client 20.215.250.26:46860] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "adm0AKT4IiVFj-rhcaUACwAAARc"]
[Sat Apr 11 10:37:53.291799 2026] [:error] [pid 58194:tid 58209] [client 20.215.250.26:46632] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "adm0AaT4IiVFj-rhcaUAEQAAAQo"]
[Sat Apr 11 10:37:53.901851 2026] [:error] [pid 58288:tid 58309] [client 20.215.250.26:40700] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws49.php"] [unique_id "adm0AXf_USd3ofWlU3so8gAAAFM"]
[Sat Apr 11 10:37:54.409517 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:19938] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "adm0Anf_USd3ofWlU3so9AAAAEw"]
[Sat Apr 11 10:37:54.933473 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:7390] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "adm0AqT4IiVFj-rhcaUAFwAAAQc"]
[Sat Apr 11 10:37:55.440427 2026] [:error] [pid 58288:tid 58303] [client 20.215.250.26:40686] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "adm0A3f_USd3ofWlU3so-AAAAE0"]
[Sat Apr 11 10:37:55.960515 2026] [:error] [pid 58195:tid 58235] [client 20.215.250.26:40698] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "adm0AwPvj06vzrczQjv-JQAAAIg"]
[Sat Apr 11 10:37:56.479421 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:41415] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adm0BKT4IiVFj-rhcaUAHAAAAQk"]
[Sat Apr 11 10:37:57.019807 2026] [:error] [pid 58288:tid 58291] [client 20.215.250.26:5020] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adm0BXf_USd3ofWlU3so_gAAAEE"]
[Sat Apr 11 10:37:57.567062 2026] [:error] [pid 58196:tid 58273] [client 20.215.250.26:46908] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adm0BRmf0L5kNLP6dTlJ-QAAABM"]
[Sat Apr 11 10:37:58.092950 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:41417] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "adm0BqT4IiVFj-rhcaUAJAAAAQU"]
[Sat Apr 11 10:37:58.600624 2026] [:error] [pid 58196:tid 58258] [client 20.215.250.26:31792] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "adm0Bhmf0L5kNLP6dTlJ-wAAAAQ"]
[Sat Apr 11 10:37:59.122735 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:21778] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "adm0B6T4IiVFj-rhcaUAKgAAAQA"]
[Sat Apr 11 10:37:59.681727 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:35829] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "adm0B6T4IiVFj-rhcaUAKwAAARE"]
[Sat Apr 11 10:38:00.190809 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:37987] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gfd.php"] [unique_id "adm0CKT4IiVFj-rhcaUALgAAAQs"]
[Sat Apr 11 10:38:00.709827 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:21804] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/callback.php"] [unique_id "adm0CKT4IiVFj-rhcaUAMwAAAQc"]
[Sat Apr 11 10:38:01.253719 2026] [proxy_fcgi:error] [pid 58288:tid 58308] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:01.522665 2026] [proxy_fcgi:error] [pid 58288:tid 58311] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:01.780726 2026] [proxy_fcgi:error] [pid 58288:tid 58301] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:02.038391 2026] [proxy_fcgi:error] [pid 58288:tid 58312] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:02.307088 2026] [proxy_fcgi:error] [pid 58288:tid 58309] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:02.564355 2026] [proxy_fcgi:error] [pid 58288:tid 58293] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:02.823519 2026] [proxy_fcgi:error] [pid 58288:tid 58306] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:03.353260 2026] [proxy_fcgi:error] [pid 58288:tid 58311] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:03.612255 2026] [proxy_fcgi:error] [pid 58288:tid 58295] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:03.889582 2026] [proxy_fcgi:error] [pid 58288:tid 58312] [client 20.215.250.26:62812] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:38:04.142951 2026] [:error] [pid 58288:tid 58304] [client 20.215.250.26:62812] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x9.php"] [unique_id "adm0DHf_USd3ofWlU3spLgAAAE4"]
[Sat Apr 11 10:38:04.676096 2026] [:error] [pid 58194:tid 58212] [client 20.215.250.26:24792] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x9.php"] [unique_id "adm0DKT4IiVFj-rhcaUAOQAAAQ0"]
[Sat Apr 11 10:38:05.193578 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:35826] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x9.php"] [unique_id "adm0DaT4IiVFj-rhcaUAPgAAAQU"]
[Sat Apr 11 10:38:05.708136 2026] [:error] [pid 58288:tid 58290] [client 20.215.250.26:36289] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x9.php"] [unique_id "adm0DXf_USd3ofWlU3spOAAAAEA"]
[Sat Apr 11 10:38:06.226386 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:46900] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "adm0DqT4IiVFj-rhcaUARQAAARY"]
[Sat Apr 11 10:38:06.801117 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:38003] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "adm0DqT4IiVFj-rhcaUASgAAAQc"]
[Sat Apr 11 10:38:07.361722 2026] [:error] [pid 58194:tid 58217] [client 20.215.250.26:36294] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "adm0D6T4IiVFj-rhcaUATgAAARI"]
[Sat Apr 11 10:38:07.917026 2026] [:error] [pid 58288:tid 58300] [client 20.215.250.26:32594] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "adm0D3f_USd3ofWlU3spQAAAAEo"]
[Sat Apr 11 10:38:08.446437 2026] [:error] [pid 58195:tid 58251] [client 20.215.250.26:4103] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "adm0EAPvj06vzrczQjv-NwAAAJg"]
[Sat Apr 11 10:38:08.971496 2026] [:error] [pid 58196:tid 58257] [client 20.215.250.26:21801] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "adm0EBmf0L5kNLP6dTlKFgAAAAM"]
[Sat Apr 11 10:38:09.509924 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:62824] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "adm0EaT4IiVFj-rhcaUAWwAAARA"]
[Sat Apr 11 10:38:10.036761 2026] [:error] [pid 58196:tid 58276] [client 20.215.250.26:60201] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "adm0Ehmf0L5kNLP6dTlKGQAAABY"]
[Sat Apr 11 10:38:10.543506 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:34632] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adm0Enf_USd3ofWlU3spTQAAAEg"]
[Sat Apr 11 10:38:11.050931 2026] [:error] [pid 58196:tid 58258] [client 20.215.250.26:34657] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adm0Exmf0L5kNLP6dTlKHAAAAAQ"]
[Sat Apr 11 10:38:11.561018 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:46851] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adm0E6T4IiVFj-rhcaUAYwAAAQM"]
[Sat Apr 11 10:38:12.067983 2026] [:error] [pid 58288:tid 58303] [client 20.215.250.26:55235] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gdn.php"] [unique_id "adm0FHf_USd3ofWlU3spUQAAAE0"]
[Sat Apr 11 10:38:12.602397 2026] [:error] [pid 58195:tid 58237] [client 20.215.250.26:21814] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "adm0FAPvj06vzrczQjv-OwAAAIo"]
[Sat Apr 11 10:38:13.110783 2026] [:error] [pid 58195:tid 58233] [client 20.215.250.26:52009] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "adm0FQPvj06vzrczQjv-PAAAAIY"]
[Sat Apr 11 10:38:13.625644 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:55764] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "adm0FaT4IiVFj-rhcaUAaAAAARg"]
[Sat Apr 11 10:38:14.157610 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:55787] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "adm0FqT4IiVFj-rhcaUAbwAAAQw"]
[Sat Apr 11 10:38:14.672938 2026] [:error] [pid 58196:tid 58267] [client 20.215.250.26:34669] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/redixsx.php"] [unique_id "adm0Fhmf0L5kNLP6dTlKIwAAAA0"]
[Sat Apr 11 10:38:15.210107 2026] [:error] [pid 58196:tid 58276] [client 20.215.250.26:55283] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/redixsx.php"] [unique_id "adm0Fxmf0L5kNLP6dTlKJgAAABY"]
[Sat Apr 11 10:38:15.774464 2026] [:error] [pid 58288:tid 58297] [client 20.215.250.26:19938] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/redixsx.php"] [unique_id "adm0F3f_USd3ofWlU3spZQAAAEc"]
[Sat Apr 11 10:38:16.308210 2026] [:error] [pid 58196:tid 58254] [client 20.215.250.26:21815] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/redixsx.php"] [unique_id "adm0GBmf0L5kNLP6dTlKLAAAAAA"]
[Sat Apr 11 10:38:16.845386 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:24793] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cpp2.php"] [unique_id "adm0GBmf0L5kNLP6dTlKMAAAABQ"]
[Sat Apr 11 10:38:17.388352 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:22421] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cpp2.php"] [unique_id "adm0GaT4IiVFj-rhcaUAfAAAAQs"]
[Sat Apr 11 10:38:17.903880 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:47898] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cpp2.php"] [unique_id "adm0GaT4IiVFj-rhcaUAgAAAARM"]
[Sat Apr 11 10:38:18.424157 2026] [:error] [pid 58288:tid 58311] [client 20.215.250.26:46900] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cpp2.php"] [unique_id "adm0Gnf_USd3ofWlU3spZwAAAFU"]
[Sat Apr 11 10:38:19.024751 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:47874] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admlo.php"] [unique_id "adm0GwPvj06vzrczQjv-QgAAAJQ"]
[Sat Apr 11 10:38:19.554026 2026] [:error] [pid 58195:tid 58241] [client 20.215.250.26:59827] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admlo.php"] [unique_id "adm0GwPvj06vzrczQjv-RQAAAI4"]
[Sat Apr 11 10:38:20.095051 2026] [:error] [pid 58195:tid 58244] [client 20.215.250.26:19484] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admlo.php"] [unique_id "adm0HAPvj06vzrczQjv-TQAAAJE"]
[Sat Apr 11 10:38:20.623435 2026] [:error] [pid 58288:tid 58308] [client 20.215.250.26:49046] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admlo.php"] [unique_id "adm0HHf_USd3ofWlU3spbQAAAFI"]
[Sat Apr 11 10:38:21.182473 2026] [:error] [pid 58288:tid 58314] [client 20.215.250.26:35960] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-ajax.php"] [unique_id "adm0HXf_USd3ofWlU3spcwAAAFg"]
[Sat Apr 11 10:38:21.787551 2026] [:error] [pid 58288:tid 58297] [client 20.215.250.26:19485] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-ajax.php"] [unique_id "adm0HXf_USd3ofWlU3spdAAAAEc"]
[Sat Apr 11 10:38:22.379471 2026] [:error] [pid 58195:tid 58251] [client 20.215.250.26:48321] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-ajax.php"] [unique_id "adm0HgPvj06vzrczQjv-UwAAAJg"]
[Sat Apr 11 10:38:22.911459 2026] [:error] [pid 58195:tid 58228] [client 20.215.250.26:4574] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin-ajax.php"] [unique_id "adm0HgPvj06vzrczQjv-VQAAAIE"]
[Sat Apr 11 10:38:23.446998 2026] [:error] [pid 58195:tid 58230] [client 20.215.250.26:62770] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amthd.php"] [unique_id "adm0HwPvj06vzrczQjv-WQAAAIM"]
[Sat Apr 11 10:38:23.974314 2026] [:error] [pid 58194:tid 58201] [client 20.215.250.26:48351] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amthd.php"] [unique_id "adm0H6T4IiVFj-rhcaUAjQAAAQI"]
[Sat Apr 11 10:38:24.646912 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:48958] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amthd.php"] [unique_id "adm0IHf_USd3ofWlU3spewAAAEI"]
[Sat Apr 11 10:38:25.224649 2026] [:error] [pid 58194:tid 58217] [client 20.215.250.26:28663] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amthd.php"] [unique_id "adm0IaT4IiVFj-rhcaUAlAAAARI"]
[Sat Apr 11 10:38:25.733286 2026] [:error] [pid 58196:tid 58254] [client 20.215.250.26:35955] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adm0IRmf0L5kNLP6dTlKQAAAAAA"]
[Sat Apr 11 10:38:26.300929 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:54129] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adm0Ihmf0L5kNLP6dTlKQgAAABQ"]
[Sat Apr 11 10:38:26.872978 2026] [:error] [pid 58196:tid 58276] [client 20.215.250.26:61559] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adm0Ihmf0L5kNLP6dTlKRQAAABY"]
[Sat Apr 11 10:38:27.404751 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:21202] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8xyz.php"] [unique_id "adm0I6T4IiVFj-rhcaUAoAAAAQQ"]
[Sat Apr 11 10:38:27.957894 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:48843] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "adm0I6T4IiVFj-rhcaUAowAAARM"]
[Sat Apr 11 10:38:28.470546 2026] [:error] [pid 58196:tid 58273] [client 20.215.250.26:54082] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "adm0JBmf0L5kNLP6dTlKSQAAABM"]
[Sat Apr 11 10:38:29.002430 2026] [:error] [pid 58288:tid 58310] [client 20.215.250.26:50260] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "adm0JXf_USd3ofWlU3spigAAAFQ"]
[Sat Apr 11 10:38:29.531407 2026] [:error] [pid 58288:tid 58299] [client 20.215.250.26:28636] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "adm0JXf_USd3ofWlU3spjAAAAEk"]
[Sat Apr 11 10:38:30.039468 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:35729] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws68.php"] [unique_id "adm0JqT4IiVFj-rhcaUArgAAAQU"]
[Sat Apr 11 10:38:30.554128 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:48883] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws68.php"] [unique_id "adm0JqT4IiVFj-rhcaUAsQAAARM"]
[Sat Apr 11 10:38:31.084075 2026] [:error] [pid 58194:tid 58219] [client 20.215.250.26:48337] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws68.php"] [unique_id "adm0J6T4IiVFj-rhcaUAswAAARQ"]
[Sat Apr 11 10:38:31.606914 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:21238] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws68.php"] [unique_id "adm0J6T4IiVFj-rhcaUAuQAAAQ8"]
[Sat Apr 11 10:38:32.141507 2026] [:error] [pid 58196:tid 58265] [client 20.215.250.26:34353] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "adm0KBmf0L5kNLP6dTlKTQAAAAs"]
[Sat Apr 11 10:38:32.683503 2026] [:error] [pid 58196:tid 58257] [client 20.215.250.26:30544] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "adm0KBmf0L5kNLP6dTlKTgAAAAM"]
[Sat Apr 11 10:38:33.212946 2026] [:error] [pid 58195:tid 58248] [client 20.215.250.26:48348] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "adm0KQPvj06vzrczQjv-aQAAAJU"]
[Sat Apr 11 10:38:33.749491 2026] [:error] [pid 58196:tid 58270] [client 20.215.250.26:49036] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "adm0KRmf0L5kNLP6dTlKUQAAABA"]
[Sat Apr 11 10:38:34.307299 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:36404] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/njxjtooj.php"] [unique_id "adm0KgPvj06vzrczQjv-bwAAAJQ"]
[Sat Apr 11 10:38:34.856176 2026] [:error] [pid 58288:tid 58309] [client 20.215.250.26:30026] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/njxjtooj.php"] [unique_id "adm0Knf_USd3ofWlU3spnQAAAFM"]
[Sat Apr 11 10:38:35.375910 2026] [:error] [pid 58288:tid 58304] [client 20.215.250.26:19505] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/njxjtooj.php"] [unique_id "adm0K3f_USd3ofWlU3spoAAAAE4"]
[Sat Apr 11 10:38:35.917362 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:30055] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/njxjtooj.php"] [unique_id "adm0K6T4IiVFj-rhcaUA1gAAARE"]
[Sat Apr 11 10:38:36.428411 2026] [:error] [pid 58288:tid 58291] [client 20.215.250.26:34337] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adm0LHf_USd3ofWlU3spowAAAEE"]
[Sat Apr 11 10:38:36.950025 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:56321] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adm0LKT4IiVFj-rhcaUA4QAAAQ4"]
[Sat Apr 11 10:38:37.488356 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:28657] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adm0LaT4IiVFj-rhcaUA4wAAAQU"]
[Sat Apr 11 10:38:38.021010 2026] [:error] [pid 58288:tid 58296] [client 20.215.250.26:29813] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "adm0Lnf_USd3ofWlU3spqAAAAEY"]
[Sat Apr 11 10:38:38.555516 2026] [:error] [pid 58288:tid 58304] [client 20.215.250.26:35742] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "adm0Lnf_USd3ofWlU3spqwAAAE4"]
[Sat Apr 11 10:38:39.184633 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:30068] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "adm0L6T4IiVFj-rhcaUA7QAAAQ8"]
[Sat Apr 11 10:38:39.727298 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:18797] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "adm0L6T4IiVFj-rhcaUA9AAAARg"]
[Sat Apr 11 10:38:40.267683 2026] [:error] [pid 58288:tid 58303] [client 20.215.250.26:50322] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "adm0MHf_USd3ofWlU3spsgAAAE0"]
[Sat Apr 11 10:38:40.785779 2026] [:error] [pid 58196:tid 58257] [client 20.215.250.26:53735] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iyy.php"] [unique_id "adm0MBmf0L5kNLP6dTlKWAAAAAM"]
[Sat Apr 11 10:38:41.325472 2026] [:error] [pid 58288:tid 58314] [client 20.215.250.26:58148] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iyy.php"] [unique_id "adm0MXf_USd3ofWlU3sptgAAAFg"]
[Sat Apr 11 10:38:41.872513 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:61535] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iyy.php"] [unique_id "adm0MaT4IiVFj-rhcaUA_wAAAQA"]
[Sat Apr 11 10:38:42.390000 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:36804] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iyy.php"] [unique_id "adm0MqT4IiVFj-rhcaUBAAAAAQw"]
[Sat Apr 11 10:38:42.945150 2026] [:error] [pid 58196:tid 58277] [client 20.215.250.26:53740] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "adm0Mhmf0L5kNLP6dTlKWgAAABc"]
[Sat Apr 11 10:38:43.492484 2026] [:error] [pid 58195:tid 58238] [client 20.215.250.26:50343] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "adm0MwPvj06vzrczQjv-hgAAAIs"]
[Sat Apr 11 10:38:44.002314 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:35945] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "adm0NKT4IiVFj-rhcaUBCgAAARY"]
[Sat Apr 11 10:38:44.547952 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:35734] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "adm0NAPvj06vzrczQjv-iwAAAIc"]
[Sat Apr 11 10:38:45.192658 2026] [:error] [pid 58288:tid 58307] [client 20.215.250.26:21847] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blsvgeyaza.php"] [unique_id "adm0NXf_USd3ofWlU3spwQAAAFE"]
[Sat Apr 11 10:38:45.748734 2026] [:error] [pid 58195:tid 58231] [client 20.215.250.26:21849] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blsvgeyaza.php"] [unique_id "adm0NQPvj06vzrczQjv-jQAAAIQ"]
[Sat Apr 11 10:38:46.317315 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:50331] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blsvgeyaza.php"] [unique_id "adm0NqT4IiVFj-rhcaUBEwAAAQc"]
[Sat Apr 11 10:38:46.901377 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:29806] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blsvgeyaza.php"] [unique_id "adm0NqT4IiVFj-rhcaUBFgAAAQk"]
[Sat Apr 11 10:38:47.407884 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:28331] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gqhyti.php"] [unique_id "adm0Nxmf0L5kNLP6dTlKYwAAABQ"]
[Sat Apr 11 10:38:47.919892 2026] [:error] [pid 58196:tid 58269] [client 20.215.250.26:32041] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gqhyti.php"] [unique_id "adm0Nxmf0L5kNLP6dTlKZwAAAA8"]
[Sat Apr 11 10:38:48.423616 2026] [:error] [pid 58196:tid 58278] [client 20.215.250.26:56346] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gqhyti.php"] [unique_id "adm0OBmf0L5kNLP6dTlKawAAABg"]
[Sat Apr 11 10:38:49.002882 2026] [:error] [pid 58196:tid 58266] [client 20.215.250.26:32028] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gqhyti.php"] [unique_id "adm0ORmf0L5kNLP6dTlKbwAAAAw"]
[Sat Apr 11 10:38:49.508713 2026] [:error] [pid 58195:tid 58241] [client 20.215.250.26:53745] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoxxi.php"] [unique_id "adm0OQPvj06vzrczQjv-nwAAAI4"]
[Sat Apr 11 10:38:50.023782 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:56325] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoxxi.php"] [unique_id "adm0OqT4IiVFj-rhcaUBGQAAAQU"]
[Sat Apr 11 10:38:50.540026 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:61999] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoxxi.php"] [unique_id "adm0OqT4IiVFj-rhcaUBGwAAAQc"]
[Sat Apr 11 10:38:51.049894 2026] [:error] [pid 58194:tid 58201] [client 20.215.250.26:30069] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/autoxxi.php"] [unique_id "adm0O6T4IiVFj-rhcaUBIAAAAQI"]
[Sat Apr 11 10:38:51.566594 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:4922] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1144452145_error_log.php"] [unique_id "adm0O6T4IiVFj-rhcaUBIwAAAQM"]
[Sat Apr 11 10:38:52.087045 2026] [:error] [pid 58195:tid 58235] [client 20.215.250.26:53739] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1144452145_error_log.php"] [unique_id "adm0PAPvj06vzrczQjv-pAAAAIg"]
[Sat Apr 11 10:38:52.597799 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:28609] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1144452145_error_log.php"] [unique_id "adm0PKT4IiVFj-rhcaUBJwAAARA"]
[Sat Apr 11 10:38:53.135847 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:40757] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1144452145_error_log.php"] [unique_id "adm0PaT4IiVFj-rhcaUBLAAAARY"]
[Sat Apr 11 10:38:53.675039 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:36817] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "adm0PXf_USd3ofWlU3spzQAAAEM"]
[Sat Apr 11 10:38:54.190426 2026] [:error] [pid 58288:tid 58314] [client 20.215.250.26:30028] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "adm0Pnf_USd3ofWlU3sp0AAAAFg"]
[Sat Apr 11 10:38:54.733617 2026] [:error] [pid 58288:tid 58299] [client 20.215.250.26:35963] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "adm0Pnf_USd3ofWlU3sp1gAAAEk"]
[Sat Apr 11 10:38:55.273291 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:40727] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "adm0P3f_USd3ofWlU3sp2wAAAEM"]
[Sat Apr 11 10:38:55.785874 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:56364] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asyn-upload.php"] [unique_id "adm0P6T4IiVFj-rhcaUBNgAAAQ4"]
[Sat Apr 11 10:38:56.290747 2026] [:error] [pid 58196:tid 58262] [client 20.215.250.26:40752] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asyn-upload.php"] [unique_id "adm0QBmf0L5kNLP6dTlKfQAAAAg"]
[Sat Apr 11 10:38:56.808065 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:53732] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asyn-upload.php"] [unique_id "adm0QKT4IiVFj-rhcaUBPAAAARY"]
[Sat Apr 11 10:38:57.347380 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:56358] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-asyn-upload.php"] [unique_id "adm0QXf_USd3ofWlU3sp7QAAAEw"]
[Sat Apr 11 10:38:57.884410 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:56336] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/schallfuns.php"] [unique_id "adm0QXf_USd3ofWlU3sp8AAAAEI"]
[Sat Apr 11 10:38:58.390041 2026] [:error] [pid 58196:tid 58278] [client 20.215.250.26:4909] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/schallfuns.php"] [unique_id "adm0Qhmf0L5kNLP6dTlKgAAAABg"]
[Sat Apr 11 10:38:58.912272 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:29818] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/schallfuns.php"] [unique_id "adm0Qnf_USd3ofWlU3sp8wAAAEg"]
[Sat Apr 11 10:38:59.428732 2026] [:error] [pid 58196:tid 58270] [client 20.215.250.26:56826] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/schallfuns.php"] [unique_id "adm0Qxmf0L5kNLP6dTlKgwAAABA"]
[Sat Apr 11 10:38:59.998671 2026] [:error] [pid 58196:tid 58271] [client 20.215.250.26:48893] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adm0Qxmf0L5kNLP6dTlKhAAAABE"]
[Sat Apr 11 10:39:00.518620 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:50307] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adm0RKT4IiVFj-rhcaUBSwAAARg"]
[Sat Apr 11 10:39:01.025670 2026] [:error] [pid 58288:tid 58313] [client 20.215.250.26:35743] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adm0RXf_USd3ofWlU3sp9wAAAFc"]
[Sat Apr 11 10:39:01.543423 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:50323] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "adm0RRmf0L5kNLP6dTlKjAAAABQ"]
[Sat Apr 11 10:39:02.073158 2026] [:error] [pid 58196:tid 58263] [client 20.215.250.26:21884] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clasa99.php"] [unique_id "adm0Rhmf0L5kNLP6dTlKjgAAAAk"]
[Sat Apr 11 10:39:02.580959 2026] [:error] [pid 58194:tid 58222] [client 20.215.250.26:28298] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clasa99.php"] [unique_id "adm0RqT4IiVFj-rhcaUBUwAAARc"]
[Sat Apr 11 10:39:03.115043 2026] [proxy_fcgi:error] [pid 58194:tid 58221] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:03.374801 2026] [proxy_fcgi:error] [pid 58194:tid 58223] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:03.634968 2026] [proxy_fcgi:error] [pid 58194:tid 58214] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:03.893192 2026] [proxy_fcgi:error] [pid 58194:tid 58215] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:04.150523 2026] [proxy_fcgi:error] [pid 58194:tid 58218] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:04.408028 2026] [proxy_fcgi:error] [pid 58194:tid 58211] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:04.667190 2026] [proxy_fcgi:error] [pid 58194:tid 58216] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:04.926119 2026] [proxy_fcgi:error] [pid 58194:tid 58217] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:05.183562 2026] [proxy_fcgi:error] [pid 58194:tid 58206] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:05.698583 2026] [proxy_fcgi:error] [pid 58194:tid 58212] [client 20.215.250.26:29764] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:39:05.952647 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:29764] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "adm0SaT4IiVFj-rhcaUBcgAAAQk"]
[Sat Apr 11 10:39:06.469657 2026] [:error] [pid 58194:tid 58205] [client 20.215.250.26:54966] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "adm0SqT4IiVFj-rhcaUBdQAAAQY"]
[Sat Apr 11 10:39:06.991148 2026] [:error] [pid 58194:tid 58209] [client 20.215.250.26:58125] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "adm0SqT4IiVFj-rhcaUBegAAAQo"]
[Sat Apr 11 10:39:07.504977 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:53741] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "adm0SwPvj06vzrczQjv-rwAAAJQ"]
[Sat Apr 11 10:39:08.030095 2026] [:error] [pid 58288:tid 58290] [client 20.215.250.26:36842] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "adm0THf_USd3ofWlU3sqCwAAAEA"]
[Sat Apr 11 10:39:08.550778 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:36822] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "adm0THf_USd3ofWlU3sqDAAAAEg"]
[Sat Apr 11 10:39:09.073391 2026] [:error] [pid 58288:tid 58306] [client 20.215.250.26:16902] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "adm0TXf_USd3ofWlU3sqDQAAAFA"]
[Sat Apr 11 10:39:09.621492 2026] [:error] [pid 58196:tid 58263] [client 20.215.250.26:56813] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "adm0TRmf0L5kNLP6dTlKlwAAAAk"]
[Sat Apr 11 10:39:10.145190 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:21866] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-mancvgertdxz.php"] [unique_id "adm0TqT4IiVFj-rhcaUBhgAAAQ8"]
[Sat Apr 11 10:39:10.663907 2026] [:error] [pid 58196:tid 58269] [client 20.215.250.26:30022] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-mancvgertdxz.php"] [unique_id "adm0Thmf0L5kNLP6dTlKmgAAAA8"]
[Sat Apr 11 10:39:11.182680 2026] [:error] [pid 58288:tid 58300] [client 20.215.250.26:29770] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-mancvgertdxz.php"] [unique_id "adm0T3f_USd3ofWlU3sqEQAAAEo"]
[Sat Apr 11 10:39:11.705797 2026] [:error] [pid 58195:tid 58246] [client 20.215.250.26:56783] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-mancvgertdxz.php"] [unique_id "adm0TwPvj06vzrczQjv-tQAAAJM"]
[Sat Apr 11 10:39:12.216165 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:23224] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "adm0UKT4IiVFj-rhcaUBkQAAARY"]
[Sat Apr 11 10:39:12.742347 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:62003] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "adm0UKT4IiVFj-rhcaUBlgAAAQw"]
[Sat Apr 11 10:39:13.250478 2026] [:error] [pid 58194:tid 58205] [client 20.215.250.26:27433] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "adm0UaT4IiVFj-rhcaUBmwAAAQY"]
[Sat Apr 11 10:39:13.822363 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:23206] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "adm0UaT4IiVFj-rhcaUBpQAAARg"]
[Sat Apr 11 10:39:14.362304 2026] [:error] [pid 58195:tid 58231] [client 20.215.250.26:36854] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "adm0UgPvj06vzrczQjv-wAAAAIQ"]
[Sat Apr 11 10:39:14.885884 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:34314] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "adm0UqT4IiVFj-rhcaUBxwAAAQk"]
[Sat Apr 11 10:39:15.391542 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:29801] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "adm0U3f_USd3ofWlU3sqFwAAAEU"]
[Sat Apr 11 10:39:15.931426 2026] [:error] [pid 58194:tid 58209] [client 20.215.250.26:34347] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "adm0U6T4IiVFj-rhcaUB1QAAAQo"]
[Sat Apr 11 10:39:16.445152 2026] [:error] [pid 58288:tid 58308] [client 20.215.250.26:23224] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.qiodetme.php"] [unique_id "adm0VHf_USd3ofWlU3sqHQAAAFI"]
[Sat Apr 11 10:39:16.973768 2026] [:error] [pid 58194:tid 58217] [client 20.215.250.26:56355] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.qiodetme.php"] [unique_id "adm0VKT4IiVFj-rhcaUB2QAAARI"]
[Sat Apr 11 10:39:17.495200 2026] [:error] [pid 58196:tid 58269] [client 20.215.250.26:4906] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.qiodetme.php"] [unique_id "adm0VRmf0L5kNLP6dTlKpgAAAA8"]
[Sat Apr 11 10:39:18.028487 2026] [:error] [pid 58288:tid 58312] [client 20.215.250.26:29823] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.qiodetme.php"] [unique_id "adm0Vnf_USd3ofWlU3sqJgAAAFY"]
[Sat Apr 11 10:39:18.539060 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:18813] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sodas.php"] [unique_id "adm0VqT4IiVFj-rhcaUB3wAAAQw"]
[Sat Apr 11 10:39:19.064310 2026] [:error] [pid 58288:tid 58290] [client 20.215.250.26:28311] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sodas.php"] [unique_id "adm0V3f_USd3ofWlU3sqKQAAAEA"]
[Sat Apr 11 10:39:19.577900 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:36844] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sodas.php"] [unique_id "adm0V3f_USd3ofWlU3sqKwAAAEg"]
[Sat Apr 11 10:39:20.115838 2026] [:error] [pid 58196:tid 58255] [client 20.215.250.26:29781] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sodas.php"] [unique_id "adm0WBmf0L5kNLP6dTlKrgAAAAE"]
[Sat Apr 11 10:39:20.627057 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:54915] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "adm0WKT4IiVFj-rhcaUB6QAAAQk"]
[Sat Apr 11 10:39:21.143587 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:28319] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "adm0WaT4IiVFj-rhcaUB7gAAARM"]
[Sat Apr 11 10:39:21.676305 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:50358] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "adm0WaT4IiVFj-rhcaUB9AAAAQw"]
[Sat Apr 11 10:39:22.199884 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:21858] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "adm0WqT4IiVFj-rhcaUB-QAAAQk"]
[Sat Apr 11 10:39:22.754554 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:40720] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws81.php"] [unique_id "adm0WqT4IiVFj-rhcaUB_QAAAQU"]
[Sat Apr 11 10:39:23.275763 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:48837] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws81.php"] [unique_id "adm0W6T4IiVFj-rhcaUCAQAAARE"]
[Sat Apr 11 10:39:23.821109 2026] [:error] [pid 58196:tid 58257] [client 20.215.250.26:29799] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws81.php"] [unique_id "adm0Wxmf0L5kNLP6dTlKtAAAAAM"]
[Sat Apr 11 10:39:24.354436 2026] [:error] [pid 58195:tid 58236] [client 20.215.250.26:61520] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws81.php"] [unique_id "adm0XAPvj06vzrczQjv-zAAAAIk"]
[Sat Apr 11 10:39:24.921998 2026] [:error] [pid 58195:tid 58241] [client 20.215.250.26:58156] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "adm0XAPvj06vzrczQjv-zwAAAI4"]
[Sat Apr 11 10:39:25.449175 2026] [:error] [pid 58196:tid 58262] [client 20.215.250.26:40736] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "adm0XRmf0L5kNLP6dTlKugAAAAg"]
[Sat Apr 11 10:39:26.025489 2026] [:error] [pid 58196:tid 58265] [client 20.215.250.26:36812] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "adm0Xhmf0L5kNLP6dTlKvgAAAAs"]
[Sat Apr 11 10:39:26.542997 2026] [:error] [pid 58288:tid 58308] [client 20.215.250.26:28329] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "adm0Xnf_USd3ofWlU3sqPgAAAFI"]
[Sat Apr 11 10:39:27.079473 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:36856] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adm0X6T4IiVFj-rhcaUCHgAAAQQ"]
[Sat Apr 11 10:39:27.667979 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:36849] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adm0X3f_USd3ofWlU3sqRwAAAEU"]
[Sat Apr 11 10:39:28.201078 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:58175] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adm0YKT4IiVFj-rhcaUCIwAAAQs"]
[Sat Apr 11 10:39:28.716367 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:27889] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "adm0YKT4IiVFj-rhcaUCKgAAARM"]
[Sat Apr 11 10:39:29.269613 2026] [:error] [pid 58196:tid 58259] [client 20.215.250.26:34305] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "adm0YRmf0L5kNLP6dTlKwAAAAAU"]
[Sat Apr 11 10:39:29.793084 2026] [:error] [pid 58288:tid 58310] [client 20.215.250.26:21838] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "adm0YXf_USd3ofWlU3sqUgAAAFQ"]
[Sat Apr 11 10:39:30.365687 2026] [:error] [pid 58288:tid 58301] [client 20.215.250.26:56329] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "adm0Ynf_USd3ofWlU3sqUwAAAEs"]
[Sat Apr 11 10:39:30.902371 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:28334] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "adm0YqT4IiVFj-rhcaUCOgAAAQU"]
[Sat Apr 11 10:39:31.411952 2026] [:error] [pid 58196:tid 58256] [client 20.215.250.26:21873] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "adm0Yxmf0L5kNLP6dTlKwgAAAAI"]
[Sat Apr 11 10:39:31.969369 2026] [:error] [pid 58194:tid 58209] [client 20.215.250.26:35731] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "adm0Y6T4IiVFj-rhcaUCQQAAAQo"]
[Sat Apr 11 10:39:32.492009 2026] [:error] [pid 58196:tid 58270] [client 20.215.250.26:61517] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "adm0ZBmf0L5kNLP6dTlKxgAAABA"]
[Sat Apr 11 10:39:33.007450 2026] [:error] [pid 58288:tid 58307] [client 20.215.250.26:28292] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vx.php"] [unique_id "adm0ZXf_USd3ofWlU3sqXAAAAFE"]
[Sat Apr 11 10:39:33.535326 2026] [:error] [pid 58288:tid 58296] [client 20.215.250.26:40751] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adm0ZXf_USd3ofWlU3sqYAAAAEY"]
[Sat Apr 11 10:39:34.052744 2026] [:error] [pid 58196:tid 58263] [client 20.215.250.26:62004] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adm0Zhmf0L5kNLP6dTlKywAAAAk"]
[Sat Apr 11 10:39:34.570732 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:29776] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adm0ZqT4IiVFj-rhcaUCVQAAARA"]
[Sat Apr 11 10:39:35.145269 2026] [:error] [pid 58288:tid 58301] [client 20.215.250.26:36810] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "adm0Z3f_USd3ofWlU3sqZgAAAEs"]
[Sat Apr 11 10:39:35.670325 2026] [:error] [pid 58195:tid 58239] [client 20.215.250.26:28668] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "adm0ZwPvj06vzrczQjv-1gAAAIw"]
[Sat Apr 11 10:39:36.181998 2026] [:error] [pid 58194:tid 58219] [client 20.215.250.26:28351] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "adm0aKT4IiVFj-rhcaUCZgAAARQ"]
[Sat Apr 11 10:39:36.706341 2026] [:error] [pid 58195:tid 58231] [client 20.215.250.26:56357] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "adm0aAPvj06vzrczQjv-2gAAAIQ"]
[Sat Apr 11 10:39:37.271407 2026] [:error] [pid 58288:tid 58309] [client 20.215.250.26:56365] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "adm0aXf_USd3ofWlU3sqagAAAFM"]
[Sat Apr 11 10:39:37.843356 2026] [:error] [pid 58288:tid 58313] [client 20.215.250.26:35766] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adm0aXf_USd3ofWlU3sqbQAAAFc"]
[Sat Apr 11 10:39:38.377481 2026] [:error] [pid 58288:tid 58301] [client 20.215.250.26:61988] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adm0anf_USd3ofWlU3sqcQAAAEs"]
[Sat Apr 11 10:39:38.890960 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:40738] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adm0anf_USd3ofWlU3sqdQAAAEM"]
[Sat Apr 11 10:39:39.394880 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:35725] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "adm0a3f_USd3ofWlU3sqewAAAEU"]
[Sat Apr 11 10:39:39.924186 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:48878] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "adm0a3f_USd3ofWlU3sqfgAAAEw"]
[Sat Apr 11 10:39:40.430192 2026] [:error] [pid 58195:tid 58243] [client 20.215.250.26:50314] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "adm0bAPvj06vzrczQjv-5AAAAJA"]
[Sat Apr 11 10:39:40.950171 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:21875] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "adm0bKT4IiVFj-rhcaUCfgAAARM"]
[Sat Apr 11 10:39:41.460803 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:53696] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws83.php"] [unique_id "adm0baT4IiVFj-rhcaUCggAAAQQ"]
[Sat Apr 11 10:39:42.018569 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:29822] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "adm0bqT4IiVFj-rhcaUChgAAAQ8"]
[Sat Apr 11 10:39:42.534080 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:30032] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "adm0bgPvj06vzrczQjv-5QAAAIc"]
[Sat Apr 11 10:39:43.047121 2026] [:error] [pid 58195:tid 58238] [client 20.215.250.26:50306] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "adm0bwPvj06vzrczQjv-5gAAAIs"]
[Sat Apr 11 10:39:43.588903 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:50304] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "adm0b6T4IiVFj-rhcaUCjAAAAQQ"]
[Sat Apr 11 10:39:44.126904 2026] [:error] [pid 58195:tid 58250] [client 20.215.250.26:58124] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adm0cAPvj06vzrczQjv-6QAAAJc"]
[Sat Apr 11 10:39:44.654420 2026] [:error] [pid 58195:tid 58248] [client 20.215.250.26:4883] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adm0cAPvj06vzrczQjv-6wAAAJU"]
[Sat Apr 11 10:39:45.228589 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:18756] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adm0caT4IiVFj-rhcaUClAAAARA"]
[Sat Apr 11 10:39:45.774289 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:31565] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "adm0caT4IiVFj-rhcaUCmgAAAQQ"]
[Sat Apr 11 10:39:46.338554 2026] [:error] [pid 58194:tid 58219] [client 20.215.250.26:58152] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "adm0cqT4IiVFj-rhcaUCnwAAARQ"]
[Sat Apr 11 10:39:46.888801 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:43573] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "adm0cqT4IiVFj-rhcaUCogAAARA"]
[Sat Apr 11 10:39:47.405711 2026] [:error] [pid 58195:tid 58237] [client 20.215.250.26:54970] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "adm0cwPvj06vzrczQjv-7QAAAIo"]
[Sat Apr 11 10:39:47.926269 2026] [:error] [pid 58195:tid 58240] [client 20.215.250.26:18755] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "adm0cwPvj06vzrczQjv-7gAAAI0"]
[Sat Apr 11 10:39:48.431877 2026] [:error] [pid 58196:tid 58267] [client 20.215.250.26:18809] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adm0dBmf0L5kNLP6dTlK4wAAAA0"]
[Sat Apr 11 10:39:48.943581 2026] [:error] [pid 58196:tid 58273] [client 20.215.250.26:61534] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adm0dBmf0L5kNLP6dTlK5QAAABM"]
[Sat Apr 11 10:39:49.448589 2026] [:error] [pid 58195:tid 58238] [client 20.215.250.26:18757] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adm0dQPvj06vzrczQjv-8wAAAIs"]
[Sat Apr 11 10:39:49.966505 2026] [:error] [pid 58196:tid 58261] [client 20.215.250.26:18716] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "adm0dRmf0L5kNLP6dTlK7AAAAAc"]
[Sat Apr 11 10:39:50.478928 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:53726] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adm0dgPvj06vzrczQjv-9AAAAJQ"]
[Sat Apr 11 10:39:51.018872 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:35715] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adm0d6T4IiVFj-rhcaUCqgAAARY"]
[Sat Apr 11 10:39:51.546057 2026] [:error] [pid 58194:tid 58222] [client 20.215.250.26:18714] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adm0d6T4IiVFj-rhcaUCrwAAARc"]
[Sat Apr 11 10:39:52.061839 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:56381] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "adm0eHf_USd3ofWlU3sqmwAAAEU"]
[Sat Apr 11 10:39:52.583695 2026] [:error] [pid 58196:tid 58273] [client 20.215.250.26:18692] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "adm0eBmf0L5kNLP6dTlK8wAAABM"]
[Sat Apr 11 10:39:53.093295 2026] [:error] [pid 58288:tid 58300] [client 20.215.250.26:34429] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "adm0eXf_USd3ofWlU3sqogAAAEo"]
[Sat Apr 11 10:39:53.616304 2026] [:error] [pid 58196:tid 58278] [client 20.215.250.26:30066] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "adm0eRmf0L5kNLP6dTlK9QAAABg"]
[Sat Apr 11 10:39:54.136861 2026] [:error] [pid 58196:tid 58277] [client 20.215.250.26:31555] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "adm0ehmf0L5kNLP6dTlK9wAAABc"]
[Sat Apr 11 10:39:54.674955 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:34334] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "adm0eqT4IiVFj-rhcaUCugAAAQs"]
[Sat Apr 11 10:39:55.188400 2026] [:error] [pid 58288:tid 58296] [client 20.215.250.26:31606] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "adm0e3f_USd3ofWlU3sqpQAAAEY"]
[Sat Apr 11 10:39:55.747550 2026] [:error] [pid 58196:tid 58266] [client 20.215.250.26:4911] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "adm0exmf0L5kNLP6dTlK_QAAAAw"]
[Sat Apr 11 10:39:56.260467 2026] [:error] [pid 58196:tid 58275] [client 20.215.250.26:50346] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "adm0fBmf0L5kNLP6dTlK_wAAABU"]
[Sat Apr 11 10:39:56.782524 2026] [:error] [pid 58194:tid 58220] [client 20.215.250.26:18725] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adm0fKT4IiVFj-rhcaUCxQAAARU"]
[Sat Apr 11 10:39:57.323245 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:29821] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adm0faT4IiVFj-rhcaUCygAAARY"]
[Sat Apr 11 10:39:57.855659 2026] [:error] [pid 58196:tid 58276] [client 20.215.250.26:29467] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adm0fRmf0L5kNLP6dTlLAQAAABY"]
[Sat Apr 11 10:39:58.365121 2026] [:error] [pid 58288:tid 58313] [client 20.215.250.26:53737] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "adm0fnf_USd3ofWlU3sqrAAAAFc"]
[Sat Apr 11 10:39:58.885852 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:18805] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0fqT4IiVFj-rhcaUC0QAAARE"]
[Sat Apr 11 10:39:59.395725 2026] [:error] [pid 58288:tid 58295] [client 20.215.250.26:18764] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0f3f_USd3ofWlU3sqsAAAAEU"]
[Sat Apr 11 10:39:59.917184 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:29491] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0f6T4IiVFj-rhcaUC1gAAAQ8"]
[Sat Apr 11 10:40:00.423910 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:54967] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0gBmf0L5kNLP6dTlLBwAAABQ"]
[Sat Apr 11 10:40:00.936645 2026] [:error] [pid 58194:tid 58219] [client 20.215.250.26:35720] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "adm0gKT4IiVFj-rhcaUC2AAAARQ"]
[Sat Apr 11 10:40:01.442790 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:18784] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "adm0gaT4IiVFj-rhcaUC3AAAARE"]
[Sat Apr 11 10:40:01.959293 2026] [:error] [pid 58194:tid 58217] [client 20.215.250.26:29489] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "adm0gaT4IiVFj-rhcaUC4AAAARI"]
[Sat Apr 11 10:40:02.471209 2026] [:error] [pid 58195:tid 58230] [client 20.215.250.26:18806] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "adm0ggPvj06vzrczQjv-_gAAAIM"]
[Sat Apr 11 10:40:03.008569 2026] [:error] [pid 58194:tid 58222] [client 20.215.250.26:48887] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adm0g6T4IiVFj-rhcaUC5QAAARc"]
[Sat Apr 11 10:40:03.521805 2026] [:error] [pid 58195:tid 58251] [client 20.215.250.26:50305] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adm0gwPvj06vzrczQjv_AgAAAJg"]
[Sat Apr 11 10:40:04.042298 2026] [:error] [pid 58196:tid 58269] [client 20.215.250.26:28301] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adm0hBmf0L5kNLP6dTlLDAAAAA8"]
[Sat Apr 11 10:40:04.549453 2026] [:error] [pid 58195:tid 58233] [client 20.215.250.26:4865] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adm0hAPvj06vzrczQjv_BgAAAIY"]
[Sat Apr 11 10:40:05.347906 2026] [proxy_fcgi:error] [pid 58194:tid 58205] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:05.863297 2026] [proxy_fcgi:error] [pid 58194:tid 58221] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:06.120603 2026] [proxy_fcgi:error] [pid 58194:tid 58209] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:06.377379 2026] [proxy_fcgi:error] [pid 58194:tid 58215] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:06.635596 2026] [proxy_fcgi:error] [pid 58194:tid 58218] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:06.891924 2026] [proxy_fcgi:error] [pid 58194:tid 58203] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:07.148926 2026] [proxy_fcgi:error] [pid 58194:tid 58210] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:07.405729 2026] [proxy_fcgi:error] [pid 58194:tid 58221] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:07.666118 2026] [proxy_fcgi:error] [pid 58194:tid 58215] [client 20.215.250.26:58143] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:40:07.920250 2026] [:error] [pid 58194:tid 58214] [client 20.215.250.26:58143] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adm0h6T4IiVFj-rhcaUDBQAAAQ8"]
[Sat Apr 11 10:40:08.431557 2026] [:error] [pid 58196:tid 58266] [client 20.215.250.26:36859] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adm0iBmf0L5kNLP6dTlLGwAAAAw"]
[Sat Apr 11 10:40:08.953187 2026] [:error] [pid 58196:tid 58275] [client 20.215.250.26:48858] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adm0iBmf0L5kNLP6dTlLHgAAABU"]
[Sat Apr 11 10:40:09.541091 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:53744] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "adm0iaT4IiVFj-rhcaUDDgAAAQs"]
[Sat Apr 11 10:40:10.054330 2026] [:error] [pid 58288:tid 58305] [client 20.215.250.26:53752] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adm0inf_USd3ofWlU3squgAAAE8"]
[Sat Apr 11 10:40:10.619917 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:35826] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adm0iqT4IiVFj-rhcaUDGgAAARM"]
[Sat Apr 11 10:40:11.152083 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:56369] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adm0i6T4IiVFj-rhcaUDHgAAAQM"]
[Sat Apr 11 10:40:11.684278 2026] [:error] [pid 58196:tid 58272] [client 20.215.250.26:31586] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "adm0ixmf0L5kNLP6dTlLIAAAABI"]
[Sat Apr 11 10:40:12.218171 2026] [:error] [pid 58288:tid 58300] [client 20.215.250.26:35712] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "adm0jHf_USd3ofWlU3sqvgAAAEo"]
[Sat Apr 11 10:40:12.838704 2026] [:error] [pid 58288:tid 58313] [client 20.215.250.26:29768] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "adm0jHf_USd3ofWlU3sqwAAAAFc"]
[Sat Apr 11 10:40:13.349430 2026] [:error] [pid 58196:tid 58254] [client 20.215.250.26:31599] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "adm0jRmf0L5kNLP6dTlLIgAAAAA"]
[Sat Apr 11 10:40:13.896487 2026] [:error] [pid 58196:tid 58268] [client 20.215.250.26:36805] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxw.php"] [unique_id "adm0jRmf0L5kNLP6dTlLJgAAAA4"]
[Sat Apr 11 10:40:14.421915 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:53713] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adm0jqT4IiVFj-rhcaUDKQAAAQA"]
[Sat Apr 11 10:40:14.935299 2026] [:error] [pid 58288:tid 58294] [client 20.215.250.26:24364] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adm0jnf_USd3ofWlU3sqxgAAAEQ"]
[Sat Apr 11 10:40:15.453596 2026] [:error] [pid 58195:tid 58250] [client 20.215.250.26:28339] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adm0jwPvj06vzrczQjv_JQAAAJc"]
[Sat Apr 11 10:40:15.980849 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:31599] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "adm0j3f_USd3ofWlU3sqygAAAEI"]
[Sat Apr 11 10:40:16.486340 2026] [:error] [pid 58288:tid 58306] [client 20.215.250.26:35741] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adm0kHf_USd3ofWlU3sq0AAAAFA"]
[Sat Apr 11 10:40:17.027999 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:54952] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adm0kXf_USd3ofWlU3sq0QAAAEw"]
[Sat Apr 11 10:40:17.542862 2026] [:error] [pid 58288:tid 58309] [client 20.215.250.26:50270] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adm0kXf_USd3ofWlU3sq1AAAAFM"]
[Sat Apr 11 10:40:18.074131 2026] [:error] [pid 58194:tid 58200] [client 20.215.250.26:55268] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adm0kqT4IiVFj-rhcaUDNAAAAQE"]
[Sat Apr 11 10:40:18.580804 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:24325] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adm0kqT4IiVFj-rhcaUDNgAAAQM"]
[Sat Apr 11 10:40:19.101295 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:36843] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adm0k3f_USd3ofWlU3sq3wAAAEw"]
[Sat Apr 11 10:40:19.607204 2026] [:error] [pid 58196:tid 58263] [client 20.215.250.26:28318] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adm0kxmf0L5kNLP6dTlLNQAAAAk"]
[Sat Apr 11 10:40:20.119685 2026] [:error] [pid 58194:tid 58201] [client 20.215.250.26:35754] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "adm0lKT4IiVFj-rhcaUDPAAAAQI"]
[Sat Apr 11 10:40:20.629589 2026] [:error] [pid 58195:tid 58230] [client 20.215.250.26:24374] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm0lAPvj06vzrczQjv_KQAAAIM"]
[Sat Apr 11 10:40:21.144813 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:28306] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm0laT4IiVFj-rhcaUDQgAAARA"]
[Sat Apr 11 10:40:21.659562 2026] [:error] [pid 58288:tid 58299] [client 20.215.250.26:18799] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm0lXf_USd3ofWlU3sq6wAAAEk"]
[Sat Apr 11 10:40:22.173910 2026] [:error] [pid 58288:tid 58297] [client 20.215.250.26:53720] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "adm0lnf_USd3ofWlU3sq7QAAAEc"]
[Sat Apr 11 10:40:22.687780 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:9339] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adm0lnf_USd3ofWlU3sq7wAAAEg"]
[Sat Apr 11 10:40:23.212653 2026] [:error] [pid 58194:tid 58207] [client 20.215.250.26:29774] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adm0l6T4IiVFj-rhcaUDTwAAAQg"]
[Sat Apr 11 10:40:23.745382 2026] [:error] [pid 58194:tid 58209] [client 20.215.250.26:56378] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adm0l6T4IiVFj-rhcaUDUwAAAQo"]
[Sat Apr 11 10:40:24.274754 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:31600] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "adm0mKT4IiVFj-rhcaUDWAAAARM"]
[Sat Apr 11 10:40:24.807176 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:61528] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adm0mAPvj06vzrczQjv_KwAAAJQ"]
[Sat Apr 11 10:40:25.365798 2026] [:error] [pid 58194:tid 58210] [client 20.215.250.26:48879] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adm0maT4IiVFj-rhcaUDXgAAAQs"]
[Sat Apr 11 10:40:25.897785 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:4893] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adm0mXf_USd3ofWlU3sq-AAAAEw"]
[Sat Apr 11 10:40:26.449222 2026] [:error] [pid 58288:tid 58303] [client 20.215.250.26:54963] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "adm0mnf_USd3ofWlU3sq-QAAAE0"]
[Sat Apr 11 10:40:26.995527 2026] [:error] [pid 58288:tid 58305] [client 20.215.250.26:34349] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adm0mnf_USd3ofWlU3sq_gAAAE8"]
[Sat Apr 11 10:40:27.502615 2026] [:error] [pid 58195:tid 58243] [client 20.215.250.26:34365] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adm0mwPvj06vzrczQjv_MwAAAJA"]
[Sat Apr 11 10:40:28.047492 2026] [:error] [pid 58288:tid 58306] [client 20.215.250.26:18760] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adm0nHf_USd3ofWlU3srAQAAAFA"]
[Sat Apr 11 10:40:28.573796 2026] [:error] [pid 58196:tid 58267] [client 20.215.250.26:35747] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adm0nBmf0L5kNLP6dTlLSAAAAA0"]
[Sat Apr 11 10:40:29.160136 2026] [:error] [pid 58288:tid 58300] [client 20.215.250.26:30064] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax.php"] [unique_id "adm0nXf_USd3ofWlU3srBgAAAEo"]
[Sat Apr 11 10:40:29.740720 2026] [:error] [pid 58196:tid 58271] [client 20.215.250.26:4884] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax.php"] [unique_id "adm0nRmf0L5kNLP6dTlLTgAAABE"]
[Sat Apr 11 10:40:30.266103 2026] [:error] [pid 58195:tid 58250] [client 20.215.250.26:45242] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax.php"] [unique_id "adm0ngPvj06vzrczQjv_OgAAAJc"]
[Sat Apr 11 10:40:30.890896 2026] [:error] [pid 58194:tid 58205] [client 20.215.250.26:50361] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ajax.php"] [unique_id "adm0nqT4IiVFj-rhcaUDbAAAAQY"]
[Sat Apr 11 10:40:31.410165 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:30045] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "adm0nxmf0L5kNLP6dTlLUAAAABQ"]
[Sat Apr 11 10:40:31.946815 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:30035] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "adm0n6T4IiVFj-rhcaUDdAAAAQQ"]
[Sat Apr 11 10:40:32.505076 2026] [:error] [pid 58196:tid 58262] [client 20.215.250.26:58171] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "adm0oBmf0L5kNLP6dTlLUgAAAAg"]
[Sat Apr 11 10:40:33.048299 2026] [:error] [pid 58194:tid 58219] [client 20.215.250.26:53719] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "adm0oaT4IiVFj-rhcaUDfgAAARQ"]
[Sat Apr 11 10:40:33.568700 2026] [:error] [pid 58288:tid 58312] [client 20.215.250.26:36834] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "adm0oXf_USd3ofWlU3srHAAAAFY"]
[Sat Apr 11 10:40:34.145558 2026] [:error] [pid 58195:tid 58242] [client 20.215.250.26:16836] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "adm0ogPvj06vzrczQjv_QgAAAI8"]
[Sat Apr 11 10:40:34.667450 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:45157] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "adm0ogPvj06vzrczQjv_RAAAAIc"]
[Sat Apr 11 10:40:35.223767 2026] [:error] [pid 58196:tid 58270] [client 20.215.250.26:53717] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/wp-blog.php"] [unique_id "adm0oxmf0L5kNLP6dTlLWQAAABA"]
[Sat Apr 11 10:40:35.762968 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:45246] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0o3f_USd3ofWlU3srKQAAAEw"]
[Sat Apr 11 10:40:36.274052 2026] [:error] [pid 58288:tid 58305] [client 20.215.250.26:31611] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0pHf_USd3ofWlU3srLAAAAE8"]
[Sat Apr 11 10:40:36.788771 2026] [:error] [pid 58194:tid 58220] [client 20.215.250.26:58138] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0pKT4IiVFj-rhcaUDhAAAARU"]
[Sat Apr 11 10:40:37.321986 2026] [:error] [pid 58196:tid 58264] [client 20.215.250.26:30050] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "adm0pRmf0L5kNLP6dTlLYQAAAAo"]
[Sat Apr 11 10:40:37.846831 2026] [:error] [pid 58196:tid 58268] [client 20.215.250.26:24339] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "adm0pRmf0L5kNLP6dTlLYwAAAA4"]
[Sat Apr 11 10:40:38.368656 2026] [:error] [pid 58196:tid 58267] [client 20.215.250.26:18752] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "adm0phmf0L5kNLP6dTlLZgAAAA0"]
[Sat Apr 11 10:40:38.908001 2026] [:error] [pid 58196:tid 58275] [client 20.215.250.26:4921] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "adm0phmf0L5kNLP6dTlLaQAAABU"]
[Sat Apr 11 10:40:39.420897 2026] [:error] [pid 58196:tid 58274] [client 20.215.250.26:54944] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "adm0pxmf0L5kNLP6dTlLbwAAABQ"]
[Sat Apr 11 10:40:39.942444 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:30075] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drhunthq.php"] [unique_id "adm0p6T4IiVFj-rhcaUDjAAAARA"]
[Sat Apr 11 10:40:40.447628 2026] [:error] [pid 58195:tid 58227] [client 20.215.250.26:27244] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drhunthq.php"] [unique_id "adm0qAPvj06vzrczQjv_YwAAAIA"]
[Sat Apr 11 10:40:40.960293 2026] [:error] [pid 58195:tid 58240] [client 20.215.250.26:28300] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drhunthq.php"] [unique_id "adm0qAPvj06vzrczQjv_aAAAAI0"]
[Sat Apr 11 10:40:41.465873 2026] [:error] [pid 58195:tid 58239] [client 20.215.250.26:54956] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drhunthq.php"] [unique_id "adm0qQPvj06vzrczQjv_agAAAIw"]
[Sat Apr 11 10:40:41.976705 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:45188] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/index.php"] [unique_id "adm0qXf_USd3ofWlU3srOgAAAEI"]
[Sat Apr 11 10:40:42.481873 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:24362] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/index.php"] [unique_id "adm0qqT4IiVFj-rhcaUDjwAAAQA"]
[Sat Apr 11 10:40:43.008096 2026] [:error] [pid 58288:tid 58310] [client 20.215.250.26:4711] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/index.php"] [unique_id "adm0q3f_USd3ofWlU3srPgAAAFQ"]
[Sat Apr 11 10:40:43.525893 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:53720] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/index.php"] [unique_id "adm0q6T4IiVFj-rhcaUDkQAAAQM"]
[Sat Apr 11 10:40:44.074611 2026] [:error] [pid 58194:tid 58200] [client 20.215.250.26:54917] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0rKT4IiVFj-rhcaUDlAAAAQE"]
[Sat Apr 11 10:40:44.597684 2026] [:error] [pid 58194:tid 58212] [client 20.215.250.26:27209] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0rKT4IiVFj-rhcaUDmQAAAQ0"]
[Sat Apr 11 10:40:45.137768 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:54943] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0raT4IiVFj-rhcaUDnQAAAQ4"]
[Sat Apr 11 10:40:45.663244 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:31558] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0raT4IiVFj-rhcaUDogAAAQw"]
[Sat Apr 11 10:40:46.215323 2026] [:error] [pid 58194:tid 58206] [client 20.215.250.26:19495] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adm0rqT4IiVFj-rhcaUDpQAAAQc"]
[Sat Apr 11 10:40:46.738552 2026] [:error] [pid 58194:tid 58220] [client 20.215.250.26:30055] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adm0rqT4IiVFj-rhcaUDqAAAARU"]
[Sat Apr 11 10:40:47.242585 2026] [:error] [pid 58288:tid 58293] [client 20.215.250.26:36801] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adm0r3f_USd3ofWlU3srTwAAAEM"]
[Sat Apr 11 10:40:47.763544 2026] [:error] [pid 58196:tid 58268] [client 20.215.250.26:47598] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "adm0rxmf0L5kNLP6dTlLhgAAAA4"]
[Sat Apr 11 10:40:48.289396 2026] [:error] [pid 58194:tid 58216] [client 20.215.250.26:30025] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adm0sKT4IiVFj-rhcaUDsQAAARE"]
[Sat Apr 11 10:40:48.802854 2026] [:error] [pid 58194:tid 58202] [client 20.215.250.26:56342] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adm0sKT4IiVFj-rhcaUDtQAAAQM"]
[Sat Apr 11 10:40:49.312066 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:27238] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adm0saT4IiVFj-rhcaUDuAAAARA"]
[Sat Apr 11 10:40:49.847434 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:45230] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "adm0sXf_USd3ofWlU3srVgAAAEI"]
[Sat Apr 11 10:40:50.366528 2026] [:error] [pid 58288:tid 58314] [client 20.215.250.26:28321] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "adm0snf_USd3ofWlU3srWAAAAFg"]
[Sat Apr 11 10:40:50.931006 2026] [:error] [pid 58288:tid 58307] [client 20.215.250.26:35768] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "adm0snf_USd3ofWlU3srWgAAAFE"]
[Sat Apr 11 10:40:51.440762 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:36818] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "adm0s6T4IiVFj-rhcaUDwwAAAQ4"]
[Sat Apr 11 10:40:51.999540 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:27252] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "adm0s6T4IiVFj-rhcaUDygAAARM"]
[Sat Apr 11 10:40:52.539785 2026] [:error] [pid 58194:tid 58207] [client 20.215.250.26:31564] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adm0tKT4IiVFj-rhcaUDywAAAQg"]
[Sat Apr 11 10:40:53.060145 2026] [:error] [pid 58194:tid 58212] [client 20.215.250.26:29815] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adm0taT4IiVFj-rhcaUDzQAAAQ0"]
[Sat Apr 11 10:40:53.595299 2026] [:error] [pid 58196:tid 58262] [client 20.215.250.26:45211] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adm0tRmf0L5kNLP6dTlLnQAAAAg"]
[Sat Apr 11 10:40:54.126003 2026] [:error] [pid 58194:tid 58203] [client 20.215.250.26:45220] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "adm0tqT4IiVFj-rhcaUD1QAAAQQ"]
[Sat Apr 11 10:40:54.663582 2026] [:error] [pid 58194:tid 58215] [client 20.215.250.26:56324] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0tqT4IiVFj-rhcaUD2wAAARA"]
[Sat Apr 11 10:40:55.205108 2026] [:error] [pid 58194:tid 58221] [client 20.215.250.26:4880] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0t6T4IiVFj-rhcaUD4gAAARY"]
[Sat Apr 11 10:40:55.727521 2026] [:error] [pid 58195:tid 58247] [client 20.215.250.26:18810] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0twPvj06vzrczQjv_dgAAAJQ"]
[Sat Apr 11 10:40:56.243736 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:54932] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "adm0uKT4IiVFj-rhcaUD5QAAAQw"]
[Sat Apr 11 10:40:56.818274 2026] [:error] [pid 58194:tid 58199] [client 20.215.250.26:60143] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adm0uKT4IiVFj-rhcaUD6AAAAQA"]
[Sat Apr 11 10:40:57.342529 2026] [:error] [pid 58194:tid 58204] [client 20.215.250.26:56366] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adm0uaT4IiVFj-rhcaUD7QAAAQU"]
[Sat Apr 11 10:40:57.972347 2026] [:error] [pid 58288:tid 58292] [client 20.215.250.26:18807] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adm0uXf_USd3ofWlU3sragAAAEI"]
[Sat Apr 11 10:40:58.506472 2026] [:error] [pid 58196:tid 58265] [client 20.215.250.26:21852] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "adm0uhmf0L5kNLP6dTlLqwAAAAs"]
[Sat Apr 11 10:40:59.021520 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:18763] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adm0uwPvj06vzrczQjv_fQAAAIc"]
[Sat Apr 11 10:40:59.586465 2026] [:error] [pid 58195:tid 58236] [client 20.215.250.26:58116] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adm0uwPvj06vzrczQjv_hAAAAIk"]
[Sat Apr 11 10:41:00.135743 2026] [:error] [pid 58195:tid 58233] [client 20.215.250.26:35752] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adm0vAPvj06vzrczQjv_hQAAAIY"]
[Sat Apr 11 10:41:00.665542 2026] [:error] [pid 58288:tid 58302] [client 20.215.250.26:21834] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "adm0vHf_USd3ofWlU3srbAAAAEw"]
[Sat Apr 11 10:41:01.258576 2026] [:error] [pid 58196:tid 58275] [client 20.215.250.26:35756] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "adm0vRmf0L5kNLP6dTlLsQAAABU"]
[Sat Apr 11 10:41:01.789927 2026] [:error] [pid 58196:tid 58256] [client 20.215.250.26:31582] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "adm0vRmf0L5kNLP6dTlLtgAAAAI"]
[Sat Apr 11 10:41:02.304881 2026] [:error] [pid 58196:tid 58268] [client 20.215.250.26:56353] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "adm0vhmf0L5kNLP6dTlLvAAAAA4"]
[Sat Apr 11 10:41:02.812381 2026] [:error] [pid 58195:tid 58234] [client 20.215.250.26:36833] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "adm0vgPvj06vzrczQjv_jgAAAIc"]
[Sat Apr 11 10:41:03.327528 2026] [:error] [pid 58288:tid 58298] [client 20.215.250.26:16933] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "adm0v3f_USd3ofWlU3srcwAAAEg"]
[Sat Apr 11 10:41:03.834929 2026] [:error] [pid 58194:tid 58211] [client 20.215.250.26:29794] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "adm0v6T4IiVFj-rhcaUD-gAAAQw"]
[Sat Apr 11 10:41:04.375121 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:48850] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "adm0wKT4IiVFj-rhcaUD_wAAARM"]
[Sat Apr 11 10:41:04.907605 2026] [:error] [pid 58194:tid 58208] [client 20.215.250.26:16929] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "adm0wKT4IiVFj-rhcaUEBAAAAQk"]
[Sat Apr 11 10:41:05.413729 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:18761] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "adm0waT4IiVFj-rhcaUECAAAAQ4"]
[Sat Apr 11 10:41:05.928309 2026] [:error] [pid 58194:tid 58218] [client 20.215.250.26:4874] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "adm0waT4IiVFj-rhcaUEDgAAARM"]
[Sat Apr 11 10:41:06.441100 2026] [:error] [pid 58288:tid 58308] [client 20.215.250.26:48877] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "adm0wnf_USd3ofWlU3srdwAAAFI"]
[Sat Apr 11 10:41:06.967214 2026] [:error] [pid 58194:tid 58213] [client 20.215.250.26:19462] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "adm0wqT4IiVFj-rhcaUEFgAAAQ4"]
[Sat Apr 11 10:41:07.501371 2026] [proxy_fcgi:error] [pid 58288:tid 58291] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:07.756654 2026] [proxy_fcgi:error] [pid 58288:tid 58303] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:08.013484 2026] [proxy_fcgi:error] [pid 58288:tid 58300] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:08.270431 2026] [proxy_fcgi:error] [pid 58288:tid 58302] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:08.528122 2026] [proxy_fcgi:error] [pid 58288:tid 58295] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:08.787821 2026] [proxy_fcgi:error] [pid 58288:tid 58313] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:09.059875 2026] [proxy_fcgi:error] [pid 58288:tid 58296] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:09.317022 2026] [proxy_fcgi:error] [pid 58288:tid 58299] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:09.574353 2026] [proxy_fcgi:error] [pid 58288:tid 58293] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:10.089091 2026] [proxy_fcgi:error] [pid 58288:tid 58306] [client 20.215.250.26:30532] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 10:41:10.342680 2026] [:error] [pid 58288:tid 58312] [client 20.215.250.26:30532] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "adm0xnf_USd3ofWlU3srhAAAAFY"]
[Sat Apr 11 10:41:10.850315 2026] [:error] [pid 58196:tid 58271] [client 20.215.250.26:35910] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "adm0xhmf0L5kNLP6dTlLywAAABE"]
[Sat Apr 11 10:41:11.360476 2026] [:error] [pid 58194:tid 58223] [client 20.215.250.26:16930] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "adm0x6T4IiVFj-rhcaUENgAAARg"]
[Sat Apr 11 10:41:11.878742 2026] [:error] [pid 58195:tid 58242] [client 20.215.250.26:47917] [client 20.215.250.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws77.php"] [unique_id "adm0xwPvj06vzrczQjv_mAAAAI8"]
[Sat Apr 11 11:45:49.284687 2026] [:error] [pid 11067:tid 11074] [client 24.157.184.65:61566] [client 24.157.184.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.157.184.65, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adnD7cW3w7N67R04YCIsfgAAAEU"]
[Sat Apr 11 11:45:49.290681 2026] [proxy_fcgi:error] [pid 11067:tid 11074] [client 24.157.184.65:61566] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 11:55:10.336160 2026] [:error] [pid 2187:tid 2252] [client 203.177.237.112:51542] [client 203.177.237.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.237.112, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adnGHg4J29_qQi0FkjhinAAAABg"]
[Sat Apr 11 11:55:10.349456 2026] [proxy_fcgi:error] [pid 2187:tid 2252] [client 203.177.237.112:51542] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 14:11:36.086478 2026] [:error] [pid 2297:tid 2324] [client 157.15.40.61:55824] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "adnmGLXJS-Jji11jZk3YqwAAARc"]
[Sat Apr 11 14:11:36.360510 2026] [:error] [pid 2187:tid 2234] [client 157.15.40.61:55897] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/style.php"] [unique_id "adnmGA4J29_qQi0FkjiH4QAAAAY"]
[Sat Apr 11 14:11:36.606571 2026] [:error] [pid 2188:tid 2265] [client 157.15.40.61:55978] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGIDhDA-Xtn2nRScJigAAAMk"]
[Sat Apr 11 14:11:36.871167 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:56065] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/style.php"] [unique_id "adnmGLXJS-Jji11jZk3Y1AAAARM"]
[Sat Apr 11 14:11:37.213488 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:56153] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style.php"] [unique_id "adnmGcW3w7N67R04YCKQaAAAAE0"]
[Sat Apr 11 14:11:37.485573 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:56220] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "adnmGcW3w7N67R04YCKQiQAAAFU"]
[Sat Apr 11 14:11:37.750002 2026] [:error] [pid 2297:tid 2310] [client 157.15.40.61:56333] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "adnmGbXJS-Jji11jZk3ZEAAAAQk"]
[Sat Apr 11 14:11:38.051784 2026] [:error] [pid 2297:tid 2303] [client 157.15.40.61:56446] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/flower.php"] [unique_id "adnmGrXJS-Jji11jZk3ZJAAAAQI"]
[Sat Apr 11 14:11:40.527051 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:56711] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "adnmHLXJS-Jji11jZk3ZqwAAARM"]
[Sat Apr 11 14:11:41.832597 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:56992] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/bless.php"] [unique_id "adnmHcW3w7N67R04YCKRPwAAAE4"]
[Sat Apr 11 14:11:42.096525 2026] [:error] [pid 2187:tid 2241] [client 157.15.40.61:57211] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "adnmHg4J29_qQi0FkjiIbAAAAA0"]
[Sat Apr 11 14:11:43.458452 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:57456] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/blurbs.php"] [unique_id "adnmH8W3w7N67R04YCKRtAAAAEs"]
[Sat Apr 11 14:11:45.886513 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:57499] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/akcc.php"] [unique_id "adnmIcW3w7N67R04YCKSHQAAAE4"]
[Sat Apr 11 14:11:47.153510 2026] [:error] [pid 2187:tid 2235] [client 157.15.40.61:57913] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "adnmIw4J29_qQi0FkjiItwAAAAc"]
[Sat Apr 11 14:11:47.412554 2026] [:error] [pid 2297:tid 2302] [client 157.15.40.61:58136] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/shelp.php"] [unique_id "adnmI7XJS-Jji11jZk3asgAAAQE"]
[Sat Apr 11 14:11:47.676971 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:58173] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/cord.php"] [unique_id "adnmI8ibnOEEvcO8wPL-GwAAAJI"]
[Sat Apr 11 14:11:48.601377 2026] [:error] [pid 2297:tid 2312] [client 157.15.40.61:58305] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/dex.php"] [unique_id "adnmJLXJS-Jji11jZk3azAAAAQs"]
[Sat Apr 11 14:11:49.503829 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:58482] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmJcW3w7N67R04YCKSuwAAAEY"]
[Sat Apr 11 14:11:50.594840 2026] [:error] [pid 2188:tid 2268] [client 157.15.40.61:58770] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "adnmJoDhDA-Xtn2nRScKyAAAAMw"]
[Sat Apr 11 14:11:52.832934 2026] [:error] [pid 2186:tid 2204] [client 157.15.40.61:59217] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "adnmKMibnOEEvcO8wPL-SQAAAI4"]
[Sat Apr 11 14:11:53.090658 2026] [:error] [pid 2187:tid 2235] [client 157.15.40.61:59264] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/zwso.php"] [unique_id "adnmKQ4J29_qQi0FkjiJEwAAAAc"]
[Sat Apr 11 14:11:53.811927 2026] [:error] [pid 2297:tid 2309] [client 157.15.40.61:59409] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmKbXJS-Jji11jZk3bwQAAAQg"]
[Sat Apr 11 14:11:55.800576 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:59547] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "adnmK7XJS-Jji11jZk3b4AAAAQQ"]
[Sat Apr 11 14:11:56.055475 2026] [:error] [pid 11067:tid 11087] [client 157.15.40.61:59874] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/shlo.php"] [unique_id "adnmLMW3w7N67R04YCKUqAAAAFI"]
[Sat Apr 11 14:11:57.324716 2026] [:error] [pid 2188:tid 2279] [client 157.15.40.61:59951] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/133.php"] [unique_id "adnmLYDhDA-Xtn2nRScLjgAAANc"]
[Sat Apr 11 14:11:57.586363 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:60211] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/ahax.php"] [unique_id "adnmLcW3w7N67R04YCKVUQAAAFM"]
[Sat Apr 11 14:12:01.549504 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:60736] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/php8.php"] [unique_id "adnmMcW3w7N67R04YCKWiQAAAFQ"]
[Sat Apr 11 14:12:03.255381 2026] [:error] [pid 2297:tid 2325] [client 157.15.40.61:61230] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/lufix1.php"] [unique_id "adnmM7XJS-Jji11jZk3cbgAAARg"]
[Sat Apr 11 14:12:03.954890 2026] [:error] [pid 11067:tid 11093] [client 157.15.40.61:61803] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/witmm.php"] [unique_id "adnmM8W3w7N67R04YCKW5QAAAFg"]
[Sat Apr 11 14:12:05.224159 2026] [:error] [pid 2188:tid 2276] [client 157.15.40.61:62279] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/index.php"] [unique_id "adnmNYDhDA-Xtn2nRScMTgAAANQ"]
[Sat Apr 11 14:12:06.490372 2026] [:error] [pid 11067:tid 11072] [client 157.15.40.61:64718] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmNsW3w7N67R04YCKXGAAAAEM"]
[Sat Apr 11 14:12:09.567809 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:49797] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "adnmOcW3w7N67R04YCKXRQAAAFU"]
[Sat Apr 11 14:12:13.237628 2026] [:error] [pid 2297:tid 2301] [client 157.15.40.61:50268] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "adnmPbXJS-Jji11jZk3dDwAAAQA"]
[Sat Apr 11 14:12:13.506852 2026] [:error] [pid 2188:tid 2268] [client 157.15.40.61:50882] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "adnmPYDhDA-Xtn2nRScMiAAAAMw"]
[Sat Apr 11 14:12:19.566188 2026] [:error] [pid 11067:tid 11088] [client 157.15.40.61:50998] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/files.php"] [unique_id "adnmQ8W3w7N67R04YCKXyQAAAFM"]
[Sat Apr 11 14:12:22.345339 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:51978] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-editor.php"] [unique_id "adnmRsibnOEEvcO8wPL_2gAAAJI"]
[Sat Apr 11 15:03:15.449796 2026] [:error] [pid 2186:tid 2218] [client 43.166.131.228:38452] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adnyM8ibnOEEvcO8wPINaAAAAJc"]
[Sat Apr 11 15:14:23.500564 2026] [:error] [pid 2188:tid 2259] [client 103.129.238.246:55123] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adn0z4DhDA-Xtn2nRScjXAAAAMM"]
[Sat Apr 11 15:14:23.513994 2026] [proxy_fcgi:error] [pid 2188:tid 2259] [client 103.129.238.246:55123] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 17:03:07.355595 2026] [:error] [pid 2187:tid 2246] [client 182.44.8.254:53173] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adoOSw4J29_qQi0Fkji3EAAAABI"]
[Sat Apr 11 21:23:39.272062 2026] [:error] [pid 42220:tid 42270] [client 165.245.183.130:61150] [client 165.245.183.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.183.130, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "adpLW0z5c3Cs6a8B5Qt-vgAAANM"]
[Sat Apr 11 21:23:39.283189 2026] [proxy_fcgi:error] [pid 42220:tid 42270] [client 165.245.183.130:61150] AH01071: Got error 'Primary script unknown'
[Sat Apr 11 21:23:42.089458 2026] [:error] [pid 42219:tid 42231] [client 165.245.183.130:61842] [client 165.245.183.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.183.130, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "adpLXg-4IkVbTQx_J-17BgAAAIg"], referer: https://wordpress.org/
[Sat Apr 11 21:23:42.094009 2026] [proxy_fcgi:error] [pid 42219:tid 42231] [client 165.245.183.130:61842] AH01071: Got error 'Primary script unknown', referer: https://wordpress.org/
[Sat Apr 11 23:14:54.330114 2026] [:error] [pid 42219:tid 42236] [client 43.133.14.237:39460] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adplbg-4IkVbTQx_J-2iVgAAAI0"]
[Sun Apr 12 00:03:04.713423 2026] [:error] [pid 52608:tid 52627] [client 104.209.173.99:55122] [client 104.209.173.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adpwuCY5wH-BLt5QEKiWrgAAARA"]
[Sun Apr 12 02:42:06.438639 2026] [:error] [pid 44700:tid 44745] [client 154.192.176.245:61665] [client 154.192.176.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.176.245, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "adqV_mryPgh_uW4QPCl-BAAAAME"]
[Sun Apr 12 02:42:06.450535 2026] [proxy_fcgi:error] [pid 44700:tid 44745] [client 154.192.176.245:61665] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 06:28:30.026443 2026] [:error] [pid 26600:tid 26633] [client 49.234.192.248:37730] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adrLDu1YwAZiXhQKLYqCdQAAAYQ"]
[Sun Apr 12 10:37:00.511032 2026] [:error] [pid 25328:tid 25368] [client 165.245.183.130:56282] [client 165.245.183.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.183.130, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "adsFTMxUaQZxT-e0YsBXGAAAAEQ"]
[Sun Apr 12 10:37:00.518925 2026] [proxy_fcgi:error] [pid 25328:tid 25368] [client 165.245.183.130:56282] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 14:23:30.424693 2026] [:error] [pid 25437:tid 25449] [client 43.133.187.11:33888] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ads6Ynf97wYZje1ep_PtDgAAAMo"]
[Sun Apr 12 19:17:17.582209 2026] [:error] [pid 25329:tid 25397] [client 122.51.236.174:44634] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adt_PWdcIYsS8Iyaj12vmgAAAIw"]
[Sun Apr 12 19:45:26.239293 2026] [:error] [pid 60280:tid 60294] [client 223.228.154.222:60701] [client 223.228.154.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.154.222, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aduF1nBlLnDOYuIykkieSQAAAcw"]
[Sun Apr 12 19:45:26.251218 2026] [proxy_fcgi:error] [pid 60280:tid 60294] [client 223.228.154.222:60701] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 21:11:19.553883 2026] [:error] [pid 60280:tid 60303] [client 43.163.110.140:53938] [client 43.163.110.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aduZ93BlLnDOYuIykkjNPwAAAdU"]
[Sun Apr 12 22:40:54.877018 2026] [:error] [pid 25329:tid 25392] [client 43.130.141.193:56064] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aduu9mdcIYsS8Iyaj13UYQAAAIk"]
[Mon Apr 13 02:00:42.938093 2026] [:error] [pid 32010:tid 32028] [client 49.235.136.28:36894] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "advdyg0nq-t9pXyV1fygEwAAANA"]
[Mon Apr 13 02:54:13.820081 2026] [:error] [pid 32010:tid 32013] [client 159.89.55.245:38590] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "advqVQ0nq-t9pXyV1fy24wAAAME"]
[Mon Apr 13 02:54:17.849962 2026] [:error] [pid 32010:tid 32026] [client 159.89.55.245:34994] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "advqWQ0nq-t9pXyV1fy27gAAAM4"]
[Mon Apr 13 03:18:11.573793 2026] [:error] [pid 32010:tid 32020] [client 159.89.55.245:40332] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "advv8w0nq-t9pXyV1fzBMwAAAMg"]
[Mon Apr 13 03:18:16.301540 2026] [:error] [pid 31607:tid 31756] [client 159.89.55.245:54064] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "advv-Gjn_I-KYTWngjJQDwAAAJM"]
[Mon Apr 13 04:32:23.031060 2026] [:error] [pid 33942:tid 33999] [client 159.89.55.245:42038] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adwBVxNHe8geO_lMeFZ4vQAAAFQ"]
[Mon Apr 13 04:32:26.957832 2026] [:error] [pid 33941:tid 33961] [client 159.89.55.245:37536] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adwBWm_NKERAxgG-rYMfuAAAAAo"]
[Mon Apr 13 05:19:58.941341 2026] [:error] [pid 33943:tid 34025] [client 185.198.240.84:58307] [client 185.198.240.84] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adwMfqyoXuZjocnxM5FdVAAAAJM"]
[Mon Apr 13 08:07:25.947738 2026] [:error] [pid 63311:tid 63390] [client 110.166.71.39:47066] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adwzvaHjrGN1MqBCVFkhVAAAAJM"]
[Mon Apr 13 11:25:10.389825 2026] [:error] [pid 57183:tid 57209] [client 43.163.118.136:34552] [client 43.163.118.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adxiFjDO3t8R5NaxzYQTVwAAAVg"]
[Mon Apr 13 12:40:26.768416 2026] [:error] [pid 7228:tid 7241] [client 159.89.55.245:58932] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adxzugEnn1dQrOSHHNWwNwAAAQs"]
[Mon Apr 13 12:40:30.172934 2026] [:error] [pid 7228:tid 7234] [client 159.89.55.245:40250] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adxzvgEnn1dQrOSHHNWwRAAAAQQ"]
[Mon Apr 13 12:58:22.408007 2026] [:error] [pid 7228:tid 7230] [client 216.24.210.94:60677] [client 216.24.210.94] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "adx37gEnn1dQrOSHHNW9jAAAAQA"]
[Mon Apr 13 13:13:35.627688 2026] [:error] [pid 63406:tid 63414] [client 43.131.23.154:54158] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adx7f7HZEIkQ0Zmgp5qOZgAAAMM"]
[Mon Apr 13 14:01:43.268906 2026] [:error] [pid 63310:tid 63368] [client 159.89.55.245:44758] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adyGx3oXpRU5ztmwPjIIvQAAAFg"]
[Mon Apr 13 14:01:46.183526 2026] [:error] [pid 63311:tid 63372] [client 159.89.55.245:46594] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "adyGyqHjrGN1MqBCVFmc2wAAAIE"]
[Mon Apr 13 14:31:08.441460 2026] [:error] [pid 63310:tid 63354] [client 114.96.103.33:34698] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "adyNrHoXpRU5ztmwPjIPowAAAEo"]
[Mon Apr 13 20:39:49.883326 2026] [:error] [pid 63310:tid 63357] [client 103.77.107.178:59844] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "adzkFXoXpRU5ztmwPjJYNgAAAE0"]
[Mon Apr 13 20:39:50.092412 2026] [:error] [pid 7228:tid 7249] [client 103.77.107.178:59860] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.vscode/sftp.json"] [unique_id "adzkFgEnn1dQrOSHHNWVowAAARM"]
[Mon Apr 13 20:45:11.564861 2026] [:error] [pid 63311:tid 63385] [client 212.47.78.119:60511] [client 212.47.78.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adzlV6HjrGN1MqBCVFkCpwAAAI4"]
[Mon Apr 13 20:45:12.415381 2026] [:error] [pid 9314:tid 9318] [client 212.47.78.119:63743] [client 212.47.78.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "adzlWG_r4W8fX2GWyGQaQwAAAYI"]
[Mon Apr 13 20:53:49.261282 2026] [:error] [pid 63406:tid 63432] [client 182.44.12.37:40919] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "adznXbHZEIkQ0Zmgp5qyTwAAANU"]
[Mon Apr 13 23:32:24.889081 2026] [:error] [pid 57183:tid 57186] [client 103.178.208.43:54718] [client 103.178.208.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.208.43, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ad0MiDDO3t8R5NaxzYSe0gAAAUE"]
[Mon Apr 13 23:32:24.903175 2026] [proxy_fcgi:error] [pid 57183:tid 57186] [client 103.178.208.43:54718] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 04:07:04.607317 2026] [:error] [pid 19793:tid 19816] [client 123.187.240.242:43716] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ad1M6AGEQsZw9TkmIA77CgAAANU"]
[Tue Apr 14 05:35:27.898779 2026] [:error] [pid 19793:tid 19817] [client 159.89.55.245:60554] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad1hnwGEQsZw9TkmIA4e9QAAANY"]
[Tue Apr 14 05:35:31.597175 2026] [:error] [pid 19689:tid 19772] [client 159.89.55.245:35214] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad1ho5WU15arjG3aJyRcHAAAAJE"]
[Tue Apr 14 05:59:01.859824 2026] [:error] [pid 64393:tid 64410] [client 216.73.216.81:15744] [client 216.73.216.81] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.measureyourbrand.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "ad1nJeClKltJhW50hKPaAAAAAQ8"]
[Tue Apr 14 06:33:07.486772 2026] [:error] [pid 35629:tid 35676] [client 216.73.216.81:8694] [client 216.73.216.81] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "ad1vIzY8VahzC1YJBSiLGgAAAFE"]
[Tue Apr 14 07:25:23.886427 2026] [:error] [pid 37048:tid 37058] [client 159.89.55.245:41492] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad17Y552Bo1OyzeXo_x_cwAAAQg"]
[Tue Apr 14 07:25:28.121588 2026] [:error] [pid 35713:tid 35733] [client 159.89.55.245:57596] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad17aK6-hhx6ZepqOSmimwAAANE"]
[Tue Apr 14 09:03:56.501518 2026] [:error] [pid 35629:tid 35663] [client 159.89.55.245:53902] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad2SfDY8VahzC1YJBSjBmQAAAEQ"]
[Tue Apr 14 09:04:02.106748 2026] [:error] [pid 35713:tid 35728] [client 159.89.55.245:42070] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad2Sgq6-hhx6ZepqOSnZKAAAAMw"]
[Tue Apr 14 10:58:20.824674 2026] [:error] [pid 4902:tid 4907] [client 159.89.55.245:49724] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad2tTIv8vJvl9lGy39g_mAAAAYM"]
[Tue Apr 14 10:58:24.081272 2026] [:error] [pid 35713:tid 35736] [client 159.89.55.245:42768] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad2tUK6-hhx6ZepqOSkUhgAAANQ"]
[Tue Apr 14 12:18:50.944427 2026] [:error] [pid 35630:tid 35692] [client 159.89.55.245:60870] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad3AKjer0pVFxOiOauXp3QAAAIY"]
[Tue Apr 14 12:18:55.671301 2026] [:error] [pid 37048:tid 37058] [client 159.89.55.245:48742] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad3AL552Bo1OyzeXo_zPGQAAAQg"]
[Tue Apr 14 16:34:04.756944 2026] [:error] [pid 60074:tid 60100] [client 34.85.144.184:63558] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ad37_OtqnEmNU9vpHCkSQQAAANg"]
[Tue Apr 14 16:34:05.217339 2026] [:error] [pid 60074:tid 60098] [client 34.85.144.184:56431] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ad37_etqnEmNU9vpHCkSRQAAANY"]
[Tue Apr 14 16:34:05.650209 2026] [:error] [pid 59986:tid 60030] [client 34.85.144.184:56614] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad37_Z6axKeW6bX4H7cGuwAAAEo"]
[Tue Apr 14 17:33:55.790831 2026] [:error] [pid 59986:tid 60039] [client 43.165.190.5:38242] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ad4KA56axKeW6bX4H7ccYAAAAFM"]
[Tue Apr 14 22:17:19.582142 2026] [:error] [pid 59987:tid 60059] [client 216.81.248.211:54510] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad5Mb1Wpk-Tfi6_vLKpFQwAAAIw"]
[Tue Apr 14 23:35:44.795228 2026] [proxy_fcgi:error] [pid 3778:tid 3788] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:45.034698 2026] [proxy_fcgi:error] [pid 3778:tid 3794] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:46.516404 2026] [proxy_fcgi:error] [pid 3778:tid 3802] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:46.756739 2026] [proxy_fcgi:error] [pid 3778:tid 3792] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:47.008144 2026] [proxy_fcgi:error] [pid 3778:tid 3787] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:47.265982 2026] [proxy_fcgi:error] [pid 3778:tid 3785] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:47.508477 2026] [proxy_fcgi:error] [pid 3778:tid 3797] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:47.759467 2026] [proxy_fcgi:error] [pid 3778:tid 3791] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:48.034543 2026] [proxy_fcgi:error] [pid 3778:tid 3786] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:48.294930 2026] [proxy_fcgi:error] [pid 3778:tid 3783] [client 51.103.165.5:46725] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:35:48.531660 2026] [:error] [pid 3778:tid 3795] [client 51.103.165.5:46725] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "ad5e1Bx5DfpNmYF_PaESlAAAAU8"]
[Tue Apr 14 23:35:58.321872 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:31638] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "ad5e3utqnEmNU9vpHCnWhQAAAMc"]
[Tue Apr 14 23:36:20.750467 2026] [:error] [pid 60074:tid 60100] [client 51.103.165.5:17597] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "ad5e9OtqnEmNU9vpHCnWrwAAANg"]
[Tue Apr 14 23:36:26.292585 2026] [:error] [pid 3810:tid 3836] [client 51.103.165.5:15778] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ad5e-sqc5XaYZhFXVGfjHAAAAZc"]
[Tue Apr 14 23:36:33.181201 2026] [:error] [pid 3810:tid 3822] [client 51.103.165.5:12227] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ad5fAcqc5XaYZhFXVGfjMwAAAYk"]
[Tue Apr 14 23:36:36.320781 2026] [:error] [pid 59985:tid 60013] [client 51.103.165.5:1816] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ad5fBOgHaxkvLE6V1kl-GwAAABQ"]
[Tue Apr 14 23:36:37.536010 2026] [:error] [pid 22177:tid 22182] [client 51.103.165.5:32644] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ad5fBYTVeJSXHDIlEDum9gAAAQM"]
[Tue Apr 14 23:36:38.337385 2026] [:error] [pid 3778:tid 3785] [client 51.103.165.5:19348] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ad5fBhx5DfpNmYF_PaES2wAAAUU"]
[Tue Apr 14 23:36:40.275910 2026] [:error] [pid 3778:tid 3799] [client 51.103.165.5:11657] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ad5fCBx5DfpNmYF_PaES6QAAAVM"]
[Tue Apr 14 23:36:41.674891 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:15782] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ad5fCZ6axKeW6bX4H7fKwQAAAFU"]
[Tue Apr 14 23:36:43.460910 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:15758] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "ad5fC56axKeW6bX4H7fKywAAAFc"]
[Tue Apr 14 23:36:44.423174 2026] [:error] [pid 59987:tid 60058] [client 51.103.165.5:31686] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "ad5fDFWpk-Tfi6_vLKpZcgAAAIs"]
[Tue Apr 14 23:36:45.202167 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:35909] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "ad5fDetqnEmNU9vpHCnW2gAAAMQ"]
[Tue Apr 14 23:36:46.088979 2026] [:error] [pid 3810:tid 3828] [client 51.103.165.5:11709] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "ad5fDsqc5XaYZhFXVGfjVwAAAY8"]
[Tue Apr 14 23:36:46.803648 2026] [:error] [pid 59987:tid 60068] [client 51.103.165.5:38459] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "ad5fDlWpk-Tfi6_vLKpZeQAAAJU"]
[Tue Apr 14 23:36:47.446040 2026] [:error] [pid 59987:tid 60060] [client 51.103.165.5:35934] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "ad5fD1Wpk-Tfi6_vLKpZfgAAAI0"]
[Tue Apr 14 23:36:48.082367 2026] [proxy_fcgi:error] [pid 59987:tid 60062] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:48.329626 2026] [proxy_fcgi:error] [pid 59987:tid 60050] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:48.568786 2026] [proxy_fcgi:error] [pid 59987:tid 60066] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:49.149710 2026] [proxy_fcgi:error] [pid 59987:tid 60054] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:49.389480 2026] [proxy_fcgi:error] [pid 59987:tid 60047] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:49.672133 2026] [proxy_fcgi:error] [pid 59987:tid 60070] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:49.913992 2026] [proxy_fcgi:error] [pid 59987:tid 60065] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:50.225281 2026] [proxy_fcgi:error] [pid 59987:tid 60057] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:50.492982 2026] [proxy_fcgi:error] [pid 59987:tid 60071] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:50.735961 2026] [proxy_fcgi:error] [pid 59987:tid 60059] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:51.154058 2026] [proxy_fcgi:error] [pid 59987:tid 60051] [client 51.103.165.5:11692] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:36:51.451064 2026] [:error] [pid 59987:tid 60053] [client 51.103.165.5:11692] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "ad5fE1Wpk-Tfi6_vLKpZkQAAAIY"]
[Tue Apr 14 23:36:52.245351 2026] [:error] [pid 59987:tid 60050] [client 51.103.165.5:11982] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "ad5fFFWpk-Tfi6_vLKpZlAAAAIM"]
[Tue Apr 14 23:36:52.876214 2026] [:error] [pid 59987:tid 60049] [client 51.103.165.5:35917] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "ad5fFFWpk-Tfi6_vLKpZmwAAAII"]
[Tue Apr 14 23:36:54.946755 2026] [:error] [pid 22177:tid 22199] [client 51.103.165.5:46798] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "ad5fFoTVeJSXHDIlEDunAwAAARQ"]
[Tue Apr 14 23:36:55.759617 2026] [:error] [pid 3810:tid 3829] [client 51.103.165.5:46811] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "ad5fF8qc5XaYZhFXVGfjbwAAAZA"]
[Tue Apr 14 23:36:56.405649 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:11993] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "ad5fGJ6axKeW6bX4H7fK7wAAAFg"]
[Tue Apr 14 23:36:56.936222 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:19966] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "ad5fGOtqnEmNU9vpHCnW7gAAAMw"]
[Tue Apr 14 23:36:57.680041 2026] [:error] [pid 59987:tid 60047] [client 51.103.165.5:12501] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "ad5fGVWpk-Tfi6_vLKpZqAAAAIA"]
[Tue Apr 14 23:36:58.599898 2026] [:error] [pid 3778:tid 3794] [client 51.103.165.5:35950] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "ad5fGhx5DfpNmYF_PaES_gAAAU4"]
[Tue Apr 14 23:36:59.504611 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:32658] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "ad5fG56axKeW6bX4H7fK9wAAAFU"]
[Tue Apr 14 23:37:00.355395 2026] [:error] [pid 59987:tid 60050] [client 51.103.165.5:15780] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "ad5fHFWpk-Tfi6_vLKpZrAAAAIM"]
[Tue Apr 14 23:37:01.017350 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:17588] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "ad5fHVWpk-Tfi6_vLKpZrQAAAIg"]
[Tue Apr 14 23:37:01.847579 2026] [:error] [pid 22177:tid 22188] [client 51.103.165.5:46785] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ad5fHYTVeJSXHDIlEDunDwAAAQk"]
[Tue Apr 14 23:37:02.949308 2026] [:error] [pid 22177:tid 22199] [client 51.103.165.5:20219] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ad5fHoTVeJSXHDIlEDunEgAAARQ"]
[Tue Apr 14 23:37:03.630558 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:26125] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ad5fH56axKeW6bX4H7fK_wAAAFc"]
[Tue Apr 14 23:37:04.275288 2026] [:error] [pid 22177:tid 22187] [client 51.103.165.5:16267] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ad5fIITVeJSXHDIlEDunGgAAAQg"]
[Tue Apr 14 23:37:05.091660 2026] [:error] [pid 59985:tid 60007] [client 51.103.165.5:46809] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ad5fIegHaxkvLE6V1kl-HwAAAA4"]
[Tue Apr 14 23:37:05.749406 2026] [:error] [pid 3810:tid 3819] [client 51.103.165.5:20206] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ad5fIcqc5XaYZhFXVGfjdAAAAYY"]
[Tue Apr 14 23:37:06.722097 2026] [:error] [pid 59985:tid 60001] [client 51.103.165.5:20195] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ad5fIugHaxkvLE6V1kl-IQAAAAg"]
[Tue Apr 14 23:37:07.990625 2026] [:error] [pid 3810:tid 3820] [client 51.103.165.5:26119] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ad5fI8qc5XaYZhFXVGfjegAAAYc"]
[Tue Apr 14 23:37:09.011959 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:27923] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "ad5fJetqnEmNU9vpHCnW_AAAANc"]
[Tue Apr 14 23:37:09.754859 2026] [:error] [pid 59987:tid 60070] [client 51.103.165.5:38410] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "ad5fJVWpk-Tfi6_vLKpZsgAAAJc"]
[Tue Apr 14 23:37:10.471922 2026] [:error] [pid 59985:tid 59993] [client 51.103.165.5:13015] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "ad5fJugHaxkvLE6V1kl-JQAAAAA"]
[Tue Apr 14 23:37:11.022534 2026] [:error] [pid 59985:tid 60006] [client 51.103.165.5:19438] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "ad5fJ-gHaxkvLE6V1kl-KAAAAA0"]
[Tue Apr 14 23:37:11.625953 2026] [:error] [pid 59985:tid 60002] [client 51.103.165.5:13038] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "ad5fJ-gHaxkvLE6V1kl-LgAAAAk"]
[Tue Apr 14 23:37:12.598902 2026] [:error] [pid 60074:tid 60085] [client 51.103.165.5:14770] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "ad5fKOtqnEmNU9vpHCnXAQAAAMk"]
[Tue Apr 14 23:37:13.513050 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:13240] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "ad5fKetqnEmNU9vpHCnXBgAAANY"]
[Tue Apr 14 23:37:15.012923 2026] [:error] [pid 3810:tid 3823] [client 51.103.165.5:32735] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "ad5fK8qc5XaYZhFXVGfjhQAAAYo"]
[Tue Apr 14 23:37:18.474842 2026] [:error] [pid 59987:tid 60070] [client 51.103.165.5:15871] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "ad5fLlWpk-Tfi6_vLKpZvQAAAJc"]
[Tue Apr 14 23:37:22.724129 2026] [:error] [pid 3778:tid 3782] [client 51.103.165.5:14327] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "ad5fMhx5DfpNmYF_PaETIwAAAUI"]
[Tue Apr 14 23:37:25.122293 2026] [:error] [pid 59986:tid 60038] [client 51.103.165.5:46186] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "ad5fNZ6axKeW6bX4H7fLBgAAAFI"]
[Tue Apr 14 23:37:26.017079 2026] [:error] [pid 3810:tid 3831] [client 51.103.165.5:32732] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "ad5fNsqc5XaYZhFXVGfjlgAAAZI"]
[Tue Apr 14 23:37:26.610757 2026] [:error] [pid 3810:tid 3836] [client 51.103.165.5:35396] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "ad5fNsqc5XaYZhFXVGfjmQAAAZc"]
[Tue Apr 14 23:37:27.833380 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:46154] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "ad5fN1Wpk-Tfi6_vLKpZzAAAAI4"]
[Tue Apr 14 23:37:28.730233 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:13733] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "ad5fOOtqnEmNU9vpHCnXGgAAAMU"]
[Tue Apr 14 23:37:29.486080 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:32723] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "ad5fOZ6axKeW6bX4H7fLEgAAAEY"]
[Tue Apr 14 23:37:30.213912 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:13699] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "ad5fOp6axKeW6bX4H7fLFgAAAE4"]
[Tue Apr 14 23:37:31.194201 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:14279] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "ad5fO56axKeW6bX4H7fLHQAAAEQ"]
[Tue Apr 14 23:37:32.182606 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:12476] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "ad5fPJ6axKeW6bX4H7fLIwAAAE4"]
[Tue Apr 14 23:37:33.167647 2026] [:error] [pid 59986:tid 60035] [client 51.103.165.5:14283] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "ad5fPZ6axKeW6bX4H7fLKgAAAE8"]
[Tue Apr 14 23:37:33.900895 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:32713] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "ad5fPZ6axKeW6bX4H7fLMQAAAFc"]
[Tue Apr 14 23:37:34.559862 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:30027] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "ad5fPutqnEmNU9vpHCnXHgAAAMM"]
[Tue Apr 14 23:37:35.229066 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:46167] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "ad5fP-tqnEmNU9vpHCnXIgAAAMo"]
[Tue Apr 14 23:37:35.797962 2026] [:error] [pid 3810:tid 3814] [client 51.103.165.5:15825] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "ad5fP8qc5XaYZhFXVGfjuwAAAYE"]
[Tue Apr 14 23:37:36.344844 2026] [:error] [pid 3810:tid 3833] [client 51.103.165.5:14278] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "ad5fQMqc5XaYZhFXVGfjvgAAAZQ"]
[Tue Apr 14 23:37:36.984744 2026] [:error] [pid 3810:tid 3832] [client 51.103.165.5:30030] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "ad5fQMqc5XaYZhFXVGfjwgAAAZM"]
[Tue Apr 14 23:37:37.725278 2026] [:error] [pid 60074:tid 60093] [client 51.103.165.5:17391] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "ad5fQetqnEmNU9vpHCnXLAAAANE"]
[Tue Apr 14 23:37:38.399648 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:13736] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "ad5fQutqnEmNU9vpHCnXMAAAANc"]
[Tue Apr 14 23:37:39.062008 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:17407] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "ad5fQ56axKeW6bX4H7fLOAAAAEU"]
[Tue Apr 14 23:37:39.655174 2026] [:error] [pid 59985:tid 60003] [client 51.103.165.5:1998] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "ad5fQ-gHaxkvLE6V1kl-PAAAAAo"]
[Tue Apr 14 23:37:40.464343 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:11746] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "ad5fROtqnEmNU9vpHCnXNAAAAMo"]
[Tue Apr 14 23:37:41.886534 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:2037] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.mopj.php"] [unique_id "ad5fRetqnEmNU9vpHCnXNwAAAMg"]
[Tue Apr 14 23:37:42.667471 2026] [:error] [pid 3810:tid 3829] [client 51.103.165.5:12423] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ad5fRsqc5XaYZhFXVGfj1QAAAZA"]
[Tue Apr 14 23:37:43.504794 2026] [:error] [pid 3778:tid 3804] [client 51.103.165.5:2027] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ad5fRxx5DfpNmYF_PaETKAAAAVg"]
[Tue Apr 14 23:37:44.353411 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:25472] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ad5fSOtqnEmNU9vpHCnXPQAAAMM"]
[Tue Apr 14 23:37:45.048752 2026] [:error] [pid 59987:tid 60064] [client 51.103.165.5:13740] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ad5fSVWpk-Tfi6_vLKpZ1QAAAJE"]
[Tue Apr 14 23:37:45.740845 2026] [:error] [pid 22177:tid 22197] [client 51.103.165.5:11753] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "ad5fSYTVeJSXHDIlEDunNQAAARI"]
[Tue Apr 14 23:37:46.567067 2026] [:error] [pid 3810:tid 3829] [client 51.103.165.5:11713] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "ad5fSsqc5XaYZhFXVGfj4AAAAZA"]
[Tue Apr 14 23:37:47.195452 2026] [:error] [pid 59986:tid 60038] [client 51.103.165.5:2028] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "ad5fS56axKeW6bX4H7fLQAAAAFI"]
[Tue Apr 14 23:37:47.791040 2026] [:error] [pid 3810:tid 3837] [client 51.103.165.5:20482] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nano.php"] [unique_id "ad5fS8qc5XaYZhFXVGfj5gAAAZg"]
[Tue Apr 14 23:37:48.600107 2026] [:error] [pid 3810:tid 3836] [client 51.103.165.5:17368] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "ad5fTMqc5XaYZhFXVGfj6QAAAZc"]
[Tue Apr 14 23:37:49.447766 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:13719] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "ad5fTZ6axKeW6bX4H7fLQgAAAEM"]
[Tue Apr 14 23:37:51.242880 2026] [proxy_fcgi:error] [pid 60074:tid 60083] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:51.483417 2026] [proxy_fcgi:error] [pid 60074:tid 60097] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:52.314004 2026] [proxy_fcgi:error] [pid 60074:tid 60087] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:52.555610 2026] [proxy_fcgi:error] [pid 60074:tid 60084] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:52.838057 2026] [proxy_fcgi:error] [pid 60074:tid 60093] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:53.077798 2026] [proxy_fcgi:error] [pid 60074:tid 60099] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:53.317892 2026] [proxy_fcgi:error] [pid 60074:tid 60082] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:53.670274 2026] [proxy_fcgi:error] [pid 60074:tid 60077] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:53.921380 2026] [proxy_fcgi:error] [pid 60074:tid 60083] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:54.161925 2026] [proxy_fcgi:error] [pid 60074:tid 60097] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:54.406329 2026] [proxy_fcgi:error] [pid 60074:tid 60086] [client 51.103.165.5:13698] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:37:54.871472 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:13698] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "ad5fUutqnEmNU9vpHCnXYwAAAMI"]
[Tue Apr 14 23:37:55.815454 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:14796] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "ad5fU56axKeW6bX4H7fLWgAAAFU"]
[Tue Apr 14 23:37:56.635322 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:11722] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "ad5fVJ6axKeW6bX4H7fLYAAAAEU"]
[Tue Apr 14 23:37:57.138987 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:17362] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "ad5fVegHaxkvLE6V1kl-RAAAAAc"]
[Tue Apr 14 23:37:57.738028 2026] [:error] [pid 59987:tid 60051] [client 51.103.165.5:45487] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad5fVVWpk-Tfi6_vLKpZ3AAAAIQ"]
[Tue Apr 14 23:37:58.279096 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:45450] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad5fVp6axKeW6bX4H7fLaQAAAFY"]
[Tue Apr 14 23:37:58.850163 2026] [:error] [pid 59986:tid 60031] [client 51.103.165.5:28640] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad5fVp6axKeW6bX4H7fLawAAAEs"]
[Tue Apr 14 23:37:59.575308 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:13750] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad5fV56axKeW6bX4H7fLbwAAAEw"]
[Tue Apr 14 23:38:00.795619 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:12452] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "ad5fWJ6axKeW6bX4H7fLcwAAAEc"]
[Tue Apr 14 23:38:02.150800 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:32041] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "ad5fWp6axKeW6bX4H7fLdwAAAFM"]
[Tue Apr 14 23:38:03.170925 2026] [:error] [pid 59986:tid 60028] [client 51.103.165.5:1988] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "ad5fW56axKeW6bX4H7fLgAAAAEg"]
[Tue Apr 14 23:38:04.028214 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:28653] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "ad5fXFWpk-Tfi6_vLKpZ4QAAAI4"]
[Tue Apr 14 23:38:05.122786 2026] [:error] [pid 59986:tid 60035] [client 51.103.165.5:28618] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ad5fXZ6axKeW6bX4H7fLjQAAAE8"]
[Tue Apr 14 23:38:06.607732 2026] [:error] [pid 3810:tid 3829] [client 51.103.165.5:15103] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ad5fXsqc5XaYZhFXVGfj9AAAAZA"]
[Tue Apr 14 23:38:07.869809 2026] [:error] [pid 59986:tid 60021] [client 51.103.165.5:1893] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ad5fX56axKeW6bX4H7fLnQAAAEE"]
[Tue Apr 14 23:38:08.893737 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:17369] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ad5fYJ6axKeW6bX4H7fLowAAAE0"]
[Tue Apr 14 23:38:09.654281 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:15078] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "ad5fYZ6axKeW6bX4H7fLqgAAAFE"]
[Tue Apr 14 23:38:10.538725 2026] [:error] [pid 59986:tid 60028] [client 51.103.165.5:28633] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "ad5fYp6axKeW6bX4H7fLrwAAAEg"]
[Tue Apr 14 23:38:11.540363 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:25491] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "ad5fY-gHaxkvLE6V1kl-TwAAABg"]
[Tue Apr 14 23:38:13.526592 2026] [:error] [pid 22177:tid 22192] [client 51.103.165.5:24316] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "ad5fZYTVeJSXHDIlEDunRQAAAQ0"]
[Tue Apr 14 23:38:14.886339 2026] [:error] [pid 22177:tid 22189] [client 51.103.165.5:14033] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5fZoTVeJSXHDIlEDunRwAAAQo"]
[Tue Apr 14 23:38:16.329537 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:16048] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5faJ6axKeW6bX4H7fLuwAAAFc"]
[Tue Apr 14 23:38:17.234714 2026] [:error] [pid 59985:tid 60015] [client 51.103.165.5:23164] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5faegHaxkvLE6V1kl-YwAAABY"]
[Tue Apr 14 23:38:18.633943 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:18360] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5fap6axKeW6bX4H7fLygAAAEU"]
[Tue Apr 14 23:38:20.045953 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:22616] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ad5fbJ6axKeW6bX4H7fLzwAAAEY"]
[Tue Apr 14 23:38:24.282847 2026] [:error] [pid 3778:tid 3784] [client 51.103.165.5:11503] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ad5fcBx5DfpNmYF_PaETOgAAAUQ"]
[Tue Apr 14 23:38:26.241544 2026] [:error] [pid 59987:tid 60062] [client 51.103.165.5:37834] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ad5fclWpk-Tfi6_vLKpZ7gAAAI8"]
[Tue Apr 14 23:38:42.841966 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:1511] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "ad5fgp6axKeW6bX4H7fMJwAAAFM"]
[Tue Apr 14 23:38:55.798831 2026] [proxy_fcgi:error] [pid 59985:tid 60007] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:56.081696 2026] [proxy_fcgi:error] [pid 59985:tid 60014] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:56.321882 2026] [proxy_fcgi:error] [pid 59985:tid 60000] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:56.566062 2026] [proxy_fcgi:error] [pid 59985:tid 60016] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:58.087354 2026] [proxy_fcgi:error] [pid 59985:tid 60012] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:58.352917 2026] [proxy_fcgi:error] [pid 59985:tid 60009] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:59.126129 2026] [proxy_fcgi:error] [pid 59985:tid 60005] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:59.635654 2026] [proxy_fcgi:error] [pid 59985:tid 60011] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:38:59.896511 2026] [proxy_fcgi:error] [pid 59985:tid 60004] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:39:00.167413 2026] [proxy_fcgi:error] [pid 59985:tid 60002] [client 51.103.165.5:33383] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:39:00.431313 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:33383] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "ad5flOgHaxkvLE6V1kl-iwAAAAI"]
[Tue Apr 14 23:39:59.955176 2026] [:error] [pid 59987:tid 60058] [client 51.103.165.5:22325] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "ad5fz1Wpk-Tfi6_vLKpaYQAAAIs"]
[Tue Apr 14 23:40:01.298005 2026] [proxy_fcgi:error] [pid 60074:tid 60099] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:01.546247 2026] [proxy_fcgi:error] [pid 60074:tid 60090] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:02.025129 2026] [proxy_fcgi:error] [pid 60074:tid 60079] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:02.289864 2026] [proxy_fcgi:error] [pid 60074:tid 60085] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:02.529235 2026] [proxy_fcgi:error] [pid 60074:tid 60089] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:02.811417 2026] [proxy_fcgi:error] [pid 60074:tid 60094] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:03.051823 2026] [proxy_fcgi:error] [pid 60074:tid 60087] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:03.293085 2026] [proxy_fcgi:error] [pid 60074:tid 60092] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:03.913309 2026] [proxy_fcgi:error] [pid 60074:tid 60098] [client 51.103.165.5:19086] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:40:04.149655 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:19086] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "ad5f1OtqnEmNU9vpHCnX6wAAAMA"]
[Tue Apr 14 23:40:05.273974 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:44140] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "ad5f1Z6axKeW6bX4H7fM8QAAAE4"]
[Tue Apr 14 23:40:05.858870 2026] [:error] [pid 3778:tid 3792] [client 51.103.165.5:35866] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "ad5f1Rx5DfpNmYF_PaET8gAAAUw"]
[Tue Apr 14 23:40:06.941190 2026] [:error] [pid 3810:tid 3834] [client 51.103.165.5:1175] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "ad5f1sqc5XaYZhFXVGfkdAAAAZU"]
[Tue Apr 14 23:40:08.008386 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:18427] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "ad5f2J6axKeW6bX4H7fM8gAAAEk"]
[Tue Apr 14 23:40:08.738823 2026] [:error] [pid 60074:tid 60093] [client 51.103.165.5:22632] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "ad5f2OtqnEmNU9vpHCnX7QAAANE"]
[Tue Apr 14 23:40:09.466533 2026] [:error] [pid 3778:tid 3788] [client 51.103.165.5:12707] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "ad5f2Rx5DfpNmYF_PaET9QAAAUg"]
[Tue Apr 14 23:40:10.093445 2026] [:error] [pid 3810:tid 3815] [client 51.103.165.5:18386] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "ad5f2sqc5XaYZhFXVGfkegAAAYI"]
[Tue Apr 14 23:40:10.829694 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:22637] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ad5f2ugHaxkvLE6V1kl-qQAAABg"]
[Tue Apr 14 23:40:11.761652 2026] [:error] [pid 59986:tid 60022] [client 51.103.165.5:46742] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ad5f256axKeW6bX4H7fM9QAAAEI"]
[Tue Apr 14 23:40:12.346957 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:50552] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ad5f3J6axKeW6bX4H7fM-QAAAFg"]
[Tue Apr 14 23:40:13.684393 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:37200] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ad5f3etqnEmNU9vpHCnX8wAAAM0"]
[Tue Apr 14 23:40:14.587959 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:35842] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5f3p6axKeW6bX4H7fNCgAAAEM"]
[Tue Apr 14 23:40:15.286539 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:46138] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5f356axKeW6bX4H7fNDwAAAEY"]
[Tue Apr 14 23:40:16.126320 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:1748] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5f4J6axKeW6bX4H7fNFgAAAEk"]
[Tue Apr 14 23:40:17.089978 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:22373] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "ad5f4Z6axKeW6bX4H7fNIAAAAEw"]
[Tue Apr 14 23:40:18.079898 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:50538] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ad5f4p6axKeW6bX4H7fNKgAAAFE"]
[Tue Apr 14 23:40:22.403409 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:17098] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ad5f5p6axKeW6bX4H7fNRwAAAFc"]
[Tue Apr 14 23:40:24.021445 2026] [:error] [pid 60074:tid 60100] [client 51.103.165.5:22385] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ad5f6OtqnEmNU9vpHCnX-AAAANg"]
[Tue Apr 14 23:40:31.385958 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:25572] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ad5f71Wpk-Tfi6_vLKpadQAAAIo"]
[Tue Apr 14 23:40:33.734487 2026] [:error] [pid 22177:tid 22203] [client 51.103.165.5:14982] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5f8YTVeJSXHDIlEDunlwAAARg"]
[Tue Apr 14 23:40:36.418330 2026] [:error] [pid 59987:tid 60066] [client 51.103.165.5:14988] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5f9FWpk-Tfi6_vLKpaeAAAAJM"]
[Tue Apr 14 23:40:37.022322 2026] [:error] [pid 59987:tid 60060] [client 51.103.165.5:20994] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5f9VWpk-Tfi6_vLKpaegAAAI0"]
[Tue Apr 14 23:40:37.838921 2026] [:error] [pid 59985:tid 60013] [client 51.103.165.5:14033] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5f9egHaxkvLE6V1kl-tQAAABQ"]
[Tue Apr 14 23:40:38.413393 2026] [:error] [pid 3778:tid 3791] [client 51.103.165.5:1736] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ad5f9hx5DfpNmYF_PaEUXwAAAUs"]
[Tue Apr 14 23:40:39.698178 2026] [:error] [pid 59987:tid 60064] [client 51.103.165.5:36571] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ad5f91Wpk-Tfi6_vLKpagQAAAJE"]
[Tue Apr 14 23:40:40.608117 2026] [:error] [pid 59985:tid 60015] [client 51.103.165.5:31677] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ad5f-OgHaxkvLE6V1kl-ugAAABY"]
[Tue Apr 14 23:40:41.277878 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:15027] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ad5f-Z6axKeW6bX4H7fNnQAAAFg"]
[Tue Apr 14 23:40:42.074887 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:62543] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "ad5f-p6axKeW6bX4H7fNngAAAEQ"]
[Tue Apr 14 23:40:42.992597 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:23096] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "ad5f-utqnEmNU9vpHCnYIgAAANY"]
[Tue Apr 14 23:40:43.862464 2026] [:error] [pid 3810:tid 3832] [client 51.103.165.5:24204] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "ad5f-8qc5XaYZhFXVGfkqQAAAZM"]
[Tue Apr 14 23:40:44.773573 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:62578] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "ad5f_J6axKeW6bX4H7fNogAAAEU"]
[Tue Apr 14 23:40:45.540772 2026] [:error] [pid 59986:tid 60036] [client 51.103.165.5:16082] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5f_Z6axKeW6bX4H7fNowAAAFA"]
[Tue Apr 14 23:40:47.808962 2026] [:error] [pid 22177:tid 22202] [client 51.103.165.5:15000] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5f_4TVeJSXHDIlEDunoAAAARc"]
[Tue Apr 14 23:40:49.697479 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:27354] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5gAVWpk-Tfi6_vLKpamwAAAIc"]
[Tue Apr 14 23:40:51.318302 2026] [:error] [pid 59986:tid 60030] [client 51.103.165.5:24225] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ad5gA56axKeW6bX4H7fNtAAAAEo"]
[Tue Apr 14 23:40:52.407394 2026] [:error] [pid 59985:tid 60002] [client 51.103.165.5:36554] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ad5gBOgHaxkvLE6V1kl-vwAAAAk"]
[Tue Apr 14 23:40:53.646503 2026] [:error] [pid 59986:tid 60028] [client 51.103.165.5:50016] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ad5gBZ6axKeW6bX4H7fNvQAAAEg"]
[Tue Apr 14 23:40:54.523936 2026] [:error] [pid 3778:tid 3801] [client 51.103.165.5:39104] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ad5gBhx5DfpNmYF_PaEUcAAAAVU"]
[Tue Apr 14 23:40:55.041497 2026] [:error] [pid 59986:tid 60038] [client 51.103.165.5:30414] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ad5gB56axKeW6bX4H7fNwwAAAFI"]
[Tue Apr 14 23:40:55.654358 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:25571] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "ad5gB56axKeW6bX4H7fNxwAAAFg"]
[Tue Apr 14 23:40:56.457213 2026] [:error] [pid 22177:tid 22192] [client 51.103.165.5:21006] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "ad5gCITVeJSXHDIlEDunpAAAAQ0"]
[Tue Apr 14 23:40:57.166470 2026] [:error] [pid 3810:tid 3817] [client 51.103.165.5:23046] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "ad5gCcqc5XaYZhFXVGfktQAAAYQ"]
[Tue Apr 14 23:40:57.960187 2026] [:error] [pid 3810:tid 3834] [client 51.103.165.5:26680] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "ad5gCcqc5XaYZhFXVGfktgAAAZU"]
[Tue Apr 14 23:40:58.595486 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:27334] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ad5gCutqnEmNU9vpHCnYbQAAAMQ"]
[Tue Apr 14 23:40:59.164578 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:36501] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ad5gC56axKeW6bX4H7fNzwAAAEc"]
[Tue Apr 14 23:40:59.737384 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:13985] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ad5gC56axKeW6bX4H7fN0wAAAEM"]
[Tue Apr 14 23:41:00.401479 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:36607] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ad5gDOgHaxkvLE6V1kl-wwAAAAI"]
[Tue Apr 14 23:41:00.977965 2026] [:error] [pid 3810:tid 3823] [client 51.103.165.5:18859] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gDMqc5XaYZhFXVGfkvgAAAYo"]
[Tue Apr 14 23:41:01.508552 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:15029] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gDZ6axKeW6bX4H7fN2gAAAEc"]
[Tue Apr 14 23:41:02.221918 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:36490] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gDlWpk-Tfi6_vLKpaowAAAJQ"]
[Tue Apr 14 23:41:02.965381 2026] [:error] [pid 59987:tid 60068] [client 51.103.165.5:36543] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gDlWpk-Tfi6_vLKpapAAAAJU"]
[Tue Apr 14 23:41:03.527970 2026] [proxy_fcgi:error] [pid 59987:tid 60056] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:03.775118 2026] [proxy_fcgi:error] [pid 59987:tid 60064] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:04.014079 2026] [proxy_fcgi:error] [pid 59987:tid 60060] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:04.253478 2026] [proxy_fcgi:error] [pid 59987:tid 60053] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:04.494027 2026] [proxy_fcgi:error] [pid 59987:tid 60059] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:05.018324 2026] [proxy_fcgi:error] [pid 59987:tid 60070] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:05.513809 2026] [proxy_fcgi:error] [pid 59987:tid 60047] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:05.754384 2026] [proxy_fcgi:error] [pid 59987:tid 60054] [client 51.103.165.5:36513] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:41:06.276825 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:36513] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5gElWpk-Tfi6_vLKpatAAAAI4"]
[Tue Apr 14 23:41:06.906869 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:19881] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5gEp6axKeW6bX4H7fN8AAAAEY"]
[Tue Apr 14 23:41:07.438795 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:14584] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5gE-gHaxkvLE6V1kl-xwAAABc"]
[Tue Apr 14 23:41:08.136784 2026] [:error] [pid 59986:tid 60030] [client 51.103.165.5:14230] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "ad5gFJ6axKeW6bX4H7fN9gAAAEo"]
[Tue Apr 14 23:41:08.962909 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:21119] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5gFFWpk-Tfi6_vLKpauAAAAIk"]
[Tue Apr 14 23:41:09.642695 2026] [:error] [pid 3778:tid 3798] [client 51.103.165.5:21093] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5gFRx5DfpNmYF_PaEUfgAAAVI"]
[Tue Apr 14 23:41:10.355898 2026] [:error] [pid 59986:tid 60036] [client 51.103.165.5:27372] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5gFp6axKeW6bX4H7fN-wAAAFA"]
[Tue Apr 14 23:41:11.450448 2026] [:error] [pid 22177:tid 22198] [client 51.103.165.5:39149] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad5gF4TVeJSXHDIlEDunrAAAARM"]
[Tue Apr 14 23:41:12.180961 2026] [:error] [pid 3778:tid 3803] [client 51.103.165.5:13997] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "ad5gGBx5DfpNmYF_PaEUgQAAAVc"]
[Tue Apr 14 23:41:12.731446 2026] [:error] [pid 22177:tid 22188] [client 51.103.165.5:30461] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "ad5gGITVeJSXHDIlEDunrQAAAQk"]
[Tue Apr 14 23:41:13.232424 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:19846] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "ad5gGZ6axKeW6bX4H7fOBAAAAEk"]
[Tue Apr 14 23:41:14.140568 2026] [:error] [pid 22177:tid 22193] [client 51.103.165.5:26221] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "ad5gGoTVeJSXHDIlEDunrwAAAQ4"]
[Tue Apr 14 23:41:14.998566 2026] [:error] [pid 3778:tid 3781] [client 51.103.165.5:11682] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "ad5gGhx5DfpNmYF_PaEUggAAAUE"]
[Tue Apr 14 23:41:15.780499 2026] [:error] [pid 59987:tid 60071] [client 51.103.165.5:14579] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "ad5gG1Wpk-Tfi6_vLKpavwAAAJg"]
[Tue Apr 14 23:41:16.364310 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:26656] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "ad5gHFWpk-Tfi6_vLKpawQAAAIo"]
[Tue Apr 14 23:41:17.048748 2026] [:error] [pid 3778:tid 3797] [client 51.103.165.5:21059] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "ad5gHRx5DfpNmYF_PaEUhQAAAVE"]
[Tue Apr 14 23:41:17.799674 2026] [:error] [pid 3810:tid 3822] [client 51.103.165.5:19940] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "ad5gHcqc5XaYZhFXVGfkzQAAAYk"]
[Tue Apr 14 23:41:18.675159 2026] [:error] [pid 3810:tid 3830] [client 51.103.165.5:19647] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "ad5gHsqc5XaYZhFXVGfkzgAAAZE"]
[Tue Apr 14 23:41:19.950373 2026] [:error] [pid 3778:tid 3780] [client 51.103.165.5:19593] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "ad5gHxx5DfpNmYF_PaEUiAAAAUA"]
[Tue Apr 14 23:41:21.651288 2026] [:error] [pid 3810:tid 3817] [client 51.103.165.5:1830] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "ad5gIcqc5XaYZhFXVGfk0wAAAYQ"]
[Tue Apr 14 23:41:22.649670 2026] [:error] [pid 22177:tid 22199] [client 51.103.165.5:21056] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ad5gIoTVeJSXHDIlEDuntAAAARQ"]
[Tue Apr 14 23:41:24.149338 2026] [:error] [pid 60074:tid 60094] [client 51.103.165.5:19624] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ad5gJOtqnEmNU9vpHCnYhwAAANI"]
[Tue Apr 14 23:41:24.860723 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:19937] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ad5gJOtqnEmNU9vpHCnYiAAAANY"]
[Tue Apr 14 23:41:25.770810 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:32688] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ad5gJVWpk-Tfi6_vLKpaxwAAAIc"]
[Tue Apr 14 23:41:26.474778 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:15781] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "ad5gJp6axKeW6bX4H7fODQAAAEQ"]
[Tue Apr 14 23:41:27.531766 2026] [:error] [pid 3778:tid 3793] [client 51.103.165.5:60255] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "ad5gJxx5DfpNmYF_PaEUiwAAAU0"]
[Tue Apr 14 23:41:28.441458 2026] [:error] [pid 59986:tid 60031] [client 51.103.165.5:60281] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "ad5gKJ6axKeW6bX4H7fOEAAAAEs"]
[Tue Apr 14 23:41:29.460976 2026] [:error] [pid 60074:tid 60094] [client 51.103.165.5:38458] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "ad5gKetqnEmNU9vpHCnYlAAAANI"]
[Tue Apr 14 23:41:30.565896 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:11311] [client 51.103.165.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad5gKutqnEmNU9vpHCnYmQAAAMo"]
[Tue Apr 14 23:41:31.681042 2026] [:error] [pid 60074:tid 60097] [client 51.103.165.5:19945] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ad5gK-tqnEmNU9vpHCnYnwAAANU"]
[Tue Apr 14 23:41:32.558321 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:35914] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ad5gLJ6axKeW6bX4H7fOFQAAAEk"]
[Tue Apr 14 23:41:33.661694 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:1427] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ad5gLetqnEmNU9vpHCnYoAAAANY"]
[Tue Apr 14 23:41:34.567696 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:62678] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "ad5gLutqnEmNU9vpHCnYpAAAAMU"]
[Tue Apr 14 23:41:35.507635 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:19944] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "ad5gL56axKeW6bX4H7fOGAAAAFE"]
[Tue Apr 14 23:41:36.523191 2026] [:error] [pid 59986:tid 60035] [client 51.103.165.5:60236] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "ad5gMJ6axKeW6bX4H7fOGgAAAE8"]
[Tue Apr 14 23:41:37.597140 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:60263] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "ad5gMetqnEmNU9vpHCnYqQAAANY"]
[Tue Apr 14 23:41:38.303180 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:15796] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5gMugHaxkvLE6V1kl-0gAAABc"]
[Tue Apr 14 23:41:38.872515 2026] [:error] [pid 22177:tid 22191] [client 51.103.165.5:31731] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5gMoTVeJSXHDIlEDunwQAAAQw"]
[Tue Apr 14 23:41:39.484742 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:15771] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5gM56axKeW6bX4H7fOIgAAAFg"]
[Tue Apr 14 23:41:40.143848 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:60266] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "ad5gNOtqnEmNU9vpHCnYrwAAAMA"]
[Tue Apr 14 23:41:40.903448 2026] [:error] [pid 60074:tid 60091] [client 51.103.165.5:62661] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "ad5gNOtqnEmNU9vpHCnYsQAAAM8"]
[Tue Apr 14 23:41:41.905711 2026] [:error] [pid 59986:tid 60031] [client 51.103.165.5:60256] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "ad5gNZ6axKeW6bX4H7fOJwAAAEs"]
[Tue Apr 14 23:41:42.881581 2026] [:error] [pid 3810:tid 3828] [client 51.103.165.5:16265] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "ad5gNsqc5XaYZhFXVGfk6AAAAY8"]
[Tue Apr 14 23:41:43.808856 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:19369] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "ad5gN56axKeW6bX4H7fOLAAAAFc"]
[Tue Apr 14 23:41:44.598927 2026] [:error] [pid 3810:tid 3833] [client 51.103.165.5:35916] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "ad5gOMqc5XaYZhFXVGfk7wAAAZQ"]
[Tue Apr 14 23:41:46.297517 2026] [:error] [pid 3810:tid 3815] [client 51.103.165.5:18933] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "ad5gOsqc5XaYZhFXVGfk-AAAAYI"]
[Tue Apr 14 23:41:47.783185 2026] [:error] [pid 59986:tid 60035] [client 51.103.165.5:32672] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "ad5gO56axKeW6bX4H7fOQAAAAE8"]
[Tue Apr 14 23:41:49.207763 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:15762] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "ad5gPZ6axKeW6bX4H7fORQAAAFY"]
[Tue Apr 14 23:41:50.967432 2026] [:error] [pid 59986:tid 60020] [client 51.103.165.5:16314] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "ad5gPp6axKeW6bX4H7fORwAAAEA"]
[Tue Apr 14 23:41:51.642701 2026] [:error] [pid 3810:tid 3826] [client 51.103.165.5:18899] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "ad5gP8qc5XaYZhFXVGflCAAAAY0"]
[Tue Apr 14 23:41:52.788335 2026] [:error] [pid 59987:tid 60048] [client 51.103.165.5:18930] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "ad5gQFWpk-Tfi6_vLKpaywAAAIE"]
[Tue Apr 14 23:41:54.599994 2026] [:error] [pid 59986:tid 60031] [client 51.103.165.5:14725] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "ad5gQp6axKeW6bX4H7fOSwAAAEs"]
[Tue Apr 14 23:41:55.249973 2026] [:error] [pid 22177:tid 22194] [client 51.103.165.5:12015] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ad5gQ4TVeJSXHDIlEDunywAAAQ8"]
[Tue Apr 14 23:41:56.187729 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:19434] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ad5gRJ6axKeW6bX4H7fOUAAAAFU"]
[Tue Apr 14 23:41:57.499212 2026] [:error] [pid 59986:tid 60040] [client 51.103.165.5:27922] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ad5gRZ6axKeW6bX4H7fOUgAAAFQ"]
[Tue Apr 14 23:42:02.187458 2026] [:error] [pid 22177:tid 22189] [client 51.103.165.5:13236] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ad5gSoTVeJSXHDIlEDun0wAAAQo"]
[Tue Apr 14 23:42:03.156304 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:32711] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "ad5gS-tqnEmNU9vpHCnYxwAAAMo"]
[Tue Apr 14 23:42:04.157576 2026] [:error] [pid 3810:tid 3820] [client 51.103.165.5:15525] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "ad5gTMqc5XaYZhFXVGflGwAAAYc"]
[Tue Apr 14 23:42:04.848622 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:13237] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "ad5gTJ6axKeW6bX4H7fOYAAAAEw"]
[Tue Apr 14 23:42:06.199364 2026] [proxy_fcgi:error] [pid 22177:tid 22186] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:06.466091 2026] [proxy_fcgi:error] [pid 22177:tid 22183] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:06.705530 2026] [proxy_fcgi:error] [pid 22177:tid 22196] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:06.949420 2026] [proxy_fcgi:error] [pid 22177:tid 22187] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:07.261622 2026] [proxy_fcgi:error] [pid 22177:tid 22188] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:07.894030 2026] [proxy_fcgi:error] [pid 22177:tid 22201] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:08.544339 2026] [proxy_fcgi:error] [pid 22177:tid 22193] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:08.837319 2026] [proxy_fcgi:error] [pid 22177:tid 22191] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:10.256416 2026] [proxy_fcgi:error] [pid 22177:tid 22181] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:10.495715 2026] [proxy_fcgi:error] [pid 22177:tid 22186] [client 51.103.165.5:48311] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:42:10.731866 2026] [:error] [pid 22177:tid 22180] [client 51.103.165.5:48311] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "ad5gUoTVeJSXHDIlEDun6gAAAQE"]
[Tue Apr 14 23:42:11.412184 2026] [:error] [pid 3778:tid 3787] [client 51.103.165.5:48264] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "ad5gUxx5DfpNmYF_PaEUrQAAAUc"]
[Tue Apr 14 23:42:12.004163 2026] [:error] [pid 3810:tid 3826] [client 51.103.165.5:13232] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "ad5gVMqc5XaYZhFXVGflLQAAAY0"]
[Tue Apr 14 23:42:12.968992 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:19412] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "ad5gVOtqnEmNU9vpHCnY1AAAANc"]
[Tue Apr 14 23:42:13.698459 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:12247] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gVZ6axKeW6bX4H7fOcwAAAFc"]
[Tue Apr 14 23:42:14.619412 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:14784] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gVp6axKeW6bX4H7fOdAAAAFM"]
[Tue Apr 14 23:42:15.174162 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:13729] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gV56axKeW6bX4H7fOdQAAAEM"]
[Tue Apr 14 23:42:16.154094 2026] [:error] [pid 3810:tid 3828] [client 51.103.165.5:13208] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "ad5gWMqc5XaYZhFXVGflPAAAAY8"]
[Tue Apr 14 23:42:17.437148 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:13224] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ad5gWegHaxkvLE6V1kl-5QAAAAc"]
[Tue Apr 14 23:42:18.225059 2026] [:error] [pid 59985:tid 60014] [client 51.103.165.5:48286] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ad5gWugHaxkvLE6V1kl-5wAAABU"]
[Tue Apr 14 23:42:19.084306 2026] [:error] [pid 59987:tid 60069] [client 51.103.165.5:18135] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ad5gW1Wpk-Tfi6_vLKpazwAAAJY"]
[Tue Apr 14 23:42:20.073048 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:17346] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ad5gXOgHaxkvLE6V1kl-6wAAABc"]
[Tue Apr 14 23:42:21.274718 2026] [:error] [pid 3810:tid 3836] [client 51.103.165.5:32037] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "ad5gXcqc5XaYZhFXVGflRwAAAZc"]
[Tue Apr 14 23:42:22.142274 2026] [:error] [pid 3810:tid 3830] [client 51.103.165.5:14319] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "ad5gXsqc5XaYZhFXVGflSQAAAZE"]
[Tue Apr 14 23:42:23.262063 2026] [:error] [pid 3810:tid 3821] [client 51.103.165.5:18359] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "ad5gX8qc5XaYZhFXVGflSwAAAYg"]
[Tue Apr 14 23:42:24.111326 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:15073] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "ad5gYJ6axKeW6bX4H7fOdwAAAE0"]
[Tue Apr 14 23:42:25.485715 2026] [:error] [pid 3810:tid 3814] [client 51.103.165.5:26161] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "ad5gYcqc5XaYZhFXVGflUAAAAYE"]
[Tue Apr 14 23:42:26.088807 2026] [:error] [pid 59985:tid 59994] [client 51.103.165.5:16888] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "ad5gYugHaxkvLE6V1kl-8wAAAAE"]
[Tue Apr 14 23:42:27.530640 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:17338] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "ad5gY-tqnEmNU9vpHCnY4QAAAMs"]
[Tue Apr 14 23:42:28.509680 2026] [:error] [pid 3810:tid 3820] [client 51.103.165.5:39703] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "ad5gZMqc5XaYZhFXVGflVgAAAYc"]
[Tue Apr 14 23:42:29.761036 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:12180] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "ad5gZetqnEmNU9vpHCnY5AAAAME"]
[Tue Apr 14 23:42:30.858429 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:31094] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "ad5gZutqnEmNU9vpHCnY5gAAAMM"]
[Tue Apr 14 23:42:31.566700 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:39709] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "ad5gZ-tqnEmNU9vpHCnY5wAAANc"]
[Tue Apr 14 23:42:32.723820 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:39040] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "ad5gaOtqnEmNU9vpHCnY6gAAAMc"]
[Tue Apr 14 23:42:33.540478 2026] [:error] [pid 59985:tid 59996] [client 51.103.165.5:19658] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "ad5gaegHaxkvLE6V1kl-_AAAAAM"]
[Tue Apr 14 23:42:34.850739 2026] [:error] [pid 3810:tid 3813] [client 51.103.165.5:31128] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "ad5gasqc5XaYZhFXVGflXwAAAYA"]
[Tue Apr 14 23:42:35.549211 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:31065] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "ad5ga56axKeW6bX4H7fOgQAAAEM"]
[Tue Apr 14 23:42:36.345461 2026] [:error] [pid 3778:tid 3793] [client 51.103.165.5:31050] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "ad5gbBx5DfpNmYF_PaEUygAAAU0"]
[Tue Apr 14 23:42:37.361042 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:1287] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "ad5gbegHaxkvLE6V1kl-_gAAAAI"]
[Tue Apr 14 23:42:38.498648 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:11731] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "ad5gbutqnEmNU9vpHCnY8gAAAMI"]
[Tue Apr 14 23:42:39.491221 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:45491] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "ad5gb-gHaxkvLE6V1kl_AwAAABc"]
[Tue Apr 14 23:42:40.085763 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:1302] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "ad5gcOgHaxkvLE6V1kl_BAAAAAw"]
[Tue Apr 14 23:42:41.228971 2026] [:error] [pid 22177:tid 22195] [client 51.103.165.5:21718] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "ad5gcYTVeJSXHDIlEDun8AAAARA"]
[Tue Apr 14 23:42:42.060313 2026] [:error] [pid 22177:tid 22181] [client 51.103.165.5:39078] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "ad5gcoTVeJSXHDIlEDun8gAAAQI"]
[Tue Apr 14 23:42:42.918954 2026] [:error] [pid 3778:tid 3781] [client 51.103.165.5:21737] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "ad5gchx5DfpNmYF_PaEU0wAAAUE"]
[Tue Apr 14 23:42:43.779281 2026] [:error] [pid 3810:tid 3818] [client 51.103.165.5:13775] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "ad5gc8qc5XaYZhFXVGflZQAAAYU"]
[Tue Apr 14 23:42:44.360388 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:33938] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "ad5gdJ6axKeW6bX4H7fOhwAAAFY"]
[Tue Apr 14 23:42:45.742607 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:26727] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "ad5gdZ6axKeW6bX4H7fOiQAAAEc"]
[Tue Apr 14 23:42:47.294580 2026] [:error] [pid 3810:tid 3815] [client 51.103.165.5:1911] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "ad5gd8qc5XaYZhFXVGflaAAAAYI"]
[Tue Apr 14 23:42:49.666837 2026] [:error] [pid 3810:tid 3836] [client 51.103.165.5:1291] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "ad5gecqc5XaYZhFXVGflcQAAAZc"]
[Tue Apr 14 23:42:52.354820 2026] [:error] [pid 3810:tid 3815] [client 51.103.165.5:61997] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ad5gfMqc5XaYZhFXVGflegAAAYI"]
[Tue Apr 14 23:42:54.245711 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:13517] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ad5gfutqnEmNU9vpHCnY_QAAAMA"]
[Tue Apr 14 23:42:56.483720 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:32119] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ad5ggJ6axKeW6bX4H7fOngAAAE4"]
[Tue Apr 14 23:42:57.278987 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:13544] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ad5ggZ6axKeW6bX4H7fOpAAAAEc"]
[Tue Apr 14 23:42:58.396640 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:26699] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "ad5ggp6axKeW6bX4H7fOqQAAAEw"]
[Tue Apr 14 23:42:59.246123 2026] [:error] [pid 3810:tid 3828] [client 51.103.165.5:26700] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "ad5gg8qc5XaYZhFXVGflgAAAAY8"]
[Tue Apr 14 23:42:59.954385 2026] [:error] [pid 3810:tid 3823] [client 51.103.165.5:38512] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "ad5gg8qc5XaYZhFXVGflhQAAAYo"]
[Tue Apr 14 23:43:03.801588 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:1482] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "ad5gh1Wpk-Tfi6_vLKpbBgAAAIc"]
[Tue Apr 14 23:43:05.148791 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:16515] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ad5giZ6axKeW6bX4H7fOsgAAAEU"]
[Tue Apr 14 23:43:06.524684 2026] [:error] [pid 22177:tid 22184] [client 51.103.165.5:13465] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ad5gioTVeJSXHDIlEDun-QAAAQU"]
[Tue Apr 14 23:43:07.849971 2026] [:error] [pid 59987:tid 60053] [client 51.103.165.5:1129] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ad5gi1Wpk-Tfi6_vLKpbBwAAAIY"]
[Tue Apr 14 23:43:10.107359 2026] [proxy_fcgi:error] [pid 59986:tid 60043] [client 51.103.165.5:1634] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:43:10.358208 2026] [proxy_fcgi:error] [pid 59986:tid 60028] [client 51.103.165.5:1634] AH01071: Got error 'Primary script unknown'
[Tue Apr 14 23:44:47.686747 2026] [:error] [pid 22177:tid 22181] [client 43.131.243.61:48086] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ad5g74TVeJSXHDIlEDuoJAAAAQI"]
[Wed Apr 15 00:45:15.272882 2026] [:error] [pid 62297:tid 62377] [client 159.89.55.245:34908] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad5vG6vogcWlrafOEaGxVwAAARc"]
[Wed Apr 15 00:45:19.745688 2026] [:error] [pid 62297:tid 62377] [client 159.89.55.245:54456] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad5vH6vogcWlrafOEaGxZAAAARc"]
[Wed Apr 15 05:44:11.795091 2026] [:error] [pid 4066:tid 4114] [client 159.89.55.245:36794] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad61K4C2YXfSPsC9O_BnagAAAEo"]
[Wed Apr 15 05:44:19.264723 2026] [:error] [pid 4066:tid 4110] [client 159.89.55.245:43502] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad61M4C2YXfSPsC9O_BndwAAAEY"]
[Wed Apr 15 07:04:28.265281 2026] [:error] [pid 45504:tid 45529] [client 43.157.95.131:34088] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ad7H_K3iO9_fE_IQEMlrXwAAARc"]
[Wed Apr 15 09:04:26.834053 2026] [:error] [pid 30644:tid 30651] [client 105.113.124.70:16676] [client 105.113.124.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.113.124.70, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ad7kGq8vuyJ0N41zsM_3mgAAAME"]
[Wed Apr 15 09:04:26.844785 2026] [proxy_fcgi:error] [pid 30644:tid 30651] [client 105.113.124.70:16676] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 09:24:24.868516 2026] [:error] [pid 30644:tid 30658] [client 130.12.180.144:39530] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "ad7oyK8vuyJ0N41zsM_9kAAAAMg"]
[Wed Apr 15 09:24:27.389571 2026] [:error] [pid 30644:tid 30671] [client 130.12.180.144:36802] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad7oy68vuyJ0N41zsM_9kgAAANU"]
[Wed Apr 15 09:24:28.823959 2026] [:error] [pid 50234:tid 50255] [client 130.12.180.144:23116] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "ad7ozNr0cDjH19-BoGykwgAAARM"]
[Wed Apr 15 09:24:30.555432 2026] [:error] [pid 30644:tid 30671] [client 130.12.180.144:23134] [client 130.12.180.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad7ozq8vuyJ0N41zsM_9oQAAANU"]
[Wed Apr 15 11:46:32.306951 2026] [:error] [pid 51186:tid 51196] [client 159.89.55.245:39108] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad8KGFfx1CjK_ZPfY1SHtwAAAUg"]
[Wed Apr 15 11:46:35.731976 2026] [:error] [pid 30554:tid 30600] [client 159.89.55.245:60806] [client 159.89.55.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad8KG16Jrdy3caXvUkvC7gAAAE0"]
[Wed Apr 15 12:26:24.031351 2026] [:error] [pid 51186:tid 51212] [client 43.156.156.96:37878] [client 43.156.156.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ad8TcFfx1CjK_ZPfY1SaIAAAAVg"]
[Wed Apr 15 14:12:30.341537 2026] [:error] [pid 11385:tid 11450] [client 43.130.110.130:40020] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ad8sTh_mZoXMMCiUoKUgawAAAMM"]
[Wed Apr 15 16:42:49.716963 2026] [:error] [pid 11383:tid 11405] [client 216.73.216.141:32742] [client 216.73.216.141] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourbrand.com|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "ad9PiTOMRk2pAgm2-j7SYwAAAAo"]
[Wed Apr 15 19:19:09.813998 2026] [:error] [pid 37370:tid 37372] [client 43.159.149.56:37820] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ad90LXg-gnM2Ga0cGAAGjwAAAQA"]
[Wed Apr 15 23:23:42.855357 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:43.116634 2026] [proxy_fcgi:error] [pid 31053:tid 31075] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:44.071788 2026] [proxy_fcgi:error] [pid 31053:tid 31074] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:44.928534 2026] [proxy_fcgi:error] [pid 31053:tid 31061] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:45.183681 2026] [proxy_fcgi:error] [pid 31053:tid 31073] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:46.317768 2026] [proxy_fcgi:error] [pid 31053:tid 31056] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:47.613605 2026] [proxy_fcgi:error] [pid 31053:tid 31078] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:47.867990 2026] [proxy_fcgi:error] [pid 31053:tid 31071] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:48.122890 2026] [proxy_fcgi:error] [pid 31053:tid 31066] [client 168.63.72.46:26304] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:23:48.373547 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:26304] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ad-thBcEkLCmvF0fjDdLawAAAI0"]
[Wed Apr 15 23:23:48.882790 2026] [:error] [pid 30956:tid 30978] [client 168.63.72.46:26361] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ad-thEBGUpjaWntNYq2j6QAAABI"]
[Wed Apr 15 23:23:49.391065 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:26243] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ad-thXg-gnM2Ga0cGACl8gAAAQw"]
[Wed Apr 15 23:23:49.904187 2026] [:error] [pid 31053:tid 31074] [client 168.63.72.46:26331] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ad-thRcEkLCmvF0fjDdLdQAAAJI"]
[Wed Apr 15 23:23:50.430377 2026] [:error] [pid 30958:tid 31031] [client 168.63.72.46:26359] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ad-thseG3wSKTO7NWFHqjwAAAM8"]
[Wed Apr 15 23:23:53.949032 2026] [:error] [pid 30956:tid 30973] [client 168.63.72.46:26348] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ad-tiUBGUpjaWntNYq2j6wAAAA0"]
[Wed Apr 15 23:23:54.458969 2026] [:error] [pid 37370:tid 37389] [client 168.63.72.46:26315] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ad-ting-gnM2Ga0cGACl-wAAARE"]
[Wed Apr 15 23:23:54.968742 2026] [:error] [pid 37370:tid 37388] [client 168.63.72.46:26305] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ad-ting-gnM2Ga0cGACl_AAAARA"]
[Wed Apr 15 23:23:55.476754 2026] [:error] [pid 30956:tid 30964] [client 168.63.72.46:26310] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ad-ti0BGUpjaWntNYq2j7gAAAAQ"]
[Wed Apr 15 23:23:55.980122 2026] [:error] [pid 37370:tid 37393] [client 168.63.72.46:26270] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ad-ti3g-gnM2Ga0cGACl_gAAARU"]
[Wed Apr 15 23:23:56.560661 2026] [:error] [pid 30957:tid 30995] [client 168.63.72.46:26343] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ad-tjH5gwVEVXHfVSirAuQAAAEY"]
[Wed Apr 15 23:23:57.079272 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:26249] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ad-tjXg-gnM2Ga0cGACl_wAAAQk"]
[Wed Apr 15 23:23:57.595734 2026] [:error] [pid 37370:tid 37374] [client 168.63.72.46:26254] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "ad-tjXg-gnM2Ga0cGACmAgAAAQI"]
[Wed Apr 15 23:23:58.121064 2026] [:error] [pid 37370:tid 37386] [client 168.63.72.46:26318] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "ad-tjng-gnM2Ga0cGACmBQAAAQ4"]
[Wed Apr 15 23:23:59.638089 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:26351] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "ad-tjxcEkLCmvF0fjDdLngAAAIw"]
[Wed Apr 15 23:24:00.140639 2026] [:error] [pid 23913:tid 23925] [client 168.63.72.46:26269] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "ad-tkFUaK3MLdSaLOyjbWQAAAUo"]
[Wed Apr 15 23:24:00.702566 2026] [:error] [pid 30956:tid 30968] [client 168.63.72.46:26263] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ad-tkEBGUpjaWntNYq2j8AAAAAg"]
[Wed Apr 15 23:24:01.220210 2026] [:error] [pid 23913:tid 23915] [client 168.63.72.46:26364] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ad-tkVUaK3MLdSaLOyjbXQAAAUA"]
[Wed Apr 15 23:24:02.735614 2026] [:error] [pid 30957:tid 30989] [client 168.63.72.46:26247] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ad-tkn5gwVEVXHfVSirAvgAAAEA"]
[Wed Apr 15 23:24:03.236801 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:26332] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ad-tk8eG3wSKTO7NWFHqlwAAAMk"]
[Wed Apr 15 23:24:03.739101 2026] [:error] [pid 23913:tid 23920] [client 168.63.72.46:26319] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ad-tk1UaK3MLdSaLOyjbZwAAAUU"]
[Wed Apr 15 23:24:04.241943 2026] [:error] [pid 37370:tid 37394] [client 168.63.72.46:26288] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ad-tlHg-gnM2Ga0cGACmCgAAARY"]
[Wed Apr 15 23:24:04.790757 2026] [:error] [pid 37370:tid 37386] [client 168.63.72.46:26259] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ad-tlHg-gnM2Ga0cGACmCwAAAQ4"]
[Wed Apr 15 23:24:06.169703 2026] [:error] [pid 30958:tid 31032] [client 168.63.72.46:26335] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ad-tlseG3wSKTO7NWFHqnwAAANA"]
[Wed Apr 15 23:24:06.719494 2026] [:error] [pid 30958:tid 31027] [client 168.63.72.46:26253] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ad-tlseG3wSKTO7NWFHqoAAAAMs"]
[Wed Apr 15 23:24:08.242841 2026] [:error] [pid 30957:tid 31009] [client 168.63.72.46:6082] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ad-tmH5gwVEVXHfVSirAvwAAAFQ"]
[Wed Apr 15 23:24:08.758267 2026] [:error] [pid 30957:tid 31005] [client 168.63.72.46:26341] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ad-tmH5gwVEVXHfVSirAwAAAAFA"]
[Wed Apr 15 23:24:09.261889 2026] [:error] [pid 30956:tid 30969] [client 168.63.72.46:26311] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ad-tmUBGUpjaWntNYq2j-gAAAAk"]
[Wed Apr 15 23:24:09.781651 2026] [:error] [pid 37370:tid 37389] [client 168.63.72.46:26264] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ad-tmXg-gnM2Ga0cGACmDQAAARE"]
[Wed Apr 15 23:24:10.298974 2026] [:error] [pid 37370:tid 37392] [client 168.63.72.46:26350] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ad-tmng-gnM2Ga0cGACmDwAAARQ"]
[Wed Apr 15 23:24:10.844481 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:6093] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ad-tmn5gwVEVXHfVSirAwQAAAEQ"]
[Wed Apr 15 23:24:11.345657 2026] [:error] [pid 23913:tid 23931] [client 168.63.72.46:26276] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ad-tm1UaK3MLdSaLOyjbgQAAAVA"]
[Wed Apr 15 23:24:12.851935 2026] [:error] [pid 23913:tid 23929] [client 168.63.72.46:26340] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ad-tnFUaK3MLdSaLOyjbhQAAAU4"]
[Wed Apr 15 23:24:13.377117 2026] [:error] [pid 23913:tid 23924] [client 168.63.72.46:26266] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ad-tnVUaK3MLdSaLOyjbiAAAAUk"]
[Wed Apr 15 23:24:14.008378 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:26327] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ad-tnhcEkLCmvF0fjDdLtwAAAJQ"]
[Wed Apr 15 23:24:14.512338 2026] [:error] [pid 37370:tid 37396] [client 168.63.72.46:26285] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ad-tnng-gnM2Ga0cGACmEgAAARg"]
[Wed Apr 15 23:24:15.030013 2026] [:error] [pid 30957:tid 31012] [client 168.63.72.46:26308] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ad-tn35gwVEVXHfVSirAxQAAAFc"]
[Wed Apr 15 23:24:15.570787 2026] [:error] [pid 37370:tid 37382] [client 168.63.72.46:26246] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ad-tn3g-gnM2Ga0cGACmEwAAAQo"]
[Wed Apr 15 23:24:16.090165 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:26314] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ad-toBcEkLCmvF0fjDdLuQAAAJY"]
[Wed Apr 15 23:24:16.590784 2026] [:error] [pid 23913:tid 23924] [client 168.63.72.46:26325] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "ad-toFUaK3MLdSaLOyjbjwAAAUk"]
[Wed Apr 15 23:24:17.093003 2026] [:error] [pid 37370:tid 37385] [client 168.63.72.46:26251] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ad-toXg-gnM2Ga0cGACmFgAAAQ0"]
[Wed Apr 15 23:24:17.608142 2026] [:error] [pid 30958:tid 31030] [client 168.63.72.46:6081] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ad-toceG3wSKTO7NWFHqpwAAAM4"]
[Wed Apr 15 23:24:18.108054 2026] [:error] [pid 30956:tid 30978] [client 168.63.72.46:26312] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ad-tokBGUpjaWntNYq2kAAAAABI"]
[Wed Apr 15 23:24:18.614496 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:26262] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ad-tohcEkLCmvF0fjDdLugAAAII"]
[Wed Apr 15 23:24:19.115151 2026] [:error] [pid 30956:tid 30982] [client 168.63.72.46:26349] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ad-to0BGUpjaWntNYq2kAQAAABY"]
[Wed Apr 15 23:24:19.627413 2026] [:error] [pid 30956:tid 30961] [client 168.63.72.46:26317] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ad-to0BGUpjaWntNYq2kAgAAAAE"]
[Wed Apr 15 23:24:20.910200 2026] [:error] [pid 30957:tid 31007] [client 168.63.72.46:26256] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ad-tpH5gwVEVXHfVSirAzwAAAFI"]
[Wed Apr 15 23:24:21.421305 2026] [:error] [pid 30957:tid 31008] [client 168.63.72.46:26293] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ad-tpX5gwVEVXHfVSirA0QAAAFM"]
[Wed Apr 15 23:24:21.922415 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:6122] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ad-tpRcEkLCmvF0fjDdLwwAAAJM"]
[Wed Apr 15 23:24:22.436794 2026] [:error] [pid 30956:tid 30962] [client 168.63.72.46:26258] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ad-tpkBGUpjaWntNYq2kBwAAAAI"]
[Wed Apr 15 23:24:22.973689 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:26268] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ad-tphcEkLCmvF0fjDdLyQAAAJc"]
[Wed Apr 15 23:24:23.477971 2026] [:error] [pid 37370:tid 37377] [client 168.63.72.46:26362] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "ad-tp3g-gnM2Ga0cGACmHQAAAQU"]
[Wed Apr 15 23:24:23.983502 2026] [:error] [pid 23913:tid 23920] [client 168.63.72.46:26242] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "ad-tp1UaK3MLdSaLOyjbmAAAAUU"]
[Wed Apr 15 23:24:24.486412 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:26245] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "ad-tqBcEkLCmvF0fjDdL0gAAAJM"]
[Wed Apr 15 23:24:24.989064 2026] [:error] [pid 31053:tid 31074] [client 168.63.72.46:26252] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "ad-tqBcEkLCmvF0fjDdL1gAAAJI"]
[Wed Apr 15 23:24:25.546080 2026] [:error] [pid 30956:tid 30965] [client 168.63.72.46:26286] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "ad-tqUBGUpjaWntNYq2kCAAAAAU"]
[Wed Apr 15 23:24:26.046985 2026] [:error] [pid 37370:tid 37380] [client 168.63.72.46:26250] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "ad-tqng-gnM2Ga0cGACmJQAAAQg"]
[Wed Apr 15 23:24:26.550644 2026] [:error] [pid 31053:tid 31066] [client 168.63.72.46:6088] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "ad-tqhcEkLCmvF0fjDdL2QAAAIo"]
[Wed Apr 15 23:24:27.058466 2026] [:error] [pid 30957:tid 30989] [client 168.63.72.46:26336] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "ad-tq35gwVEVXHfVSirA1gAAAEA"]
[Wed Apr 15 23:24:27.564553 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:26302] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "ad-tqxcEkLCmvF0fjDdL5gAAAIw"]
[Wed Apr 15 23:24:28.084653 2026] [:error] [pid 30956:tid 30976] [client 168.63.72.46:26337] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ad-trEBGUpjaWntNYq2kCwAAABA"]
[Wed Apr 15 23:24:28.585915 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:26333] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ad-trH5gwVEVXHfVSirA2QAAAEQ"]
[Wed Apr 15 23:24:29.091271 2026] [:error] [pid 30957:tid 31007] [client 168.63.72.46:26296] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ad-trX5gwVEVXHfVSirA3AAAAFI"]
[Wed Apr 15 23:24:30.603335 2026] [:error] [pid 37370:tid 37375] [client 168.63.72.46:26366] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ad-trng-gnM2Ga0cGACmMgAAAQM"]
[Wed Apr 15 23:24:31.115342 2026] [:error] [pid 37370:tid 37387] [client 168.63.72.46:26360] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "ad-tr3g-gnM2Ga0cGACmNAAAAQ8"]
[Wed Apr 15 23:24:31.629321 2026] [:error] [pid 30957:tid 30999] [client 168.63.72.46:26324] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "ad-tr35gwVEVXHfVSirA4gAAAEo"]
[Wed Apr 15 23:24:32.141800 2026] [:error] [pid 30957:tid 31006] [client 168.63.72.46:26257] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "ad-tsH5gwVEVXHfVSirA5gAAAFE"]
[Wed Apr 15 23:24:32.642862 2026] [:error] [pid 30957:tid 31000] [client 168.63.72.46:26357] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "ad-tsH5gwVEVXHfVSirA6AAAAEs"]
[Wed Apr 15 23:24:33.169510 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:6085] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ad-tsRcEkLCmvF0fjDdL6wAAAJE"]
[Wed Apr 15 23:24:33.694981 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:6138] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ad-tsRcEkLCmvF0fjDdL7AAAAIw"]
[Wed Apr 15 23:24:34.210159 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:6105] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ad-tshcEkLCmvF0fjDdL8QAAAJc"]
[Wed Apr 15 23:24:34.724550 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:26260] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ad-tshcEkLCmvF0fjDdL9AAAAI8"]
[Wed Apr 15 23:24:35.237363 2026] [:error] [pid 23913:tid 23932] [client 168.63.72.46:6107] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ad-ts1UaK3MLdSaLOyjbpgAAAVE"]
[Wed Apr 15 23:24:35.750763 2026] [:error] [pid 23913:tid 23939] [client 168.63.72.46:6111] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ad-ts1UaK3MLdSaLOyjbqQAAAVg"]
[Wed Apr 15 23:24:36.279073 2026] [:error] [pid 37370:tid 37379] [client 168.63.72.46:6095] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ad-ttHg-gnM2Ga0cGACmQAAAAQc"]
[Wed Apr 15 23:24:36.782860 2026] [:error] [pid 30958:tid 31030] [client 168.63.72.46:26287] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ad-ttMeG3wSKTO7NWFHqrwAAAM4"]
[Wed Apr 15 23:24:37.289838 2026] [:error] [pid 30958:tid 31020] [client 168.63.72.46:6097] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "ad-ttceG3wSKTO7NWFHqsQAAAMQ"]
[Wed Apr 15 23:24:37.796114 2026] [:error] [pid 30956:tid 30963] [client 168.63.72.46:26363] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "ad-ttUBGUpjaWntNYq2kEAAAAAM"]
[Wed Apr 15 23:24:38.311447 2026] [:error] [pid 31053:tid 31069] [client 168.63.72.46:26367] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "ad-tthcEkLCmvF0fjDdL-AAAAI0"]
[Wed Apr 15 23:24:38.817468 2026] [:error] [pid 37370:tid 37373] [client 168.63.72.46:26345] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "ad-ttng-gnM2Ga0cGACmQwAAAQE"]
[Wed Apr 15 23:24:39.324760 2026] [:error] [pid 30956:tid 30970] [client 168.63.72.46:6090] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ad-tt0BGUpjaWntNYq2kEgAAAAo"]
[Wed Apr 15 23:24:39.825348 2026] [:error] [pid 30956:tid 30968] [client 168.63.72.46:26265] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ad-tt0BGUpjaWntNYq2kFAAAAAg"]
[Wed Apr 15 23:24:40.900150 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:26282] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ad-tuHg-gnM2Ga0cGACmRgAAARI"]
[Wed Apr 15 23:24:41.463915 2026] [:error] [pid 30957:tid 31012] [client 168.63.72.46:26344] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ad-tuX5gwVEVXHfVSirA9AAAAFc"]
[Wed Apr 15 23:24:41.975163 2026] [:error] [pid 37370:tid 37375] [client 168.63.72.46:26240] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ad-tuXg-gnM2Ga0cGACmSQAAAQM"]
[Wed Apr 15 23:24:42.572429 2026] [:error] [pid 23913:tid 23917] [client 168.63.72.46:26272] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ad-tulUaK3MLdSaLOyjbrgAAAUI"]
[Wed Apr 15 23:24:43.087357 2026] [:error] [pid 30958:tid 31034] [client 168.63.72.46:6140] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ad-tu8eG3wSKTO7NWFHquQAAANI"]
[Wed Apr 15 23:24:43.596096 2026] [:error] [pid 30957:tid 30990] [client 168.63.72.46:26307] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ad-tu35gwVEVXHfVSirA9wAAAEE"]
[Wed Apr 15 23:24:44.099182 2026] [:error] [pid 30958:tid 31030] [client 168.63.72.46:26280] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ad-tvMeG3wSKTO7NWFHqvQAAAM4"]
[Wed Apr 15 23:24:44.666119 2026] [:error] [pid 30956:tid 30975] [client 168.63.72.46:6126] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ad-tvEBGUpjaWntNYq2kFwAAAA8"]
[Wed Apr 15 23:24:45.169414 2026] [:error] [pid 30957:tid 31000] [client 168.63.72.46:26339] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ad-tvX5gwVEVXHfVSirA-QAAAEs"]
[Wed Apr 15 23:24:45.677369 2026] [:error] [pid 30958:tid 31033] [client 168.63.72.46:26271] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ad-tvceG3wSKTO7NWFHqxQAAANE"]
[Wed Apr 15 23:24:46.190644 2026] [:error] [pid 30958:tid 31037] [client 168.63.72.46:6025] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ad-tvseG3wSKTO7NWFHqxwAAANU"]
[Wed Apr 15 23:24:46.702455 2026] [:error] [pid 30958:tid 31021] [client 168.63.72.46:6087] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ad-tvseG3wSKTO7NWFHqyQAAAMU"]
[Wed Apr 15 23:24:47.213067 2026] [:error] [pid 23913:tid 23916] [client 168.63.72.46:26321] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ad-tv1UaK3MLdSaLOyjbtAAAAUE"]
[Wed Apr 15 23:24:47.729852 2026] [:error] [pid 31053:tid 31073] [client 168.63.72.46:26352] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "ad-tvxcEkLCmvF0fjDdMAgAAAJE"]
[Wed Apr 15 23:24:48.239097 2026] [proxy_fcgi:error] [pid 30958:tid 31016] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:48.493956 2026] [proxy_fcgi:error] [pid 30958:tid 31023] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:48.748672 2026] [proxy_fcgi:error] [pid 30958:tid 31028] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:49.003853 2026] [proxy_fcgi:error] [pid 30958:tid 31037] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:49.768897 2026] [proxy_fcgi:error] [pid 30958:tid 31038] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:50.276352 2026] [proxy_fcgi:error] [pid 30958:tid 31035] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:50.533158 2026] [proxy_fcgi:error] [pid 30958:tid 31028] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:50.792129 2026] [proxy_fcgi:error] [pid 30958:tid 31025] [client 168.63.72.46:6116] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:24:51.043026 2026] [:error] [pid 30958:tid 31034] [client 168.63.72.46:6116] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "ad-tw8eG3wSKTO7NWFHq7AAAANI"]
[Wed Apr 15 23:24:51.557452 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:26267] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "ad-twxcEkLCmvF0fjDdMCQAAAIU"]
[Wed Apr 15 23:24:52.058826 2026] [:error] [pid 30956:tid 30978] [client 168.63.72.46:26248] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "ad-txEBGUpjaWntNYq2kGQAAABI"]
[Wed Apr 15 23:24:52.591533 2026] [:error] [pid 31053:tid 31059] [client 168.63.72.46:6080] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "ad-txBcEkLCmvF0fjDdMDwAAAIM"]
[Wed Apr 15 23:24:53.146538 2026] [:error] [pid 23913:tid 23933] [client 168.63.72.46:26330] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ad-txVUaK3MLdSaLOyjbvQAAAVI"]
[Wed Apr 15 23:24:53.647006 2026] [:error] [pid 37370:tid 37374] [client 168.63.72.46:6112] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ad-txXg-gnM2Ga0cGACmTgAAAQI"]
[Wed Apr 15 23:24:54.149756 2026] [:error] [pid 30957:tid 31002] [client 168.63.72.46:6106] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ad-txn5gwVEVXHfVSirA_gAAAE0"]
[Wed Apr 15 23:24:54.658740 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:26255] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ad-txhcEkLCmvF0fjDdMFwAAAJU"]
[Wed Apr 15 23:24:55.164519 2026] [:error] [pid 31053:tid 31062] [client 168.63.72.46:26245] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "ad-txxcEkLCmvF0fjDdMGwAAAIY"]
[Wed Apr 15 23:24:55.666289 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:6053] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "ad-txxcEkLCmvF0fjDdMHwAAAJQ"]
[Wed Apr 15 23:24:56.177091 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:26316] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "ad-tyBcEkLCmvF0fjDdMIgAAAJc"]
[Wed Apr 15 23:24:56.661114 2026] [:error] [pid 37370:tid 37374] [client 168.63.72.46:6112] [client 168.63.72.46] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "66.249.68.1_59c3d4f2509c82627f0eeb8e0e13ae1254eb4065"): Internal error (specific information not available) [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ad-txXg-gnM2Ga0cGACmTgAAAQI"]
[Wed Apr 15 23:24:56.677650 2026] [:error] [pid 30957:tid 31010] [client 168.63.72.46:6086] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "ad-tyH5gwVEVXHfVSirA_wAAAFU"]
[Wed Apr 15 23:24:57.178508 2026] [:error] [pid 30958:tid 31023] [client 168.63.72.46:26356] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ad-tyceG3wSKTO7NWFHq8gAAAMc"]
[Wed Apr 15 23:24:57.679372 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:26295] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ad-tyRcEkLCmvF0fjDdMKQAAAIU"]
[Wed Apr 15 23:24:58.181384 2026] [:error] [pid 31053:tid 31074] [client 168.63.72.46:26300] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ad-tyhcEkLCmvF0fjDdMLQAAAJI"]
[Wed Apr 15 23:24:58.692943 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:26294] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ad-tyhcEkLCmvF0fjDdMNQAAAJQ"]
[Wed Apr 15 23:25:01.694651 2026] [:error] [pid 31053:tid 31072] [client 168.63.72.46:6036] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ad-tzRcEkLCmvF0fjDdMRgAAAJA"]
[Wed Apr 15 23:25:02.197448 2026] [:error] [pid 31053:tid 31077] [client 168.63.72.46:6038] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ad-tzhcEkLCmvF0fjDdMSQAAAJU"]
[Wed Apr 15 23:25:02.703627 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:6026] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ad-tzhcEkLCmvF0fjDdMTQAAAIs"]
[Wed Apr 15 23:25:03.209647 2026] [:error] [pid 31053:tid 31072] [client 168.63.72.46:6056] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ad-tzxcEkLCmvF0fjDdMUAAAAJA"]
[Wed Apr 15 23:25:03.712872 2026] [:error] [pid 31053:tid 31062] [client 168.63.72.46:26347] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "ad-tzxcEkLCmvF0fjDdMUwAAAIY"]
[Wed Apr 15 23:25:04.228295 2026] [:error] [pid 23913:tid 23930] [client 168.63.72.46:26261] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "ad-t0FUaK3MLdSaLOyjbxQAAAU8"]
[Wed Apr 15 23:25:04.730396 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:6094] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "ad-t0BcEkLCmvF0fjDdMWAAAAIs"]
[Wed Apr 15 23:25:05.234801 2026] [:error] [pid 31053:tid 31080] [client 168.63.72.46:6101] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "ad-t0RcEkLCmvF0fjDdMWgAAAJg"]
[Wed Apr 15 23:25:12.878548 2026] [:error] [pid 30957:tid 31002] [client 168.63.72.46:6143] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "ad-t2H5gwVEVXHfVSirBCgAAAE0"]
[Wed Apr 15 23:25:13.502665 2026] [:error] [pid 23913:tid 23922] [client 168.63.72.46:26358] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "ad-t2VUaK3MLdSaLOyjb3AAAAUc"]
[Wed Apr 15 23:25:15.112388 2026] [:error] [pid 30956:tid 30978] [client 168.63.72.46:26290] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "ad-t20BGUpjaWntNYq2kJQAAABI"]
[Wed Apr 15 23:25:15.613403 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:6131] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "ad-t2xcEkLCmvF0fjDdMdwAAAIQ"]
[Wed Apr 15 23:25:16.117636 2026] [:error] [pid 31053:tid 31075] [client 168.63.72.46:26326] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ad-t3BcEkLCmvF0fjDdMeQAAAJM"]
[Wed Apr 15 23:25:16.618318 2026] [:error] [pid 30956:tid 30967] [client 168.63.72.46:26277] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ad-t3EBGUpjaWntNYq2kJgAAAAc"]
[Wed Apr 15 23:25:18.133086 2026] [:error] [pid 23913:tid 23935] [client 168.63.72.46:6022] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ad-t3lUaK3MLdSaLOyjb4gAAAVQ"]
[Wed Apr 15 23:25:18.633842 2026] [:error] [pid 23913:tid 23922] [client 168.63.72.46:6040] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ad-t3lUaK3MLdSaLOyjb5gAAAUc"]
[Wed Apr 15 23:25:19.228851 2026] [:error] [pid 30958:tid 31031] [client 168.63.72.46:6117] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "ad-t38eG3wSKTO7NWFHq-wAAAM8"]
[Wed Apr 15 23:25:19.758202 2026] [:error] [pid 23913:tid 23921] [client 168.63.72.46:6127] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "ad-t31UaK3MLdSaLOyjb7AAAAUY"]
[Wed Apr 15 23:25:20.354224 2026] [:error] [pid 31053:tid 31071] [client 168.63.72.46:6016] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "ad-t4BcEkLCmvF0fjDdMgQAAAI8"]
[Wed Apr 15 23:25:20.875694 2026] [:error] [pid 37370:tid 37396] [client 168.63.72.46:6021] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "ad-t4Hg-gnM2Ga0cGACmWQAAARg"]
[Wed Apr 15 23:25:21.451149 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:26334] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-t4Xg-gnM2Ga0cGACmXwAAAQw"]
[Wed Apr 15 23:25:21.954137 2026] [:error] [pid 37370:tid 37376] [client 168.63.72.46:26353] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-t4Xg-gnM2Ga0cGACmZQAAAQQ"]
[Wed Apr 15 23:25:23.271991 2026] [:error] [pid 23913:tid 23939] [client 168.63.72.46:6083] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-t41UaK3MLdSaLOyjb9wAAAVg"]
[Wed Apr 15 23:25:23.774099 2026] [:error] [pid 23913:tid 23930] [client 168.63.72.46:6068] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "ad-t41UaK3MLdSaLOyjb_AAAAU8"]
[Wed Apr 15 23:25:24.347593 2026] [:error] [pid 31053:tid 31057] [client 168.63.72.46:6134] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "ad-t5BcEkLCmvF0fjDdMhgAAAIE"]
[Wed Apr 15 23:25:24.873398 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:26338] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "ad-t5BcEkLCmvF0fjDdMigAAAJQ"]
[Wed Apr 15 23:25:25.396550 2026] [:error] [pid 31053:tid 31064] [client 168.63.72.46:6084] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "ad-t5RcEkLCmvF0fjDdMjAAAAIg"]
[Wed Apr 15 23:25:25.903780 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6129] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "ad-t5Xg-gnM2Ga0cGACmcgAAAQk"]
[Wed Apr 15 23:25:26.408137 2026] [:error] [pid 30957:tid 30993] [client 168.63.72.46:26346] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ad-t5n5gwVEVXHfVSirBGAAAAEQ"]
[Wed Apr 15 23:25:26.921411 2026] [:error] [pid 23913:tid 23934] [client 168.63.72.46:6141] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ad-t5lUaK3MLdSaLOyjcAwAAAVM"]
[Wed Apr 15 23:25:30.462745 2026] [:error] [pid 31053:tid 31066] [client 168.63.72.46:6062] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ad-t6hcEkLCmvF0fjDdMmgAAAIo"]
[Wed Apr 15 23:25:30.967446 2026] [:error] [pid 31053:tid 31072] [client 168.63.72.46:26241] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ad-t6hcEkLCmvF0fjDdMnwAAAJA"]
[Wed Apr 15 23:25:31.474780 2026] [:error] [pid 37370:tid 37390] [client 168.63.72.46:6067] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "ad-t63g-gnM2Ga0cGACmhAAAARI"]
[Wed Apr 15 23:25:31.976972 2026] [:error] [pid 31053:tid 31079] [client 168.63.72.46:6043] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "ad-t6xcEkLCmvF0fjDdMpQAAAJc"]
[Wed Apr 15 23:25:32.580031 2026] [:error] [pid 30958:tid 31020] [client 168.63.72.46:6024] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "ad-t7MeG3wSKTO7NWFHrCwAAAMQ"]
[Wed Apr 15 23:25:33.080768 2026] [:error] [pid 23913:tid 23929] [client 168.63.72.46:26283] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "ad-t7VUaK3MLdSaLOyjcEgAAAU4"]
[Wed Apr 15 23:25:34.163164 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:26354] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ad-t7hcEkLCmvF0fjDdMswAAAJY"]
[Wed Apr 15 23:25:34.666079 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:6121] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ad-t7hcEkLCmvF0fjDdMtwAAAIw"]
[Wed Apr 15 23:25:35.177751 2026] [:error] [pid 30956:tid 30976] [client 168.63.72.46:6098] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ad-t70BGUpjaWntNYq2kLgAAABA"]
[Wed Apr 15 23:25:35.705594 2026] [:error] [pid 31053:tid 31057] [client 168.63.72.46:6104] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ad-t7xcEkLCmvF0fjDdMuQAAAIE"]
[Wed Apr 15 23:25:36.210972 2026] [:error] [pid 30956:tid 30969] [client 168.63.72.46:26355] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "ad-t8EBGUpjaWntNYq2kMAAAAAk"]
[Wed Apr 15 23:25:36.714422 2026] [:error] [pid 23913:tid 23920] [client 168.63.72.46:6035] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "ad-t8FUaK3MLdSaLOyjcHQAAAUU"]
[Wed Apr 15 23:25:37.217353 2026] [:error] [pid 23913:tid 23935] [client 168.63.72.46:26277] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "ad-t8VUaK3MLdSaLOyjcIAAAAVQ"]
[Wed Apr 15 23:25:37.720046 2026] [:error] [pid 23913:tid 23919] [client 168.63.72.46:6110] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "ad-t8VUaK3MLdSaLOyjcIQAAAUQ"]
[Wed Apr 15 23:25:38.225305 2026] [:error] [pid 37370:tid 37392] [client 168.63.72.46:6046] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ad-t8ng-gnM2Ga0cGACmlwAAARQ"]
[Wed Apr 15 23:25:38.728510 2026] [:error] [pid 37370:tid 37381] [client 168.63.72.46:6020] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ad-t8ng-gnM2Ga0cGACmmQAAAQk"]
[Wed Apr 15 23:25:39.229884 2026] [:error] [pid 23913:tid 23926] [client 168.63.72.46:6100] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ad-t81UaK3MLdSaLOyjcJQAAAUs"]
[Wed Apr 15 23:25:39.765371 2026] [:error] [pid 23913:tid 23937] [client 168.63.72.46:26244] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "ad-t81UaK3MLdSaLOyjcJgAAAVY"]
[Wed Apr 15 23:25:40.270332 2026] [:error] [pid 23913:tid 23938] [client 168.63.72.46:5970] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-t9FUaK3MLdSaLOyjcKAAAAVc"]
[Wed Apr 15 23:25:40.775585 2026] [:error] [pid 30958:tid 31040] [client 168.63.72.46:6091] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-t9MeG3wSKTO7NWFHrEgAAANg"]
[Wed Apr 15 23:25:41.294319 2026] [:error] [pid 30958:tid 31038] [client 168.63.72.46:6030] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-t9ceG3wSKTO7NWFHrFAAAANY"]
[Wed Apr 15 23:25:41.809450 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:6118] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad-t9RcEkLCmvF0fjDdMwwAAAIw"]
[Wed Apr 15 23:25:42.314445 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:26278] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "ad-t9hcEkLCmvF0fjDdMyQAAAII"]
[Wed Apr 15 23:25:42.837679 2026] [:error] [pid 30957:tid 31009] [client 168.63.72.46:26284] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "ad-t9n5gwVEVXHfVSirBJAAAAFQ"]
[Wed Apr 15 23:25:43.359113 2026] [:error] [pid 30957:tid 31002] [client 168.63.72.46:6057] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "ad-t935gwVEVXHfVSirBJQAAAE0"]
[Wed Apr 15 23:25:43.877676 2026] [:error] [pid 30958:tid 31028] [client 168.63.72.46:6123] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "ad-t98eG3wSKTO7NWFHrGAAAAMw"]
[Wed Apr 15 23:25:44.392267 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:6113] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad-t-BcEkLCmvF0fjDdM2wAAAII"]
[Wed Apr 15 23:25:44.898454 2026] [:error] [pid 30958:tid 31021] [client 168.63.72.46:26298] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad-t-MeG3wSKTO7NWFHrGwAAAMU"]
[Wed Apr 15 23:25:45.979516 2026] [:error] [pid 30956:tid 30960] [client 168.63.72.46:6119] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad-t-UBGUpjaWntNYq2kOAAAAAA"]
[Wed Apr 15 23:25:46.485149 2026] [:error] [pid 31053:tid 31066] [client 168.63.72.46:6042] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ad-t-hcEkLCmvF0fjDdM7QAAAIo"]
[Wed Apr 15 23:25:47.004388 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:26323] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "ad-t-xcEkLCmvF0fjDdM8gAAAJQ"]
[Wed Apr 15 23:25:47.526169 2026] [:error] [pid 30957:tid 31013] [client 168.63.72.46:26299] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "ad-t-35gwVEVXHfVSirBKAAAAFg"]
[Wed Apr 15 23:25:48.041581 2026] [:error] [pid 31053:tid 31064] [client 168.63.72.46:26292] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "ad-t_BcEkLCmvF0fjDdM9wAAAIg"]
[Wed Apr 15 23:25:48.543145 2026] [:error] [pid 23913:tid 23938] [client 168.63.72.46:6018] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "ad-t_FUaK3MLdSaLOyjcMAAAAVc"]
[Wed Apr 15 23:25:49.047698 2026] [:error] [pid 23913:tid 23917] [client 168.63.72.46:6033] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "ad-t_VUaK3MLdSaLOyjcMgAAAUI"]
[Wed Apr 15 23:25:49.554258 2026] [:error] [pid 37370:tid 37383] [client 168.63.72.46:26273] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "ad-t_Xg-gnM2Ga0cGACmoAAAAQs"]
[Wed Apr 15 23:25:50.079404 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:50.334014 2026] [proxy_fcgi:error] [pid 31053:tid 31072] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:50.588170 2026] [proxy_fcgi:error] [pid 31053:tid 31063] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:50.843372 2026] [proxy_fcgi:error] [pid 31053:tid 31070] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:51.098104 2026] [proxy_fcgi:error] [pid 31053:tid 31080] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:51.353291 2026] [proxy_fcgi:error] [pid 31053:tid 31059] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:51.609293 2026] [proxy_fcgi:error] [pid 31053:tid 31062] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:51.863526 2026] [proxy_fcgi:error] [pid 31053:tid 31077] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:52.117567 2026] [proxy_fcgi:error] [pid 31053:tid 31061] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:52.373465 2026] [proxy_fcgi:error] [pid 31053:tid 31064] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:52.628198 2026] [proxy_fcgi:error] [pid 31053:tid 31057] [client 168.63.72.46:26342] AH01071: Got error 'Primary script unknown'
[Wed Apr 15 23:25:52.881153 2026] [:error] [pid 31053:tid 31065] [client 168.63.72.46:26342] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-uABcEkLCmvF0fjDdNIQAAAIk"]
[Wed Apr 15 23:25:53.384774 2026] [:error] [pid 23913:tid 23936] [client 168.63.72.46:6052] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-uAVUaK3MLdSaLOyjcOgAAAVU"]
[Wed Apr 15 23:25:54.905859 2026] [:error] [pid 31053:tid 31068] [client 168.63.72.46:6139] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-uAhcEkLCmvF0fjDdNKQAAAIw"]
[Wed Apr 15 23:25:55.432207 2026] [:error] [pid 31053:tid 31078] [client 168.63.72.46:6061] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad-uAxcEkLCmvF0fjDdNLAAAAJY"]
[Wed Apr 15 23:25:55.954837 2026] [:error] [pid 30958:tid 31038] [client 168.63.72.46:26303] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ad-uA8eG3wSKTO7NWFHrIQAAANY"]
[Wed Apr 15 23:25:56.476660 2026] [:error] [pid 37370:tid 37395] [client 168.63.72.46:26291] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ad-uBHg-gnM2Ga0cGACmrQAAARc"]
[Wed Apr 15 23:25:57.033737 2026] [:error] [pid 30957:tid 30989] [client 168.63.72.46:6096] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ad-uBX5gwVEVXHfVSirBPQAAAEA"]
[Wed Apr 15 23:25:57.538784 2026] [:error] [pid 30957:tid 30998] [client 168.63.72.46:5980] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ad-uBX5gwVEVXHfVSirBQQAAAEk"]
[Wed Apr 15 23:25:58.853499 2026] [:error] [pid 30956:tid 30968] [client 168.63.72.46:6135] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "ad-uBkBGUpjaWntNYq2kQwAAAAg"]
[Wed Apr 15 23:25:59.370292 2026] [:error] [pid 30958:tid 31032] [client 168.63.72.46:6125] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "ad-uB8eG3wSKTO7NWFHrJAAAANA"]
[Wed Apr 15 23:25:59.880690 2026] [:error] [pid 31053:tid 31056] [client 168.63.72.46:6102] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "ad-uBxcEkLCmvF0fjDdNOQAAAIA"]
[Wed Apr 15 23:26:00.382053 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:6039] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "ad-uCBcEkLCmvF0fjDdNPgAAAIs"]
[Wed Apr 15 23:26:00.911332 2026] [:error] [pid 30958:tid 31024] [client 168.63.72.46:6099] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/set.php"] [unique_id "ad-uCMeG3wSKTO7NWFHrKAAAAMg"]
[Wed Apr 15 23:26:01.455444 2026] [:error] [pid 31053:tid 31065] [client 168.63.72.46:26365] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/set.php"] [unique_id "ad-uCRcEkLCmvF0fjDdNRAAAAIk"]
[Wed Apr 15 23:26:01.963495 2026] [:error] [pid 31053:tid 31057] [client 168.63.72.46:6130] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/set.php"] [unique_id "ad-uCRcEkLCmvF0fjDdNRwAAAIE"]
[Wed Apr 15 23:26:02.465556 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:6072] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/set.php"] [unique_id "ad-uChcEkLCmvF0fjDdNTQAAAII"]
[Wed Apr 15 23:26:02.980148 2026] [:error] [pid 23913:tid 23925] [client 168.63.72.46:6124] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hroxw.php"] [unique_id "ad-uClUaK3MLdSaLOyjcSgAAAUo"]
[Wed Apr 15 23:26:03.489473 2026] [:error] [pid 30958:tid 31023] [client 168.63.72.46:6092] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hroxw.php"] [unique_id "ad-uC8eG3wSKTO7NWFHrKwAAAMc"]
[Wed Apr 15 23:26:04.004431 2026] [:error] [pid 30958:tid 31025] [client 168.63.72.46:5967] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hroxw.php"] [unique_id "ad-uDMeG3wSKTO7NWFHrLgAAAMk"]
[Wed Apr 15 23:26:04.510499 2026] [:error] [pid 30958:tid 31026] [client 168.63.72.46:6108] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hroxw.php"] [unique_id "ad-uDMeG3wSKTO7NWFHrMQAAAMo"]
[Wed Apr 15 23:26:05.015245 2026] [:error] [pid 30958:tid 31034] [client 168.63.72.46:6055] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "ad-uDceG3wSKTO7NWFHrMwAAANI"]
[Wed Apr 15 23:26:05.520111 2026] [:error] [pid 23913:tid 23918] [client 168.63.72.46:5965] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "ad-uDVUaK3MLdSaLOyjcTwAAAUM"]
[Wed Apr 15 23:26:06.023971 2026] [:error] [pid 23913:tid 23921] [client 168.63.72.46:26328] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "ad-uDlUaK3MLdSaLOyjcUgAAAUY"]
[Wed Apr 15 23:26:06.537209 2026] [:error] [pid 23913:tid 23935] [client 168.63.72.46:26281] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "ad-uDlUaK3MLdSaLOyjcVgAAAVQ"]
[Wed Apr 15 23:26:07.041102 2026] [:error] [pid 23913:tid 23919] [client 168.63.72.46:6058] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ad-uD1UaK3MLdSaLOyjcWwAAAUQ"]
[Wed Apr 15 23:26:07.551589 2026] [:error] [pid 23913:tid 23938] [client 168.63.72.46:26275] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ad-uD1UaK3MLdSaLOyjcXgAAAVc"]
[Wed Apr 15 23:26:09.532606 2026] [:error] [pid 37370:tid 37395] [client 168.63.72.46:26306] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ad-uEXg-gnM2Ga0cGACmtgAAARc"]
[Wed Apr 15 23:26:10.053316 2026] [:error] [pid 37370:tid 37384] [client 168.63.72.46:6136] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ad-uEng-gnM2Ga0cGACmuAAAAQw"]
[Wed Apr 15 23:26:10.555153 2026] [:error] [pid 23913:tid 23931] [client 168.63.72.46:6114] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "ad-uElUaK3MLdSaLOyjcZgAAAVA"]
[Wed Apr 15 23:26:11.056834 2026] [:error] [pid 31053:tid 31063] [client 168.63.72.46:5907] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "ad-uExcEkLCmvF0fjDdNYgAAAIc"]
[Wed Apr 15 23:26:11.593181 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:6115] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "ad-uExcEkLCmvF0fjDdNZQAAAIU"]
[Wed Apr 15 23:26:13.109458 2026] [:error] [pid 30958:tid 31037] [client 168.63.72.46:5968] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "ad-uFceG3wSKTO7NWFHrNwAAANU"]
[Wed Apr 15 23:26:13.619956 2026] [:error] [pid 30958:tid 31016] [client 168.63.72.46:5993] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/retu11.PhP7"] [unique_id "ad-uFceG3wSKTO7NWFHrOgAAAMA"]
[Wed Apr 15 23:26:14.123271 2026] [:error] [pid 23913:tid 23922] [client 168.63.72.46:5960] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/retu11.PhP7"] [unique_id "ad-uFlUaK3MLdSaLOyjccQAAAUc"]
[Wed Apr 15 23:26:14.649895 2026] [:error] [pid 31053:tid 31060] [client 168.63.72.46:6132] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/retu11.PhP7"] [unique_id "ad-uFhcEkLCmvF0fjDdNaQAAAIQ"]
[Wed Apr 15 23:26:15.168676 2026] [:error] [pid 23913:tid 23934] [client 168.63.72.46:5974] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/retu11.PhP7"] [unique_id "ad-uF1UaK3MLdSaLOyjcdwAAAVM"]
[Wed Apr 15 23:26:15.718349 2026] [:error] [pid 30956:tid 30974] [client 168.63.72.46:5981] [client 168.63.72.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "ad-uF0BGUpjaWntNYq2kTQAAAA4"]
[Wed Apr 15 23:26:16.269795 2026] [:error] [pid 23913:tid 23915] [client 168.63.72.46:6079] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "ad-uGFUaK3MLdSaLOyjcewAAAUA"]
[Wed Apr 15 23:26:16.780975 2026] [:error] [pid 31053:tid 31058] [client 168.63.72.46:6041] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "ad-uGBcEkLCmvF0fjDdNbgAAAII"]
[Wed Apr 15 23:26:17.285758 2026] [:error] [pid 31053:tid 31061] [client 168.63.72.46:6070] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "ad-uGRcEkLCmvF0fjDdNdAAAAIU"]
[Wed Apr 15 23:26:17.795049 2026] [:error] [pid 31053:tid 31067] [client 168.63.72.46:6103] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "ad-uGRcEkLCmvF0fjDdNegAAAIs"]
[Wed Apr 15 23:26:18.316340 2026] [:error] [pid 31053:tid 31076] [client 168.63.72.46:6137] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "ad-uGhcEkLCmvF0fjDdNiQAAAJQ"]
[Wed Apr 15 23:26:18.824552 2026] [:error] [pid 30958:tid 31032] [client 168.63.72.46:6028] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "ad-uGseG3wSKTO7NWFHrSQAAANA"]
[Wed Apr 15 23:26:19.347860 2026] [:error] [pid 30958:tid 31019] [client 168.63.72.46:5999] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "ad-uG8eG3wSKTO7NWFHrUQAAAMM"]
[Wed Apr 15 23:26:19.872270 2026] [:error] [pid 30957:tid 30997] [client 168.63.72.46:5983] [client 168.63.72.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "ad-uG35gwVEVXHfVSirBgAAAAEg"]
[Wed Apr 15 23:32:04.083870 2026] [:error] [pid 30956:tid 30974] [client 124.123.154.179:8716] [client 124.123.154.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.154.179, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ad-vdEBGUpjaWntNYq2l4wAAAA4"]
[Wed Apr 15 23:32:04.096533 2026] [proxy_fcgi:error] [pid 30956:tid 30974] [client 124.123.154.179:8716] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 03:14:36.497210 2026] [:error] [pid 20548:tid 20552] [client 64.236.133.129:60803] [client 64.236.133.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_jnKkpqgnqCHq6bJbYywAAAIE"]
[Thu Apr 16 03:14:58.491169 2026] [:error] [pid 20548:tid 20562] [client 135.232.224.82:54693] [client 135.232.224.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_jsqkpqgnqCHq6bJbY1wAAAIs"]
[Thu Apr 16 03:15:00.602833 2026] [:error] [pid 54814:tid 54820] [client 52.162.9.246:40859] [client 52.162.9.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_jtDrHu_-tAAe-BOXHrgAAAYA"]
[Thu Apr 16 03:15:42.167110 2026] [:error] [pid 792:tid 896] [client 64.236.201.55:42422] [client 64.236.201.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_j3t3PZ8z30TezIkZuMQAAANI"], referer: https://mail.google.com/
[Thu Apr 16 03:16:00.660878 2026] [:error] [pid 20548:tid 20555] [client 64.236.200.114:61375] [client 64.236.200.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_j8KkpqgnqCHq6bJbZOAAAAIQ"]
[Thu Apr 16 03:16:45.747429 2026] [:error] [pid 912:tid 981] [client 172.174.188.181:59352] [client 172.174.188.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_kHcU0_VzYCBipADlDpwAAAQ0"], referer: https://www.linkedin.com/
[Thu Apr 16 03:17:04.803185 2026] [:error] [pid 54814:tid 54834] [client 48.214.55.34:23238] [client 48.214.55.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_kMDrHu_-tAAe-BOXH9wAAAY4"]
[Thu Apr 16 03:21:40.914134 2026] [:error] [pid 912:tid 989] [client 40.76.191.164:20845] [client 40.76.191.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_lRMU0_VzYCBipADlEfgAAARU"]
[Thu Apr 16 03:21:54.692785 2026] [:error] [pid 791:tid 865] [client 13.83.162.4:37449] [client 13.83.162.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_lUrxl5Y18om2fepnnCwAAAFc"]
[Thu Apr 16 03:23:50.836839 2026] [:error] [pid 791:tid 849] [client 20.168.159.162:13481] [client 20.168.159.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_lxrxl5Y18om2fepnnKwAAAEk"], referer: https://www.google.com/
[Thu Apr 16 03:24:28.221885 2026] [:error] [pid 54814:tid 54827] [client 20.25.153.53:63113] [client 20.25.153.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_l7DrHu_-tAAe-BOXJtwAAAYc"], referer: https://www.linkedin.com/
[Thu Apr 16 03:27:40.137949 2026] [:error] [pid 792:tid 885] [client 52.165.250.244:60177] [client 52.165.250.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_mrN3PZ8z30TezIkZv5QAAAMw"], referer: https://www.reddit.com/
[Thu Apr 16 03:29:15.992052 2026] [:error] [pid 54814:tid 54833] [client 172.215.217.96:56591] [client 172.215.217.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ad_nCzrHu_-tAAe-BOXL5wAAAY0"]
[Thu Apr 16 09:49:39.874449 2026] [:error] [pid 57639:tid 57648] [client 98.93.160.221:35588] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aeBAM6MCQoTw7TsxWukrGwAAAMI"]
[Thu Apr 16 09:59:14.123174 2026] [:error] [pid 57536:tid 57565] [client 43.165.190.5:36584] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeBCciQU4faGja6jpDujvAAAABE"]
[Thu Apr 16 11:14:26.214647 2026] [:error] [pid 49094:tid 49097] [client 98.93.160.221:60948] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aeBUEjbDwvcXorHR_MwMBgAAAUE"]
[Thu Apr 16 11:25:34.074707 2026] [proxy_fcgi:error] [pid 7880:tid 7906] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.094278 2026] [proxy_fcgi:error] [pid 7880:tid 7909] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.114841 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.134977 2026] [proxy_fcgi:error] [pid 7880:tid 7899] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.155695 2026] [proxy_fcgi:error] [pid 7880:tid 7888] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.176143 2026] [proxy_fcgi:error] [pid 7880:tid 7890] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.236278 2026] [proxy_fcgi:error] [pid 7880:tid 7889] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.256841 2026] [proxy_fcgi:error] [pid 7880:tid 7904] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.275996 2026] [proxy_fcgi:error] [pid 7880:tid 7897] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.295684 2026] [proxy_fcgi:error] [pid 7880:tid 7886] [client 20.193.52.210:1593] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 11:25:34.312041 2026] [:error] [pid 7880:tid 7887] [client 20.193.52.210:1593] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeBWrqaezm4fSGc0yUL_bQAAAYI"]
[Thu Apr 16 11:25:34.377112 2026] [:error] [pid 29603:tid 29622] [client 20.193.52.210:1416] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeBWrlfGOR6fpTWUAzomKwAAARE"]
[Thu Apr 16 11:25:34.491288 2026] [:error] [pid 29603:tid 29615] [client 20.193.52.210:7248] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeBWrlfGOR6fpTWUAzomLAAAAQo"]
[Thu Apr 16 11:25:34.558679 2026] [:error] [pid 57538:tid 57623] [client 20.193.52.210:7265] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeBWrsuMaiEF5SVR2Bd-DQAAAJU"]
[Thu Apr 16 11:55:39.517022 2026] [:error] [pid 49094:tid 49098] [client 20.223.204.92:45951] [client 20.223.204.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeBduzbDwvcXorHR_MwWBwAAAUI"]
[Thu Apr 16 11:55:40.017774 2026] [:error] [pid 7880:tid 7902] [client 20.223.204.92:53913] [client 20.223.204.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeBdvKaezm4fSGc0yUIKGgAAAZE"]
[Thu Apr 16 11:55:40.518564 2026] [:error] [pid 7880:tid 7890] [client 20.223.204.92:33379] [client 20.223.204.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeBdvKaezm4fSGc0yUIKHQAAAYU"]
[Thu Apr 16 11:55:41.018635 2026] [:error] [pid 7880:tid 7895] [client 20.223.204.92:4323] [client 20.223.204.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeBdvaaezm4fSGc0yUIKIwAAAYo"]
[Thu Apr 16 14:19:57.296498 2026] [:error] [pid 57639:tid 57651] [client 14.215.163.132:44390] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeB_jaMCQoTw7TsxWumcBgAAAMU"]
[Thu Apr 16 15:52:32.591893 2026] [:error] [pid 57538:tid 57607] [client 84.32.44.198:33078] [client 84.32.44.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeCVQMuMaiEF5SVR2BefSQAAAIU"], referer: https://www.google.com/search?q=admin+panel
[Thu Apr 16 16:16:29.151397 2026] [:error] [pid 49094:tid 49120] [client 193.19.109.247:23213] [client 193.19.109.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.247, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aeCa3TbDwvcXorHR_MxHcQAAAVg"]
[Thu Apr 16 16:16:29.163572 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 193.19.109.247:23213] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 19:30:10.112578 2026] [autoindex:error] [pid 57639:tid 57649] [client 144.91.87.213:63015] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Apr 16 21:09:05.561587 2026] [:error] [pid 57639:tid 57649] [client 49.51.141.76:49908] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeDfcaMCQoTw7TsxWumhYQAAAMM"]
[Thu Apr 16 21:26:52.737740 2026] [:error] [pid 49094:tid 49108] [client 165.227.179.11:62251] [client 165.227.179.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.179.11, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aeDjnDbDwvcXorHR_MzmJwAAAUw"]
[Thu Apr 16 21:26:52.748073 2026] [proxy_fcgi:error] [pid 49094:tid 49108] [client 165.227.179.11:62251] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 21:40:35.211883 2026] [:error] [pid 7880:tid 7887] [client 45.130.203.170:51605] [client 45.130.203.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aeDm06aezm4fSGc0yUKzZgAAAYI"]
[Thu Apr 16 21:50:07.219635 2026] [proxy_fcgi:error] [pid 57536:tid 57556] [client 59.126.168.24:64739] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 21:50:14.802946 2026] [proxy_fcgi:error] [pid 57536:tid 57551] [client 59.126.168.24:64827] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:10.171511 2026] [proxy_fcgi:error] [pid 49094:tid 49120] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:10.441050 2026] [proxy_fcgi:error] [pid 49094:tid 49111] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:10.707351 2026] [proxy_fcgi:error] [pid 49094:tid 49101] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:10.972565 2026] [proxy_fcgi:error] [pid 49094:tid 49096] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:11.236731 2026] [proxy_fcgi:error] [pid 49094:tid 49097] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:11.500672 2026] [proxy_fcgi:error] [pid 49094:tid 49119] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:11.766803 2026] [proxy_fcgi:error] [pid 49094:tid 49110] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:12.031457 2026] [proxy_fcgi:error] [pid 49094:tid 49099] [client 74.234.86.1:20061] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:12.292545 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:20061] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeD5fDbDwvcXorHR_Mwe0QAAAUo"]
[Thu Apr 16 23:00:12.839637 2026] [proxy_fcgi:error] [pid 57639:tid 57656] [client 74.234.86.1:19982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:13.109336 2026] [proxy_fcgi:error] [pid 57639:tid 57667] [client 74.234.86.1:19982] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:00:13.375357 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:19982] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeD5faMCQoTw7TsxWun-0gAAANI"]
[Thu Apr 16 23:00:13.917240 2026] [:error] [pid 57538:tid 57626] [client 74.234.86.1:20059] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeD5fcuMaiEF5SVR2Bf8JgAAAJg"]
[Thu Apr 16 23:00:14.486603 2026] [:error] [pid 7880:tid 7899] [client 74.234.86.1:20053] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeD5fqaezm4fSGc0yULPrgAAAY4"]
[Thu Apr 16 23:00:15.065190 2026] [:error] [pid 49094:tid 49103] [client 74.234.86.1:20065] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeD5fzbDwvcXorHR_Mwe3AAAAUc"]
[Thu Apr 16 23:00:15.593012 2026] [:error] [pid 57536:tid 57564] [client 74.234.86.1:20066] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeD5fyQU4faGja6jpDutQwAAABA"]
[Thu Apr 16 23:00:16.101659 2026] [:error] [pid 49094:tid 49115] [client 74.234.86.1:20069] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeD5gDbDwvcXorHR_Mwe4gAAAVM"]
[Thu Apr 16 23:00:16.645245 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:20037] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeD5gKMCQoTw7TsxWun-2AAAANg"]
[Thu Apr 16 23:00:17.157107 2026] [:error] [pid 49094:tid 49110] [client 74.234.86.1:19978] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeD5gTbDwvcXorHR_Mwe6gAAAU4"]
[Thu Apr 16 23:00:17.714559 2026] [:error] [pid 7880:tid 7894] [client 74.234.86.1:20032] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeD5gaaezm4fSGc0yULPuQAAAYk"]
[Thu Apr 16 23:00:18.347555 2026] [:error] [pid 57536:tid 57562] [client 74.234.86.1:20048] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeD5giQU4faGja6jpDutSgAAAA4"]
[Thu Apr 16 23:00:18.945455 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:19970] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeD5gqMCQoTw7TsxWun-4AAAAM4"]
[Thu Apr 16 23:00:19.531166 2026] [:error] [pid 49094:tid 49116] [client 74.234.86.1:20090] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeD5gzbDwvcXorHR_Mwe8gAAAVQ"]
[Thu Apr 16 23:00:20.085274 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:19993] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeD5hKMCQoTw7TsxWun-6wAAAMA"]
[Thu Apr 16 23:00:20.687234 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:20073] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeD5hKMCQoTw7TsxWun--QAAAMA"]
[Thu Apr 16 23:00:21.244247 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:20082] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeD5haMCQoTw7TsxWun_AwAAANU"]
[Thu Apr 16 23:00:21.772042 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:19977] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeD5haMCQoTw7TsxWun_DQAAANQ"]
[Thu Apr 16 23:00:22.318269 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:19968] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeD5hqMCQoTw7TsxWun_FgAAANY"]
[Thu Apr 16 23:00:22.850244 2026] [:error] [pid 29603:tid 29626] [client 74.234.86.1:20091] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeD5hlfGOR6fpTWUAzq0yAAAARU"]
[Thu Apr 16 23:00:23.348609 2026] [:error] [pid 29603:tid 29614] [client 74.234.86.1:20019] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeD5h1fGOR6fpTWUAzq0ygAAAQk"]
[Thu Apr 16 23:00:23.892216 2026] [:error] [pid 57536:tid 57554] [client 74.234.86.1:20068] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeD5hyQU4faGja6jpDutTQAAAAY"]
[Thu Apr 16 23:00:24.446622 2026] [:error] [pid 57538:tid 57625] [client 74.234.86.1:20023] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeD5iMuMaiEF5SVR2Bf8LAAAAJc"]
[Thu Apr 16 23:00:25.013916 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:19997] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeD5iSQU4faGja6jpDutTwAAAAI"]
[Thu Apr 16 23:00:25.553619 2026] [:error] [pid 57536:tid 57559] [client 74.234.86.1:19990] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeD5iSQU4faGja6jpDutUQAAAAs"]
[Thu Apr 16 23:00:26.104836 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:19969] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeD5ijbDwvcXorHR_Mwe_wAAAUU"]
[Thu Apr 16 23:00:26.686809 2026] [:error] [pid 57538:tid 57609] [client 74.234.86.1:20041] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeD5isuMaiEF5SVR2Bf8MQAAAIc"]
[Thu Apr 16 23:00:27.240032 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:20086] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeD5iyQU4faGja6jpDutVQAAABg"]
[Thu Apr 16 23:00:27.776778 2026] [:error] [pid 57538:tid 57624] [client 74.234.86.1:8162] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeD5i8uMaiEF5SVR2Bf8MwAAAJY"]
[Thu Apr 16 23:00:28.307638 2026] [:error] [pid 57537:tid 57595] [client 74.234.86.1:19991] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeD5jFVQRS8nm73ENAnMeAAAAFQ"]
[Thu Apr 16 23:00:28.903017 2026] [:error] [pid 57537:tid 57582] [client 74.234.86.1:20056] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeD5jFVQRS8nm73ENAnMeQAAAEc"]
[Thu Apr 16 23:00:29.435264 2026] [:error] [pid 7880:tid 7907] [client 74.234.86.1:19996] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeD5jaaezm4fSGc0yULPxgAAAZY"]
[Thu Apr 16 23:00:29.987413 2026] [:error] [pid 7880:tid 7885] [client 74.234.86.1:19985] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeD5jaaezm4fSGc0yULPygAAAYA"]
[Thu Apr 16 23:00:30.529424 2026] [:error] [pid 57537:tid 57581] [client 74.234.86.1:20071] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeD5jlVQRS8nm73ENAnMewAAAEY"]
[Thu Apr 16 23:00:31.030437 2026] [:error] [pid 57639:tid 57652] [client 74.234.86.1:20042] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeD5j6MCQoTw7TsxWun_JQAAAMY"]
[Thu Apr 16 23:00:31.539446 2026] [:error] [pid 29603:tid 29619] [client 74.234.86.1:20043] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeD5j1fGOR6fpTWUAzq00wAAAQ4"]
[Thu Apr 16 23:00:32.058717 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:8140] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeD5kKMCQoTw7TsxWun_JwAAANQ"]
[Thu Apr 16 23:00:32.618169 2026] [:error] [pid 57536:tid 57565] [client 74.234.86.1:20084] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeD5kCQU4faGja6jpDutbQAAABE"]
[Thu Apr 16 23:00:33.150159 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:19986] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeD5kaMCQoTw7TsxWun_LAAAAMg"]
[Thu Apr 16 23:00:33.700914 2026] [:error] [pid 57538:tid 57610] [client 74.234.86.1:20045] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeD5kcuMaiEF5SVR2Bf8NQAAAIg"]
[Thu Apr 16 23:00:34.230774 2026] [:error] [pid 57538:tid 57611] [client 74.234.86.1:20030] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeD5ksuMaiEF5SVR2Bf8OAAAAIk"]
[Thu Apr 16 23:00:34.734915 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:19994] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeD5kqMCQoTw7TsxWun_NQAAAMI"]
[Thu Apr 16 23:00:35.244467 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:20011] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeD5k6MCQoTw7TsxWun_OwAAANg"]
[Thu Apr 16 23:00:35.767742 2026] [:error] [pid 49094:tid 49118] [client 74.234.86.1:20051] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeD5kzbDwvcXorHR_MwfGwAAAVY"]
[Thu Apr 16 23:00:36.319186 2026] [:error] [pid 57536:tid 57559] [client 74.234.86.1:19974] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeD5lCQU4faGja6jpDutcQAAAAs"]
[Thu Apr 16 23:00:36.881167 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:20058] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeD5lDbDwvcXorHR_MwfIgAAAU8"]
[Thu Apr 16 23:00:37.477754 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:20076] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeD5lTbDwvcXorHR_MwfKgAAAUU"]
[Thu Apr 16 23:00:38.114317 2026] [:error] [pid 49094:tid 49100] [client 74.234.86.1:20013] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeD5ljbDwvcXorHR_MwfMgAAAUQ"]
[Thu Apr 16 23:00:38.653470 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:20004] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeD5lqMCQoTw7TsxWun_RQAAAMI"]
[Thu Apr 16 23:00:39.187273 2026] [:error] [pid 29603:tid 29610] [client 74.234.86.1:20049] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeD5l1fGOR6fpTWUAzq03QAAAQU"]
[Thu Apr 16 23:00:39.737022 2026] [:error] [pid 57537:tid 57583] [client 74.234.86.1:20007] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeD5l1VQRS8nm73ENAnMggAAAEg"]
[Thu Apr 16 23:00:40.320578 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:20092] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeD5mDbDwvcXorHR_MwfOwAAAUE"]
[Thu Apr 16 23:00:40.839186 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:20038] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeD5mDbDwvcXorHR_MwfPgAAAUk"]
[Thu Apr 16 23:00:41.362000 2026] [:error] [pid 49094:tid 49096] [client 74.234.86.1:20046] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeD5mTbDwvcXorHR_MwfRAAAAUA"]
[Thu Apr 16 23:00:41.913311 2026] [:error] [pid 7880:tid 7893] [client 74.234.86.1:20060] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeD5maaezm4fSGc0yULP2QAAAYg"]
[Thu Apr 16 23:00:42.434304 2026] [:error] [pid 7880:tid 7895] [client 74.234.86.1:20025] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeD5mqaezm4fSGc0yULP2wAAAYo"]
[Thu Apr 16 23:00:42.998893 2026] [:error] [pid 57537:tid 57596] [client 74.234.86.1:8142] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeD5mlVQRS8nm73ENAnMhQAAAFU"]
[Thu Apr 16 23:00:43.516247 2026] [:error] [pid 29603:tid 29622] [client 74.234.86.1:20003] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeD5m1fGOR6fpTWUAzq04wAAARE"]
[Thu Apr 16 23:00:44.037982 2026] [:error] [pid 7880:tid 7890] [client 74.234.86.1:8172] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aeD5nKaezm4fSGc0yULP4gAAAYU"]
[Thu Apr 16 23:00:44.628058 2026] [:error] [pid 49094:tid 49096] [client 74.234.86.1:19975] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeD5nDbDwvcXorHR_MwfSgAAAUA"]
[Thu Apr 16 23:00:45.227823 2026] [:error] [pid 7880:tid 7902] [client 74.234.86.1:8158] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeD5naaezm4fSGc0yULP5QAAAZE"]
[Thu Apr 16 23:00:45.772614 2026] [:error] [pid 57639:tid 57665] [client 74.234.86.1:20057] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeD5naMCQoTw7TsxWun_WQAAANM"]
[Thu Apr 16 23:00:46.315665 2026] [:error] [pid 57537:tid 57582] [client 74.234.86.1:8128] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeD5nlVQRS8nm73ENAnMhwAAAEc"]
[Thu Apr 16 23:00:46.861428 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:8180] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeD5nlfGOR6fpTWUAzq07QAAARg"]
[Thu Apr 16 23:00:47.372647 2026] [:error] [pid 29603:tid 29627] [client 74.234.86.1:20024] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeD5n1fGOR6fpTWUAzq07wAAARY"]
[Thu Apr 16 23:00:47.911578 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:20078] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeD5n6MCQoTw7TsxWun_YAAAAMg"]
[Thu Apr 16 23:00:48.493377 2026] [:error] [pid 7880:tid 7886] [client 74.234.86.1:20095] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeD5oKaezm4fSGc0yULP7gAAAYE"]
[Thu Apr 16 23:00:49.146271 2026] [:error] [pid 49094:tid 49118] [client 74.234.86.1:19983] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeD5oTbDwvcXorHR_MwfUQAAAVY"]
[Thu Apr 16 23:00:49.717814 2026] [:error] [pid 49094:tid 49110] [client 74.234.86.1:19984] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeD5oTbDwvcXorHR_MwfUwAAAU4"]
[Thu Apr 16 23:00:50.298306 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:8150] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeD5ojbDwvcXorHR_MwfWAAAAU8"]
[Thu Apr 16 23:00:50.851579 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:20001] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeD5ojbDwvcXorHR_MwfXQAAAUI"]
[Thu Apr 16 23:00:51.395870 2026] [:error] [pid 57536:tid 57567] [client 74.234.86.1:19999] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeD5oyQU4faGja6jpDutkQAAABM"]
[Thu Apr 16 23:00:51.896178 2026] [:error] [pid 57537:tid 57589] [client 74.234.86.1:8137] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeD5o1VQRS8nm73ENAnMigAAAE4"]
[Thu Apr 16 23:00:52.407976 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:8079] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeD5pKMCQoTw7TsxWun_aQAAAMA"]
[Thu Apr 16 23:00:52.922536 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:19973] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeD5pKMCQoTw7TsxWun_bAAAAMI"]
[Thu Apr 16 23:00:53.461060 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:8183] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeD5paMCQoTw7TsxWun_cgAAAMo"]
[Thu Apr 16 23:00:54.001341 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:19971] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeD5pqMCQoTw7TsxWun_dwAAAMU"]
[Thu Apr 16 23:00:54.520665 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:20016] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeD5pqMCQoTw7TsxWun_eAAAAMk"]
[Thu Apr 16 23:00:55.070056 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:20070] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeD5p1fGOR6fpTWUAzq08gAAARg"]
[Thu Apr 16 23:00:55.604868 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:8138] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeD5p6MCQoTw7TsxWun_egAAAMA"]
[Thu Apr 16 23:00:56.136120 2026] [:error] [pid 57537:tid 57579] [client 74.234.86.1:20028] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeD5qFVQRS8nm73ENAnMjQAAAEQ"]
[Thu Apr 16 23:00:56.670691 2026] [:error] [pid 49094:tid 49100] [client 74.234.86.1:8171] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeD5qDbDwvcXorHR_MwfYgAAAUQ"]
[Thu Apr 16 23:00:57.170277 2026] [:error] [pid 49094:tid 49114] [client 74.234.86.1:8078] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeD5qTbDwvcXorHR_MwfZgAAAVI"]
[Thu Apr 16 23:00:57.671980 2026] [:error] [pid 57536:tid 57566] [client 74.234.86.1:8164] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeD5qSQU4faGja6jpDutnQAAABI"]
[Thu Apr 16 23:00:58.189357 2026] [:error] [pid 57536:tid 57567] [client 74.234.86.1:19995] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeD5qiQU4faGja6jpDutoAAAABM"]
[Thu Apr 16 23:00:58.745012 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:20014] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeD5qqMCQoTw7TsxWun_gQAAAMo"]
[Thu Apr 16 23:00:59.257264 2026] [:error] [pid 57536:tid 57558] [client 74.234.86.1:19992] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeD5qyQU4faGja6jpDutpgAAAAo"]
[Thu Apr 16 23:00:59.818264 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:20005] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeD5q6MCQoTw7TsxWun_igAAAMk"]
[Thu Apr 16 23:01:00.403137 2026] [:error] [pid 57536:tid 57562] [client 74.234.86.1:8175] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeD5rCQU4faGja6jpDutqQAAAA4"]
[Thu Apr 16 23:01:01.218572 2026] [:error] [pid 49094:tid 49096] [client 74.234.86.1:8166] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeD5rTbDwvcXorHR_MwfagAAAUA"]
[Thu Apr 16 23:01:01.764332 2026] [:error] [pid 57538:tid 57602] [client 74.234.86.1:20031] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeD5rcuMaiEF5SVR2Bf8RwAAAIA"]
[Thu Apr 16 23:01:02.280931 2026] [:error] [pid 57536:tid 57556] [client 74.234.86.1:8179] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeD5riQU4faGja6jpDutsgAAAAg"]
[Thu Apr 16 23:01:02.783133 2026] [:error] [pid 57536:tid 57565] [client 74.234.86.1:19981] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeD5riQU4faGja6jpDuttQAAABE"]
[Thu Apr 16 23:01:03.302186 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:20036] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeD5ryQU4faGja6jpDutuwAAAAQ"]
[Thu Apr 16 23:01:03.855944 2026] [:error] [pid 57536:tid 57555] [client 74.234.86.1:20094] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeD5ryQU4faGja6jpDutvAAAAAc"]
[Thu Apr 16 23:01:04.399339 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:20050] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeD5sKMCQoTw7TsxWun_lAAAANc"]
[Thu Apr 16 23:01:04.936193 2026] [:error] [pid 49094:tid 49117] [client 74.234.86.1:20081] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeD5sDbDwvcXorHR_MwfcAAAAVU"]
[Thu Apr 16 23:01:05.435988 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:20009] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeD5sSQU4faGja6jpDutxQAAAAU"]
[Thu Apr 16 23:01:05.961517 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:20080] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeD5saMCQoTw7TsxWun_nQAAAMw"]
[Thu Apr 16 23:01:06.522955 2026] [:error] [pid 57538:tid 57620] [client 74.234.86.1:20000] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeD5ssuMaiEF5SVR2Bf8TQAAAJI"]
[Thu Apr 16 23:01:07.078838 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:20022] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeD5szbDwvcXorHR_MwfewAAAU8"]
[Thu Apr 16 23:01:07.596008 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:20020] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeD5s6MCQoTw7TsxWun_owAAAMo"]
[Thu Apr 16 23:01:08.172962 2026] [:error] [pid 49094:tid 49099] [client 74.234.86.1:8159] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeD5tDbDwvcXorHR_MwfhAAAAUM"]
[Thu Apr 16 23:01:08.717374 2026] [:error] [pid 29603:tid 29614] [client 74.234.86.1:20029] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeD5tFfGOR6fpTWUAzq0-AAAAQk"]
[Thu Apr 16 23:01:09.260503 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:8127] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeD5tSQU4faGja6jpDut1wAAABU"]
[Thu Apr 16 23:01:09.799853 2026] [:error] [pid 49094:tid 49115] [client 74.234.86.1:8134] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeD5tTbDwvcXorHR_MwfjwAAAVM"]
[Thu Apr 16 23:01:10.330889 2026] [:error] [pid 49094:tid 49108] [client 74.234.86.1:8146] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeD5tjbDwvcXorHR_MwflAAAAUw"]
[Thu Apr 16 23:01:10.835522 2026] [:error] [pid 49094:tid 49110] [client 74.234.86.1:20017] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeD5tjbDwvcXorHR_MwfmQAAAU4"]
[Thu Apr 16 23:01:11.353433 2026] [:error] [pid 29603:tid 29609] [client 74.234.86.1:20077] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeD5t1fGOR6fpTWUAzq0-wAAAQQ"]
[Thu Apr 16 23:01:11.870976 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:8068] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeD5t6MCQoTw7TsxWun_swAAANc"]
[Thu Apr 16 23:01:12.414169 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:20087] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeD5uKMCQoTw7TsxWun_twAAAMM"]
[Thu Apr 16 23:01:12.924546 2026] [:error] [pid 57536:tid 57564] [client 74.234.86.1:8130] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeD5uCQU4faGja6jpDut5AAAABA"]
[Thu Apr 16 23:01:13.428407 2026] [proxy_fcgi:error] [pid 57538:tid 57603] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:13.684468 2026] [proxy_fcgi:error] [pid 57538:tid 57616] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:13.938568 2026] [proxy_fcgi:error] [pid 57538:tid 57612] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:14.192676 2026] [proxy_fcgi:error] [pid 57538:tid 57602] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:14.446862 2026] [proxy_fcgi:error] [pid 57538:tid 57607] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:14.700807 2026] [proxy_fcgi:error] [pid 57538:tid 57625] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:14.956401 2026] [proxy_fcgi:error] [pid 57538:tid 57605] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:15.210406 2026] [proxy_fcgi:error] [pid 57538:tid 57608] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:15.465495 2026] [proxy_fcgi:error] [pid 57538:tid 57617] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:15.719094 2026] [proxy_fcgi:error] [pid 57538:tid 57623] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:15.975375 2026] [proxy_fcgi:error] [pid 57538:tid 57619] [client 74.234.86.1:20074] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:01:16.225528 2026] [:error] [pid 57538:tid 57615] [client 74.234.86.1:20074] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "aeD5vMuMaiEF5SVR2Bf8XwAAAI0"]
[Thu Apr 16 23:01:16.780666 2026] [:error] [pid 57538:tid 57606] [client 74.234.86.1:8156] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "aeD5vMuMaiEF5SVR2Bf8YQAAAIQ"]
[Thu Apr 16 23:01:17.316164 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:20054] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "aeD5vTbDwvcXorHR_MwfxgAAAUI"]
[Thu Apr 16 23:01:17.838005 2026] [:error] [pid 57537:tid 57582] [client 74.234.86.1:20067] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws87.php"] [unique_id "aeD5vVVQRS8nm73ENAnMlgAAAEc"]
[Thu Apr 16 23:01:18.391336 2026] [:error] [pid 49094:tid 49109] [client 74.234.86.1:8132] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeD5vjbDwvcXorHR_MwfzAAAAU0"]
[Thu Apr 16 23:01:18.909603 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:19979] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeD5vqMCQoTw7TsxWun_zAAAAMQ"]
[Thu Apr 16 23:01:19.409514 2026] [:error] [pid 7880:tid 7886] [client 74.234.86.1:20033] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeD5v6aezm4fSGc0yULQFgAAAYE"]
[Thu Apr 16 23:01:19.988172 2026] [:error] [pid 29603:tid 29615] [client 74.234.86.1:20025] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeD5v1fGOR6fpTWUAzq1AAAAAQo"]
[Thu Apr 16 23:01:20.532591 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:8178] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "aeD5wKMCQoTw7TsxWun_1gAAAMw"]
[Thu Apr 16 23:01:21.055360 2026] [:error] [pid 57536:tid 57558] [client 74.234.86.1:20035] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "aeD5wSQU4faGja6jpDut8wAAAAo"]
[Thu Apr 16 23:01:21.574192 2026] [:error] [pid 29603:tid 29623] [client 74.234.86.1:8110] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "aeD5wVfGOR6fpTWUAzq1AQAAARI"]
[Thu Apr 16 23:01:22.097171 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:19987] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r2.php"] [unique_id "aeD5wiQU4faGja6jpDut-AAAABc"]
[Thu Apr 16 23:01:22.666740 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:8097] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aeD5wiQU4faGja6jpDut-gAAAAU"]
[Thu Apr 16 23:01:23.209902 2026] [:error] [pid 57536:tid 57567] [client 74.234.86.1:8003] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aeD5wyQU4faGja6jpDut_AAAABM"]
[Thu Apr 16 23:01:23.718765 2026] [:error] [pid 49094:tid 49115] [client 74.234.86.1:8071] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aeD5wzbDwvcXorHR_Mwf6AAAAVM"]
[Thu Apr 16 23:01:24.243386 2026] [:error] [pid 57639:tid 57662] [client 74.234.86.1:20020] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aeD5xKMCQoTw7TsxWun_3gAAANA"]
[Thu Apr 16 23:01:24.771159 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:20002] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeD5xKMCQoTw7TsxWun_4AAAAMo"]
[Thu Apr 16 23:01:25.328886 2026] [:error] [pid 29603:tid 29621] [client 74.234.86.1:8167] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeD5xVfGOR6fpTWUAzq1BQAAARA"]
[Thu Apr 16 23:01:25.874376 2026] [:error] [pid 49094:tid 49117] [client 74.234.86.1:20063] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeD5xTbDwvcXorHR_Mwf-QAAAVU"]
[Thu Apr 16 23:01:26.388849 2026] [:error] [pid 49094:tid 49116] [client 74.234.86.1:8145] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeD5xjbDwvcXorHR_Mwf_AAAAVQ"]
[Thu Apr 16 23:01:26.920055 2026] [:error] [pid 7880:tid 7890] [client 74.234.86.1:8152] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeD5xqaezm4fSGc0yULQIgAAAYU"]
[Thu Apr 16 23:01:27.474171 2026] [:error] [pid 57538:tid 57606] [client 74.234.86.1:8143] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeD5x8uMaiEF5SVR2Bf8bQAAAIQ"]
[Thu Apr 16 23:01:27.981834 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:20093] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeD5x6MCQoTw7TsxWun_6gAAAM4"]
[Thu Apr 16 23:01:28.487866 2026] [:error] [pid 57538:tid 57614] [client 74.234.86.1:19988] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeD5yMuMaiEF5SVR2Bf8cAAAAIw"]
[Thu Apr 16 23:01:28.995344 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:20006] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeD5yDbDwvcXorHR_MwgEAAAAVc"]
[Thu Apr 16 23:01:29.525250 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:8168] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeD5yTbDwvcXorHR_MwgFwAAAUU"]
[Thu Apr 16 23:01:30.028030 2026] [:error] [pid 29603:tid 29625] [client 74.234.86.1:8169] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeD5ylfGOR6fpTWUAzq1DQAAARQ"]
[Thu Apr 16 23:01:30.586408 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:8139] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeD5yqMCQoTw7TsxWun_-wAAANc"]
[Thu Apr 16 23:01:31.126469 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:8163] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeD5yzbDwvcXorHR_MwgKwAAAUI"]
[Thu Apr 16 23:01:31.657970 2026] [:error] [pid 7880:tid 7888] [client 74.234.86.1:8158] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeD5y6aezm4fSGc0yULQKwAAAYM"]
[Thu Apr 16 23:01:32.164598 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:19989] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeD5zKMCQoTw7TsxWukAAwAAAMQ"]
[Thu Apr 16 23:01:32.663460 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:8065] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeD5zKMCQoTw7TsxWukABQAAANg"]
[Thu Apr 16 23:01:33.179436 2026] [:error] [pid 7880:tid 7889] [client 74.234.86.1:8107] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeD5zaaezm4fSGc0yULQMQAAAYQ"]
[Thu Apr 16 23:01:33.694098 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:20026] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeD5zaMCQoTw7TsxWukACAAAAMA"]
[Thu Apr 16 23:01:34.231300 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:8118] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeD5zqMCQoTw7TsxWukADQAAAMU"]
[Thu Apr 16 23:01:34.731171 2026] [:error] [pid 57639:tid 57659] [client 74.234.86.1:8177] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeD5zqMCQoTw7TsxWukADgAAAM0"]
[Thu Apr 16 23:01:35.240387 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:8076] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeD5zzbDwvcXorHR_MwgQgAAAUE"]
[Thu Apr 16 23:01:35.755135 2026] [:error] [pid 49094:tid 49117] [client 74.234.86.1:8119] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeD5zzbDwvcXorHR_MwgRQAAAVU"]
[Thu Apr 16 23:01:36.276909 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:8147] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeD50KMCQoTw7TsxWukAEwAAAM8"]
[Thu Apr 16 23:01:36.819760 2026] [:error] [pid 57639:tid 57663] [client 74.234.86.1:8069] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeD50KMCQoTw7TsxWukAFgAAANE"]
[Thu Apr 16 23:01:37.370617 2026] [:error] [pid 57536:tid 57568] [client 74.234.86.1:8153] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeD50SQU4faGja6jpDuuDQAAABQ"]
[Thu Apr 16 23:01:37.907833 2026] [:error] [pid 57538:tid 57606] [client 74.234.86.1:8094] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeD50cuMaiEF5SVR2Bf8ewAAAIQ"]
[Thu Apr 16 23:01:38.450377 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:20089] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeD50qMCQoTw7TsxWukAIwAAAMQ"]
[Thu Apr 16 23:01:38.951680 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:8151] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeD50jbDwvcXorHR_MwgWwAAAUI"]
[Thu Apr 16 23:01:39.471688 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:20064] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeD506MCQoTw7TsxWukALQAAANQ"]
[Thu Apr 16 23:01:40.014291 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:8091] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeD51KMCQoTw7TsxWukANAAAAM4"]
[Thu Apr 16 23:01:40.547462 2026] [:error] [pid 57639:tid 57652] [client 74.234.86.1:20083] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeD51KMCQoTw7TsxWukAPwAAAMY"]
[Thu Apr 16 23:01:41.091246 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:8120] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeD51aMCQoTw7TsxWukARQAAAMU"]
[Thu Apr 16 23:01:41.612850 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:20027] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeD51aMCQoTw7TsxWukATQAAANg"]
[Thu Apr 16 23:01:42.157501 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:8165] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeD51qMCQoTw7TsxWukAVwAAAMQ"]
[Thu Apr 16 23:01:42.684351 2026] [:error] [pid 49094:tid 49102] [client 74.234.86.1:19980] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeD51jbDwvcXorHR_MwgZgAAAUY"]
[Thu Apr 16 23:01:43.252405 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:8026] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeD516MCQoTw7TsxWukAeAAAANI"]
[Thu Apr 16 23:01:43.773430 2026] [:error] [pid 57537:tid 57585] [client 74.234.86.1:8154] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeD511VQRS8nm73ENAnMqgAAAEo"]
[Thu Apr 16 23:01:44.319325 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:8141] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeD52FfGOR6fpTWUAzq1HAAAARg"]
[Thu Apr 16 23:01:44.828618 2026] [:error] [pid 49094:tid 49120] [client 74.234.86.1:8001] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeD52DbDwvcXorHR_MwgdgAAAVg"]
[Thu Apr 16 23:01:45.396743 2026] [:error] [pid 57537:tid 57595] [client 74.234.86.1:20012] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeD52VVQRS8nm73ENAnMrwAAAFQ"]
[Thu Apr 16 23:01:45.928498 2026] [:error] [pid 29603:tid 29618] [client 74.234.86.1:8083] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeD52VfGOR6fpTWUAzq1IQAAAQ0"]
[Thu Apr 16 23:01:46.463547 2026] [:error] [pid 49094:tid 49118] [client 74.234.86.1:8191] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeD52jbDwvcXorHR_MwgfQAAAVY"]
[Thu Apr 16 23:01:46.989412 2026] [:error] [pid 49094:tid 49112] [client 74.234.86.1:8117] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeD52jbDwvcXorHR_MwgfwAAAVA"]
[Thu Apr 16 23:01:47.531918 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:8018] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeD52zbDwvcXorHR_MwggQAAAUs"]
[Thu Apr 16 23:01:48.099918 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:8072] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeD53KMCQoTw7TsxWukAswAAANg"]
[Thu Apr 16 23:01:48.645552 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:8017] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeD53DbDwvcXorHR_MwgiQAAAUo"]
[Thu Apr 16 23:01:49.164097 2026] [:error] [pid 57538:tid 57602] [client 74.234.86.1:8044] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeD53cuMaiEF5SVR2Bf8fgAAAIA"]
[Thu Apr 16 23:01:49.746342 2026] [:error] [pid 57538:tid 57607] [client 74.234.86.1:8066] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeD53cuMaiEF5SVR2Bf8fwAAAIU"]
[Thu Apr 16 23:01:50.282347 2026] [:error] [pid 29603:tid 29616] [client 74.234.86.1:8106] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeD53lfGOR6fpTWUAzq1JAAAAQs"]
[Thu Apr 16 23:01:50.823942 2026] [:error] [pid 57536:tid 57555] [client 74.234.86.1:8173] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeD53iQU4faGja6jpDuuLgAAAAc"]
[Thu Apr 16 23:01:51.362177 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:8108] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeD53yQU4faGja6jpDuuMAAAAAQ"]
[Thu Apr 16 23:01:51.879851 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:20040] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeD536MCQoTw7TsxWukAxQAAAMo"]
[Thu Apr 16 23:01:52.405312 2026] [:error] [pid 7880:tid 7896] [client 74.234.86.1:8075] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeD54Kaezm4fSGc0yULQQwAAAYs"]
[Thu Apr 16 23:01:52.933659 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:8089] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeD54KMCQoTw7TsxWukAyAAAAMg"]
[Thu Apr 16 23:01:53.483719 2026] [:error] [pid 57538:tid 57626] [client 74.234.86.1:8129] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeD54cuMaiEF5SVR2Bf8hQAAAJg"]
[Thu Apr 16 23:01:54.032159 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:7957] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeD54qMCQoTw7TsxWukAzgAAAM4"]
[Thu Apr 16 23:01:54.546103 2026] [:error] [pid 57538:tid 57619] [client 74.234.86.1:7936] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeD54suMaiEF5SVR2Bf8hwAAAJE"]
[Thu Apr 16 23:01:55.068385 2026] [:error] [pid 29603:tid 29613] [client 74.234.86.1:8131] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeD541fGOR6fpTWUAzq1LwAAAQg"]
[Thu Apr 16 23:01:55.596872 2026] [:error] [pid 57538:tid 57615] [client 74.234.86.1:8148] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeD548uMaiEF5SVR2Bf8iAAAAI0"]
[Thu Apr 16 23:01:56.161012 2026] [:error] [pid 7880:tid 7909] [client 74.234.86.1:20008] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeD55Kaezm4fSGc0yULQSAAAAZg"]
[Thu Apr 16 23:01:56.692403 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:8189] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeD55DbDwvcXorHR_MwgnQAAAUU"]
[Thu Apr 16 23:01:57.229961 2026] [:error] [pid 57538:tid 57617] [client 74.234.86.1:8100] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeD55cuMaiEF5SVR2Bf8igAAAI8"]
[Thu Apr 16 23:01:57.759480 2026] [:error] [pid 57538:tid 57618] [client 74.234.86.1:8182] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeD55cuMaiEF5SVR2Bf8iwAAAJA"]
[Thu Apr 16 23:01:58.283416 2026] [:error] [pid 57538:tid 57604] [client 74.234.86.1:8035] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeD55suMaiEF5SVR2Bf8jgAAAII"]
[Thu Apr 16 23:01:58.793837 2026] [:error] [pid 57537:tid 57577] [client 74.234.86.1:7941] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeD55lVQRS8nm73ENAnMxQAAAEI"]
[Thu Apr 16 23:01:59.311828 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:20088] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeD55yQU4faGja6jpDuuQgAAAAU"]
[Thu Apr 16 23:01:59.834389 2026] [:error] [pid 57538:tid 57614] [client 74.234.86.1:8020] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeD558uMaiEF5SVR2Bf8jwAAAIw"]
[Thu Apr 16 23:02:00.380472 2026] [:error] [pid 57537:tid 57590] [client 74.234.86.1:20047] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeD56FVQRS8nm73ENAnMxwAAAE8"]
[Thu Apr 16 23:02:00.934858 2026] [:error] [pid 57536:tid 57557] [client 74.234.86.1:8181] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeD56CQU4faGja6jpDuuRwAAAAk"]
[Thu Apr 16 23:02:01.491421 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:20044] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeD56TbDwvcXorHR_MwgpgAAAUo"]
[Thu Apr 16 23:02:01.996924 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:8136] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeD56SQU4faGja6jpDuuSwAAAAI"]
[Thu Apr 16 23:02:02.524327 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:8067] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeD56jbDwvcXorHR_MwgrAAAAUI"]
[Thu Apr 16 23:02:03.071125 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:8157] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeD56zbDwvcXorHR_MwgrgAAAUU"]
[Thu Apr 16 23:02:03.613346 2026] [:error] [pid 49094:tid 49116] [client 74.234.86.1:8084] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeD56zbDwvcXorHR_MwgsgAAAVQ"]
[Thu Apr 16 23:02:04.119967 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:20021] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeD57DbDwvcXorHR_MwgtgAAAUo"]
[Thu Apr 16 23:02:04.641717 2026] [:error] [pid 49094:tid 49118] [client 74.234.86.1:8135] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeD57DbDwvcXorHR_MwguAAAAVY"]
[Thu Apr 16 23:02:05.144728 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:20018] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeD57aaezm4fSGc0yULQWQAAAZU"]
[Thu Apr 16 23:02:05.742364 2026] [:error] [pid 7880:tid 7896] [client 74.234.86.1:8042] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeD57aaezm4fSGc0yULQWgAAAYs"]
[Thu Apr 16 23:02:06.270524 2026] [:error] [pid 57639:tid 57659] [client 74.234.86.1:8043] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeD57qMCQoTw7TsxWukA5wAAAM0"]
[Thu Apr 16 23:02:06.798802 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:20085] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeD57qMCQoTw7TsxWukA8AAAAMk"]
[Thu Apr 16 23:02:07.312397 2026] [:error] [pid 7880:tid 7908] [client 74.234.86.1:8126] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeD576aezm4fSGc0yULQXAAAAZc"]
[Thu Apr 16 23:02:07.833643 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:19993] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeD576MCQoTw7TsxWukBEQAAAMI"]
[Thu Apr 16 23:02:08.384219 2026] [:error] [pid 57639:tid 57662] [client 74.234.86.1:8176] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeD58KMCQoTw7TsxWukBFQAAANA"]
[Thu Apr 16 23:02:08.942268 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:8014] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeD58KMCQoTw7TsxWukBIQAAAMM"]
[Thu Apr 16 23:02:09.478222 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:8161] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeD58aMCQoTw7TsxWukBLAAAAME"]
[Thu Apr 16 23:02:10.049402 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:8149] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeD58jbDwvcXorHR_MwgxQAAAUI"]
[Thu Apr 16 23:02:10.596602 2026] [:error] [pid 49094:tid 49113] [client 74.234.86.1:8061] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeD58jbDwvcXorHR_MwgyAAAAVE"]
[Thu Apr 16 23:02:11.164849 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:20052] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeD58zbDwvcXorHR_MwgygAAAUo"]
[Thu Apr 16 23:02:11.693648 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:8074] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeD586MCQoTw7TsxWukBQwAAAMM"]
[Thu Apr 16 23:02:12.246170 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:8155] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeD59DbDwvcXorHR_MwgzwAAAUE"]
[Thu Apr 16 23:02:12.793272 2026] [:error] [pid 49094:tid 49116] [client 74.234.86.1:7983] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeD59DbDwvcXorHR_Mwg0gAAAVQ"]
[Thu Apr 16 23:02:13.295995 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:8009] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeD59aMCQoTw7TsxWukBVwAAAMI"]
[Thu Apr 16 23:02:13.828834 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:19972] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeD59aMCQoTw7TsxWukBWwAAAMc"]
[Thu Apr 16 23:02:14.339798 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:20072] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeD59jbDwvcXorHR_Mwg2QAAAUo"]
[Thu Apr 16 23:02:14.876323 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:20079] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeD59jbDwvcXorHR_Mwg3QAAAU8"]
[Thu Apr 16 23:02:15.392782 2026] [proxy_fcgi:error] [pid 7880:tid 7889] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:15.651102 2026] [proxy_fcgi:error] [pid 7880:tid 7906] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:15.908176 2026] [proxy_fcgi:error] [pid 7880:tid 7904] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:16.165658 2026] [proxy_fcgi:error] [pid 7880:tid 7896] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:16.422965 2026] [proxy_fcgi:error] [pid 7880:tid 7892] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:16.680475 2026] [proxy_fcgi:error] [pid 7880:tid 7908] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:16.937312 2026] [proxy_fcgi:error] [pid 7880:tid 7895] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:17.199341 2026] [proxy_fcgi:error] [pid 7880:tid 7907] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:17.458661 2026] [proxy_fcgi:error] [pid 7880:tid 7890] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:17.730130 2026] [proxy_fcgi:error] [pid 7880:tid 7886] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:17.988922 2026] [proxy_fcgi:error] [pid 7880:tid 7885] [client 74.234.86.1:8109] AH01071: Got error 'Primary script unknown'
[Thu Apr 16 23:02:18.242757 2026] [:error] [pid 7880:tid 7900] [client 74.234.86.1:8109] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeD5-qaezm4fSGc0yULQdQAAAY8"]
[Thu Apr 16 23:02:18.781880 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:8011] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeD5-qMCQoTw7TsxWukBbQAAANQ"]
[Thu Apr 16 23:02:19.302853 2026] [:error] [pid 57639:tid 57652] [client 74.234.86.1:8070] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeD5-6MCQoTw7TsxWukBbwAAAMY"]
[Thu Apr 16 23:02:19.864789 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:8133] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeD5-6MCQoTw7TsxWukBdQAAANI"]
[Thu Apr 16 23:02:20.426271 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:20055] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wincust.php"] [unique_id "aeD5_DbDwvcXorHR_Mwg6wAAAUI"]
[Thu Apr 16 23:02:20.973929 2026] [:error] [pid 49094:tid 49109] [client 74.234.86.1:8064] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeD5_DbDwvcXorHR_Mwg8AAAAU0"]
[Thu Apr 16 23:02:21.516391 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:8125] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeD5_aMCQoTw7TsxWukBgQAAAMI"]
[Thu Apr 16 23:02:22.051503 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:8190] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeD5_qMCQoTw7TsxWukBgwAAAMk"]
[Thu Apr 16 23:02:22.577200 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:8093] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeD5_jbDwvcXorHR_Mwg-AAAAUk"]
[Thu Apr 16 23:02:23.143611 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:8144] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeD5_6MCQoTw7TsxWukBjQAAANY"]
[Thu Apr 16 23:02:23.705712 2026] [:error] [pid 29603:tid 29614] [client 74.234.86.1:8021] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeD5_1fGOR6fpTWUAzq1PwAAAQk"]
[Thu Apr 16 23:02:24.227913 2026] [:error] [pid 57537:tid 57587] [client 74.234.86.1:8088] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeD6AFVQRS8nm73ENAnNEAAAAEw"]
[Thu Apr 16 23:02:24.771727 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:8028] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeD6AKMCQoTw7TsxWukBmwAAANU"]
[Thu Apr 16 23:02:25.274966 2026] [:error] [pid 7880:tid 7900] [client 74.234.86.1:8019] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeD6Aaaezm4fSGc0yULQhwAAAY8"]
[Thu Apr 16 23:02:25.780613 2026] [:error] [pid 7880:tid 7898] [client 74.234.86.1:8185] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeD6Aaaezm4fSGc0yULQigAAAY0"]
[Thu Apr 16 23:02:26.279912 2026] [:error] [pid 57538:tid 57607] [client 74.234.86.1:8123] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeD6AsuMaiEF5SVR2Bf8ogAAAIU"]
[Thu Apr 16 23:02:26.805893 2026] [:error] [pid 57538:tid 57613] [client 74.234.86.1:8012] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeD6AsuMaiEF5SVR2Bf8owAAAIs"]
[Thu Apr 16 23:02:27.309392 2026] [:error] [pid 57538:tid 57626] [client 74.234.86.1:7950] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeD6A8uMaiEF5SVR2Bf8pAAAAJg"]
[Thu Apr 16 23:02:27.813593 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:20015] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeD6A6MCQoTw7TsxWukBtgAAAMw"]
[Thu Apr 16 23:02:28.352123 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:8023] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeD6BKMCQoTw7TsxWukBvgAAAM4"]
[Thu Apr 16 23:02:28.869735 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:8116] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeD6BKMCQoTw7TsxWukBxAAAANU"]
[Thu Apr 16 23:02:29.391068 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:8055] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeD6BaMCQoTw7TsxWukBxwAAANY"]
[Thu Apr 16 23:02:29.895481 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:8090] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeD6BaMCQoTw7TsxWukBzAAAAM4"]
[Thu Apr 16 23:02:30.407306 2026] [:error] [pid 29603:tid 29620] [client 74.234.86.1:8031] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeD6BlfGOR6fpTWUAzq1RgAAAQ8"]
[Thu Apr 16 23:02:30.930005 2026] [:error] [pid 57537:tid 57596] [client 74.234.86.1:8111] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeD6BlVQRS8nm73ENAnNEgAAAFU"]
[Thu Apr 16 23:02:31.473388 2026] [:error] [pid 57537:tid 57591] [client 74.234.86.1:8188] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeD6B1VQRS8nm73ENAnNFAAAAFA"]
[Thu Apr 16 23:02:31.971087 2026] [:error] [pid 7880:tid 7907] [client 74.234.86.1:20010] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeD6B6aezm4fSGc0yULQkwAAAZY"]
[Thu Apr 16 23:02:32.524958 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:8096] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeD6CKMCQoTw7TsxWukB0wAAAMc"]
[Thu Apr 16 23:02:33.061428 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:8121] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeD6CaMCQoTw7TsxWukB1QAAAMQ"]
[Thu Apr 16 23:02:33.622791 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:7945] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeD6CVfGOR6fpTWUAzq1SQAAARg"]
[Thu Apr 16 23:02:34.135837 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:8086] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeD6CiQU4faGja6jpDuuagAAABU"]
[Thu Apr 16 23:02:34.637850 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:8186] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeD6CjbDwvcXorHR_MwhDwAAAU8"]
[Thu Apr 16 23:02:35.151316 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:8092] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeD6CzbDwvcXorHR_MwhEwAAAUk"]
[Thu Apr 16 23:02:35.706770 2026] [:error] [pid 29603:tid 29613] [client 74.234.86.1:8033] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeD6C1fGOR6fpTWUAzq1TQAAAQg"]
[Thu Apr 16 23:02:36.233192 2026] [:error] [pid 29603:tid 29615] [client 74.234.86.1:8073] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeD6DFfGOR6fpTWUAzq1TwAAAQo"]
[Thu Apr 16 23:02:36.789887 2026] [:error] [pid 49094:tid 49104] [client 74.234.86.1:8104] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeD6DDbDwvcXorHR_MwhGQAAAUg"]
[Thu Apr 16 23:02:37.293718 2026] [:error] [pid 7880:tid 7896] [client 74.234.86.1:7938] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeD6Daaezm4fSGc0yULQmgAAAYs"]
[Thu Apr 16 23:02:37.799769 2026] [:error] [pid 49094:tid 49102] [client 74.234.86.1:8051] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeD6DTbDwvcXorHR_MwhGwAAAUY"]
[Thu Apr 16 23:02:38.310064 2026] [:error] [pid 57538:tid 57620] [client 74.234.86.1:7989] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeD6DsuMaiEF5SVR2Bf8sQAAAJI"]
[Thu Apr 16 23:02:38.812927 2026] [:error] [pid 29603:tid 29622] [client 74.234.86.1:8174] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeD6DlfGOR6fpTWUAzq1VQAAARE"]
[Thu Apr 16 23:02:39.340465 2026] [:error] [pid 29603:tid 29609] [client 74.234.86.1:8027] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeD6D1fGOR6fpTWUAzq1WAAAAQQ"]
[Thu Apr 16 23:02:39.849565 2026] [:error] [pid 29603:tid 29625] [client 74.234.86.1:7985] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeD6D1fGOR6fpTWUAzq1WQAAARQ"]
[Thu Apr 16 23:02:40.388513 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:8081] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeD6EKMCQoTw7TsxWukB7gAAANc"]
[Thu Apr 16 23:02:40.904904 2026] [:error] [pid 57639:tid 57659] [client 74.234.86.1:8037] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeD6EKMCQoTw7TsxWukB8wAAAM0"]
[Thu Apr 16 23:02:41.446918 2026] [:error] [pid 57536:tid 57548] [client 74.234.86.1:20039] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeD6ESQU4faGja6jpDuubgAAAAA"]
[Thu Apr 16 23:02:41.987748 2026] [:error] [pid 49094:tid 49117] [client 74.234.86.1:8113] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeD6ETbDwvcXorHR_MwhIwAAAVU"]
[Thu Apr 16 23:02:42.497963 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:19976] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeD6EiQU4faGja6jpDuudwAAABg"]
[Thu Apr 16 23:02:43.012499 2026] [:error] [pid 7880:tid 7888] [client 74.234.86.1:7939] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeD6E6aezm4fSGc0yULQnQAAAYM"]
[Thu Apr 16 23:02:43.555162 2026] [:error] [pid 29603:tid 29622] [client 74.234.86.1:20062] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeD6E1fGOR6fpTWUAzq1XgAAARE"]
[Thu Apr 16 23:02:44.061108 2026] [:error] [pid 49094:tid 49109] [client 74.234.86.1:20075] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeD6FDbDwvcXorHR_MwhLQAAAU0"]
[Thu Apr 16 23:02:44.586472 2026] [:error] [pid 29603:tid 29613] [client 74.234.86.1:8085] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeD6FFfGOR6fpTWUAzq1ZQAAAQg"]
[Thu Apr 16 23:02:45.143562 2026] [:error] [pid 49094:tid 49097] [client 74.234.86.1:7966] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeD6FTbDwvcXorHR_MwhNQAAAUE"]
[Thu Apr 16 23:02:45.647543 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:8114] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeD6FSQU4faGja6jpDuufwAAABc"]
[Thu Apr 16 23:02:46.149767 2026] [:error] [pid 57536:tid 57562] [client 74.234.86.1:8087] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeD6FiQU4faGja6jpDuuggAAAA4"]
[Thu Apr 16 23:02:46.707329 2026] [:error] [pid 49094:tid 49116] [client 74.234.86.1:7956] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeD6FjbDwvcXorHR_MwhOQAAAVQ"]
[Thu Apr 16 23:02:47.219943 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:8029] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeD6FyQU4faGja6jpDuuiAAAABU"]
[Thu Apr 16 23:02:47.766986 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:8160] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeD6F6MCQoTw7TsxWukCAwAAAMk"]
[Thu Apr 16 23:02:48.328164 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:7963] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeD6GKMCQoTw7TsxWukCCAAAANI"]
[Thu Apr 16 23:02:48.878657 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:8002] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeD6GKMCQoTw7TsxWukCDgAAAM4"]
[Thu Apr 16 23:02:49.377924 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:8024] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeD6GaMCQoTw7TsxWukCEgAAAM8"]
[Thu Apr 16 23:02:49.877942 2026] [:error] [pid 57538:tid 57602] [client 74.234.86.1:8053] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeD6GcuMaiEF5SVR2Bf8uAAAAIA"]
[Thu Apr 16 23:02:50.390049 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:7947] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeD6GqMCQoTw7TsxWukCIgAAAMc"]
[Thu Apr 16 23:02:50.913657 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:8170] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeD6GqMCQoTw7TsxWukCMAAAANI"]
[Thu Apr 16 23:02:51.438201 2026] [:error] [pid 57536:tid 57551] [client 74.234.86.1:7896] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeD6GyQU4faGja6jpDuunAAAAAM"]
[Thu Apr 16 23:02:51.962966 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:7888] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeD6G6MCQoTw7TsxWukCQAAAAMo"]
[Thu Apr 16 23:02:52.493526 2026] [:error] [pid 57538:tid 57606] [client 74.234.86.1:7952] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeD6HMuMaiEF5SVR2Bf8ugAAAIQ"]
[Thu Apr 16 23:02:53.048413 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:7958] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeD6HaMCQoTw7TsxWukCXAAAAMU"]
[Thu Apr 16 23:02:53.590842 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:8034] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeD6HaMCQoTw7TsxWukCaAAAAM8"]
[Thu Apr 16 23:02:54.110545 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:7982] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeD6HqMCQoTw7TsxWukCcQAAANY"]
[Thu Apr 16 23:02:54.636912 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:8082] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeD6HqMCQoTw7TsxWukCdwAAANg"]
[Thu Apr 16 23:02:55.139966 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:8036] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeD6HyQU4faGja6jpDuusgAAABc"]
[Thu Apr 16 23:02:55.688096 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:7940] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeD6HzbDwvcXorHR_MwhcgAAAVc"]
[Thu Apr 16 23:02:56.200617 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:8080] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeD6IKMCQoTw7TsxWukClgAAANU"]
[Thu Apr 16 23:02:56.728319 2026] [:error] [pid 57536:tid 57554] [client 74.234.86.1:19998] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeD6ICQU4faGja6jpDuuxgAAAAY"]
[Thu Apr 16 23:02:57.250495 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:8040] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeD6ITbDwvcXorHR_MwhigAAAUs"]
[Thu Apr 16 23:02:57.792933 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:8098] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeD6IaMCQoTw7TsxWukCrwAAAMw"]
[Thu Apr 16 23:02:58.335269 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:8115] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeD6IjbDwvcXorHR_MwhlAAAAU8"]
[Thu Apr 16 23:02:58.915384 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:8005] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeD6IlfGOR6fpTWUAzq1cQAAARg"]
[Thu Apr 16 23:02:59.429655 2026] [:error] [pid 7880:tid 7892] [client 74.234.86.1:8063] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeD6I6aezm4fSGc0yULQwQAAAYc"]
[Thu Apr 16 23:02:59.968043 2026] [:error] [pid 29603:tid 29626] [client 74.234.86.1:8041] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeD6I1fGOR6fpTWUAzq1eAAAARU"]
[Thu Apr 16 23:03:00.481549 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:8102] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeD6JKMCQoTw7TsxWukCuwAAANI"]
[Thu Apr 16 23:03:00.995063 2026] [:error] [pid 57536:tid 57564] [client 74.234.86.1:8057] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeD6JCQU4faGja6jpDuu1QAAABA"]
[Thu Apr 16 23:03:01.538306 2026] [:error] [pid 29603:tid 29628] [client 74.234.86.1:8013] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeD6JVfGOR6fpTWUAzq1fwAAARc"]
[Thu Apr 16 23:03:02.073126 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:8047] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeD6JqMCQoTw7TsxWukCyAAAAMw"]
[Thu Apr 16 23:03:02.607297 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:8039] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeD6JqMCQoTw7TsxWukC0QAAANc"]
[Thu Apr 16 23:03:03.147988 2026] [:error] [pid 49094:tid 49113] [client 74.234.86.1:7948] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeD6JzbDwvcXorHR_MwhngAAAVE"]
[Thu Apr 16 23:03:03.684360 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:7978] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeD6JzbDwvcXorHR_MwhoAAAAVc"]
[Thu Apr 16 23:03:04.223167 2026] [:error] [pid 49094:tid 49108] [client 74.234.86.1:7973] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeD6KDbDwvcXorHR_MwhpAAAAUw"]
[Thu Apr 16 23:03:04.722088 2026] [:error] [pid 7880:tid 7901] [client 74.234.86.1:8184] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeD6KKaezm4fSGc0yULQzQAAAZA"]
[Thu Apr 16 23:03:05.270612 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:7872] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeD6KaMCQoTw7TsxWukC3gAAAMM"]
[Thu Apr 16 23:03:05.797991 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:7974] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeD6KaMCQoTw7TsxWukC4wAAAMI"]
[Thu Apr 16 23:03:06.312111 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:8124] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeD6KqMCQoTw7TsxWukC5gAAANU"]
[Thu Apr 16 23:03:06.857245 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:8060] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeD6KqMCQoTw7TsxWukC7QAAAMM"]
[Thu Apr 16 23:03:07.397766 2026] [:error] [pid 57537:tid 57595] [client 74.234.86.1:7964] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeD6K1VQRS8nm73ENAnNOgAAAFQ"]
[Thu Apr 16 23:03:07.942894 2026] [:error] [pid 29603:tid 29607] [client 74.234.86.1:8010] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeD6K1fGOR6fpTWUAzq1kgAAAQI"]
[Thu Apr 16 23:03:08.476370 2026] [:error] [pid 29603:tid 29626] [client 74.234.86.1:7970] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeD6LFfGOR6fpTWUAzq1lQAAARU"]
[Thu Apr 16 23:03:09.010624 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:7942] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeD6LaMCQoTw7TsxWukC-QAAAMA"]
[Thu Apr 16 23:03:09.548922 2026] [:error] [pid 29603:tid 29610] [client 74.234.86.1:8077] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeD6LVfGOR6fpTWUAzq1mwAAAQU"]
[Thu Apr 16 23:03:10.101205 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:8007] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeD6LqMCQoTw7TsxWukC_gAAAMo"]
[Thu Apr 16 23:03:10.622337 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:8054] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeD6LqMCQoTw7TsxWukDAwAAANU"]
[Thu Apr 16 23:03:11.148020 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:8000] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeD6L6MCQoTw7TsxWukDBwAAANY"]
[Thu Apr 16 23:03:11.688806 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:7951] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeD6LyQU4faGja6jpDuu4AAAAAQ"]
[Thu Apr 16 23:03:12.231919 2026] [:error] [pid 57536:tid 57554] [client 74.234.86.1:7988] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeD6MCQU4faGja6jpDuu4wAAAAY"]
[Thu Apr 16 23:03:12.767134 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:19974] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeD6MKMCQoTw7TsxWukDEQAAANY"]
[Thu Apr 16 23:11:36.825178 2026] [:error] [pid 57538:tid 57609] [client 35.197.38.167:51528] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.local"] [unique_id "aeD8KMuMaiEF5SVR2Bf-UAAAAIc"]
[Thu Apr 16 23:11:42.188596 2026] [:error] [pid 7880:tid 7886] [client 35.197.38.167:50672] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.production"] [unique_id "aeD8Lqaezm4fSGc0yULT9wAAAYE"]
[Thu Apr 16 23:12:15.922741 2026] [:error] [pid 57639:tid 57658] [client 35.197.38.167:34366] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.bak"] [unique_id "aeD8T6MCQoTw7TsxWukKIQAAAMw"]
[Thu Apr 16 23:12:46.068710 2026] [:error] [pid 29603:tid 29611] [client 35.197.38.167:40854] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.save"] [unique_id "aeD8blfGOR6fpTWUAzq4XgAAAQY"]
[Thu Apr 16 23:12:49.949892 2026] [:error] [pid 57639:tid 57661] [client 35.197.38.167:40928] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/core/.env"] [unique_id "aeD8caMCQoTw7TsxWukKvwAAAM8"]
[Fri Apr 17 04:01:33.898750 2026] [:error] [pid 9152:tid 9200] [client 209.38.89.62:49030] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/install.php"] [unique_id "aeFAHZJYca8I3TNCwIfMUwAAAEo"]
[Fri Apr 17 04:01:34.110924 2026] [:error] [pid 9263:tid 9284] [client 209.38.89.62:49038] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAHhP68VyHNvj1e56LlgAAANM"]
[Fri Apr 17 04:01:34.694444 2026] [:error] [pid 9153:tid 9219] [client 209.38.89.62:52236] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAHuMHGxkTZX3c45etFAAAAIE"]
[Fri Apr 17 04:01:34.787738 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:52246] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAHhP68VyHNvj1e56LmQAAAMY"]
[Fri Apr 17 04:01:34.898269 2026] [:error] [pid 9153:tid 9218] [client 209.38.89.62:52250] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAHuMHGxkTZX3c45etFwAAAIA"]
[Fri Apr 17 04:01:35.037762 2026] [:error] [pid 9152:tid 9202] [client 209.38.89.62:52258] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAH5JYca8I3TNCwIfMVAAAAEw"]
[Fri Apr 17 04:01:35.346924 2026] [:error] [pid 9263:tid 9285] [client 209.38.89.62:52266] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAHxP68VyHNvj1e56LnAAAANQ"]
[Fri Apr 17 04:01:35.446302 2026] [:error] [pid 9153:tid 9224] [client 209.38.89.62:52274] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAH-MHGxkTZX3c45etGQAAAIY"]
[Fri Apr 17 04:01:35.577295 2026] [:error] [pid 9263:tid 9287] [client 209.38.89.62:52288] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAHxP68VyHNvj1e56LngAAANY"]
[Fri Apr 17 04:01:35.750964 2026] [:error] [pid 9153:tid 9229] [client 209.38.89.62:52290] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAH-MHGxkTZX3c45etGgAAAIs"]
[Fri Apr 17 04:01:35.988354 2026] [:error] [pid 9153:tid 9240] [client 209.38.89.62:52296] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAH-MHGxkTZX3c45etHQAAAJY"]
[Fri Apr 17 04:01:36.082177 2026] [:error] [pid 9153:tid 9236] [client 209.38.89.62:52298] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAIOMHGxkTZX3c45etHwAAAJI"]
[Fri Apr 17 04:01:36.224505 2026] [:error] [pid 9263:tid 9267] [client 209.38.89.62:52318] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAIBP68VyHNvj1e56LogAAAMI"]
[Fri Apr 17 04:24:52.707788 2026] [proxy_fcgi:error] [pid 9151:tid 9178] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:52.981704 2026] [proxy_fcgi:error] [pid 9151:tid 9172] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:53.254816 2026] [proxy_fcgi:error] [pid 9151:tid 9176] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:53.526059 2026] [proxy_fcgi:error] [pid 9151:tid 9169] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:53.799826 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:54.071936 2026] [proxy_fcgi:error] [pid 9151:tid 9161] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:54.343708 2026] [proxy_fcgi:error] [pid 9151:tid 9163] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:54.615762 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:55.174041 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 20.199.113.127:39825] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:24:55.443058 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:39825] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeFFl8hTVuRPkua22vRwYwAAAAc"]
[Fri Apr 17 04:24:55.976929 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:17702] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeFFlxP68VyHNvj1e56r3wAAAM8"]
[Fri Apr 17 04:24:56.449865 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:41086] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeFFmJJYca8I3TNCwIfe6wAAAFQ"]
[Fri Apr 17 04:24:56.919990 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:63476] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeFFmOMHGxkTZX3c45fDfgAAAJc"]
[Fri Apr 17 04:24:57.429178 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:39845] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeFFmZJYca8I3TNCwIfe8wAAAEU"]
[Fri Apr 17 04:24:57.955660 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:55151] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeFFmeMHGxkTZX3c45fDhgAAAJM"]
[Fri Apr 17 04:24:58.516876 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:17725] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeFFmhP68VyHNvj1e56r8QAAAMc"]
[Fri Apr 17 04:24:59.053176 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:55125] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeFFmxP68VyHNvj1e56r9wAAAME"]
[Fri Apr 17 04:24:59.574589 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:63483] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeFFmxP68VyHNvj1e56r_wAAANA"]
[Fri Apr 17 04:25:00.084038 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:39847] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeFFnMhTVuRPkua22vRwcgAAABY"]
[Fri Apr 17 04:25:00.592273 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:39815] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeFFnJJYca8I3TNCwIfe-AAAAEE"]
[Fri Apr 17 04:25:01.065851 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:39854] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeFFnRP68VyHNvj1e56sDgAAANE"]
[Fri Apr 17 04:25:01.576484 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:55163] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeFFnRP68VyHNvj1e56sGQAAAMc"]
[Fri Apr 17 04:25:02.087128 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:54620] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeFFnuMHGxkTZX3c45fDkwAAAJA"]
[Fri Apr 17 04:25:02.569284 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:63471] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeFFnhP68VyHNvj1e56sJgAAAMQ"]
[Fri Apr 17 04:25:03.045862 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:17699] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeFFnxP68VyHNvj1e56sMgAAAMA"]
[Fri Apr 17 04:25:03.540124 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:31876] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeFFnxP68VyHNvj1e56sPQAAANI"]
[Fri Apr 17 04:25:04.025848 2026] [:error] [pid 9152:tid 9205] [client 20.199.113.127:55109] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeFFoJJYca8I3TNCwIffAwAAAE8"]
[Fri Apr 17 04:25:04.531010 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:17682] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeFFoMhTVuRPkua22vRwfQAAABg"]
[Fri Apr 17 04:25:05.060329 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:63444] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeFFoRP68VyHNvj1e56sXwAAAMc"]
[Fri Apr 17 04:25:05.578166 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:39850] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kikikoko.php"] [unique_id "aeFFochTVuRPkua22vRwgQAAABE"]
[Fri Apr 17 04:25:06.053833 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:17708] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kikikoko.php"] [unique_id "aeFFouMHGxkTZX3c45fDnQAAAIk"]
[Fri Apr 17 04:25:06.530312 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:55152] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kikikoko.php"] [unique_id "aeFFohP68VyHNvj1e56scgAAAMc"]
[Fri Apr 17 04:25:07.022337 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:39834] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kikikoko.php"] [unique_id "aeFFo8hTVuRPkua22vRwiwAAABQ"]
[Fri Apr 17 04:25:07.566594 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:55158] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aeFFo8hTVuRPkua22vRwjgAAAAc"]
[Fri Apr 17 04:25:08.060660 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:39811] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aeFFpBP68VyHNvj1e56sfAAAANA"]
[Fri Apr 17 04:25:08.536048 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:63466] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aeFFpBP68VyHNvj1e56shgAAAMQ"]
[Fri Apr 17 04:25:09.036949 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:55162] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aeFFpchTVuRPkua22vRwnAAAAAg"]
[Fri Apr 17 04:25:09.534343 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:54645] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeFFpZJYca8I3TNCwIffFQAAAEc"]
[Fri Apr 17 04:25:10.039080 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:55105] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeFFppJYca8I3TNCwIffHQAAAEI"]
[Fri Apr 17 04:25:10.543172 2026] [:error] [pid 9153:tid 9226] [client 20.199.113.127:39852] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeFFpuMHGxkTZX3c45fDtwAAAIg"]
[Fri Apr 17 04:25:11.045991 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:54592] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeFFp8hTVuRPkua22vRwpQAAABc"]
[Fri Apr 17 04:25:11.554901 2026] [:error] [pid 9151:tid 9166] [client 20.199.113.127:54632] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeFFp8hTVuRPkua22vRwrQAAAAU"]
[Fri Apr 17 04:25:12.028823 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:17709] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeFFqMhTVuRPkua22vRwtwAAABM"]
[Fri Apr 17 04:25:12.537876 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:54641] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeFFqOMHGxkTZX3c45fDzwAAAIc"]
[Fri Apr 17 04:25:13.075311 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:39837] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeFFqeMHGxkTZX3c45fD1wAAAJU"]
[Fri Apr 17 04:25:13.612652 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:63464] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aeFFqeMHGxkTZX3c45fD4AAAAIM"]
[Fri Apr 17 04:25:14.358774 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:54616] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aeFFqhP68VyHNvj1e56stQAAAMA"]
[Fri Apr 17 04:25:14.830131 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:63457] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aeFFqhP68VyHNvj1e56svAAAAMw"]
[Fri Apr 17 04:25:15.334079 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:63485] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aeFFqxP68VyHNvj1e56sygAAAMQ"]
[Fri Apr 17 04:25:15.839405 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:41063] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aeFFq8hTVuRPkua22vRwxgAAAA0"]
[Fri Apr 17 04:25:16.342034 2026] [:error] [pid 9263:tid 9287] [client 20.199.113.127:39865] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aeFFrBP68VyHNvj1e56s2AAAANY"]
[Fri Apr 17 04:25:16.846057 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:17719] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aeFFrJJYca8I3TNCwIffKgAAAFI"]
[Fri Apr 17 04:25:17.316941 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:15733] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aeFFrchTVuRPkua22vRwzQAAAAo"]
[Fri Apr 17 04:25:17.808958 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:55122] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aeFFreMHGxkTZX3c45fEBQAAAJM"]
[Fri Apr 17 04:25:18.323159 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:17693] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aeFFrhP68VyHNvj1e56s4wAAANA"]
[Fri Apr 17 04:25:18.848359 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:63465] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aeFFruMHGxkTZX3c45fECQAAAII"]
[Fri Apr 17 04:25:19.377922 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:41035] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aeFFr-MHGxkTZX3c45fEDwAAAI4"]
[Fri Apr 17 04:25:19.899232 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:39867] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aeFFr5JYca8I3TNCwIffMAAAAEE"]
[Fri Apr 17 04:25:20.376541 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:63487] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aeFFsBP68VyHNvj1e56s9gAAANQ"]
[Fri Apr 17 04:25:20.847159 2026] [:error] [pid 9152:tid 9213] [client 20.199.113.127:54605] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aeFFsJJYca8I3TNCwIffNQAAAFc"]
[Fri Apr 17 04:25:21.317780 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:63438] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aeFFseMHGxkTZX3c45fEIgAAAIE"]
[Fri Apr 17 04:25:21.788246 2026] [:error] [pid 9151:tid 9163] [client 20.199.113.127:65039] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aeFFschTVuRPkua22vRw6AAAAAI"]
[Fri Apr 17 04:25:22.257756 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:15706] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aeFFshP68VyHNvj1e56tAgAAAMM"]
[Fri Apr 17 04:25:22.727447 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:54629] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aeFFspJYca8I3TNCwIffTgAAAFQ"]
[Fri Apr 17 04:25:23.199216 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:15719] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aeFFs-MHGxkTZX3c45fEMgAAAJc"]
[Fri Apr 17 04:25:23.668695 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:55135] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aeFFsxP68VyHNvj1e56tDwAAAMA"]
[Fri Apr 17 04:25:24.140371 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:63468] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeFFtJJYca8I3TNCwIffVQAAAEU"]
[Fri Apr 17 04:25:24.611593 2026] [:error] [pid 9153:tid 9222] [client 20.199.113.127:39866] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeFFtOMHGxkTZX3c45fEOQAAAIQ"]
[Fri Apr 17 04:25:25.084642 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:17721] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeFFtRP68VyHNvj1e56tKAAAAMs"]
[Fri Apr 17 04:25:25.556409 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:41060] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeFFtRP68VyHNvj1e56tMgAAANI"]
[Fri Apr 17 04:25:26.028279 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:55113] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeFFtpJYca8I3TNCwIffXgAAAFE"]
[Fri Apr 17 04:25:26.499670 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:65031] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeFFtpJYca8I3TNCwIffYwAAAFA"]
[Fri Apr 17 04:25:26.969732 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:41041] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeFFthP68VyHNvj1e56tQgAAAM4"]
[Fri Apr 17 04:25:27.462415 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:41068] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeFFt-MHGxkTZX3c45fERgAAAJc"]
[Fri Apr 17 04:25:27.958303 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:17724] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeFFtxP68VyHNvj1e56tUAAAANA"]
[Fri Apr 17 04:25:28.465411 2026] [:error] [pid 9152:tid 9205] [client 20.199.113.127:41036] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeFFuJJYca8I3TNCwIffawAAAE8"]
[Fri Apr 17 04:25:29.003035 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:17717] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeFFuZJYca8I3TNCwIffcQAAAFg"]
[Fri Apr 17 04:25:29.543319 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:54603] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeFFueMHGxkTZX3c45fESwAAAIA"]
[Fri Apr 17 04:25:30.046953 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:18795] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeFFuhP68VyHNvj1e56tdQAAANQ"]
[Fri Apr 17 04:25:30.546820 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:63462] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeFFuhP68VyHNvj1e56tfQAAAMs"]
[Fri Apr 17 04:25:31.038623 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:41039] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeFFuxP68VyHNvj1e56tggAAAMQ"]
[Fri Apr 17 04:25:31.510659 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:63486] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeFFuxP68VyHNvj1e56tigAAAMI"]
[Fri Apr 17 04:25:31.983115 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:15698] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeFFu-MHGxkTZX3c45fEUQAAAIk"]
[Fri Apr 17 04:25:32.498729 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:55156] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeFFvBP68VyHNvj1e56tmAAAAMI"]
[Fri Apr 17 04:25:33.034208 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:54607] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeFFvRP68VyHNvj1e56tpAAAAMo"]
[Fri Apr 17 04:25:33.537481 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:15696] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeFFvRP68VyHNvj1e56trgAAAMM"]
[Fri Apr 17 04:25:34.008867 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:63478] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeFFvhP68VyHNvj1e56tuAAAAM4"]
[Fri Apr 17 04:25:34.522528 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:41040] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeFFvhP68VyHNvj1e56txAAAANM"]
[Fri Apr 17 04:25:35.059540 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:41044] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeFFv-MHGxkTZX3c45fEWQAAAIs"]
[Fri Apr 17 04:25:35.591896 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:17689] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeFFv-MHGxkTZX3c45fEYAAAAI4"]
[Fri Apr 17 04:25:36.084952 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:55112] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeFFwJJYca8I3TNCwIffjQAAAFQ"]
[Fri Apr 17 04:25:36.556063 2026] [:error] [pid 9152:tid 9202] [client 20.199.113.127:39866] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeFFwJJYca8I3TNCwIffkQAAAEw"]
[Fri Apr 17 04:25:37.027509 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:55140] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeFFwZJYca8I3TNCwIfflQAAAEU"]
[Fri Apr 17 04:25:37.498490 2026] [:error] [pid 9152:tid 9200] [client 20.199.113.127:55136] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeFFwZJYca8I3TNCwIffngAAAEo"]
[Fri Apr 17 04:25:38.001078 2026] [:error] [pid 9152:tid 9196] [client 20.199.113.127:55156] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeFFwZJYca8I3TNCwIffpwAAAEY"]
[Fri Apr 17 04:25:38.552627 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:15693] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeFFwshTVuRPkua22vRxEAAAABg"]
[Fri Apr 17 04:25:39.077568 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:63433] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeFFw-MHGxkTZX3c45fEcQAAAIc"]
[Fri Apr 17 04:25:39.571416 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:39820] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeFFw-MHGxkTZX3c45fEegAAAIE"]
[Fri Apr 17 04:25:40.062484 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:63441] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeFFxBP68VyHNvj1e56t0AAAANM"]
[Fri Apr 17 04:25:40.580444 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:63179] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeFFxOMHGxkTZX3c45fEhQAAAJA"]
[Fri Apr 17 04:25:41.077312 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:39840] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeFFxeMHGxkTZX3c45fEiQAAAIs"]
[Fri Apr 17 04:25:41.569829 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:18756] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeFFxRP68VyHNvj1e56t1QAAAME"]
[Fri Apr 17 04:25:42.062863 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:39857] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeFFxshTVuRPkua22vRxKAAAABI"]
[Fri Apr 17 04:25:42.541227 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:39816] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeFFxuMHGxkTZX3c45fElAAAAII"]
[Fri Apr 17 04:25:43.010732 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:41050] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeFFxxP68VyHNvj1e56t3AAAANI"]
[Fri Apr 17 04:25:43.481063 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:55138] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeFFx5JYca8I3TNCwIffwAAAAEc"]
[Fri Apr 17 04:25:43.952387 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:54649] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aeFFxxP68VyHNvj1e56t4gAAANg"]
[Fri Apr 17 04:25:44.455383 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:39855] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aeFFyBP68VyHNvj1e56t5wAAAMQ"]
[Fri Apr 17 04:25:44.992298 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:63444] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aeFFyJJYca8I3TNCwIffyQAAAEE"]
[Fri Apr 17 04:25:45.497540 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:55159] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aeFFyRP68VyHNvj1e56t7QAAAMo"]
[Fri Apr 17 04:25:46.001803 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:39821] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aeFFyuMHGxkTZX3c45fEqwAAAIU"]
[Fri Apr 17 04:25:46.504669 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:39842] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aeFFyshTVuRPkua22vRxRAAAABU"]
[Fri Apr 17 04:25:46.975605 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:17703] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aeFFyshTVuRPkua22vRxRQAAAAg"]
[Fri Apr 17 04:25:47.472865 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:41074] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aeFFy8hTVuRPkua22vRxSgAAABE"]
[Fri Apr 17 04:25:47.970034 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:30945] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aeFFy5JYca8I3TNCwIff1QAAAEg"]
[Fri Apr 17 04:25:48.477792 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:41070] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aeFFzBP68VyHNvj1e56uAwAAANE"]
[Fri Apr 17 04:25:48.974333 2026] [:error] [pid 9263:tid 9272] [client 20.199.113.127:41076] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aeFFzBP68VyHNvj1e56uCAAAAMc"]
[Fri Apr 17 04:25:49.464527 2026] [:error] [pid 9151:tid 9170] [client 20.199.113.127:55144] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aeFFzchTVuRPkua22vRxUAAAAAk"]
[Fri Apr 17 04:25:49.958093 2026] [:error] [pid 9151:tid 9173] [client 20.199.113.127:54610] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aeFFzchTVuRPkua22vRxUwAAAAw"]
[Fri Apr 17 04:25:50.450250 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:63462] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aeFFzuMHGxkTZX3c45fEywAAAIc"]
[Fri Apr 17 04:25:50.946530 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:39818] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aeFFzuMHGxkTZX3c45fEzQAAAJE"]
[Fri Apr 17 04:25:51.450068 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:41080] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aeFFz-MHGxkTZX3c45fE0gAAAIY"]
[Fri Apr 17 04:25:51.966164 2026] [:error] [pid 9153:tid 9230] [client 20.199.113.127:17715] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aeFFz-MHGxkTZX3c45fE2QAAAIw"]
[Fri Apr 17 04:25:52.437910 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:65078] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aeFF0JJYca8I3TNCwIff_QAAAFU"]
[Fri Apr 17 04:25:52.946108 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:39855] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aeFF0JJYca8I3TNCwIfgAAAAAEQ"]
[Fri Apr 17 04:25:53.481526 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:65057] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aeFF0chTVuRPkua22vRxYwAAABY"]
[Fri Apr 17 04:25:53.984646 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:55146] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aeFF0chTVuRPkua22vRxaQAAABc"]
[Fri Apr 17 04:25:54.488336 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:39851] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aeFF0uMHGxkTZX3c45fE7wAAAI0"]
[Fri Apr 17 04:25:54.993709 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:63206] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aeFF0pJYca8I3TNCwIfgBwAAAFY"]
[Fri Apr 17 04:25:55.473851 2026] [proxy_fcgi:error] [pid 9153:tid 9227] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:55.713789 2026] [proxy_fcgi:error] [pid 9153:tid 9236] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:55.953645 2026] [proxy_fcgi:error] [pid 9153:tid 9219] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:56.194270 2026] [proxy_fcgi:error] [pid 9153:tid 9237] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:56.435537 2026] [proxy_fcgi:error] [pid 9153:tid 9224] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:56.676300 2026] [proxy_fcgi:error] [pid 9153:tid 9241] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:56.917792 2026] [proxy_fcgi:error] [pid 9153:tid 9231] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:57.158831 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:57.398335 2026] [proxy_fcgi:error] [pid 9153:tid 9238] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:57.637829 2026] [proxy_fcgi:error] [pid 9153:tid 9232] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:57.877196 2026] [proxy_fcgi:error] [pid 9153:tid 9218] [client 20.199.113.127:41073] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:25:58.113482 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:41073] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeFF1uMHGxkTZX3c45fFEAAAAJM"]
[Fri Apr 17 04:25:58.619890 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:31890] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeFF1shTVuRPkua22vRxhAAAABY"]
[Fri Apr 17 04:25:59.129305 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:55142] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeFF15JYca8I3TNCwIfgDQAAAEQ"]
[Fri Apr 17 04:25:59.599300 2026] [:error] [pid 9153:tid 9228] [client 20.199.113.127:39841] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeFF1-MHGxkTZX3c45fFGQAAAIo"]
[Fri Apr 17 04:26:00.072011 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:54610] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeFF2OMHGxkTZX3c45fFIAAAAJU"]
[Fri Apr 17 04:26:00.564688 2026] [:error] [pid 9151:tid 9163] [client 20.199.113.127:17697] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeFF2MhTVuRPkua22vRxigAAAAI"]
[Fri Apr 17 04:26:01.056801 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:15722] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeFF2chTVuRPkua22vRxjgAAAA8"]
[Fri Apr 17 04:26:01.527366 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:63170] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeFF2eMHGxkTZX3c45fFKAAAAIE"]
[Fri Apr 17 04:26:01.999591 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:15723] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeFF2RP68VyHNvj1e56uJgAAAM0"]
[Fri Apr 17 04:26:02.493842 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:39836] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeFF2shTVuRPkua22vRxlQAAAAg"]
[Fri Apr 17 04:26:03.018033 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:63432] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeFF2xP68VyHNvj1e56uMAAAANc"]
[Fri Apr 17 04:26:03.548648 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:54634] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeFF2xP68VyHNvj1e56uOAAAAMA"]
[Fri Apr 17 04:26:04.073049 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:39856] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeFF3OMHGxkTZX3c45fFLgAAAJM"]
[Fri Apr 17 04:26:04.570129 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:63440] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeFF3BP68VyHNvj1e56uSQAAAMU"]
[Fri Apr 17 04:26:05.073464 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:39868] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeFF3chTVuRPkua22vRxpgAAABY"]
[Fri Apr 17 04:26:05.576833 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:55119] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeFF3RP68VyHNvj1e56uWAAAAMw"]
[Fri Apr 17 04:26:06.079930 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:41052] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeFF3uMHGxkTZX3c45fFQAAAAIA"]
[Fri Apr 17 04:26:06.583105 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:30943] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeFF3uMHGxkTZX3c45fFRAAAAJU"]
[Fri Apr 17 04:26:07.056916 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:63424] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeFF35JYca8I3TNCwIfgPQAAAFQ"]
[Fri Apr 17 04:26:07.531251 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:63453] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeFF38hTVuRPkua22vRxtAAAAA0"]
[Fri Apr 17 04:26:08.027513 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:63175] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeFF4BP68VyHNvj1e56uZQAAANA"]
[Fri Apr 17 04:26:08.519821 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:31906] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeFF4OMHGxkTZX3c45fFUgAAAJI"]
[Fri Apr 17 04:26:08.990949 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:63460] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeFF4JJYca8I3TNCwIfgSQAAAFI"]
[Fri Apr 17 04:26:09.461117 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:41033] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeFF4chTVuRPkua22vRxvAAAABI"]
[Fri Apr 17 04:26:09.934009 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:39835] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFF4ZJYca8I3TNCwIfgWwAAAEE"]
[Fri Apr 17 04:26:10.431588 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:54619] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFF4uMHGxkTZX3c45fFXAAAAJE"]
[Fri Apr 17 04:26:10.928520 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:55128] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFF4pJYca8I3TNCwIfgZAAAAEg"]
[Fri Apr 17 04:26:11.402902 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:15700] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFF45JYca8I3TNCwIfgaQAAAEU"]
[Fri Apr 17 04:26:11.902309 2026] [:error] [pid 9151:tid 9173] [client 20.199.113.127:39844] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeFF48hTVuRPkua22vRxywAAAAw"]
[Fri Apr 17 04:26:12.397784 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:15695] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeFF5MhTVuRPkua22vRx0wAAABc"]
[Fri Apr 17 04:26:12.903662 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:17701] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeFF5MhTVuRPkua22vRx2QAAAA8"]
[Fri Apr 17 04:26:13.429480 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:54651] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeFF5eMHGxkTZX3c45fFbAAAAI4"]
[Fri Apr 17 04:26:13.943897 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:54593] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aeFF5eMHGxkTZX3c45fFbwAAAJU"]
[Fri Apr 17 04:26:14.437413 2026] [:error] [pid 9153:tid 9233] [client 20.199.113.127:15687] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aeFF5uMHGxkTZX3c45fFcwAAAI8"]
[Fri Apr 17 04:26:14.929844 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:63447] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aeFF5uMHGxkTZX3c45fFeQAAAIk"]
[Fri Apr 17 04:26:15.456293 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:54618] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aeFF5-MHGxkTZX3c45fFewAAAIU"]
[Fri Apr 17 04:26:15.982090 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:54640] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aeFF5xP68VyHNvj1e56uoQAAANU"]
[Fri Apr 17 04:26:16.496116 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:39810] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aeFF6BP68VyHNvj1e56uqgAAAM0"]
[Fri Apr 17 04:26:17.013065 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:15681] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aeFF6RP68VyHNvj1e56usgAAAMg"]
[Fri Apr 17 04:26:17.530755 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:31896] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aeFF6RP68VyHNvj1e56uvAAAANI"]
[Fri Apr 17 04:26:18.033531 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:65062] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aeFF6hP68VyHNvj1e56uxAAAAMM"]
[Fri Apr 17 04:26:18.525610 2026] [:error] [pid 9151:tid 9173] [client 20.199.113.127:55161] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aeFF6shTVuRPkua22vRx9QAAAAw"]
[Fri Apr 17 04:26:19.024204 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:54601] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aeFF6-MHGxkTZX3c45fFhwAAAIY"]
[Fri Apr 17 04:26:19.528033 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:54594] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aeFF65JYca8I3TNCwIfgmgAAAFE"]
[Fri Apr 17 04:26:20.057524 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:15684] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aeFF7BP68VyHNvj1e56u1wAAANc"]
[Fri Apr 17 04:26:20.585287 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:39828] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aeFF7JJYca8I3TNCwIfgngAAAEI"]
[Fri Apr 17 04:26:21.103420 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:65077] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aeFF7RP68VyHNvj1e56u4AAAANA"]
[Fri Apr 17 04:26:21.595820 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:55145] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aeFF7RP68VyHNvj1e56u6QAAAMs"]
[Fri Apr 17 04:26:22.089818 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:54597] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeFF7shTVuRPkua22vRx_gAAAA4"]
[Fri Apr 17 04:26:22.590843 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:31891] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeFF7hP68VyHNvj1e56u9AAAAM4"]
[Fri Apr 17 04:26:23.061149 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:15686] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeFF78hTVuRPkua22vRyAwAAAAY"]
[Fri Apr 17 04:26:23.552845 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:17676] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeFF7xP68VyHNvj1e56u_gAAAMw"]
[Fri Apr 17 04:26:24.067357 2026] [:error] [pid 9151:tid 9161] [client 20.199.113.127:15692] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aeFF8MhTVuRPkua22vRyCAAAAAA"]
[Fri Apr 17 04:26:24.559013 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:55120] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aeFF8BP68VyHNvj1e56vEwAAAMQ"]
[Fri Apr 17 04:26:25.028865 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:63454] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aeFF8chTVuRPkua22vRyCwAAAA0"]
[Fri Apr 17 04:26:25.533449 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:63437] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aeFF8eMHGxkTZX3c45fFtQAAAIc"]
[Fri Apr 17 04:26:26.069848 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:30968] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aeFF8hP68VyHNvj1e56vKgAAANA"]
[Fri Apr 17 04:26:26.583506 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:39853] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aeFF8pJYca8I3TNCwIfgtAAAAFI"]
[Fri Apr 17 04:26:27.052828 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:30956] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aeFF8xP68VyHNvj1e56vLwAAANQ"]
[Fri Apr 17 04:26:27.524907 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:39848] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aeFF8xP68VyHNvj1e56vOAAAAMI"]
[Fri Apr 17 04:26:27.999092 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:63459] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeFF85JYca8I3TNCwIfgvwAAAEU"]
[Fri Apr 17 04:26:28.493527 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:54655] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeFF9OMHGxkTZX3c45fFxQAAAIM"]
[Fri Apr 17 04:26:28.989184 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:55104] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeFF9BP68VyHNvj1e56vRgAAANI"]
[Fri Apr 17 04:26:29.485478 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:15731] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeFF9RP68VyHNvj1e56vSQAAAMo"]
[Fri Apr 17 04:26:30.015251 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:39817] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeFF9pJYca8I3TNCwIfg1QAAAEM"]
[Fri Apr 17 04:26:30.540993 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:41025] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeFF9shTVuRPkua22vRyLAAAAAc"]
[Fri Apr 17 04:26:31.054339 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:54636] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeFF95JYca8I3TNCwIfg3AAAAFI"]
[Fri Apr 17 04:26:31.546075 2026] [:error] [pid 9151:tid 9161] [client 20.199.113.127:18811] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeFF98hTVuRPkua22vRyNQAAAAA"]
[Fri Apr 17 04:26:32.015465 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:55149] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeFF-MhTVuRPkua22vRyOQAAAA0"]
[Fri Apr 17 04:26:32.494794 2026] [:error] [pid 9152:tid 9205] [client 20.199.113.127:41047] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeFF-JJYca8I3TNCwIfg8AAAAE8"]
[Fri Apr 17 04:26:32.992045 2026] [:error] [pid 9153:tid 9221] [client 20.199.113.127:55155] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeFF-OMHGxkTZX3c45fF2QAAAIM"]
[Fri Apr 17 04:26:33.489084 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:63442] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeFF-ZJYca8I3TNCwIfg_AAAAEQ"]
[Fri Apr 17 04:26:33.962293 2026] [:error] [pid 9152:tid 9213] [client 20.199.113.127:17700] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeFF-ZJYca8I3TNCwIfg_wAAAFc"]
[Fri Apr 17 04:26:34.433935 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:15716] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeFF-shTVuRPkua22vRySwAAAA0"]
[Fri Apr 17 04:26:34.905602 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:63177] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeFF-uMHGxkTZX3c45fF6gAAAJA"]
[Fri Apr 17 04:26:35.376810 2026] [:error] [pid 9263:tid 9287] [client 20.199.113.127:63217] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeFF-xP68VyHNvj1e56vZAAAANY"]
[Fri Apr 17 04:26:35.867911 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:41061] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeFF--MHGxkTZX3c45fF8wAAAJI"]
[Fri Apr 17 04:26:36.360338 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:39839] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeFF_MhTVuRPkua22vRyWQAAABU"]
[Fri Apr 17 04:26:36.873750 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:54642] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeFF_OMHGxkTZX3c45fGAwAAAI0"]
[Fri Apr 17 04:26:37.408874 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:18810] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeFF_chTVuRPkua22vRyZgAAAAg"]
[Fri Apr 17 04:26:37.912045 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:41030] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeFF_chTVuRPkua22vRybAAAAAc"]
[Fri Apr 17 04:26:38.382941 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:55143] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeFF_pJYca8I3TNCwIfhFAAAAEg"]
[Fri Apr 17 04:26:38.888043 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:15701] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeFF_hP68VyHNvj1e56vdwAAAMY"]
[Fri Apr 17 04:26:39.406817 2026] [:error] [pid 9152:tid 9201] [client 20.199.113.127:54631] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeFF_5JYca8I3TNCwIfhHQAAAEs"]
[Fri Apr 17 04:26:39.931272 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:31912] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeFF_xP68VyHNvj1e56vgwAAAM8"]
[Fri Apr 17 04:26:40.468297 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:54604] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeFGAJJYca8I3TNCwIfhJwAAAEg"]
[Fri Apr 17 04:26:41.006934 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:63224] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeFGAeMHGxkTZX3c45fGIAAAAIk"]
[Fri Apr 17 04:26:41.518865 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:55133] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeFGARP68VyHNvj1e56vkgAAAME"]
[Fri Apr 17 04:26:42.011192 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:41083] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGAhP68VyHNvj1e56vlAAAAM0"]
[Fri Apr 17 04:26:42.510625 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:39808] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGAhP68VyHNvj1e56vmQAAAMI"]
[Fri Apr 17 04:26:43.003258 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:41066] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGAxP68VyHNvj1e56vnwAAAM4"]
[Fri Apr 17 04:26:43.521584 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:54622] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGA-MHGxkTZX3c45fGLgAAAJQ"]
[Fri Apr 17 04:26:44.056579 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:54630] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFGBBP68VyHNvj1e56vsQAAAM4"]
[Fri Apr 17 04:26:44.591571 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:39829] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFGBJJYca8I3TNCwIfhRwAAAEc"]
[Fri Apr 17 04:26:45.108181 2026] [:error] [pid 9151:tid 9175] [client 20.199.113.127:39830] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFGBchTVuRPkua22vRyiAAAAA4"]
[Fri Apr 17 04:26:45.604464 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:54625] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeFGBchTVuRPkua22vRyiwAAAAY"]
[Fri Apr 17 04:26:46.133458 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:39860] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aeFGBshTVuRPkua22vRylwAAAAo"]
[Fri Apr 17 04:26:46.638746 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:54626] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aeFGBpJYca8I3TNCwIfhUQAAAFU"]
[Fri Apr 17 04:26:47.109144 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:54644] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aeFGBxP68VyHNvj1e56vvwAAANg"]
[Fri Apr 17 04:26:47.603146 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:17678] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aeFGB-MHGxkTZX3c45fGRQAAAIY"]
[Fri Apr 17 04:26:48.133805 2026] [:error] [pid 9153:tid 9222] [client 20.199.113.127:15717] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeFGCOMHGxkTZX3c45fGTwAAAIQ"]
[Fri Apr 17 04:26:48.638132 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:15725] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeFGCBP68VyHNvj1e56vygAAAMI"]
[Fri Apr 17 04:26:49.114326 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:15708] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeFGCRP68VyHNvj1e56v0QAAANU"]
[Fri Apr 17 04:26:49.586153 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:55106] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeFGCeMHGxkTZX3c45fGWQAAAIs"]
[Fri Apr 17 04:26:50.058300 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:17720] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeFGChP68VyHNvj1e56v2gAAAMU"]
[Fri Apr 17 04:26:50.529636 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:63199] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeFGChP68VyHNvj1e56v2wAAANI"]
[Fri Apr 17 04:26:51.000351 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:41084] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeFGChP68VyHNvj1e56v4QAAAM8"]
[Fri Apr 17 04:26:51.472524 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:31935] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeFGCxP68VyHNvj1e56v7AAAANA"]
[Fri Apr 17 04:26:51.978124 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:54618] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeFGCxP68VyHNvj1e56v8QAAAMI"]
[Fri Apr 17 04:26:52.481192 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:17716] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeFGDBP68VyHNvj1e56v-AAAAMY"]
[Fri Apr 17 04:26:52.951893 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:41042] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeFGDJJYca8I3TNCwIfhZgAAAFI"]
[Fri Apr 17 04:26:53.432591 2026] [:error] [pid 9151:tid 9178] [client 20.199.113.127:39819] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeFGDchTVuRPkua22vRyxwAAABE"]
[Fri Apr 17 04:26:53.906737 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:39808] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeFGDRP68VyHNvj1e56wBAAAANI"]
[Fri Apr 17 04:26:54.378155 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:65079] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeFGDuMHGxkTZX3c45fGdQAAAJI"]
[Fri Apr 17 04:26:54.876314 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:17683] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeFGDhP68VyHNvj1e56wEQAAANM"]
[Fri Apr 17 04:26:55.401697 2026] [:error] [pid 9152:tid 9210] [client 20.199.113.127:63208] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeFGD5JYca8I3TNCwIfhdwAAAFQ"]
[Fri Apr 17 04:26:55.926328 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:17668] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeFGDxP68VyHNvj1e56wGAAAAMg"]
[Fri Apr 17 04:26:56.422720 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:54628] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeFGEOMHGxkTZX3c45fGggAAAIc"]
[Fri Apr 17 04:26:56.894199 2026] [:error] [pid 9152:tid 9202] [client 20.199.113.127:17706] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeFGEJJYca8I3TNCwIfhfgAAAEw"]
[Fri Apr 17 04:26:57.376162 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:57.856134 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:58.095740 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:58.336277 2026] [proxy_fcgi:error] [pid 9151:tid 9172] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:58.577591 2026] [proxy_fcgi:error] [pid 9151:tid 9174] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:59.310717 2026] [proxy_fcgi:error] [pid 9151:tid 9167] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:59.551671 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:26:59.790295 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 20.199.113.127:39822] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:27:01.471318 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:39822] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeFGFchTVuRPkua22vRy6AAAABA"]
[Fri Apr 17 04:27:01.943822 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:65035] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeFGFRP68VyHNvj1e56wRAAAAMk"]
[Fri Apr 17 04:27:02.453909 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:65038] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeFGFhP68VyHNvj1e56wTQAAANM"]
[Fri Apr 17 04:27:02.989695 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:17688] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeFGFhP68VyHNvj1e56wVgAAAMI"]
[Fri Apr 17 04:27:03.519865 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:63230] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeFGFxP68VyHNvj1e56wXAAAAMM"]
[Fri Apr 17 04:27:04.018114 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:41048] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeFGGJJYca8I3TNCwIfhgQAAAEI"]
[Fri Apr 17 04:27:04.500813 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:54652] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeFGGBP68VyHNvj1e56waQAAAMM"]
[Fri Apr 17 04:27:04.970531 2026] [:error] [pid 9263:tid 9287] [client 20.199.113.127:63207] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeFGGBP68VyHNvj1e56wcgAAANY"]
[Fri Apr 17 04:27:05.461861 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:54623] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeFGGchTVuRPkua22vRy6gAAAAs"]
[Fri Apr 17 04:27:05.953992 2026] [:error] [pid 9151:tid 9165] [client 20.199.113.127:41069] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeFGGchTVuRPkua22vRy7QAAAAQ"]
[Fri Apr 17 04:27:06.434769 2026] [:error] [pid 9153:tid 9237] [client 20.199.113.127:39823] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeFGGuMHGxkTZX3c45fGqAAAAJM"]
[Fri Apr 17 04:27:06.938944 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:15728] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeFGGpJYca8I3TNCwIfhigAAAE0"]
[Fri Apr 17 04:27:07.476788 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:18754] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeFGG8hTVuRPkua22vRy-QAAABM"]
[Fri Apr 17 04:27:08.013541 2026] [:error] [pid 9263:tid 9285] [client 20.199.113.127:55148] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeFGHBP68VyHNvj1e56wkAAAANQ"]
[Fri Apr 17 04:27:08.537748 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:31929] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeFGHOMHGxkTZX3c45fGsAAAAIY"]
[Fri Apr 17 04:27:09.030266 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:54608] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeFGHRP68VyHNvj1e56wogAAAMQ"]
[Fri Apr 17 04:27:09.515129 2026] [:error] [pid 9152:tid 9194] [client 20.199.113.127:31907] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGHZJYca8I3TNCwIfhkwAAAEQ"]
[Fri Apr 17 04:27:09.989158 2026] [:error] [pid 9152:tid 9190] [client 20.199.113.127:17727] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGHZJYca8I3TNCwIfhmAAAAEA"]
[Fri Apr 17 04:27:10.474687 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:31883] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGHshTVuRPkua22vRy_wAAABY"]
[Fri Apr 17 04:27:10.967524 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:63426] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGHhP68VyHNvj1e56wrwAAAM0"]
[Fri Apr 17 04:27:11.493772 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:15740] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeFGHxP68VyHNvj1e56wuAAAANg"]
[Fri Apr 17 04:27:12.006962 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:39846] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeFGIBP68VyHNvj1e56wwQAAAMw"]
[Fri Apr 17 04:27:12.477542 2026] [:error] [pid 9153:tid 9222] [client 20.199.113.127:41085] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeFGIOMHGxkTZX3c45fGxgAAAIQ"]
[Fri Apr 17 04:27:12.947888 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:15739] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeFGIBP68VyHNvj1e56wzQAAAM4"]
[Fri Apr 17 04:27:13.439743 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:39827] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeFGIRP68VyHNvj1e56w1AAAAMk"]
[Fri Apr 17 04:27:13.952557 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:30963] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeFGIeMHGxkTZX3c45fG3wAAAI0"]
[Fri Apr 17 04:27:14.478809 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:15715] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeFGIshTVuRPkua22vRzGwAAAAc"]
[Fri Apr 17 04:27:15.008436 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:65042] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeFGIxP68VyHNvj1e56w3wAAAME"]
[Fri Apr 17 04:27:15.528963 2026] [:error] [pid 9263:tid 9281] [client 20.199.113.127:39838] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeFGIxP68VyHNvj1e56w5gAAANA"]
[Fri Apr 17 04:27:16.020014 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:54609] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeFGJBP68VyHNvj1e56w7QAAAME"]
[Fri Apr 17 04:27:16.523071 2026] [:error] [pid 9152:tid 9204] [client 20.199.113.127:17675] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeFGJJJYca8I3TNCwIfhrwAAAE4"]
[Fri Apr 17 04:27:17.031097 2026] [:error] [pid 9153:tid 9225] [client 20.199.113.127:63193] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeFGJeMHGxkTZX3c45fG5wAAAIc"]
[Fri Apr 17 04:27:17.527642 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:63456] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aeFGJchTVuRPkua22vRzKgAAABg"]
[Fri Apr 17 04:27:18.056405 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:17684] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aeFGJuMHGxkTZX3c45fG-wAAAJA"]
[Fri Apr 17 04:27:18.587938 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:65076] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aeFGJhP68VyHNvj1e56xDAAAAME"]
[Fri Apr 17 04:27:19.103720 2026] [:error] [pid 9151:tid 9169] [client 20.199.113.127:65055] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aeFGJ8hTVuRPkua22vRzLQAAAAg"]
[Fri Apr 17 04:27:19.577908 2026] [:error] [pid 9151:tid 9184] [client 20.199.113.127:55141] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aeFGJ8hTVuRPkua22vRzMAAAABc"]
[Fri Apr 17 04:27:20.084454 2026] [:error] [pid 9151:tid 9164] [client 20.199.113.127:63184] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aeFGKMhTVuRPkua22vRzOQAAAAM"]
[Fri Apr 17 04:27:20.620414 2026] [:error] [pid 9151:tid 9172] [client 20.199.113.127:15721] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aeFGKMhTVuRPkua22vRzPAAAAAs"]
[Fri Apr 17 04:27:21.123271 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:15733] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aeFGKZJYca8I3TNCwIfhxQAAAFY"]
[Fri Apr 17 04:27:21.594153 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:39843] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeFGKZJYca8I3TNCwIfhxwAAAEc"]
[Fri Apr 17 04:27:22.064288 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:17696] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeFGKshTVuRPkua22vRzUgAAABI"]
[Fri Apr 17 04:27:22.570660 2026] [:error] [pid 9153:tid 9236] [client 20.199.113.127:39814] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeFGKuMHGxkTZX3c45fHGAAAAJI"]
[Fri Apr 17 04:27:23.075277 2026] [:error] [pid 9152:tid 9204] [client 20.199.113.127:63197] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aeFGK5JYca8I3TNCwIfh1gAAAE4"]
[Fri Apr 17 04:27:23.578596 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:54633] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aeFGKxP68VyHNvj1e56xNwAAANI"]
[Fri Apr 17 04:27:24.081930 2026] [:error] [pid 9151:tid 9165] [client 20.199.113.127:61450] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aeFGLMhTVuRPkua22vRzWwAAAAQ"]
[Fri Apr 17 04:27:24.551733 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:41067] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aeFGLBP68VyHNvj1e56xRgAAAMs"]
[Fri Apr 17 04:27:25.021273 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:63451] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aeFGLeMHGxkTZX3c45fHMgAAAJg"]
[Fri Apr 17 04:27:25.520681 2026] [:error] [pid 9152:tid 9192] [client 20.199.113.127:63456] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aeFGLZJYca8I3TNCwIfh6AAAAEI"]
[Fri Apr 17 04:27:26.024701 2026] [:error] [pid 9153:tid 9240] [client 20.199.113.127:17666] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aeFGLuMHGxkTZX3c45fHNwAAAJY"]
[Fri Apr 17 04:27:26.528787 2026] [:error] [pid 9151:tid 9163] [client 20.199.113.127:18978] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aeFGLshTVuRPkua22vRzZAAAAAI"]
[Fri Apr 17 04:27:27.053664 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:55154] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aeFGL8hTVuRPkua22vRzagAAABg"]
[Fri Apr 17 04:27:27.578108 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:54602] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeFGL-MHGxkTZX3c45fHQwAAAJU"]
[Fri Apr 17 04:27:28.081412 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:63220] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeFGMBP68VyHNvj1e56xYgAAANg"]
[Fri Apr 17 04:27:28.553486 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:54612] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeFGMMhTVuRPkua22vRzewAAAA8"]
[Fri Apr 17 04:27:29.025861 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:63213] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeFGMZJYca8I3TNCwIfh-AAAAFg"]
[Fri Apr 17 04:27:29.518660 2026] [:error] [pid 9153:tid 9226] [client 20.199.113.127:54617] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeFGMeMHGxkTZX3c45fHTAAAAIg"]
[Fri Apr 17 04:27:30.012935 2026] [:error] [pid 9152:tid 9195] [client 20.199.113.127:65040] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeFGMpJYca8I3TNCwIfh_AAAAEU"]
[Fri Apr 17 04:27:30.515999 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:63202] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeFGMuMHGxkTZX3c45fHUgAAAIU"]
[Fri Apr 17 04:27:31.052973 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:18761] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aeFGMxP68VyHNvj1e56xgAAAAMw"]
[Fri Apr 17 04:27:31.566069 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:65070] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFGM5JYca8I3TNCwIfh_gAAAE0"]
[Fri Apr 17 04:27:32.039889 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:61484] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFGNOMHGxkTZX3c45fHWwAAAJU"]
[Fri Apr 17 04:27:32.517654 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:30958] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFGNBP68VyHNvj1e56xkQAAAM8"]
[Fri Apr 17 04:27:32.993348 2026] [:error] [pid 9153:tid 9230] [client 20.199.113.127:41026] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aeFGNOMHGxkTZX3c45fHagAAAIw"]
[Fri Apr 17 04:27:33.496718 2026] [:error] [pid 9152:tid 9208] [client 20.199.113.127:63452] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFGNZJYca8I3TNCwIfiAQAAAFI"]
[Fri Apr 17 04:27:34.021900 2026] [:error] [pid 9152:tid 9212] [client 20.199.113.127:31875] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFGNpJYca8I3TNCwIfiBgAAAFY"]
[Fri Apr 17 04:27:34.515184 2026] [:error] [pid 9263:tid 9283] [client 20.199.113.127:15683] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFGNhP68VyHNvj1e56xoAAAANI"]
[Fri Apr 17 04:27:34.996353 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:54614] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeFGNshTVuRPkua22vRzrwAAAAY"]
[Fri Apr 17 04:27:35.468294 2026] [:error] [pid 9151:tid 9177] [client 20.199.113.127:65082] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFGN8hTVuRPkua22vRzsQAAABA"]
[Fri Apr 17 04:27:35.940154 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:54624] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFGNxP68VyHNvj1e56xsAAAAMU"]
[Fri Apr 17 04:27:36.443807 2026] [:error] [pid 9263:tid 9271] [client 20.199.113.127:41032] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFGOBP68VyHNvj1e56xtQAAAMY"]
[Fri Apr 17 04:27:36.948006 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:55139] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeFGOOMHGxkTZX3c45fHggAAAJU"]
[Fri Apr 17 04:27:37.420037 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:65032] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGOchTVuRPkua22vRztwAAABQ"]
[Fri Apr 17 04:27:37.890119 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:63463] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGOchTVuRPkua22vRzvAAAAAo"]
[Fri Apr 17 04:27:38.373874 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:15710] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGOpJYca8I3TNCwIfiHwAAAEM"]
[Fri Apr 17 04:27:38.844066 2026] [:error] [pid 9151:tid 9180] [client 20.199.113.127:63427] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeFGOshTVuRPkua22vRzxAAAABM"]
[Fri Apr 17 04:27:39.314719 2026] [:error] [pid 9153:tid 9242] [client 20.199.113.127:17686] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeFGO-MHGxkTZX3c45fHlgAAAJg"]
[Fri Apr 17 04:27:39.784846 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:15734] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeFGOxP68VyHNvj1e56x3AAAAMI"]
[Fri Apr 17 04:27:40.253959 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:55164] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeFGPBP68VyHNvj1e56x5AAAANU"]
[Fri Apr 17 04:27:40.756930 2026] [:error] [pid 9153:tid 9235] [client 20.199.113.127:63474] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeFGPOMHGxkTZX3c45fHqQAAAJE"]
[Fri Apr 17 04:27:41.292010 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:55130] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeFGPchTVuRPkua22vRzzAAAAAY"]
[Fri Apr 17 04:27:41.828210 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:41057] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeFGPchTVuRPkua22vRzzQAAAA0"]
[Fri Apr 17 04:27:42.353328 2026] [:error] [pid 9263:tid 9279] [client 20.199.113.127:31899] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeFGPhP68VyHNvj1e56x9AAAAM4"]
[Fri Apr 17 04:27:42.874893 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:39813] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeFGPuMHGxkTZX3c45fHwgAAAJc"]
[Fri Apr 17 04:27:43.371204 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:15735] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeFGPxP68VyHNvj1e56x-gAAAMw"]
[Fri Apr 17 04:27:43.868283 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:18983] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeFGPxP68VyHNvj1e56x_QAAAMI"]
[Fri Apr 17 04:27:44.365523 2026] [:error] [pid 9151:tid 9166] [client 20.199.113.127:55116] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeFGQMhTVuRPkua22vRz2QAAAAU"]
[Fri Apr 17 04:27:44.874850 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:63205] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeFGQMhTVuRPkua22vRz3QAAABg"]
[Fri Apr 17 04:27:45.378923 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:41071] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeFGQZJYca8I3TNCwIfiQQAAAE0"]
[Fri Apr 17 04:27:45.880769 2026] [:error] [pid 9151:tid 9164] [client 20.199.113.127:54639] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeFGQchTVuRPkua22vRz3wAAAAM"]
[Fri Apr 17 04:27:46.378147 2026] [:error] [pid 9152:tid 9214] [client 20.199.113.127:55116] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeFGQpJYca8I3TNCwIfiRgAAAFg"]
[Fri Apr 17 04:27:46.850060 2026] [:error] [pid 9263:tid 9276] [client 20.199.113.127:17690] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeFGQhP68VyHNvj1e56yGwAAAMs"]
[Fri Apr 17 04:27:47.353523 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:39812] [client 20.199.113.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeFGQxP68VyHNvj1e56yIwAAANg"]
[Fri Apr 17 04:27:47.917016 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:63425] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeFGQxP68VyHNvj1e56yMAAAAM8"]
[Fri Apr 17 04:27:48.418876 2026] [:error] [pid 9263:tid 9286] [client 20.199.113.127:63211] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeFGRBP68VyHNvj1e56yNwAAANU"]
[Fri Apr 17 04:27:48.923849 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:55129] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeFGROMHGxkTZX3c45fH4gAAAIY"]
[Fri Apr 17 04:27:49.427989 2026] [:error] [pid 9152:tid 9199] [client 20.199.113.127:17722] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeFGRZJYca8I3TNCwIfiUQAAAEk"]
[Fri Apr 17 04:27:49.933490 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:15720] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeFGRchTVuRPkua22vR0BAAAABI"]
[Fri Apr 17 04:27:50.436845 2026] [:error] [pid 9151:tid 9183] [client 20.199.113.127:54643] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeFGRshTVuRPkua22vR0CwAAABY"]
[Fri Apr 17 04:27:50.943719 2026] [:error] [pid 9151:tid 9173] [client 20.199.113.127:63458] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeFGRshTVuRPkua22vR0DwAAAAw"]
[Fri Apr 17 04:27:51.478624 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:63221] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFGR-MHGxkTZX3c45fH7gAAAII"]
[Fri Apr 17 04:27:51.983763 2026] [:error] [pid 9152:tid 9207] [client 20.199.113.127:15707] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFGR5JYca8I3TNCwIfiYAAAAFE"]
[Fri Apr 17 04:27:52.457268 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:30953] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFGSBP68VyHNvj1e56yVwAAAM0"]
[Fri Apr 17 04:27:52.969250 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:63221] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeFGSBP68VyHNvj1e56yXgAAANc"]
[Fri Apr 17 04:27:53.504524 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:39864] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFGSchTVuRPkua22vR0IQAAABQ"]
[Fri Apr 17 04:27:54.043167 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:19007] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFGSshTVuRPkua22vR0JgAAAA0"]
[Fri Apr 17 04:27:54.568358 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:30957] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFGShP68VyHNvj1e56yZQAAAMI"]
[Fri Apr 17 04:27:55.058873 2026] [:error] [pid 9263:tid 9288] [client 20.199.113.127:63428] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeFGSxP68VyHNvj1e56yaQAAANc"]
[Fri Apr 17 04:27:55.561218 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:31892] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeFGSxP68VyHNvj1e56ydQAAAMQ"]
[Fri Apr 17 04:27:56.103723 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:65063] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeFGTBP68VyHNvj1e56yfgAAAM0"]
[Fri Apr 17 04:27:56.626838 2026] [:error] [pid 9153:tid 9229] [client 20.199.113.127:31901] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeFGTOMHGxkTZX3c45fIGQAAAIs"]
[Fri Apr 17 04:27:57.151607 2026] [:error] [pid 9153:tid 9223] [client 20.199.113.127:31931] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeFGTeMHGxkTZX3c45fIHQAAAIU"]
[Fri Apr 17 04:27:57.689309 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:30924] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeFGTRP68VyHNvj1e56yigAAAMQ"]
[Fri Apr 17 04:27:58.224927 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:41078] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeFGTuMHGxkTZX3c45fIIgAAAJA"]
[Fri Apr 17 04:27:58.738549 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:65071] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeFGThP68VyHNvj1e56ylgAAAM0"]
[Fri Apr 17 04:27:59.240985 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:27:59.479883 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:27:59.719198 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:27:59.965896 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:00.207992 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:00.447845 2026] [proxy_fcgi:error] [pid 9263:tid 9271] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:00.691696 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:01.170463 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:01.409911 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:01.649487 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.199.113.127:54606] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 04:28:01.885369 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:54606] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeFGURP68VyHNvj1e56yqwAAAMA"]
[Fri Apr 17 04:28:02.382048 2026] [:error] [pid 9153:tid 9219] [client 20.199.113.127:17673] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeFGUuMHGxkTZX3c45fIOAAAAIE"]
[Fri Apr 17 04:28:02.878915 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:41079] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeFGUshTVuRPkua22vR0UgAAAA0"]
[Fri Apr 17 04:28:03.349119 2026] [:error] [pid 9263:tid 9268] [client 20.199.113.127:63431] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeFGUxP68VyHNvj1e56ysQAAAMM"]
[Fri Apr 17 04:28:03.841899 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:17691] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aeFGU-MHGxkTZX3c45fIQAAAAI0"]
[Fri Apr 17 04:28:04.333220 2026] [:error] [pid 9263:tid 9289] [client 20.199.113.127:17698] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aeFGVBP68VyHNvj1e56ytQAAANg"]
[Fri Apr 17 04:28:04.811018 2026] [:error] [pid 9263:tid 9282] [client 20.199.113.127:41062] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aeFGVBP68VyHNvj1e56yuQAAANE"]
[Fri Apr 17 04:28:05.314427 2026] [:error] [pid 9153:tid 9241] [client 20.199.113.127:31873] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aeFGVeMHGxkTZX3c45fITgAAAJc"]
[Fri Apr 17 04:28:05.817651 2026] [:error] [pid 9152:tid 9190] [client 20.199.113.127:31927] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aeFGVZJYca8I3TNCwIfimgAAAEA"]
[Fri Apr 17 04:28:06.320610 2026] [:error] [pid 9153:tid 9218] [client 20.199.113.127:31913] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aeFGVuMHGxkTZX3c45fIWwAAAIA"]
[Fri Apr 17 04:28:06.824008 2026] [:error] [pid 9263:tid 9269] [client 20.199.113.127:39862] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aeFGVhP68VyHNvj1e56yzAAAAMQ"]
[Fri Apr 17 04:28:07.317315 2026] [:error] [pid 9263:tid 9274] [client 20.199.113.127:63445] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aeFGVxP68VyHNvj1e56y1gAAAMk"]
[Fri Apr 17 04:28:07.810606 2026] [:error] [pid 9263:tid 9280] [client 20.199.113.127:63174] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGVxP68VyHNvj1e56y3wAAAM8"]
[Fri Apr 17 04:28:08.282602 2026] [:error] [pid 9152:tid 9211] [client 20.199.113.127:31926] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGWJJYca8I3TNCwIfiowAAAFU"]
[Fri Apr 17 04:28:08.754078 2026] [:error] [pid 9151:tid 9176] [client 20.199.113.127:63226] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGWMhTVuRPkua22vR0bQAAAA8"]
[Fri Apr 17 04:28:09.251061 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:41028] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeFGWeMHGxkTZX3c45fIZgAAAJA"]
[Fri Apr 17 04:28:09.780895 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:31893] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aeFGWZJYca8I3TNCwIfipwAAAEM"]
[Fri Apr 17 04:28:10.305338 2026] [:error] [pid 9152:tid 9206] [client 20.199.113.127:63190] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aeFGWpJYca8I3TNCwIfiqwAAAFA"]
[Fri Apr 17 04:28:10.828857 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:65084] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aeFGWshTVuRPkua22vR0hgAAABU"]
[Fri Apr 17 04:28:11.331062 2026] [:error] [pid 9153:tid 9231] [client 20.199.113.127:63187] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aeFGW-MHGxkTZX3c45fIbAAAAI0"]
[Fri Apr 17 04:28:11.802534 2026] [:error] [pid 9153:tid 9227] [client 20.199.113.127:65027] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeFGW-MHGxkTZX3c45fIbgAAAIk"]
[Fri Apr 17 04:28:12.309015 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:17669] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeFGXMhTVuRPkua22vR0lAAAAAc"]
[Fri Apr 17 04:28:12.833825 2026] [:error] [pid 9263:tid 9277] [client 20.199.113.127:17710] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeFGXBP68VyHNvj1e56y-QAAAMw"]
[Fri Apr 17 04:28:13.359435 2026] [:error] [pid 9151:tid 9185] [client 20.199.113.127:65045] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeFGXchTVuRPkua22vR0nQAAABg"]
[Fri Apr 17 04:28:13.863533 2026] [:error] [pid 9263:tid 9284] [client 20.199.113.127:54653] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeFGXRP68VyHNvj1e56y_wAAANM"]
[Fri Apr 17 04:28:14.367543 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:63169] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeFGXpJYca8I3TNCwIfiuwAAAEM"]
[Fri Apr 17 04:28:14.870805 2026] [:error] [pid 9263:tid 9278] [client 20.199.113.127:17665] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeFGXhP68VyHNvj1e56zCwAAAM0"]
[Fri Apr 17 04:28:15.375100 2026] [:error] [pid 9152:tid 9203] [client 20.199.113.127:63448] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeFGX5JYca8I3TNCwIfivQAAAE0"]
[Fri Apr 17 04:28:15.879140 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:65044] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeFGX-MHGxkTZX3c45fIdQAAAI4"]
[Fri Apr 17 04:28:16.350142 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:63215] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeFGYJJYca8I3TNCwIfixAAAAEg"]
[Fri Apr 17 04:28:16.852348 2026] [:error] [pid 9153:tid 9238] [client 20.199.113.127:63439] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeFGYOMHGxkTZX3c45fIegAAAJQ"]
[Fri Apr 17 04:28:17.354727 2026] [:error] [pid 9153:tid 9228] [client 20.199.113.127:31895] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeFGYeMHGxkTZX3c45fIfwAAAIo"]
[Fri Apr 17 04:28:17.851248 2026] [:error] [pid 9152:tid 9191] [client 20.199.113.127:41027] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeFGYZJYca8I3TNCwIfi1QAAAEE"]
[Fri Apr 17 04:28:18.369487 2026] [:error] [pid 9263:tid 9275] [client 20.199.113.127:31886] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeFGYhP68VyHNvj1e56zEQAAAMo"]
[Fri Apr 17 04:28:18.861189 2026] [:error] [pid 9151:tid 9162] [client 20.199.113.127:18965] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeFGYshTVuRPkua22vR0uwAAAAE"]
[Fri Apr 17 04:28:19.348124 2026] [:error] [pid 9153:tid 9224] [client 20.199.113.127:63171] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeFGY-MHGxkTZX3c45fIjgAAAIY"]
[Fri Apr 17 04:28:19.819407 2026] [:error] [pid 9153:tid 9239] [client 20.199.113.127:30946] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeFGY-MHGxkTZX3c45fIkQAAAJU"]
[Fri Apr 17 04:28:20.290115 2026] [:error] [pid 9263:tid 9265] [client 20.199.113.127:61800] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeFGZBP68VyHNvj1e56zHAAAAMA"]
[Fri Apr 17 04:28:20.765063 2026] [:error] [pid 9151:tid 9174] [client 20.199.113.127:17726] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeFGZMhTVuRPkua22vR0xAAAAA0"]
[Fri Apr 17 04:28:21.236515 2026] [:error] [pid 9151:tid 9161] [client 20.199.113.127:55124] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeFGZchTVuRPkua22vR0yQAAAAA"]
[Fri Apr 17 04:28:21.735028 2026] [:error] [pid 9153:tid 9220] [client 20.199.113.127:63477] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeFGZeMHGxkTZX3c45fIoAAAAII"]
[Fri Apr 17 04:28:22.265145 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:30936] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeFGZpJYca8I3TNCwIfi5AAAAEM"]
[Fri Apr 17 04:28:22.769839 2026] [:error] [pid 9153:tid 9233] [client 20.199.113.127:61488] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeFGZuMHGxkTZX3c45fIpgAAAI8"]
[Fri Apr 17 04:28:23.251729 2026] [:error] [pid 9151:tid 9170] [client 20.199.113.127:65058] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeFGZ8hTVuRPkua22vR01AAAAAk"]
[Fri Apr 17 04:28:23.735637 2026] [:error] [pid 9151:tid 9181] [client 20.199.113.127:18768] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeFGZ8hTVuRPkua22vR01QAAABQ"]
[Fri Apr 17 04:28:24.207090 2026] [:error] [pid 9151:tid 9168] [client 20.199.113.127:31934] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeFGaMhTVuRPkua22vR02AAAAAc"]
[Fri Apr 17 04:28:24.710475 2026] [:error] [pid 9152:tid 9197] [client 20.199.113.127:63461] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeFGaJJYca8I3TNCwIfi8gAAAEc"]
[Fri Apr 17 04:28:25.213319 2026] [:error] [pid 9151:tid 9165] [client 20.199.113.127:15737] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeFGachTVuRPkua22vR03gAAAAQ"]
[Fri Apr 17 04:28:25.684912 2026] [:error] [pid 9151:tid 9167] [client 20.199.113.127:39833] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aeFGachTVuRPkua22vR03wAAAAY"]
[Fri Apr 17 04:28:26.156186 2026] [:error] [pid 9153:tid 9232] [client 20.199.113.127:15712] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aeFGauMHGxkTZX3c45fIuQAAAI4"]
[Fri Apr 17 04:28:26.640604 2026] [:error] [pid 9153:tid 9234] [client 20.199.113.127:39832] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aeFGauMHGxkTZX3c45fIwgAAAJA"]
[Fri Apr 17 04:28:27.110483 2026] [:error] [pid 9152:tid 9198] [client 20.199.113.127:18809] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aeFGa5JYca8I3TNCwIfjAwAAAEg"]
[Fri Apr 17 04:28:27.579911 2026] [:error] [pid 9151:tid 9182] [client 20.199.113.127:55160] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeFGa8hTVuRPkua22vR04wAAABU"]
[Fri Apr 17 04:28:28.082227 2026] [:error] [pid 9151:tid 9171] [client 20.199.113.127:61495] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeFGbMhTVuRPkua22vR05gAAAAo"]
[Fri Apr 17 04:28:28.618858 2026] [:error] [pid 9151:tid 9179] [client 20.199.113.127:18757] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeFGbMhTVuRPkua22vR06QAAABI"]
[Fri Apr 17 04:28:29.142689 2026] [:error] [pid 9152:tid 9193] [client 20.199.113.127:61764] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeFGbZJYca8I3TNCwIfjDgAAAEM"]
[Fri Apr 17 04:28:29.633718 2026] [:error] [pid 9263:tid 9266] [client 20.199.113.127:41034] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeFGbRP68VyHNvj1e56zVgAAAME"]
[Fri Apr 17 04:28:30.104795 2026] [:error] [pid 9263:tid 9273] [client 20.199.113.127:39831] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeFGbhP68VyHNvj1e56zXAAAAMg"]
[Fri Apr 17 04:28:30.581741 2026] [:error] [pid 9263:tid 9270] [client 20.199.113.127:54931] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeFGbhP68VyHNvj1e56zYwAAAMU"]
[Fri Apr 17 04:28:31.055636 2026] [:error] [pid 9263:tid 9267] [client 20.199.113.127:65059] [client 20.199.113.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeFGbxP68VyHNvj1e56zaAAAAMI"]
[Fri Apr 17 04:46:40.583876 2026] [:error] [pid 51878:tid 51889] [client 162.62.213.187:56592] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeFKsEnQhUtMbw9EsgYsjwAAAQk"]
[Fri Apr 17 05:17:11.300199 2026] [:error] [pid 9263:tid 9286] [client 34.168.100.28:44550] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "aeFR1xP68VyHNvj1e57nzgAAANU"]
[Fri Apr 17 06:07:50.104558 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:50.380006 2026] [proxy_fcgi:error] [pid 51878:tid 51900] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:50.653552 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:50.924223 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:51.196067 2026] [proxy_fcgi:error] [pid 51878:tid 51898] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:51.478079 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:51.748066 2026] [proxy_fcgi:error] [pid 51878:tid 51893] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:52.026715 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:52.297208 2026] [proxy_fcgi:error] [pid 51878:tid 51895] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:52.568371 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 4.210.69.81:33423] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 06:07:52.835093 2026] [:error] [pid 51878:tid 51900] [client 4.210.69.81:33423] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aeFduEnQhUtMbw9EsgZ-dAAAARQ"]
[Fri Apr 17 06:07:53.378330 2026] [:error] [pid 51878:tid 51892] [client 4.210.69.81:40260] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aeFduUnQhUtMbw9EsgZ-eAAAAQw"]
[Fri Apr 17 06:07:53.937671 2026] [:error] [pid 51878:tid 51880] [client 4.210.69.81:43978] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aeFduUnQhUtMbw9EsgZ-egAAAQA"]
[Fri Apr 17 06:07:54.473231 2026] [:error] [pid 9263:tid 9286] [client 4.210.69.81:6327] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aeFduhP68VyHNvj1e54HqwAAANU"]
[Fri Apr 17 06:07:54.985409 2026] [:error] [pid 51878:tid 51900] [client 4.210.69.81:6808] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/block-template-utils.php"] [unique_id "aeFduknQhUtMbw9EsgZ-gAAAARQ"]
[Fri Apr 17 06:07:55.508526 2026] [:error] [pid 9153:tid 9223] [client 4.210.69.81:6765] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/block-template-utils.php"] [unique_id "aeFdu-MHGxkTZX3c45cKRwAAAIU"]
[Fri Apr 17 06:07:56.047352 2026] [:error] [pid 51878:tid 51896] [client 4.210.69.81:32789] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/block-template-utils.php"] [unique_id "aeFdvEnQhUtMbw9EsgZ-iAAAARA"]
[Fri Apr 17 06:07:56.603459 2026] [:error] [pid 9153:tid 9236] [client 4.210.69.81:6810] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/block-template-utils.php"] [unique_id "aeFdvOMHGxkTZX3c45cKSwAAAJI"]
[Fri Apr 17 06:07:57.176009 2026] [:error] [pid 9263:tid 9271] [client 4.210.69.81:6811] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/14.php"] [unique_id "aeFdvRP68VyHNvj1e54HsQAAAMY"]
[Fri Apr 17 06:07:57.711878 2026] [:error] [pid 9263:tid 9277] [client 4.210.69.81:37396] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/14.php"] [unique_id "aeFdvRP68VyHNvj1e54HtAAAAMw"]
[Fri Apr 17 06:07:58.276513 2026] [:error] [pid 9263:tid 9266] [client 4.210.69.81:55893] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/14.php"] [unique_id "aeFdvhP68VyHNvj1e54HuQAAAME"]
[Fri Apr 17 06:07:58.825179 2026] [:error] [pid 9153:tid 9237] [client 4.210.69.81:40263] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/14.php"] [unique_id "aeFdvuMHGxkTZX3c45cKUAAAAJM"]
[Fri Apr 17 06:07:59.345111 2026] [:error] [pid 51878:tid 51894] [client 4.210.69.81:46058] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update_with_pics.php"] [unique_id "aeFdv0nQhUtMbw9EsgZ-kQAAAQ4"]
[Fri Apr 17 06:07:59.861912 2026] [:error] [pid 51878:tid 51901] [client 4.210.69.81:6751] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update_with_pics.php"] [unique_id "aeFdv0nQhUtMbw9EsgZ-lgAAARU"]
[Fri Apr 17 06:08:00.415483 2026] [:error] [pid 9263:tid 9284] [client 4.210.69.81:6725] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update_with_pics.php"] [unique_id "aeFdwBP68VyHNvj1e54HvgAAANM"]
[Fri Apr 17 06:08:00.935418 2026] [:error] [pid 9263:tid 9285] [client 4.210.69.81:38869] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update_with_pics.php"] [unique_id "aeFdwBP68VyHNvj1e54HvwAAANQ"]
[Fri Apr 17 06:08:01.452031 2026] [:error] [pid 51878:tid 51889] [client 4.210.69.81:39351] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/date-object.php"] [unique_id "aeFdwUnQhUtMbw9EsgZ-oAAAAQk"]
[Fri Apr 17 06:08:01.966853 2026] [:error] [pid 9263:tid 9278] [client 4.210.69.81:6739] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/date-object.php"] [unique_id "aeFdwRP68VyHNvj1e54HwgAAAM0"]
[Fri Apr 17 06:08:02.502585 2026] [:error] [pid 51878:tid 51894] [client 4.210.69.81:42618] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/date-object.php"] [unique_id "aeFdwknQhUtMbw9EsgZ-pgAAAQ4"]
[Fri Apr 17 06:08:03.043686 2026] [:error] [pid 51878:tid 51895] [client 4.210.69.81:39347] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/date-object.php"] [unique_id "aeFdw0nQhUtMbw9EsgZ-qAAAAQ8"]
[Fri Apr 17 06:08:03.577070 2026] [:error] [pid 51878:tid 51886] [client 4.210.69.81:6318] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aeFdw0nQhUtMbw9EsgZ-rAAAAQY"]
[Fri Apr 17 06:08:04.118626 2026] [:error] [pid 51878:tid 51892] [client 4.210.69.81:11247] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aeFdxEnQhUtMbw9EsgZ-sgAAAQw"]
[Fri Apr 17 06:08:04.688258 2026] [:error] [pid 9153:tid 9237] [client 4.210.69.81:42588] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aeFdxOMHGxkTZX3c45cKWwAAAJM"]
[Fri Apr 17 06:08:05.207556 2026] [:error] [pid 9153:tid 9221] [client 4.210.69.81:46874] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w-1.php"] [unique_id "aeFdxeMHGxkTZX3c45cKXgAAAIM"]
[Fri Apr 17 06:08:05.741483 2026] [:error] [pid 51878:tid 51901] [client 4.210.69.81:34906] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aeFdxUnQhUtMbw9EsgZ-tgAAARU"]
[Fri Apr 17 06:08:06.278761 2026] [:error] [pid 9263:tid 9279] [client 4.210.69.81:6326] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aeFdxhP68VyHNvj1e54HzQAAAM4"]
[Fri Apr 17 06:08:06.797815 2026] [:error] [pid 9263:tid 9272] [client 4.210.69.81:34897] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aeFdxhP68VyHNvj1e54H0QAAAMc"]
[Fri Apr 17 06:08:07.348739 2026] [:error] [pid 9151:tid 9166] [client 4.210.69.81:39309] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwso.php"] [unique_id "aeFdx8hTVuRPkua22vSjJQAAAAU"]
[Fri Apr 17 06:08:07.884731 2026] [:error] [pid 9153:tid 9242] [client 4.210.69.81:51264] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbh.php"] [unique_id "aeFdx-MHGxkTZX3c45cKaQAAAJg"]
[Fri Apr 17 06:08:08.418592 2026] [:error] [pid 9263:tid 9266] [client 4.210.69.81:6639] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbh.php"] [unique_id "aeFdyBP68VyHNvj1e54H1gAAAME"]
[Fri Apr 17 06:08:08.952308 2026] [:error] [pid 51878:tid 51885] [client 4.210.69.81:33438] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbh.php"] [unique_id "aeFdyEnQhUtMbw9EsgZ-vgAAAQU"]
[Fri Apr 17 06:08:09.491790 2026] [:error] [pid 9263:tid 9278] [client 4.210.69.81:11254] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbh.php"] [unique_id "aeFdyRP68VyHNvj1e54H2QAAAM0"]
[Fri Apr 17 06:08:10.011744 2026] [:error] [pid 9153:tid 9229] [client 4.210.69.81:51295] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aeFdyuMHGxkTZX3c45cKcwAAAIs"]
[Fri Apr 17 06:08:10.511438 2026] [:error] [pid 51878:tid 51888] [client 4.210.69.81:51326] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aeFdyknQhUtMbw9EsgZ-ygAAAQg"]
[Fri Apr 17 06:08:11.011295 2026] [:error] [pid 9152:tid 9196] [client 4.210.69.81:33105] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aeFdy5JYca8I3TNCwIcX-QAAAEY"]
[Fri Apr 17 06:08:11.552503 2026] [:error] [pid 9263:tid 9277] [client 4.210.69.81:46572] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gool.php"] [unique_id "aeFdyxP68VyHNvj1e54H3gAAAMw"]
[Fri Apr 17 06:08:12.055346 2026] [:error] [pid 9153:tid 9240] [client 4.210.69.81:33091] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFdzOMHGxkTZX3c45cKegAAAJY"]
[Fri Apr 17 06:08:12.602838 2026] [:error] [pid 9263:tid 9275] [client 4.210.69.81:51293] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFdzBP68VyHNvj1e54H5AAAAMo"]
[Fri Apr 17 06:08:13.105964 2026] [:error] [pid 9151:tid 9175] [client 4.210.69.81:42585] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFdzchTVuRPkua22vSjOAAAAA4"]
[Fri Apr 17 06:08:13.607623 2026] [:error] [pid 9153:tid 9225] [client 4.210.69.81:51301] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeFdzeMHGxkTZX3c45cKgwAAAIc"]
[Fri Apr 17 06:08:14.160931 2026] [:error] [pid 9153:tid 9232] [client 4.210.69.81:6635] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iiiihjwn.php"] [unique_id "aeFdzuMHGxkTZX3c45cKhgAAAI4"]
[Fri Apr 17 06:08:14.728887 2026] [:error] [pid 9153:tid 9224] [client 4.210.69.81:46869] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iiiihjwn.php"] [unique_id "aeFdzuMHGxkTZX3c45cKjQAAAIY"]
[Fri Apr 17 06:08:15.282379 2026] [:error] [pid 9153:tid 9230] [client 4.210.69.81:6958] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iiiihjwn.php"] [unique_id "aeFdz-MHGxkTZX3c45cKkQAAAIw"]
[Fri Apr 17 06:08:15.831536 2026] [:error] [pid 9151:tid 9166] [client 4.210.69.81:46028] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iiiihjwn.php"] [unique_id "aeFdz8hTVuRPkua22vSjRAAAAAU"]
[Fri Apr 17 06:08:16.332103 2026] [:error] [pid 51878:tid 51887] [client 4.210.69.81:51319] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFd0EnQhUtMbw9EsgZ-0QAAAQc"]
[Fri Apr 17 06:08:16.840017 2026] [:error] [pid 51878:tid 51885] [client 4.210.69.81:6600] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFd0EnQhUtMbw9EsgZ-0wAAAQU"]
[Fri Apr 17 06:08:17.362208 2026] [:error] [pid 9152:tid 9199] [client 4.210.69.81:44827] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFd0ZJYca8I3TNCwIcYCQAAAEk"]
[Fri Apr 17 06:08:17.918297 2026] [:error] [pid 9151:tid 9167] [client 4.210.69.81:6975] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeFd0chTVuRPkua22vSjSwAAAAY"]
[Fri Apr 17 06:08:18.461581 2026] [:error] [pid 51878:tid 51904] [client 4.210.69.81:33108] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpputty.php"] [unique_id "aeFd0knQhUtMbw9EsgZ-2gAAARg"]
[Fri Apr 17 06:08:18.978330 2026] [:error] [pid 51878:tid 51895] [client 4.210.69.81:34440] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpputty.php"] [unique_id "aeFd0knQhUtMbw9EsgZ-3AAAAQ8"]
[Fri Apr 17 06:08:19.525072 2026] [:error] [pid 9152:tid 9195] [client 4.210.69.81:34468] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpputty.php"] [unique_id "aeFd05JYca8I3TNCwIcYDAAAAEU"]
[Fri Apr 17 06:08:20.066184 2026] [:error] [pid 9151:tid 9178] [client 4.210.69.81:33090] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpputty.php"] [unique_id "aeFd1MhTVuRPkua22vSjUAAAABE"]
[Fri Apr 17 06:08:20.583334 2026] [:error] [pid 51878:tid 51896] [client 4.210.69.81:39323] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dodo.php"] [unique_id "aeFd1EnQhUtMbw9EsgZ-6QAAARA"]
[Fri Apr 17 06:08:21.153487 2026] [:error] [pid 51878:tid 51904] [client 4.210.69.81:56014] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dodo.php"] [unique_id "aeFd1UnQhUtMbw9EsgZ-7QAAARg"]
[Fri Apr 17 06:08:21.687211 2026] [:error] [pid 51878:tid 51880] [client 4.210.69.81:38859] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dodo.php"] [unique_id "aeFd1UnQhUtMbw9EsgZ-9AAAAQA"]
[Fri Apr 17 06:08:22.221555 2026] [:error] [pid 51878:tid 51903] [client 4.210.69.81:45643] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dodo.php"] [unique_id "aeFd1knQhUtMbw9EsgZ--gAAARc"]
[Fri Apr 17 06:08:22.742959 2026] [:error] [pid 51878:tid 51886] [client 4.210.69.81:46886] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-post-data.php"] [unique_id "aeFd1knQhUtMbw9EsgZ-_wAAAQY"]
[Fri Apr 17 06:08:23.267908 2026] [:error] [pid 9151:tid 9166] [client 4.210.69.81:38130] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-post-data.php"] [unique_id "aeFd18hTVuRPkua22vSjVQAAAAU"]
[Fri Apr 17 06:08:23.835858 2026] [:error] [pid 9153:tid 9230] [client 4.210.69.81:46879] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-post-data.php"] [unique_id "aeFd1-MHGxkTZX3c45cKxgAAAIw"]
[Fri Apr 17 06:08:24.374108 2026] [:error] [pid 9153:tid 9239] [client 4.210.69.81:38470] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-post-data.php"] [unique_id "aeFd2OMHGxkTZX3c45cKywAAAJU"]
[Fri Apr 17 06:08:24.951563 2026] [:error] [pid 9263:tid 9275] [client 4.210.69.81:46905] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFd2BP68VyHNvj1e54H_QAAAMo"]
[Fri Apr 17 06:08:25.521018 2026] [:error] [pid 9151:tid 9178] [client 4.210.69.81:30807] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFd2chTVuRPkua22vSjWwAAABE"]
[Fri Apr 17 06:08:26.053821 2026] [:error] [pid 9153:tid 9221] [client 4.210.69.81:38084] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFd2uMHGxkTZX3c45cK1AAAAIM"]
[Fri Apr 17 06:08:26.597357 2026] [:error] [pid 9151:tid 9183] [client 4.210.69.81:34866] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeFd2shTVuRPkua22vSjYAAAABY"]
[Fri Apr 17 06:08:27.113916 2026] [:error] [pid 51878:tid 51899] [client 4.210.69.81:45658] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Marvins.php"] [unique_id "aeFd20nQhUtMbw9EsgZ_BgAAARM"]
[Fri Apr 17 06:08:27.665938 2026] [:error] [pid 9151:tid 9162] [client 4.210.69.81:38469] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Marvins.php"] [unique_id "aeFd28hTVuRPkua22vSjYwAAAAE"]
[Fri Apr 17 06:08:28.237383 2026] [:error] [pid 9152:tid 9195] [client 4.210.69.81:45650] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Marvins.php"] [unique_id "aeFd3JJYca8I3TNCwIcYGwAAAEU"]
[Fri Apr 17 06:08:28.754426 2026] [:error] [pid 9151:tid 9170] [client 4.210.69.81:46873] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Marvins.php"] [unique_id "aeFd3MhTVuRPkua22vSjZwAAAAk"]
[Fri Apr 17 06:08:29.313888 2026] [:error] [pid 9152:tid 9191] [client 4.210.69.81:38520] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/astab.php"] [unique_id "aeFd3ZJYca8I3TNCwIcYIwAAAEE"]
[Fri Apr 17 06:08:29.886595 2026] [:error] [pid 9152:tid 9211] [client 4.210.69.81:30840] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/astab.php"] [unique_id "aeFd3ZJYca8I3TNCwIcYJgAAAFU"]
[Fri Apr 17 06:08:30.419301 2026] [:error] [pid 9151:tid 9163] [client 4.210.69.81:47654] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/astab.php"] [unique_id "aeFd3shTVuRPkua22vSjbgAAAAI"]
[Fri Apr 17 06:08:30.962911 2026] [:error] [pid 9153:tid 9218] [client 4.210.69.81:52866] [client 4.210.69.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/astab.php"] [unique_id "aeFd3uMHGxkTZX3c45cK2wAAAIA"]
[Fri Apr 17 09:42:42.709809 2026] [:error] [pid 34273:tid 34293] [client 43.159.128.247:37622] [client 43.159.128.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeGQEmuQDW686mK3dgF18AAAAZI"]
[Fri Apr 17 11:08:26.067540 2026] [:error] [pid 9151:tid 9181] [client 43.135.142.37:59822] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeGkKshTVuRPkua22vT8pgAAABQ"]
[Fri Apr 17 15:11:48.671101 2026] [autoindex:error] [pid 9263:tid 9265] [client 85.137.49.10:3688] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Fri Apr 17 16:01:25.796406 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:26.045671 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:26.292453 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:26.554081 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:26.823034 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:27.074977 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:27.339949 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:27.579040 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:27.838127 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:28.106582 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.250.30.167:61714] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:01:28.343675 2026] [:error] [pid 9263:tid 9273] [client 20.250.30.167:61714] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeHo2BP68VyHNvj1e57LegAAAMg"]
[Fri Apr 17 16:01:55.078044 2026] [:error] [pid 9152:tid 9191] [client 20.250.30.167:9998] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "aeHo85JYca8I3TNCwIcT3wAAAEE"]
[Fri Apr 17 16:01:58.674797 2026] [:error] [pid 9152:tid 9194] [client 20.250.30.167:9732] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "aeHo9pJYca8I3TNCwIcT5gAAAEQ"]
[Fri Apr 17 16:02:24.863307 2026] [:error] [pid 9263:tid 9282] [client 20.250.30.167:65228] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeHpEBP68VyHNvj1e57MPgAAANE"]
[Fri Apr 17 16:02:27.018889 2026] [:error] [pid 9153:tid 9228] [client 20.250.30.167:59268] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "aeHpE-MHGxkTZX3c45fbGwAAAIo"]
[Fri Apr 17 16:02:29.588413 2026] [proxy_fcgi:error] [pid 61523:tid 61564] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:29.833814 2026] [proxy_fcgi:error] [pid 61523:tid 61558] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:30.084768 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:30.330035 2026] [proxy_fcgi:error] [pid 61523:tid 61543] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:30.569913 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:30.808898 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:31.047396 2026] [proxy_fcgi:error] [pid 61523:tid 61553] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:31.285810 2026] [proxy_fcgi:error] [pid 61523:tid 61551] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:31.525155 2026] [proxy_fcgi:error] [pid 61523:tid 61555] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:31.799789 2026] [proxy_fcgi:error] [pid 61523:tid 61548] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:32.038685 2026] [proxy_fcgi:error] [pid 61523:tid 61565] [client 20.250.30.167:60458] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:02:32.273608 2026] [:error] [pid 61523:tid 61563] [client 20.250.30.167:60458] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "aeHpGMOaH-Pgc7WEf4NjlgAAAdU"]
[Fri Apr 17 16:02:33.553095 2026] [:error] [pid 34273:tid 34298] [client 20.250.30.167:59272] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "aeHpGWuQDW686mK3dgHRKQAAAZc"]
[Fri Apr 17 16:02:35.531993 2026] [:error] [pid 34273:tid 34296] [client 20.250.30.167:51417] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "aeHpG2uQDW686mK3dgHRLwAAAZU"]
[Fri Apr 17 16:02:37.127863 2026] [:error] [pid 25010:tid 25032] [client 20.250.30.167:65248] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2nzyHnOkEg.php"] [unique_id "aeHpHY-7kkf42RarqQ1PbQAAAVM"]
[Fri Apr 17 16:02:38.456563 2026] [:error] [pid 51878:tid 51903] [client 20.250.30.167:51454] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "aeHpHknQhUtMbw9EsgYusAAAARc"]
[Fri Apr 17 16:02:39.646011 2026] [:error] [pid 61523:tid 61544] [client 20.250.30.167:59327] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "aeHpH8OaH-Pgc7WEf4NjpgAAAcI"]
[Fri Apr 17 16:02:41.032631 2026] [:error] [pid 9263:tid 9279] [client 20.250.30.167:51467] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "aeHpIRP68VyHNvj1e57MRwAAAM4"]
[Fri Apr 17 16:02:42.616078 2026] [:error] [pid 34273:tid 34292] [client 20.250.30.167:58347] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oircv.php"] [unique_id "aeHpImuQDW686mK3dgHRNgAAAZE"]
[Fri Apr 17 16:02:44.684371 2026] [:error] [pid 61523:tid 61559] [client 20.250.30.167:60464] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "aeHpJMOaH-Pgc7WEf4NjrQAAAdE"]
[Fri Apr 17 16:02:47.763372 2026] [:error] [pid 61523:tid 61543] [client 20.250.30.167:51400] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "aeHpJ8OaH-Pgc7WEf4NjsgAAAcE"]
[Fri Apr 17 16:02:48.793607 2026] [:error] [pid 9152:tid 9205] [client 20.250.30.167:59306] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "aeHpKJJYca8I3TNCwIcUBQAAAE8"]
[Fri Apr 17 16:02:49.827934 2026] [:error] [pid 9153:tid 9241] [client 20.250.30.167:51410] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blnux.php"] [unique_id "aeHpKeMHGxkTZX3c45fbJwAAAJc"]
[Fri Apr 17 16:02:50.898282 2026] [:error] [pid 9151:tid 9176] [client 20.250.30.167:58359] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeHpKshTVuRPkua22vQdAwAAAA8"]
[Fri Apr 17 16:02:51.738369 2026] [:error] [pid 9263:tid 9281] [client 20.250.30.167:58319] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeHpKxP68VyHNvj1e57MSQAAANA"]
[Fri Apr 17 16:02:52.760805 2026] [:error] [pid 61523:tid 61556] [client 20.250.30.167:58354] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeHpLMOaH-Pgc7WEf4NjvAAAAc4"]
[Fri Apr 17 16:02:54.704987 2026] [:error] [pid 9263:tid 9284] [client 20.250.30.167:59922] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeHpLhP68VyHNvj1e57MUAAAANM"]
[Fri Apr 17 16:02:56.212324 2026] [:error] [pid 9263:tid 9286] [client 20.250.30.167:65259] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "aeHpMBP68VyHNvj1e57MUQAAANU"]
[Fri Apr 17 16:02:57.259813 2026] [:error] [pid 9263:tid 9275] [client 20.250.30.167:60453] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "aeHpMRP68VyHNvj1e57MUgAAAMo"]
[Fri Apr 17 16:02:58.543815 2026] [:error] [pid 9152:tid 9204] [client 20.250.30.167:51446] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "aeHpMpJYca8I3TNCwIcUCgAAAE4"]
[Fri Apr 17 16:03:00.222720 2026] [:error] [pid 9263:tid 9266] [client 20.250.30.167:65247] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Spow_SRw.php"] [unique_id "aeHpNBP68VyHNvj1e57MWQAAAME"]
[Fri Apr 17 16:03:01.974540 2026] [:error] [pid 9263:tid 9289] [client 20.250.30.167:50722] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "aeHpNRP68VyHNvj1e57MXAAAANg"]
[Fri Apr 17 16:03:03.224833 2026] [:error] [pid 9153:tid 9232] [client 20.250.30.167:59281] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "aeHpN-MHGxkTZX3c45fbKgAAAI4"]
[Fri Apr 17 16:03:05.527705 2026] [:error] [pid 9263:tid 9283] [client 20.250.30.167:50751] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "aeHpORP68VyHNvj1e57MXwAAANI"]
[Fri Apr 17 16:03:07.212792 2026] [:error] [pid 9263:tid 9282] [client 20.250.30.167:50690] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "aeHpOxP68VyHNvj1e57MYwAAANE"]
[Fri Apr 17 16:03:08.565166 2026] [:error] [pid 9152:tid 9194] [client 20.250.30.167:58350] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "aeHpPJJYca8I3TNCwIcUEQAAAEQ"]
[Fri Apr 17 16:03:09.447653 2026] [:error] [pid 9263:tid 9282] [client 20.250.30.167:60454] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "aeHpPRP68VyHNvj1e57MagAAANE"]
[Fri Apr 17 16:03:12.694971 2026] [:error] [pid 34273:tid 34292] [client 20.250.30.167:50711] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "aeHpQGuQDW686mK3dgHRPwAAAZE"]
[Fri Apr 17 16:03:14.474542 2026] [:error] [pid 9263:tid 9273] [client 20.250.30.167:59950] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "aeHpQhP68VyHNvj1e57MrgAAAMg"]
[Fri Apr 17 16:03:18.609891 2026] [:error] [pid 61523:tid 61548] [client 20.250.30.167:60418] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHpRsOaH-Pgc7WEf4NjzwAAAcY"]
[Fri Apr 17 16:03:20.037249 2026] [:error] [pid 61523:tid 61565] [client 20.250.30.167:51412] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHpSMOaH-Pgc7WEf4Nj1QAAAdc"]
[Fri Apr 17 16:03:22.276602 2026] [:error] [pid 61523:tid 61556] [client 20.250.30.167:54208] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHpSsOaH-Pgc7WEf4Nj2QAAAc4"]
[Fri Apr 17 16:03:25.879682 2026] [:error] [pid 61523:tid 61547] [client 20.250.30.167:59967] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHpTcOaH-Pgc7WEf4Nj4QAAAcU"]
[Fri Apr 17 16:03:27.324764 2026] [:error] [pid 9152:tid 9199] [client 20.250.30.167:54226] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHpT5JYca8I3TNCwIcULQAAAEk"]
[Fri Apr 17 16:03:28.517351 2026] [:error] [pid 9263:tid 9277] [client 20.250.30.167:59939] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHpUBP68VyHNvj1e57MwwAAAMw"]
[Fri Apr 17 16:03:29.763149 2026] [:error] [pid 34273:tid 34276] [client 20.250.30.167:60466] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHpUWuQDW686mK3dgHRSAAAAYE"]
[Fri Apr 17 16:03:30.952524 2026] [:error] [pid 9151:tid 9161] [client 20.250.30.167:65239] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHpUshTVuRPkua22vQdEAAAAAA"]
[Fri Apr 17 16:03:31.883570 2026] [:error] [pid 61523:tid 61566] [client 20.250.30.167:50727] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "aeHpU8OaH-Pgc7WEf4Nj5gAAAdg"]
[Fri Apr 17 16:03:33.456878 2026] [proxy_fcgi:error] [pid 9152:tid 9198] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:34.892994 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:35.133221 2026] [proxy_fcgi:error] [pid 9152:tid 9190] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:35.373039 2026] [proxy_fcgi:error] [pid 9152:tid 9205] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:35.619891 2026] [proxy_fcgi:error] [pid 9152:tid 9194] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:35.862568 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:36.101424 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:36.658018 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:36.929453 2026] [proxy_fcgi:error] [pid 9152:tid 9208] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:37.168734 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:37.410538 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 20.250.30.167:59919] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:03:37.657930 2026] [:error] [pid 9152:tid 9211] [client 20.250.30.167:59919] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeHpWZJYca8I3TNCwIcURgAAAFU"]
[Fri Apr 17 16:03:39.057170 2026] [:error] [pid 61523:tid 61559] [client 20.250.30.167:61199] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeHpW8OaH-Pgc7WEf4Nj7wAAAdE"]
[Fri Apr 17 16:03:40.153749 2026] [:error] [pid 61523:tid 61550] [client 20.250.30.167:65238] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeHpXMOaH-Pgc7WEf4Nj8AAAAcg"]
[Fri Apr 17 16:03:41.183227 2026] [:error] [pid 9152:tid 9194] [client 20.250.30.167:61202] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeHpXZJYca8I3TNCwIcUSgAAAEQ"]
[Fri Apr 17 16:03:42.012757 2026] [:error] [pid 61523:tid 61547] [client 20.250.30.167:59317] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aeHpXsOaH-Pgc7WEf4Nj8gAAAcU"]
[Fri Apr 17 16:03:43.172727 2026] [:error] [pid 61523:tid 61551] [client 20.250.30.167:50708] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aeHpX8OaH-Pgc7WEf4Nj9gAAAck"]
[Fri Apr 17 16:03:44.469408 2026] [:error] [pid 61523:tid 61554] [client 20.250.30.167:54201] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aeHpYMOaH-Pgc7WEf4Nj-QAAAcw"]
[Fri Apr 17 16:03:45.892756 2026] [:error] [pid 61523:tid 61545] [client 20.250.30.167:54196] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aeHpYcOaH-Pgc7WEf4Nj-wAAAcM"]
[Fri Apr 17 16:03:47.146829 2026] [:error] [pid 9263:tid 9288] [client 20.250.30.167:51433] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpYxP68VyHNvj1e57MzwAAANc"]
[Fri Apr 17 16:03:48.048620 2026] [:error] [pid 9152:tid 9214] [client 20.250.30.167:59942] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpZJJYca8I3TNCwIcUUwAAAFg"]
[Fri Apr 17 16:03:49.540735 2026] [:error] [pid 61523:tid 61541] [client 20.250.30.167:59917] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpZcOaH-Pgc7WEf4NkAQAAAcA"]
[Fri Apr 17 16:03:51.108127 2026] [:error] [pid 61523:tid 61551] [client 20.250.30.167:59274] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpZ8OaH-Pgc7WEf4NkBQAAAck"]
[Fri Apr 17 16:03:52.932008 2026] [:error] [pid 9263:tid 9279] [client 20.250.30.167:54144] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aeHpaBP68VyHNvj1e57M0QAAAM4"]
[Fri Apr 17 16:03:55.232633 2026] [:error] [pid 9263:tid 9270] [client 20.250.30.167:59273] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aeHpaxP68VyHNvj1e57M2QAAAMU"]
[Fri Apr 17 16:03:56.896546 2026] [:error] [pid 9152:tid 9190] [client 20.250.30.167:61225] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aeHpbJJYca8I3TNCwIcUVQAAAEA"]
[Fri Apr 17 16:03:58.571793 2026] [:error] [pid 9153:tid 9235] [client 20.250.30.167:59915] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aeHpbuMHGxkTZX3c45fbOQAAAJE"]
[Fri Apr 17 16:03:59.971010 2026] [:error] [pid 9152:tid 9211] [client 20.250.30.167:65223] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHpb5JYca8I3TNCwIcUXAAAAFU"]
[Fri Apr 17 16:04:01.692006 2026] [:error] [pid 9152:tid 9204] [client 20.250.30.167:61223] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHpcZJYca8I3TNCwIcUXgAAAE4"]
[Fri Apr 17 16:04:03.240825 2026] [:error] [pid 9263:tid 9284] [client 20.250.30.167:51442] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHpcxP68VyHNvj1e57M4AAAANM"]
[Fri Apr 17 16:04:05.083028 2026] [:error] [pid 9263:tid 9282] [client 20.250.30.167:61215] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHpdRP68VyHNvj1e57M4wAAANE"]
[Fri Apr 17 16:04:05.190195 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:05.426867 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:05.665726 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:05.905000 2026] [proxy_fcgi:error] [pid 9263:tid 9274] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:06.141615 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:06.718474 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:06.956484 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:07.199839 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:07.439273 2026] [proxy_fcgi:error] [pid 9263:tid 9273] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:07.689602 2026] [proxy_fcgi:error] [pid 9263:tid 9289] [client 4.232.151.190:2523] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:04:07.922698 2026] [:error] [pid 9263:tid 9279] [client 4.232.151.190:2523] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "aeHpdxP68VyHNvj1e57M7gAAAM4"]
[Fri Apr 17 16:04:08.194430 2026] [:error] [pid 51878:tid 51890] [client 20.250.30.167:65265] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHpeEnQhUtMbw9EsgYuygAAAQo"]
[Fri Apr 17 16:04:09.589838 2026] [:error] [pid 51878:tid 51903] [client 4.232.151.190:2670] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "aeHpeUnQhUtMbw9EsgYuywAAARc"]
[Fri Apr 17 16:04:10.538733 2026] [:error] [pid 61523:tid 61548] [client 4.232.151.190:2871] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "aeHpesOaH-Pgc7WEf4NkFwAAAcY"]
[Fri Apr 17 16:04:11.769869 2026] [:error] [pid 9152:tid 9213] [client 20.250.30.167:59961] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHpe5JYca8I3TNCwIcUbQAAAFc"]
[Fri Apr 17 16:04:12.640569 2026] [:error] [pid 9263:tid 9281] [client 4.232.151.190:2953] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "aeHpfBP68VyHNvj1e57M9AAAANA"]
[Fri Apr 17 16:04:14.041078 2026] [:error] [pid 34273:tid 34295] [client 4.232.151.190:39468] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aeHpfmuQDW686mK3dgHRVQAAAZQ"]
[Fri Apr 17 16:04:16.166132 2026] [:error] [pid 9263:tid 9273] [client 4.232.151.190:38077] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aeHpgBP68VyHNvj1e57M-wAAAMg"]
[Fri Apr 17 16:04:17.491356 2026] [:error] [pid 9263:tid 9283] [client 4.232.151.190:2826] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aeHpgRP68VyHNvj1e57M_gAAANI"]
[Fri Apr 17 16:04:18.653465 2026] [:error] [pid 9263:tid 9281] [client 4.232.151.190:24419] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/C1.php"] [unique_id "aeHpghP68VyHNvj1e57NAQAAANA"]
[Fri Apr 17 16:04:19.329352 2026] [:error] [pid 9263:tid 9265] [client 20.250.30.167:65216] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHpgxP68VyHNvj1e57NBAAAAMA"]
[Fri Apr 17 16:04:20.012311 2026] [:error] [pid 61523:tid 61566] [client 4.232.151.190:39482] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b35.php"] [unique_id "aeHphMOaH-Pgc7WEf4NkHAAAAdg"]
[Fri Apr 17 16:04:21.040985 2026] [:error] [pid 9153:tid 9219] [client 4.232.151.190:39455] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b35.php"] [unique_id "aeHpheMHGxkTZX3c45fbPgAAAIE"]
[Fri Apr 17 16:04:21.774218 2026] [:error] [pid 9263:tid 9289] [client 4.232.151.190:2133] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b35.php"] [unique_id "aeHphRP68VyHNvj1e57NCQAAANg"]
[Fri Apr 17 16:04:22.503893 2026] [:error] [pid 9263:tid 9288] [client 4.232.151.190:29512] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b35.php"] [unique_id "aeHphhP68VyHNvj1e57NCwAAANc"]
[Fri Apr 17 16:04:23.321851 2026] [:error] [pid 9151:tid 9178] [client 4.232.151.190:19418] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Xx.php"] [unique_id "aeHph8hTVuRPkua22vQdEwAAABE"]
[Fri Apr 17 16:04:24.112133 2026] [:error] [pid 34273:tid 34278] [client 4.232.151.190:33827] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Xx.php"] [unique_id "aeHpiGuQDW686mK3dgHRVgAAAYM"]
[Fri Apr 17 16:04:24.926803 2026] [:error] [pid 9263:tid 9280] [client 4.232.151.190:29514] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Xx.php"] [unique_id "aeHpiBP68VyHNvj1e57NDgAAAM8"]
[Fri Apr 17 16:04:25.898142 2026] [:error] [pid 34273:tid 34275] [client 20.250.30.167:61232] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "aeHpiWuQDW686mK3dgHRWAAAAYA"]
[Fri Apr 17 16:04:26.230208 2026] [:error] [pid 25010:tid 25017] [client 4.232.151.190:17531] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Xx.php"] [unique_id "aeHpio-7kkf42RarqQ1PhgAAAUQ"]
[Fri Apr 17 16:04:27.044225 2026] [:error] [pid 9263:tid 9270] [client 4.232.151.190:23204] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-un.php"] [unique_id "aeHpixP68VyHNvj1e57NDwAAAMU"]
[Fri Apr 17 16:04:27.947861 2026] [:error] [pid 25010:tid 25020] [client 4.232.151.190:18970] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-un.php"] [unique_id "aeHpi4-7kkf42RarqQ1PiAAAAUc"]
[Fri Apr 17 16:04:28.830185 2026] [:error] [pid 61523:tid 61562] [client 4.232.151.190:19351] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-un.php"] [unique_id "aeHpjMOaH-Pgc7WEf4NkIgAAAdQ"]
[Fri Apr 17 16:04:29.583462 2026] [:error] [pid 61523:tid 61558] [client 4.232.151.190:23208] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-un.php"] [unique_id "aeHpjcOaH-Pgc7WEf4NkIwAAAdA"]
[Fri Apr 17 16:04:30.743863 2026] [:error] [pid 61523:tid 61552] [client 4.232.151.190:22818] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeHpjsOaH-Pgc7WEf4NkJAAAAco"]
[Fri Apr 17 16:04:31.635711 2026] [:error] [pid 9152:tid 9195] [client 4.232.151.190:26589] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeHpj5JYca8I3TNCwIcUdAAAAEU"]
[Fri Apr 17 16:04:32.257272 2026] [:error] [pid 9263:tid 9275] [client 4.232.151.190:35770] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeHpkBP68VyHNvj1e57NGQAAAMo"]
[Fri Apr 17 16:04:33.174046 2026] [:error] [pid 34273:tid 34277] [client 4.232.151.190:34666] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeHpkWuQDW686mK3dgHRuQAAAYI"]
[Fri Apr 17 16:04:33.959999 2026] [:error] [pid 25010:tid 25021] [client 4.232.151.190:20174] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmini.php"] [unique_id "aeHpkY-7kkf42RarqQ1PigAAAUg"]
[Fri Apr 17 16:04:34.602170 2026] [:error] [pid 34273:tid 34297] [client 4.232.151.190:34667] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmini.php"] [unique_id "aeHpkmuQDW686mK3dgHRugAAAZY"]
[Fri Apr 17 16:04:35.314024 2026] [:error] [pid 61523:tid 61546] [client 4.232.151.190:34650] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmini.php"] [unique_id "aeHpk8OaH-Pgc7WEf4NkOwAAAcQ"]
[Fri Apr 17 16:04:35.866426 2026] [:error] [pid 9263:tid 9268] [client 4.232.151.190:22111] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmini.php"] [unique_id "aeHpkxP68VyHNvj1e57NHgAAAMM"]
[Fri Apr 17 16:04:37.088757 2026] [:error] [pid 51878:tid 51895] [client 4.232.151.190:28001] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aeHplUnQhUtMbw9EsgYu0wAAAQ8"]
[Fri Apr 17 16:04:37.677725 2026] [:error] [pid 9152:tid 9209] [client 4.232.151.190:25557] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aeHplZJYca8I3TNCwIcUfgAAAFM"]
[Fri Apr 17 16:04:38.288359 2026] [:error] [pid 34273:tid 34294] [client 4.232.151.190:20165] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aeHplmuQDW686mK3dgHRvAAAAZM"]
[Fri Apr 17 16:04:38.931169 2026] [:error] [pid 61523:tid 61554] [client 4.232.151.190:22126] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index.php"] [unique_id "aeHplsOaH-Pgc7WEf4NkQQAAAcw"]
[Fri Apr 17 16:04:39.513206 2026] [:error] [pid 9152:tid 9195] [client 4.232.151.190:43847] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2468.php"] [unique_id "aeHpl5JYca8I3TNCwIcUgAAAAEU"]
[Fri Apr 17 16:04:40.178386 2026] [:error] [pid 61523:tid 61564] [client 4.232.151.190:20512] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2468.php"] [unique_id "aeHpmMOaH-Pgc7WEf4NkQwAAAdY"]
[Fri Apr 17 16:04:40.737105 2026] [:error] [pid 51878:tid 51897] [client 4.232.151.190:20207] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2468.php"] [unique_id "aeHpmEnQhUtMbw9EsgYu1wAAARE"]
[Fri Apr 17 16:04:41.325895 2026] [:error] [pid 9152:tid 9198] [client 4.232.151.190:25598] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2468.php"] [unique_id "aeHpmZJYca8I3TNCwIcUhgAAAEg"]
[Fri Apr 17 16:04:41.867640 2026] [:error] [pid 9152:tid 9208] [client 4.232.151.190:42806] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eterezrezt.php"] [unique_id "aeHpmZJYca8I3TNCwIcUiAAAAFI"]
[Fri Apr 17 16:04:42.556167 2026] [:error] [pid 34273:tid 34285] [client 4.232.151.190:45769] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eterezrezt.php"] [unique_id "aeHpmmuQDW686mK3dgHRvwAAAYo"]
[Fri Apr 17 16:04:43.208639 2026] [:error] [pid 25010:tid 25018] [client 4.232.151.190:21755] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eterezrezt.php"] [unique_id "aeHpm4-7kkf42RarqQ1PjAAAAUU"]
[Fri Apr 17 16:04:43.796584 2026] [:error] [pid 9151:tid 9179] [client 4.232.151.190:30383] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eterezrezt.php"] [unique_id "aeHpm8hTVuRPkua22vQdHAAAABI"]
[Fri Apr 17 16:04:44.378450 2026] [:error] [pid 25010:tid 25031] [client 4.232.151.190:25139] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeHpnI-7kkf42RarqQ1PjgAAAVI"]
[Fri Apr 17 16:04:45.022278 2026] [:error] [pid 9263:tid 9279] [client 4.232.151.190:25881] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeHpnRP68VyHNvj1e57NKQAAAM4"]
[Fri Apr 17 16:04:45.705887 2026] [:error] [pid 51878:tid 51895] [client 4.232.151.190:61880] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeHpnUnQhUtMbw9EsgYu3wAAAQ8"]
[Fri Apr 17 16:04:47.069549 2026] [:error] [pid 61523:tid 61558] [client 4.232.151.190:25874] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "aeHpn8OaH-Pgc7WEf4NkSQAAAdA"]
[Fri Apr 17 16:04:47.708297 2026] [:error] [pid 61523:tid 61561] [client 4.232.151.190:27941] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpn8OaH-Pgc7WEf4NkTQAAAdM"]
[Fri Apr 17 16:04:48.318103 2026] [:error] [pid 9263:tid 9271] [client 4.232.151.190:61855] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpoBP68VyHNvj1e57NMgAAAMY"]
[Fri Apr 17 16:04:49.470651 2026] [:error] [pid 51878:tid 51898] [client 4.232.151.190:20503] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpoUnQhUtMbw9EsgYu4QAAARI"]
[Fri Apr 17 16:04:50.025577 2026] [:error] [pid 51878:tid 51892] [client 4.232.151.190:25537] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeHpoknQhUtMbw9EsgYu4wAAAQw"]
[Fri Apr 17 16:04:50.612698 2026] [:error] [pid 51878:tid 51901] [client 4.232.151.190:32108] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeHpoknQhUtMbw9EsgYu5QAAARU"]
[Fri Apr 17 16:04:51.496875 2026] [:error] [pid 9263:tid 9273] [client 4.232.151.190:61871] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeHpoxP68VyHNvj1e57NOQAAAMg"]
[Fri Apr 17 16:04:52.105314 2026] [:error] [pid 34273:tid 34279] [client 4.232.151.190:42286] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeHppGuQDW686mK3dgHRwgAAAYQ"]
[Fri Apr 17 16:04:52.918799 2026] [:error] [pid 61523:tid 61565] [client 4.232.151.190:30422] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "aeHppMOaH-Pgc7WEf4NkUAAAAdc"]
[Fri Apr 17 16:04:54.117355 2026] [:error] [pid 61523:tid 61563] [client 4.232.151.190:20537] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeHppsOaH-Pgc7WEf4NkUwAAAdU"]
[Fri Apr 17 16:04:54.820648 2026] [:error] [pid 9152:tid 9211] [client 4.232.151.190:39409] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeHpppJYca8I3TNCwIcUkgAAAFU"]
[Fri Apr 17 16:04:55.637865 2026] [:error] [pid 34273:tid 34282] [client 4.232.151.190:42302] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeHpp2uQDW686mK3dgHRwwAAAYc"]
[Fri Apr 17 16:04:56.503025 2026] [:error] [pid 9153:tid 9223] [client 4.232.151.190:28681] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "aeHpqOMHGxkTZX3c45fbUQAAAIU"]
[Fri Apr 17 16:04:57.344643 2026] [:error] [pid 61523:tid 61554] [client 4.232.151.190:21705] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeHpqcOaH-Pgc7WEf4NkVQAAAcw"]
[Fri Apr 17 16:04:58.053651 2026] [:error] [pid 9152:tid 9197] [client 4.232.151.190:46342] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeHpqpJYca8I3TNCwIcUlwAAAEc"]
[Fri Apr 17 16:04:58.959070 2026] [:error] [pid 9152:tid 9207] [client 4.232.151.190:39365] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeHpqpJYca8I3TNCwIcUnQAAAFE"]
[Fri Apr 17 16:04:59.944459 2026] [:error] [pid 9263:tid 9276] [client 4.232.151.190:2690] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "aeHpqxP68VyHNvj1e57NSQAAAMs"]
[Fri Apr 17 16:05:00.797002 2026] [:error] [pid 9263:tid 9266] [client 4.232.151.190:29924] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeHprBP68VyHNvj1e57NTAAAAME"]
[Fri Apr 17 16:05:01.474696 2026] [:error] [pid 9263:tid 9279] [client 4.232.151.190:39365] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeHprRP68VyHNvj1e57NTwAAAM4"]
[Fri Apr 17 16:05:02.493099 2026] [:error] [pid 9152:tid 9206] [client 4.232.151.190:32106] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeHprpJYca8I3TNCwIcUpAAAAFA"]
[Fri Apr 17 16:05:03.041755 2026] [proxy_fcgi:error] [pid 9151:tid 9168] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:03.283192 2026] [proxy_fcgi:error] [pid 9151:tid 9184] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:03.522928 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:03.762429 2026] [:error] [pid 61523:tid 61562] [client 4.232.151.190:29926] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeHpr8OaH-Pgc7WEf4NkXAAAAdQ"]
[Fri Apr 17 16:05:03.774986 2026] [proxy_fcgi:error] [pid 9151:tid 9185] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:04.028717 2026] [proxy_fcgi:error] [pid 9151:tid 9170] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:04.267737 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:04.507135 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:04.760475 2026] [proxy_fcgi:error] [pid 9151:tid 9177] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:04.781061 2026] [:error] [pid 9152:tid 9203] [client 4.232.151.190:19806] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeHpsJJYca8I3TNCwIcUpgAAAE0"]
[Fri Apr 17 16:05:04.999581 2026] [proxy_fcgi:error] [pid 9151:tid 9166] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:05.238326 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:05.517733 2026] [proxy_fcgi:error] [pid 9151:tid 9171] [client 20.250.30.167:51406] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:05.581900 2026] [:error] [pid 9152:tid 9202] [client 4.232.151.190:30931] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeHpsZJYca8I3TNCwIcUqQAAAEw"]
[Fri Apr 17 16:05:05.786391 2026] [:error] [pid 9151:tid 9169] [client 20.250.30.167:51406] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeHpschTVuRPkua22vQdLQAAAAg"]
[Fri Apr 17 16:05:06.827143 2026] [:error] [pid 9263:tid 9270] [client 4.232.151.190:50589] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "aeHpshP68VyHNvj1e57NUgAAAMU"]
[Fri Apr 17 16:05:08.198672 2026] [proxy_fcgi:error] [pid 61523:tid 61544] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:08.434850 2026] [proxy_fcgi:error] [pid 61523:tid 61550] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:08.670857 2026] [proxy_fcgi:error] [pid 61523:tid 61551] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:08.906974 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:09.152922 2026] [proxy_fcgi:error] [pid 61523:tid 61558] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:09.389209 2026] [proxy_fcgi:error] [pid 61523:tid 61552] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:09.626368 2026] [proxy_fcgi:error] [pid 61523:tid 61564] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:09.866604 2026] [proxy_fcgi:error] [pid 61523:tid 61561] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:10.229847 2026] [proxy_fcgi:error] [pid 61523:tid 61562] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:10.473132 2026] [proxy_fcgi:error] [pid 61523:tid 61555] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:10.783530 2026] [proxy_fcgi:error] [pid 61523:tid 61559] [client 4.232.151.190:2707] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:05:11.016064 2026] [:error] [pid 61523:tid 61565] [client 4.232.151.190:2707] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeHpt8OaH-Pgc7WEf4NkbgAAAdc"]
[Fri Apr 17 16:05:12.093737 2026] [:error] [pid 51878:tid 51892] [client 4.232.151.190:30962] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeHpuEnQhUtMbw9EsgYu7QAAAQw"]
[Fri Apr 17 16:05:12.490149 2026] [:error] [pid 9263:tid 9275] [client 20.250.30.167:54155] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeHpuBP68VyHNvj1e57NWwAAAMo"]
[Fri Apr 17 16:05:12.981653 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:27213] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeHpuBP68VyHNvj1e57NXAAAAM0"]
[Fri Apr 17 16:05:14.669062 2026] [:error] [pid 9263:tid 9273] [client 4.232.151.190:22884] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/"] [unique_id "aeHpuhP68VyHNvj1e57NYwAAAMg"]
[Fri Apr 17 16:05:15.371278 2026] [:error] [pid 9263:tid 9277] [client 4.232.151.190:47112] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHpuxP68VyHNvj1e57NZgAAAMw"]
[Fri Apr 17 16:05:16.453320 2026] [:error] [pid 9152:tid 9199] [client 4.232.151.190:29950] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHpvJJYca8I3TNCwIcUuAAAAEk"]
[Fri Apr 17 16:05:17.446079 2026] [:error] [pid 9152:tid 9195] [client 4.232.151.190:47153] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHpvZJYca8I3TNCwIcUugAAAEU"]
[Fri Apr 17 16:05:18.195349 2026] [:error] [pid 9152:tid 9201] [client 20.250.30.167:54266] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeHpvpJYca8I3TNCwIcUvQAAAEs"]
[Fri Apr 17 16:05:18.253290 2026] [:error] [pid 34273:tid 34275] [client 4.232.151.190:30942] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHpvmuQDW686mK3dgHR0AAAAYA"]
[Fri Apr 17 16:05:19.411763 2026] [:error] [pid 9152:tid 9205] [client 4.232.151.190:2702] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeHpv5JYca8I3TNCwIcUwAAAAE8"]
[Fri Apr 17 16:05:20.536897 2026] [:error] [pid 9263:tid 9279] [client 4.232.151.190:22024] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeHpwBP68VyHNvj1e57NcAAAAM4"]
[Fri Apr 17 16:05:21.344984 2026] [:error] [pid 51878:tid 51893] [client 20.250.30.167:50749] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeHpwUnQhUtMbw9EsgYu9gAAAQ0"]
[Fri Apr 17 16:05:22.435851 2026] [:error] [pid 9263:tid 9282] [client 4.232.151.190:27238] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeHpwhP68VyHNvj1e57NcwAAANE"]
[Fri Apr 17 16:05:23.110553 2026] [:error] [pid 61523:tid 61556] [client 20.250.30.167:65241] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "aeHpw8OaH-Pgc7WEf4NkdgAAAc4"]
[Fri Apr 17 16:05:23.633822 2026] [:error] [pid 9263:tid 9265] [client 4.232.151.190:2698] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeHpwxP68VyHNvj1e57NdAAAAMA"]
[Fri Apr 17 16:05:24.495412 2026] [:error] [pid 9263:tid 9289] [client 4.232.151.190:35223] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeHpxBP68VyHNvj1e57NdwAAANg"]
[Fri Apr 17 16:05:24.711137 2026] [:error] [pid 9263:tid 9279] [client 20.250.30.167:59965] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "aeHpxBP68VyHNvj1e57NegAAAM4"]
[Fri Apr 17 16:05:25.698961 2026] [:error] [pid 9263:tid 9282] [client 20.250.30.167:59275] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "aeHpxRP68VyHNvj1e57NgAAAANE"]
[Fri Apr 17 16:05:26.726453 2026] [:error] [pid 9263:tid 9280] [client 20.250.30.167:65263] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX1.php"] [unique_id "aeHpxhP68VyHNvj1e57NiAAAAM8"]
[Fri Apr 17 16:05:26.792436 2026] [:error] [pid 61523:tid 61550] [client 4.232.151.190:22060] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeHpxsOaH-Pgc7WEf4NkeQAAAcg"]
[Fri Apr 17 16:05:27.751974 2026] [:error] [pid 34273:tid 34289] [client 20.250.30.167:65226] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHpx2uQDW686mK3dgHR1AAAAY4"]
[Fri Apr 17 16:05:28.671009 2026] [:error] [pid 34273:tid 34295] [client 20.250.30.167:65274] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHpyGuQDW686mK3dgHR1gAAAZQ"]
[Fri Apr 17 16:05:28.839442 2026] [:error] [pid 25010:tid 25023] [client 4.232.151.190:27226] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeHpyI-7kkf42RarqQ1PngAAAUo"]
[Fri Apr 17 16:05:29.734631 2026] [:error] [pid 9152:tid 9205] [client 20.250.30.167:65272] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHpyZJYca8I3TNCwIcUxAAAAE8"]
[Fri Apr 17 16:05:30.782340 2026] [:error] [pid 9151:tid 9180] [client 20.250.30.167:54184] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHpyshTVuRPkua22vQdNQAAABM"]
[Fri Apr 17 16:05:31.468007 2026] [:error] [pid 9151:tid 9175] [client 4.232.151.190:21639] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeHpy8hTVuRPkua22vQdNwAAAA4"]
[Fri Apr 17 16:05:32.616372 2026] [:error] [pid 25010:tid 25031] [client 20.250.30.167:50710] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHpzI-7kkf42RarqQ1PpQAAAVI"]
[Fri Apr 17 16:05:32.729294 2026] [:error] [pid 9151:tid 9173] [client 4.232.151.190:20120] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeHpzMhTVuRPkua22vQdPAAAAAw"]
[Fri Apr 17 16:05:33.487708 2026] [:error] [pid 25010:tid 25030] [client 20.250.30.167:54173] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHpzY-7kkf42RarqQ1PrAAAAVE"]
[Fri Apr 17 16:05:34.211517 2026] [:error] [pid 61523:tid 61559] [client 4.232.151.190:35206] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeHpzsOaH-Pgc7WEf4NkfQAAAdE"]
[Fri Apr 17 16:05:34.700445 2026] [:error] [pid 61523:tid 61557] [client 20.250.30.167:65252] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHpzsOaH-Pgc7WEf4NkgQAAAc8"]
[Fri Apr 17 16:05:35.459983 2026] [:error] [pid 61523:tid 61550] [client 20.250.30.167:54169] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHpz8OaH-Pgc7WEf4NkhQAAAcg"]
[Fri Apr 17 16:05:36.266232 2026] [:error] [pid 9153:tid 9238] [client 20.250.30.167:63018] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp0OMHGxkTZX3c45fbbAAAAJQ"]
[Fri Apr 17 16:05:36.794696 2026] [:error] [pid 9151:tid 9163] [client 4.232.151.190:20096] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeHp0MhTVuRPkua22vQdQwAAAAI"]
[Fri Apr 17 16:05:37.204537 2026] [:error] [pid 9263:tid 9274] [client 20.250.30.167:62980] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp0RP68VyHNvj1e57NjwAAAMk"]
[Fri Apr 17 16:05:37.893361 2026] [:error] [pid 9263:tid 9282] [client 4.232.151.190:24363] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aeHp0RP68VyHNvj1e57NkgAAANE"]
[Fri Apr 17 16:05:38.163011 2026] [:error] [pid 9153:tid 9228] [client 20.250.30.167:51432] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp0uMHGxkTZX3c45fbbwAAAIo"]
[Fri Apr 17 16:05:39.646922 2026] [:error] [pid 61523:tid 61555] [client 4.232.151.190:22882] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeHp08OaH-Pgc7WEf4NkiwAAAc0"]
[Fri Apr 17 16:05:40.268424 2026] [:error] [pid 61523:tid 61547] [client 20.250.30.167:62986] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp1MOaH-Pgc7WEf4NkjAAAAcU"]
[Fri Apr 17 16:05:40.758602 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:46312] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeHp1BP68VyHNvj1e57NlwAAAM0"]
[Fri Apr 17 16:05:41.975660 2026] [:error] [pid 9263:tid 9284] [client 20.250.30.167:54178] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHp1RP68VyHNvj1e57NnAAAANM"]
[Fri Apr 17 16:05:42.003097 2026] [:error] [pid 9263:tid 9283] [client 4.232.151.190:56016] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeHp1hP68VyHNvj1e57NnQAAANI"]
[Fri Apr 17 16:05:42.685957 2026] [:error] [pid 61523:tid 61564] [client 4.232.151.190:47155] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeHp1sOaH-Pgc7WEf4NkjgAAAdY"]
[Fri Apr 17 16:05:44.318080 2026] [:error] [pid 61523:tid 61557] [client 4.232.151.190:24322] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeHp2MOaH-Pgc7WEf4NklgAAAc8"]
[Fri Apr 17 16:05:44.739995 2026] [:error] [pid 61523:tid 61562] [client 20.250.30.167:59959] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHp2MOaH-Pgc7WEf4NkmAAAAdQ"]
[Fri Apr 17 16:05:46.608453 2026] [:error] [pid 9263:tid 9271] [client 4.232.151.190:47158] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeHp2hP68VyHNvj1e57NrQAAAMY"]
[Fri Apr 17 16:05:46.935072 2026] [:error] [pid 9263:tid 9278] [client 20.250.30.167:54206] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHp2hP68VyHNvj1e57NrwAAAM0"]
[Fri Apr 17 16:05:49.755075 2026] [:error] [pid 9151:tid 9183] [client 4.232.151.190:22417] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeHp3chTVuRPkua22vQdTQAAABY"]
[Fri Apr 17 16:05:50.702002 2026] [:error] [pid 9151:tid 9185] [client 4.232.151.190:32836] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeHp3shTVuRPkua22vQdTgAAABg"]
[Fri Apr 17 16:05:52.250288 2026] [:error] [pid 34273:tid 34288] [client 20.250.30.167:59264] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHp4GuQDW686mK3dgHR3wAAAY0"]
[Fri Apr 17 16:05:52.385675 2026] [:error] [pid 61523:tid 61561] [client 4.232.151.190:56051] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeHp4MOaH-Pgc7WEf4NkpAAAAdM"]
[Fri Apr 17 16:05:54.104283 2026] [:error] [pid 34273:tid 34292] [client 4.232.151.190:24336] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeHp4muQDW686mK3dgHR4QAAAZE"]
[Fri Apr 17 16:05:54.359879 2026] [:error] [pid 9263:tid 9267] [client 20.250.30.167:50742] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHp4hP68VyHNvj1e57NwQAAAMI"]
[Fri Apr 17 16:05:55.237882 2026] [:error] [pid 9152:tid 9211] [client 20.250.30.167:50707] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHp45JYca8I3TNCwIcU0AAAAFU"]
[Fri Apr 17 16:05:55.982600 2026] [:error] [pid 9151:tid 9172] [client 4.232.151.190:2518] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeHp48hTVuRPkua22vQdUQAAAAs"]
[Fri Apr 17 16:05:56.620227 2026] [:error] [pid 25010:tid 25035] [client 20.250.30.167:50704] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHp5I-7kkf42RarqQ1PtAAAAVY"]
[Fri Apr 17 16:05:57.793136 2026] [:error] [pid 9153:tid 9235] [client 20.250.30.167:54203] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHp5eMHGxkTZX3c45fbgQAAAJE"]
[Fri Apr 17 16:05:58.290895 2026] [:error] [pid 9152:tid 9201] [client 4.232.151.190:56043] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aeHp5pJYca8I3TNCwIcU1QAAAEs"]
[Fri Apr 17 16:05:59.287070 2026] [:error] [pid 61523:tid 61558] [client 20.250.30.167:61221] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHp58OaH-Pgc7WEf4NkqgAAAdA"]
[Fri Apr 17 16:06:00.119910 2026] [:error] [pid 61523:tid 61561] [client 4.232.151.190:24038] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeHp6MOaH-Pgc7WEf4NkrAAAAdM"]
[Fri Apr 17 16:06:00.919266 2026] [:error] [pid 61523:tid 61545] [client 20.250.30.167:61226] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHp6MOaH-Pgc7WEf4NkrQAAAcM"]
[Fri Apr 17 16:06:01.028628 2026] [:error] [pid 9151:tid 9174] [client 4.232.151.190:2281] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeHp6chTVuRPkua22vQdUwAAAA0"]
[Fri Apr 17 16:06:02.665075 2026] [:error] [pid 25010:tid 25022] [client 20.250.30.167:59280] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHp6o-7kkf42RarqQ1PuQAAAUk"]
[Fri Apr 17 16:06:02.830453 2026] [:error] [pid 25010:tid 25030] [client 4.232.151.190:32841] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeHp6o-7kkf42RarqQ1PugAAAVE"]
[Fri Apr 17 16:06:03.816792 2026] [:error] [pid 51878:tid 51884] [client 4.232.151.190:2504] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeHp60nQhUtMbw9EsgYvBgAAAQQ"]
[Fri Apr 17 16:06:05.040132 2026] [:error] [pid 34273:tid 34281] [client 4.232.151.190:52299] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeHp7WuQDW686mK3dgHR7wAAAYY"]
[Fri Apr 17 16:06:05.768062 2026] [proxy_fcgi:error] [pid 25010:tid 25033] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:06.251723 2026] [proxy_fcgi:error] [pid 25010:tid 25037] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:06.487676 2026] [:error] [pid 9263:tid 9267] [client 4.232.151.190:56033] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeHp7hP68VyHNvj1e57NywAAAMI"]
[Fri Apr 17 16:06:06.596394 2026] [proxy_fcgi:error] [pid 25010:tid 25017] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:06.836938 2026] [proxy_fcgi:error] [pid 25010:tid 25020] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:07.076979 2026] [proxy_fcgi:error] [pid 25010:tid 25026] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:07.316442 2026] [proxy_fcgi:error] [pid 25010:tid 25019] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:07.409711 2026] [:error] [pid 34273:tid 34278] [client 4.232.151.190:19728] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeHp72uQDW686mK3dgHR8wAAAYM"]
[Fri Apr 17 16:06:07.843173 2026] [proxy_fcgi:error] [pid 25010:tid 25018] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:08.106570 2026] [:error] [pid 61523:tid 61558] [client 4.232.151.190:34297] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aeHp8MOaH-Pgc7WEf4NktQAAAdA"]
[Fri Apr 17 16:06:08.739409 2026] [proxy_fcgi:error] [pid 25010:tid 25032] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:08.958253 2026] [:error] [pid 34273:tid 34288] [client 4.232.151.190:32865] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aeHp8GuQDW686mK3dgHR9QAAAY0"]
[Fri Apr 17 16:06:08.979660 2026] [proxy_fcgi:error] [pid 25010:tid 25036] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:09.332353 2026] [proxy_fcgi:error] [pid 25010:tid 25035] [client 20.250.30.167:63002] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:09.570644 2026] [:error] [pid 25010:tid 25015] [client 20.250.30.167:63002] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeHp8Y-7kkf42RarqQ1PyAAAAUI"]
[Fri Apr 17 16:06:09.876907 2026] [:error] [pid 51878:tid 51893] [client 4.232.151.190:34252] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aeHp8UnQhUtMbw9EsgYvEwAAAQ0"]
[Fri Apr 17 16:06:10.533010 2026] [:error] [pid 9152:tid 9194] [client 20.250.30.167:61218] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeHp8pJYca8I3TNCwIcU3wAAAEQ"]
[Fri Apr 17 16:06:10.957635 2026] [proxy_fcgi:error] [pid 61523:tid 61553] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:11.086673 2026] [:error] [pid 61523:tid 61544] [client 20.250.30.167:61209] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeHp88OaH-Pgc7WEf4NkvgAAAcI"]
[Fri Apr 17 16:06:11.223451 2026] [proxy_fcgi:error] [pid 61523:tid 61562] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:11.489088 2026] [proxy_fcgi:error] [pid 61523:tid 61543] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:11.767962 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:11.793098 2026] [:error] [pid 9152:tid 9211] [client 20.250.30.167:58329] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeHp85JYca8I3TNCwIcU4QAAAFU"]
[Fri Apr 17 16:06:12.033339 2026] [proxy_fcgi:error] [pid 61523:tid 61552] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:12.302385 2026] [proxy_fcgi:error] [pid 61523:tid 61557] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:12.477672 2026] [:error] [pid 9152:tid 9204] [client 20.250.30.167:51423] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHp9JJYca8I3TNCwIcU5AAAAE4"]
[Fri Apr 17 16:06:12.567999 2026] [proxy_fcgi:error] [pid 61523:tid 61561] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:12.833863 2026] [proxy_fcgi:error] [pid 61523:tid 61545] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:13.101504 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:13.367770 2026] [proxy_fcgi:error] [pid 61523:tid 61563] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:13.599708 2026] [:error] [pid 51878:tid 51883] [client 20.250.30.167:61201] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHp9UnQhUtMbw9EsgYvFwAAAQM"]
[Fri Apr 17 16:06:13.679982 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 4.232.151.190:52291] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:06:13.957628 2026] [:error] [pid 61523:tid 61564] [client 4.232.151.190:52291] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp9cOaH-Pgc7WEf4NkywAAAdY"]
[Fri Apr 17 16:06:14.597854 2026] [:error] [pid 51878:tid 51896] [client 4.232.151.190:29503] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp9knQhUtMbw9EsgYvGgAAARA"]
[Fri Apr 17 16:06:15.139481 2026] [:error] [pid 51878:tid 51893] [client 20.250.30.167:50725] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHp90nQhUtMbw9EsgYvHAAAAQ0"]
[Fri Apr 17 16:06:15.292160 2026] [:error] [pid 51878:tid 51882] [client 4.232.151.190:23561] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp90nQhUtMbw9EsgYvHQAAAQI"]
[Fri Apr 17 16:06:15.929183 2026] [:error] [pid 9151:tid 9169] [client 4.232.151.190:52306] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHp98hTVuRPkua22vQdWgAAAAg"]
[Fri Apr 17 16:06:16.886470 2026] [:error] [pid 9151:tid 9172] [client 4.232.151.190:29065] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aeHp-MhTVuRPkua22vQdXgAAAAs"]
[Fri Apr 17 16:06:17.502676 2026] [:error] [pid 9153:tid 9234] [client 20.250.30.167:65225] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHp-eMHGxkTZX3c45fbiwAAAJA"]
[Fri Apr 17 16:06:18.276268 2026] [:error] [pid 51878:tid 51903] [client 4.232.151.190:32516] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aeHp-knQhUtMbw9EsgYvJAAAARc"]
[Fri Apr 17 16:06:19.125565 2026] [:error] [pid 9153:tid 9220] [client 4.232.151.190:29479] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aeHp--MHGxkTZX3c45fbjQAAAII"]
[Fri Apr 17 16:06:20.049051 2026] [:error] [pid 34273:tid 34276] [client 4.232.151.190:29678] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aeHp_GuQDW686mK3dgHR-QAAAYE"]
[Fri Apr 17 16:06:20.981039 2026] [:error] [pid 9153:tid 9222] [client 20.250.30.167:59944] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeHp_OMHGxkTZX3c45fbjwAAAIQ"]
[Fri Apr 17 16:06:21.575201 2026] [:error] [pid 9153:tid 9227] [client 4.232.151.190:21276] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aeHp_eMHGxkTZX3c45fbkQAAAIk"]
[Fri Apr 17 16:06:22.742937 2026] [:error] [pid 34273:tid 34292] [client 4.232.151.190:24828] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aeHp_muQDW686mK3dgHSBAAAAZE"]
[Fri Apr 17 16:06:23.246845 2026] [:error] [pid 61523:tid 61556] [client 20.250.30.167:51443] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeHp_8OaH-Pgc7WEf4Nk1QAAAc4"]
[Fri Apr 17 16:06:23.701012 2026] [:error] [pid 9153:tid 9224] [client 4.232.151.190:21270] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aeHp_-MHGxkTZX3c45fbkwAAAIY"]
[Fri Apr 17 16:06:24.967162 2026] [:error] [pid 61523:tid 61559] [client 4.232.151.190:21303] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aeHqAMOaH-Pgc7WEf4Nk2AAAAdE"]
[Fri Apr 17 16:06:26.198686 2026] [:error] [pid 34273:tid 34283] [client 20.250.30.167:51450] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeHqAmuQDW686mK3dgHSBwAAAYg"]
[Fri Apr 17 16:06:26.547810 2026] [:error] [pid 9263:tid 9269] [client 4.232.151.190:23580] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aeHqAhP68VyHNvj1e57N3AAAAMQ"]
[Fri Apr 17 16:06:27.626073 2026] [:error] [pid 9153:tid 9230] [client 4.232.151.190:29695] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aeHqA-MHGxkTZX3c45fblgAAAIw"]
[Fri Apr 17 16:06:27.893540 2026] [:error] [pid 9263:tid 9267] [client 20.250.30.167:59297] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeHqAxP68VyHNvj1e57N3gAAAMI"]
[Fri Apr 17 16:06:29.115316 2026] [:error] [pid 9153:tid 9237] [client 4.232.151.190:18633] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aeHqBeMHGxkTZX3c45fblwAAAJM"]
[Fri Apr 17 16:06:29.231058 2026] [:error] [pid 9151:tid 9176] [client 20.250.30.167:50689] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeHqBchTVuRPkua22vQdaQAAAA8"]
[Fri Apr 17 16:06:30.156752 2026] [:error] [pid 9263:tid 9272] [client 20.250.30.167:62988] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeHqBhP68VyHNvj1e57N4gAAAMc"]
[Fri Apr 17 16:06:30.188981 2026] [:error] [pid 9263:tid 9286] [client 4.232.151.190:35164] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aeHqBhP68VyHNvj1e57N4wAAANU"]
[Fri Apr 17 16:06:30.736740 2026] [:error] [pid 61523:tid 61549] [client 20.250.30.167:65267] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeHqBsOaH-Pgc7WEf4Nk3gAAAcc"]
[Fri Apr 17 16:06:31.526549 2026] [:error] [pid 9263:tid 9274] [client 20.250.30.167:59911] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeHqBxP68VyHNvj1e57N5gAAAMk"]
[Fri Apr 17 16:06:31.814193 2026] [:error] [pid 34273:tid 34284] [client 4.232.151.190:18658] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aeHqB2uQDW686mK3dgHSDAAAAYk"]
[Fri Apr 17 16:06:32.476113 2026] [:error] [pid 9152:tid 9211] [client 20.250.30.167:51449] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeHqCJJYca8I3TNCwIcU8QAAAFU"]
[Fri Apr 17 16:06:32.881465 2026] [:error] [pid 34273:tid 34281] [client 4.232.151.190:29444] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aeHqCGuQDW686mK3dgHSDgAAAYY"]
[Fri Apr 17 16:06:33.180613 2026] [:error] [pid 9263:tid 9289] [client 20.250.30.167:63026] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeHqCRP68VyHNvj1e57N6AAAANg"]
[Fri Apr 17 16:06:33.929992 2026] [:error] [pid 9263:tid 9285] [client 20.250.30.167:65243] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeHqCRP68VyHNvj1e57N6wAAANQ"]
[Fri Apr 17 16:06:33.943406 2026] [:error] [pid 34273:tid 34283] [client 4.232.151.190:2591] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aeHqCWuQDW686mK3dgHSDwAAAYg"]
[Fri Apr 17 16:06:34.858207 2026] [:error] [pid 9263:tid 9286] [client 20.250.30.167:59937] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeHqChP68VyHNvj1e57N7gAAANU"]
[Fri Apr 17 16:06:35.031711 2026] [:error] [pid 9263:tid 9280] [client 4.232.151.190:29474] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aeHqCxP68VyHNvj1e57N7wAAAM8"]
[Fri Apr 17 16:06:35.766120 2026] [:error] [pid 51878:tid 51897] [client 20.250.30.167:54170] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ta0ol.php"] [unique_id "aeHqC0nQhUtMbw9EsgYvNgAAARE"]
[Fri Apr 17 16:06:36.307984 2026] [:error] [pid 51878:tid 51889] [client 4.232.151.190:35655] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqDEnQhUtMbw9EsgYvOAAAAQk"]
[Fri Apr 17 16:06:36.436594 2026] [:error] [pid 9151:tid 9175] [client 20.250.30.167:61241] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ta0ol.php"] [unique_id "aeHqDMhTVuRPkua22vQdbAAAAA4"]
[Fri Apr 17 16:06:37.330663 2026] [:error] [pid 9263:tid 9282] [client 20.250.30.167:58344] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ta0ol.php"] [unique_id "aeHqDRP68VyHNvj1e57N8wAAANE"]
[Fri Apr 17 16:06:37.889636 2026] [:error] [pid 34273:tid 34298] [client 20.250.30.167:54199] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ta0ol.php"] [unique_id "aeHqDWuQDW686mK3dgHSFAAAAZc"]
[Fri Apr 17 16:06:38.131152 2026] [:error] [pid 9151:tid 9180] [client 4.232.151.190:23571] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqDshTVuRPkua22vQdbQAAABM"]
[Fri Apr 17 16:06:38.864427 2026] [:error] [pid 51878:tid 51883] [client 20.250.30.167:54223] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHqDknQhUtMbw9EsgYvPwAAAQM"]
[Fri Apr 17 16:06:39.672115 2026] [:error] [pid 9153:tid 9223] [client 4.232.151.190:24831] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqD-MHGxkTZX3c45fbnQAAAIU"]
[Fri Apr 17 16:06:39.806517 2026] [:error] [pid 9263:tid 9268] [client 20.250.30.167:61193] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHqDxP68VyHNvj1e57N9AAAAMM"]
[Fri Apr 17 16:06:40.531764 2026] [:error] [pid 51878:tid 51900] [client 20.250.30.167:59310] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHqEEnQhUtMbw9EsgYvQgAAARQ"]
[Fri Apr 17 16:06:41.105119 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:35169] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqERP68VyHNvj1e57N9QAAAM0"]
[Fri Apr 17 16:06:41.124349 2026] [:error] [pid 25010:tid 25032] [client 20.250.30.167:63006] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHqEY-7kkf42RarqQ1P2AAAAVM"]
[Fri Apr 17 16:06:41.842087 2026] [:error] [pid 51878:tid 51897] [client 20.250.30.167:54187] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHqEUnQhUtMbw9EsgYvRgAAARE"]
[Fri Apr 17 16:06:41.863746 2026] [:error] [pid 34273:tid 34292] [client 4.232.151.190:29494] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeHqEWuQDW686mK3dgHSFgAAAZE"]
[Fri Apr 17 16:06:42.563183 2026] [:error] [pid 9263:tid 9288] [client 20.250.30.167:9755] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHqEhP68VyHNvj1e57N-QAAANc"]
[Fri Apr 17 16:06:42.947955 2026] [:error] [pid 9263:tid 9276] [client 4.232.151.190:29446] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeHqEhP68VyHNvj1e57N-gAAAMs"]
[Fri Apr 17 16:06:43.330733 2026] [:error] [pid 9263:tid 9270] [client 20.250.30.167:50717] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHqExP68VyHNvj1e57N_wAAAMU"]
[Fri Apr 17 16:06:44.040560 2026] [:error] [pid 9263:tid 9265] [client 20.250.30.167:53606] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHqFBP68VyHNvj1e57OAwAAAMA"]
[Fri Apr 17 16:06:45.187992 2026] [:error] [pid 9263:tid 9286] [client 20.250.30.167:9631] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHqFRP68VyHNvj1e57OBgAAANU"]
[Fri Apr 17 16:06:45.292467 2026] [:error] [pid 9263:tid 9280] [client 4.232.151.190:40418] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeHqFRP68VyHNvj1e57OBwAAAM8"]
[Fri Apr 17 16:06:46.048113 2026] [:error] [pid 9263:tid 9275] [client 20.250.30.167:9601] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHqFhP68VyHNvj1e57ODgAAAMo"]
[Fri Apr 17 16:06:46.688079 2026] [:error] [pid 9263:tid 9277] [client 20.250.30.167:9606] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHqFhP68VyHNvj1e57OEQAAAMw"]
[Fri Apr 17 16:06:47.359557 2026] [:error] [pid 25010:tid 25034] [client 20.250.30.167:62991] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHqF4-7kkf42RarqQ1P2wAAAVU"]
[Fri Apr 17 16:06:48.137609 2026] [:error] [pid 9152:tid 9202] [client 20.250.30.167:53630] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHqGJJYca8I3TNCwIcU-AAAAEw"]
[Fri Apr 17 16:06:48.796293 2026] [:error] [pid 9152:tid 9205] [client 4.232.151.190:34722] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aeHqGJJYca8I3TNCwIcU-gAAAE8"]
[Fri Apr 17 16:06:48.849554 2026] [:error] [pid 25010:tid 25030] [client 20.250.30.167:53617] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHqGI-7kkf42RarqQ1P3QAAAVE"]
[Fri Apr 17 16:06:49.517874 2026] [:error] [pid 9153:tid 9241] [client 20.250.30.167:9637] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHqGeMHGxkTZX3c45fbogAAAJc"]
[Fri Apr 17 16:06:49.910130 2026] [:error] [pid 9263:tid 9272] [client 4.232.151.190:17452] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeHqGRP68VyHNvj1e57OHAAAAMc"]
[Fri Apr 17 16:06:50.134082 2026] [:error] [pid 9263:tid 9270] [client 20.250.30.167:9650] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHqGhP68VyHNvj1e57OHQAAAMU"]
[Fri Apr 17 16:06:50.781785 2026] [:error] [pid 9152:tid 9203] [client 4.232.151.190:21250] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeHqGpJYca8I3TNCwIcU_QAAAE0"]
[Fri Apr 17 16:06:50.840818 2026] [:error] [pid 51878:tid 51904] [client 20.250.30.167:58306] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHqGknQhUtMbw9EsgYvUQAAARg"]
[Fri Apr 17 16:06:51.550930 2026] [:error] [pid 9263:tid 9288] [client 20.250.30.167:54185] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHqGxP68VyHNvj1e57OIgAAANc"]
[Fri Apr 17 16:06:52.407724 2026] [:error] [pid 9263:tid 9285] [client 20.250.30.167:9617] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHqHBP68VyHNvj1e57OKQAAANQ"]
[Fri Apr 17 16:06:52.652965 2026] [:error] [pid 9263:tid 9277] [client 4.232.151.190:24777] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeHqHBP68VyHNvj1e57OKwAAAMw"]
[Fri Apr 17 16:06:53.263805 2026] [:error] [pid 9152:tid 9209] [client 20.250.30.167:59912] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHqHZJYca8I3TNCwIcU_wAAAFM"]
[Fri Apr 17 16:06:53.975718 2026] [:error] [pid 9152:tid 9200] [client 20.250.30.167:9610] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHqHZJYca8I3TNCwIcVAwAAAEo"]
[Fri Apr 17 16:06:54.626769 2026] [:error] [pid 9152:tid 9194] [client 20.250.30.167:64594] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHqHpJYca8I3TNCwIcVBwAAAEQ"]
[Fri Apr 17 16:06:55.279338 2026] [:error] [pid 25010:tid 25018] [client 20.250.30.167:53594] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHqH4-7kkf42RarqQ1P4QAAAUU"]
[Fri Apr 17 16:06:55.787782 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:27642] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeHqH5JYca8I3TNCwIcVCgAAAEY"]
[Fri Apr 17 16:06:55.981607 2026] [:error] [pid 9153:tid 9227] [client 20.250.30.167:54147] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHqH-MHGxkTZX3c45fbqwAAAIk"]
[Fri Apr 17 16:06:56.672167 2026] [:error] [pid 9152:tid 9190] [client 20.250.30.167:54194] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHqIJJYca8I3TNCwIcVDwAAAEA"]
[Fri Apr 17 16:06:57.490730 2026] [:error] [pid 61523:tid 61547] [client 4.232.151.190:34737] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeHqIcOaH-Pgc7WEf4Nk5AAAAcU"]
[Fri Apr 17 16:06:57.672611 2026] [:error] [pid 9152:tid 9192] [client 20.250.30.167:9433] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHqIZJYca8I3TNCwIcVEwAAAEI"]
[Fri Apr 17 16:06:58.867127 2026] [:error] [pid 9263:tid 9279] [client 20.250.30.167:56943] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHqIhP68VyHNvj1e57OOAAAAM4"]
[Fri Apr 17 16:06:59.439526 2026] [:error] [pid 9263:tid 9289] [client 4.232.151.190:31356] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeHqIxP68VyHNvj1e57OOgAAANg"]
[Fri Apr 17 16:06:59.506807 2026] [:error] [pid 9263:tid 9273] [client 20.250.30.167:46269] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHqIxP68VyHNvj1e57OOwAAAMg"]
[Fri Apr 17 16:07:00.095477 2026] [:error] [pid 9151:tid 9172] [client 20.250.30.167:9416] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHqJMhTVuRPkua22vQdcwAAAAs"]
[Fri Apr 17 16:07:00.924982 2026] [:error] [pid 9151:tid 9164] [client 20.250.30.167:57599] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHqJMhTVuRPkua22vQddgAAAAM"]
[Fri Apr 17 16:07:01.230221 2026] [:error] [pid 9151:tid 9171] [client 4.232.151.190:26267] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeHqJchTVuRPkua22vQdeQAAAAo"]
[Fri Apr 17 16:07:01.468179 2026] [:error] [pid 25010:tid 25022] [client 20.250.30.167:44235] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHqJY-7kkf42RarqQ1P4wAAAUk"]
[Fri Apr 17 16:07:01.733571 2026] [proxy_fcgi:error] [pid 9151:tid 9162] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:02.011419 2026] [proxy_fcgi:error] [pid 9151:tid 9175] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:02.040525 2026] [:error] [pid 9263:tid 9286] [client 20.250.30.167:56936] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHqJhP68VyHNvj1e57OQgAAANU"]
[Fri Apr 17 16:07:02.276838 2026] [proxy_fcgi:error] [pid 9151:tid 9180] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:02.543156 2026] [proxy_fcgi:error] [pid 9151:tid 9173] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:02.627459 2026] [:error] [pid 9153:tid 9222] [client 20.250.30.167:46179] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHqJuMHGxkTZX3c45fbsQAAAIQ"]
[Fri Apr 17 16:07:02.786843 2026] [:error] [pid 9153:tid 9219] [client 4.232.151.190:51738] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeHqJuMHGxkTZX3c45fbsgAAAIE"]
[Fri Apr 17 16:07:02.808551 2026] [proxy_fcgi:error] [pid 9151:tid 9183] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:03.073718 2026] [proxy_fcgi:error] [pid 9151:tid 9169] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:04.346707 2026] [:error] [pid 51878:tid 51887] [client 4.232.151.190:46735] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeHqKEnQhUtMbw9EsgYvVAAAAQc"]
[Fri Apr 17 16:07:04.586865 2026] [proxy_fcgi:error] [pid 9151:tid 9172] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:04.881933 2026] [proxy_fcgi:error] [pid 9151:tid 9181] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:05.151547 2026] [proxy_fcgi:error] [pid 9151:tid 9164] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:05.360971 2026] [:error] [pid 25010:tid 25021] [client 4.232.151.190:18217] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeHqKY-7kkf42RarqQ1P6wAAAUg"]
[Fri Apr 17 16:07:05.416509 2026] [proxy_fcgi:error] [pid 9151:tid 9178] [client 20.91.246.169:7936] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:05.678694 2026] [:error] [pid 9151:tid 9171] [client 20.91.246.169:7936] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeHqKchTVuRPkua22vQdjAAAAAo"]
[Fri Apr 17 16:07:06.186613 2026] [:error] [pid 25010:tid 25032] [client 4.232.151.190:31696] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeHqKo-7kkf42RarqQ1P7wAAAVM"]
[Fri Apr 17 16:07:06.478884 2026] [:error] [pid 9263:tid 9278] [client 20.91.246.169:7518] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeHqKhP68VyHNvj1e57OSQAAAM0"]
[Fri Apr 17 16:07:06.918371 2026] [:error] [pid 9153:tid 9227] [client 4.232.151.190:28381] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aeHqKuMHGxkTZX3c45fbtQAAAIk"]
[Fri Apr 17 16:07:07.388433 2026] [:error] [pid 25010:tid 25024] [client 20.91.246.169:46705] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeHqK4-7kkf42RarqQ1P9gAAAUs"]
[Fri Apr 17 16:07:08.010160 2026] [:error] [pid 51878:tid 51901] [client 4.232.151.190:17410] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeHqLEnQhUtMbw9EsgYvYgAAARU"]
[Fri Apr 17 16:07:08.799196 2026] [:error] [pid 9151:tid 9163] [client 4.232.151.190:24724] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeHqLMhTVuRPkua22vQdjgAAAAI"]
[Fri Apr 17 16:07:08.927054 2026] [:error] [pid 9151:tid 9177] [client 20.91.246.169:41760] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BhqKs28Cw94.php"] [unique_id "aeHqLMhTVuRPkua22vQdkAAAABA"]
[Fri Apr 17 16:07:09.358632 2026] [proxy_fcgi:error] [pid 9263:tid 9285] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:09.716779 2026] [proxy_fcgi:error] [pid 9263:tid 9283] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:09.863982 2026] [:error] [pid 61523:tid 61553] [client 4.232.151.190:24743] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeHqLcOaH-Pgc7WEf4Nk5QAAAcs"]
[Fri Apr 17 16:07:09.956467 2026] [proxy_fcgi:error] [pid 9263:tid 9286] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:10.195835 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:10.438023 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:10.531042 2026] [:error] [pid 9152:tid 9195] [client 4.232.151.190:25959] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aeHqLpJYca8I3TNCwIcVLgAAAEU"]
[Fri Apr 17 16:07:10.610489 2026] [:error] [pid 9152:tid 9202] [client 20.91.246.169:65102] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "aeHqLpJYca8I3TNCwIcVMAAAAEw"]
[Fri Apr 17 16:07:10.677982 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:10.916827 2026] [proxy_fcgi:error] [pid 9263:tid 9266] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:11.304124 2026] [proxy_fcgi:error] [pid 9263:tid 9267] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:11.612974 2026] [:error] [pid 9152:tid 9208] [client 20.91.246.169:46660] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "aeHqL5JYca8I3TNCwIcVMwAAAFI"]
[Fri Apr 17 16:07:11.625092 2026] [proxy_fcgi:error] [pid 9263:tid 9289] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:11.789647 2026] [:error] [pid 9152:tid 9206] [client 4.232.151.190:28366] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeHqL5JYca8I3TNCwIcVNAAAAFA"]
[Fri Apr 17 16:07:11.872000 2026] [proxy_fcgi:error] [pid 9263:tid 9269] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:12.118349 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.250.30.167:64148] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:12.361976 2026] [:error] [pid 9263:tid 9288] [client 20.250.30.167:64148] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "aeHqMBP68VyHNvj1e57OZAAAANc"]
[Fri Apr 17 16:07:12.432580 2026] [:error] [pid 34273:tid 34282] [client 20.91.246.169:41747] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "aeHqMGuQDW686mK3dgHSHwAAAYc"]
[Fri Apr 17 16:07:12.630788 2026] [:error] [pid 51878:tid 51883] [client 4.232.151.190:46724] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aeHqMEnQhUtMbw9EsgYvbAAAAQM"]
[Fri Apr 17 16:07:12.984974 2026] [:error] [pid 34273:tid 34284] [client 20.250.30.167:45607] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "aeHqMGuQDW686mK3dgHSIAAAAYk"]
[Fri Apr 17 16:07:13.324595 2026] [proxy_fcgi:error] [pid 9263:tid 9284] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:13.496255 2026] [:error] [pid 34273:tid 34283] [client 20.91.246.169:49531] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cdn3.php"] [unique_id "aeHqMWuQDW686mK3dgHSJQAAAYg"]
[Fri Apr 17 16:07:13.546404 2026] [:error] [pid 9152:tid 9204] [client 20.250.30.167:57484] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "aeHqMZJYca8I3TNCwIcVOQAAAE4"]
[Fri Apr 17 16:07:13.588852 2026] [proxy_fcgi:error] [pid 9263:tid 9265] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:13.853809 2026] [proxy_fcgi:error] [pid 9263:tid 9277] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:14.119013 2026] [proxy_fcgi:error] [pid 9263:tid 9281] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:14.387385 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:14.652175 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:15.013619 2026] [proxy_fcgi:error] [pid 9263:tid 9279] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:15.278522 2026] [proxy_fcgi:error] [pid 9263:tid 9275] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:15.472827 2026] [:error] [pid 9263:tid 9289] [client 20.250.30.167:57509] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "aeHqMxP68VyHNvj1e57OdQAAANg"]
[Fri Apr 17 16:07:15.596039 2026] [:error] [pid 51878:tid 51897] [client 20.91.246.169:48433] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeHqM0nQhUtMbw9EsgYvbQAAARE"]
[Fri Apr 17 16:07:15.812503 2026] [proxy_fcgi:error] [pid 9263:tid 9287] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:16.138033 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 4.232.151.190:26274] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:07:16.448395 2026] [:error] [pid 9263:tid 9271] [client 4.232.151.190:26274] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeHqNBP68VyHNvj1e57OfQAAAMY"]
[Fri Apr 17 16:07:17.177799 2026] [:error] [pid 34273:tid 34283] [client 4.232.151.190:26247] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeHqNWuQDW686mK3dgHSLwAAAYg"]
[Fri Apr 17 16:07:17.235400 2026] [:error] [pid 51878:tid 51892] [client 20.250.30.167:45572] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aeHqNUnQhUtMbw9EsgYvcgAAAQw"]
[Fri Apr 17 16:07:18.228888 2026] [:error] [pid 34273:tid 34277] [client 4.232.151.190:26786] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeHqNmuQDW686mK3dgHSNAAAAYI"]
[Fri Apr 17 16:07:18.968665 2026] [:error] [pid 34273:tid 34288] [client 20.250.30.167:45569] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aeHqNmuQDW686mK3dgHSOgAAAY0"]
[Fri Apr 17 16:07:19.077815 2026] [:error] [pid 51878:tid 51900] [client 4.232.151.190:31309] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aeHqN0nQhUtMbw9EsgYveQAAARQ"]
[Fri Apr 17 16:07:19.714837 2026] [:error] [pid 9263:tid 9265] [client 20.250.30.167:63733] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aeHqNxP68VyHNvj1e57OfgAAAMA"]
[Fri Apr 17 16:07:19.879599 2026] [:error] [pid 61523:tid 61546] [client 20.91.246.169:47239] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeHqN8OaH-Pgc7WEf4Nk6AAAAcQ"]
[Fri Apr 17 16:07:20.639293 2026] [:error] [pid 25010:tid 25029] [client 20.250.30.167:63686] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aeHqOI-7kkf42RarqQ1QPwAAAVA"]
[Fri Apr 17 16:07:21.214818 2026] [:error] [pid 9151:tid 9179] [client 20.250.30.167:12301] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeHqOchTVuRPkua22vQdnAAAABI"]
[Fri Apr 17 16:07:21.389593 2026] [:error] [pid 9263:tid 9283] [client 4.232.151.190:27592] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeHqORP68VyHNvj1e57OhAAAANI"]
[Fri Apr 17 16:07:22.006085 2026] [:error] [pid 9263:tid 9277] [client 20.91.246.169:45467] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeHqOhP68VyHNvj1e57OiQAAAMw"]
[Fri Apr 17 16:07:22.393522 2026] [:error] [pid 9263:tid 9275] [client 20.250.30.167:45591] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeHqOhP68VyHNvj1e57OigAAAMo"]
[Fri Apr 17 16:07:22.602247 2026] [:error] [pid 9263:tid 9283] [client 4.232.151.190:38565] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeHqOhP68VyHNvj1e57OjgAAANI"]
[Fri Apr 17 16:07:22.918477 2026] [:error] [pid 9263:tid 9287] [client 20.250.30.167:45624] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeHqOhP68VyHNvj1e57OkgAAANY"]
[Fri Apr 17 16:07:23.038911 2026] [:error] [pid 9263:tid 9269] [client 20.91.246.169:62220] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeHqOxP68VyHNvj1e57OkwAAAMQ"]
[Fri Apr 17 16:07:23.653444 2026] [:error] [pid 9263:tid 9265] [client 20.250.30.167:45577] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeHqOxP68VyHNvj1e57OmgAAAMA"]
[Fri Apr 17 16:07:23.886914 2026] [:error] [pid 9263:tid 9289] [client 20.91.246.169:62233] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "aeHqOxP68VyHNvj1e57OnAAAANg"]
[Fri Apr 17 16:07:24.032360 2026] [:error] [pid 9153:tid 9226] [client 4.232.151.190:26778] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeHqPOMHGxkTZX3c45fcAgAAAIg"]
[Fri Apr 17 16:07:24.213702 2026] [:error] [pid 9263:tid 9271] [client 20.250.30.167:63717] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "aeHqPBP68VyHNvj1e57OowAAAMY"]
[Fri Apr 17 16:07:25.005096 2026] [:error] [pid 9151:tid 9181] [client 20.91.246.169:7961] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "aeHqPchTVuRPkua22vQdngAAABQ"]
[Fri Apr 17 16:07:25.196939 2026] [:error] [pid 9152:tid 9212] [client 20.250.30.167:45593] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "aeHqPZJYca8I3TNCwIcVTQAAAFY"]
[Fri Apr 17 16:07:25.573297 2026] [:error] [pid 51878:tid 51892] [client 4.232.151.190:33788] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeHqPUnQhUtMbw9EsgYvgwAAAQw"]
[Fri Apr 17 16:07:25.880589 2026] [:error] [pid 9152:tid 9203] [client 20.91.246.169:47277] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "aeHqPZJYca8I3TNCwIcVUgAAAE0"]
[Fri Apr 17 16:07:26.463864 2026] [:error] [pid 61523:tid 61554] [client 20.250.30.167:49989] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "aeHqPsOaH-Pgc7WEf4Nk7AAAAcw"]
[Fri Apr 17 16:07:26.591546 2026] [:error] [pid 9151:tid 9178] [client 4.232.151.190:26799] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeHqPshTVuRPkua22vQdoAAAABE"]
[Fri Apr 17 16:07:26.757159 2026] [:error] [pid 9153:tid 9230] [client 20.91.246.169:48392] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beerd.php"] [unique_id "aeHqPuMHGxkTZX3c45fcAwAAAIw"]
[Fri Apr 17 16:07:27.383070 2026] [:error] [pid 61523:tid 61544] [client 20.91.246.169:62217] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "aeHqP8OaH-Pgc7WEf4Nk9QAAAcI"]
[Fri Apr 17 16:07:27.844069 2026] [:error] [pid 9152:tid 9199] [client 20.250.30.167:10115] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new3.php"] [unique_id "aeHqP5JYca8I3TNCwIcVVgAAAEk"]
[Fri Apr 17 16:07:28.202131 2026] [:error] [pid 51878:tid 51887] [client 20.91.246.169:46703] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "aeHqQEnQhUtMbw9EsgYviAAAAQc"]
[Fri Apr 17 16:07:28.960399 2026] [:error] [pid 9152:tid 9206] [client 20.91.246.169:61527] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "aeHqQJJYca8I3TNCwIcVWgAAAFA"]
[Fri Apr 17 16:07:29.343121 2026] [:error] [pid 9152:tid 9211] [client 20.250.30.167:50026] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aeHqQZJYca8I3TNCwIcVXAAAAFU"]
[Fri Apr 17 16:07:29.854459 2026] [:error] [pid 9153:tid 9232] [client 20.91.246.169:49473] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhxc.php"] [unique_id "aeHqQeMHGxkTZX3c45fcCgAAAI4"]
[Fri Apr 17 16:07:30.482459 2026] [:error] [pid 61523:tid 61556] [client 20.250.30.167:60794] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aeHqQsOaH-Pgc7WEf4Nk-wAAAc4"]
[Fri Apr 17 16:07:31.147114 2026] [:error] [pid 25010:tid 25034] [client 4.232.151.190:32902] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeHqQ4-7kkf42RarqQ1QQwAAAVU"]
[Fri Apr 17 16:07:31.177361 2026] [:error] [pid 61523:tid 61564] [client 20.91.246.169:45449] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "aeHqQ8OaH-Pgc7WEf4Nk_QAAAdY"]
[Fri Apr 17 16:07:31.994737 2026] [:error] [pid 25010:tid 25031] [client 4.232.151.190:26807] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeHqQ4-7kkf42RarqQ1QRgAAAVI"]
[Fri Apr 17 16:07:32.368618 2026] [:error] [pid 9151:tid 9162] [client 20.91.246.169:45496] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "aeHqRMhTVuRPkua22vQdowAAAAE"]
[Fri Apr 17 16:07:33.079557 2026] [:error] [pid 9263:tid 9289] [client 20.250.30.167:49984] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aeHqRRP68VyHNvj1e57OsAAAANg"]
[Fri Apr 17 16:07:33.920146 2026] [:error] [pid 9152:tid 9200] [client 20.91.246.169:49479] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "aeHqRZJYca8I3TNCwIcVYgAAAEo"]
[Fri Apr 17 16:07:34.008037 2026] [:error] [pid 9152:tid 9195] [client 4.232.151.190:26760] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeHqRpJYca8I3TNCwIcVYwAAAEU"]
[Fri Apr 17 16:07:34.521847 2026] [:error] [pid 61523:tid 61546] [client 20.250.30.167:63695] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nw.php"] [unique_id "aeHqRsOaH-Pgc7WEf4NlAwAAAcQ"]
[Fri Apr 17 16:07:34.966165 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:46675] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/161dfd072f.php"] [unique_id "aeHqRhP68VyHNvj1e57OswAAAME"]
[Fri Apr 17 16:07:35.255325 2026] [:error] [pid 9263:tid 9277] [client 20.250.30.167:45596] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeHqRxP68VyHNvj1e57OtwAAAMw"]
[Fri Apr 17 16:07:35.882401 2026] [:error] [pid 9153:tid 9218] [client 4.232.151.190:52237] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeHqR-MHGxkTZX3c45fcFQAAAIA"]
[Fri Apr 17 16:07:36.260437 2026] [:error] [pid 9263:tid 9270] [client 20.250.30.167:43758] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeHqSBP68VyHNvj1e57OvAAAAMU"]
[Fri Apr 17 16:07:36.926040 2026] [:error] [pid 9263:tid 9274] [client 20.91.246.169:47295] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeHqSBP68VyHNvj1e57OwQAAAMk"]
[Fri Apr 17 16:07:37.005925 2026] [:error] [pid 9263:tid 9269] [client 4.232.151.190:21320] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeHqSRP68VyHNvj1e57OwgAAAMQ"]
[Fri Apr 17 16:07:37.449259 2026] [:error] [pid 9263:tid 9289] [client 20.250.30.167:50002] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeHqSRP68VyHNvj1e57OxgAAANg"]
[Fri Apr 17 16:07:38.489020 2026] [:error] [pid 9263:tid 9276] [client 20.91.246.169:61563] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeHqShP68VyHNvj1e57OzQAAAMs"]
[Fri Apr 17 16:07:38.606452 2026] [:error] [pid 61523:tid 61564] [client 20.250.30.167:63785] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeHqSsOaH-Pgc7WEf4NlCAAAAdY"]
[Fri Apr 17 16:07:38.672944 2026] [:error] [pid 61523:tid 61562] [client 4.232.151.190:32897] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeHqSsOaH-Pgc7WEf4NlCQAAAdQ"]
[Fri Apr 17 16:07:39.268288 2026] [:error] [pid 61523:tid 61551] [client 20.250.30.167:44930] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHqS8OaH-Pgc7WEf4NlDQAAAck"]
[Fri Apr 17 16:07:39.275673 2026] [:error] [pid 61523:tid 61560] [client 4.232.151.190:31770] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeHqS8OaH-Pgc7WEf4NlDgAAAdI"]
[Fri Apr 17 16:07:39.990006 2026] [:error] [pid 51878:tid 51884] [client 20.250.30.167:12300] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHqS0nQhUtMbw9EsgYvjQAAAQQ"]
[Fri Apr 17 16:07:39.992338 2026] [:error] [pid 51878:tid 51901] [client 4.232.151.190:39032] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeHqS0nQhUtMbw9EsgYvjgAAARU"]
[Fri Apr 17 16:07:40.487333 2026] [:error] [pid 51878:tid 51894] [client 20.91.246.169:65050] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeHqTEnQhUtMbw9EsgYvjwAAAQ4"]
[Fri Apr 17 16:07:40.631828 2026] [:error] [pid 9263:tid 9281] [client 4.232.151.190:31791] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeHqTBP68VyHNvj1e57O1gAAANA"]
[Fri Apr 17 16:07:40.706016 2026] [:error] [pid 9152:tid 9193] [client 20.250.30.167:43747] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHqTJJYca8I3TNCwIcVaQAAAEM"]
[Fri Apr 17 16:07:41.401991 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:27530] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeHqTRP68VyHNvj1e57O2gAAAM0"]
[Fri Apr 17 16:07:41.817071 2026] [:error] [pid 61523:tid 61552] [client 20.250.30.167:44945] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHqTcOaH-Pgc7WEf4NlEgAAAco"]
[Fri Apr 17 16:07:42.031380 2026] [:error] [pid 61523:tid 61555] [client 4.232.151.190:38987] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeHqTsOaH-Pgc7WEf4NlEwAAAc0"]
[Fri Apr 17 16:07:42.514320 2026] [:error] [pid 9263:tid 9280] [client 20.250.30.167:63800] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHqThP68VyHNvj1e57O3wAAAM8"]
[Fri Apr 17 16:07:42.873221 2026] [:error] [pid 61523:tid 61545] [client 4.232.151.190:27642] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeHqTsOaH-Pgc7WEf4NlFQAAAcM"]
[Fri Apr 17 16:07:42.966813 2026] [:error] [pid 61523:tid 61566] [client 20.91.246.169:52376] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeHqTsOaH-Pgc7WEf4NlFgAAAdg"]
[Fri Apr 17 16:07:43.290283 2026] [:error] [pid 61523:tid 61564] [client 20.250.30.167:50639] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHqT8OaH-Pgc7WEf4NlGAAAAdY"]
[Fri Apr 17 16:07:43.648452 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:48210] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeHqTxP68VyHNvj1e57O4QAAAM0"]
[Fri Apr 17 16:07:43.984733 2026] [:error] [pid 9263:tid 9266] [client 20.250.30.167:60797] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHqTxP68VyHNvj1e57O4wAAAME"]
[Fri Apr 17 16:07:44.134913 2026] [:error] [pid 9263:tid 9269] [client 20.91.246.169:65028] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeHqUBP68VyHNvj1e57O5AAAAMQ"]
[Fri Apr 17 16:07:44.544320 2026] [:error] [pid 9263:tid 9281] [client 20.250.30.167:44968] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHqUBP68VyHNvj1e57O5gAAANA"]
[Fri Apr 17 16:07:45.009839 2026] [:error] [pid 9263:tid 9284] [client 4.232.151.190:39010] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeHqURP68VyHNvj1e57O6QAAANM"]
[Fri Apr 17 16:07:45.164586 2026] [:error] [pid 9263:tid 9288] [client 20.250.30.167:50685] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHqURP68VyHNvj1e57O7AAAANc"]
[Fri Apr 17 16:07:45.402522 2026] [:error] [pid 9151:tid 9184] [client 20.91.246.169:65031] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeHqUchTVuRPkua22vQdpwAAABc"]
[Fri Apr 17 16:07:45.718505 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:30997] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aeHqURP68VyHNvj1e57O7wAAAM0"]
[Fri Apr 17 16:07:46.217259 2026] [:error] [pid 34273:tid 34295] [client 20.250.30.167:50659] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHqUmuQDW686mK3dgHSSAAAAZQ"]
[Fri Apr 17 16:07:46.427841 2026] [:error] [pid 9153:tid 9225] [client 4.232.151.190:30980] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHqUuMHGxkTZX3c45fcGAAAAIc"]
[Fri Apr 17 16:07:46.882814 2026] [:error] [pid 25010:tid 25028] [client 20.91.246.169:45455] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeHqUo-7kkf42RarqQ1QTgAAAU8"]
[Fri Apr 17 16:07:47.250291 2026] [:error] [pid 9153:tid 9240] [client 4.232.151.190:23937] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHqU-MHGxkTZX3c45fcGwAAAJY"]
[Fri Apr 17 16:07:47.693126 2026] [:error] [pid 9152:tid 9206] [client 20.250.30.167:50670] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHqU5JYca8I3TNCwIcVdQAAAFA"]
[Fri Apr 17 16:07:48.119728 2026] [:error] [pid 51878:tid 51903] [client 4.232.151.190:20556] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHqVEnQhUtMbw9EsgYvkwAAARc"]
[Fri Apr 17 16:07:48.294555 2026] [:error] [pid 51878:tid 51900] [client 20.91.246.169:54378] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeHqVEnQhUtMbw9EsgYvlAAAARQ"]
[Fri Apr 17 16:07:48.980658 2026] [:error] [pid 51878:tid 51902] [client 4.232.151.190:46710] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeHqVEnQhUtMbw9EsgYvlQAAARY"]
[Fri Apr 17 16:07:49.252519 2026] [:error] [pid 9263:tid 9289] [client 20.250.30.167:50674] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHqVRP68VyHNvj1e57O9AAAANg"]
[Fri Apr 17 16:07:49.979508 2026] [:error] [pid 51878:tid 51885] [client 20.91.246.169:44714] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "aeHqVUnQhUtMbw9EsgYvlgAAAQU"]
[Fri Apr 17 16:07:50.697058 2026] [:error] [pid 51878:tid 51880] [client 4.232.151.190:46711] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeHqVknQhUtMbw9EsgYvmQAAAQA"]
[Fri Apr 17 16:07:51.035745 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:47916] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "aeHqVxP68VyHNvj1e57O-QAAAME"]
[Fri Apr 17 16:07:51.504393 2026] [:error] [pid 9263:tid 9275] [client 20.250.30.167:62950] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHqVxP68VyHNvj1e57O-gAAAMo"]
[Fri Apr 17 16:07:51.595159 2026] [:error] [pid 9263:tid 9287] [client 4.232.151.190:48153] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeHqVxP68VyHNvj1e57O-wAAANY"]
[Fri Apr 17 16:07:52.249277 2026] [:error] [pid 9152:tid 9194] [client 20.91.246.169:50035] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "aeHqWJJYca8I3TNCwIcVgAAAAEQ"]
[Fri Apr 17 16:07:52.794575 2026] [:error] [pid 9263:tid 9284] [client 4.232.151.190:28289] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeHqWBP68VyHNvj1e57O_gAAANM"]
[Fri Apr 17 16:07:52.867255 2026] [:error] [pid 9263:tid 9288] [client 20.250.30.167:62969] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHqWBP68VyHNvj1e57PAAAAANc"]
[Fri Apr 17 16:07:53.215375 2026] [:error] [pid 25010:tid 25036] [client 20.91.246.169:47901] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/RIP.php"] [unique_id "aeHqWY-7kkf42RarqQ1QUQAAAVc"]
[Fri Apr 17 16:07:55.411250 2026] [:error] [pid 25010:tid 25016] [client 20.91.246.169:44706] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqW4-7kkf42RarqQ1QUgAAAUM"]
[Fri Apr 17 16:07:57.063454 2026] [:error] [pid 9263:tid 9267] [client 20.250.30.167:63775] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHqXRP68VyHNvj1e57PBQAAAMI"]
[Fri Apr 17 16:07:57.660219 2026] [:error] [pid 51878:tid 51901] [client 4.232.151.190:46669] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aeHqXUnQhUtMbw9EsgYvqgAAARU"]
[Fri Apr 17 16:07:58.543909 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:50643] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeHqXhP68VyHNvj1e57PCgAAAM0"]
[Fri Apr 17 16:07:59.314670 2026] [:error] [pid 9263:tid 9266] [client 4.232.151.190:38482] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeHqXxP68VyHNvj1e57PDwAAAME"]
[Fri Apr 17 16:07:59.491826 2026] [:error] [pid 51878:tid 51894] [client 20.250.30.167:44986] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHqX0nQhUtMbw9EsgYvrQAAAQ4"]
[Fri Apr 17 16:07:59.771135 2026] [:error] [pid 61523:tid 61563] [client 20.91.246.169:49986] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqX8OaH-Pgc7WEf4NlIwAAAdU"]
[Fri Apr 17 16:07:59.959776 2026] [:error] [pid 51878:tid 51881] [client 4.232.151.190:37497] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeHqX0nQhUtMbw9EsgYvrgAAAQE"]
[Fri Apr 17 16:08:01.257681 2026] [:error] [pid 9263:tid 9276] [client 20.91.246.169:54347] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aeHqYRP68VyHNvj1e57PGQAAAMs"]
[Fri Apr 17 16:08:02.198082 2026] [:error] [pid 61523:tid 61548] [client 20.250.30.167:60782] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHqYsOaH-Pgc7WEf4NlJgAAAcY"]
[Fri Apr 17 16:08:04.865142 2026] [:error] [pid 9153:tid 9241] [client 20.250.30.167:49987] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHqZOMHGxkTZX3c45fcIQAAAJc"]
[Fri Apr 17 16:08:05.040469 2026] [:error] [pid 61523:tid 61559] [client 4.232.151.190:2395] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aeHqZcOaH-Pgc7WEf4NlNAAAAdE"]
[Fri Apr 17 16:08:05.909667 2026] [proxy_fcgi:error] [pid 9153:tid 9242] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:06.198034 2026] [proxy_fcgi:error] [pid 9153:tid 9240] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:06.219893 2026] [:error] [pid 9152:tid 9192] [client 4.232.151.190:37468] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeHqZpJYca8I3TNCwIcVkAAAAEI"]
[Fri Apr 17 16:08:06.499456 2026] [proxy_fcgi:error] [pid 9153:tid 9230] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:06.800428 2026] [proxy_fcgi:error] [pid 9153:tid 9237] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:07.017113 2026] [:error] [pid 9151:tid 9168] [client 20.250.30.167:43751] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHqZ8hTVuRPkua22vQdsAAAAAc"]
[Fri Apr 17 16:08:07.109323 2026] [proxy_fcgi:error] [pid 9153:tid 9220] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:07.396435 2026] [proxy_fcgi:error] [pid 9153:tid 9238] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:07.634770 2026] [:error] [pid 25010:tid 25020] [client 4.232.151.190:36341] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeHqZ4-7kkf42RarqQ1QWAAAAUc"]
[Fri Apr 17 16:08:07.680511 2026] [proxy_fcgi:error] [pid 9153:tid 9233] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:07.975897 2026] [proxy_fcgi:error] [pid 9153:tid 9229] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:08.267655 2026] [proxy_fcgi:error] [pid 9153:tid 9239] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:08.556995 2026] [proxy_fcgi:error] [pid 9153:tid 9236] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:08.878899 2026] [proxy_fcgi:error] [pid 9153:tid 9219] [client 20.91.246.169:53971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:09.174309 2026] [:error] [pid 9153:tid 9232] [client 20.91.246.169:53971] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxivicLhot.php"] [unique_id "aeHqaeMHGxkTZX3c45fcLwAAAI4"]
[Fri Apr 17 16:08:09.559363 2026] [:error] [pid 9152:tid 9195] [client 20.250.30.167:60761] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHqaZJYca8I3TNCwIcVlwAAAEU"]
[Fri Apr 17 16:08:11.014608 2026] [:error] [pid 61523:tid 61556] [client 4.232.151.190:57230] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeHqa8OaH-Pgc7WEf4NlPAAAAc4"]
[Fri Apr 17 16:08:11.711459 2026] [:error] [pid 51878:tid 51883] [client 20.250.30.167:63792] [client 20.250.30.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeHqa0nQhUtMbw9EsgYvvQAAAQM"]
[Fri Apr 17 16:08:11.884160 2026] [:error] [pid 51878:tid 51892] [client 4.232.151.190:30086] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aeHqa0nQhUtMbw9EsgYvvgAAAQw"]
[Fri Apr 17 16:08:12.770295 2026] [:error] [pid 9153:tid 9242] [client 4.232.151.190:36289] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeHqbOMHGxkTZX3c45fcMgAAAJg"]
[Fri Apr 17 16:08:13.362360 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 20.250.30.167:44971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:13.621698 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 20.250.30.167:44971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:13.861326 2026] [proxy_fcgi:error] [pid 51878:tid 51899] [client 20.250.30.167:44971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:13.872019 2026] [:error] [pid 51878:tid 51882] [client 4.232.151.190:37977] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeHqbUnQhUtMbw9EsgYv1QAAAQI"]
[Fri Apr 17 16:08:14.143512 2026] [proxy_fcgi:error] [pid 51878:tid 51902] [client 20.250.30.167:44971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:14.383360 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 20.250.30.167:44971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:14.644294 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 20.250.30.167:44971] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:15.305882 2026] [:error] [pid 51878:tid 51885] [client 4.232.151.190:51798] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aeHqb0nQhUtMbw9EsgYv3gAAAQU"]
[Fri Apr 17 16:08:16.282005 2026] [proxy_fcgi:error] [pid 51878:tid 51901] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:16.518318 2026] [proxy_fcgi:error] [pid 51878:tid 51887] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:16.999527 2026] [proxy_fcgi:error] [pid 51878:tid 51886] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:17.235776 2026] [proxy_fcgi:error] [pid 51878:tid 51903] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:17.471589 2026] [proxy_fcgi:error] [pid 51878:tid 51885] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:17.720029 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:18.430079 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:18.679085 2026] [proxy_fcgi:error] [pid 51878:tid 51880] [client 4.232.151.190:57276] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:08:18.931595 2026] [:error] [pid 51878:tid 51904] [client 4.232.151.190:57276] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aeHqcknQhUtMbw9EsgYv9wAAARg"]
[Fri Apr 17 16:08:19.786441 2026] [:error] [pid 34273:tid 34280] [client 4.232.151.190:50667] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aeHqc2uQDW686mK3dgHSXAAAAYU"]
[Fri Apr 17 16:08:20.831368 2026] [:error] [pid 51878:tid 51893] [client 4.232.151.190:33324] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aeHqdEnQhUtMbw9EsgYv-gAAAQ0"]
[Fri Apr 17 16:08:21.420486 2026] [:error] [pid 25010:tid 25018] [client 4.232.151.190:51827] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "aeHqdY-7kkf42RarqQ1QYgAAAUU"]
[Fri Apr 17 16:08:24.237968 2026] [:error] [pid 9153:tid 9233] [client 4.232.151.190:51776] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeHqeOMHGxkTZX3c45fcNwAAAI8"]
[Fri Apr 17 16:08:27.836955 2026] [:error] [pid 9152:tid 9213] [client 4.232.151.190:48170] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeHqe5JYca8I3TNCwIcVtQAAAFc"]
[Fri Apr 17 16:08:28.620606 2026] [:error] [pid 9263:tid 9283] [client 20.91.246.169:41739] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHqfBP68VyHNvj1e57PTAAAANI"]
[Fri Apr 17 16:08:29.030872 2026] [:error] [pid 34273:tid 34290] [client 4.232.151.190:25164] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeHqfWuQDW686mK3dgHSZQAAAY8"]
[Fri Apr 17 16:08:30.938450 2026] [:error] [pid 51878:tid 51884] [client 4.232.151.190:50682] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeHqfknQhUtMbw9EsgYwDQAAAQQ"]
[Fri Apr 17 16:08:32.090106 2026] [:error] [pid 34273:tid 34286] [client 20.91.246.169:48440] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHqgGuQDW686mK3dgHSaAAAAYs"]
[Fri Apr 17 16:08:32.476390 2026] [:error] [pid 9153:tid 9229] [client 4.232.151.190:55942] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeHqgOMHGxkTZX3c45fcOQAAAIs"]
[Fri Apr 17 16:08:33.514014 2026] [:error] [pid 9152:tid 9193] [client 20.91.246.169:49512] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHqgZJYca8I3TNCwIcVwwAAAEM"]
[Fri Apr 17 16:08:33.667306 2026] [:error] [pid 25010:tid 25013] [client 4.232.151.190:50636] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeHqgY-7kkf42RarqQ1QaQAAAUA"]
[Fri Apr 17 16:08:34.460114 2026] [:error] [pid 9153:tid 9224] [client 20.91.246.169:48439] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeHqguMHGxkTZX3c45fcPgAAAIY"]
[Fri Apr 17 16:08:34.602320 2026] [:error] [pid 9151:tid 9170] [client 4.232.151.190:38483] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeHqgshTVuRPkua22vQdwQAAAAk"]
[Fri Apr 17 16:08:35.376722 2026] [:error] [pid 34273:tid 34289] [client 20.91.246.169:48447] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHqg2uQDW686mK3dgHSaQAAAY4"]
[Fri Apr 17 16:08:35.962449 2026] [:error] [pid 61523:tid 61551] [client 4.232.151.190:23242] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeHqg8OaH-Pgc7WEf4NlZgAAAck"]
[Fri Apr 17 16:08:36.274534 2026] [:error] [pid 9263:tid 9286] [client 20.91.246.169:7959] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHqhBP68VyHNvj1e57PYQAAANU"]
[Fri Apr 17 16:08:37.368361 2026] [:error] [pid 51878:tid 51891] [client 20.91.246.169:48391] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHqhUnQhUtMbw9EsgYwFQAAAQs"]
[Fri Apr 17 16:08:38.112914 2026] [:error] [pid 61523:tid 61564] [client 20.91.246.169:46690] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aeHqhsOaH-Pgc7WEf4NlaQAAAdY"]
[Fri Apr 17 16:08:38.779502 2026] [:error] [pid 9152:tid 9193] [client 20.91.246.169:54757] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "aeHqhpJYca8I3TNCwIcVzwAAAEM"]
[Fri Apr 17 16:08:39.507637 2026] [:error] [pid 61523:tid 61545] [client 20.91.246.169:48403] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "aeHqh8OaH-Pgc7WEf4NlawAAAcM"]
[Fri Apr 17 16:08:40.667954 2026] [:error] [pid 25010:tid 25036] [client 20.91.246.169:54780] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "aeHqiI-7kkf42RarqQ1QcwAAAVc"]
[Fri Apr 17 16:08:42.148684 2026] [:error] [pid 61523:tid 61547] [client 20.91.246.169:48430] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxeyc.php"] [unique_id "aeHqisOaH-Pgc7WEf4NldQAAAcU"]
[Fri Apr 17 16:08:42.275783 2026] [:error] [pid 9263:tid 9265] [client 4.232.151.190:56637] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeHqihP68VyHNvj1e57PbAAAAMA"]
[Fri Apr 17 16:08:43.242748 2026] [:error] [pid 9152:tid 9208] [client 20.91.246.169:41744] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeHqi5JYca8I3TNCwIcV0gAAAFI"]
[Fri Apr 17 16:08:44.474490 2026] [:error] [pid 9263:tid 9267] [client 20.91.246.169:48428] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeHqjBP68VyHNvj1e57PcgAAAMI"]
[Fri Apr 17 16:08:44.699051 2026] [:error] [pid 34273:tid 34283] [client 4.232.151.190:38981] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeHqjGuQDW686mK3dgHSdwAAAYg"]
[Fri Apr 17 16:08:45.990908 2026] [:error] [pid 9263:tid 9276] [client 20.91.246.169:51260] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeHqjRP68VyHNvj1e57PeQAAAMs"]
[Fri Apr 17 16:08:46.362514 2026] [:error] [pid 9263:tid 9288] [client 4.232.151.190:47230] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeHqjhP68VyHNvj1e57PfAAAANc"]
[Fri Apr 17 16:08:47.301776 2026] [:error] [pid 61523:tid 61566] [client 4.232.151.190:23970] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aeHqj8OaH-Pgc7WEf4NlggAAAdg"]
[Fri Apr 17 16:08:48.132057 2026] [:error] [pid 61523:tid 61564] [client 20.91.246.169:54729] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aeHqkMOaH-Pgc7WEf4NlhwAAAdY"]
[Fri Apr 17 16:08:48.424629 2026] [:error] [pid 61523:tid 61553] [client 4.232.151.190:61925] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeHqkMOaH-Pgc7WEf4NliQAAAcs"]
[Fri Apr 17 16:08:49.424939 2026] [:error] [pid 51878:tid 51901] [client 20.91.246.169:7954] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHqkUnQhUtMbw9EsgYwKAAAARU"]
[Fri Apr 17 16:08:50.610619 2026] [:error] [pid 9263:tid 9279] [client 20.91.246.169:54720] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHqkhP68VyHNvj1e57PiQAAAM4"]
[Fri Apr 17 16:08:52.328323 2026] [:error] [pid 9152:tid 9203] [client 4.232.151.190:41644] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeHqlJJYca8I3TNCwIcV4AAAAE0"]
[Fri Apr 17 16:08:53.086054 2026] [:error] [pid 61523:tid 61553] [client 4.232.151.190:17904] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeHqlcOaH-Pgc7WEf4NlkwAAAcs"]
[Fri Apr 17 16:08:53.150544 2026] [:error] [pid 9151:tid 9165] [client 20.91.246.169:61522] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHqlchTVuRPkua22vQdxAAAAAQ"]
[Fri Apr 17 16:08:54.888659 2026] [:error] [pid 25010:tid 25033] [client 4.232.151.190:36971] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aeHqlo-7kkf42RarqQ1QfQAAAVQ"]
[Fri Apr 17 16:08:55.284403 2026] [:error] [pid 9263:tid 9284] [client 20.91.246.169:7992] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeHqlxP68VyHNvj1e57PkAAAANM"]
[Fri Apr 17 16:08:55.529787 2026] [:error] [pid 9263:tid 9272] [client 4.232.151.190:17890] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeHqlxP68VyHNvj1e57PkgAAAMc"]
[Fri Apr 17 16:08:56.716882 2026] [:error] [pid 61523:tid 61561] [client 20.91.246.169:49489] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "aeHqmMOaH-Pgc7WEf4NlnwAAAdM"]
[Fri Apr 17 16:08:58.110866 2026] [:error] [pid 61523:tid 61566] [client 20.91.246.169:54756] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "aeHqmsOaH-Pgc7WEf4NlpwAAAdg"]
[Fri Apr 17 16:08:58.275181 2026] [:error] [pid 9153:tid 9224] [client 4.232.151.190:36970] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeHqmuMHGxkTZX3c45fcSAAAAIY"]
[Fri Apr 17 16:08:59.785211 2026] [:error] [pid 25010:tid 25020] [client 20.91.246.169:48416] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "aeHqm4-7kkf42RarqQ1QhAAAAUc"]
[Fri Apr 17 16:08:59.818774 2026] [:error] [pid 51878:tid 51882] [client 4.232.151.190:31029] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeHqm0nQhUtMbw9EsgYwLgAAAQI"]
[Fri Apr 17 16:09:00.974748 2026] [:error] [pid 9152:tid 9214] [client 4.232.151.190:2053] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aeHqnJJYca8I3TNCwIcV8QAAAFg"]
[Fri Apr 17 16:09:01.828392 2026] [:error] [pid 51878:tid 51883] [client 4.232.151.190:22846] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeHqnUnQhUtMbw9EsgYwMwAAAQM"]
[Fri Apr 17 16:09:01.872305 2026] [:error] [pid 61523:tid 61559] [client 20.91.246.169:7940] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fyflv.php"] [unique_id "aeHqncOaH-Pgc7WEf4NluAAAAdE"]
[Fri Apr 17 16:09:03.085533 2026] [:error] [pid 51878:tid 51894] [client 20.91.246.169:54768] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-942.php"] [unique_id "aeHqn0nQhUtMbw9EsgYwNwAAAQ4"]
[Fri Apr 17 16:09:03.436813 2026] [:error] [pid 61523:tid 61560] [client 4.232.151.190:22794] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeHqn8OaH-Pgc7WEf4NlvQAAAdI"]
[Fri Apr 17 16:09:05.028857 2026] [:error] [pid 51878:tid 51897] [client 4.232.151.190:2163] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeHqoUnQhUtMbw9EsgYwPAAAARE"]
[Fri Apr 17 16:09:06.224448 2026] [:error] [pid 34273:tid 34281] [client 4.232.151.190:2175] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aeHqomuQDW686mK3dgHShgAAAYY"]
[Fri Apr 17 16:09:06.780215 2026] [:error] [pid 61523:tid 61557] [client 20.91.246.169:47289] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-942.php"] [unique_id "aeHqosOaH-Pgc7WEf4NlwgAAAc8"]
[Fri Apr 17 16:09:06.969034 2026] [:error] [pid 34273:tid 34298] [client 4.232.151.190:36944] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeHqomuQDW686mK3dgHSiAAAAZc"]
[Fri Apr 17 16:09:07.886735 2026] [:error] [pid 9153:tid 9235] [client 4.232.151.190:28330] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeHqo-MHGxkTZX3c45fcWQAAAJE"]
[Fri Apr 17 16:09:08.779099 2026] [:error] [pid 9152:tid 9191] [client 4.232.151.190:33832] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeHqpJJYca8I3TNCwIcV9AAAAEE"]
[Fri Apr 17 16:09:10.022353 2026] [:error] [pid 9153:tid 9230] [client 4.232.151.190:18261] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "aeHqpuMHGxkTZX3c45fcXgAAAIw"]
[Fri Apr 17 16:09:10.313106 2026] [proxy_fcgi:error] [pid 9152:tid 9202] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:10.652968 2026] [proxy_fcgi:error] [pid 9152:tid 9208] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:10.724271 2026] [:error] [pid 9151:tid 9162] [client 4.232.151.190:2086] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeHqpshTVuRPkua22vQdygAAAAE"]
[Fri Apr 17 16:09:11.228249 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:11.518263 2026] [:error] [pid 9152:tid 9197] [client 4.232.151.190:18265] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeHqp5JYca8I3TNCwIcV-wAAAEc"]
[Fri Apr 17 16:09:12.345778 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:12.662283 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:12.993437 2026] [proxy_fcgi:error] [pid 9152:tid 9210] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:13.560876 2026] [:error] [pid 9152:tid 9214] [client 4.232.151.190:56696] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeHqqZJYca8I3TNCwIcWBQAAAFg"]
[Fri Apr 17 16:09:13.589467 2026] [proxy_fcgi:error] [pid 9152:tid 9199] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:14.024204 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:14.316062 2026] [:error] [pid 9152:tid 9202] [client 4.232.151.190:33845] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aeHqqpJYca8I3TNCwIcWCgAAAEw"]
[Fri Apr 17 16:09:14.327317 2026] [proxy_fcgi:error] [pid 9152:tid 9190] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:14.635279 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:14.988273 2026] [proxy_fcgi:error] [pid 9152:tid 9192] [client 20.91.246.169:49510] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:15.342287 2026] [:error] [pid 9152:tid 9212] [client 20.91.246.169:49510] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHqq5JYca8I3TNCwIcWEwAAAFY"]
[Fri Apr 17 16:09:16.397451 2026] [:error] [pid 9153:tid 9241] [client 20.91.246.169:46689] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHqrOMHGxkTZX3c45fcZgAAAJc"]
[Fri Apr 17 16:09:16.851393 2026] [:error] [pid 25010:tid 25022] [client 4.232.151.190:18253] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aeHqrI-7kkf42RarqQ1QlQAAAUk"]
[Fri Apr 17 16:09:17.719785 2026] [:error] [pid 9152:tid 9194] [client 4.232.151.190:36980] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aeHqrZJYca8I3TNCwIcWFgAAAEQ"]
[Fri Apr 17 16:09:18.844077 2026] [:error] [pid 9152:tid 9196] [client 20.91.246.169:41782] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHqrpJYca8I3TNCwIcWHAAAAEY"]
[Fri Apr 17 16:09:19.224633 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:19.461809 2026] [proxy_fcgi:error] [pid 9152:tid 9212] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:19.976289 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:20.481339 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:20.717564 2026] [proxy_fcgi:error] [pid 9152:tid 9197] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:21.194129 2026] [proxy_fcgi:error] [pid 9152:tid 9204] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:21.668058 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 4.232.151.190:2162] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:09:22.004308 2026] [:error] [pid 9152:tid 9213] [client 4.232.151.190:2162] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeHqspJYca8I3TNCwIcWOAAAAFc"]
[Fri Apr 17 16:09:23.053294 2026] [:error] [pid 9151:tid 9175] [client 4.232.151.190:17532] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeHqs8hTVuRPkua22vQd1wAAAA4"]
[Fri Apr 17 16:09:23.895048 2026] [:error] [pid 61523:tid 61558] [client 20.91.246.169:46683] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeHqs8OaH-Pgc7WEf4NlyAAAAdA"]
[Fri Apr 17 16:09:24.471643 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:24419] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeHqtJJYca8I3TNCwIcWPQAAAEY"]
[Fri Apr 17 16:09:25.269669 2026] [:error] [pid 61523:tid 61562] [client 4.232.151.190:24404] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aeHqtcOaH-Pgc7WEf4NlygAAAdQ"]
[Fri Apr 17 16:09:25.890333 2026] [:error] [pid 61523:tid 61559] [client 4.232.151.190:42273] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeHqtcOaH-Pgc7WEf4NlzAAAAdE"]
[Fri Apr 17 16:09:26.682664 2026] [:error] [pid 51878:tid 51894] [client 4.232.151.190:2115] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeHqtknQhUtMbw9EsgYwUAAAAQ4"]
[Fri Apr 17 16:09:27.519375 2026] [:error] [pid 61523:tid 61561] [client 4.232.151.190:39464] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeHqt8OaH-Pgc7WEf4Nl1wAAAdM"]
[Fri Apr 17 16:09:28.446823 2026] [:error] [pid 61523:tid 61556] [client 4.232.151.190:26352] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aeHquMOaH-Pgc7WEf4Nl2AAAAc4"]
[Fri Apr 17 16:09:29.246273 2026] [:error] [pid 9263:tid 9280] [client 4.232.151.190:42285] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeHquRP68VyHNvj1e57PugAAAM8"]
[Fri Apr 17 16:09:30.112319 2026] [:error] [pid 9263:tid 9278] [client 4.232.151.190:25596] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeHquhP68VyHNvj1e57PwQAAAM0"]
[Fri Apr 17 16:09:30.618831 2026] [:error] [pid 9263:tid 9281] [client 20.91.246.169:41763] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHquhP68VyHNvj1e57PxwAAANA"]
[Fri Apr 17 16:09:32.151055 2026] [:error] [pid 61523:tid 61562] [client 4.232.151.190:32080] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeHqvMOaH-Pgc7WEf4Nl4QAAAdQ"]
[Fri Apr 17 16:09:33.040344 2026] [:error] [pid 9153:tid 9239] [client 4.232.151.190:46392] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aeHqveMHGxkTZX3c45fceQAAAJU"]
[Fri Apr 17 16:09:33.588566 2026] [:error] [pid 9152:tid 9195] [client 20.91.246.169:54728] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHqvZJYca8I3TNCwIcWUQAAAEU"]
[Fri Apr 17 16:09:34.122903 2026] [:error] [pid 25010:tid 25032] [client 4.232.151.190:50594] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeHqvo-7kkf42RarqQ1QoAAAAVM"]
[Fri Apr 17 16:09:35.372204 2026] [:error] [pid 9263:tid 9276] [client 4.232.151.190:26309] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeHqvxP68VyHNvj1e57P2AAAAMs"]
[Fri Apr 17 16:09:36.436212 2026] [:error] [pid 34273:tid 34297] [client 20.91.246.169:46694] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHqwGuQDW686mK3dgHSqAAAAZY"]
[Fri Apr 17 16:09:37.166209 2026] [:error] [pid 51878:tid 51882] [client 4.232.151.190:25109] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeHqwUnQhUtMbw9EsgYwVgAAAQI"]
[Fri Apr 17 16:09:38.525622 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:41731] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iindv.php"] [unique_id "aeHqwhP68VyHNvj1e57P6QAAAME"]
[Fri Apr 17 16:09:38.954278 2026] [:error] [pid 9152:tid 9202] [client 4.232.151.190:2728] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aeHqwpJYca8I3TNCwIcWWAAAAEw"]
[Fri Apr 17 16:09:39.971029 2026] [:error] [pid 34273:tid 34290] [client 20.91.246.169:48434] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "aeHqw2uQDW686mK3dgHSrQAAAY8"]
[Fri Apr 17 16:09:40.207969 2026] [:error] [pid 9263:tid 9279] [client 4.232.151.190:37003] [client 4.232.151.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeHqxBP68VyHNvj1e57P7wAAAM4"]
[Fri Apr 17 16:09:41.049673 2026] [:error] [pid 51878:tid 51883] [client 20.91.246.169:48385] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "aeHqxUnQhUtMbw9EsgYwWwAAAQM"]
[Fri Apr 17 16:09:41.653464 2026] [:error] [pid 34273:tid 34296] [client 4.232.151.190:19005] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeHqxWuQDW686mK3dgHSswAAAZU"]
[Fri Apr 17 16:09:41.884027 2026] [:error] [pid 9263:tid 9289] [client 20.91.246.169:46663] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "aeHqxRP68VyHNvj1e57P8wAAANg"]
[Fri Apr 17 16:09:42.745335 2026] [:error] [pid 9263:tid 9272] [client 20.91.246.169:41785] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maintura.php"] [unique_id "aeHqxhP68VyHNvj1e57P9QAAAMc"]
[Fri Apr 17 16:09:42.912048 2026] [:error] [pid 9263:tid 9273] [client 4.232.151.190:22112] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeHqxhP68VyHNvj1e57P9wAAAMg"]
[Fri Apr 17 16:09:43.861388 2026] [:error] [pid 61523:tid 61545] [client 4.232.151.190:18959] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeHqx8OaH-Pgc7WEf4Nl-AAAAcM"]
[Fri Apr 17 16:09:44.880352 2026] [:error] [pid 9152:tid 9207] [client 20.91.246.169:7841] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeHqyJJYca8I3TNCwIcWXwAAAFE"]
[Fri Apr 17 16:09:45.655283 2026] [:error] [pid 61523:tid 61550] [client 4.232.151.190:34658] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeHqycOaH-Pgc7WEf4Nl-gAAAcg"]
[Fri Apr 17 16:09:46.631484 2026] [:error] [pid 9263:tid 9280] [client 4.232.151.190:30959] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeHqyhP68VyHNvj1e57QCgAAAM8"]
[Fri Apr 17 16:09:47.860436 2026] [:error] [pid 9152:tid 9201] [client 4.232.151.190:29161] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeHqy5JYca8I3TNCwIcWaQAAAEs"]
[Fri Apr 17 16:09:49.247894 2026] [:error] [pid 9151:tid 9182] [client 4.232.151.190:36341] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeHqzchTVuRPkua22vQd7AAAABU"]
[Fri Apr 17 16:09:51.527252 2026] [:error] [pid 51878:tid 51880] [client 4.232.151.190:37039] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aeHqz0nQhUtMbw9EsgYwZQAAAQA"]
[Fri Apr 17 16:09:52.140129 2026] [:error] [pid 9151:tid 9164] [client 20.91.246.169:46668] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeHq0MhTVuRPkua22vQd7wAAAAM"]
[Fri Apr 17 16:09:53.392951 2026] [:error] [pid 9151:tid 9174] [client 4.232.151.190:22884] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHq0chTVuRPkua22vQd8QAAAA0"]
[Fri Apr 17 16:09:54.637784 2026] [:error] [pid 61523:tid 61554] [client 4.232.151.190:19373] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHq0sOaH-Pgc7WEf4NmCwAAAcw"]
[Fri Apr 17 16:09:56.576687 2026] [:error] [pid 34273:tid 34284] [client 4.232.151.190:19335] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHq1GuQDW686mK3dgHSywAAAYk"]
[Fri Apr 17 16:09:57.567380 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:7956] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeHq1RP68VyHNvj1e57QLgAAAME"]
[Fri Apr 17 16:09:58.822205 2026] [:error] [pid 9263:tid 9275] [client 4.232.151.190:26608] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aeHq1hP68VyHNvj1e57QNgAAAMo"]
[Fri Apr 17 16:09:59.929944 2026] [:error] [pid 9151:tid 9185] [client 4.232.151.190:22890] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHq18hTVuRPkua22vQd8wAAABg"]
[Fri Apr 17 16:10:00.398654 2026] [:error] [pid 9263:tid 9273] [client 20.91.246.169:7809] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeHq2BP68VyHNvj1e57QQgAAAMg"]
[Fri Apr 17 16:10:00.663168 2026] [:error] [pid 9263:tid 9279] [client 4.232.151.190:20201] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHq2BP68VyHNvj1e57QRAAAAM4"]
[Fri Apr 17 16:10:01.513473 2026] [:error] [pid 9263:tid 9287] [client 4.232.151.190:22895] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHq2RP68VyHNvj1e57QSwAAANY"]
[Fri Apr 17 16:10:02.182692 2026] [:error] [pid 9152:tid 9204] [client 4.232.151.190:22879] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeHq2pJYca8I3TNCwIcWeQAAAE4"]
[Fri Apr 17 16:10:03.067567 2026] [:error] [pid 9263:tid 9285] [client 4.232.151.190:22906] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeHq2xP68VyHNvj1e57QUQAAANQ"]
[Fri Apr 17 16:10:03.511921 2026] [:error] [pid 9263:tid 9270] [client 20.91.246.169:46681] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeHq2xP68VyHNvj1e57QUgAAAMU"]
[Fri Apr 17 16:10:03.644071 2026] [:error] [pid 9263:tid 9268] [client 4.232.151.190:20223] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeHq2xP68VyHNvj1e57QUwAAAMM"]
[Fri Apr 17 16:10:04.510732 2026] [:error] [pid 9153:tid 9226] [client 4.232.151.190:26562] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeHq3OMHGxkTZX3c45fciwAAAIg"]
[Fri Apr 17 16:10:05.241291 2026] [:error] [pid 9151:tid 9184] [client 4.232.151.190:20209] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aeHq3chTVuRPkua22vQd9gAAABc"]
[Fri Apr 17 16:10:06.032357 2026] [:error] [pid 51878:tid 51902] [client 4.232.151.190:29126] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeHq3knQhUtMbw9EsgYwhQAAARY"]
[Fri Apr 17 16:10:06.564024 2026] [:error] [pid 9263:tid 9270] [client 20.91.246.169:51236] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeHq3hP68VyHNvj1e57QXwAAAMU"]
[Fri Apr 17 16:10:06.602823 2026] [:error] [pid 25010:tid 25015] [client 4.232.151.190:47147] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeHq3o-7kkf42RarqQ1QtgAAAUI"]
[Fri Apr 17 16:10:07.163871 2026] [:error] [pid 9263:tid 9287] [client 4.232.151.190:29524] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeHq3xP68VyHNvj1e57QYgAAANY"]
[Fri Apr 17 16:10:07.599846 2026] [:error] [pid 9263:tid 9271] [client 20.91.246.169:49525] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeHq3xP68VyHNvj1e57QZAAAAMY"]
[Fri Apr 17 16:10:08.005293 2026] [:error] [pid 9263:tid 9288] [client 4.232.151.190:20125] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev.php"] [unique_id "aeHq4BP68VyHNvj1e57QagAAANc"]
[Fri Apr 17 16:10:08.797770 2026] [:error] [pid 61523:tid 61554] [client 4.232.151.190:42728] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aeHq4MOaH-Pgc7WEf4NmFQAAAcw"]
[Fri Apr 17 16:10:09.479859 2026] [:error] [pid 9152:tid 9198] [client 20.91.246.169:7862] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "aeHq4ZJYca8I3TNCwIcWfwAAAEg"]
[Fri Apr 17 16:10:09.651685 2026] [:error] [pid 34273:tid 34299] [client 4.232.151.190:27254] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aeHq4WuQDW686mK3dgHTAQAAAZg"]
[Fri Apr 17 16:10:10.265748 2026] [:error] [pid 34273:tid 34278] [client 20.91.246.169:54772] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "aeHq4muQDW686mK3dgHTCAAAAYM"]
[Fri Apr 17 16:10:10.324128 2026] [:error] [pid 25010:tid 25025] [client 4.232.151.190:19379] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aeHq4o-7kkf42RarqQ1QuwAAAUw"]
[Fri Apr 17 16:10:11.001503 2026] [:error] [pid 9263:tid 9276] [client 4.232.151.190:35231] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "aeHq4xP68VyHNvj1e57QcgAAAMs"]
[Fri Apr 17 16:10:11.212139 2026] [:error] [pid 61523:tid 61565] [client 20.91.246.169:54779] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "aeHq48OaH-Pgc7WEf4NmFgAAAdc"]
[Fri Apr 17 16:10:11.864366 2026] [:error] [pid 9263:tid 9277] [client 4.232.151.190:43880] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aeHq4xP68VyHNvj1e57QdgAAAMw"]
[Fri Apr 17 16:10:12.221435 2026] [:error] [pid 9263:tid 9289] [client 20.91.246.169:7969] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zc-220.php"] [unique_id "aeHq5BP68VyHNvj1e57QdwAAANg"]
[Fri Apr 17 16:10:12.972087 2026] [:error] [pid 9151:tid 9163] [client 20.91.246.169:54754] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeHq5MhTVuRPkua22vQd_AAAAAI"]
[Fri Apr 17 16:10:13.287862 2026] [:error] [pid 9151:tid 9164] [client 4.232.151.190:22106] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aeHq5chTVuRPkua22vQd_gAAAAM"]
[Fri Apr 17 16:10:13.702022 2026] [:error] [pid 9151:tid 9174] [client 20.91.246.169:47242] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeHq5chTVuRPkua22vQeAAAAAA0"]
[Fri Apr 17 16:10:14.432707 2026] [:error] [pid 9152:tid 9207] [client 4.232.151.190:20168] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aeHq5pJYca8I3TNCwIcWhQAAAFE"]
[Fri Apr 17 16:10:14.618339 2026] [proxy_fcgi:error] [pid 61523:tid 61562] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:15.099351 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:15.378113 2026] [proxy_fcgi:error] [pid 61523:tid 61557] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:15.379230 2026] [:error] [pid 51878:tid 51903] [client 4.232.151.190:26620] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aeHq50nQhUtMbw9EsgYwkgAAARc"]
[Fri Apr 17 16:10:15.649581 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:15.944388 2026] [proxy_fcgi:error] [pid 61523:tid 61553] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:16.811966 2026] [:error] [pid 61523:tid 61548] [client 4.232.151.190:27235] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aeHq6MOaH-Pgc7WEf4NmJgAAAcY"]
[Fri Apr 17 16:10:17.408159 2026] [:error] [pid 9263:tid 9283] [client 4.232.151.190:26564] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aeHq6RP68VyHNvj1e57QgwAAANI"]
[Fri Apr 17 16:10:17.450287 2026] [proxy_fcgi:error] [pid 61523:tid 61565] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:17.716080 2026] [proxy_fcgi:error] [pid 61523:tid 61549] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:17.991018 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:18.019791 2026] [:error] [pid 61523:tid 61552] [client 4.232.151.190:29162] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aeHq6sOaH-Pgc7WEf4NmMgAAAco"]
[Fri Apr 17 16:10:18.269125 2026] [proxy_fcgi:error] [pid 61523:tid 61556] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:18.534699 2026] [proxy_fcgi:error] [pid 61523:tid 61551] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:18.801127 2026] [proxy_fcgi:error] [pid 61523:tid 61550] [client 20.91.246.169:48402] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:19.365551 2026] [:error] [pid 61523:tid 61558] [client 20.91.246.169:48402] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHq68OaH-Pgc7WEf4NmNwAAAdA"]
[Fri Apr 17 16:10:19.779732 2026] [:error] [pid 51878:tid 51890] [client 4.232.151.190:20177] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aeHq60nQhUtMbw9EsgYwmAAAAQo"]
[Fri Apr 17 16:10:20.534829 2026] [:error] [pid 51878:tid 51880] [client 4.232.151.190:43860] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "aeHq7EnQhUtMbw9EsgYwmwAAAQA"]
[Fri Apr 17 16:10:21.102579 2026] [:error] [pid 9152:tid 9198] [client 20.91.246.169:47274] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHq7ZJYca8I3TNCwIcWjAAAAEg"]
[Fri Apr 17 16:10:21.147707 2026] [proxy_fcgi:error] [pid 9152:tid 9203] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:21.447858 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:21.971128 2026] [:error] [pid 61523:tid 61544] [client 20.91.246.169:7845] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHq7cOaH-Pgc7WEf4NmOAAAAcI"]
[Fri Apr 17 16:10:22.033602 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:22.299174 2026] [proxy_fcgi:error] [pid 9152:tid 9195] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:22.646401 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:22.704994 2026] [:error] [pid 61523:tid 61557] [client 20.91.246.169:41753] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "aeHq7sOaH-Pgc7WEf4NmOQAAAc8"]
[Fri Apr 17 16:10:22.964701 2026] [proxy_fcgi:error] [pid 9152:tid 9211] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:23.279109 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:23.543921 2026] [proxy_fcgi:error] [pid 9152:tid 9200] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:23.603569 2026] [:error] [pid 9152:tid 9190] [client 20.91.246.169:7985] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHq75JYca8I3TNCwIcWmwAAAEA"]
[Fri Apr 17 16:10:24.128839 2026] [proxy_fcgi:error] [pid 9152:tid 9209] [client 4.232.151.190:2950] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:10:24.403004 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:2950] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeHq8JJYca8I3TNCwIcWnwAAAEY"]
[Fri Apr 17 16:10:24.644078 2026] [:error] [pid 9152:tid 9191] [client 20.91.246.169:47294] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHq8JJYca8I3TNCwIcWogAAAEE"]
[Fri Apr 17 16:10:25.201252 2026] [:error] [pid 9263:tid 9288] [client 4.232.151.190:35207] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeHq8RP68VyHNvj1e57QoQAAANc"]
[Fri Apr 17 16:10:26.231953 2026] [:error] [pid 25010:tid 25033] [client 4.232.151.190:42735] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeHq8o-7kkf42RarqQ1QwwAAAVQ"]
[Fri Apr 17 16:10:26.903074 2026] [:error] [pid 61523:tid 61545] [client 4.232.151.190:27226] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aeHq8sOaH-Pgc7WEf4NmQgAAAcM"]
[Fri Apr 17 16:10:28.058121 2026] [:error] [pid 25010:tid 25025] [client 4.232.151.190:42699] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeHq9I-7kkf42RarqQ1QxQAAAUw"]
[Fri Apr 17 16:10:28.167215 2026] [:error] [pid 9152:tid 9191] [client 20.91.246.169:46657] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHq9JJYca8I3TNCwIcWtgAAAEE"]
[Fri Apr 17 16:10:28.964281 2026] [:error] [pid 9263:tid 9277] [client 20.91.246.169:51220] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "aeHq9BP68VyHNvj1e57Q2wAAAMw"]
[Fri Apr 17 16:10:29.827370 2026] [:error] [pid 61523:tid 61563] [client 4.232.151.190:29513] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeHq9cOaH-Pgc7WEf4NmVAAAAdU"]
[Fri Apr 17 16:10:29.963447 2026] [:error] [pid 61523:tid 61549] [client 20.91.246.169:48436] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHq9cOaH-Pgc7WEf4NmWAAAAcc"]
[Fri Apr 17 16:10:30.774674 2026] [:error] [pid 61523:tid 61561] [client 20.91.246.169:47247] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHq9sOaH-Pgc7WEf4NmYQAAAdM"]
[Fri Apr 17 16:10:31.456120 2026] [:error] [pid 61523:tid 61553] [client 20.91.246.169:45465] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHq98OaH-Pgc7WEf4NmaAAAAcs"]
[Fri Apr 17 16:10:31.459519 2026] [:error] [pid 61523:tid 61554] [client 4.232.151.190:29179] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeHq98OaH-Pgc7WEf4NmaQAAAcw"]
[Fri Apr 17 16:10:32.096531 2026] [:error] [pid 34273:tid 34298] [client 20.91.246.169:41754] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aeHq-GuQDW686mK3dgHTXAAAAZc"]
[Fri Apr 17 16:10:33.046932 2026] [:error] [pid 51878:tid 51896] [client 20.91.246.169:41745] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHq-UnQhUtMbw9EsgYw0gAAARA"]
[Fri Apr 17 16:10:33.199949 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:43892] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aeHq-ZJYca8I3TNCwIcWwAAAAEY"]
[Fri Apr 17 16:10:34.109350 2026] [:error] [pid 25010:tid 25020] [client 4.232.151.190:29509] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeHq-o-7kkf42RarqQ1QzAAAAUc"]
[Fri Apr 17 16:10:34.971287 2026] [:error] [pid 51878:tid 51890] [client 20.91.246.169:7970] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHq-knQhUtMbw9EsgYw2wAAAQo"]
[Fri Apr 17 16:10:35.198152 2026] [:error] [pid 9153:tid 9220] [client 4.232.151.190:20097] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeHq--MHGxkTZX3c45fcoQAAAII"]
[Fri Apr 17 16:10:36.230885 2026] [:error] [pid 9152:tid 9200] [client 4.232.151.190:19344] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeHq_JJYca8I3TNCwIcWxwAAAEo"]
[Fri Apr 17 16:10:36.688369 2026] [:error] [pid 51878:tid 51887] [client 20.91.246.169:45473] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHq_EnQhUtMbw9EsgYw4AAAAQc"]
[Fri Apr 17 16:10:37.294914 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:47117] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "aeHq_ZJYca8I3TNCwIcW0QAAAEY"]
[Fri Apr 17 16:10:37.902575 2026] [:error] [pid 9263:tid 9265] [client 4.232.151.190:20150] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeHq_RP68VyHNvj1e57Q8AAAAMA"]
[Fri Apr 17 16:10:38.537117 2026] [:error] [pid 25010:tid 25030] [client 4.232.151.190:20202] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeHq_o-7kkf42RarqQ1QzgAAAVE"]
[Fri Apr 17 16:10:38.978133 2026] [:error] [pid 9152:tid 9204] [client 20.91.246.169:46682] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHq_pJYca8I3TNCwIcW1wAAAE4"]
[Fri Apr 17 16:10:39.383542 2026] [:error] [pid 34273:tid 34290] [client 4.232.151.190:42693] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeHq_2uQDW686mK3dgHTcgAAAY8"]
[Fri Apr 17 16:10:40.091303 2026] [:error] [pid 9263:tid 9289] [client 4.232.151.190:20211] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aeHrABP68VyHNvj1e57Q-AAAANg"]
[Fri Apr 17 16:10:41.337811 2026] [:error] [pid 9153:tid 9226] [client 4.232.151.190:20170] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeHrAeMHGxkTZX3c45fcpgAAAIg"]
[Fri Apr 17 16:10:41.420000 2026] [:error] [pid 9152:tid 9191] [client 20.91.246.169:51253] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrAZJYca8I3TNCwIcW4QAAAEE"]
[Fri Apr 17 16:10:42.449601 2026] [:error] [pid 51878:tid 51890] [client 4.232.151.190:19375] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeHrAknQhUtMbw9EsgYw4gAAAQo"]
[Fri Apr 17 16:10:42.545387 2026] [:error] [pid 51878:tid 51880] [client 20.91.246.169:7937] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrAknQhUtMbw9EsgYw4wAAAQA"]
[Fri Apr 17 16:10:43.061804 2026] [:error] [pid 51878:tid 51887] [client 4.232.151.190:43857] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeHrA0nQhUtMbw9EsgYw6AAAAQc"]
[Fri Apr 17 16:10:44.098462 2026] [:error] [pid 9152:tid 9211] [client 4.232.151.190:22903] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aeHrBJJYca8I3TNCwIcW5AAAAFU"]
[Fri Apr 17 16:10:44.215802 2026] [:error] [pid 25010:tid 25033] [client 20.91.246.169:46685] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrBI-7kkf42RarqQ1Q1AAAAVQ"]
[Fri Apr 17 16:10:45.374941 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:27202] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeHrBZJYca8I3TNCwIcW6AAAAEY"]
[Fri Apr 17 16:10:45.644031 2026] [:error] [pid 9263:tid 9268] [client 20.91.246.169:7876] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrBRP68VyHNvj1e57RBwAAAMM"]
[Fri Apr 17 16:10:46.634302 2026] [:error] [pid 9263:tid 9265] [client 4.232.151.190:22052] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeHrBhP68VyHNvj1e57RCgAAAMA"]
[Fri Apr 17 16:10:47.458776 2026] [:error] [pid 9151:tid 9176] [client 4.232.151.190:29133] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeHrB8hTVuRPkua22vQeFgAAAA8"]
[Fri Apr 17 16:10:48.280280 2026] [:error] [pid 9153:tid 9239] [client 4.232.151.190:20122] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aeHrCOMHGxkTZX3c45fcqQAAAJU"]
[Fri Apr 17 16:10:48.598258 2026] [:error] [pid 9263:tid 9285] [client 20.91.246.169:54766] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHrCBP68VyHNvj1e57RFQAAANQ"]
[Fri Apr 17 16:10:49.643126 2026] [:error] [pid 9263:tid 9277] [client 4.232.151.190:26592] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrCRP68VyHNvj1e57RGQAAAMw"]
[Fri Apr 17 16:10:49.997784 2026] [:error] [pid 61523:tid 61563] [client 20.91.246.169:7756] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHrCcOaH-Pgc7WEf4NmmgAAAdU"]
[Fri Apr 17 16:10:50.608140 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:35230] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrCpJYca8I3TNCwIcW8wAAAEY"]
[Fri Apr 17 16:10:51.035397 2026] [:error] [pid 9152:tid 9205] [client 20.91.246.169:48429] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHrC5JYca8I3TNCwIcW9AAAAE8"]
[Fri Apr 17 16:10:51.396864 2026] [:error] [pid 9263:tid 9285] [client 4.232.151.190:35258] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrCxP68VyHNvj1e57RIAAAANQ"]
[Fri Apr 17 16:10:52.449972 2026] [:error] [pid 61523:tid 61556] [client 4.232.151.190:33246] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeHrDMOaH-Pgc7WEf4NmpAAAAc4"]
[Fri Apr 17 16:10:52.449973 2026] [:error] [pid 61523:tid 61547] [client 20.91.246.169:7902] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeHrDMOaH-Pgc7WEf4NmpQAAAcU"]
[Fri Apr 17 16:10:53.305715 2026] [:error] [pid 9153:tid 9218] [client 4.232.151.190:47113] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHrDeMHGxkTZX3c45fcrwAAAIA"]
[Fri Apr 17 16:10:53.411218 2026] [:error] [pid 9151:tid 9178] [client 20.91.246.169:7960] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "aeHrDchTVuRPkua22vQeGwAAABE"]
[Fri Apr 17 16:10:53.939643 2026] [:error] [pid 9263:tid 9281] [client 4.232.151.190:22066] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHrDRP68VyHNvj1e57RKAAAANA"]
[Fri Apr 17 16:10:54.524616 2026] [:error] [pid 9151:tid 9161] [client 4.232.151.190:47105] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHrDshTVuRPkua22vQeIQAAAAA"]
[Fri Apr 17 16:10:54.652069 2026] [:error] [pid 61523:tid 61553] [client 20.91.246.169:56497] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "aeHrDsOaH-Pgc7WEf4NmqQAAAcs"]
[Fri Apr 17 16:10:55.831176 2026] [:error] [pid 9152:tid 9192] [client 20.91.246.169:55050] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "aeHrD5JYca8I3TNCwIcW_AAAAEI"]
[Fri Apr 17 16:10:56.157434 2026] [:error] [pid 9152:tid 9196] [client 4.232.151.190:47108] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aeHrEJJYca8I3TNCwIcW_gAAAEY"]
[Fri Apr 17 16:10:56.848955 2026] [:error] [pid 61523:tid 61562] [client 20.91.246.169:42929] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX2.php"] [unique_id "aeHrEMOaH-Pgc7WEf4NmqwAAAdQ"]
[Fri Apr 17 16:10:57.121178 2026] [:error] [pid 61523:tid 61564] [client 4.232.151.190:33224] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeHrEcOaH-Pgc7WEf4NmrwAAAdY"]
[Fri Apr 17 16:10:57.753021 2026] [:error] [pid 9263:tid 9288] [client 20.91.246.169:54773] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeHrERP68VyHNvj1e57RKwAAANc"]
[Fri Apr 17 16:10:57.913883 2026] [:error] [pid 9152:tid 9198] [client 4.232.151.190:22035] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeHrEZJYca8I3TNCwIcXAwAAAEg"]
[Fri Apr 17 16:10:58.633115 2026] [:error] [pid 9152:tid 9201] [client 4.232.151.190:27990] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeHrEpJYca8I3TNCwIcXBQAAAEs"]
[Fri Apr 17 16:10:58.655192 2026] [:error] [pid 61523:tid 61560] [client 20.91.246.169:56508] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeHrEsOaH-Pgc7WEf4NmswAAAdI"]
[Fri Apr 17 16:10:59.347731 2026] [:error] [pid 9151:tid 9175] [client 4.232.151.190:29140] [client 4.232.151.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeHrE8hTVuRPkua22vQeKwAAAA4"]
[Fri Apr 17 16:10:59.586940 2026] [:error] [pid 34273:tid 34293] [client 20.91.246.169:55075] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeHrE2uQDW686mK3dgHTjwAAAZI"]
[Fri Apr 17 16:11:00.656920 2026] [:error] [pid 51878:tid 51891] [client 20.91.246.169:7935] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeHrFEnQhUtMbw9EsgYxAwAAAQs"]
[Fri Apr 17 16:11:02.195170 2026] [:error] [pid 51878:tid 51899] [client 20.91.246.169:64019] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "aeHrFknQhUtMbw9EsgYxBgAAARM"]
[Fri Apr 17 16:11:03.236183 2026] [:error] [pid 34273:tid 34277] [client 20.91.246.169:59283] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "aeHrF2uQDW686mK3dgHTkgAAAYI"]
[Fri Apr 17 16:11:05.841456 2026] [:error] [pid 25010:tid 25026] [client 20.91.246.169:59048] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "aeHrGY-7kkf42RarqQ1Q3QAAAU0"]
[Fri Apr 17 16:11:08.270859 2026] [:error] [pid 61523:tid 61557] [client 20.91.246.169:59020] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wtiiy.php"] [unique_id "aeHrHMOaH-Pgc7WEf4NmygAAAc8"]
[Fri Apr 17 16:11:09.323036 2026] [:error] [pid 61523:tid 61548] [client 20.91.246.169:7435] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeHrHcOaH-Pgc7WEf4Nm0gAAAcY"]
[Fri Apr 17 16:11:10.207607 2026] [:error] [pid 61523:tid 61547] [client 20.91.246.169:42837] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeHrHsOaH-Pgc7WEf4Nm2QAAAcU"]
[Fri Apr 17 16:11:11.178274 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:57047] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeHrHxP68VyHNvj1e57RPQAAAME"]
[Fri Apr 17 16:11:12.238909 2026] [:error] [pid 61523:tid 61543] [client 20.91.246.169:42825] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeHrIMOaH-Pgc7WEf4Nm3gAAAcE"]
[Fri Apr 17 16:11:13.195653 2026] [:error] [pid 51878:tid 51898] [client 20.91.246.169:56397] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeHrIUnQhUtMbw9EsgYxLQAAARI"]
[Fri Apr 17 16:11:14.396180 2026] [:error] [pid 34273:tid 34292] [client 20.91.246.169:43321] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeHrImuQDW686mK3dgHTlwAAAZE"]
[Fri Apr 17 16:11:15.825843 2026] [:error] [pid 9263:tid 9268] [client 20.91.246.169:57051] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeHrIxP68VyHNvj1e57RRAAAAMM"]
[Fri Apr 17 16:11:16.548749 2026] [:error] [pid 34273:tid 34283] [client 20.91.246.169:43305] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeHrJGuQDW686mK3dgHTmQAAAYg"]
[Fri Apr 17 16:11:17.251711 2026] [:error] [pid 34273:tid 34279] [client 20.91.246.169:47182] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeHrJWuQDW686mK3dgHTmwAAAYQ"]
[Fri Apr 17 16:11:18.454465 2026] [proxy_fcgi:error] [pid 9263:tid 9271] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:19.235823 2026] [proxy_fcgi:error] [pid 9263:tid 9272] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:19.505118 2026] [proxy_fcgi:error] [pid 9263:tid 9289] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:19.792893 2026] [proxy_fcgi:error] [pid 9263:tid 9270] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:20.059016 2026] [proxy_fcgi:error] [pid 9263:tid 9276] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:20.326919 2026] [proxy_fcgi:error] [pid 9263:tid 9268] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:20.614558 2026] [proxy_fcgi:error] [pid 9263:tid 9282] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:20.888869 2026] [proxy_fcgi:error] [pid 9263:tid 9280] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:21.156977 2026] [proxy_fcgi:error] [pid 9263:tid 9288] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:21.528989 2026] [proxy_fcgi:error] [pid 9263:tid 9278] [client 20.91.246.169:59713] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:11:21.798937 2026] [:error] [pid 9263:tid 9271] [client 20.91.246.169:59713] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHrKRP68VyHNvj1e57RXgAAAMY"]
[Fri Apr 17 16:11:22.677118 2026] [:error] [pid 61523:tid 61561] [client 20.91.246.169:52914] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHrKsOaH-Pgc7WEf4Nm9gAAAdM"]
[Fri Apr 17 16:11:23.633652 2026] [:error] [pid 61523:tid 61563] [client 20.91.246.169:47209] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHrK8OaH-Pgc7WEf4Nm_gAAAdU"]
[Fri Apr 17 16:11:24.759336 2026] [:error] [pid 34273:tid 34284] [client 20.91.246.169:47228] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeHrLGuQDW686mK3dgHTogAAAYk"]
[Fri Apr 17 16:11:25.970849 2026] [:error] [pid 9263:tid 9272] [client 20.91.246.169:59752] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHrLRP68VyHNvj1e57RbgAAAMc"]
[Fri Apr 17 16:11:26.905404 2026] [:error] [pid 34273:tid 34278] [client 20.91.246.169:7620] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHrLmuQDW686mK3dgHTqwAAAYM"]
[Fri Apr 17 16:11:27.877202 2026] [:error] [pid 9152:tid 9194] [client 20.91.246.169:42298] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHrL5JYca8I3TNCwIcXGQAAAEQ"]
[Fri Apr 17 16:11:28.974064 2026] [:error] [pid 9152:tid 9207] [client 20.91.246.169:51562] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aeHrMJJYca8I3TNCwIcXHwAAAFE"]
[Fri Apr 17 16:11:29.861065 2026] [:error] [pid 9152:tid 9203] [client 20.91.246.169:64073] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHrMZJYca8I3TNCwIcXJQAAAE0"]
[Fri Apr 17 16:11:31.078718 2026] [:error] [pid 51878:tid 51904] [client 20.91.246.169:45150] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHrM0nQhUtMbw9EsgYxQgAAARg"]
[Fri Apr 17 16:11:33.104659 2026] [:error] [pid 9153:tid 9227] [client 20.91.246.169:41165] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHrNeMHGxkTZX3c45fc1wAAAIk"]
[Fri Apr 17 16:11:34.211612 2026] [:error] [pid 9152:tid 9198] [client 20.91.246.169:44235] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeHrNpJYca8I3TNCwIcXLQAAAEg"]
[Fri Apr 17 16:11:36.096918 2026] [:error] [pid 9152:tid 9211] [client 20.91.246.169:64084] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHrOJJYca8I3TNCwIcXMgAAAFU"]
[Fri Apr 17 16:11:37.870662 2026] [:error] [pid 9151:tid 9182] [client 20.91.246.169:57773] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHrOchTVuRPkua22vQeOwAAABU"]
[Fri Apr 17 16:11:39.209548 2026] [:error] [pid 9263:tid 9279] [client 20.91.246.169:57764] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHrOxP68VyHNvj1e57RkAAAAM4"]
[Fri Apr 17 16:11:40.361352 2026] [:error] [pid 34273:tid 34296] [client 20.91.246.169:7210] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeHrPGuQDW686mK3dgHTzwAAAZU"]
[Fri Apr 17 16:11:41.542596 2026] [:error] [pid 9152:tid 9206] [client 20.91.246.169:8110] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHrPZJYca8I3TNCwIcXPQAAAFA"]
[Fri Apr 17 16:11:42.542214 2026] [:error] [pid 9263:tid 9275] [client 20.91.246.169:7693] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHrPhP68VyHNvj1e57RqgAAAMo"]
[Fri Apr 17 16:11:43.279009 2026] [:error] [pid 9263:tid 9273] [client 20.91.246.169:57777] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHrPxP68VyHNvj1e57RsgAAAMg"]
[Fri Apr 17 16:11:43.987997 2026] [:error] [pid 61523:tid 61550] [client 20.91.246.169:64124] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeHrP8OaH-Pgc7WEf4NnCAAAAcg"]
[Fri Apr 17 16:11:44.635569 2026] [:error] [pid 34273:tid 34281] [client 20.91.246.169:57779] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHrQGuQDW686mK3dgHT1QAAAYY"]
[Fri Apr 17 16:11:45.400143 2026] [:error] [pid 9151:tid 9178] [client 20.91.246.169:43738] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHrQchTVuRPkua22vQePwAAABE"]
[Fri Apr 17 16:11:46.177669 2026] [:error] [pid 61523:tid 61551] [client 20.91.246.169:44241] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHrQsOaH-Pgc7WEf4NnCwAAAck"]
[Fri Apr 17 16:11:46.909652 2026] [:error] [pid 25010:tid 25034] [client 20.91.246.169:64118] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeHrQo-7kkf42RarqQ1Q5QAAAVU"]
[Fri Apr 17 16:11:48.157492 2026] [:error] [pid 9263:tid 9274] [client 20.91.246.169:7196] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHrRBP68VyHNvj1e57RwgAAAMk"]
[Fri Apr 17 16:11:49.352070 2026] [:error] [pid 51878:tid 51884] [client 20.91.246.169:57755] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHrRUnQhUtMbw9EsgYxUgAAAQQ"]
[Fri Apr 17 16:11:50.112936 2026] [:error] [pid 34273:tid 34289] [client 20.91.246.169:57731] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHrRmuQDW686mK3dgHT3AAAAY4"]
[Fri Apr 17 16:11:50.796520 2026] [:error] [pid 9153:tid 9229] [client 20.91.246.169:7222] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeHrRuMHGxkTZX3c45fc8gAAAIs"]
[Fri Apr 17 16:11:51.421382 2026] [:error] [pid 34273:tid 34298] [client 20.91.246.169:43751] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHrR2uQDW686mK3dgHT4AAAAZc"]
[Fri Apr 17 16:11:52.063851 2026] [:error] [pid 9153:tid 9224] [client 20.91.246.169:43770] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHrSOMHGxkTZX3c45fc9wAAAIY"]
[Fri Apr 17 16:11:52.660480 2026] [:error] [pid 51878:tid 51886] [client 20.91.246.169:7169] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHrSEnQhUtMbw9EsgYxWAAAAQY"]
[Fri Apr 17 16:11:53.334144 2026] [:error] [pid 9153:tid 9228] [client 20.91.246.169:43719] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeHrSeMHGxkTZX3c45fc-gAAAIo"]
[Fri Apr 17 16:11:54.046351 2026] [:error] [pid 34273:tid 34286] [client 20.91.246.169:51191] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHrSmuQDW686mK3dgHT5AAAAYs"]
[Fri Apr 17 16:11:54.707070 2026] [:error] [pid 9263:tid 9286] [client 20.91.246.169:57781] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHrShP68VyHNvj1e57RzgAAANU"]
[Fri Apr 17 16:11:55.464001 2026] [:error] [pid 9263:tid 9289] [client 20.91.246.169:8087] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHrSxP68VyHNvj1e57R0wAAANg"]
[Fri Apr 17 16:11:56.161947 2026] [:error] [pid 61523:tid 61566] [client 20.91.246.169:7220] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aeHrTMOaH-Pgc7WEf4NnHQAAAdg"]
[Fri Apr 17 16:11:56.954370 2026] [:error] [pid 34273:tid 34294] [client 20.91.246.169:7738] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeHrTGuQDW686mK3dgHT5wAAAZM"]
[Fri Apr 17 16:11:57.588109 2026] [:error] [pid 9263:tid 9275] [client 20.91.246.169:41215] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeHrTRP68VyHNvj1e57R7QAAAMo"]
[Fri Apr 17 16:11:58.250999 2026] [:error] [pid 9152:tid 9210] [client 20.91.246.169:7556] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeHrTpJYca8I3TNCwIcXVAAAAFQ"]
[Fri Apr 17 16:11:58.935914 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:7223] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aeHrThP68VyHNvj1e57R9AAAAME"]
[Fri Apr 17 16:11:59.599004 2026] [:error] [pid 9263:tid 9267] [client 20.91.246.169:8115] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "aeHrTxP68VyHNvj1e57R-QAAAMI"]
[Fri Apr 17 16:12:00.315095 2026] [:error] [pid 9152:tid 9206] [client 20.91.246.169:7202] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "aeHrUJJYca8I3TNCwIcXWAAAAFA"]
[Fri Apr 17 16:12:01.091513 2026] [:error] [pid 9152:tid 9201] [client 20.91.246.169:64085] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "aeHrUZJYca8I3TNCwIcXXAAAAEs"]
[Fri Apr 17 16:12:01.683742 2026] [:error] [pid 9263:tid 9265] [client 20.91.246.169:8091] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "aeHrURP68VyHNvj1e57SDAAAAMA"]
[Fri Apr 17 16:12:02.279141 2026] [:error] [pid 9263:tid 9271] [client 20.91.246.169:51162] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeHrUhP68VyHNvj1e57SEgAAAMY"]
[Fri Apr 17 16:12:02.923635 2026] [:error] [pid 61523:tid 61557] [client 20.91.246.169:7719] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeHrUsOaH-Pgc7WEf4NnLQAAAc8"]
[Fri Apr 17 16:12:03.809764 2026] [:error] [pid 9263:tid 9285] [client 20.91.246.169:51545] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeHrUxP68VyHNvj1e57SIwAAANQ"]
[Fri Apr 17 16:12:04.638619 2026] [:error] [pid 25010:tid 25032] [client 20.91.246.169:51147] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeHrVI-7kkf42RarqQ1Q8QAAAVM"]
[Fri Apr 17 16:12:05.786539 2026] [:error] [pid 9152:tid 9204] [client 20.91.246.169:7228] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeHrVZJYca8I3TNCwIcXZQAAAE4"]
[Fri Apr 17 16:12:06.776764 2026] [:error] [pid 9153:tid 9230] [client 20.91.246.169:43750] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeHrVuMHGxkTZX3c45fdAgAAAIw"]
[Fri Apr 17 16:12:07.529066 2026] [:error] [pid 9263:tid 9279] [client 20.91.246.169:41198] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeHrVxP68VyHNvj1e57SlAAAAM4"]
[Fri Apr 17 16:12:08.430591 2026] [:error] [pid 9153:tid 9219] [client 20.91.246.169:7727] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeHrWOMHGxkTZX3c45fdBAAAAIE"]
[Fri Apr 17 16:12:09.292603 2026] [:error] [pid 9263:tid 9287] [client 20.91.246.169:44242] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeHrWRP68VyHNvj1e57SrQAAANY"]
[Fri Apr 17 16:12:10.743875 2026] [:error] [pid 9263:tid 9276] [client 20.91.246.169:7206] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeHrWhP68VyHNvj1e57SuwAAAMs"]
[Fri Apr 17 16:12:12.521712 2026] [:error] [pid 61523:tid 61562] [client 20.91.246.169:51170] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeHrXMOaH-Pgc7WEf4NnWQAAAdQ"]
[Fri Apr 17 16:12:14.434576 2026] [:error] [pid 9151:tid 9171] [client 20.91.246.169:43716] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeHrXshTVuRPkua22vQeVwAAAAo"]
[Fri Apr 17 16:12:16.750573 2026] [:error] [pid 9151:tid 9180] [client 20.91.246.169:51179] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "aeHrYMhTVuRPkua22vQeYQAAABM"]
[Fri Apr 17 16:12:18.136770 2026] [:error] [pid 51878:tid 51904] [client 20.91.246.169:8113] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "aeHrYknQhUtMbw9EsgYxmwAAARg"]
[Fri Apr 17 16:12:22.116253 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:22.399408 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:22.684419 2026] [proxy_fcgi:error] [pid 61523:tid 61560] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:22.969356 2026] [proxy_fcgi:error] [pid 61523:tid 61564] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:23.255938 2026] [proxy_fcgi:error] [pid 61523:tid 61553] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:23.540277 2026] [proxy_fcgi:error] [pid 61523:tid 61546] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:23.824279 2026] [proxy_fcgi:error] [pid 61523:tid 61545] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:24.142246 2026] [proxy_fcgi:error] [pid 61523:tid 61566] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:24.425531 2026] [proxy_fcgi:error] [pid 61523:tid 61551] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:24.715335 2026] [proxy_fcgi:error] [pid 61523:tid 61543] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:25.000097 2026] [proxy_fcgi:error] [pid 61523:tid 61554] [client 20.91.246.169:57752] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:12:25.280095 2026] [:error] [pid 61523:tid 61565] [client 20.91.246.169:57752] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHracOaH-Pgc7WEf4NnpAAAAdc"]
[Fri Apr 17 16:12:27.054193 2026] [:error] [pid 61523:tid 61553] [client 20.91.246.169:62279] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHra8OaH-Pgc7WEf4NnpwAAAcs"]
[Fri Apr 17 16:12:33.921018 2026] [:error] [pid 61523:tid 61543] [client 20.91.246.169:43732] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHrccOaH-Pgc7WEf4Nn6QAAAcE"]
[Fri Apr 17 16:12:34.641147 2026] [:error] [pid 9153:tid 9222] [client 20.91.246.169:57748] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rithin.php"] [unique_id "aeHrcuMHGxkTZX3c45fdLwAAAIQ"]
[Fri Apr 17 16:12:35.604568 2026] [:error] [pid 61523:tid 61541] [client 20.91.246.169:8125] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHrc8OaH-Pgc7WEf4Nn-wAAAcA"]
[Fri Apr 17 16:12:36.714506 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:54036] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHrdBP68VyHNvj1e57TCgAAAME"]
[Fri Apr 17 16:12:38.891193 2026] [:error] [pid 61523:tid 61544] [client 20.91.246.169:7410] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHrdsOaH-Pgc7WEf4NoAgAAAcI"]
[Fri Apr 17 16:12:40.396713 2026] [:error] [pid 9263:tid 9287] [client 20.91.246.169:41199] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeHreBP68VyHNvj1e57TLQAAANY"]
[Fri Apr 17 16:12:42.774722 2026] [:error] [pid 9263:tid 9265] [client 20.91.246.169:41155] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHrehP68VyHNvj1e57TPgAAAMA"]
[Fri Apr 17 16:12:44.845319 2026] [:error] [pid 9263:tid 9266] [client 20.91.246.169:51146] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHrfBP68VyHNvj1e57TSwAAAME"]
[Fri Apr 17 16:12:46.449415 2026] [:error] [pid 9151:tid 9177] [client 20.91.246.169:7397] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHrfshTVuRPkua22vQeeAAAABA"]
[Fri Apr 17 16:12:47.352039 2026] [:error] [pid 9263:tid 9267] [client 20.91.246.169:7191] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jlex.php"] [unique_id "aeHrfxP68VyHNvj1e57TUQAAAMI"]
[Fri Apr 17 16:12:48.242297 2026] [:error] [pid 51878:tid 51886] [client 20.91.246.169:51196] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHrgEnQhUtMbw9EsgYx_wAAAQY"]
[Fri Apr 17 16:12:49.141543 2026] [:error] [pid 34273:tid 34281] [client 20.91.246.169:8140] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHrgWuQDW686mK3dgHUOwAAAYY"]
[Fri Apr 17 16:12:51.179694 2026] [:error] [pid 61523:tid 61563] [client 20.91.246.169:7393] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHrg8OaH-Pgc7WEf4NoSQAAAdU"]
[Fri Apr 17 16:12:53.056923 2026] [:error] [pid 9263:tid 9281] [client 20.91.246.169:57736] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xsas.php"] [unique_id "aeHrhRP68VyHNvj1e57TcgAAANA"]
[Fri Apr 17 16:12:54.649603 2026] [:error] [pid 9263:tid 9278] [client 20.91.246.169:7199] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHrhhP68VyHNvj1e57TgwAAAM0"]
[Fri Apr 17 16:12:58.610849 2026] [:error] [pid 9151:tid 9175] [client 20.91.246.169:62288] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHrishTVuRPkua22vQejQAAAA4"]
[Fri Apr 17 16:13:04.478078 2026] [:error] [pid 9151:tid 9179] [client 20.91.246.169:54053] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHrkMhTVuRPkua22vQelAAAABI"]
[Fri Apr 17 16:13:06.140845 2026] [:error] [pid 9263:tid 9276] [client 20.91.246.169:62324] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp/jp.php"] [unique_id "aeHrkhP68VyHNvj1e57TxwAAAMs"]
[Fri Apr 17 16:13:07.569533 2026] [:error] [pid 9263:tid 9271] [client 20.91.246.169:57784] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeHrkxP68VyHNvj1e57TzgAAAMY"]
[Fri Apr 17 16:13:08.341603 2026] [:error] [pid 9263:tid 9279] [client 20.91.246.169:7406] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeHrlBP68VyHNvj1e57T1AAAAM4"]
[Fri Apr 17 16:13:09.292032 2026] [:error] [pid 9263:tid 9282] [client 20.91.246.169:57787] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeHrlRP68VyHNvj1e57T2gAAANE"]
[Fri Apr 17 16:13:11.814869 2026] [:error] [pid 61523:tid 61546] [client 20.91.246.169:43203] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeHrl8OaH-Pgc7WEf4NohgAAAcQ"]
[Fri Apr 17 16:13:14.734613 2026] [:error] [pid 9263:tid 9270] [client 20.91.246.169:53496] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aeHrmhP68VyHNvj1e57T4AAAAMU"]
[Fri Apr 17 16:13:15.932668 2026] [:error] [pid 51878:tid 51888] [client 20.91.246.169:62285] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aeHrm0nQhUtMbw9EsgYyPgAAAQg"]
[Fri Apr 17 16:13:16.971928 2026] [:error] [pid 51878:tid 51880] [client 20.91.246.169:54043] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aeHrnEnQhUtMbw9EsgYyRgAAAQA"]
[Fri Apr 17 16:13:17.718479 2026] [:error] [pid 51878:tid 51902] [client 20.91.246.169:54022] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aeHrnUnQhUtMbw9EsgYySQAAARY"]
[Fri Apr 17 16:13:19.100711 2026] [:error] [pid 51878:tid 51881] [client 20.91.246.169:51166] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aeHrn0nQhUtMbw9EsgYySgAAAQE"]
[Fri Apr 17 16:13:21.357828 2026] [:error] [pid 61523:tid 61541] [client 20.91.246.169:8150] [client 20.91.246.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aeHrocOaH-Pgc7WEf4NouwAAAcA"]
[Fri Apr 17 16:13:26.953300 2026] [proxy_fcgi:error] [pid 9153:tid 9230] [client 20.91.246.169:8138] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:13:27.236742 2026] [proxy_fcgi:error] [pid 9153:tid 9227] [client 20.91.246.169:8138] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:13:27.764184 2026] [proxy_fcgi:error] [pid 9153:tid 9220] [client 20.91.246.169:8138] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:13:29.192298 2026] [proxy_fcgi:error] [pid 9153:tid 9231] [client 20.91.246.169:8138] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 16:59:44.155049 2026] [:error] [pid 9263:tid 9273] [client 43.130.12.43:43682] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeH2gBP68VyHNvj1e57ptQAAAMg"]
[Fri Apr 17 20:59:53.536471 2026] [:error] [pid 9151:tid 9180] [client 49.51.52.250:54234] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeIuychTVuRPkua22vQ-7AAAABM"]
[Fri Apr 17 22:11:03.968835 2026] [:error] [pid 51878:tid 51892] [client 170.106.140.110:47768] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeI_d0nQhUtMbw9Esga6xAAAAQw"]
[Fri Apr 17 22:58:31.836038 2026] [proxy_fcgi:error] [pid 9152:tid 9191] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:32.072065 2026] [proxy_fcgi:error] [pid 9152:tid 9207] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:32.309028 2026] [proxy_fcgi:error] [pid 9152:tid 9206] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:32.546455 2026] [proxy_fcgi:error] [pid 9152:tid 9192] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:32.782659 2026] [proxy_fcgi:error] [pid 9152:tid 9193] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:33.018477 2026] [proxy_fcgi:error] [pid 9152:tid 9213] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:33.254377 2026] [proxy_fcgi:error] [pid 9152:tid 9201] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:33.498163 2026] [proxy_fcgi:error] [pid 9152:tid 9196] [client 172.213.226.43:37033] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:33.730548 2026] [:error] [pid 9152:tid 9210] [client 172.213.226.43:37033] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeJKmZJYca8I3TNCwIeBDAAAAFQ"]
[Fri Apr 17 22:58:34.199498 2026] [proxy_fcgi:error] [pid 61523:tid 61564] [client 172.213.226.43:32334] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:34.436571 2026] [proxy_fcgi:error] [pid 61523:tid 61541] [client 172.213.226.43:32334] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:58:34.669911 2026] [:error] [pid 61523:tid 61557] [client 172.213.226.43:32334] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeJKmsOaH-Pgc7WEf4P51AAAAc8"]
[Fri Apr 17 22:58:35.134737 2026] [:error] [pid 61523:tid 61565] [client 172.213.226.43:37028] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeJKm8OaH-Pgc7WEf4P51QAAAdc"]
[Fri Apr 17 22:58:35.600947 2026] [:error] [pid 61523:tid 61562] [client 172.213.226.43:37038] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeJKm8OaH-Pgc7WEf4P51wAAAdQ"]
[Fri Apr 17 22:58:36.070784 2026] [:error] [pid 9153:tid 9221] [client 172.213.226.43:32348] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeJKnOMHGxkTZX3c45chVgAAAIM"]
[Fri Apr 17 22:58:36.536839 2026] [:error] [pid 9263:tid 9275] [client 172.213.226.43:32351] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeJKnBP68VyHNvj1e56A3QAAAMo"]
[Fri Apr 17 22:58:37.005293 2026] [:error] [pid 25010:tid 25016] [client 172.213.226.43:32323] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeJKnY-7kkf42RarqQ2MHAAAAUM"]
[Fri Apr 17 22:58:37.483377 2026] [:error] [pid 61523:tid 61554] [client 172.213.226.43:32338] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeJKncOaH-Pgc7WEf4P53AAAAcw"]
[Fri Apr 17 22:58:37.956346 2026] [:error] [pid 25010:tid 25020] [client 172.213.226.43:32346] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeJKnY-7kkf42RarqQ2MIAAAAUc"]
[Fri Apr 17 22:58:38.437101 2026] [:error] [pid 9153:tid 9242] [client 172.213.226.43:37011] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeJKnuMHGxkTZX3c45chXwAAAJg"]
[Fri Apr 17 22:58:38.934277 2026] [:error] [pid 25010:tid 25014] [client 172.213.226.43:37035] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeJKno-7kkf42RarqQ2MJAAAAUE"]
[Fri Apr 17 22:58:39.401393 2026] [:error] [pid 9151:tid 9164] [client 172.213.226.43:19411] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeJKn8hTVuRPkua22vRRvgAAAAM"]
[Fri Apr 17 22:58:39.879972 2026] [:error] [pid 9152:tid 9209] [client 172.213.226.43:37049] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeJKn5JYca8I3TNCwIeBDgAAAFM"]
[Fri Apr 17 22:58:40.349477 2026] [:error] [pid 9151:tid 9176] [client 172.213.226.43:37015] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeJKoMhTVuRPkua22vRRwQAAAA8"]
[Fri Apr 17 22:58:40.843743 2026] [:error] [pid 9151:tid 9171] [client 172.213.226.43:37023] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeJKoMhTVuRPkua22vRRwwAAAAo"]
[Fri Apr 17 22:58:41.310251 2026] [:error] [pid 25010:tid 25029] [client 172.213.226.43:36998] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeJKoY-7kkf42RarqQ2MJwAAAVA"]
[Fri Apr 17 22:58:41.776030 2026] [:error] [pid 9152:tid 9191] [client 172.213.226.43:32375] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aeJKoZJYca8I3TNCwIeBEAAAAEE"]
[Fri Apr 17 22:58:42.241908 2026] [:error] [pid 25010:tid 25037] [client 172.213.226.43:37047] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeJKoo-7kkf42RarqQ2MKQAAAVg"]
[Fri Apr 17 22:58:42.722478 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:32381] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeJKohP68VyHNvj1e56A4QAAAMk"]
[Fri Apr 17 22:58:43.188916 2026] [:error] [pid 25010:tid 25031] [client 172.213.226.43:37051] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeJKo4-7kkf42RarqQ2MKgAAAVI"]
[Fri Apr 17 22:58:43.683400 2026] [:error] [pid 51878:tid 51887] [client 172.213.226.43:32325] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeJKo0nQhUtMbw9EsgbPqwAAAQc"]
[Fri Apr 17 22:58:44.154135 2026] [:error] [pid 9152:tid 9213] [client 172.213.226.43:37014] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeJKpJJYca8I3TNCwIeBFgAAAFc"]
[Fri Apr 17 22:58:44.637702 2026] [:error] [pid 34273:tid 34276] [client 172.213.226.43:37040] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeJKpGuQDW686mK3dgEkXQAAAYE"]
[Fri Apr 17 22:58:45.103056 2026] [:error] [pid 34273:tid 34282] [client 172.213.226.43:32335] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeJKpWuQDW686mK3dgEkXwAAAYc"]
[Fri Apr 17 22:58:45.567570 2026] [:error] [pid 51878:tid 51892] [client 172.213.226.43:32369] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeJKpUnQhUtMbw9EsgbPsQAAAQw"]
[Fri Apr 17 22:58:46.038140 2026] [:error] [pid 9153:tid 9231] [client 172.213.226.43:37018] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeJKpuMHGxkTZX3c45chfwAAAI0"]
[Fri Apr 17 22:58:46.510016 2026] [:error] [pid 51878:tid 51901] [client 172.213.226.43:37026] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeJKpknQhUtMbw9EsgbPtgAAARU"]
[Fri Apr 17 22:58:47.022448 2026] [:error] [pid 61523:tid 61559] [client 172.213.226.43:37044] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeJKp8OaH-Pgc7WEf4P57gAAAdE"]
[Fri Apr 17 22:58:47.498603 2026] [:error] [pid 51878:tid 51884] [client 172.213.226.43:32350] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeJKp0nQhUtMbw9EsgbPuAAAAQQ"]
[Fri Apr 17 22:58:47.999876 2026] [:error] [pid 9152:tid 9199] [client 172.213.226.43:37043] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeJKp5JYca8I3TNCwIeBLAAAAEk"]
[Fri Apr 17 22:58:48.468154 2026] [:error] [pid 51878:tid 51891] [client 172.213.226.43:32329] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeJKqEnQhUtMbw9EsgbPuwAAAQs"]
[Fri Apr 17 22:58:48.936298 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:37036] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeJKqBP68VyHNvj1e56A6AAAANI"]
[Fri Apr 17 22:58:49.401961 2026] [:error] [pid 9263:tid 9268] [client 172.213.226.43:37037] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeJKqRP68VyHNvj1e56A6QAAAMM"]
[Fri Apr 17 22:58:49.866720 2026] [:error] [pid 9263:tid 9271] [client 172.213.226.43:36995] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeJKqRP68VyHNvj1e56A7AAAAMY"]
[Fri Apr 17 22:58:50.333020 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:36997] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeJKqhP68VyHNvj1e56A7gAAAMk"]
[Fri Apr 17 22:58:50.803028 2026] [:error] [pid 51878:tid 51882] [client 172.213.226.43:37002] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeJKqknQhUtMbw9EsgbPwQAAAQI"]
[Fri Apr 17 22:58:51.269565 2026] [:error] [pid 9263:tid 9288] [client 172.213.226.43:37025] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "aeJKqxP68VyHNvj1e56A8gAAANc"]
[Fri Apr 17 22:58:51.744737 2026] [:error] [pid 9263:tid 9269] [client 172.213.226.43:32370] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeJKqxP68VyHNvj1e56A9AAAAMQ"]
[Fri Apr 17 22:58:52.210180 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:32332] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeJKrBP68VyHNvj1e56A9QAAAM4"]
[Fri Apr 17 22:58:52.677889 2026] [:error] [pid 9263:tid 9280] [client 172.213.226.43:37022] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeJKrBP68VyHNvj1e56A-gAAAM8"]
[Fri Apr 17 22:58:53.143693 2026] [:error] [pid 9263:tid 9268] [client 172.213.226.43:37055] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeJKrRP68VyHNvj1e56A_QAAAMM"]
[Fri Apr 17 22:58:53.610682 2026] [:error] [pid 9263:tid 9277] [client 172.213.226.43:37052] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJKrRP68VyHNvj1e56BAQAAAMw"]
[Fri Apr 17 22:58:54.076830 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:32355] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJKrhP68VyHNvj1e56BAgAAAMk"]
[Fri Apr 17 22:58:54.541991 2026] [:error] [pid 9152:tid 9202] [client 172.213.226.43:19413] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJKrpJYca8I3TNCwIeBTgAAAEw"]
[Fri Apr 17 22:58:55.006073 2026] [:error] [pid 61523:tid 61561] [client 172.213.226.43:32343] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJKr8OaH-Pgc7WEf4P58QAAAdM"]
[Fri Apr 17 22:58:55.470548 2026] [:error] [pid 9151:tid 9163] [client 172.213.226.43:19418] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJKr8hTVuRPkua22vRRyAAAAAI"]
[Fri Apr 17 22:58:55.935907 2026] [:error] [pid 51878:tid 51893] [client 172.213.226.43:37010] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJKr0nQhUtMbw9EsgbPxAAAAQ0"]
[Fri Apr 17 22:58:56.400589 2026] [:error] [pid 9263:tid 9286] [client 172.213.226.43:37034] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJKsBP68VyHNvj1e56BCQAAANU"]
[Fri Apr 17 22:58:56.868799 2026] [:error] [pid 61523:tid 61560] [client 172.213.226.43:32342] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJKsMOaH-Pgc7WEf4P58wAAAdI"]
[Fri Apr 17 22:58:57.346672 2026] [:error] [pid 9152:tid 9209] [client 172.213.226.43:32354] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeJKsZJYca8I3TNCwIeBUwAAAFM"]
[Fri Apr 17 22:58:57.814286 2026] [:error] [pid 34273:tid 34283] [client 172.213.226.43:37029] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeJKsWuQDW686mK3dgEkiQAAAYg"]
[Fri Apr 17 22:58:58.289735 2026] [:error] [pid 9152:tid 9212] [client 172.213.226.43:19407] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeJKspJYca8I3TNCwIeBVQAAAFY"]
[Fri Apr 17 22:58:58.759771 2026] [:error] [pid 9263:tid 9287] [client 172.213.226.43:32337] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "aeJKshP68VyHNvj1e56BCwAAANY"]
[Fri Apr 17 22:58:59.231440 2026] [:error] [pid 9263:tid 9282] [client 172.213.226.43:19433] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeJKsxP68VyHNvj1e56BDAAAANE"]
[Fri Apr 17 22:58:59.696200 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:19426] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeJKsxP68VyHNvj1e56BDgAAANI"]
[Fri Apr 17 22:59:00.160799 2026] [:error] [pid 25010:tid 25017] [client 172.213.226.43:32380] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeJKtI-7kkf42RarqQ2MLQAAAUQ"]
[Fri Apr 17 22:59:00.626674 2026] [:error] [pid 25010:tid 25015] [client 172.213.226.43:19408] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny"] [unique_id "aeJKtI-7kkf42RarqQ2MLwAAAUI"]
[Fri Apr 17 22:59:01.096838 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:32345] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aeJKtRP68VyHNvj1e56BEwAAAMI"]
[Fri Apr 17 22:59:01.568436 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:19436] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJKtRP68VyHNvj1e56BFgAAAMk"]
[Fri Apr 17 22:59:02.039715 2026] [:error] [pid 9263:tid 9271] [client 172.213.226.43:37001] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJKthP68VyHNvj1e56BGAAAAMY"]
[Fri Apr 17 22:59:02.509925 2026] [:error] [pid 9263:tid 9281] [client 172.213.226.43:32368] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJKthP68VyHNvj1e56BGwAAANA"]
[Fri Apr 17 22:59:02.979360 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:19443] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeJKthP68VyHNvj1e56BHgAAAM4"]
[Fri Apr 17 22:59:03.460628 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:32331] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeJKtxP68VyHNvj1e56BIAAAANI"]
[Fri Apr 17 22:59:03.929764 2026] [:error] [pid 34273:tid 34296] [client 172.213.226.43:32324] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeJKt2uQDW686mK3dgEkigAAAZU"]
[Fri Apr 17 22:59:04.404421 2026] [:error] [pid 9263:tid 9270] [client 172.213.226.43:32347] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeJKuBP68VyHNvj1e56BJAAAAMU"]
[Fri Apr 17 22:59:04.868948 2026] [:error] [pid 9263:tid 9268] [client 172.213.226.43:19405] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeJKuBP68VyHNvj1e56BJgAAAMM"]
[Fri Apr 17 22:59:05.334340 2026] [:error] [pid 9263:tid 9278] [client 172.213.226.43:19441] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeJKuRP68VyHNvj1e56BKgAAAM0"]
[Fri Apr 17 22:59:05.797809 2026] [:error] [pid 61523:tid 61546] [client 172.213.226.43:32383] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeJKucOaH-Pgc7WEf4P5-QAAAcQ"]
[Fri Apr 17 22:59:06.263181 2026] [:error] [pid 9151:tid 9179] [client 172.213.226.43:32340] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeJKushTVuRPkua22vRRzAAAABI"]
[Fri Apr 17 22:59:06.728606 2026] [:error] [pid 9263:tid 9268] [client 172.213.226.43:37012] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeJKuhP68VyHNvj1e56BMwAAAMM"]
[Fri Apr 17 22:59:07.193485 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:37016] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeJKuxP68VyHNvj1e56BOAAAAMk"]
[Fri Apr 17 22:59:07.659809 2026] [:error] [pid 9263:tid 9270] [client 172.213.226.43:19438] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeJKuxP68VyHNvj1e56BQAAAAMU"]
[Fri Apr 17 22:59:08.124070 2026] [:error] [pid 9263:tid 9287] [client 172.213.226.43:37027] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeJKvBP68VyHNvj1e56BRwAAANY"]
[Fri Apr 17 22:59:08.591891 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:19396] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeJKvBP68VyHNvj1e56BUgAAAMk"]
[Fri Apr 17 22:59:09.065409 2026] [:error] [pid 9263:tid 9284] [client 172.213.226.43:37003] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeJKvRP68VyHNvj1e56BWAAAANM"]
[Fri Apr 17 22:59:09.532394 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:19414] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeJKvRP68VyHNvj1e56BWwAAAMk"]
[Fri Apr 17 22:59:09.998868 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:37024] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/footer.php"] [unique_id "aeJKvRP68VyHNvj1e56BYAAAANI"]
[Fri Apr 17 22:59:10.463866 2026] [:error] [pid 34273:tid 34282] [client 172.213.226.43:37041] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeJKvmuQDW686mK3dgEkjgAAAYc"]
[Fri Apr 17 22:59:10.928130 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:19422] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeJKvhP68VyHNvj1e56BZwAAAM4"]
[Fri Apr 17 22:59:11.393805 2026] [:error] [pid 9263:tid 9270] [client 172.213.226.43:37004] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeJKvxP68VyHNvj1e56BbQAAAMU"]
[Fri Apr 17 22:59:11.859712 2026] [:error] [pid 51878:tid 51904] [client 172.213.226.43:32377] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/img.php"] [unique_id "aeJKv0nQhUtMbw9EsgbP1wAAARg"]
[Fri Apr 17 22:59:12.323804 2026] [:error] [pid 25010:tid 25026] [client 172.213.226.43:36996] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeJKwI-7kkf42RarqQ2MMgAAAU0"]
[Fri Apr 17 22:59:12.811077 2026] [:error] [pid 51878:tid 51890] [client 172.213.226.43:32333] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeJKwEnQhUtMbw9EsgbP2gAAAQo"]
[Fri Apr 17 22:59:13.279209 2026] [:error] [pid 34273:tid 34275] [client 172.213.226.43:19346] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeJKwWuQDW686mK3dgEkkgAAAYA"]
[Fri Apr 17 22:59:13.757984 2026] [:error] [pid 61523:tid 61558] [client 172.213.226.43:19400] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeJKwcOaH-Pgc7WEf4P6AAAAAdA"]
[Fri Apr 17 22:59:14.222405 2026] [:error] [pid 9263:tid 9280] [client 172.213.226.43:32367] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeJKwhP68VyHNvj1e56BeQAAAM8"]
[Fri Apr 17 22:59:14.711655 2026] [:error] [pid 9263:tid 9285] [client 172.213.226.43:32322] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeJKwhP68VyHNvj1e56BfAAAANQ"]
[Fri Apr 17 22:59:15.188855 2026] [:error] [pid 61523:tid 61561] [client 172.213.226.43:32357] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeJKw8OaH-Pgc7WEf4P6CAAAAdM"]
[Fri Apr 17 22:59:15.654377 2026] [:error] [pid 9151:tid 9183] [client 172.213.226.43:19412] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeJKw8hTVuRPkua22vRRzgAAABY"]
[Fri Apr 17 22:59:16.118201 2026] [:error] [pid 61523:tid 61555] [client 172.213.226.43:19394] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeJKxMOaH-Pgc7WEf4P6CgAAAc0"]
[Fri Apr 17 22:59:16.596858 2026] [:error] [pid 51878:tid 51900] [client 172.213.226.43:37046] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeJKxEnQhUtMbw9EsgbP3wAAARQ"]
[Fri Apr 17 22:59:17.067323 2026] [:error] [pid 51878:tid 51882] [client 172.213.226.43:19381] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeJKxUnQhUtMbw9EsgbP4QAAAQI"]
[Fri Apr 17 22:59:17.537103 2026] [:error] [pid 25010:tid 25036] [client 172.213.226.43:32326] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeJKxY-7kkf42RarqQ2MNAAAAVc"]
[Fri Apr 17 22:59:18.013369 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:19336] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeJKxhP68VyHNvj1e56BhwAAAMI"]
[Fri Apr 17 22:59:18.486682 2026] [:error] [pid 9263:tid 9278] [client 172.213.226.43:19410] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeJKxhP68VyHNvj1e56BigAAAM0"]
[Fri Apr 17 22:59:18.964650 2026] [:error] [pid 61523:tid 61543] [client 172.213.226.43:32341] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeJKxsOaH-Pgc7WEf4P6DQAAAcE"]
[Fri Apr 17 22:59:19.430033 2026] [:error] [pid 9263:tid 9271] [client 172.213.226.43:37005] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeJKxxP68VyHNvj1e56BjAAAAMY"]
[Fri Apr 17 22:59:19.894752 2026] [:error] [pid 9263:tid 9272] [client 172.213.226.43:19434] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeJKxxP68VyHNvj1e56BjQAAAMc"]
[Fri Apr 17 22:59:20.359294 2026] [:error] [pid 9263:tid 9265] [client 172.213.226.43:37031] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeJKyBP68VyHNvj1e56BkAAAAMA"]
[Fri Apr 17 22:59:20.829692 2026] [:error] [pid 9152:tid 9191] [client 172.213.226.43:32321] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeJKyJJYca8I3TNCwIeBXwAAAEE"]
[Fri Apr 17 22:59:21.295799 2026] [:error] [pid 9152:tid 9190] [client 172.213.226.43:37050] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/roksad1.php"] [unique_id "aeJKyZJYca8I3TNCwIeBYAAAAEA"]
[Fri Apr 17 22:59:21.777806 2026] [:error] [pid 34273:tid 34281] [client 172.213.226.43:32382] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeJKyWuQDW686mK3dgEkmgAAAYY"]
[Fri Apr 17 22:59:22.241653 2026] [:error] [pid 61523:tid 61555] [client 172.213.226.43:19424] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeJKysOaH-Pgc7WEf4P6FwAAAc0"]
[Fri Apr 17 22:59:22.712949 2026] [:error] [pid 9263:tid 9273] [client 172.213.226.43:32358] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeJKyhP68VyHNvj1e56BlAAAAMg"]
[Fri Apr 17 22:59:23.176848 2026] [:error] [pid 9263:tid 9275] [client 172.213.226.43:37006] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeJKyxP68VyHNvj1e56BlgAAAMo"]
[Fri Apr 17 22:59:23.649570 2026] [:error] [pid 34273:tid 34290] [client 172.213.226.43:36993] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeJKy2uQDW686mK3dgEkngAAAY8"]
[Fri Apr 17 22:59:24.113586 2026] [:error] [pid 9263:tid 9268] [client 172.213.226.43:19347] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeJKzBP68VyHNvj1e56BmgAAAMM"]
[Fri Apr 17 22:59:24.597311 2026] [:error] [pid 34273:tid 34283] [client 172.213.226.43:19453] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeJKzGuQDW686mK3dgEkogAAAYg"]
[Fri Apr 17 22:59:25.071402 2026] [:error] [pid 9153:tid 9225] [client 172.213.226.43:32344] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aeJKzeMHGxkTZX3c45ch6QAAAIc"]
[Fri Apr 17 22:59:25.540738 2026] [:error] [pid 25010:tid 25031] [client 172.213.226.43:37039] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeJKzY-7kkf42RarqQ2MNQAAAVI"]
[Fri Apr 17 22:59:26.008903 2026] [:error] [pid 9151:tid 9177] [client 172.213.226.43:32373] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeJKzshTVuRPkua22vRR2wAAABA"]
[Fri Apr 17 22:59:26.474065 2026] [:error] [pid 9152:tid 9211] [client 172.213.226.43:37030] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeJKzpJYca8I3TNCwIeBaAAAAFU"]
[Fri Apr 17 22:59:26.945945 2026] [:error] [pid 9151:tid 9162] [client 172.213.226.43:37000] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aeJKzshTVuRPkua22vRR3gAAAAE"]
[Fri Apr 17 22:59:27.410357 2026] [:error] [pid 9151:tid 9172] [client 172.213.226.43:37042] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeJKz8hTVuRPkua22vRR4gAAAAs"]
[Fri Apr 17 22:59:27.874743 2026] [:error] [pid 9263:tid 9275] [client 172.213.226.43:32361] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeJKzxP68VyHNvj1e56BnQAAAMo"]
[Fri Apr 17 22:59:28.350966 2026] [:error] [pid 9263:tid 9286] [client 172.213.226.43:19415] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeJK0BP68VyHNvj1e56BoQAAANU"]
[Fri Apr 17 22:59:28.818415 2026] [:error] [pid 9263:tid 9272] [client 172.213.226.43:32372] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeJK0BP68VyHNvj1e56BpQAAAMc"]
[Fri Apr 17 22:59:29.282776 2026] [:error] [pid 51878:tid 51889] [client 172.213.226.43:19332] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aeJK0UnQhUtMbw9EsgbP5gAAAQk"]
[Fri Apr 17 22:59:29.754059 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:37007] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aeJK0RP68VyHNvj1e56BqwAAAMI"]
[Fri Apr 17 22:59:30.217847 2026] [:error] [pid 51878:tid 51895] [client 172.213.226.43:32320] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aeJK0knQhUtMbw9EsgbP5wAAAQ8"]
[Fri Apr 17 22:59:30.682833 2026] [:error] [pid 9151:tid 9174] [client 172.213.226.43:19442] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aeJK0shTVuRPkua22vRR5AAAAA0"]
[Fri Apr 17 22:59:31.159470 2026] [:error] [pid 51878:tid 51891] [client 172.213.226.43:37009] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "aeJK00nQhUtMbw9EsgbP6wAAAQs"]
[Fri Apr 17 22:59:31.625359 2026] [:error] [pid 51878:tid 51881] [client 172.213.226.43:37013] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "aeJK00nQhUtMbw9EsgbP7gAAAQE"]
[Fri Apr 17 22:59:32.094265 2026] [:error] [pid 51878:tid 51888] [client 172.213.226.43:19392] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "aeJK1EnQhUtMbw9EsgbP8gAAAQg"]
[Fri Apr 17 22:59:32.559536 2026] [:error] [pid 9263:tid 9280] [client 172.213.226.43:19350] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "aeJK1BP68VyHNvj1e56BtAAAAM8"]
[Fri Apr 17 22:59:33.033188 2026] [:error] [pid 51878:tid 51889] [client 172.213.226.43:32339] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "aeJK1UnQhUtMbw9EsgbP9gAAAQk"]
[Fri Apr 17 22:59:33.496934 2026] [:error] [pid 51878:tid 51895] [client 172.213.226.43:32376] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "aeJK1UnQhUtMbw9EsgbP9wAAAQ8"]
[Fri Apr 17 22:59:33.960794 2026] [:error] [pid 9152:tid 9208] [client 172.213.226.43:19395] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "aeJK1ZJYca8I3TNCwIeBcQAAAFI"]
[Fri Apr 17 22:59:34.435142 2026] [proxy_fcgi:error] [pid 51878:tid 51883] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:34.671986 2026] [proxy_fcgi:error] [pid 51878:tid 51891] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:34.908748 2026] [proxy_fcgi:error] [pid 51878:tid 51894] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:35.145358 2026] [proxy_fcgi:error] [pid 51878:tid 51881] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:35.381666 2026] [proxy_fcgi:error] [pid 51878:tid 51898] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:35.618584 2026] [proxy_fcgi:error] [pid 51878:tid 51902] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:36.286644 2026] [proxy_fcgi:error] [pid 51878:tid 51888] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:36.522572 2026] [proxy_fcgi:error] [pid 51878:tid 51889] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:36.759066 2026] [proxy_fcgi:error] [pid 51878:tid 51904] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:36.995621 2026] [proxy_fcgi:error] [pid 51878:tid 51894] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:37.232951 2026] [proxy_fcgi:error] [pid 51878:tid 51890] [client 172.213.226.43:19455] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 22:59:37.465500 2026] [:error] [pid 51878:tid 51902] [client 172.213.226.43:19455] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeJK2UnQhUtMbw9EsgbQEwAAARY"]
[Fri Apr 17 22:59:37.931314 2026] [:error] [pid 34273:tid 34297] [client 172.213.226.43:36992] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeJK2WuQDW686mK3dgEkvwAAAZY"]
[Fri Apr 17 22:59:38.402572 2026] [:error] [pid 34273:tid 34288] [client 172.213.226.43:32363] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeJK2muQDW686mK3dgEkwQAAAY0"]
[Fri Apr 17 22:59:38.870884 2026] [:error] [pid 9151:tid 9182] [client 172.213.226.43:37032] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/006.php"] [unique_id "aeJK2shTVuRPkua22vRR5wAAABU"]
[Fri Apr 17 22:59:39.336455 2026] [:error] [pid 9263:tid 9278] [client 172.213.226.43:32330] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeJK2xP68VyHNvj1e56BwwAAAM0"]
[Fri Apr 17 22:59:39.805986 2026] [:error] [pid 34273:tid 34293] [client 172.213.226.43:37048] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeJK22uQDW686mK3dgEkxAAAAZI"]
[Fri Apr 17 22:59:40.270713 2026] [:error] [pid 9152:tid 9209] [client 172.213.226.43:19449] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeJK3JJYca8I3TNCwIeBcgAAAFM"]
[Fri Apr 17 22:59:40.747991 2026] [:error] [pid 9152:tid 9190] [client 172.213.226.43:19403] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aeJK3JJYca8I3TNCwIeBdQAAAEA"]
[Fri Apr 17 22:59:41.219854 2026] [:error] [pid 61523:tid 61551] [client 172.213.226.43:19419] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeJK3cOaH-Pgc7WEf4P6IQAAAck"]
[Fri Apr 17 22:59:41.685505 2026] [:error] [pid 34273:tid 34289] [client 172.213.226.43:19342] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeJK3WuQDW686mK3dgEkygAAAY4"]
[Fri Apr 17 22:59:42.148772 2026] [:error] [pid 34273:tid 34294] [client 172.213.226.43:19429] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeJK3muQDW686mK3dgEkzQAAAZM"]
[Fri Apr 17 22:59:42.615328 2026] [:error] [pid 34273:tid 34287] [client 172.213.226.43:37019] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeJK3muQDW686mK3dgEk0QAAAYw"]
[Fri Apr 17 22:59:43.085627 2026] [:error] [pid 9151:tid 9166] [client 172.213.226.43:19404] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeJK38hTVuRPkua22vRR6QAAAAU"]
[Fri Apr 17 22:59:43.606159 2026] [:error] [pid 34273:tid 34279] [client 172.213.226.43:32336] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeJK32uQDW686mK3dgEk1QAAAYQ"]
[Fri Apr 17 22:59:44.113091 2026] [:error] [pid 9152:tid 9199] [client 172.213.226.43:37054] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeJK4JJYca8I3TNCwIeBfwAAAEk"]
[Fri Apr 17 22:59:44.588343 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:19402] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aios-bootstrap.php"] [unique_id "aeJK4BP68VyHNvj1e56BzQAAAM4"]
[Fri Apr 17 22:59:45.081422 2026] [:error] [pid 61523:tid 61548] [client 172.213.226.43:32378] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeJK4cOaH-Pgc7WEf4P6IgAAAcY"]
[Fri Apr 17 22:59:45.548834 2026] [:error] [pid 61523:tid 61564] [client 172.213.226.43:19343] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeJK4cOaH-Pgc7WEf4P6IwAAAdY"]
[Fri Apr 17 22:59:46.038304 2026] [:error] [pid 9151:tid 9185] [client 172.213.226.43:19373] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeJK4shTVuRPkua22vRR8AAAABg"]
[Fri Apr 17 22:59:46.554024 2026] [:error] [pid 9151:tid 9180] [client 172.213.226.43:19331] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeJK4shTVuRPkua22vRR8QAAABM"]
[Fri Apr 17 22:59:47.025578 2026] [:error] [pid 25010:tid 25037] [client 172.213.226.43:19333] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeJK44-7kkf42RarqQ2MTAAAAVg"]
[Fri Apr 17 22:59:47.500279 2026] [:error] [pid 9152:tid 9194] [client 172.213.226.43:19440] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeJK45JYca8I3TNCwIeBiQAAAEQ"]
[Fri Apr 17 22:59:47.973424 2026] [:error] [pid 9152:tid 9204] [client 172.213.226.43:19398] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeJK45JYca8I3TNCwIeBiwAAAE4"]
[Fri Apr 17 22:59:48.454619 2026] [:error] [pid 9263:tid 9288] [client 172.213.226.43:19352] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeJK5BP68VyHNvj1e56B0wAAANc"]
[Fri Apr 17 22:59:48.976037 2026] [:error] [pid 9263:tid 9281] [client 172.213.226.43:36999] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeJK5BP68VyHNvj1e56B1QAAANA"]
[Fri Apr 17 22:59:49.441565 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:19416] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeJK5RP68VyHNvj1e56B1wAAANI"]
[Fri Apr 17 22:59:49.905202 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:19362] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeJK5RP68VyHNvj1e56B2AAAAM4"]
[Fri Apr 17 22:59:50.370915 2026] [:error] [pid 51878:tid 51897] [client 172.213.226.43:37021] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeJK5knQhUtMbw9EsgbQHwAAARE"]
[Fri Apr 17 22:59:50.838347 2026] [:error] [pid 9263:tid 9284] [client 172.213.226.43:19330] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeJK5hP68VyHNvj1e56B2wAAANM"]
[Fri Apr 17 22:59:51.302584 2026] [:error] [pid 9152:tid 9196] [client 172.213.226.43:19430] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeJK55JYca8I3TNCwIeBkAAAAEY"]
[Fri Apr 17 22:59:51.773344 2026] [:error] [pid 9152:tid 9193] [client 172.213.226.43:37053] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeJK55JYca8I3TNCwIeBkgAAAEM"]
[Fri Apr 17 22:59:52.239885 2026] [:error] [pid 9263:tid 9278] [client 172.213.226.43:32349] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeJK6BP68VyHNvj1e56B3QAAAM0"]
[Fri Apr 17 22:59:52.716071 2026] [:error] [pid 9263:tid 9282] [client 172.213.226.43:37013] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeJK6BP68VyHNvj1e56B4AAAANE"]
[Fri Apr 17 22:59:53.180735 2026] [:error] [pid 51878:tid 51886] [client 172.213.226.43:19348] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeJK6UnQhUtMbw9EsgbQIgAAAQY"]
[Fri Apr 17 22:59:53.652555 2026] [:error] [pid 9151:tid 9169] [client 172.213.226.43:19399] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeJK6chTVuRPkua22vRR9wAAAAg"]
[Fri Apr 17 22:59:54.118174 2026] [:error] [pid 9151:tid 9165] [client 172.213.226.43:32353] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qqa.php"] [unique_id "aeJK6shTVuRPkua22vRR-gAAAAQ"]
[Fri Apr 17 22:59:54.583179 2026] [:error] [pid 9151:tid 9163] [client 172.213.226.43:19417] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeJK6shTVuRPkua22vRR_AAAAAI"]
[Fri Apr 17 22:59:55.052131 2026] [:error] [pid 51878:tid 51895] [client 172.213.226.43:19435] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeJK60nQhUtMbw9EsgbQJgAAAQ8"]
[Fri Apr 17 22:59:55.517158 2026] [:error] [pid 9263:tid 9273] [client 172.213.226.43:32328] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeJK6xP68VyHNvj1e56B4gAAAMg"]
[Fri Apr 17 22:59:55.985172 2026] [:error] [pid 61523:tid 61544] [client 172.213.226.43:19360] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeJK68OaH-Pgc7WEf4P6MgAAAcI"]
[Fri Apr 17 22:59:56.455626 2026] [:error] [pid 9152:tid 9197] [client 172.213.226.43:19334] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeJK7JJYca8I3TNCwIeBlQAAAEc"]
[Fri Apr 17 22:59:56.919739 2026] [:error] [pid 9152:tid 9210] [client 172.213.226.43:19409] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeJK7JJYca8I3TNCwIeBlgAAAFQ"]
[Fri Apr 17 22:59:57.384392 2026] [:error] [pid 9152:tid 9213] [client 172.213.226.43:19437] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeJK7ZJYca8I3TNCwIeBmAAAAFc"]
[Fri Apr 17 22:59:57.852703 2026] [:error] [pid 51878:tid 51894] [client 172.213.226.43:19439] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ga.php"] [unique_id "aeJK7UnQhUtMbw9EsgbQLwAAAQ4"]
[Fri Apr 17 22:59:58.323862 2026] [:error] [pid 9153:tid 9226] [client 172.213.226.43:15861] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeJK7uMHGxkTZX3c45ciDAAAAIg"]
[Fri Apr 17 22:59:58.800875 2026] [:error] [pid 9152:tid 9200] [client 172.213.226.43:15809] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeJK7pJYca8I3TNCwIeBmwAAAEo"]
[Fri Apr 17 22:59:59.273724 2026] [:error] [pid 9153:tid 9230] [client 172.213.226.43:32364] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeJK7-MHGxkTZX3c45ciDQAAAIw"]
[Fri Apr 17 22:59:59.737925 2026] [:error] [pid 61523:tid 61565] [client 172.213.226.43:15817] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "aeJK78OaH-Pgc7WEf4P6NwAAAdc"]
[Fri Apr 17 23:00:00.201934 2026] [:error] [pid 61523:tid 61554] [client 172.213.226.43:15816] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeJK8MOaH-Pgc7WEf4P6OgAAAcw"]
[Fri Apr 17 23:00:00.666433 2026] [:error] [pid 9153:tid 9221] [client 172.213.226.43:32356] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeJK8OMHGxkTZX3c45ciEAAAAIM"]
[Fri Apr 17 23:00:01.132367 2026] [:error] [pid 9153:tid 9236] [client 172.213.226.43:15831] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeJK8eMHGxkTZX3c45ciEgAAAJI"]
[Fri Apr 17 23:00:01.597119 2026] [:error] [pid 51878:tid 51888] [client 172.213.226.43:32360] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aeJK8UnQhUtMbw9EsgbQNQAAAQg"]
[Fri Apr 17 23:00:02.061558 2026] [:error] [pid 9152:tid 9196] [client 172.213.226.43:19388] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeJK8pJYca8I3TNCwIeBnwAAAEY"]
[Fri Apr 17 23:00:02.531711 2026] [:error] [pid 51878:tid 51896] [client 172.213.226.43:37020] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeJK8knQhUtMbw9EsgbQNwAAARA"]
[Fri Apr 17 23:00:03.029702 2026] [:error] [pid 61523:tid 61552] [client 172.213.226.43:15848] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeJK88OaH-Pgc7WEf4P6QgAAAco"]
[Fri Apr 17 23:00:03.520595 2026] [:error] [pid 25010:tid 25020] [client 172.213.226.43:19420] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeJK84-7kkf42RarqQ2MVQAAAUc"]
[Fri Apr 17 23:00:03.999171 2026] [:error] [pid 9152:tid 9201] [client 172.213.226.43:19335] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeJK85JYca8I3TNCwIeBoQAAAEs"]
[Fri Apr 17 23:00:04.469231 2026] [:error] [pid 25010:tid 25029] [client 172.213.226.43:19363] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeJK9I-7kkf42RarqQ2MVwAAAVA"]
[Fri Apr 17 23:00:04.934561 2026] [:error] [pid 9152:tid 9204] [client 172.213.226.43:15851] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeJK9JJYca8I3TNCwIeBowAAAE4"]
[Fri Apr 17 23:00:05.401270 2026] [:error] [pid 51878:tid 51899] [client 172.213.226.43:19337] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeJK9UnQhUtMbw9EsgbQOgAAARM"]
[Fri Apr 17 23:00:05.881286 2026] [:error] [pid 25010:tid 25035] [client 172.213.226.43:19406] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeJK9Y-7kkf42RarqQ2MWAAAAVY"]
[Fri Apr 17 23:00:06.347290 2026] [:error] [pid 51878:tid 51902] [client 172.213.226.43:19447] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeJK9knQhUtMbw9EsgbQPgAAARY"]
[Fri Apr 17 23:00:06.822560 2026] [:error] [pid 51878:tid 51898] [client 172.213.226.43:19351] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeJK9knQhUtMbw9EsgbQRQAAARI"]
[Fri Apr 17 23:00:07.290407 2026] [:error] [pid 51878:tid 51903] [client 172.213.226.43:32366] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "aeJK90nQhUtMbw9EsgbQSAAAARc"]
[Fri Apr 17 23:00:07.761804 2026] [:error] [pid 51878:tid 51901] [client 172.213.226.43:19393] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeJK90nQhUtMbw9EsgbQSwAAARU"]
[Fri Apr 17 23:00:08.225300 2026] [:error] [pid 51878:tid 51893] [client 172.213.226.43:19374] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeJK-EnQhUtMbw9EsgbQTwAAAQ0"]
[Fri Apr 17 23:00:08.692697 2026] [:error] [pid 51878:tid 51880] [client 172.213.226.43:19375] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeJK-EnQhUtMbw9EsgbQVQAAAQA"]
[Fri Apr 17 23:00:09.172947 2026] [:error] [pid 51878:tid 51897] [client 172.213.226.43:15760] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-lo.php"] [unique_id "aeJK-UnQhUtMbw9EsgbQWAAAARE"]
[Fri Apr 17 23:00:09.638375 2026] [:error] [pid 51878:tid 51883] [client 172.213.226.43:32362] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeJK-UnQhUtMbw9EsgbQXAAAAQM"]
[Fri Apr 17 23:00:10.102909 2026] [:error] [pid 51878:tid 51894] [client 172.213.226.43:32374] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeJK-knQhUtMbw9EsgbQZgAAAQ4"]
[Fri Apr 17 23:00:10.568026 2026] [:error] [pid 51878:tid 51883] [client 172.213.226.43:19364] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeJK-knQhUtMbw9EsgbQcgAAAQM"]
[Fri Apr 17 23:00:11.040549 2026] [:error] [pid 51878:tid 51894] [client 172.213.226.43:19401] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeJK-0nQhUtMbw9EsgbQewAAAQ4"]
[Fri Apr 17 23:00:11.508173 2026] [:error] [pid 51878:tid 51883] [client 172.213.226.43:19370] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeJK-0nQhUtMbw9EsgbQgwAAAQM"]
[Fri Apr 17 23:00:11.973982 2026] [:error] [pid 51878:tid 51894] [client 172.213.226.43:19452] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeJK-0nQhUtMbw9EsgbQiwAAAQ4"]
[Fri Apr 17 23:00:12.440341 2026] [:error] [pid 61523:tid 61545] [client 172.213.226.43:15829] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeJK_MOaH-Pgc7WEf4P6SgAAAcM"]
[Fri Apr 17 23:00:12.909648 2026] [:error] [pid 9263:tid 9280] [client 172.213.226.43:19431] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ipv6.php"] [unique_id "aeJK_BP68VyHNvj1e56B6QAAAM8"]
[Fri Apr 17 23:00:13.374375 2026] [:error] [pid 9151:tid 9171] [client 172.213.226.43:19389] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeJK_chTVuRPkua22vRSBQAAAAo"]
[Fri Apr 17 23:00:13.850215 2026] [:error] [pid 9263:tid 9266] [client 172.213.226.43:15826] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeJK_RP68VyHNvj1e56B6wAAAME"]
[Fri Apr 17 23:00:14.314723 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:19359] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeJK_hP68VyHNvj1e56B7AAAAMI"]
[Fri Apr 17 23:00:14.779184 2026] [:error] [pid 34273:tid 34295] [client 172.213.226.43:15810] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-gertdxz.php"] [unique_id "aeJK_muQDW686mK3dgEk7wAAAZQ"]
[Fri Apr 17 23:00:15.246060 2026] [:error] [pid 34273:tid 34291] [client 172.213.226.43:19390] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeJK_2uQDW686mK3dgEk8QAAAZA"]
[Fri Apr 17 23:00:15.721083 2026] [:error] [pid 9152:tid 9207] [client 172.213.226.43:19341] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeJK_5JYca8I3TNCwIeBqgAAAFE"]
[Fri Apr 17 23:00:16.185601 2026] [:error] [pid 34273:tid 34299] [client 172.213.226.43:15855] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeJLAGuQDW686mK3dgEk9AAAAZg"]
[Fri Apr 17 23:00:16.675959 2026] [:error] [pid 9151:tid 9170] [client 172.213.226.43:37017] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aeJLAMhTVuRPkua22vRSBgAAAAk"]
[Fri Apr 17 23:00:17.141575 2026] [:error] [pid 51878:tid 51903] [client 172.213.226.43:19339] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeJLAUnQhUtMbw9EsgbQowAAARc"]
[Fri Apr 17 23:00:17.606961 2026] [:error] [pid 61523:tid 61556] [client 172.213.226.43:15840] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeJLAcOaH-Pgc7WEf4P6TQAAAc4"]
[Fri Apr 17 23:00:18.075097 2026] [:error] [pid 9151:tid 9179] [client 172.213.226.43:19421] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeJLAshTVuRPkua22vRSCAAAABI"]
[Fri Apr 17 23:00:18.542938 2026] [:error] [pid 34273:tid 34297] [client 172.213.226.43:19345] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeJLAmuQDW686mK3dgEk9QAAAZY"]
[Fri Apr 17 23:00:19.012990 2026] [:error] [pid 9153:tid 9239] [client 172.213.226.43:37045] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeJLA-MHGxkTZX3c45ciHwAAAJU"]
[Fri Apr 17 23:00:19.477734 2026] [:error] [pid 9153:tid 9233] [client 172.213.226.43:15770] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeJLA-MHGxkTZX3c45ciIAAAAI8"]
[Fri Apr 17 23:00:19.943498 2026] [:error] [pid 61523:tid 61541] [client 172.213.226.43:15825] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeJLA8OaH-Pgc7WEf4P6UQAAAcA"]
[Fri Apr 17 23:00:20.407924 2026] [:error] [pid 9151:tid 9172] [client 172.213.226.43:15843] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeJLBMhTVuRPkua22vRSCwAAAAs"]
[Fri Apr 17 23:00:20.890062 2026] [:error] [pid 9263:tid 9280] [client 172.213.226.43:15822] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeJLBBP68VyHNvj1e56B-AAAAM8"]
[Fri Apr 17 23:00:21.360529 2026] [:error] [pid 9263:tid 9266] [client 172.213.226.43:15819] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeJLBRP68VyHNvj1e56B-QAAAME"]
[Fri Apr 17 23:00:21.834672 2026] [:error] [pid 25010:tid 25019] [client 172.213.226.43:19340] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeJLBY-7kkf42RarqQ2MWgAAAUY"]
[Fri Apr 17 23:00:22.300733 2026] [:error] [pid 61523:tid 61559] [client 172.213.226.43:19451] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aeJLBsOaH-Pgc7WEf4P6VAAAAdE"]
[Fri Apr 17 23:00:22.771681 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:19397] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper.php"] [unique_id "aeJLBhP68VyHNvj1e56B_gAAANI"]
[Fri Apr 17 23:00:23.238479 2026] [:error] [pid 34273:tid 34289] [client 172.213.226.43:19427] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper.php"] [unique_id "aeJLB2uQDW686mK3dgEk9gAAAY4"]
[Fri Apr 17 23:00:23.703157 2026] [:error] [pid 9151:tid 9168] [client 172.213.226.43:15771] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper.php"] [unique_id "aeJLB8hTVuRPkua22vRSDAAAAAc"]
[Fri Apr 17 23:00:24.168031 2026] [:error] [pid 9263:tid 9269] [client 172.213.226.43:19369] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper.php"] [unique_id "aeJLCBP68VyHNvj1e56CAAAAAMQ"]
[Fri Apr 17 23:00:24.632578 2026] [:error] [pid 25010:tid 25033] [client 172.213.226.43:19446] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxpass.php"] [unique_id "aeJLCI-7kkf42RarqQ2MXwAAAVQ"]
[Fri Apr 17 23:00:25.097100 2026] [:error] [pid 34273:tid 34281] [client 172.213.226.43:32371] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxpass.php"] [unique_id "aeJLCWuQDW686mK3dgEk_AAAAYY"]
[Fri Apr 17 23:00:25.612107 2026] [:error] [pid 9152:tid 9201] [client 172.213.226.43:15842] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxpass.php"] [unique_id "aeJLCZJYca8I3TNCwIeBrwAAAEs"]
[Fri Apr 17 23:00:26.079621 2026] [:error] [pid 34273:tid 34276] [client 172.213.226.43:32379] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wxpass.php"] [unique_id "aeJLCmuQDW686mK3dgEk_gAAAYE"]
[Fri Apr 17 23:00:26.546686 2026] [:error] [pid 9152:tid 9212] [client 172.213.226.43:19448] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeJLCpJYca8I3TNCwIeBsAAAAFY"]
[Fri Apr 17 23:00:27.019875 2026] [:error] [pid 9263:tid 9272] [client 172.213.226.43:15857] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeJLCxP68VyHNvj1e56CBgAAAMc"]
[Fri Apr 17 23:00:27.492542 2026] [:error] [pid 9151:tid 9177] [client 172.213.226.43:19428] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeJLC8hTVuRPkua22vRSGQAAABA"]
[Fri Apr 17 23:00:27.972387 2026] [:error] [pid 51878:tid 51887] [client 172.213.226.43:32359] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeJLC0nQhUtMbw9EsgbQrQAAAQc"]
[Fri Apr 17 23:00:28.487277 2026] [:error] [pid 9153:tid 9223] [client 172.213.226.43:15864] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJLDOMHGxkTZX3c45ciKgAAAIU"]
[Fri Apr 17 23:00:28.957392 2026] [:error] [pid 34273:tid 34299] [client 172.213.226.43:15824] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJLDGuQDW686mK3dgElCQAAAZg"]
[Fri Apr 17 23:00:29.429415 2026] [:error] [pid 34273:tid 34297] [client 172.213.226.43:15827] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJLDWuQDW686mK3dgElCgAAAZY"]
[Fri Apr 17 23:00:29.894415 2026] [:error] [pid 9263:tid 9266] [client 172.213.226.43:15830] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "aeJLDRP68VyHNvj1e56CDQAAAME"]
[Fri Apr 17 23:00:30.363557 2026] [:error] [pid 34273:tid 34280] [client 172.213.226.43:15870] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x3x.php"] [unique_id "aeJLDmuQDW686mK3dgElCwAAAYU"]
[Fri Apr 17 23:00:30.826501 2026] [:error] [pid 9263:tid 9286] [client 172.213.226.43:15794] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x3x.php"] [unique_id "aeJLDhP68VyHNvj1e56CTgAAANU"]
[Fri Apr 17 23:00:31.349808 2026] [:error] [pid 9263:tid 9268] [client 172.213.226.43:32352] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x3x.php"] [unique_id "aeJLDxP68VyHNvj1e56CewAAAMM"]
[Fri Apr 17 23:00:31.815412 2026] [:error] [pid 9153:tid 9234] [client 172.213.226.43:19344] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x3x.php"] [unique_id "aeJLD-MHGxkTZX3c45ciLQAAAJA"]
[Fri Apr 17 23:00:32.279150 2026] [:error] [pid 25010:tid 25017] [client 172.213.226.43:32365] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aeJLEI-7kkf42RarqQ2MYgAAAUQ"]
[Fri Apr 17 23:00:32.806306 2026] [:error] [pid 25010:tid 25029] [client 172.213.226.43:15813] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aeJLEI-7kkf42RarqQ2MYwAAAVA"]
[Fri Apr 17 23:00:33.275732 2026] [:error] [pid 61523:tid 61551] [client 172.213.226.43:15828] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aeJLEcOaH-Pgc7WEf4P6WwAAAck"]
[Fri Apr 17 23:00:33.782728 2026] [:error] [pid 51878:tid 51900] [client 172.213.226.43:19365] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xy.php"] [unique_id "aeJLEUnQhUtMbw9EsgbQvgAAARQ"]
[Fri Apr 17 23:00:34.248134 2026] [:error] [pid 51878:tid 51887] [client 172.213.226.43:19329] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/global.php"] [unique_id "aeJLEknQhUtMbw9EsgbQwQAAAQc"]
[Fri Apr 17 23:00:34.716562 2026] [:error] [pid 61523:tid 61560] [client 172.213.226.43:15844] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/global.php"] [unique_id "aeJLEsOaH-Pgc7WEf4P6XAAAAdI"]
[Fri Apr 17 23:00:35.181890 2026] [:error] [pid 61523:tid 61548] [client 172.213.226.43:19376] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/global.php"] [unique_id "aeJLE8OaH-Pgc7WEf4P6XQAAAcY"]
[Fri Apr 17 23:00:35.682359 2026] [:error] [pid 9152:tid 9206] [client 172.213.226.43:19454] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/global.php"] [unique_id "aeJLE5JYca8I3TNCwIeB0wAAAFA"]
[Fri Apr 17 23:00:36.150105 2026] [:error] [pid 51878:tid 51881] [client 172.213.226.43:19366] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeJLFEnQhUtMbw9EsgbQxAAAAQE"]
[Fri Apr 17 23:00:36.630290 2026] [:error] [pid 9152:tid 9207] [client 172.213.226.43:19425] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "aeJLFJJYca8I3TNCwIeB1AAAAFE"]
[Fri Apr 17 23:00:37.105108 2026] [proxy_fcgi:error] [pid 9153:tid 9241] [client 172.213.226.43:19378] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:38.568717 2026] [proxy_fcgi:error] [pid 9153:tid 9228] [client 172.213.226.43:19378] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:38.807843 2026] [proxy_fcgi:error] [pid 9153:tid 9239] [client 172.213.226.43:19378] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:39.044774 2026] [proxy_fcgi:error] [pid 9153:tid 9225] [client 172.213.226.43:19378] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:39.277589 2026] [:error] [pid 9153:tid 9229] [client 172.213.226.43:19378] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wincust.php"] [unique_id "aeJLF-MHGxkTZX3c45ciNQAAAIs"]
[Fri Apr 17 23:00:39.762457 2026] [proxy_fcgi:error] [pid 25010:tid 25036] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:40.000320 2026] [proxy_fcgi:error] [pid 25010:tid 25024] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:40.237995 2026] [proxy_fcgi:error] [pid 25010:tid 25019] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:40.474327 2026] [proxy_fcgi:error] [pid 25010:tid 25018] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:40.713134 2026] [proxy_fcgi:error] [pid 25010:tid 25032] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:40.949177 2026] [proxy_fcgi:error] [pid 25010:tid 25031] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:41.185132 2026] [proxy_fcgi:error] [pid 25010:tid 25033] [client 172.213.226.43:19385] AH01071: Got error 'Primary script unknown'
[Fri Apr 17 23:00:41.417420 2026] [:error] [pid 25010:tid 25021] [client 172.213.226.43:19385] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeJLGY-7kkf42RarqQ2MbgAAAUg"]
[Fri Apr 17 23:00:41.882579 2026] [:error] [pid 51878:tid 51881] [client 172.213.226.43:19368] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeJLGUnQhUtMbw9EsgbQ1wAAAQE"]
[Fri Apr 17 23:00:42.347894 2026] [:error] [pid 51878:tid 51899] [client 172.213.226.43:19377] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeJLGknQhUtMbw9EsgbQ2QAAARM"]
[Fri Apr 17 23:00:42.834553 2026] [:error] [pid 9263:tid 9265] [client 172.213.226.43:19357] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeJLGhP68VyHNvj1e56CvgAAAMA"]
[Fri Apr 17 23:00:43.297974 2026] [:error] [pid 9263:tid 9281] [client 172.213.226.43:19379] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeJLGxP68VyHNvj1e56CwQAAANA"]
[Fri Apr 17 23:00:43.764093 2026] [:error] [pid 61523:tid 61560] [client 172.213.226.43:19386] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeJLG8OaH-Pgc7WEf4P6aAAAAdI"]
[Fri Apr 17 23:00:44.229422 2026] [:error] [pid 61523:tid 61544] [client 172.213.226.43:15754] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeJLHMOaH-Pgc7WEf4P6aQAAAcI"]
[Fri Apr 17 23:00:44.699419 2026] [:error] [pid 51878:tid 51891] [client 172.213.226.43:19445] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeJLHEnQhUtMbw9EsgbQ5wAAAQs"]
[Fri Apr 17 23:00:45.163359 2026] [:error] [pid 9263:tid 9285] [client 172.213.226.43:15836] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeJLHRP68VyHNvj1e56CwwAAANQ"]
[Fri Apr 17 23:00:45.629356 2026] [:error] [pid 9263:tid 9278] [client 172.213.226.43:32327] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeJLHRP68VyHNvj1e56CxgAAAM0"]
[Fri Apr 17 23:00:46.093606 2026] [:error] [pid 51878:tid 51896] [client 172.213.226.43:15859] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeJLHknQhUtMbw9EsgbQ7QAAARA"]
[Fri Apr 17 23:00:46.575678 2026] [:error] [pid 9152:tid 9198] [client 172.213.226.43:19371] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e7.php"] [unique_id "aeJLHpJYca8I3TNCwIeB1wAAAEg"]
[Fri Apr 17 23:00:47.042940 2026] [:error] [pid 9263:tid 9276] [client 172.213.226.43:19355] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeJLHxP68VyHNvj1e56CyAAAAMs"]
[Fri Apr 17 23:00:47.560343 2026] [:error] [pid 9151:tid 9162] [client 172.213.226.43:15860] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeJLH8hTVuRPkua22vRSLAAAAAE"]
[Fri Apr 17 23:00:48.060289 2026] [:error] [pid 51878:tid 51884] [client 172.213.226.43:15812] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeJLIEnQhUtMbw9EsgbQ9wAAAQQ"]
[Fri Apr 17 23:00:48.542851 2026] [:error] [pid 9263:tid 9271] [client 172.213.226.43:15820] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/e3.php"] [unique_id "aeJLIBP68VyHNvj1e56CzAAAAMY"]
[Fri Apr 17 23:00:49.120842 2026] [:error] [pid 9263:tid 9266] [client 172.213.226.43:15757] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeJLIRP68VyHNvj1e56CzwAAAME"]
[Fri Apr 17 23:00:49.589406 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:19372] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeJLIRP68VyHNvj1e56C0QAAAMI"]
[Fri Apr 17 23:00:50.060985 2026] [:error] [pid 9263:tid 9282] [client 172.213.226.43:15778] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeJLIhP68VyHNvj1e56C2gAAANE"]
[Fri Apr 17 23:00:50.546288 2026] [:error] [pid 9151:tid 9161] [client 172.213.226.43:15775] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aeJLIshTVuRPkua22vRSLQAAAAA"]
[Fri Apr 17 23:00:51.016603 2026] [:error] [pid 9263:tid 9281] [client 172.213.226.43:15752] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeJLIxP68VyHNvj1e56C6AAAANA"]
[Fri Apr 17 23:00:51.481920 2026] [:error] [pid 9263:tid 9288] [client 172.213.226.43:15783] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeJLIxP68VyHNvj1e56C9QAAANc"]
[Fri Apr 17 23:00:51.970364 2026] [:error] [pid 34273:tid 34299] [client 172.213.226.43:19380] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeJLI2uQDW686mK3dgElEwAAAZg"]
[Fri Apr 17 23:00:52.444797 2026] [:error] [pid 9263:tid 9278] [client 172.213.226.43:15852] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeJLJBP68VyHNvj1e56DDQAAAM0"]
[Fri Apr 17 23:00:52.925354 2026] [:error] [pid 51878:tid 51894] [client 172.213.226.43:15835] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeJLJEnQhUtMbw9EsgbRDgAAAQ4"]
[Fri Apr 17 23:00:53.390115 2026] [:error] [pid 34273:tid 34289] [client 172.213.226.43:15807] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeJLJWuQDW686mK3dgElFAAAAY4"]
[Fri Apr 17 23:00:53.866576 2026] [:error] [pid 9263:tid 9275] [client 172.213.226.43:15789] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeJLJRP68VyHNvj1e56DLgAAAMo"]
[Fri Apr 17 23:00:54.334733 2026] [:error] [pid 9152:tid 9214] [client 172.213.226.43:15758] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeJLJpJYca8I3TNCwIeB3QAAAFg"]
[Fri Apr 17 23:00:54.802845 2026] [:error] [pid 9153:tid 9221] [client 172.213.226.43:19349] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeJLJuMHGxkTZX3c45ciPQAAAIM"]
[Fri Apr 17 23:00:55.275814 2026] [:error] [pid 9152:tid 9207] [client 172.213.226.43:15747] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeJLJ5JYca8I3TNCwIeB4gAAAFE"]
[Fri Apr 17 23:00:55.774799 2026] [:error] [pid 9152:tid 9209] [client 172.213.226.43:19384] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeJLJ5JYca8I3TNCwIeB5QAAAFM"]
[Fri Apr 17 23:00:56.238985 2026] [:error] [pid 9152:tid 9204] [client 172.213.226.43:15853] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeJLKJJYca8I3TNCwIeB5gAAAE4"]
[Fri Apr 17 23:00:56.702567 2026] [:error] [pid 9152:tid 9191] [client 172.213.226.43:19383] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeJLKJJYca8I3TNCwIeB6wAAAEE"]
[Fri Apr 17 23:00:57.167956 2026] [:error] [pid 25010:tid 25028] [client 172.213.226.43:15868] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeJLKY-7kkf42RarqQ2McQAAAU8"]
[Fri Apr 17 23:00:57.632511 2026] [:error] [pid 9263:tid 9274] [client 172.213.226.43:15849] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeJLKRP68VyHNvj1e56DRgAAAMk"]
[Fri Apr 17 23:00:58.097991 2026] [:error] [pid 9263:tid 9271] [client 172.213.226.43:15763] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeJLKhP68VyHNvj1e56DSQAAAMY"]
[Fri Apr 17 23:00:58.583457 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:15751] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeJLKhP68VyHNvj1e56DTAAAAMI"]
[Fri Apr 17 23:00:59.048090 2026] [:error] [pid 9152:tid 9214] [client 172.213.226.43:15695] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeJLK5JYca8I3TNCwIeB7wAAAFg"]
[Fri Apr 17 23:00:59.514962 2026] [:error] [pid 9263:tid 9275] [client 172.213.226.43:15686] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeJLKxP68VyHNvj1e56DUwAAAMo"]
[Fri Apr 17 23:00:59.985586 2026] [:error] [pid 9263:tid 9271] [client 172.213.226.43:15845] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error_log.php"] [unique_id "aeJLKxP68VyHNvj1e56DWAAAAMY"]
[Fri Apr 17 23:01:00.464819 2026] [:error] [pid 9263:tid 9284] [client 172.213.226.43:15839] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeJLLBP68VyHNvj1e56DXAAAANM"]
[Fri Apr 17 23:01:00.937368 2026] [:error] [pid 9263:tid 9286] [client 172.213.226.43:19382] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeJLLBP68VyHNvj1e56DXwAAANU"]
[Fri Apr 17 23:01:01.404927 2026] [:error] [pid 9152:tid 9210] [client 172.213.226.43:15701] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeJLLZJYca8I3TNCwIeB8gAAAFQ"]
[Fri Apr 17 23:01:01.880909 2026] [:error] [pid 9263:tid 9276] [client 172.213.226.43:19450] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "aeJLLRP68VyHNvj1e56DYQAAAMs"]
[Fri Apr 17 23:01:02.345939 2026] [:error] [pid 9153:tid 9233] [client 172.213.226.43:15776] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeJLLuMHGxkTZX3c45ciRQAAAI8"]
[Fri Apr 17 23:01:02.817867 2026] [:error] [pid 9263:tid 9277] [client 172.213.226.43:15847] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeJLLhP68VyHNvj1e56DZAAAAMw"]
[Fri Apr 17 23:01:03.295142 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:15766] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeJLLxP68VyHNvj1e56DZwAAAM4"]
[Fri Apr 17 23:01:03.786860 2026] [:error] [pid 34273:tid 34276] [client 172.213.226.43:15866] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/curl.php"] [unique_id "aeJLL2uQDW686mK3dgElFwAAAYE"]
[Fri Apr 17 23:01:04.273039 2026] [:error] [pid 9263:tid 9284] [client 172.213.226.43:15821] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeJLMBP68VyHNvj1e56DbQAAANM"]
[Fri Apr 17 23:01:04.755409 2026] [:error] [pid 9263:tid 9283] [client 172.213.226.43:15803] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeJLMBP68VyHNvj1e56DcQAAANI"]
[Fri Apr 17 23:01:05.240683 2026] [:error] [pid 9263:tid 9269] [client 172.213.226.43:15795] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeJLMRP68VyHNvj1e56DdAAAAMQ"]
[Fri Apr 17 23:01:05.726007 2026] [:error] [pid 51878:tid 51889] [client 172.213.226.43:19361] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeJLMUnQhUtMbw9EsgbRJgAAAQk"]
[Fri Apr 17 23:01:06.226377 2026] [:error] [pid 9152:tid 9208] [client 172.213.226.43:19356] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeJLMpJYca8I3TNCwIeB9gAAAFI"]
[Fri Apr 17 23:01:06.773070 2026] [:error] [pid 51878:tid 51896] [client 172.213.226.43:15682] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeJLMknQhUtMbw9EsgbRLQAAARA"]
[Fri Apr 17 23:01:07.271073 2026] [:error] [pid 9153:tid 9242] [client 172.213.226.43:15780] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeJLM-MHGxkTZX3c45ciSgAAAJg"]
[Fri Apr 17 23:01:07.763707 2026] [:error] [pid 9153:tid 9220] [client 172.213.226.43:15869] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "aeJLM-MHGxkTZX3c45ciSwAAAII"]
[Fri Apr 17 23:01:08.284675 2026] [:error] [pid 34273:tid 34295] [client 172.213.226.43:15688] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeJLNGuQDW686mK3dgElGwAAAZQ"]
[Fri Apr 17 23:01:08.764931 2026] [:error] [pid 9152:tid 9207] [client 172.213.226.43:15823] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeJLNJJYca8I3TNCwIeB-AAAAFE"]
[Fri Apr 17 23:01:09.247733 2026] [:error] [pid 34273:tid 34278] [client 172.213.226.43:15850] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeJLNWuQDW686mK3dgElHgAAAYM"]
[Fri Apr 17 23:01:09.720560 2026] [:error] [pid 61523:tid 61554] [client 172.213.226.43:15773] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeJLNcOaH-Pgc7WEf4P6kgAAAcw"]
[Fri Apr 17 23:01:10.190166 2026] [:error] [pid 9263:tid 9280] [client 172.213.226.43:15858] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeJLNhP68VyHNvj1e56DhAAAAM8"]
[Fri Apr 17 23:01:10.657248 2026] [:error] [pid 51878:tid 51883] [client 172.213.226.43:15710] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeJLNknQhUtMbw9EsgbRSwAAAQM"]
[Fri Apr 17 23:01:11.134396 2026] [:error] [pid 51878:tid 51895] [client 172.213.226.43:19423] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeJLN0nQhUtMbw9EsgbRTgAAAQ8"]
[Fri Apr 17 23:01:11.598830 2026] [:error] [pid 9263:tid 9279] [client 172.213.226.43:15846] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeJLNxP68VyHNvj1e56DhwAAAM4"]
[Fri Apr 17 23:01:12.076229 2026] [:error] [pid 9263:tid 9269] [client 172.213.226.43:15781] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeJLOBP68VyHNvj1e56DiQAAAMQ"]
[Fri Apr 17 23:01:12.598219 2026] [:error] [pid 61523:tid 61564] [client 172.213.226.43:15785] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeJLOMOaH-Pgc7WEf4P6mAAAAdY"]
[Fri Apr 17 23:01:13.091747 2026] [:error] [pid 61523:tid 61562] [client 172.213.226.43:15764] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeJLOcOaH-Pgc7WEf4P6nAAAAdQ"]
[Fri Apr 17 23:01:13.599287 2026] [:error] [pid 51878:tid 51885] [client 172.213.226.43:15769] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260325043000.php"] [unique_id "aeJLOUnQhUtMbw9EsgbRVQAAAQU"]
[Fri Apr 17 23:01:14.076158 2026] [:error] [pid 61523:tid 61547] [client 172.213.226.43:15800] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeJLOsOaH-Pgc7WEf4P6oQAAAcU"]
[Fri Apr 17 23:01:14.543231 2026] [:error] [pid 9263:tid 9285] [client 172.213.226.43:15806] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeJLOhP68VyHNvj1e56DkQAAANQ"]
[Fri Apr 17 23:01:15.009696 2026] [:error] [pid 9263:tid 9267] [client 172.213.226.43:15759] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeJLOxP68VyHNvj1e56DlAAAAMI"]
[Fri Apr 17 23:01:15.474086 2026] [:error] [pid 9153:tid 9229] [client 172.213.226.43:15772] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods_260401065719.php"] [unique_id "aeJLO-MHGxkTZX3c45ciUwAAAIs"]
[Sat Apr 18 04:35:51.916652 2026] [:error] [pid 9864:tid 9907] [client 49.235.136.28:48278] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeKZp4CFeowknfXHM7kXOgAAAEI"]
[Sat Apr 18 13:54:03.748431 2026] [:error] [pid 9864:tid 9917] [client 43.135.140.225:40100] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeMce4CFeowknfXHM7moeAAAAEs"]
[Sat Apr 18 14:03:30.011642 2026] [:error] [pid 9864:tid 9927] [client 125.165.105.99:27960] [client 125.165.105.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.165.105.99, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aeMesoCFeowknfXHM7mpsQAAAFU"]
[Sat Apr 18 14:03:30.024558 2026] [proxy_fcgi:error] [pid 9864:tid 9927] [client 125.165.105.99:27960] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 15:14:57.111438 2026] [:error] [pid 9865:tid 9955] [client 43.153.123.4:44272] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeMvcazb5knECIY-C-hGXgAAAJI"]
[Sat Apr 18 16:59:51.664690 2026] [:error] [pid 34288:tid 34298] [client 114.96.103.33:40997] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeNIB-TIiy__PtiLmpm7QQAAAYY"]
[Sat Apr 18 20:17:40.538462 2026] [:error] [pid 34237:tid 34243] [client 104.28.246.112:22752] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aeN2ZBBmX4Wq5a6rxfapvQAAAUQ"]
[Sat Apr 18 20:17:40.959398 2026] [:error] [pid 34290:tid 34325] [client 104.28.246.112:61356] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-content/style.php"] [unique_id "aeN2ZBqX6WpmmAXOBi8baAAAAcY"]
[Sat Apr 18 21:10:26.611391 2026] [proxy_fcgi:error] [pid 13023:tid 13042] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:26.887372 2026] [proxy_fcgi:error] [pid 13023:tid 13046] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:27.158249 2026] [proxy_fcgi:error] [pid 13023:tid 13033] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:27.440748 2026] [proxy_fcgi:error] [pid 13023:tid 13039] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:27.711747 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:27.993008 2026] [proxy_fcgi:error] [pid 13023:tid 13048] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:28.272122 2026] [proxy_fcgi:error] [pid 13023:tid 13030] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:28.840039 2026] [proxy_fcgi:error] [pid 13023:tid 13035] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:29.427720 2026] [proxy_fcgi:error] [pid 13023:tid 13044] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:29.708631 2026] [proxy_fcgi:error] [pid 13023:tid 13032] [client 20.223.175.117:10227] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:10:30.018911 2026] [:error] [pid 13023:tid 13046] [client 20.223.175.117:10227] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aeOCxv1e7hG8DAeABB8WMAAAARU"]
[Sat Apr 18 21:10:31.578809 2026] [:error] [pid 9863:tid 9893] [client 20.223.175.117:10188] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aeOCxzjjiypiFrTucbLRdwAAABQ"]
[Sat Apr 18 21:10:33.025285 2026] [:error] [pid 9863:tid 9897] [client 20.223.175.117:10220] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aeOCyTjjiypiFrTucbLReAAAABg"]
[Sat Apr 18 21:10:33.771363 2026] [:error] [pid 9970:tid 9989] [client 20.223.175.117:10130] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "aeOCySYdRLRhVmaIMx3AQgAAAM8"]
[Sat Apr 18 21:10:34.860830 2026] [:error] [pid 34290:tid 34324] [client 20.223.175.117:10190] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aeOCyhqX6WpmmAXOBi8jEgAAAcU"]
[Sat Apr 18 21:10:38.413747 2026] [:error] [pid 34290:tid 34323] [client 20.223.175.117:10213] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aeOCzhqX6WpmmAXOBi8jEwAAAcQ"]
[Sat Apr 18 21:10:40.245805 2026] [:error] [pid 13023:tid 13037] [client 20.223.175.117:10239] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aeOC0P1e7hG8DAeABB8WTQAAAQw"]
[Sat Apr 18 21:10:41.053860 2026] [:error] [pid 32678:tid 32726] [client 20.223.175.117:10138] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aeOC0RUlAXU_ZWUu5y_8twAAApM"]
[Sat Apr 18 21:10:42.042118 2026] [:error] [pid 9970:tid 9976] [client 20.223.175.117:10214] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeOC0iYdRLRhVmaIMx3AYQAAAMI"]
[Sat Apr 18 21:10:43.796968 2026] [:error] [pid 13023:tid 13042] [client 20.223.175.117:10129] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeOC0_1e7hG8DAeABB8WVAAAARE"]
[Sat Apr 18 21:10:44.905163 2026] [:error] [pid 13023:tid 13044] [client 20.223.175.117:10205] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeOC1P1e7hG8DAeABB8WWwAAARM"]
[Sat Apr 18 21:10:46.014622 2026] [:error] [pid 32678:tid 32711] [client 20.223.175.117:10121] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aeOC1hUlAXU_ZWUu5y_8wQAAAoQ"]
[Sat Apr 18 21:10:47.501079 2026] [:error] [pid 32677:tid 32690] [client 20.223.175.117:10186] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeOC1xngmUE3LdC-wP7gAwAAAko"]
[Sat Apr 18 21:10:48.628597 2026] [:error] [pid 32647:tid 32651] [client 20.223.175.117:10202] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeOC2EkxooM0iRo6e54mUgAAAgE"]
[Sat Apr 18 21:10:49.784840 2026] [:error] [pid 32677:tid 32691] [client 20.223.175.117:10215] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeOC2RngmUE3LdC-wP7gBgAAAks"]
[Sat Apr 18 21:10:50.856966 2026] [:error] [pid 9970:tid 9986] [client 20.223.175.117:10176] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "aeOC2iYdRLRhVmaIMx3AcgAAAMw"]
[Sat Apr 18 21:10:52.291642 2026] [:error] [pid 32677:tid 32697] [client 20.223.175.117:10231] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeOC3BngmUE3LdC-wP7gCQAAAlE"]
[Sat Apr 18 21:10:55.018301 2026] [:error] [pid 34290:tid 34343] [client 20.223.175.117:10222] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeOC3xqX6WpmmAXOBi8jFgAAAdg"]
[Sat Apr 18 21:10:56.732234 2026] [:error] [pid 13023:tid 13028] [client 20.223.175.117:10226] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeOC4P1e7hG8DAeABB8WdQAAAQM"]
[Sat Apr 18 21:10:57.910830 2026] [:error] [pid 34290:tid 34331] [client 20.223.175.117:10232] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aeOC4RqX6WpmmAXOBi8jFwAAAcw"]
[Sat Apr 18 21:10:59.340162 2026] [:error] [pid 34290:tid 34341] [client 20.223.175.117:10199] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeOC4xqX6WpmmAXOBi8jGQAAAdY"]
[Sat Apr 18 21:11:00.728453 2026] [:error] [pid 32647:tid 32667] [client 20.223.175.117:10195] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeOC5EkxooM0iRo6e54mVgAAAhE"]
[Sat Apr 18 21:11:01.881252 2026] [:error] [pid 32677:tid 32685] [client 20.223.175.117:10192] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeOC5RngmUE3LdC-wP7gGwAAAkU"]
[Sat Apr 18 21:11:02.866341 2026] [:error] [pid 9864:tid 9924] [client 20.223.175.117:10154] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "aeOC5oCFeowknfXHM7kkUgAAAFI"]
[Sat Apr 18 21:11:04.044836 2026] [:error] [pid 9864:tid 9930] [client 20.223.175.117:10217] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeOC6ICFeowknfXHM7kkVgAAAFg"]
[Sat Apr 18 21:11:04.687740 2026] [:error] [pid 32677:tid 32693] [client 20.223.175.117:10127] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeOC6BngmUE3LdC-wP7gIQAAAk0"]
[Sat Apr 18 21:11:06.698795 2026] [:error] [pid 13023:tid 13025] [client 20.223.175.117:10201] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeOC6v1e7hG8DAeABB8WiAAAAQA"]
[Sat Apr 18 21:11:08.272255 2026] [:error] [pid 9864:tid 9906] [client 20.223.175.117:10159] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aeOC7ICFeowknfXHM7kkWQAAAEE"]
[Sat Apr 18 21:11:09.509383 2026] [:error] [pid 32678:tid 32727] [client 20.223.175.117:10112] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeOC7RUlAXU_ZWUu5y_81QAAApQ"]
[Sat Apr 18 21:11:10.932718 2026] [:error] [pid 13023:tid 13033] [client 20.223.175.117:10140] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeOC7v1e7hG8DAeABB8WlQAAAQg"]
[Sat Apr 18 21:11:12.090885 2026] [:error] [pid 32678:tid 32718] [client 20.223.175.117:10196] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeOC8BUlAXU_ZWUu5y_82gAAAos"]
[Sat Apr 18 21:11:13.521351 2026] [:error] [pid 13023:tid 13045] [client 20.223.175.117:10183] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeOC8f1e7hG8DAeABB8WpAAAARQ"]
[Sat Apr 18 21:11:14.984555 2026] [:error] [pid 9865:tid 9956] [client 20.223.175.117:10225] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeOC8qzb5knECIY-C-iMQgAAAJM"]
[Sat Apr 18 21:11:16.802147 2026] [:error] [pid 9865:tid 9943] [client 20.223.175.117:10148] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeOC9Kzb5knECIY-C-iMSgAAAIY"]
[Sat Apr 18 21:11:17.891386 2026] [:error] [pid 9970:tid 9983] [client 20.223.175.117:10125] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeOC9SYdRLRhVmaIMx3AgwAAAMk"]
[Sat Apr 18 21:11:19.143335 2026] [:error] [pid 9864:tid 9913] [client 20.223.175.117:10153] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dass.php"] [unique_id "aeOC94CFeowknfXHM7kkZwAAAEc"]
[Sat Apr 18 21:11:22.146559 2026] [:error] [pid 13023:tid 13027] [client 20.223.175.117:10184] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeOC-v1e7hG8DAeABB8WywAAAQI"]
[Sat Apr 18 21:11:23.880259 2026] [:error] [pid 32677:tid 32702] [client 20.223.175.117:10126] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeOC-xngmUE3LdC-wP7gVAAAAlY"]
[Sat Apr 18 21:11:26.454963 2026] [:error] [pid 32677:tid 32684] [client 20.223.175.117:10181] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeOC_hngmUE3LdC-wP7gXAAAAkQ"]
[Sat Apr 18 21:11:28.183047 2026] [:error] [pid 9864:tid 9906] [client 20.223.175.117:10155] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeODAICFeowknfXHM7kkbQAAAEE"]
[Sat Apr 18 21:11:29.235481 2026] [proxy_fcgi:error] [pid 9970:tid 9989] [client 20.223.175.117:10128] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:29.521698 2026] [proxy_fcgi:error] [pid 9970:tid 9980] [client 20.223.175.117:10128] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:29.814035 2026] [proxy_fcgi:error] [pid 9970:tid 9977] [client 20.223.175.117:10128] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:30.105767 2026] [:error] [pid 9970:tid 9996] [client 20.223.175.117:10128] [client 20.223.175.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "aeODAiYdRLRhVmaIMx3AowAAANY"]
[Sat Apr 18 21:11:31.637145 2026] [proxy_fcgi:error] [pid 32677:tid 32681] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:31.914925 2026] [proxy_fcgi:error] [pid 32677:tid 32691] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:32.188490 2026] [proxy_fcgi:error] [pid 32677:tid 32685] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:32.473446 2026] [proxy_fcgi:error] [pid 32677:tid 32690] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:32.800319 2026] [proxy_fcgi:error] [pid 32677:tid 32697] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:33.069114 2026] [proxy_fcgi:error] [pid 32677:tid 32684] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:33.338948 2026] [proxy_fcgi:error] [pid 32677:tid 32686] [client 20.223.175.117:10237] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:11:33.604555 2026] [:error] [pid 32677:tid 32703] [client 20.223.175.117:10237] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeODBRngmUE3LdC-wP7ggwAAAlc"]
[Sat Apr 18 21:11:34.578614 2026] [:error] [pid 32678:tid 32720] [client 20.223.175.117:10206] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeODBhUlAXU_ZWUu5y_87AAAAo0"]
[Sat Apr 18 21:11:35.684934 2026] [:error] [pid 9865:tid 9939] [client 20.223.175.117:10132] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeODB6zb5knECIY-C-iMYQAAAII"]
[Sat Apr 18 21:11:36.403383 2026] [:error] [pid 32677:tid 32691] [client 20.223.175.117:10082] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeODCBngmUE3LdC-wP7giwAAAks"]
[Sat Apr 18 21:11:38.116940 2026] [:error] [pid 9863:tid 9882] [client 20.223.175.117:10233] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeODCjjjiypiFrTucbLRjwAAAAk"]
[Sat Apr 18 21:11:39.241705 2026] [:error] [pid 32647:tid 32652] [client 20.223.175.117:10197] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeODC0kxooM0iRo6e54mgQAAAgI"]
[Sat Apr 18 21:11:41.556291 2026] [:error] [pid 9863:tid 9874] [client 20.223.175.117:10185] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeODDTjjiypiFrTucbLRkAAAAAE"]
[Sat Apr 18 21:11:42.344955 2026] [:error] [pid 32677:tid 32701] [client 20.223.175.117:10058] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aeODDhngmUE3LdC-wP7glgAAAlU"]
[Sat Apr 18 21:11:44.282982 2026] [:error] [pid 34290:tid 34329] [client 20.223.175.117:10143] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeODEBqX6WpmmAXOBi8jPgAAAco"]
[Sat Apr 18 21:11:45.645962 2026] [:error] [pid 34288:tid 34314] [client 20.223.175.117:10157] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeODEeTIiy__PtiLmpnXMwAAAZY"]
[Sat Apr 18 21:11:46.207266 2026] [:error] [pid 9865:tid 9955] [client 20.223.175.117:10212] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeODEqzb5knECIY-C-iMaAAAAJI"]
[Sat Apr 18 21:11:47.025882 2026] [:error] [pid 34288:tid 34294] [client 20.223.175.117:10182] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aeODE-TIiy__PtiLmpnXNAAAAYI"]
[Sat Apr 18 21:11:48.070045 2026] [:error] [pid 9970:tid 9998] [client 20.223.175.117:10211] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeODFCYdRLRhVmaIMx3AqgAAANg"]
[Sat Apr 18 21:11:49.606627 2026] [:error] [pid 34290:tid 34343] [client 20.223.175.117:10216] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeODFRqX6WpmmAXOBi8jTwAAAdg"]
[Sat Apr 18 21:11:50.679257 2026] [:error] [pid 32677:tid 32694] [client 20.223.175.117:10120] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeODFhngmUE3LdC-wP7gpgAAAk4"]
[Sat Apr 18 21:11:52.412218 2026] [:error] [pid 9864:tid 9928] [client 20.223.175.117:10144] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wglum1.php"] [unique_id "aeODGICFeowknfXHM7kkjwAAAFY"]
[Sat Apr 18 21:11:54.069953 2026] [:error] [pid 9864:tid 9916] [client 20.223.175.117:10124] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeODGoCFeowknfXHM7kkkgAAAEo"]
[Sat Apr 18 21:11:56.252609 2026] [:error] [pid 9970:tid 9974] [client 20.223.175.117:10218] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeODHCYdRLRhVmaIMx3AtwAAAMA"]
[Sat Apr 18 21:11:57.643967 2026] [:error] [pid 32647:tid 32665] [client 20.223.175.117:10117] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeODHUkxooM0iRo6e54mhgAAAg8"]
[Sat Apr 18 21:11:59.793902 2026] [:error] [pid 9865:tid 9945] [client 20.223.175.117:10221] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "aeODH6zb5knECIY-C-iMcQAAAIg"]
[Sat Apr 18 21:12:01.070508 2026] [:error] [pid 9863:tid 9880] [client 20.223.175.117:10137] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeODITjjiypiFrTucbLRlgAAAAc"]
[Sat Apr 18 21:12:03.755944 2026] [:error] [pid 9970:tid 9994] [client 20.223.175.117:10189] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeODIyYdRLRhVmaIMx3AvgAAANQ"]
[Sat Apr 18 21:12:05.074519 2026] [:error] [pid 9970:tid 9990] [client 20.223.175.117:10113] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeODJSYdRLRhVmaIMx3AwQAAANA"]
[Sat Apr 18 21:12:06.376465 2026] [:error] [pid 34290:tid 34319] [client 20.223.175.117:10163] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wgift1.php"] [unique_id "aeODJhqX6WpmmAXOBi8jXAAAAcA"]
[Sat Apr 18 21:12:07.848218 2026] [:error] [pid 32678:tid 32717] [client 20.223.175.117:10178] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeODJxUlAXU_ZWUu5y_9CgAAAoo"]
[Sat Apr 18 21:12:09.059602 2026] [:error] [pid 32678:tid 32721] [client 20.223.175.117:10229] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeODKRUlAXU_ZWUu5y_9DQAAAo4"]
[Sat Apr 18 21:12:10.567029 2026] [:error] [pid 13023:tid 13036] [client 20.223.175.117:10118] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeODKv1e7hG8DAeABB8W9wAAAQs"]
[Sat Apr 18 21:12:11.294477 2026] [:error] [pid 34290:tid 34343] [client 20.223.175.117:10131] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xynz.php"] [unique_id "aeODKxqX6WpmmAXOBi8jXgAAAdg"]
[Sat Apr 18 21:12:12.646989 2026] [:error] [pid 9865:tid 9957] [client 20.223.175.117:10200] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeODLKzb5knECIY-C-iMgAAAAJQ"]
[Sat Apr 18 21:12:13.972112 2026] [:error] [pid 9865:tid 9960] [client 20.223.175.117:10234] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeODLazb5knECIY-C-iMgQAAAJc"]
[Sat Apr 18 21:12:14.969369 2026] [:error] [pid 9864:tid 9907] [client 20.223.175.117:10116] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeODLoCFeowknfXHM7kkoQAAAEI"]
[Sat Apr 18 21:12:16.382522 2026] [:error] [pid 9970:tid 9981] [client 20.223.175.117:10223] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/admin.php"] [unique_id "aeODMCYdRLRhVmaIMx3A0gAAAMc"]
[Sat Apr 18 21:12:17.663448 2026] [:error] [pid 34290:tid 34331] [client 20.223.175.117:10175] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeODMRqX6WpmmAXOBi8jYgAAAcw"]
[Sat Apr 18 21:12:19.177336 2026] [:error] [pid 34288:tid 34315] [client 20.223.175.117:10142] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeODM-TIiy__PtiLmpnXOQAAAZc"]
[Sat Apr 18 21:12:22.026084 2026] [:error] [pid 34290:tid 34330] [client 20.223.175.117:10219] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeODNhqX6WpmmAXOBi8jZwAAAcs"]
[Sat Apr 18 21:12:24.405150 2026] [:error] [pid 32677:tid 32686] [client 20.223.175.117:10204] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeODOBngmUE3LdC-wP7gsgAAAkY"]
[Sat Apr 18 21:12:25.828035 2026] [:error] [pid 9970:tid 9981] [client 20.223.175.117:10060] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeODOSYdRLRhVmaIMx3A4AAAAMc"]
[Sat Apr 18 21:12:28.499500 2026] [:error] [pid 13023:tid 13043] [client 20.223.175.117:10145] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeODPP1e7hG8DAeABB8XFwAAARI"]
[Sat Apr 18 21:12:30.342498 2026] [:error] [pid 9970:tid 9974] [client 20.223.175.117:10187] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeODPiYdRLRhVmaIMx3A5gAAAMA"]
[Sat Apr 18 21:12:32.190947 2026] [:error] [pid 32677:tid 32692] [client 20.223.175.117:10174] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aeODQBngmUE3LdC-wP7gvQAAAkw"]
[Sat Apr 18 21:12:33.041734 2026] [proxy_fcgi:error] [pid 32677:tid 32693] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:33.651602 2026] [proxy_fcgi:error] [pid 32677:tid 32687] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:33.939268 2026] [proxy_fcgi:error] [pid 32677:tid 32703] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:34.226907 2026] [proxy_fcgi:error] [pid 32677:tid 32700] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:34.528880 2026] [proxy_fcgi:error] [pid 32677:tid 32682] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:34.817142 2026] [proxy_fcgi:error] [pid 32677:tid 32701] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:35.104680 2026] [proxy_fcgi:error] [pid 32677:tid 32683] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:35.410830 2026] [proxy_fcgi:error] [pid 32677:tid 32698] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:35.712249 2026] [proxy_fcgi:error] [pid 32677:tid 32681] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:36.013777 2026] [proxy_fcgi:error] [pid 32677:tid 32680] [client 20.223.175.117:10054] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:12:36.311694 2026] [:error] [pid 32677:tid 32697] [client 20.223.175.117:10054] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeODRBngmUE3LdC-wP7g1gAAAlE"]
[Sat Apr 18 21:12:37.304306 2026] [:error] [pid 32677:tid 32684] [client 20.223.175.117:10203] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeODRRngmUE3LdC-wP7g2AAAAkQ"]
[Sat Apr 18 21:12:40.100557 2026] [:error] [pid 34290:tid 34340] [client 20.223.175.117:10177] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeODSBqX6WpmmAXOBi8jbwAAAdU"]
[Sat Apr 18 21:12:41.271055 2026] [:error] [pid 34290:tid 34319] [client 20.223.175.117:10150] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gelio1.php"] [unique_id "aeODSRqX6WpmmAXOBi8jcQAAAcA"]
[Sat Apr 18 21:12:42.342442 2026] [:error] [pid 32677:tid 32701] [client 20.223.175.117:10091] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aeODShngmUE3LdC-wP7g3wAAAlU"]
[Sat Apr 18 21:12:46.551832 2026] [:error] [pid 34290:tid 34321] [client 20.223.175.117:10051] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aeODThqX6WpmmAXOBi8jdwAAAcI"]
[Sat Apr 18 21:12:48.275523 2026] [:error] [pid 34290:tid 34332] [client 20.223.175.117:10069] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aeODUBqX6WpmmAXOBi8jfQAAAc0"]
[Sat Apr 18 21:12:49.063633 2026] [:error] [pid 32647:tid 32661] [client 20.223.175.117:10139] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aeODUUkxooM0iRo6e54moQAAAgs"]
[Sat Apr 18 21:12:50.022171 2026] [:error] [pid 32647:tid 32668] [client 20.223.175.117:10191] [client 20.223.175.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeODUkkxooM0iRo6e54mpgAAAhI"]
[Sat Apr 18 21:12:50.893165 2026] [:error] [pid 9865:tid 9951] [client 20.223.175.117:10236] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeODUqzb5knECIY-C-iMoQAAAI4"]
[Sat Apr 18 21:12:52.834340 2026] [:error] [pid 32647:tid 32670] [client 20.223.175.117:10162] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeODVEkxooM0iRo6e54mqQAAAhQ"]
[Sat Apr 18 21:12:55.786736 2026] [:error] [pid 13023:tid 13030] [client 20.223.175.117:10063] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeODV_1e7hG8DAeABB8XMgAAAQU"]
[Sat Apr 18 21:12:57.161752 2026] [:error] [pid 32677:tid 32696] [client 20.223.175.117:10083] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "aeODWRngmUE3LdC-wP7g9wAAAlA"]
[Sat Apr 18 21:12:59.680048 2026] [:error] [pid 9863:tid 9891] [client 20.223.175.117:10135] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeODWzjjiypiFrTucbLRyQAAABI"]
[Sat Apr 18 21:13:01.735782 2026] [:error] [pid 13023:tid 13033] [client 20.223.175.117:10164] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeODXf1e7hG8DAeABB8XPAAAAQg"]
[Sat Apr 18 21:13:02.650161 2026] [:error] [pid 34290:tid 34320] [client 20.223.175.117:10158] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeODXhqX6WpmmAXOBi8jkAAAAcE"]
[Sat Apr 18 21:13:05.132102 2026] [:error] [pid 32678:tid 32726] [client 20.223.175.117:9993] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "aeODYRUlAXU_ZWUu5y_9QwAAApM"]
[Sat Apr 18 21:13:06.762252 2026] [:error] [pid 32678:tid 32712] [client 20.223.175.117:10101] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "aeODYhUlAXU_ZWUu5y_9RgAAAoU"]
[Sat Apr 18 21:13:08.487741 2026] [:error] [pid 34290:tid 34343] [client 20.223.175.117:10224] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "aeODZBqX6WpmmAXOBi8jlQAAAdg"]
[Sat Apr 18 21:13:10.313882 2026] [:error] [pid 32647:tid 32666] [client 20.223.175.117:10094] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "aeODZkkxooM0iRo6e54mtAAAAhA"]
[Sat Apr 18 21:13:11.401853 2026] [:error] [pid 9865:tid 9949] [client 20.223.175.117:10193] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "aeODZ6zb5knECIY-C-iMuAAAAIw"]
[Sat Apr 18 21:13:12.129882 2026] [:error] [pid 32677:tid 32688] [client 20.223.175.117:10052] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeODaBngmUE3LdC-wP7hEQAAAkg"]
[Sat Apr 18 21:13:13.215567 2026] [:error] [pid 32647:tid 32656] [client 20.223.175.117:10122] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeODaUkxooM0iRo6e54mugAAAgY"]
[Sat Apr 18 21:13:15.098836 2026] [:error] [pid 13023:tid 13031] [client 20.223.175.117:10141] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeODa_1e7hG8DAeABB8XRQAAAQY"]
[Sat Apr 18 21:13:17.082917 2026] [:error] [pid 34290:tid 34341] [client 20.223.175.117:10067] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeODbRqX6WpmmAXOBi8jmAAAAdY"]
[Sat Apr 18 21:13:20.018626 2026] [:error] [pid 13023:tid 13045] [client 20.223.175.117:10194] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeODcP1e7hG8DAeABB8XTwAAARQ"]
[Sat Apr 18 21:13:22.566821 2026] [:error] [pid 32677:tid 32680] [client 20.223.175.117:9994] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeODchngmUE3LdC-wP7hGgAAAkA"]
[Sat Apr 18 21:13:24.148027 2026] [:error] [pid 34290:tid 34326] [client 20.223.175.117:10149] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeODdBqX6WpmmAXOBi8jnAAAAcc"]
[Sat Apr 18 21:13:26.384644 2026] [:error] [pid 9865:tid 9960] [client 20.223.175.117:10078] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/state.php"] [unique_id "aeODdqzb5knECIY-C-iMwwAAAJc"]
[Sat Apr 18 21:13:28.054076 2026] [:error] [pid 32677:tid 32703] [client 20.223.175.117:10180] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeODeBngmUE3LdC-wP7hIAAAAlc"]
[Sat Apr 18 21:13:29.325174 2026] [:error] [pid 9865:tid 9952] [client 20.223.175.117:10041] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeODeazb5knECIY-C-iMzAAAAI8"]
[Sat Apr 18 21:13:30.521374 2026] [:error] [pid 9863:tid 9882] [client 20.223.175.117:10007] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeODejjjiypiFrTucbLR6AAAAAk"]
[Sat Apr 18 21:13:31.198306 2026] [:error] [pid 9970:tid 9985] [client 20.223.175.117:10210] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "aeODeyYdRLRhVmaIMx3BHAAAAMs"]
[Sat Apr 18 21:13:32.423785 2026] [:error] [pid 9863:tid 9888] [client 20.223.175.117:10109] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeODfDjjiypiFrTucbLR6gAAAA8"]
[Sat Apr 18 21:13:33.690692 2026] [:error] [pid 9864:tid 9925] [client 20.223.175.117:10073] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeODfYCFeowknfXHM7kktAAAAFM"]
[Sat Apr 18 21:13:35.814952 2026] [:error] [pid 13023:tid 13029] [client 20.223.175.117:10208] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeODf_1e7hG8DAeABB8XegAAAQQ"]
[Sat Apr 18 21:13:38.992472 2026] [proxy_fcgi:error] [pid 13023:tid 13031] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:39.263900 2026] [proxy_fcgi:error] [pid 13023:tid 13036] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:39.630138 2026] [proxy_fcgi:error] [pid 13023:tid 13028] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:39.911361 2026] [proxy_fcgi:error] [pid 13023:tid 13034] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:40.294477 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:40.572816 2026] [proxy_fcgi:error] [pid 13023:tid 13037] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:40.841748 2026] [proxy_fcgi:error] [pid 13023:tid 13034] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:41.116157 2026] [proxy_fcgi:error] [pid 13023:tid 13038] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:41.571906 2026] [proxy_fcgi:error] [pid 13023:tid 13039] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:41.840558 2026] [proxy_fcgi:error] [pid 13023:tid 13049] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:42.111443 2026] [proxy_fcgi:error] [pid 13023:tid 13040] [client 20.223.175.117:10123] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:13:42.377396 2026] [:error] [pid 13023:tid 13037] [client 20.223.175.117:10123] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aeODhv1e7hG8DAeABB8XqwAAAQw"]
[Sat Apr 18 21:13:43.909399 2026] [:error] [pid 13023:tid 13036] [client 20.223.175.117:10002] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aeODh_1e7hG8DAeABB8XtQAAAQs"]
[Sat Apr 18 21:13:44.943443 2026] [:error] [pid 13023:tid 13048] [client 20.223.175.117:10146] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aeODiP1e7hG8DAeABB8XvQAAARc"]
[Sat Apr 18 21:13:46.033972 2026] [:error] [pid 13023:tid 13040] [client 20.223.175.117:10238] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/maxro.php"] [unique_id "aeODiv1e7hG8DAeABB8XxAAAAQ8"]
[Sat Apr 18 21:13:47.925412 2026] [:error] [pid 34288:tid 34312] [client 20.223.175.117:10057] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeODi-TIiy__PtiLmpnXUQAAAZQ"]
[Sat Apr 18 21:13:49.832908 2026] [:error] [pid 9865:tid 9939] [client 20.223.175.117:10228] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeODjazb5knECIY-C-iM7QAAAII"]
[Sat Apr 18 21:13:51.130781 2026] [:error] [pid 32677:tid 32683] [client 20.223.175.117:10087] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeODjxngmUE3LdC-wP7hRQAAAkM"]
[Sat Apr 18 21:13:54.283142 2026] [:error] [pid 34288:tid 34293] [client 20.223.175.117:10015] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeODkuTIiy__PtiLmpnXVAAAAYE"]
[Sat Apr 18 21:13:55.513058 2026] [:error] [pid 34288:tid 34310] [client 20.223.175.117:10089] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeODk-TIiy__PtiLmpnXVgAAAZI"]
[Sat Apr 18 21:13:58.258688 2026] [:error] [pid 9865:tid 9950] [client 20.223.175.117:10115] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeODlqzb5knECIY-C-iM-AAAAI0"]
[Sat Apr 18 21:13:59.553935 2026] [:error] [pid 9865:tid 9954] [client 20.223.175.117:10079] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeODl6zb5knECIY-C-iM_AAAAJE"]
[Sat Apr 18 21:14:00.652800 2026] [:error] [pid 13023:tid 13036] [client 20.223.175.117:10114] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "aeODmP1e7hG8DAeABB8XzwAAAQs"]
[Sat Apr 18 21:14:03.307301 2026] [:error] [pid 9865:tid 9961] [client 20.223.175.117:10151] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeODm6zb5knECIY-C-iNAAAAAJg"]
[Sat Apr 18 21:14:04.469988 2026] [:error] [pid 9970:tid 9979] [client 20.223.175.117:10133] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeODnCYdRLRhVmaIMx3BUwAAAMU"]
[Sat Apr 18 21:14:05.900856 2026] [:error] [pid 13023:tid 13031] [client 20.223.175.117:10165] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeODnf1e7hG8DAeABB8X3gAAAQY"]
[Sat Apr 18 21:14:07.383312 2026] [:error] [pid 32677:tid 32681] [client 20.223.175.117:10053] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aeODnxngmUE3LdC-wP7hXwAAAkE"]
[Sat Apr 18 21:14:08.215497 2026] [:error] [pid 9970:tid 9988] [client 20.223.175.117:10169] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeODoCYdRLRhVmaIMx3BVAAAAM4"]
[Sat Apr 18 21:14:10.049668 2026] [:error] [pid 13023:tid 13034] [client 20.223.175.117:9988] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeODov1e7hG8DAeABB8X4gAAAQk"]
[Sat Apr 18 21:14:12.218377 2026] [:error] [pid 32678:tid 32719] [client 20.223.175.117:10106] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeODpBUlAXU_ZWUu5y_9ZgAAAow"]
[Sat Apr 18 21:14:13.874416 2026] [:error] [pid 32678:tid 32726] [client 20.223.175.117:9987] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/areak1.php"] [unique_id "aeODpRUlAXU_ZWUu5y_9bAAAApM"]
[Sat Apr 18 21:14:16.582555 2026] [:error] [pid 13023:tid 13035] [client 20.223.175.117:10037] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeODqP1e7hG8DAeABB8X8gAAAQo"]
[Sat Apr 18 21:14:17.470609 2026] [:error] [pid 9864:tid 9909] [client 20.223.175.117:10076] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeODqYCFeowknfXHM7kkxwAAAEQ"]
[Sat Apr 18 21:14:18.493467 2026] [:error] [pid 32647:tid 32655] [client 20.223.175.117:10136] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeODqkkxooM0iRo6e54m4wAAAgU"]
[Sat Apr 18 21:14:20.049247 2026] [:error] [pid 32678:tid 32712] [client 20.223.175.117:10207] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "aeODrBUlAXU_ZWUu5y_9cgAAAoU"]
[Sat Apr 18 21:14:21.428141 2026] [:error] [pid 9865:tid 9961] [client 20.223.175.117:10077] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeODrazb5knECIY-C-iNDQAAAJg"]
[Sat Apr 18 21:14:22.900557 2026] [:error] [pid 9970:tid 9981] [client 20.223.175.117:10064] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeODriYdRLRhVmaIMx3BaQAAAMc"]
[Sat Apr 18 21:14:23.930058 2026] [:error] [pid 13023:tid 13036] [client 20.223.175.117:10084] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeODr_1e7hG8DAeABB8X-AAAAQs"]
[Sat Apr 18 21:14:25.211711 2026] [:error] [pid 32678:tid 32728] [client 20.223.175.117:10062] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "aeODsRUlAXU_ZWUu5y_9eQAAApU"]
[Sat Apr 18 21:14:26.873119 2026] [:error] [pid 32647:tid 32671] [client 20.223.175.117:10202] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeODskkxooM0iRo6e54m5QAAAhU"]
[Sat Apr 18 21:14:28.788659 2026] [:error] [pid 13023:tid 13030] [client 20.223.175.117:9997] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeODtP1e7hG8DAeABB8YAQAAAQU"]
[Sat Apr 18 21:14:30.075355 2026] [:error] [pid 32647:tid 32673] [client 20.223.175.117:10161] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeODtkkxooM0iRo6e54m5wAAAhc"]
[Sat Apr 18 21:14:32.023711 2026] [:error] [pid 34288:tid 34295] [client 20.223.175.117:10230] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aeODuOTIiy__PtiLmpnXYAAAAYM"]
[Sat Apr 18 21:14:33.171202 2026] [:error] [pid 13023:tid 13026] [client 20.223.175.117:9633] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeODuf1e7hG8DAeABB8YBgAAAQE"]
[Sat Apr 18 21:14:34.036064 2026] [:error] [pid 9865:tid 9959] [client 20.223.175.117:10059] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeODuqzb5knECIY-C-iNGAAAAJY"]
[Sat Apr 18 21:14:36.035465 2026] [:error] [pid 34290:tid 34342] [client 20.223.175.117:10152] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeODvBqX6WpmmAXOBi8jpQAAAdc"]
[Sat Apr 18 21:14:37.464390 2026] [:error] [pid 9865:tid 9950] [client 20.223.175.117:10166] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gz.php"] [unique_id "aeODvazb5knECIY-C-iNGwAAAI0"]
[Sat Apr 18 21:14:39.733916 2026] [:error] [pid 32677:tid 32699] [client 20.223.175.117:10160] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aeODvxngmUE3LdC-wP7hbwAAAlM"]
[Sat Apr 18 21:14:42.380654 2026] [proxy_fcgi:error] [pid 9970:tid 9990] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:42.632465 2026] [proxy_fcgi:error] [pid 9970:tid 9997] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:42.893389 2026] [proxy_fcgi:error] [pid 9970:tid 9986] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:43.155179 2026] [proxy_fcgi:error] [pid 9970:tid 9978] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:43.409042 2026] [proxy_fcgi:error] [pid 9970:tid 9991] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:43.661015 2026] [proxy_fcgi:error] [pid 9970:tid 9983] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:44.125724 2026] [proxy_fcgi:error] [pid 9970:tid 9976] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:44.387442 2026] [proxy_fcgi:error] [pid 9970:tid 9975] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:44.639972 2026] [proxy_fcgi:error] [pid 9970:tid 9995] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:44.891408 2026] [proxy_fcgi:error] [pid 9970:tid 9979] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:45.152733 2026] [proxy_fcgi:error] [pid 9970:tid 9996] [client 20.223.175.117:10235] AH01071: Got error 'Primary script unknown'
[Sat Apr 18 21:14:45.400963 2026] [:error] [pid 9970:tid 9997] [client 20.223.175.117:10235] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeODxSYdRLRhVmaIMx3BiwAAANc"]
[Sat Apr 18 21:14:46.176399 2026] [:error] [pid 13023:tid 13048] [client 20.223.175.117:10008] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeODxv1e7hG8DAeABB8YFQAAARc"]
[Sat Apr 18 21:14:48.161023 2026] [:error] [pid 9970:tid 9989] [client 20.223.175.117:10167] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeODyCYdRLRhVmaIMx3BkgAAAM8"]
[Sat Apr 18 21:14:49.341716 2026] [:error] [pid 32678:tid 32711] [client 20.223.175.117:10156] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws61.php"] [unique_id "aeODyRUlAXU_ZWUu5y_9gwAAAoQ"]
[Sat Apr 18 21:14:50.226481 2026] [:error] [pid 32678:tid 32731] [client 20.223.175.117:10129] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeODyhUlAXU_ZWUu5y_9hAAAApg"]
[Sat Apr 18 21:14:51.302045 2026] [:error] [pid 9865:tid 9957] [client 20.223.175.117:10001] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeODy6zb5knECIY-C-iNJQAAAJQ"]
[Sat Apr 18 21:14:53.082649 2026] [:error] [pid 9865:tid 9954] [client 20.223.175.117:10070] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeODzazb5knECIY-C-iNKgAAAJE"]
[Sat Apr 18 21:14:55.600040 2026] [:error] [pid 32647:tid 32672] [client 20.223.175.117:10190] [client 20.223.175.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp-image.php"] [unique_id "aeODz0kxooM0iRo6e54m9AAAAhY"]
[Sun Apr 19 01:17:11.135743 2026] [:error] [pid 32252:tid 32274] [client 43.130.14.245:59876] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeO8l-Xl4Yc-Lt5fJ9iZJAAAARQ"]
[Sun Apr 19 03:17:05.166657 2026] [:error] [pid 32252:tid 32257] [client 172.98.33.68:52375] [client 172.98.33.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.68, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aePYseXl4Yc-Lt5fJ9i0TgAAAQM"]
[Sun Apr 19 03:17:05.170462 2026] [proxy_fcgi:error] [pid 32252:tid 32257] [client 172.98.33.68:52375] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 03:32:28.133627 2026] [:error] [pid 33517:tid 33522] [client 43.153.96.79:54410] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aePcTH4Zz-rubR1wiZ_GYQAAAMM"]
[Sun Apr 19 04:44:30.411590 2026] [:error] [pid 47772:tid 47810] [client 3.39.244.108:53842] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aePtLoc0L16cb4smAz-IoAAAABU"]
[Sun Apr 19 04:44:31.176792 2026] [:error] [pid 47773:tid 47828] [client 3.39.244.108:53900] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aePtL-iBHdnCJDuPq9AzaAAAAEw"]
[Sun Apr 19 04:44:31.789245 2026] [:error] [pid 47773:tid 47824] [client 3.39.244.108:53938] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aePtL-iBHdnCJDuPq9AzbQAAAEg"]
[Sun Apr 19 04:44:32.406003 2026] [:error] [pid 47886:tid 47906] [client 3.39.244.108:53956] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "aePtMESe8yiyuPrD7yPciwAAANI"]
[Sun Apr 19 04:44:33.018382 2026] [:error] [pid 15764:tid 15836] [client 3.39.244.108:54002] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aePtMWLL_sqdSHoVp-TgvQAAAko"]
[Sun Apr 19 04:44:33.630062 2026] [:error] [pid 15763:tid 15807] [client 3.39.244.108:54020] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "aePtMbMXv1Y1THOoxaAbcwAAAgs"]
[Sun Apr 19 04:44:35.835070 2026] [:error] [pid 47773:tid 47838] [client 3.39.244.108:34628] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.remote"] [unique_id "aePtM-iBHdnCJDuPq9AzjAAAAFY"]
[Sun Apr 19 04:44:36.448410 2026] [:error] [pid 47886:tid 47889] [client 3.39.244.108:34654] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "aePtNESe8yiyuPrD7yPckQAAAME"]
[Sun Apr 19 06:23:57.576920 2026] [:error] [pid 47773:tid 47823] [client 3.250.2.106:47484] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aeQEfeiBHdnCJDuPq9BxugAAAEc"]
[Sun Apr 19 06:23:58.864214 2026] [:error] [pid 47886:tid 47910] [client 3.250.2.106:52462] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aeQEfkSe8yiyuPrD7yP5swAAANY"]
[Sun Apr 19 06:23:59.903523 2026] [:error] [pid 47775:tid 47862] [client 3.250.2.106:52514] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.local"] [unique_id "aeQEf7mztjlk9tsmoeyA3wAAAJM"]
[Sun Apr 19 06:24:00.927963 2026] [:error] [pid 15694:tid 15751] [client 3.250.2.106:52556] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.production"] [unique_id "aeQEgLimB-jol1fwqArARQAAAZg"]
[Sun Apr 19 06:24:01.961940 2026] [:error] [pid 15760:tid 15770] [client 3.250.2.106:52614] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aeQEgfSdD_XHQMJ_ISsfdQAAAcI"]
[Sun Apr 19 06:24:02.994792 2026] [:error] [pid 47773:tid 47834] [client 3.250.2.106:52672] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.development"] [unique_id "aeQEguiBHdnCJDuPq9BxyQAAAFI"]
[Sun Apr 19 07:22:40.697694 2026] [proxy_fcgi:error] [pid 15765:tid 15872] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:40.965523 2026] [proxy_fcgi:error] [pid 15765:tid 15866] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:41.158085 2026] [proxy_fcgi:error] [pid 15765:tid 15857] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:41.397464 2026] [proxy_fcgi:error] [pid 15765:tid 15855] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:41.587014 2026] [proxy_fcgi:error] [pid 15765:tid 15852] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:41.777283 2026] [proxy_fcgi:error] [pid 15765:tid 15861] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:42.005892 2026] [proxy_fcgi:error] [pid 15765:tid 15876] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:42.195678 2026] [proxy_fcgi:error] [pid 15765:tid 15864] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:42.630405 2026] [proxy_fcgi:error] [pid 15765:tid 15867] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:42.935010 2026] [proxy_fcgi:error] [pid 15765:tid 15875] [client 20.12.204.106:20009] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 07:22:43.122850 2026] [:error] [pid 15765:tid 15868] [client 20.12.204.106:20009] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aeQSQ_Rqinw-W5EwQ76Y3wAAAo8"]
[Sun Apr 19 07:22:44.117463 2026] [:error] [pid 47773:tid 47824] [client 20.12.204.106:18245] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aeQSROiBHdnCJDuPq9CMAwAAAEg"]
[Sun Apr 19 07:22:46.140130 2026] [:error] [pid 47772:tid 47806] [client 20.12.204.106:17893] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aeQSRoc0L16cb4smAz_H4QAAABE"]
[Sun Apr 19 07:22:48.799515 2026] [:error] [pid 47886:tid 47909] [client 20.12.204.106:19912] [client 20.12.204.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "aeQSSESe8yiyuPrD7yMGRgAAANU"]
[Sun Apr 19 09:41:58.772407 2026] [:error] [pid 47773:tid 47840] [client 43.167.241.46:38784] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeQy5uiBHdnCJDuPq9DBYQAAAFg"]
[Sun Apr 19 11:15:20.512251 2026] [:error] [pid 15763:tid 15814] [client 43.163.118.136:44358] [client 43.163.118.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeRIyLMXv1Y1THOoxaBycQAAAhI"]
[Sun Apr 19 11:57:09.918714 2026] [:error] [pid 47773:tid 47828] [client 175.6.217.4:41080] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeRSleiBHdnCJDuPq9DfTAAAAEw"]
[Sun Apr 19 12:15:21.859498 2026] [:error] [pid 15763:tid 15797] [client 117.192.188.183:53103] [client 117.192.188.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.192.188.183, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aeRW2bMXv1Y1THOoxaCB_AAAAgE"]
[Sun Apr 19 12:15:21.869869 2026] [proxy_fcgi:error] [pid 15763:tid 15797] [client 117.192.188.183:53103] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 17:49:57.825302 2026] [:error] [pid 15693:tid 15707] [client 43.153.15.51:43390] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeSlRcNMD-ccazQlTslHuQAAAUs"]
[Sun Apr 19 18:27:58.307727 2026] [:error] [pid 15764:tid 15843] [client 203.2.64.59:55383] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeSuLmLL_sqdSHoVp-TSvQAAAlE"]
[Sun Apr 19 19:13:53.115030 2026] [:error] [pid 15760:tid 15771] [client 213.35.109.170:59215] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||measureyourbrand.com|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS48fSdD_XHQMJ_ISvn2wAAAcM"]
[Sun Apr 19 21:41:48.279734 2026] [proxy_fcgi:error] [pid 15760:tid 15775] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:48.543816 2026] [proxy_fcgi:error] [pid 15760:tid 15785] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:48.811394 2026] [proxy_fcgi:error] [pid 15760:tid 15776] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:49.108173 2026] [proxy_fcgi:error] [pid 15760:tid 15768] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:49.382768 2026] [proxy_fcgi:error] [pid 15760:tid 15777] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:49.908656 2026] [proxy_fcgi:error] [pid 15760:tid 15780] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:50.172942 2026] [proxy_fcgi:error] [pid 15760:tid 15789] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:50.436335 2026] [proxy_fcgi:error] [pid 15760:tid 15784] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:50.721002 2026] [proxy_fcgi:error] [pid 15760:tid 15785] [client 4.219.8.165:28456] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:41:51.011054 2026] [:error] [pid 15760:tid 15776] [client 4.219.8.165:28456] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aeTbn_SdD_XHQMJ_ISs6qgAAAcg"]
[Sun Apr 19 21:41:52.004808 2026] [:error] [pid 15764:tid 15850] [client 4.219.8.165:28430] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aeTboGLL_sqdSHoVp-QeJwAAAlc"]
[Sun Apr 19 21:41:53.232793 2026] [:error] [pid 15764:tid 15848] [client 4.219.8.165:41646] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aeTboWLL_sqdSHoVp-QeLQAAAlY"]
[Sun Apr 19 21:41:54.608622 2026] [:error] [pid 47772:tid 47805] [client 4.219.8.165:39984] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aeTbooc0L16cb4smAz_EZwAAABA"]
[Sun Apr 19 21:41:55.384313 2026] [:error] [pid 47886:tid 47911] [client 4.219.8.165:39992] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeTbo0Se8yiyuPrD7yN68QAAANc"]
[Sun Apr 19 21:41:56.971525 2026] [:error] [pid 15763:tid 15813] [client 4.219.8.165:41636] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeTbpLMXv1Y1THOoxaD_bgAAAhE"]
[Sun Apr 19 21:41:58.220652 2026] [:error] [pid 15760:tid 15778] [client 4.219.8.165:28463] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeTbpvSdD_XHQMJ_ISs6vAAAAco"]
[Sun Apr 19 21:41:59.354464 2026] [:error] [pid 47772:tid 47796] [client 4.219.8.165:28429] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeTbp4c0L16cb4smAz_EbQAAAAc"]
[Sun Apr 19 21:42:00.288435 2026] [:error] [pid 15765:tid 15862] [client 4.219.8.165:41662] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeTbqPRqinw-W5EwQ779-QAAAok"]
[Sun Apr 19 21:42:01.235162 2026] [:error] [pid 15763:tid 15820] [client 4.219.8.165:41661] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeTbqbMXv1Y1THOoxaD_cgAAAhg"]
[Sun Apr 19 21:42:02.085661 2026] [:error] [pid 15760:tid 15773] [client 4.219.8.165:28423] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeTbqvSdD_XHQMJ_ISs6yQAAAcU"]
[Sun Apr 19 21:42:02.891221 2026] [:error] [pid 47886:tid 47912] [client 4.219.8.165:39999] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aeTbqkSe8yiyuPrD7yN69gAAANg"]
[Sun Apr 19 21:42:03.920121 2026] [:error] [pid 47775:tid 47853] [client 4.219.8.165:28440] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeTbq7mztjlk9tsmoewZKQAAAIo"]
[Sun Apr 19 21:42:05.602284 2026] [:error] [pid 15765:tid 15874] [client 4.219.8.165:27930] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeTbrfRqinw-W5EwQ779_AAAApU"]
[Sun Apr 19 21:42:06.471357 2026] [:error] [pid 47775:tid 47851] [client 4.219.8.165:41605] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeTbrrmztjlk9tsmoewZNAAAAIg"]
[Sun Apr 19 21:42:07.502966 2026] [:error] [pid 47886:tid 47891] [client 4.219.8.165:41630] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeTbr0Se8yiyuPrD7yN6-wAAAMM"]
[Sun Apr 19 21:42:08.316577 2026] [:error] [pid 47773:tid 47835] [client 4.219.8.165:28417] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeTbsOiBHdnCJDuPq9BHVQAAAFM"]
[Sun Apr 19 21:42:09.342901 2026] [:error] [pid 47772:tid 47813] [client 4.219.8.165:39938] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeTbsYc0L16cb4smAz_EeAAAABg"]
[Sun Apr 19 21:42:10.055585 2026] [:error] [pid 47772:tid 47792] [client 4.219.8.165:28458] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeTbsoc0L16cb4smAz_EewAAAAM"]
[Sun Apr 19 21:42:11.463019 2026] [:error] [pid 47886:tid 47909] [client 4.219.8.165:27940] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aeTbs0Se8yiyuPrD7yN7BQAAANU"]
[Sun Apr 19 21:42:12.163835 2026] [:error] [pid 15693:tid 15699] [client 4.219.8.165:28450] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aeTbtMNMD-ccazQlTsldIgAAAUM"]
[Sun Apr 19 21:42:12.835208 2026] [:error] [pid 15763:tid 15806] [client 4.219.8.165:39955] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aeTbtLMXv1Y1THOoxaD_fQAAAgo"]
[Sun Apr 19 21:42:13.635931 2026] [:error] [pid 47772:tid 47801] [client 4.219.8.165:39960] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aeTbtYc0L16cb4smAz_EhAAAAAw"]
[Sun Apr 19 21:42:14.382580 2026] [:error] [pid 47772:tid 47808] [client 4.219.8.165:28442] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aeTbtoc0L16cb4smAz_EiAAAABM"]
[Sun Apr 19 21:42:15.309537 2026] [:error] [pid 15764:tid 15827] [client 4.219.8.165:41615] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeTbt2LL_sqdSHoVp-QeNwAAAkE"]
[Sun Apr 19 21:42:16.267332 2026] [:error] [pid 47772:tid 47802] [client 4.219.8.165:41627] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeTbuIc0L16cb4smAz_EkAAAAA0"]
[Sun Apr 19 21:42:17.069874 2026] [:error] [pid 15763:tid 15796] [client 4.219.8.165:41659] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeTbubMXv1Y1THOoxaD_jwAAAgA"]
[Sun Apr 19 21:42:17.870519 2026] [:error] [pid 15760:tid 15788] [client 4.219.8.165:39996] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeTbufSdD_XHQMJ_ISs61QAAAdQ"]
[Sun Apr 19 21:42:18.667423 2026] [:error] [pid 15760:tid 15776] [client 4.219.8.165:28427] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aeTbuvSdD_XHQMJ_ISs62wAAAcg"]
[Sun Apr 19 21:42:20.418828 2026] [:error] [pid 15763:tid 15817] [client 4.219.8.165:28425] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aeTbvLMXv1Y1THOoxaD_lAAAAhU"]
[Sun Apr 19 21:42:21.367891 2026] [:error] [pid 15694:tid 15739] [client 4.219.8.165:28439] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aeTbvbimB-jol1fwqAoQJQAAAY0"]
[Sun Apr 19 21:42:22.859915 2026] [:error] [pid 47775:tid 47846] [client 4.219.8.165:28462] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aeTbvrmztjlk9tsmoewZRAAAAIM"]
[Sun Apr 19 21:42:24.774249 2026] [:error] [pid 15764:tid 15844] [client 4.219.8.165:41647] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aeTbwGLL_sqdSHoVp-QeQwAAAlI"]
[Sun Apr 19 21:42:25.800336 2026] [:error] [pid 47772:tid 47793] [client 4.219.8.165:28422] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aeTbwYc0L16cb4smAz_EqQAAAAQ"]
[Sun Apr 19 21:42:26.603441 2026] [:error] [pid 15764:tid 15841] [client 4.219.8.165:28416] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aeTbwmLL_sqdSHoVp-QeSgAAAk8"]
[Sun Apr 19 21:42:27.345127 2026] [:error] [pid 15764:tid 15844] [client 4.219.8.165:28471] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blogs.php"] [unique_id "aeTbw2LL_sqdSHoVp-QeUQAAAlI"]
[Sun Apr 19 21:42:28.099909 2026] [:error] [pid 15760:tid 15773] [client 4.219.8.165:41644] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeTbxPSdD_XHQMJ_ISs67QAAAcU"]
[Sun Apr 19 21:42:29.451194 2026] [:error] [pid 47886:tid 47900] [client 4.219.8.165:39989] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeTbxUSe8yiyuPrD7yN7CwAAAMw"]
[Sun Apr 19 21:42:30.533874 2026] [:error] [pid 47886:tid 47899] [client 4.219.8.165:41625] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeTbxkSe8yiyuPrD7yN7DAAAAMs"]
[Sun Apr 19 21:42:31.995636 2026] [:error] [pid 47772:tid 47797] [client 4.219.8.165:39982] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aeTbx4c0L16cb4smAz_EqgAAAAg"]
[Sun Apr 19 21:42:33.553522 2026] [:error] [pid 47772:tid 47805] [client 4.219.8.165:28420] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aeTbyYc0L16cb4smAz_ErwAAABA"]
[Sun Apr 19 21:42:35.160288 2026] [:error] [pid 47773:tid 47818] [client 4.219.8.165:39942] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aeTby-iBHdnCJDuPq9BHbwAAAEI"]
[Sun Apr 19 21:42:36.138436 2026] [:error] [pid 15760:tid 15788] [client 4.219.8.165:28476] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aeTbzPSdD_XHQMJ_ISs7GgAAAdQ"]
[Sun Apr 19 21:42:36.908745 2026] [:error] [pid 47772:tid 47790] [client 4.219.8.165:28460] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "aeTbzIc0L16cb4smAz_EtAAAAAE"]
[Sun Apr 19 21:42:37.589971 2026] [:error] [pid 47772:tid 47793] [client 4.219.8.165:41603] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeTbzYc0L16cb4smAz_EtQAAAAQ"]
[Sun Apr 19 21:42:38.736158 2026] [:error] [pid 15764:tid 15839] [client 4.219.8.165:27964] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeTbzmLL_sqdSHoVp-QeaQAAAk0"]
[Sun Apr 19 21:42:39.579322 2026] [:error] [pid 47773:tid 47831] [client 4.219.8.165:39947] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeTbz-iBHdnCJDuPq9BHdAAAAE8"]
[Sun Apr 19 21:42:40.617471 2026] [:error] [pid 15764:tid 15841] [client 4.219.8.165:27910] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeTb0GLL_sqdSHoVp-QecgAAAk8"]
[Sun Apr 19 21:42:42.010130 2026] [:error] [pid 47773:tid 47839] [client 4.219.8.165:28465] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeTb0uiBHdnCJDuPq9BHdwAAAFc"]
[Sun Apr 19 21:42:44.599009 2026] [:error] [pid 15764:tid 15841] [client 4.219.8.165:41640] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeTb1GLL_sqdSHoVp-QefgAAAk8"]
[Sun Apr 19 21:42:45.915044 2026] [:error] [pid 47775:tid 47848] [client 4.219.8.165:28446] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeTb1bmztjlk9tsmoewZWAAAAIU"]
[Sun Apr 19 21:42:46.995228 2026] [:error] [pid 47772:tid 47799] [client 4.219.8.165:41607] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeTb1oc0L16cb4smAz_EvAAAAAo"]
[Sun Apr 19 21:42:48.506133 2026] [:error] [pid 47886:tid 47908] [client 4.219.8.165:41637] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aeTb2ESe8yiyuPrD7yN7HAAAANQ"]
[Sun Apr 19 21:42:49.942278 2026] [:error] [pid 47772:tid 47793] [client 4.219.8.165:41634] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aeTb2Yc0L16cb4smAz_EwAAAAAQ"]
[Sun Apr 19 21:42:51.583502 2026] [proxy_fcgi:error] [pid 47886:tid 47903] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:51.887106 2026] [proxy_fcgi:error] [pid 47886:tid 47890] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:52.152134 2026] [proxy_fcgi:error] [pid 47886:tid 47911] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:52.434282 2026] [proxy_fcgi:error] [pid 47886:tid 47892] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:52.707698 2026] [proxy_fcgi:error] [pid 47886:tid 47900] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:52.980338 2026] [proxy_fcgi:error] [pid 47886:tid 47889] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:53.243924 2026] [proxy_fcgi:error] [pid 47886:tid 47904] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:53.949974 2026] [proxy_fcgi:error] [pid 47886:tid 47905] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:54.213765 2026] [proxy_fcgi:error] [pid 47886:tid 47910] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:54.477502 2026] [proxy_fcgi:error] [pid 47886:tid 47893] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:54.756001 2026] [proxy_fcgi:error] [pid 47886:tid 47888] [client 4.219.8.165:41624] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:42:55.052730 2026] [:error] [pid 47886:tid 47911] [client 4.219.8.165:41624] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeTb30Se8yiyuPrD7yN7NQAAANc"]
[Sun Apr 19 21:42:56.007925 2026] [:error] [pid 15694:tid 15736] [client 4.219.8.165:39959] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeTb4LimB-jol1fwqAoQOQAAAYo"]
[Sun Apr 19 21:42:56.683266 2026] [:error] [pid 15763:tid 15796] [client 4.219.8.165:39949] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeTb4LMXv1Y1THOoxaD_ugAAAgA"]
[Sun Apr 19 21:42:57.609859 2026] [:error] [pid 15693:tid 15719] [client 4.219.8.165:41606] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeTb4cNMD-ccazQlTsldMAAAAVc"]
[Sun Apr 19 21:42:58.332954 2026] [:error] [pid 15694:tid 15747] [client 4.219.8.165:41614] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeTb4rimB-jol1fwqAoQRgAAAZU"]
[Sun Apr 19 21:42:59.186016 2026] [:error] [pid 15763:tid 15816] [client 4.219.8.165:28449] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeTb47MXv1Y1THOoxaD_vAAAAhQ"]
[Sun Apr 19 21:42:59.882187 2026] [:error] [pid 47886:tid 47895] [client 4.219.8.165:39997] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeTb40Se8yiyuPrD7yN7PAAAAMc"]
[Sun Apr 19 21:43:00.654196 2026] [:error] [pid 47775:tid 47843] [client 4.219.8.165:39951] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aeTb5Lmztjlk9tsmoewZXQAAAIA"]
[Sun Apr 19 21:43:01.312134 2026] [:error] [pid 15765:tid 15867] [client 4.219.8.165:28437] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "aeTb5fRqinw-W5EwQ77-LwAAAo4"]
[Sun Apr 19 21:43:02.319206 2026] [:error] [pid 15763:tid 15815] [client 4.219.8.165:28436] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "aeTb5rMXv1Y1THOoxaD_wQAAAhM"]
[Sun Apr 19 21:43:03.170737 2026] [:error] [pid 47775:tid 47862] [client 4.219.8.165:39958] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "aeTb57mztjlk9tsmoewZYgAAAJM"]
[Sun Apr 19 21:43:04.034846 2026] [:error] [pid 47775:tid 47861] [client 4.219.8.165:15494] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "aeTb6Lmztjlk9tsmoewZZAAAAJI"]
[Sun Apr 19 21:43:04.716264 2026] [:error] [pid 15764:tid 15833] [client 4.219.8.165:28469] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aeTb6GLL_sqdSHoVp-QeiQAAAkc"]
[Sun Apr 19 21:43:05.643025 2026] [:error] [pid 47775:tid 47846] [client 4.219.8.165:39988] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aeTb6bmztjlk9tsmoewZZwAAAIM"]
[Sun Apr 19 21:43:06.377874 2026] [:error] [pid 15764:tid 15848] [client 4.219.8.165:28455] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aeTb6mLL_sqdSHoVp-QejAAAAlY"]
[Sun Apr 19 21:43:07.049165 2026] [:error] [pid 47775:tid 47866] [client 4.219.8.165:41643] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/vx.php"] [unique_id "aeTb67mztjlk9tsmoewZaQAAAJc"]
[Sun Apr 19 21:43:08.158083 2026] [:error] [pid 47775:tid 47860] [client 4.219.8.165:41653] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeTb7Lmztjlk9tsmoewZagAAAJE"]
[Sun Apr 19 21:43:09.273189 2026] [:error] [pid 15763:tid 15816] [client 4.219.8.165:27926] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeTb7bMXv1Y1THOoxaD_ygAAAhQ"]
[Sun Apr 19 21:43:10.874840 2026] [:error] [pid 15760:tid 15785] [client 4.219.8.165:28448] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeTb7vSdD_XHQMJ_ISs7TgAAAdE"]
[Sun Apr 19 21:43:11.965902 2026] [:error] [pid 15764:tid 15851] [client 4.219.8.165:19196] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeTb72LL_sqdSHoVp-QelwAAAlg"]
[Sun Apr 19 21:43:13.045139 2026] [:error] [pid 15694:tid 15742] [client 4.219.8.165:28432] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aeTb8bimB-jol1fwqAoQTgAAAZA"]
[Sun Apr 19 21:43:13.938964 2026] [:error] [pid 15760:tid 15782] [client 4.219.8.165:15524] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aeTb8fSdD_XHQMJ_ISs7VQAAAc4"]
[Sun Apr 19 21:43:14.707293 2026] [:error] [pid 15760:tid 15792] [client 4.219.8.165:27916] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aeTb8vSdD_XHQMJ_ISs7WwAAAdg"]
[Sun Apr 19 21:43:15.925515 2026] [:error] [pid 15764:tid 15828] [client 4.219.8.165:41611] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aeTb82LL_sqdSHoVp-QeoQAAAkI"]
[Sun Apr 19 21:43:16.760754 2026] [:error] [pid 47772:tid 47805] [client 4.219.8.165:41622] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTb9Ic0L16cb4smAz_E7wAAABA"]
[Sun Apr 19 21:43:17.602765 2026] [:error] [pid 47772:tid 47790] [client 4.219.8.165:27957] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTb9Yc0L16cb4smAz_E8gAAAAE"]
[Sun Apr 19 21:43:18.345172 2026] [:error] [pid 15764:tid 15845] [client 4.219.8.165:39990] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTb9mLL_sqdSHoVp-QeqAAAAlM"]
[Sun Apr 19 21:43:19.177146 2026] [:error] [pid 15760:tid 15770] [client 4.219.8.165:27943] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTb9_SdD_XHQMJ_ISs7YwAAAcI"]
[Sun Apr 19 21:43:19.979975 2026] [:error] [pid 15694:tid 15736] [client 4.219.8.165:41651] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeTb97imB-jol1fwqAoQUAAAAYo"]
[Sun Apr 19 21:43:21.089746 2026] [:error] [pid 47772:tid 47802] [client 4.219.8.165:28441] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeTb-Yc0L16cb4smAz_E9gAAAA0"]
[Sun Apr 19 21:43:21.905691 2026] [:error] [pid 47773:tid 47824] [client 4.219.8.165:41649] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeTb-eiBHdnCJDuPq9BHsQAAAEg"]
[Sun Apr 19 21:43:22.898430 2026] [:error] [pid 47886:tid 47905] [client 4.219.8.165:27954] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeTb-kSe8yiyuPrD7yN7SgAAANE"]
[Sun Apr 19 21:43:24.077367 2026] [:error] [pid 15760:tid 15784] [client 4.219.8.165:28431] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeTb_PSdD_XHQMJ_ISs7awAAAdA"]
[Sun Apr 19 21:43:24.941606 2026] [:error] [pid 15764:tid 15845] [client 4.219.8.165:27955] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeTb_GLL_sqdSHoVp-QeswAAAlM"]
[Sun Apr 19 21:43:25.725657 2026] [:error] [pid 47772:tid 47794] [client 4.219.8.165:28421] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeTb_Yc0L16cb4smAz_E_AAAAAU"]
[Sun Apr 19 21:43:26.458062 2026] [:error] [pid 15765:tid 15868] [client 4.219.8.165:41657] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "aeTb_vRqinw-W5EwQ77-RQAAAo8"]
[Sun Apr 19 21:43:27.116787 2026] [:error] [pid 15765:tid 15862] [client 4.219.8.165:41601] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "aeTb__Rqinw-W5EwQ77-RgAAAok"]
[Sun Apr 19 21:43:27.907808 2026] [:error] [pid 15694:tid 15724] [client 4.219.8.165:15505] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "aeTb_7imB-jol1fwqAoQWQAAAYE"]
[Sun Apr 19 21:43:28.941381 2026] [:error] [pid 15694:tid 15746] [client 4.219.8.165:39961] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "aeTcALimB-jol1fwqAoQWgAAAZQ"]
[Sun Apr 19 21:43:29.918908 2026] [:error] [pid 15694:tid 15725] [client 4.219.8.165:41602] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/900.php"] [unique_id "aeTcAbimB-jol1fwqAoQXAAAAYI"]
[Sun Apr 19 21:43:30.723098 2026] [:error] [pid 47775:tid 47866] [client 4.219.8.165:28478] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeTcArmztjlk9tsmoewZhgAAAJc"]
[Sun Apr 19 21:43:31.860836 2026] [:error] [pid 15765:tid 15874] [client 4.219.8.165:39981] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeTcA_Rqinw-W5EwQ77-SQAAApU"]
[Sun Apr 19 21:43:32.746350 2026] [:error] [pid 47886:tid 47895] [client 4.219.8.165:41652] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeTcBESe8yiyuPrD7yN7VgAAAMc"]
[Sun Apr 19 21:43:33.513487 2026] [:error] [pid 15693:tid 15717] [client 4.219.8.165:39987] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeTcBcNMD-ccazQlTsldPwAAAVU"]
[Sun Apr 19 21:43:34.229256 2026] [:error] [pid 15693:tid 15706] [client 4.219.8.165:39971] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeTcBsNMD-ccazQlTsldQAAAAUo"]
[Sun Apr 19 21:43:34.899736 2026] [:error] [pid 15764:tid 15844] [client 4.219.8.165:28444] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeTcBmLL_sqdSHoVp-QetwAAAlI"]
[Sun Apr 19 21:43:35.979675 2026] [:error] [pid 15693:tid 15720] [client 4.219.8.165:19187] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeTcB8NMD-ccazQlTsldQQAAAVg"]
[Sun Apr 19 21:43:36.812010 2026] [:error] [pid 15760:tid 15785] [client 4.219.8.165:39974] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeTcCPSdD_XHQMJ_ISs7dQAAAdE"]
[Sun Apr 19 21:43:37.550898 2026] [:error] [pid 15693:tid 15712] [client 4.219.8.165:41618] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aeTcCcNMD-ccazQlTsldQgAAAVA"]
[Sun Apr 19 21:43:38.540768 2026] [:error] [pid 47772:tid 47798] [client 4.219.8.165:39964] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aeTcCoc0L16cb4smAz_FAgAAAAk"]
[Sun Apr 19 21:43:39.563361 2026] [:error] [pid 15760:tid 15770] [client 4.219.8.165:41608] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aeTcC_SdD_XHQMJ_ISs7dwAAAcI"]
[Sun Apr 19 21:43:40.233895 2026] [:error] [pid 15763:tid 15818] [client 4.219.8.165:41628] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "aeTcDLMXv1Y1THOoxaD_2gAAAhY"]
[Sun Apr 19 21:43:40.920640 2026] [:error] [pid 15760:tid 15780] [client 4.219.8.165:39950] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeTcDPSdD_XHQMJ_ISs7fgAAAcw"]
[Sun Apr 19 21:43:41.565678 2026] [:error] [pid 15760:tid 15783] [client 4.219.8.165:27917] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeTcDfSdD_XHQMJ_ISs7hAAAAc8"]
[Sun Apr 19 21:43:42.228920 2026] [:error] [pid 15760:tid 15782] [client 4.219.8.165:28479] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeTcDvSdD_XHQMJ_ISs7jAAAAc4"]
[Sun Apr 19 21:43:42.990283 2026] [:error] [pid 15760:tid 15779] [client 4.219.8.165:41618] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeTcDvSdD_XHQMJ_ISs7kAAAAcs"]
[Sun Apr 19 21:43:43.828003 2026] [:error] [pid 15764:tid 15851] [client 4.219.8.165:27908] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aeTcD2LL_sqdSHoVp-QevwAAAlg"]
[Sun Apr 19 21:43:45.003729 2026] [:error] [pid 15764:tid 15841] [client 4.219.8.165:41660] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aeTcEWLL_sqdSHoVp-QeyAAAAk8"]
[Sun Apr 19 21:43:46.092549 2026] [:error] [pid 15764:tid 15829] [client 4.219.8.165:28472] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aeTcEmLL_sqdSHoVp-QezwAAAkM"]
[Sun Apr 19 21:43:46.693004 2026] [:error] [pid 15763:tid 15797] [client 4.219.8.165:19168] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aeTcErMXv1Y1THOoxaD_5gAAAgE"]
[Sun Apr 19 21:43:47.412342 2026] [:error] [pid 47772:tid 47799] [client 4.219.8.165:39993] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "aeTcE4c0L16cb4smAz_FCQAAAAo"]
[Sun Apr 19 21:43:48.335231 2026] [:error] [pid 15763:tid 15809] [client 4.219.8.165:39969] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "aeTcFLMXv1Y1THOoxaD_6QAAAg0"]
[Sun Apr 19 21:43:49.178391 2026] [:error] [pid 15763:tid 15815] [client 4.219.8.165:41610] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "aeTcFbMXv1Y1THOoxaD_7AAAAhM"]
[Sun Apr 19 21:43:50.097856 2026] [:error] [pid 15760:tid 15770] [client 4.219.8.165:39986] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboutc.php"] [unique_id "aeTcFvSdD_XHQMJ_ISs7mgAAAcI"]
[Sun Apr 19 21:43:51.094547 2026] [:error] [pid 15694:tid 15723] [client 4.219.8.165:41656] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeTcF7imB-jol1fwqAoQZQAAAYA"]
[Sun Apr 19 21:43:51.834479 2026] [:error] [pid 15764:tid 15831] [client 4.219.8.165:39956] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeTcF2LL_sqdSHoVp-Qe2gAAAkU"]
[Sun Apr 19 21:43:52.453518 2026] [:error] [pid 15760:tid 15772] [client 4.219.8.165:39946] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeTcGPSdD_XHQMJ_ISs7oAAAAcQ"]
[Sun Apr 19 21:43:53.212439 2026] [:error] [pid 15764:tid 15850] [client 4.219.8.165:27948] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "aeTcGWLL_sqdSHoVp-Qe4QAAAlc"]
[Sun Apr 19 21:43:54.130832 2026] [proxy_fcgi:error] [pid 15764:tid 15836] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:54.660907 2026] [proxy_fcgi:error] [pid 15764:tid 15837] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:54.938508 2026] [proxy_fcgi:error] [pid 15764:tid 15842] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:55.204025 2026] [proxy_fcgi:error] [pid 15764:tid 15848] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:55.466588 2026] [proxy_fcgi:error] [pid 15764:tid 15834] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:55.740957 2026] [proxy_fcgi:error] [pid 15764:tid 15844] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:56.209930 2026] [proxy_fcgi:error] [pid 15764:tid 15826] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:56.779553 2026] [proxy_fcgi:error] [pid 15764:tid 15827] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:57.112498 2026] [proxy_fcgi:error] [pid 15764:tid 15829] [client 4.219.8.165:19159] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:43:57.378642 2026] [:error] [pid 15764:tid 15842] [client 4.219.8.165:19159] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aeTcHWLL_sqdSHoVp-Qe_AAAAlA"]
[Sun Apr 19 21:43:57.947954 2026] [:error] [pid 47886:tid 47900] [client 4.219.8.165:39978] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aeTcHUSe8yiyuPrD7yN7dAAAAMw"]
[Sun Apr 19 21:43:58.665317 2026] [:error] [pid 15765:tid 15872] [client 4.219.8.165:39973] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aeTcHvRqinw-W5EwQ77-YAAAApM"]
[Sun Apr 19 21:43:59.528809 2026] [:error] [pid 47772:tid 47798] [client 4.219.8.165:19148] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/grsiuk.php"] [unique_id "aeTcH4c0L16cb4smAz_FDgAAAAk"]
[Sun Apr 19 21:44:00.643683 2026] [:error] [pid 47773:tid 47840] [client 4.219.8.165:27911] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aeTcIOiBHdnCJDuPq9BHygAAAFg"]
[Sun Apr 19 21:44:01.287818 2026] [:error] [pid 15694:tid 15749] [client 4.219.8.165:19167] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aeTcIbimB-jol1fwqAoQcQAAAZc"]
[Sun Apr 19 21:44:02.664516 2026] [:error] [pid 15694:tid 15731] [client 4.219.8.165:19185] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aeTcIrimB-jol1fwqAoQcwAAAYU"]
[Sun Apr 19 21:44:03.441366 2026] [:error] [pid 15764:tid 15826] [client 4.219.8.165:19164] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aeTcI2LL_sqdSHoVp-QfCAAAAkA"]
[Sun Apr 19 21:44:04.277019 2026] [:error] [pid 15760:tid 15784] [client 4.219.8.165:39953] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeTcJPSdD_XHQMJ_ISs7oQAAAdA"]
[Sun Apr 19 21:44:05.467681 2026] [:error] [pid 15763:tid 15798] [client 4.219.8.165:41655] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeTcJbMXv1Y1THOoxaD_-AAAAgI"]
[Sun Apr 19 21:44:06.925096 2026] [:error] [pid 15763:tid 15807] [client 4.219.8.165:41645] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeTcJrMXv1Y1THOoxaD_-QAAAgs"]
[Sun Apr 19 21:44:07.906461 2026] [:error] [pid 15694:tid 15736] [client 4.219.8.165:65285] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aeTcJ7imB-jol1fwqAoQdQAAAYo"]
[Sun Apr 19 21:44:09.192661 2026] [:error] [pid 15763:tid 15801] [client 4.219.8.165:19149] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aeTcKbMXv1Y1THOoxaD__AAAAgU"]
[Sun Apr 19 21:44:10.799088 2026] [:error] [pid 47772:tid 47793] [client 4.219.8.165:27947] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aeTcKoc0L16cb4smAz_FGQAAAAQ"]
[Sun Apr 19 21:44:12.297068 2026] [:error] [pid 15763:tid 15800] [client 4.219.8.165:27914] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aeTcLLMXv1Y1THOoxaAADQAAAgQ"]
[Sun Apr 19 21:44:13.373696 2026] [:error] [pid 15693:tid 15702] [client 4.219.8.165:41658] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "aeTcLcNMD-ccazQlTsldSAAAAUY"]
[Sun Apr 19 21:44:14.492308 2026] [:error] [pid 47775:tid 47861] [client 4.219.8.165:19173] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeTcLrmztjlk9tsmoewZlwAAAJI"]
[Sun Apr 19 21:44:16.254300 2026] [:error] [pid 15764:tid 15834] [client 4.219.8.165:28459] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeTcMGLL_sqdSHoVp-QfDgAAAkg"]
[Sun Apr 19 21:44:17.162992 2026] [:error] [pid 47772:tid 47812] [client 4.219.8.165:27942] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeTcMYc0L16cb4smAz_FIgAAABc"]
[Sun Apr 19 21:44:18.299098 2026] [:error] [pid 47772:tid 47813] [client 4.219.8.165:39954] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeTcMoc0L16cb4smAz_FJwAAABg"]
[Sun Apr 19 21:44:19.270047 2026] [:error] [pid 47772:tid 47795] [client 4.219.8.165:28473] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeTcM4c0L16cb4smAz_FKAAAAAY"]
[Sun Apr 19 21:44:20.267103 2026] [:error] [pid 15760:tid 15785] [client 4.219.8.165:28426] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeTcNPSdD_XHQMJ_ISs7zQAAAdE"]
[Sun Apr 19 21:44:21.681544 2026] [:error] [pid 15764:tid 15837] [client 4.219.8.165:39940] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeTcNWLL_sqdSHoVp-QfEgAAAks"]
[Sun Apr 19 21:44:23.085383 2026] [:error] [pid 15760:tid 15792] [client 4.219.8.165:19166] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeTcN_SdD_XHQMJ_ISs70gAAAdg"]
[Sun Apr 19 21:44:25.291735 2026] [:error] [pid 47772:tid 47789] [client 4.219.8.165:27921] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aeTcOYc0L16cb4smAz_FMwAAAAA"]
[Sun Apr 19 21:44:29.394307 2026] [:error] [pid 15763:tid 15799] [client 4.219.8.165:19189] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aeTcPbMXv1Y1THOoxaAAJgAAAgM"]
[Sun Apr 19 21:44:31.642671 2026] [:error] [pid 15763:tid 15813] [client 4.219.8.165:28424] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aeTcP7MXv1Y1THOoxaAAOQAAAhE"]
[Sun Apr 19 21:44:33.224743 2026] [:error] [pid 47772:tid 47793] [client 4.219.8.165:65305] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aeTcQYc0L16cb4smAz_FVQAAAAQ"]
[Sun Apr 19 21:44:34.271186 2026] [:error] [pid 15760:tid 15770] [client 4.219.8.165:28454] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeTcQvSdD_XHQMJ_ISs74QAAAcI"]
[Sun Apr 19 21:44:35.161349 2026] [:error] [pid 15694:tid 15731] [client 4.219.8.165:28452] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeTcQ7imB-jol1fwqAoQiwAAAYU"]
[Sun Apr 19 21:44:36.333298 2026] [:error] [pid 15764:tid 15842] [client 4.219.8.165:28418] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeTcRGLL_sqdSHoVp-QfHgAAAlA"]
[Sun Apr 19 21:44:37.560912 2026] [:error] [pid 15763:tid 15814] [client 4.219.8.165:27929] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aeTcRbMXv1Y1THOoxaAARwAAAhI"]
[Sun Apr 19 21:44:38.483909 2026] [:error] [pid 47886:tid 47896] [client 4.219.8.165:41623] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeTcRkSe8yiyuPrD7yN7lgAAAMg"]
[Sun Apr 19 21:44:39.523223 2026] [:error] [pid 15760:tid 15785] [client 4.219.8.165:41780] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeTcR_SdD_XHQMJ_ISs77QAAAdE"]
[Sun Apr 19 21:44:40.787490 2026] [:error] [pid 47773:tid 47834] [client 4.219.8.165:42838] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeTcSOiBHdnCJDuPq9BH3gAAAFI"]
[Sun Apr 19 21:44:41.882520 2026] [:error] [pid 15760:tid 15779] [client 4.219.8.165:27967] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws57.php"] [unique_id "aeTcSfSdD_XHQMJ_ISs8BAAAAcs"]
[Sun Apr 19 21:44:42.554488 2026] [:error] [pid 15764:tid 15845] [client 4.219.8.165:39936] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeTcSmLL_sqdSHoVp-QfLQAAAlM"]
[Sun Apr 19 21:44:43.686352 2026] [:error] [pid 47772:tid 47804] [client 4.219.8.165:42826] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeTcS4c0L16cb4smAz_FXwAAAA8"]
[Sun Apr 19 21:44:48.186104 2026] [:error] [pid 47772:tid 47810] [client 4.219.8.165:41616] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeTcUIc0L16cb4smAz_FbAAAABU"]
[Sun Apr 19 21:44:49.144712 2026] [:error] [pid 47773:tid 47829] [client 4.219.8.165:41635] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeTcUeiBHdnCJDuPq9BH4wAAAE0"]
[Sun Apr 19 21:44:50.389589 2026] [:error] [pid 47772:tid 47801] [client 4.219.8.165:42832] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeTcUoc0L16cb4smAz_FcAAAAAw"]
[Sun Apr 19 21:44:51.896536 2026] [:error] [pid 15760:tid 15768] [client 4.219.8.165:27951] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeTcU_SdD_XHQMJ_ISs8EAAAAcA"]
[Sun Apr 19 21:44:53.027346 2026] [:error] [pid 15760:tid 15779] [client 4.219.8.165:41769] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeTcVfSdD_XHQMJ_ISs8EQAAAcs"]
[Sun Apr 19 21:44:54.002421 2026] [:error] [pid 15765:tid 15865] [client 4.219.8.165:65250] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws66.php"] [unique_id "aeTcVvRqinw-W5EwQ77-bgAAAow"]
[Sun Apr 19 21:44:55.306751 2026] [:error] [pid 15765:tid 15863] [client 4.219.8.165:27945] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeTcV_Rqinw-W5EwQ77-cQAAAoo"]
[Sun Apr 19 21:44:56.478639 2026] [:error] [pid 47773:tid 47828] [client 4.219.8.165:41626] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeTcWOiBHdnCJDuPq9BH9wAAAEw"]
[Sun Apr 19 21:44:57.517906 2026] [proxy_fcgi:error] [pid 15764:tid 15846] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:57.809006 2026] [proxy_fcgi:error] [pid 15764:tid 15851] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:58.123567 2026] [proxy_fcgi:error] [pid 15764:tid 15843] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:58.386943 2026] [proxy_fcgi:error] [pid 15764:tid 15835] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:58.975831 2026] [proxy_fcgi:error] [pid 15764:tid 15844] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:59.242320 2026] [proxy_fcgi:error] [pid 15764:tid 15850] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:59.521153 2026] [proxy_fcgi:error] [pid 15764:tid 15830] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:44:59.784961 2026] [proxy_fcgi:error] [pid 15764:tid 15833] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:45:00.306827 2026] [proxy_fcgi:error] [pid 15764:tid 15841] [client 4.219.8.165:42868] AH01071: Got error 'Primary script unknown'
[Sun Apr 19 21:45:01.564660 2026] [:error] [pid 15764:tid 15838] [client 4.219.8.165:42868] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aeTcXWLL_sqdSHoVp-QfQAAAAkw"]
[Sun Apr 19 21:45:02.373013 2026] [:error] [pid 15760:tid 15773] [client 4.219.8.165:39945] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aeTcXvSdD_XHQMJ_ISs8LQAAAcU"]
[Sun Apr 19 21:45:03.307133 2026] [:error] [pid 47886:tid 47909] [client 4.219.8.165:41736] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aeTcX0Se8yiyuPrD7yN7owAAANU"]
[Sun Apr 19 21:45:05.027762 2026] [:error] [pid 15764:tid 15844] [client 4.219.8.165:41757] [client 4.219.8.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aeTcYWLL_sqdSHoVp-QfTgAAAlI"]
[Sun Apr 19 21:45:07.132273 2026] [:error] [pid 47886:tid 47907] [client 4.219.8.165:41740] [client 4.219.8.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aeTcY0Se8yiyuPrD7yN7pwAAANM"]
[Sun Apr 19 22:04:14.462648 2026] [:error] [pid 15765:tid 15873] [client 138.68.5.226:51810] [client 138.68.5.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeTg3vRqinw-W5EwQ74BwwAAApQ"]
[Sun Apr 19 22:21:27.358102 2026] [autoindex:error] [pid 15764:tid 15836] [client 212.47.77.100:56438] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Apr 20 03:38:06.940901 2026] [proxy_fcgi:error] [pid 64440:tid 64449] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:07.208861 2026] [proxy_fcgi:error] [pid 64440:tid 64457] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:07.478996 2026] [proxy_fcgi:error] [pid 64440:tid 64445] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:07.757254 2026] [proxy_fcgi:error] [pid 64440:tid 64458] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:08.025697 2026] [proxy_fcgi:error] [pid 64440:tid 64452] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:08.304342 2026] [proxy_fcgi:error] [pid 64440:tid 64459] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:08.574572 2026] [proxy_fcgi:error] [pid 64440:tid 64457] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 03:38:08.841657 2026] [proxy_fcgi:error] [pid 64440:tid 64465] [client 20.91.204.74:25222] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:52.090522 2026] [proxy_fcgi:error] [pid 64332:tid 64348] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:52.328664 2026] [proxy_fcgi:error] [pid 64332:tid 64353] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:52.567246 2026] [proxy_fcgi:error] [pid 64332:tid 64364] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:52.804692 2026] [proxy_fcgi:error] [pid 64332:tid 64345] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:53.043451 2026] [proxy_fcgi:error] [pid 64332:tid 64361] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:53.282737 2026] [proxy_fcgi:error] [pid 64332:tid 64343] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:53.520562 2026] [proxy_fcgi:error] [pid 64332:tid 64355] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 06:18:53.758871 2026] [proxy_fcgi:error] [pid 64332:tid 64347] [client 172.213.219.48:20663] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 07:02:55.327301 2026] [:error] [pid 47731:tid 47736] [client 203.2.64.59:36752] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeVfH1Owpc-h7Nzn-iOr7gAAAQM"]
[Mon Apr 20 09:31:13.891049 2026] [:error] [pid 64334:tid 64404] [client 82.29.164.246:35902] [client 82.29.164.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aeWB4cNh9IxxDqsrPyPMhwAAAIE"]
[Mon Apr 20 11:33:13.424713 2026] [:error] [pid 11350:tid 11369] [client 223.185.130.125:30111] [client 223.185.130.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.130.125, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aeWeef4EoMBgOJuJnT0UegAAAAo"]
[Mon Apr 20 11:33:13.436046 2026] [proxy_fcgi:error] [pid 11350:tid 11369] [client 223.185.130.125:30111] AH01071: Got error 'Primary script unknown'
[Mon Apr 20 11:40:33.595637 2026] [:error] [pid 11350:tid 11364] [client 43.155.140.157:49038] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeWgMf4EoMBgOJuJnT0WcQAAAAU"]
[Mon Apr 20 13:35:25.829010 2026] [:error] [pid 11351:tid 11410] [client 103.65.237.216:54564] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/sftp-config.json"] [unique_id "aeW7HQN8Z1-vktaI_tOGMwAAAFc"]
[Mon Apr 20 18:17:53.363169 2026] [:error] [pid 11441:tid 11466] [client 45.131.195.146:34443] [client 45.131.195.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aeX9UcixByFUvmh319BqhwAAANc"]
[Mon Apr 20 21:23:14.454024 2026] [:error] [pid 11351:tid 11398] [client 43.167.236.228:37244] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeYowgN8Z1-vktaI_tMKpQAAAEs"]
[Mon Apr 20 22:42:53.251435 2026] [:error] [pid 6928:tid 6952] [client 43.130.57.76:56990] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeY7bR3y7MHq1iB0qYrFNwAAAVY"]
[Tue Apr 21 01:59:17.355718 2026] [:error] [pid 11350:tid 11382] [client 106.227.49.113:57437] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeZpdf4EoMBgOJuJnT0ykQAAABc"]
[Tue Apr 21 02:15:28.939439 2026] [:error] [pid 11351:tid 11397] [client 160.30.179.124:56232] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aeZtQAN8Z1-vktaI_tO1UwAAAEo"]
[Tue Apr 21 03:31:33.992051 2026] [autoindex:error] [pid 4928:tid 4972] [client 212.47.77.99:64736] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 21 03:40:29.036551 2026] [:error] [pid 35415:tid 35447] [client 46.97.171.98:47127] [client 46.97.171.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.97.171.98, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aeaBLUiqDinI4_22zzjRJAAAANQ"]
[Tue Apr 21 03:40:29.048800 2026] [proxy_fcgi:error] [pid 35415:tid 35447] [client 46.97.171.98:47127] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 04:00:20.292769 2026] [:error] [pid 35322:tid 35375] [client 185.194.178.11:64947] [client 185.194.178.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.11, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aeaF1KPoAfV40BTfVKxobAAAAJI"]
[Tue Apr 21 04:00:20.295886 2026] [proxy_fcgi:error] [pid 35322:tid 35375] [client 185.194.178.11:64947] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 05:11:12.914043 2026] [:error] [pid 35415:tid 35430] [client 43.130.16.140:43576] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeaWcEiqDinI4_22zzjy2wAAAMM"]
[Tue Apr 21 06:47:23.011387 2026] [:error] [pid 5377:tid 5400] [client 192.96.159.129:64302] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aeas-7BKychFlrHBdvseHgAAAc4"]
[Tue Apr 21 13:56:20.002126 2026] [:error] [pid 35320:tid 35352] [client 18.144.168.7:41286] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aecRhIJW6fdXWO6agMHtVAAAABY"]
[Tue Apr 21 13:56:20.832774 2026] [:error] [pid 5377:tid 5410] [client 18.144.168.7:41346] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "aecRhLBKychFlrHBdvumKgAAAdg"]
[Tue Apr 21 13:56:21.493727 2026] [:error] [pid 35415:tid 35448] [client 18.144.168.7:41360] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aecRhUiqDinI4_22zzg1xgAAANU"]
[Tue Apr 21 13:56:22.158375 2026] [:error] [pid 5377:tid 5393] [client 18.144.168.7:41368] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "aecRhrBKychFlrHBdvumLwAAAcc"]
[Tue Apr 21 13:56:22.819489 2026] [:error] [pid 35415:tid 35430] [client 18.144.168.7:48962] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aecRhkiqDinI4_22zzg1ygAAAMM"]
[Tue Apr 21 13:56:23.477156 2026] [:error] [pid 5377:tid 5400] [client 18.144.168.7:48980] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "aecRh7BKychFlrHBdvumMwAAAc4"]
[Tue Apr 21 13:56:24.134985 2026] [:error] [pid 35415:tid 35427] [client 18.144.168.7:49016] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "aecRiEiqDinI4_22zzg1zgAAAMA"]
[Tue Apr 21 13:56:24.801949 2026] [:error] [pid 5377:tid 5408] [client 18.144.168.7:49050] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.remote"] [unique_id "aecRiLBKychFlrHBdvumNwAAAdY"]
[Tue Apr 21 13:56:25.466278 2026] [:error] [pid 35415:tid 35436] [client 18.144.168.7:49066] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "aecRiUiqDinI4_22zzg1zwAAAMk"]
[Tue Apr 21 13:56:26.135385 2026] [:error] [pid 35320:tid 35350] [client 18.144.168.7:49098] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "aecRioJW6fdXWO6agMHtZgAAABQ"]
[Tue Apr 21 13:56:26.798198 2026] [:error] [pid 5377:tid 5406] [client 18.144.168.7:49134] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "aecRirBKychFlrHBdvumOgAAAdQ"]
[Tue Apr 21 13:56:27.460423 2026] [:error] [pid 35322:tid 35372] [client 18.144.168.7:49156] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "aecRi6PoAfV40BTfVKylTAAAAI8"]
[Tue Apr 21 13:56:28.125033 2026] [:error] [pid 5377:tid 5394] [client 18.144.168.7:49186] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.sample"] [unique_id "aecRjLBKychFlrHBdvumPgAAAcg"]
[Tue Apr 21 13:56:28.789121 2026] [:error] [pid 4823:tid 4874] [client 18.144.168.7:49208] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "aecRjPc8mke3PfHqsxFj3AAAAZU"]
[Tue Apr 21 13:56:29.458195 2026] [:error] [pid 4823:tid 4856] [client 18.144.168.7:49244] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "aecRjfc8mke3PfHqsxFj4AAAAYM"]
[Tue Apr 21 13:56:30.133400 2026] [:error] [pid 35320:tid 35344] [client 18.144.168.7:49264] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "aecRjoJW6fdXWO6agMHtawAAAA4"]
[Tue Apr 21 13:56:30.790792 2026] [:error] [pid 35322:tid 35357] [client 18.144.168.7:49276] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.stage"] [unique_id "aecRjqPoAfV40BTfVKylTgAAAIA"]
[Tue Apr 21 13:56:31.457136 2026] [:error] [pid 35320:tid 35345] [client 18.144.168.7:49292] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.ci"] [unique_id "aecRj4JW6fdXWO6agMHtbwAAAA8"]
[Tue Apr 21 13:56:32.117737 2026] [:error] [pid 35320:tid 35334] [client 18.144.168.7:49302] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.docker"] [unique_id "aecRkIJW6fdXWO6agMHtcwAAAAQ"]
[Tue Apr 21 13:56:32.774483 2026] [:error] [pid 4823:tid 4854] [client 18.144.168.7:51384] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.live"] [unique_id "aecRkPc8mke3PfHqsxFj5gAAAYE"]
[Tue Apr 21 13:56:33.432456 2026] [:error] [pid 35322:tid 35368] [client 18.144.168.7:51412] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.preprod"] [unique_id "aecRkaPoAfV40BTfVKylUwAAAIs"]
[Tue Apr 21 13:56:34.094131 2026] [:error] [pid 35321:tid 35388] [client 18.144.168.7:51452] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.uat"] [unique_id "aecRkjeHLhVUuu8cVXx-7AAAAEQ"]
[Tue Apr 21 13:56:34.751418 2026] [:error] [pid 35322:tid 35375] [client 18.144.168.7:51484] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "aecRkqPoAfV40BTfVKylVQAAAJI"]
[Tue Apr 21 13:56:35.413586 2026] [:error] [pid 4822:tid 4836] [client 18.144.168.7:51494] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.swp"] [unique_id "aecRkyAteFQFwS_23JlWMQAAAUo"]
[Tue Apr 21 13:56:36.078779 2026] [:error] [pid 35321:tid 35393] [client 18.144.168.7:51538] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "aecRlDeHLhVUuu8cVXx-9AAAAEk"]
[Tue Apr 21 13:56:36.738900 2026] [:error] [pid 35321:tid 35407] [client 18.144.168.7:51552] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "aecRlDeHLhVUuu8cVXx-9gAAAFc"]
[Tue Apr 21 13:56:39.037910 2026] [:error] [pid 4822:tid 4844] [client 18.144.168.7:51630] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "aecRlyAteFQFwS_23JlWOwAAAVI"]
[Tue Apr 21 13:56:39.689894 2026] [:error] [pid 4823:tid 4877] [client 18.144.168.7:51648] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/web/.env"] [unique_id "aecRl_c8mke3PfHqsxFj8AAAAZg"]
[Tue Apr 21 13:56:40.348589 2026] [:error] [pid 4823:tid 4853] [client 18.144.168.7:51682] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/site/.env"] [unique_id "aecRmPc8mke3PfHqsxFj8wAAAYA"]
[Tue Apr 21 13:56:41.004866 2026] [:error] [pid 5377:tid 5402] [client 18.144.168.7:51706] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "aecRmbBKychFlrHBdvumTQAAAdA"]
[Tue Apr 21 13:56:41.666921 2026] [:error] [pid 4823:tid 4872] [client 18.144.168.7:51724] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "aecRmfc8mke3PfHqsxFj-wAAAZM"]
[Tue Apr 21 13:56:42.341650 2026] [:error] [pid 4823:tid 4854] [client 18.144.168.7:51752] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "aecRmvc8mke3PfHqsxFj_QAAAYE"]
[Tue Apr 21 13:56:43.007165 2026] [:error] [pid 4777:tid 4807] [client 18.144.168.7:36580] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/server/.env"] [unique_id "aecRm6xXur6bykKyLZRhaAAAARM"]
[Tue Apr 21 15:37:36.952664 2026] [:error] [pid 53978:tid 53999] [client 213.35.109.170:60839] [client 213.35.109.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aecpQJ1ivsR4hcOSQbaxhAAAApM"]
[Tue Apr 21 15:37:37.151511 2026] [:error] [pid 54080:tid 54094] [client 213.35.109.170:49287] [client 213.35.109.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aecpQYzEbQHHxtmWbaZUKQAAAsw"]
[Tue Apr 21 15:42:54.895267 2026] [:error] [pid 35321:tid 35391] [client 54.232.141.252:52476] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aecqfjeHLhVUuu8cVXy5EAAAAEc"]
[Tue Apr 21 15:42:56.733838 2026] [:error] [pid 53832:tid 53852] [client 54.232.141.252:52500] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aecqgNzkuxsE_OhM9UIhTQAAAlE"]
[Tue Apr 21 15:42:58.199055 2026] [:error] [pid 54080:tid 54098] [client 54.232.141.252:52516] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.local"] [unique_id "aecqgozEbQHHxtmWbaZb0wAAAtA"]
[Tue Apr 21 15:42:59.655142 2026] [:error] [pid 53731:tid 53746] [client 54.232.141.252:52538] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.production"] [unique_id "aecqg12I9THUR-bRVGzgcwAAAgs"]
[Tue Apr 21 15:43:01.114692 2026] [:error] [pid 35321:tid 35388] [client 54.232.141.252:52568] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.staging"] [unique_id "aecqhTeHLhVUuu8cVXy5OgAAAEQ"]
[Tue Apr 21 15:43:02.578622 2026] [:error] [pid 54080:tid 54085] [client 54.232.141.252:52604] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.development"] [unique_id "aecqhozEbQHHxtmWbaZb6AAAAsM"]
[Tue Apr 21 15:43:04.041019 2026] [:error] [pid 35321:tid 35390] [client 54.232.141.252:51838] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.remote"] [unique_id "aecqiDeHLhVUuu8cVXy5UwAAAEY"]
[Tue Apr 21 15:43:05.506628 2026] [:error] [pid 53731:tid 53744] [client 54.232.141.252:51876] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.bak"] [unique_id "aecqiV2I9THUR-bRVGzgfgAAAgk"]
[Tue Apr 21 15:43:06.993643 2026] [:error] [pid 35321:tid 35404] [client 54.232.141.252:51896] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.backup"] [unique_id "aecqijeHLhVUuu8cVXy5ZwAAAFQ"]
[Tue Apr 21 15:43:08.446457 2026] [:error] [pid 35321:tid 35385] [client 54.232.141.252:51920] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.save"] [unique_id "aecqjDeHLhVUuu8cVXy5fAAAAEE"]
[Tue Apr 21 15:43:09.924159 2026] [:error] [pid 35321:tid 35403] [client 54.232.141.252:51948] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.old"] [unique_id "aecqjTeHLhVUuu8cVXy5kgAAAFM"]
[Tue Apr 21 15:43:11.388138 2026] [:error] [pid 53832:tid 53840] [client 54.232.141.252:51982] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.sample"] [unique_id "aecqj9zkuxsE_OhM9UIhmwAAAkU"]
[Tue Apr 21 15:43:12.847473 2026] [:error] [pid 4823:tid 4877] [client 54.232.141.252:52006] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.example"] [unique_id "aecqkPc8mke3PfHqsxHD0AAAAZg"]
[Tue Apr 21 15:43:14.311402 2026] [:error] [pid 35321:tid 35401] [client 54.232.141.252:46492] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.dev"] [unique_id "aecqkjeHLhVUuu8cVXy5sAAAAFE"]
[Tue Apr 21 15:43:15.776608 2026] [:error] [pid 53731:tid 53760] [client 54.232.141.252:46532] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.prod"] [unique_id "aecqk12I9THUR-bRVGzgkAAAAhg"]
[Tue Apr 21 15:43:17.233369 2026] [:error] [pid 35321:tid 35394] [client 54.232.141.252:46570] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.stage"] [unique_id "aecqlTeHLhVUuu8cVXy5yAAAAEo"]
[Tue Apr 21 15:43:18.695368 2026] [:error] [pid 54080:tid 54101] [client 54.232.141.252:46584] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.ci"] [unique_id "aecqlozEbQHHxtmWbaZcSAAAAtM"]
[Tue Apr 21 15:43:20.159192 2026] [:error] [pid 4823:tid 4867] [client 54.232.141.252:46602] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.docker"] [unique_id "aecqmPc8mke3PfHqsxHD-QAAAY4"]
[Tue Apr 21 15:43:21.618817 2026] [:error] [pid 4823:tid 4872] [client 54.232.141.252:46628] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.live"] [unique_id "aecqmfc8mke3PfHqsxHEBQAAAZM"]
[Tue Apr 21 15:43:23.079872 2026] [:error] [pid 53832:tid 53852] [client 54.232.141.252:46656] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.preprod"] [unique_id "aecqm9zkuxsE_OhM9UIh5wAAAlE"]
[Tue Apr 21 15:43:24.548637 2026] [:error] [pid 35321:tid 35388] [client 54.232.141.252:41264] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.uat"] [unique_id "aecqnDeHLhVUuu8cVXy59gAAAEQ"]
[Tue Apr 21 15:43:26.009063 2026] [:error] [pid 35320:tid 35339] [client 54.232.141.252:41288] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.dist"] [unique_id "aecqnoJW6fdXWO6agMElywAAAAk"]
[Tue Apr 21 15:43:27.462688 2026] [:error] [pid 53832:tid 53835] [client 54.232.141.252:41314] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env.swp"] [unique_id "aecqn9zkuxsE_OhM9UIiEQAAAkA"]
[Tue Apr 21 15:43:28.916820 2026] [:error] [pid 53832:tid 53842] [client 54.232.141.252:41346] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env~"] [unique_id "aecqoNzkuxsE_OhM9UIiKgAAAkc"]
[Tue Apr 21 15:43:30.378997 2026] [:error] [pid 53832:tid 53842] [client 54.232.141.252:41378] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/app/.env"] [unique_id "aecqotzkuxsE_OhM9UIiOwAAAkc"]
[Tue Apr 21 15:43:31.842774 2026] [:error] [pid 4823:tid 4873] [client 54.232.141.252:41414] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/apps/.env"] [unique_id "aecqo_c8mke3PfHqsxHESgAAAZQ"]
[Tue Apr 21 15:43:33.305869 2026] [:error] [pid 4823:tid 4859] [client 54.232.141.252:39940] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/api/.env"] [unique_id "aecqpfc8mke3PfHqsxHEZgAAAYY"]
[Tue Apr 21 16:41:08.761581 2026] [:error] [pid 54080:tid 54089] [client 170.64.234.177:55542] [client 170.64.234.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.234.177, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aec4JIzEbQHHxtmWbaZ4qQAAAsc"]
[Tue Apr 21 16:41:08.776010 2026] [proxy_fcgi:error] [pid 54080:tid 54089] [client 170.64.234.177:55542] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 17:53:30.432192 2026] [:error] [pid 35320:tid 35353] [client 43.153.12.58:48630] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aedJGoJW6fdXWO6agMFh4gAAABc"]
[Tue Apr 21 19:23:39.289611 2026] [:error] [pid 35321:tid 35388] [client 49.51.243.156:40670] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aedeOzeHLhVUuu8cVXxVEAAAAEQ"]
[Tue Apr 21 19:27:20.175521 2026] [:error] [pid 35320:tid 35349] [client 157.245.33.4:58890] [client 157.245.33.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.33.4, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aedfGIJW6fdXWO6agMGTpwAAABM"]
[Tue Apr 21 19:27:20.179550 2026] [proxy_fcgi:error] [pid 35320:tid 35349] [client 157.245.33.4:58890] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:47:51.202317 2026] [:error] [pid 35320:tid 35339] [client 49.233.45.47:32914] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aedx94JW6fdXWO6agMG81QAAAAk"]
[Tue Apr 21 21:02:25.567617 2026] [:error] [pid 4823:tid 4867] [client 176.28.175.100:8268] [client 176.28.175.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.28.175.100, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aed1Yfc8mke3PfHqsxH_vwAAAY4"]
[Tue Apr 21 21:02:25.582143 2026] [proxy_fcgi:error] [pid 4823:tid 4867] [client 176.28.175.100:8268] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 23:50:36.929384 2026] [:error] [pid 54080:tid 54100] [client 43.166.136.153:33438] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeeczIzEbQHHxtmWbabmOQAAAtI"]
[Wed Apr 22 01:11:11.202289 2026] [:error] [pid 35320:tid 35335] [client 43.130.106.18:51530] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeevr4JW6fdXWO6agMFo7AAAAAU"]
[Wed Apr 22 01:29:41.217589 2026] [proxy_fcgi:error] [pid 53731:tid 53759] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:41.474419 2026] [proxy_fcgi:error] [pid 53731:tid 53758] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:41.728284 2026] [proxy_fcgi:error] [pid 53731:tid 53740] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:43.516908 2026] [proxy_fcgi:error] [pid 53731:tid 53748] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:43.775078 2026] [proxy_fcgi:error] [pid 53731:tid 53742] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:44.031751 2026] [proxy_fcgi:error] [pid 53731:tid 53754] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:44.287486 2026] [proxy_fcgi:error] [pid 53731:tid 53752] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:44.543684 2026] [proxy_fcgi:error] [pid 53731:tid 53737] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:44.804454 2026] [proxy_fcgi:error] [pid 53731:tid 53736] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:45.127784 2026] [proxy_fcgi:error] [pid 53731:tid 53747] [client 20.234.3.108:11357] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:29:45.417561 2026] [:error] [pid 53731:tid 53741] [client 20.234.3.108:11357] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aee0CV2I9THUR-bRVGzUEwAAAgY"]
[Wed Apr 22 01:29:46.852870 2026] [:error] [pid 35320:tid 35340] [client 20.234.3.108:11271] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aee0CoJW6fdXWO6agMF3-wAAAAo"]
[Wed Apr 22 01:29:47.698127 2026] [:error] [pid 35320:tid 35349] [client 20.234.3.108:11272] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aee0C4JW6fdXWO6agMF3_wAAABM"]
[Wed Apr 22 01:29:48.383586 2026] [:error] [pid 4823:tid 4875] [client 20.234.3.108:11369] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/nwflm.php"] [unique_id "aee0DPc8mke3PfHqsxEjsQAAAZY"]
[Wed Apr 22 01:29:48.991337 2026] [:error] [pid 35320:tid 35331] [client 20.234.3.108:11384] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aee0DIJW6fdXWO6agMF4BQAAAAE"]
[Wed Apr 22 01:29:49.578649 2026] [:error] [pid 54080:tid 54087] [client 20.234.3.108:11337] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aee0DYzEbQHHxtmWbab81gAAAsU"]
[Wed Apr 22 01:29:50.202895 2026] [:error] [pid 35320:tid 35342] [client 20.234.3.108:11370] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aee0DoJW6fdXWO6agMF4DgAAAAw"]
[Wed Apr 22 01:29:50.844154 2026] [:error] [pid 35320:tid 35345] [client 20.234.3.108:11279] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aee0DoJW6fdXWO6agMF4FQAAAA8"]
[Wed Apr 22 01:29:51.514560 2026] [:error] [pid 35320:tid 35350] [client 20.234.3.108:11341] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aee0D4JW6fdXWO6agMF4GQAAABQ"]
[Wed Apr 22 01:29:52.203303 2026] [:error] [pid 35320:tid 35343] [client 20.234.3.108:11334] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aee0EIJW6fdXWO6agMF4HgAAAA0"]
[Wed Apr 22 01:29:52.890749 2026] [:error] [pid 53832:tid 53852] [client 20.234.3.108:11359] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aee0ENzkuxsE_OhM9UKbWwAAAlE"]
[Wed Apr 22 01:29:53.496823 2026] [:error] [pid 35321:tid 35400] [client 20.234.3.108:11345] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aee0ETeHLhVUuu8cVXxOuQAAAFA"]
[Wed Apr 22 01:29:54.155624 2026] [:error] [pid 35321:tid 35404] [client 20.234.3.108:11374] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aee0EjeHLhVUuu8cVXxOuwAAAFQ"]
[Wed Apr 22 01:29:54.732131 2026] [:error] [pid 35321:tid 35395] [client 20.234.3.108:11288] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aee0EjeHLhVUuu8cVXxOvQAAAEs"]
[Wed Apr 22 01:29:55.700748 2026] [:error] [pid 54080:tid 54099] [client 20.234.3.108:11353] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aee0E4zEbQHHxtmWbab84AAAAtE"]
[Wed Apr 22 01:29:56.803249 2026] [:error] [pid 53731:tid 53758] [client 20.234.3.108:1995] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aee0FF2I9THUR-bRVGzUJQAAAhY"]
[Wed Apr 22 01:29:57.441778 2026] [:error] [pid 53731:tid 53760] [client 20.234.3.108:11286] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aee0FV2I9THUR-bRVGzUKAAAAhg"]
[Wed Apr 22 01:29:58.141434 2026] [:error] [pid 53978:tid 53989] [client 20.234.3.108:11386] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aee0Fp1ivsR4hcOSQbZzrwAAAok"]
[Wed Apr 22 01:29:59.041917 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:11332] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aee0FzeHLhVUuu8cVXxOwwAAAEw"]
[Wed Apr 22 01:29:59.561201 2026] [:error] [pid 53731:tid 53757] [client 20.234.3.108:11280] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "aee0F12I9THUR-bRVGzULwAAAhU"]
[Wed Apr 22 01:30:00.168295 2026] [:error] [pid 4823:tid 4862] [client 20.234.3.108:11350] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aee0GPc8mke3PfHqsxEjtAAAAYk"]
[Wed Apr 22 01:30:00.726651 2026] [:error] [pid 53978:tid 53981] [client 20.234.3.108:11358] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aee0GJ1ivsR4hcOSQbZzsgAAAoE"]
[Wed Apr 22 01:30:01.305355 2026] [:error] [pid 35321:tid 35404] [client 20.234.3.108:11360] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aee0GTeHLhVUuu8cVXxOywAAAFQ"]
[Wed Apr 22 01:30:02.005430 2026] [:error] [pid 35321:tid 35392] [client 20.234.3.108:11342] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aee0GjeHLhVUuu8cVXxOzQAAAEg"]
[Wed Apr 22 01:30:02.597810 2026] [:error] [pid 35320:tid 35354] [client 20.234.3.108:11390] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aee0GoJW6fdXWO6agMF4KQAAABg"]
[Wed Apr 22 01:30:03.186087 2026] [:error] [pid 35321:tid 35401] [client 20.234.3.108:11349] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aee0GzeHLhVUuu8cVXxO0QAAAFE"]
[Wed Apr 22 01:30:03.733389 2026] [:error] [pid 35320:tid 35338] [client 20.234.3.108:11391] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aee0G4JW6fdXWO6agMF4LQAAAAg"]
[Wed Apr 22 01:30:04.320591 2026] [:error] [pid 35320:tid 35336] [client 20.234.3.108:11377] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "aee0HIJW6fdXWO6agMF4MAAAAAY"]
[Wed Apr 22 01:30:04.991513 2026] [:error] [pid 53978:tid 54003] [client 20.234.3.108:11363] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "aee0HJ1ivsR4hcOSQbZzuQAAApc"]
[Wed Apr 22 01:30:05.710415 2026] [:error] [pid 35320:tid 35352] [client 20.234.3.108:11366] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "aee0HYJW6fdXWO6agMF4MgAAABY"]
[Wed Apr 22 01:30:06.229603 2026] [:error] [pid 53832:tid 53835] [client 20.234.3.108:11267] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "aee0HtzkuxsE_OhM9UKbaAAAAkA"]
[Wed Apr 22 01:30:06.839018 2026] [:error] [pid 4777:tid 4796] [client 20.234.3.108:11365] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/water.php"] [unique_id "aee0HqxXur6bykKyLZTK-AAAAQg"]
[Wed Apr 22 01:30:07.489168 2026] [:error] [pid 53832:tid 53847] [client 20.234.3.108:11273] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "aee0H9zkuxsE_OhM9UKbbQAAAkw"]
[Wed Apr 22 01:30:08.016448 2026] [:error] [pid 53978:tid 53996] [client 20.234.3.108:11347] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "aee0IJ1ivsR4hcOSQbZzwAAAApA"]
[Wed Apr 22 01:30:08.633533 2026] [:error] [pid 35321:tid 35398] [client 20.234.3.108:11298] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "aee0IDeHLhVUuu8cVXxO1QAAAE4"]
[Wed Apr 22 01:30:09.164312 2026] [:error] [pid 54080:tid 54090] [client 20.234.3.108:11281] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "aee0IYzEbQHHxtmWbab89AAAAsg"]
[Wed Apr 22 01:30:09.719758 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:11346] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aee0ITeHLhVUuu8cVXxO4gAAAEw"]
[Wed Apr 22 01:30:10.332848 2026] [:error] [pid 53978:tid 53986] [client 20.234.3.108:11352] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aee0Ip1ivsR4hcOSQbZzywAAAoY"]
[Wed Apr 22 01:30:10.985212 2026] [:error] [pid 53731:tid 53755] [client 20.234.3.108:11387] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aee0Il2I9THUR-bRVGzURAAAAhM"]
[Wed Apr 22 01:30:11.563563 2026] [:error] [pid 35321:tid 35406] [client 20.234.3.108:11292] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "aee0IzeHLhVUuu8cVXxO-wAAAFY"]
[Wed Apr 22 01:30:12.168110 2026] [:error] [pid 35320:tid 35340] [client 20.234.3.108:11361] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "aee0JIJW6fdXWO6agMF4PwAAAAo"]
[Wed Apr 22 01:30:12.820605 2026] [:error] [pid 35320:tid 35354] [client 20.234.3.108:11283] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "aee0JIJW6fdXWO6agMF4RQAAABg"]
[Wed Apr 22 01:30:13.608991 2026] [:error] [pid 35321:tid 35390] [client 20.234.3.108:11380] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "aee0JTeHLhVUuu8cVXxPAQAAAEY"]
[Wed Apr 22 01:30:14.384543 2026] [:error] [pid 35321:tid 35394] [client 20.234.3.108:11268] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "aee0JjeHLhVUuu8cVXxPDAAAAEo"]
[Wed Apr 22 01:30:15.599882 2026] [:error] [pid 35320:tid 35331] [client 20.234.3.108:11269] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aee0J4JW6fdXWO6agMF4UQAAAAE"]
[Wed Apr 22 01:30:16.463516 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:1988] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aee0KIJW6fdXWO6agMF4VgAAAAQ"]
[Wed Apr 22 01:30:17.341113 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:11367] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aee0KYJW6fdXWO6agMF4YQAAAAU"]
[Wed Apr 22 01:30:18.033630 2026] [:error] [pid 35320:tid 35345] [client 20.234.3.108:11340] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "aee0KoJW6fdXWO6agMF4ZgAAAA8"]
[Wed Apr 22 01:30:18.744087 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:11327] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aee0KoJW6fdXWO6agMF4aAAAAAU"]
[Wed Apr 22 01:30:19.358183 2026] [:error] [pid 35321:tid 35408] [client 20.234.3.108:11294] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aee0KzeHLhVUuu8cVXxPFQAAAFg"]
[Wed Apr 22 01:30:19.960696 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:11334] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aee0K4JW6fdXWO6agMF4cQAAAAQ"]
[Wed Apr 22 01:30:20.602018 2026] [:error] [pid 4823:tid 4853] [client 20.234.3.108:11383] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/p.php"] [unique_id "aee0LPc8mke3PfHqsxEjtgAAAYA"]
[Wed Apr 22 01:30:21.252785 2026] [:error] [pid 35415:tid 35446] [client 20.234.3.108:11375] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "aee0LUiqDinI4_22zziOLwAAANM"]
[Wed Apr 22 01:30:21.868227 2026] [:error] [pid 35320:tid 35344] [client 20.234.3.108:11385] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "aee0LYJW6fdXWO6agMF4egAAAA4"]
[Wed Apr 22 01:30:22.493304 2026] [:error] [pid 53978:tid 53980] [client 20.234.3.108:11305] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "aee0Lp1ivsR4hcOSQbZz3QAAAoA"]
[Wed Apr 22 01:30:23.187525 2026] [:error] [pid 35415:tid 35445] [client 20.234.3.108:11321] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/oij98gy.php"] [unique_id "aee0L0iqDinI4_22zziOMgAAANI"]
[Wed Apr 22 01:30:23.739961 2026] [:error] [pid 35415:tid 35448] [client 20.234.3.108:1996] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aee0L0iqDinI4_22zziONAAAANU"]
[Wed Apr 22 01:30:24.387118 2026] [:error] [pid 53731:tid 53741] [client 20.234.3.108:11330] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aee0MF2I9THUR-bRVGzUSwAAAgY"]
[Wed Apr 22 01:30:25.159753 2026] [:error] [pid 54080:tid 54102] [client 20.234.3.108:11338] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aee0MYzEbQHHxtmWbab9BwAAAtQ"]
[Wed Apr 22 01:30:25.810668 2026] [:error] [pid 35321:tid 35392] [client 20.234.3.108:1997] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aee0MTeHLhVUuu8cVXxPFwAAAEg"]
[Wed Apr 22 01:30:26.620128 2026] [:error] [pid 35320:tid 35338] [client 20.234.3.108:11307] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "aee0MoJW6fdXWO6agMF4ggAAAAg"]
[Wed Apr 22 01:30:27.368061 2026] [:error] [pid 35320:tid 35350] [client 20.234.3.108:1990] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "aee0M4JW6fdXWO6agMF4hwAAABQ"]
[Wed Apr 22 01:30:28.438196 2026] [:error] [pid 53978:tid 53982] [client 20.234.3.108:11274] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "aee0NJ1ivsR4hcOSQbZz4gAAAoI"]
[Wed Apr 22 01:30:30.108089 2026] [:error] [pid 4823:tid 4873] [client 20.234.3.108:11325] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/turkshell.php"] [unique_id "aee0Nvc8mke3PfHqsxEjvgAAAZQ"]
[Wed Apr 22 01:30:31.041101 2026] [:error] [pid 4823:tid 4868] [client 20.234.3.108:2009] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aee0N_c8mke3PfHqsxEjvwAAAY8"]
[Wed Apr 22 01:30:31.586484 2026] [:error] [pid 4823:tid 4874] [client 20.234.3.108:11295] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aee0N_c8mke3PfHqsxEjwgAAAZU"]
[Wed Apr 22 01:30:32.357847 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:11323] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aee0OIJW6fdXWO6agMF4lAAAAAQ"]
[Wed Apr 22 01:30:32.975213 2026] [:error] [pid 35320:tid 35350] [client 20.234.3.108:1954] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aee0OIJW6fdXWO6agMF4lwAAABQ"]
[Wed Apr 22 01:30:33.640380 2026] [:error] [pid 54080:tid 54085] [client 20.234.3.108:11284] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aee0OYzEbQHHxtmWbab9CgAAAsM"]
[Wed Apr 22 01:30:34.332246 2026] [:error] [pid 35320:tid 35336] [client 20.234.3.108:11388] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aee0OoJW6fdXWO6agMF4mwAAAAY"]
[Wed Apr 22 01:30:35.143006 2026] [:error] [pid 35321:tid 35407] [client 20.234.3.108:11290] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aee0OzeHLhVUuu8cVXxPGAAAAFc"]
[Wed Apr 22 01:30:35.903301 2026] [:error] [pid 35321:tid 35395] [client 20.234.3.108:11348] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/seo.php"] [unique_id "aee0OzeHLhVUuu8cVXxPGQAAAEs"]
[Wed Apr 22 01:30:36.488677 2026] [:error] [pid 35321:tid 35398] [client 20.234.3.108:11333] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aee0PDeHLhVUuu8cVXxPGgAAAE4"]
[Wed Apr 22 01:30:37.236865 2026] [:error] [pid 35320:tid 35330] [client 20.234.3.108:11304] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aee0PYJW6fdXWO6agMF4sAAAAAA"]
[Wed Apr 22 01:30:37.959823 2026] [:error] [pid 35320:tid 35351] [client 20.234.3.108:11326] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aee0PYJW6fdXWO6agMF4sQAAABU"]
[Wed Apr 22 01:30:38.505868 2026] [:error] [pid 35320:tid 35340] [client 20.234.3.108:11277] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aee0PoJW6fdXWO6agMF4tgAAAAo"]
[Wed Apr 22 01:30:39.064381 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:1987] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aee0P4JW6fdXWO6agMF4uQAAAAU"]
[Wed Apr 22 01:30:39.609983 2026] [:error] [pid 35320:tid 35353] [client 20.234.3.108:2020] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aee0P4JW6fdXWO6agMF4vQAAABc"]
[Wed Apr 22 01:30:40.204241 2026] [:error] [pid 4777:tid 4804] [client 20.234.3.108:11331] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aee0QKxXur6bykKyLZTLEgAAARA"]
[Wed Apr 22 01:30:40.773050 2026] [:error] [pid 35321:tid 35387] [client 20.234.3.108:11302] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aee0QDeHLhVUuu8cVXxPIgAAAEM"]
[Wed Apr 22 01:30:41.310671 2026] [:error] [pid 35321:tid 35406] [client 20.234.3.108:11264] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aee0QTeHLhVUuu8cVXxPJAAAAFY"]
[Wed Apr 22 01:30:41.907300 2026] [:error] [pid 35320:tid 35330] [client 20.234.3.108:11309] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aee0QYJW6fdXWO6agMF4xgAAAAA"]
[Wed Apr 22 01:30:42.521784 2026] [:error] [pid 53731:tid 53745] [client 20.234.3.108:11351] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aee0Ql2I9THUR-bRVGzUXAAAAgo"]
[Wed Apr 22 01:30:43.128437 2026] [:error] [pid 35321:tid 35393] [client 20.234.3.108:11381] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aee0QzeHLhVUuu8cVXxPJwAAAEk"]
[Wed Apr 22 01:30:43.723225 2026] [:error] [pid 54080:tid 54100] [client 20.234.3.108:11389] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aee0Q4zEbQHHxtmWbab9EAAAAtI"]
[Wed Apr 22 01:30:44.231153 2026] [:error] [pid 35321:tid 35389] [client 20.234.3.108:11301] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aee0RDeHLhVUuu8cVXxPKQAAAEU"]
[Wed Apr 22 01:30:44.849856 2026] [:error] [pid 35321:tid 35395] [client 20.234.3.108:11371] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aee0RDeHLhVUuu8cVXxPLgAAAEs"]
[Wed Apr 22 01:30:45.523078 2026] [proxy_fcgi:error] [pid 54080:tid 54091] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:45.852938 2026] [proxy_fcgi:error] [pid 54080:tid 54096] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:46.216387 2026] [proxy_fcgi:error] [pid 54080:tid 54093] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:46.491384 2026] [proxy_fcgi:error] [pid 54080:tid 54097] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:46.777607 2026] [proxy_fcgi:error] [pid 54080:tid 54089] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:47.061009 2026] [proxy_fcgi:error] [pid 54080:tid 54082] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:47.339930 2026] [proxy_fcgi:error] [pid 54080:tid 54088] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:47.673065 2026] [proxy_fcgi:error] [pid 54080:tid 54090] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:47.957889 2026] [proxy_fcgi:error] [pid 54080:tid 54102] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:48.228515 2026] [proxy_fcgi:error] [pid 54080:tid 54092] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:48.517101 2026] [proxy_fcgi:error] [pid 54080:tid 54105] [client 20.234.3.108:11355] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:30:48.791450 2026] [:error] [pid 54080:tid 54098] [client 20.234.3.108:11355] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aee0SIzEbQHHxtmWbab9IAAAAtA"]
[Wed Apr 22 01:30:49.342908 2026] [:error] [pid 53731:tid 53738] [client 20.234.3.108:2002] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aee0SV2I9THUR-bRVGzUYAAAAgM"]
[Wed Apr 22 01:30:50.055939 2026] [:error] [pid 53731:tid 53758] [client 20.234.3.108:11339] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aee0Sl2I9THUR-bRVGzUYgAAAhY"]
[Wed Apr 22 01:30:50.636005 2026] [:error] [pid 53731:tid 53748] [client 20.234.3.108:1963] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aee0Sl2I9THUR-bRVGzUZgAAAg0"]
[Wed Apr 22 01:30:51.276670 2026] [:error] [pid 54080:tid 54095] [client 20.234.3.108:1992] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aee0S4zEbQHHxtmWbab9IgAAAs0"]
[Wed Apr 22 01:30:51.892745 2026] [:error] [pid 54080:tid 54099] [client 20.234.3.108:11297] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aee0S4zEbQHHxtmWbab9IwAAAtE"]
[Wed Apr 22 01:30:52.503097 2026] [:error] [pid 35321:tid 35407] [client 20.234.3.108:11314] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aee0TDeHLhVUuu8cVXxPQQAAAFc"]
[Wed Apr 22 01:30:53.130228 2026] [:error] [pid 4823:tid 4858] [client 20.234.3.108:11306] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aee0Tfc8mke3PfHqsxEjxgAAAYU"]
[Wed Apr 22 01:30:53.690611 2026] [:error] [pid 35322:tid 35380] [client 20.234.3.108:11300] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aee0TaPoAfV40BTfVKzv5AAAAJc"]
[Wed Apr 22 01:30:54.279666 2026] [:error] [pid 53832:tid 53853] [client 20.234.3.108:1999] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aee0TtzkuxsE_OhM9UKboQAAAlI"]
[Wed Apr 22 01:30:54.847737 2026] [:error] [pid 53731:tid 53760] [client 20.234.3.108:2032] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aee0Tl2I9THUR-bRVGzUcwAAAhg"]
[Wed Apr 22 01:30:55.498957 2026] [:error] [pid 35320:tid 35337] [client 20.234.3.108:11335] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp1.php"] [unique_id "aee0T4JW6fdXWO6agMF44AAAAAc"]
[Wed Apr 22 01:30:56.041058 2026] [:error] [pid 35320:tid 35332] [client 20.234.3.108:11382] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aee0UIJW6fdXWO6agMF45AAAAAI"]
[Wed Apr 22 01:30:56.592336 2026] [:error] [pid 35321:tid 35401] [client 20.234.3.108:11303] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aee0UDeHLhVUuu8cVXxPRgAAAFE"]
[Wed Apr 22 01:30:57.239580 2026] [:error] [pid 35321:tid 35405] [client 20.234.3.108:11379] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aee0UTeHLhVUuu8cVXxPRwAAAFU"]
[Wed Apr 22 01:30:57.864786 2026] [:error] [pid 35321:tid 35394] [client 20.234.3.108:2031] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aligk.php"] [unique_id "aee0UTeHLhVUuu8cVXxPSAAAAEo"]
[Wed Apr 22 01:30:58.466559 2026] [:error] [pid 35322:tid 35369] [client 20.234.3.108:11308] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aee0UqPoAfV40BTfVKzv5QAAAIw"]
[Wed Apr 22 01:30:59.026357 2026] [:error] [pid 4823:tid 4867] [client 20.234.3.108:11276] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aee0U_c8mke3PfHqsxEjywAAAY4"]
[Wed Apr 22 01:30:59.595405 2026] [:error] [pid 35320:tid 35336] [client 20.234.3.108:11287] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aee0U4JW6fdXWO6agMF49QAAAAY"]
[Wed Apr 22 01:31:00.157730 2026] [:error] [pid 4823:tid 4869] [client 20.234.3.108:2012] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byrgo.php"] [unique_id "aee0VPc8mke3PfHqsxEjzgAAAZA"]
[Wed Apr 22 01:31:00.825004 2026] [:error] [pid 4823:tid 4860] [client 20.234.3.108:11368] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aee0VPc8mke3PfHqsxEjzwAAAYc"]
[Wed Apr 22 01:31:01.649281 2026] [:error] [pid 35320:tid 35348] [client 20.234.3.108:2040] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aee0VYJW6fdXWO6agMF4-AAAABI"]
[Wed Apr 22 01:31:02.391462 2026] [:error] [pid 35415:tid 35435] [client 20.234.3.108:11310] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aee0VkiqDinI4_22zziOPAAAAMg"]
[Wed Apr 22 01:31:02.988796 2026] [:error] [pid 53832:tid 53847] [client 20.234.3.108:2044] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwpg.php"] [unique_id "aee0VtzkuxsE_OhM9UKbrAAAAkw"]
[Wed Apr 22 01:31:03.721322 2026] [:error] [pid 35320:tid 35351] [client 20.234.3.108:2035] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aee0V4JW6fdXWO6agMF4_gAAABU"]
[Wed Apr 22 01:31:04.431523 2026] [:error] [pid 35320:tid 35346] [client 20.234.3.108:11318] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aee0WIJW6fdXWO6agMF5AwAAABA"]
[Wed Apr 22 01:31:05.160015 2026] [:error] [pid 35321:tid 35394] [client 20.234.3.108:1922] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aee0WTeHLhVUuu8cVXxPWQAAAEo"]
[Wed Apr 22 01:31:05.908468 2026] [:error] [pid 35321:tid 35393] [client 20.234.3.108:2010] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ass.php"] [unique_id "aee0WTeHLhVUuu8cVXxPWgAAAEk"]
[Wed Apr 22 01:31:06.645936 2026] [:error] [pid 53832:tid 53841] [client 20.234.3.108:2042] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aee0WtzkuxsE_OhM9UKbsAAAAkY"]
[Wed Apr 22 01:31:07.342511 2026] [:error] [pid 53731:tid 53754] [client 20.234.3.108:2018] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aee0W12I9THUR-bRVGzUegAAAhI"]
[Wed Apr 22 01:31:08.014355 2026] [:error] [pid 35322:tid 35358] [client 20.234.3.108:11266] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aee0XKPoAfV40BTfVKzv5wAAAIE"]
[Wed Apr 22 01:31:09.040862 2026] [:error] [pid 35415:tid 35437] [client 20.234.3.108:2007] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aee0XUiqDinI4_22zziOPwAAAMo"]
[Wed Apr 22 01:31:10.020078 2026] [:error] [pid 53978:tid 53990] [client 20.234.3.108:11270] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aee0Xp1ivsR4hcOSQbZ0BgAAAoo"]
[Wed Apr 22 01:31:10.630179 2026] [:error] [pid 53978:tid 54001] [client 20.234.3.108:2045] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aee0Xp1ivsR4hcOSQbZ0BwAAApU"]
[Wed Apr 22 01:31:11.486718 2026] [:error] [pid 35322:tid 35371] [client 20.234.3.108:1969] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aee0X6PoAfV40BTfVKzv6gAAAI4"]
[Wed Apr 22 01:31:12.361990 2026] [:error] [pid 4777:tid 4801] [client 20.234.3.108:11376] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no18.php"] [unique_id "aee0YKxXur6bykKyLZTLFQAAAQ0"]
[Wed Apr 22 01:31:13.402501 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:1950] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aee0YTeHLhVUuu8cVXxPYgAAAEw"]
[Wed Apr 22 01:31:14.036104 2026] [:error] [pid 35320:tid 35354] [client 20.234.3.108:11317] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aee0YoJW6fdXWO6agMF5IQAAABg"]
[Wed Apr 22 01:31:14.894976 2026] [:error] [pid 4823:tid 4875] [client 20.234.3.108:11282] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aee0Yvc8mke3PfHqsxEj1AAAAZY"]
[Wed Apr 22 01:31:15.858262 2026] [:error] [pid 4777:tid 4793] [client 20.234.3.108:1976] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fine.php"] [unique_id "aee0Y6xXur6bykKyLZTLFwAAAQU"]
[Wed Apr 22 01:31:16.680316 2026] [:error] [pid 4777:tid 4799] [client 20.234.3.108:2011] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "aee0ZKxXur6bykKyLZTLGAAAAQs"]
[Wed Apr 22 01:31:17.367327 2026] [:error] [pid 4777:tid 4810] [client 20.234.3.108:2027] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "aee0ZaxXur6bykKyLZTLGQAAARY"]
[Wed Apr 22 01:31:18.419839 2026] [:error] [pid 54080:tid 54087] [client 20.234.3.108:1998] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "aee0ZozEbQHHxtmWbab9KgAAAsU"]
[Wed Apr 22 01:31:19.151730 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:2015] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zample.php"] [unique_id "aee0Z4JW6fdXWO6agMF5LwAAAAU"]
[Wed Apr 22 01:31:19.997473 2026] [:error] [pid 53832:tid 53836] [client 20.234.3.108:11289] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aee0Z9zkuxsE_OhM9UKbuAAAAkE"]
[Wed Apr 22 01:31:21.133081 2026] [:error] [pid 35322:tid 35360] [client 20.234.3.108:2016] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aee0aaPoAfV40BTfVKzv8gAAAIM"]
[Wed Apr 22 01:31:21.990074 2026] [:error] [pid 35321:tid 35391] [client 20.234.3.108:11319] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aee0aTeHLhVUuu8cVXxPawAAAEc"]
[Wed Apr 22 01:31:23.265513 2026] [:error] [pid 4823:tid 4861] [client 20.234.3.108:1993] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aee0a_c8mke3PfHqsxEj1wAAAYg"]
[Wed Apr 22 01:31:24.171360 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:11372] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aee0bIJW6fdXWO6agMF5TQAAAAQ"]
[Wed Apr 22 01:31:24.839768 2026] [:error] [pid 35320:tid 35349] [client 20.234.3.108:2029] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aee0bIJW6fdXWO6agMF5UQAAABM"]
[Wed Apr 22 01:31:25.423697 2026] [:error] [pid 35320:tid 35333] [client 20.234.3.108:2019] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aee0bYJW6fdXWO6agMF5WAAAAAM"]
[Wed Apr 22 01:31:26.054996 2026] [:error] [pid 53832:tid 53850] [client 20.234.3.108:2041] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aee0btzkuxsE_OhM9UKbuwAAAk8"]
[Wed Apr 22 01:31:26.605053 2026] [:error] [pid 53832:tid 53840] [client 20.234.3.108:11296] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aee0btzkuxsE_OhM9UKbvAAAAkU"]
[Wed Apr 22 01:31:27.128363 2026] [:error] [pid 35321:tid 35400] [client 20.234.3.108:1946] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aee0bzeHLhVUuu8cVXxPcgAAAFA"]
[Wed Apr 22 01:31:27.809011 2026] [:error] [pid 4823:tid 4856] [client 20.234.3.108:2014] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aee0b_c8mke3PfHqsxEj2AAAAYM"]
[Wed Apr 22 01:31:28.997044 2026] [:error] [pid 35321:tid 35406] [client 20.234.3.108:1921] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aee0cDeHLhVUuu8cVXxPegAAAFY"]
[Wed Apr 22 01:31:29.879799 2026] [:error] [pid 53978:tid 53982] [client 20.234.3.108:1984] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aee0cZ1ivsR4hcOSQbZ0HgAAAoI"]
[Wed Apr 22 01:31:30.977178 2026] [:error] [pid 53978:tid 54004] [client 20.234.3.108:1991] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aee0cp1ivsR4hcOSQbZ0IQAAApg"]
[Wed Apr 22 01:31:32.326133 2026] [:error] [pid 53978:tid 54000] [client 20.234.3.108:11362] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aee0dJ1ivsR4hcOSQbZ0IgAAApQ"]
[Wed Apr 22 01:31:33.653737 2026] [:error] [pid 35320:tid 35344] [client 20.234.3.108:11291] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aee0dYJW6fdXWO6agMF5cwAAAA4"]
[Wed Apr 22 01:31:34.280416 2026] [:error] [pid 53731:tid 53748] [client 20.234.3.108:2046] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee0dl2I9THUR-bRVGzUkQAAAg0"]
[Wed Apr 22 01:31:35.449167 2026] [:error] [pid 35321:tid 35390] [client 20.234.3.108:11285] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee0dzeHLhVUuu8cVXxPfwAAAEY"]
[Wed Apr 22 01:31:36.404783 2026] [:error] [pid 35321:tid 35405] [client 20.234.3.108:1869] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee0eDeHLhVUuu8cVXxPgwAAAFU"]
[Wed Apr 22 01:31:37.397991 2026] [:error] [pid 35321:tid 35389] [client 20.234.3.108:11356] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee0eTeHLhVUuu8cVXxPiQAAAEU"]
[Wed Apr 22 01:31:38.382040 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:1863] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aee0ejeHLhVUuu8cVXxPjQAAAEw"]
[Wed Apr 22 01:31:39.072957 2026] [:error] [pid 35321:tid 35399] [client 20.234.3.108:2006] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aee0ezeHLhVUuu8cVXxPjwAAAE8"]
[Wed Apr 22 01:31:39.796455 2026] [:error] [pid 35320:tid 35342] [client 20.234.3.108:11275] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aee0e4JW6fdXWO6agMF5kwAAAAw"]
[Wed Apr 22 01:31:40.605584 2026] [:error] [pid 35320:tid 35338] [client 20.234.3.108:2043] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aee0fIJW6fdXWO6agMF5lQAAAAg"]
[Wed Apr 22 01:31:42.302788 2026] [:error] [pid 35321:tid 35405] [client 20.234.3.108:2003] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "aee0fjeHLhVUuu8cVXxPkwAAAFU"]
[Wed Apr 22 01:31:42.913301 2026] [:error] [pid 35321:tid 35389] [client 20.234.3.108:1873] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "aee0fjeHLhVUuu8cVXxPmAAAAEU"]
[Wed Apr 22 01:31:43.839430 2026] [:error] [pid 53731:tid 53744] [client 20.234.3.108:11278] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "aee0f12I9THUR-bRVGzUngAAAgk"]
[Wed Apr 22 01:31:44.591529 2026] [:error] [pid 53731:tid 53749] [client 20.234.3.108:11265] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sf.php"] [unique_id "aee0gF2I9THUR-bRVGzUnwAAAg4"]
[Wed Apr 22 01:31:45.782518 2026] [:error] [pid 35320:tid 35341] [client 20.234.3.108:1933] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aee0gYJW6fdXWO6agMF5qQAAAAs"]
[Wed Apr 22 01:31:46.764712 2026] [:error] [pid 53978:tid 53986] [client 20.234.3.108:1957] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aee0gp1ivsR4hcOSQbZ0QQAAAoY"]
[Wed Apr 22 01:31:47.349855 2026] [:error] [pid 54080:tid 54103] [client 20.234.3.108:11277] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aee0g4zEbQHHxtmWbab9OQAAAtU"]
[Wed Apr 22 01:31:48.118750 2026] [proxy_fcgi:error] [pid 53978:tid 53983] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:48.451623 2026] [proxy_fcgi:error] [pid 53978:tid 53994] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:48.710364 2026] [proxy_fcgi:error] [pid 53978:tid 53988] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:48.968727 2026] [proxy_fcgi:error] [pid 53978:tid 53984] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:49.242859 2026] [proxy_fcgi:error] [pid 53978:tid 53985] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:49.498720 2026] [proxy_fcgi:error] [pid 53978:tid 53992] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:50.012249 2026] [proxy_fcgi:error] [pid 53978:tid 54001] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:50.269366 2026] [proxy_fcgi:error] [pid 53978:tid 53980] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:50.882082 2026] [proxy_fcgi:error] [pid 53978:tid 53990] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:51.736309 2026] [proxy_fcgi:error] [pid 53978:tid 53982] [client 20.234.3.108:2038] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:31:52.313839 2026] [:error] [pid 53978:tid 53991] [client 20.234.3.108:2038] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aee0iJ1ivsR4hcOSQbZ0VwAAAos"]
[Wed Apr 22 01:31:53.346801 2026] [:error] [pid 35320:tid 35348] [client 20.234.3.108:11299] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aee0iYJW6fdXWO6agMF5xgAAABI"]
[Wed Apr 22 01:31:55.922009 2026] [:error] [pid 35321:tid 35391] [client 20.234.3.108:11293] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aee0izeHLhVUuu8cVXxPrwAAAEc"]
[Wed Apr 22 01:31:59.748112 2026] [:error] [pid 35320:tid 35344] [client 20.234.3.108:2037] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aee0j4JW6fdXWO6agMF53wAAAA4"]
[Wed Apr 22 01:32:02.722020 2026] [:error] [pid 53978:tid 53983] [client 20.234.3.108:11373] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aee0kp1ivsR4hcOSQbZ0YAAAAoM"]
[Wed Apr 22 01:32:05.092206 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:1913] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aee0lYJW6fdXWO6agMF57gAAAAU"]
[Wed Apr 22 01:32:06.934269 2026] [:error] [pid 35320:tid 35332] [client 20.234.3.108:1947] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aee0loJW6fdXWO6agMF59QAAAAI"]
[Wed Apr 22 01:32:08.178511 2026] [:error] [pid 54080:tid 54104] [client 20.234.3.108:1928] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "aee0mIzEbQHHxtmWbab9UAAAAtY"]
[Wed Apr 22 01:32:08.861826 2026] [:error] [pid 54080:tid 54106] [client 20.234.3.108:1942] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aee0mIzEbQHHxtmWbab9UQAAAtg"]
[Wed Apr 22 01:32:09.618052 2026] [:error] [pid 35320:tid 35348] [client 20.234.3.108:1982] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aee0mYJW6fdXWO6agMF6AwAAABI"]
[Wed Apr 22 01:32:10.425180 2026] [:error] [pid 35320:tid 35338] [client 20.234.3.108:11343] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aee0moJW6fdXWO6agMF6BgAAAAg"]
[Wed Apr 22 01:32:10.958959 2026] [:error] [pid 53832:tid 53837] [client 20.234.3.108:1938] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "aee0mtzkuxsE_OhM9UKbwQAAAkI"]
[Wed Apr 22 01:32:11.918945 2026] [:error] [pid 53731:tid 53735] [client 20.234.3.108:11312] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee0m12I9THUR-bRVGzUsQAAAgA"]
[Wed Apr 22 01:32:12.733714 2026] [:error] [pid 35320:tid 35340] [client 20.234.3.108:1940] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee0nIJW6fdXWO6agMF6DwAAAAo"]
[Wed Apr 22 01:32:13.904560 2026] [:error] [pid 35320:tid 35333] [client 20.234.3.108:1949] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee0nYJW6fdXWO6agMF6FQAAAAM"]
[Wed Apr 22 01:32:14.961548 2026] [:error] [pid 35320:tid 35343] [client 20.234.3.108:1943] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee0noJW6fdXWO6agMF6GgAAAA0"]
[Wed Apr 22 01:32:15.565390 2026] [:error] [pid 35320:tid 35353] [client 20.234.3.108:11316] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aee0n4JW6fdXWO6agMF6GwAAABc"]
[Wed Apr 22 01:32:16.226209 2026] [:error] [pid 53978:tid 53997] [client 20.234.3.108:11354] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aee0oJ1ivsR4hcOSQbZ0agAAApE"]
[Wed Apr 22 01:32:16.828459 2026] [:error] [pid 4823:tid 4876] [client 20.234.3.108:1983] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aee0oPc8mke3PfHqsxEj4QAAAZc"]
[Wed Apr 22 01:32:17.690620 2026] [:error] [pid 35321:tid 35387] [client 20.234.3.108:2023] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aee0oTeHLhVUuu8cVXxP4QAAAEM"]
[Wed Apr 22 01:32:18.439386 2026] [:error] [pid 35321:tid 35388] [client 20.234.3.108:1945] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aee0ojeHLhVUuu8cVXxP4wAAAEQ"]
[Wed Apr 22 01:32:19.031521 2026] [:error] [pid 35321:tid 35408] [client 20.234.3.108:2026] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aee0ozeHLhVUuu8cVXxP5gAAAFg"]
[Wed Apr 22 01:32:19.727800 2026] [:error] [pid 53731:tid 53741] [client 20.234.3.108:2025] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aee0o12I9THUR-bRVGzUuAAAAgY"]
[Wed Apr 22 01:32:20.609284 2026] [:error] [pid 35321:tid 35385] [client 20.234.3.108:2028] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bless4.php"] [unique_id "aee0pDeHLhVUuu8cVXxP6QAAAEE"]
[Wed Apr 22 01:32:21.253801 2026] [:error] [pid 35321:tid 35389] [client 20.234.3.108:2004] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aee0pTeHLhVUuu8cVXxP6gAAAEU"]
[Wed Apr 22 01:32:21.968350 2026] [:error] [pid 35320:tid 35343] [client 20.234.3.108:1961] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aee0pYJW6fdXWO6agMF6LQAAAA0"]
[Wed Apr 22 01:32:22.515502 2026] [:error] [pid 35321:tid 35404] [client 20.234.3.108:11344] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aee0pjeHLhVUuu8cVXxP7QAAAFQ"]
[Wed Apr 22 01:32:23.106897 2026] [:error] [pid 53731:tid 53752] [client 20.234.3.108:1973] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "aee0p12I9THUR-bRVGzUxwAAAhA"]
[Wed Apr 22 01:32:23.798325 2026] [:error] [pid 35321:tid 35390] [client 20.234.3.108:1993] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aee0pzeHLhVUuu8cVXxP7wAAAEY"]
[Wed Apr 22 01:32:24.352577 2026] [:error] [pid 35321:tid 35391] [client 20.234.3.108:1929] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aee0qDeHLhVUuu8cVXxP8QAAAEc"]
[Wed Apr 22 01:32:24.974863 2026] [:error] [pid 53978:tid 53987] [client 20.234.3.108:2021] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aee0qJ1ivsR4hcOSQbZ0cQAAAoc"]
[Wed Apr 22 01:32:25.775738 2026] [:error] [pid 35321:tid 35408] [client 20.234.3.108:1986] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xqq.php"] [unique_id "aee0qTeHLhVUuu8cVXxP9QAAAFg"]
[Wed Apr 22 01:32:26.691075 2026] [:error] [pid 35320:tid 35338] [client 20.234.3.108:1994] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aee0qoJW6fdXWO6agMF6PQAAAAg"]
[Wed Apr 22 01:32:27.211102 2026] [:error] [pid 53832:tid 53843] [client 20.234.3.108:1936] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aee0q9zkuxsE_OhM9UKbxgAAAkg"]
[Wed Apr 22 01:32:27.796737 2026] [:error] [pid 53978:tid 53999] [client 20.234.3.108:1934] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aee0q51ivsR4hcOSQbZ0dAAAApM"]
[Wed Apr 22 01:32:28.396880 2026] [:error] [pid 53731:tid 53759] [client 20.234.3.108:1925] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plss3.php"] [unique_id "aee0rF2I9THUR-bRVGzUzQAAAhc"]
[Wed Apr 22 01:32:28.987219 2026] [:error] [pid 35321:tid 35404] [client 20.234.3.108:2024] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aee0rDeHLhVUuu8cVXxP-wAAAFQ"]
[Wed Apr 22 01:32:29.737109 2026] [:error] [pid 53731:tid 53739] [client 20.234.3.108:1985] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aee0rV2I9THUR-bRVGzU0QAAAgQ"]
[Wed Apr 22 01:32:30.248247 2026] [:error] [pid 53731:tid 53740] [client 20.234.3.108:1859] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aee0rl2I9THUR-bRVGzU1AAAAgU"]
[Wed Apr 22 01:32:30.918560 2026] [:error] [pid 53731:tid 53753] [client 20.234.3.108:1884] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "aee0rl2I9THUR-bRVGzU1wAAAhE"]
[Wed Apr 22 01:32:31.469169 2026] [:error] [pid 53731:tid 53756] [client 20.234.3.108:1897] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aee0r12I9THUR-bRVGzU2QAAAhQ"]
[Wed Apr 22 01:32:32.137083 2026] [:error] [pid 35415:tid 35450] [client 20.234.3.108:1868] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aee0sEiqDinI4_22zziOSgAAANc"]
[Wed Apr 22 01:32:32.807803 2026] [:error] [pid 53978:tid 54004] [client 20.234.3.108:11320] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aee0sJ1ivsR4hcOSQbZ0dQAAApg"]
[Wed Apr 22 01:32:33.496614 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:1958] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aee0sYJW6fdXWO6agMF6UwAAAAQ"]
[Wed Apr 22 01:32:34.073639 2026] [:error] [pid 53978:tid 53984] [client 20.234.3.108:2001] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aee0sp1ivsR4hcOSQbZ0dwAAAoQ"]
[Wed Apr 22 01:32:35.067839 2026] [:error] [pid 53978:tid 53985] [client 20.234.3.108:1974] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aee0s51ivsR4hcOSQbZ0eAAAAoU"]
[Wed Apr 22 01:32:35.760620 2026] [:error] [pid 35321:tid 35386] [client 20.234.3.108:11378] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aee0szeHLhVUuu8cVXxQBgAAAEI"]
[Wed Apr 22 01:32:36.376960 2026] [:error] [pid 35321:tid 35403] [client 20.234.3.108:1978] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "aee0tDeHLhVUuu8cVXxQBwAAAFM"]
[Wed Apr 22 01:32:36.986248 2026] [:error] [pid 35322:tid 35375] [client 20.234.3.108:2013] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aee0tKPoAfV40BTfVKzv9wAAAJI"]
[Wed Apr 22 01:32:37.776369 2026] [:error] [pid 53731:tid 53738] [client 20.234.3.108:1931] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aee0tV2I9THUR-bRVGzU6QAAAgM"]
[Wed Apr 22 01:32:38.640661 2026] [:error] [pid 35321:tid 35407] [client 20.234.3.108:1966] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aee0tjeHLhVUuu8cVXxQCwAAAFc"]
[Wed Apr 22 01:32:39.257229 2026] [:error] [pid 35321:tid 35405] [client 20.234.3.108:1948] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aee0tzeHLhVUuu8cVXxQDgAAAFU"]
[Wed Apr 22 01:32:39.917217 2026] [:error] [pid 53731:tid 53741] [client 20.234.3.108:1962] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aee0t12I9THUR-bRVGzU7QAAAgY"]
[Wed Apr 22 01:32:40.525667 2026] [:error] [pid 35322:tid 35370] [client 20.234.3.108:1975] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aee0uKPoAfV40BTfVKzv-AAAAI0"]
[Wed Apr 22 01:32:41.094816 2026] [:error] [pid 53978:tid 53991] [client 20.234.3.108:2034] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aee0uZ1ivsR4hcOSQbZ0fwAAAos"]
[Wed Apr 22 01:32:41.811460 2026] [:error] [pid 53832:tid 53852] [client 20.234.3.108:1880] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "aee0udzkuxsE_OhM9UKb0QAAAlE"]
[Wed Apr 22 01:32:42.384471 2026] [:error] [pid 54080:tid 54102] [client 20.234.3.108:2039] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aee0uozEbQHHxtmWbab9WQAAAtQ"]
[Wed Apr 22 01:32:42.928162 2026] [:error] [pid 35321:tid 35401] [client 20.234.3.108:1941] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aee0ujeHLhVUuu8cVXxQEQAAAFE"]
[Wed Apr 22 01:32:43.442577 2026] [:error] [pid 35322:tid 35374] [client 20.234.3.108:1914] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aee0u6PoAfV40BTfVKzv_AAAAJE"]
[Wed Apr 22 01:32:44.019002 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:1867] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aee0vDeHLhVUuu8cVXxQEwAAAEw"]
[Wed Apr 22 01:32:44.812181 2026] [:error] [pid 35321:tid 35388] [client 20.234.3.108:1856] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aee0vDeHLhVUuu8cVXxQFgAAAEQ"]
[Wed Apr 22 01:32:45.530535 2026] [:error] [pid 35321:tid 35402] [client 20.234.3.108:2008] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aee0vTeHLhVUuu8cVXxQGAAAAFI"]
[Wed Apr 22 01:32:46.147857 2026] [:error] [pid 35321:tid 35392] [client 20.234.3.108:1923] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aee0vjeHLhVUuu8cVXxQGwAAAEg"]
[Wed Apr 22 01:32:47.160485 2026] [:error] [pid 54080:tid 54090] [client 20.234.3.108:2022] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "aee0v4zEbQHHxtmWbab9XgAAAsg"]
[Wed Apr 22 01:32:47.716542 2026] [:error] [pid 53978:tid 53995] [client 20.234.3.108:1901] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aee0v51ivsR4hcOSQbZ0iwAAAo8"]
[Wed Apr 22 01:32:48.394831 2026] [:error] [pid 4823:tid 4872] [client 20.234.3.108:1804] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aee0wPc8mke3PfHqsxEj5QAAAZM"]
[Wed Apr 22 01:32:49.163822 2026] [:error] [pid 53978:tid 53989] [client 20.234.3.108:1937] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aee0wZ1ivsR4hcOSQbZ0lQAAAok"]
[Wed Apr 22 01:32:49.824611 2026] [:error] [pid 53731:tid 53746] [client 20.234.3.108:1968] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aee0wV2I9THUR-bRVGzU9QAAAgs"]
[Wed Apr 22 01:32:50.368624 2026] [:error] [pid 53731:tid 53740] [client 20.234.3.108:2030] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aee0wl2I9THUR-bRVGzU9gAAAgU"]
[Wed Apr 22 01:32:50.937342 2026] [:error] [pid 35320:tid 35342] [client 20.234.3.108:1926] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aee0woJW6fdXWO6agMF6bAAAAAw"]
[Wed Apr 22 01:32:51.791968 2026] [proxy_fcgi:error] [pid 35320:tid 35346] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:52.066348 2026] [proxy_fcgi:error] [pid 35320:tid 35330] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:52.331895 2026] [proxy_fcgi:error] [pid 35320:tid 35334] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:52.588838 2026] [proxy_fcgi:error] [pid 35320:tid 35354] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:52.849896 2026] [proxy_fcgi:error] [pid 35320:tid 35333] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:53.109385 2026] [proxy_fcgi:error] [pid 35320:tid 35332] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:53.380803 2026] [proxy_fcgi:error] [pid 35320:tid 35341] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:53.894981 2026] [proxy_fcgi:error] [pid 35320:tid 35336] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:54.152646 2026] [proxy_fcgi:error] [pid 35320:tid 35346] [client 20.234.3.108:1967] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:32:54.427141 2026] [:error] [pid 35320:tid 35330] [client 20.234.3.108:1967] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aee0xoJW6fdXWO6agMF6gQAAAAA"]
[Wed Apr 22 01:32:54.947177 2026] [:error] [pid 35321:tid 35394] [client 20.234.3.108:11322] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aee0xjeHLhVUuu8cVXxQIgAAAEo"]
[Wed Apr 22 01:32:55.535608 2026] [:error] [pid 53731:tid 53744] [client 20.234.3.108:1908] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aee0x12I9THUR-bRVGzVAQAAAgk"]
[Wed Apr 22 01:32:56.141752 2026] [:error] [pid 53731:tid 53759] [client 20.234.3.108:2000] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aee0yF2I9THUR-bRVGzVAgAAAhc"]
[Wed Apr 22 01:32:56.873759 2026] [:error] [pid 35321:tid 35402] [client 20.234.3.108:1916] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aee0yDeHLhVUuu8cVXxQIwAAAFI"]
[Wed Apr 22 01:32:57.735599 2026] [:error] [pid 54080:tid 54082] [client 20.234.3.108:1860] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aee0yYzEbQHHxtmWbab9dgAAAsA"]
[Wed Apr 22 01:32:59.066888 2026] [:error] [pid 35321:tid 35400] [client 20.234.3.108:1920] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aee0yzeHLhVUuu8cVXxQKQAAAFA"]
[Wed Apr 22 01:33:00.343788 2026] [:error] [pid 35321:tid 35389] [client 20.234.3.108:1865] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-michan.php"] [unique_id "aee0zDeHLhVUuu8cVXxQLAAAAEU"]
[Wed Apr 22 01:33:01.262388 2026] [:error] [pid 53978:tid 53983] [client 20.234.3.108:1877] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aee0zZ1ivsR4hcOSQbZ0pQAAAoM"]
[Wed Apr 22 01:33:02.037700 2026] [:error] [pid 53832:tid 53852] [client 20.234.3.108:1970] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aee0ztzkuxsE_OhM9UKb3AAAAlE"]
[Wed Apr 22 01:33:02.815490 2026] [:error] [pid 35321:tid 35386] [client 20.234.3.108:2005] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aee0zjeHLhVUuu8cVXxQMQAAAEI"]
[Wed Apr 22 01:33:04.054871 2026] [:error] [pid 53978:tid 53994] [client 20.234.3.108:1932] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aee00J1ivsR4hcOSQbZ0qgAAAo4"]
[Wed Apr 22 01:33:05.338694 2026] [:error] [pid 35320:tid 35337] [client 20.234.3.108:1960] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aee00YJW6fdXWO6agMF6kQAAAAc"]
[Wed Apr 22 01:33:06.207945 2026] [:error] [pid 54080:tid 54083] [client 20.234.3.108:2017] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aee00ozEbQHHxtmWbab9fQAAAsE"]
[Wed Apr 22 01:33:06.754403 2026] [:error] [pid 4777:tid 4802] [client 20.234.3.108:11324] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aee00qxXur6bykKyLZTLKAAAAQ4"]
[Wed Apr 22 01:33:07.316794 2026] [:error] [pid 53832:tid 53837] [client 20.234.3.108:1972] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aee009zkuxsE_OhM9UKb3gAAAkI"]
[Wed Apr 22 01:33:07.867871 2026] [:error] [pid 53832:tid 53858] [client 20.234.3.108:1951] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aee009zkuxsE_OhM9UKb4QAAAlc"]
[Wed Apr 22 01:33:08.441785 2026] [:error] [pid 53832:tid 53842] [client 20.234.3.108:1831] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aee01NzkuxsE_OhM9UKb5AAAAkc"]
[Wed Apr 22 01:33:09.070269 2026] [:error] [pid 53832:tid 53847] [client 20.234.3.108:1965] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aee01dzkuxsE_OhM9UKb6AAAAkw"]
[Wed Apr 22 01:33:09.720457 2026] [:error] [pid 54080:tid 54100] [client 20.234.3.108:11374] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aee01YzEbQHHxtmWbab9gAAAAtI"]
[Wed Apr 22 01:33:10.244496 2026] [:error] [pid 54080:tid 54082] [client 20.234.3.108:1857] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aee01ozEbQHHxtmWbab9gQAAAsA"]
[Wed Apr 22 01:33:10.975642 2026] [:error] [pid 35322:tid 35363] [client 20.234.3.108:1820] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aee01qPoAfV40BTfVKzv_wAAAIY"]
[Wed Apr 22 01:33:11.582738 2026] [:error] [pid 35321:tid 35391] [client 20.234.3.108:2047] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aee01zeHLhVUuu8cVXxQOwAAAEc"]
[Wed Apr 22 01:33:12.156636 2026] [:error] [pid 53731:tid 53737] [client 20.234.3.108:1953] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aee02F2I9THUR-bRVGzVBwAAAgI"]
[Wed Apr 22 01:33:12.743225 2026] [:error] [pid 35320:tid 35354] [client 20.234.3.108:2036] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aee02IJW6fdXWO6agMF6pgAAABg"]
[Wed Apr 22 01:33:13.326500 2026] [:error] [pid 35320:tid 35342] [client 20.234.3.108:1858] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aee02YJW6fdXWO6agMF6qwAAAAw"]
[Wed Apr 22 01:33:13.878647 2026] [:error] [pid 35321:tid 35384] [client 20.234.3.108:1883] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aee02TeHLhVUuu8cVXxQQAAAAEA"]
[Wed Apr 22 01:33:14.524049 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:1906] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aee02jeHLhVUuu8cVXxQQwAAAEw"]
[Wed Apr 22 01:33:15.167439 2026] [:error] [pid 35321:tid 35394] [client 20.234.3.108:1872] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aee02zeHLhVUuu8cVXxQRAAAAEo"]
[Wed Apr 22 01:33:16.024718 2026] [:error] [pid 35320:tid 35348] [client 20.234.3.108:1902] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aee03IJW6fdXWO6agMF6sgAAABI"]
[Wed Apr 22 01:33:17.625909 2026] [:error] [pid 35320:tid 35349] [client 20.234.3.108:1876] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aee03YJW6fdXWO6agMF6uQAAABM"]
[Wed Apr 22 01:33:18.196664 2026] [:error] [pid 53731:tid 53749] [client 20.234.3.108:1886] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aee03l2I9THUR-bRVGzVCgAAAg4"]
[Wed Apr 22 01:33:18.762079 2026] [:error] [pid 4777:tid 4796] [client 20.234.3.108:1878] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aee03qxXur6bykKyLZTLLAAAAQg"]
[Wed Apr 22 01:33:19.269552 2026] [:error] [pid 35320:tid 35337] [client 20.234.3.108:1927] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aee034JW6fdXWO6agMF6xAAAAAc"]
[Wed Apr 22 01:33:19.954557 2026] [:error] [pid 35320:tid 35346] [client 20.234.3.108:1952] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aee034JW6fdXWO6agMF6xQAAABA"]
[Wed Apr 22 01:33:20.545756 2026] [:error] [pid 53731:tid 53744] [client 20.234.3.108:1979] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aee04F2I9THUR-bRVGzVDAAAAgk"]
[Wed Apr 22 01:33:22.133877 2026] [:error] [pid 4823:tid 4871] [client 20.234.3.108:1813] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee04vc8mke3PfHqsxEj7AAAAZI"]
[Wed Apr 22 01:33:22.728445 2026] [:error] [pid 53731:tid 53754] [client 20.234.3.108:1875] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee04l2I9THUR-bRVGzVDwAAAhI"]
[Wed Apr 22 01:33:23.405093 2026] [:error] [pid 53978:tid 53990] [client 20.234.3.108:1900] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee0451ivsR4hcOSQbZ0rgAAAoo"]
[Wed Apr 22 01:33:23.942840 2026] [:error] [pid 53731:tid 53748] [client 20.234.3.108:1874] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aee0412I9THUR-bRVGzVEgAAAg0"]
[Wed Apr 22 01:33:24.447789 2026] [:error] [pid 35320:tid 35352] [client 20.234.3.108:1980] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aee05IJW6fdXWO6agMF6zwAAABY"]
[Wed Apr 22 01:33:25.141217 2026] [:error] [pid 35320:tid 35345] [client 20.234.3.108:1807] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aee05YJW6fdXWO6agMF60gAAAA8"]
[Wed Apr 22 01:33:25.697931 2026] [:error] [pid 35320:tid 35336] [client 20.234.3.108:1813] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aee05YJW6fdXWO6agMF61QAAAAY"]
[Wed Apr 22 01:33:26.273407 2026] [:error] [pid 53978:tid 54002] [client 20.234.3.108:1889] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aee05p1ivsR4hcOSQbZ0sQAAApY"]
[Wed Apr 22 01:33:26.858001 2026] [:error] [pid 53731:tid 53742] [client 20.234.3.108:11313] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee05l2I9THUR-bRVGzVFwAAAgc"]
[Wed Apr 22 01:33:27.466525 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:1870] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee05zeHLhVUuu8cVXxQTgAAAEw"]
[Wed Apr 22 01:33:28.028852 2026] [:error] [pid 35320:tid 35332] [client 20.234.3.108:1964] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee06IJW6fdXWO6agMF62wAAAAI"]
[Wed Apr 22 01:33:28.555057 2026] [:error] [pid 53731:tid 53747] [client 20.234.3.108:1959] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aee06F2I9THUR-bRVGzVGgAAAgw"]
[Wed Apr 22 01:33:29.075974 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:1795] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aee06YJW6fdXWO6agMF64AAAAAU"]
[Wed Apr 22 01:33:29.773798 2026] [:error] [pid 53731:tid 53760] [client 20.234.3.108:1829] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aee06V2I9THUR-bRVGzVHgAAAhg"]
[Wed Apr 22 01:33:30.459047 2026] [:error] [pid 53731:tid 53755] [client 20.234.3.108:1935] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aee06l2I9THUR-bRVGzVIAAAAhM"]
[Wed Apr 22 01:33:31.211896 2026] [:error] [pid 35321:tid 35384] [client 20.234.3.108:1779] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abcd.php"] [unique_id "aee06zeHLhVUuu8cVXxQWQAAAEA"]
[Wed Apr 22 01:33:31.912638 2026] [:error] [pid 35321:tid 35408] [client 20.234.3.108:1915] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aee06zeHLhVUuu8cVXxQXQAAAFg"]
[Wed Apr 22 01:33:32.583820 2026] [:error] [pid 35321:tid 35394] [client 20.234.3.108:1891] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aee07DeHLhVUuu8cVXxQXwAAAEo"]
[Wed Apr 22 01:33:33.170907 2026] [:error] [pid 35320:tid 35333] [client 20.234.3.108:1740] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aee07YJW6fdXWO6agMF65QAAAAM"]
[Wed Apr 22 01:33:33.759217 2026] [:error] [pid 35320:tid 35353] [client 20.234.3.108:1817] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fi.php"] [unique_id "aee07YJW6fdXWO6agMF65gAAABc"]
[Wed Apr 22 01:33:34.662529 2026] [:error] [pid 35321:tid 35400] [client 20.234.3.108:1910] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aee07jeHLhVUuu8cVXxQYQAAAFA"]
[Wed Apr 22 01:33:35.266253 2026] [:error] [pid 35321:tid 35384] [client 20.234.3.108:2033] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aee07zeHLhVUuu8cVXxQYwAAAEA"]
[Wed Apr 22 01:33:36.068866 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:1881] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aee08IJW6fdXWO6agMF66wAAAAQ"]
[Wed Apr 22 01:33:36.807683 2026] [:error] [pid 35322:tid 35359] [client 20.234.3.108:1887] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "aee08KPoAfV40BTfVKzwAAAAAII"]
[Wed Apr 22 01:33:37.345903 2026] [:error] [pid 54080:tid 54090] [client 20.234.3.108:1832] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aee08YzEbQHHxtmWbab9iAAAAsg"]
[Wed Apr 22 01:33:37.929811 2026] [:error] [pid 53832:tid 53854] [client 20.234.3.108:1866] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aee08dzkuxsE_OhM9UKb6gAAAlM"]
[Wed Apr 22 01:33:38.589246 2026] [:error] [pid 53978:tid 54004] [client 20.234.3.108:2007] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aee08p1ivsR4hcOSQbZ0uQAAApg"]
[Wed Apr 22 01:33:39.297873 2026] [:error] [pid 35321:tid 35387] [client 20.234.3.108:1793] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/update/f35.php"] [unique_id "aee08zeHLhVUuu8cVXxQagAAAEM"]
[Wed Apr 22 01:33:39.961378 2026] [:error] [pid 35321:tid 35401] [client 20.234.3.108:1801] [client 20.234.3.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aee08zeHLhVUuu8cVXxQawAAAFE"]
[Wed Apr 22 01:33:40.660453 2026] [:error] [pid 35321:tid 35407] [client 20.234.3.108:1806] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aee09DeHLhVUuu8cVXxQbAAAAFc"]
[Wed Apr 22 01:33:41.606347 2026] [:error] [pid 35322:tid 35364] [client 20.234.3.108:1810] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aee09aPoAfV40BTfVKzwAgAAAIc"]
[Wed Apr 22 01:33:42.255807 2026] [:error] [pid 53731:tid 53749] [client 20.234.3.108:11315] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aee09l2I9THUR-bRVGzVLAAAAg4"]
[Wed Apr 22 01:33:42.968871 2026] [:error] [pid 35320:tid 35348] [client 20.234.3.108:1837] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "aee09oJW6fdXWO6agMF69QAAABI"]
[Wed Apr 22 01:33:43.752028 2026] [:error] [pid 53731:tid 53743] [client 20.234.3.108:1736] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aee0912I9THUR-bRVGzVLwAAAgg"]
[Wed Apr 22 01:33:44.325961 2026] [:error] [pid 53731:tid 53740] [client 20.234.3.108:1888] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aee0-F2I9THUR-bRVGzVMgAAAgU"]
[Wed Apr 22 01:33:45.062438 2026] [:error] [pid 54080:tid 54101] [client 20.234.3.108:1977] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aee0-YzEbQHHxtmWbab9jQAAAtM"]
[Wed Apr 22 01:33:45.787767 2026] [:error] [pid 35321:tid 35390] [client 20.234.3.108:1971] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "aee0-TeHLhVUuu8cVXxQdQAAAEY"]
[Wed Apr 22 01:33:46.611319 2026] [:error] [pid 53978:tid 54002] [client 20.234.3.108:1890] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aee0-p1ivsR4hcOSQbZ0wwAAApY"]
[Wed Apr 22 01:33:47.146812 2026] [:error] [pid 4777:tid 4812] [client 20.234.3.108:1797] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aee0-6xXur6bykKyLZTLNgAAARg"]
[Wed Apr 22 01:33:47.819243 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:1893] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aee0-4JW6fdXWO6agMF6_wAAAAU"]
[Wed Apr 22 01:33:48.333601 2026] [:error] [pid 35320:tid 35345] [client 20.234.3.108:1903] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/"] [unique_id "aee0_IJW6fdXWO6agMF7AwAAAA8"]
[Wed Apr 22 01:33:48.878320 2026] [:error] [pid 35320:tid 35351] [client 20.234.3.108:11328] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aee0_IJW6fdXWO6agMF7BAAAABU"]
[Wed Apr 22 01:33:49.572922 2026] [:error] [pid 35320:tid 35346] [client 20.234.3.108:1989] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aee0_YJW6fdXWO6agMF7CAAAABA"]
[Wed Apr 22 01:33:50.340556 2026] [:error] [pid 35320:tid 35343] [client 20.234.3.108:1823] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aee0_oJW6fdXWO6agMF7DgAAAA0"]
[Wed Apr 22 01:33:50.898561 2026] [:error] [pid 35321:tid 35391] [client 20.234.3.108:1871] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/prv8.php"] [unique_id "aee0_jeHLhVUuu8cVXxQgQAAAEc"]
[Wed Apr 22 01:33:51.460704 2026] [:error] [pid 35320:tid 35352] [client 20.234.3.108:1827] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aee0_4JW6fdXWO6agMF7FwAAABY"]
[Wed Apr 22 01:33:52.187307 2026] [:error] [pid 35321:tid 35399] [client 20.234.3.108:1796] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aee1ADeHLhVUuu8cVXxQhgAAAE8"]
[Wed Apr 22 01:33:52.921731 2026] [:error] [pid 53731:tid 53750] [client 20.234.3.108:1819] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aee1AF2I9THUR-bRVGzVNwAAAg8"]
[Wed Apr 22 01:33:53.479774 2026] [:error] [pid 53731:tid 53746] [client 20.234.3.108:11388] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/k.php"] [unique_id "aee1AV2I9THUR-bRVGzVOAAAAgs"]
[Wed Apr 22 01:33:54.144289 2026] [proxy_fcgi:error] [pid 53731:tid 53759] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:54.401704 2026] [proxy_fcgi:error] [pid 53731:tid 53754] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:54.661623 2026] [proxy_fcgi:error] [pid 53731:tid 53743] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:54.921795 2026] [proxy_fcgi:error] [pid 53731:tid 53748] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:55.178361 2026] [proxy_fcgi:error] [pid 53731:tid 53742] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:55.458593 2026] [proxy_fcgi:error] [pid 53731:tid 53758] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:55.715789 2026] [proxy_fcgi:error] [pid 53731:tid 53757] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:56.268723 2026] [proxy_fcgi:error] [pid 53731:tid 53752] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:56.525105 2026] [proxy_fcgi:error] [pid 53731:tid 53737] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:56.783357 2026] [proxy_fcgi:error] [pid 53731:tid 53756] [client 20.234.3.108:1898] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 01:33:57.038426 2026] [:error] [pid 53731:tid 53744] [client 20.234.3.108:1898] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aee1BV2I9THUR-bRVGzVSgAAAgk"]
[Wed Apr 22 01:33:57.564001 2026] [:error] [pid 35320:tid 35341] [client 20.234.3.108:11379] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aee1BYJW6fdXWO6agMF7LgAAAAs"]
[Wed Apr 22 01:33:58.181802 2026] [:error] [pid 35321:tid 35393] [client 20.234.3.108:1956] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aee1BjeHLhVUuu8cVXxQkgAAAEk"]
[Wed Apr 22 01:33:58.891972 2026] [:error] [pid 35321:tid 35386] [client 20.234.3.108:11311] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aee1BjeHLhVUuu8cVXxQlwAAAEI"]
[Wed Apr 22 01:33:59.602391 2026] [:error] [pid 4777:tid 4811] [client 20.234.3.108:1838] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aee1B6xXur6bykKyLZTLOQAAARc"]
[Wed Apr 22 01:34:00.380213 2026] [:error] [pid 35320:tid 35353] [client 20.234.3.108:1760] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aee1CIJW6fdXWO6agMF7MgAAABc"]
[Wed Apr 22 01:34:00.992371 2026] [:error] [pid 53731:tid 53754] [client 20.234.3.108:11364] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aee1CF2I9THUR-bRVGzVTQAAAhI"]
[Wed Apr 22 01:34:01.522059 2026] [:error] [pid 35320:tid 35335] [client 20.234.3.108:1841] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aee1CYJW6fdXWO6agMF7OQAAAAU"]
[Wed Apr 22 01:34:02.142740 2026] [:error] [pid 35320:tid 35333] [client 20.234.3.108:1792] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aee1CoJW6fdXWO6agMF7OwAAAAM"]
[Wed Apr 22 01:34:02.711084 2026] [:error] [pid 35321:tid 35384] [client 20.234.3.108:1836] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aee1CjeHLhVUuu8cVXxQnAAAAEA"]
[Wed Apr 22 01:34:03.273773 2026] [:error] [pid 35415:tid 35431] [client 20.234.3.108:1862] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aee1C0iqDinI4_22zziOVwAAAMQ"]
[Wed Apr 22 01:34:03.873871 2026] [:error] [pid 35320:tid 35330] [client 20.234.3.108:1822] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aee1C4JW6fdXWO6agMF7QwAAAAA"]
[Wed Apr 22 01:34:04.447078 2026] [:error] [pid 35322:tid 35358] [client 20.234.3.108:1904] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aee1DKPoAfV40BTfVKzwBQAAAIE"]
[Wed Apr 22 01:34:05.155826 2026] [:error] [pid 53731:tid 53753] [client 20.234.3.108:1671] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aee1DV2I9THUR-bRVGzVUAAAAhE"]
[Wed Apr 22 01:34:05.945438 2026] [:error] [pid 53978:tid 53982] [client 20.234.3.108:1756] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aee1DZ1ivsR4hcOSQbZ0zgAAAoI"]
[Wed Apr 22 01:34:06.553014 2026] [:error] [pid 53978:tid 53991] [client 20.234.3.108:1794] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aee1Dp1ivsR4hcOSQbZ00wAAAos"]
[Wed Apr 22 01:34:07.438523 2026] [:error] [pid 53978:tid 54000] [client 20.234.3.108:1911] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aee1D51ivsR4hcOSQbZ01gAAApQ"]
[Wed Apr 22 01:34:08.446808 2026] [:error] [pid 35320:tid 35334] [client 20.234.3.108:1809] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aee1EIJW6fdXWO6agMF7SQAAAAQ"]
[Wed Apr 22 01:34:09.234612 2026] [:error] [pid 53731:tid 53737] [client 20.234.3.108:1755] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aee1EV2I9THUR-bRVGzVUgAAAgI"]
[Wed Apr 22 01:34:09.787587 2026] [:error] [pid 35321:tid 35395] [client 20.234.3.108:1677] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aee1ETeHLhVUuu8cVXxQowAAAEs"]
[Wed Apr 22 01:34:10.589356 2026] [:error] [pid 35321:tid 35407] [client 20.234.3.108:1879] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aee1EjeHLhVUuu8cVXxQpQAAAFc"]
[Wed Apr 22 01:34:11.447542 2026] [:error] [pid 35320:tid 35336] [client 20.234.3.108:1802] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aee1E4JW6fdXWO6agMF7TwAAAAY"]
[Wed Apr 22 01:34:12.310255 2026] [:error] [pid 53731:tid 53741] [client 20.234.3.108:1800] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aee1FF2I9THUR-bRVGzVVAAAAgY"]
[Wed Apr 22 01:34:13.215623 2026] [:error] [pid 53978:tid 53989] [client 20.234.3.108:1768] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ew.php"] [unique_id "aee1FZ1ivsR4hcOSQbZ03gAAAok"]
[Wed Apr 22 01:34:14.583971 2026] [:error] [pid 35320:tid 35353] [client 20.234.3.108:11290] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aee1FoJW6fdXWO6agMF7VAAAABc"]
[Wed Apr 22 01:34:15.999572 2026] [:error] [pid 54080:tid 54085] [client 20.234.3.108:1845] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aee1F4zEbQHHxtmWbab9lgAAAsM"]
[Wed Apr 22 01:34:18.902518 2026] [:error] [pid 4823:tid 4867] [client 20.234.3.108:1743] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aee1Gvc8mke3PfHqsxEj8wAAAY4"]
[Wed Apr 22 01:34:20.868869 2026] [:error] [pid 35320:tid 35351] [client 20.234.3.108:1811] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file21.php"] [unique_id "aee1HIJW6fdXWO6agMF7WwAAABU"]
[Wed Apr 22 01:34:22.886987 2026] [:error] [pid 53832:tid 53858] [client 20.234.3.108:1905] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aee1HtzkuxsE_OhM9UKb_wAAAlc"]
[Wed Apr 22 01:34:23.575972 2026] [:error] [pid 4777:tid 4793] [client 20.234.3.108:1749] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aee1H6xXur6bykKyLZTLQQAAAQU"]
[Wed Apr 22 01:34:24.169270 2026] [:error] [pid 53832:tid 53842] [client 20.234.3.108:1735] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aee1INzkuxsE_OhM9UKcAAAAAkc"]
[Wed Apr 22 01:34:24.792137 2026] [:error] [pid 35321:tid 35405] [client 20.234.3.108:1854] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "aee1IDeHLhVUuu8cVXxQvQAAAFU"]
[Wed Apr 22 01:34:25.757563 2026] [:error] [pid 35321:tid 35392] [client 20.234.3.108:1919] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aee1ITeHLhVUuu8cVXxQwwAAAEg"]
[Wed Apr 22 01:34:26.600425 2026] [:error] [pid 53731:tid 53738] [client 20.234.3.108:1864] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aee1Il2I9THUR-bRVGzVZwAAAgM"]
[Wed Apr 22 01:34:27.325338 2026] [:error] [pid 4823:tid 4871] [client 20.234.3.108:1826] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aee1I_c8mke3PfHqsxEj-gAAAZI"]
[Wed Apr 22 01:34:28.174306 2026] [:error] [pid 53731:tid 53735] [client 20.234.3.108:1842] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class20.php"] [unique_id "aee1JF2I9THUR-bRVGzVbgAAAgA"]
[Wed Apr 22 01:34:28.794965 2026] [:error] [pid 35321:tid 35385] [client 20.234.3.108:1917] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aee1JDeHLhVUuu8cVXxQ4QAAAEE"]
[Wed Apr 22 01:34:29.533376 2026] [:error] [pid 53978:tid 53984] [client 20.234.3.108:1731] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aee1JZ1ivsR4hcOSQbZ0_gAAAoQ"]
[Wed Apr 22 01:34:30.240156 2026] [:error] [pid 35320:tid 35347] [client 20.234.3.108:1894] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aee1JoJW6fdXWO6agMF7agAAABE"]
[Wed Apr 22 01:34:31.041792 2026] [:error] [pid 35320:tid 35341] [client 20.234.3.108:1741] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file18.php"] [unique_id "aee1J4JW6fdXWO6agMF7bgAAAAs"]
[Wed Apr 22 01:34:31.856694 2026] [:error] [pid 35321:tid 35397] [client 20.234.3.108:1899] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aee1JzeHLhVUuu8cVXxQ9QAAAE0"]
[Wed Apr 22 01:34:32.878642 2026] [:error] [pid 53731:tid 53753] [client 20.234.3.108:1764] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aee1KF2I9THUR-bRVGzVfwAAAhE"]
[Wed Apr 22 01:34:34.119162 2026] [:error] [pid 53978:tid 54002] [client 20.234.3.108:1769] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aee1Kp1ivsR4hcOSQbZ1BgAAApY"]
[Wed Apr 22 01:34:35.096739 2026] [:error] [pid 35321:tid 35390] [client 20.234.3.108:1844] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vee.php"] [unique_id "aee1KzeHLhVUuu8cVXxQ_QAAAEY"]
[Wed Apr 22 01:34:35.868761 2026] [:error] [pid 35321:tid 35402] [client 20.234.3.108:1776] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aee1KzeHLhVUuu8cVXxRAgAAAFI"]
[Wed Apr 22 01:34:36.602305 2026] [:error] [pid 35321:tid 35388] [client 20.234.3.108:1759] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aee1LDeHLhVUuu8cVXxRBAAAAEQ"]
[Wed Apr 22 01:34:37.348388 2026] [:error] [pid 35321:tid 35384] [client 20.234.3.108:1733] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aee1LTeHLhVUuu8cVXxRBwAAAEA"]
[Wed Apr 22 01:34:38.432718 2026] [:error] [pid 35321:tid 35390] [client 20.234.3.108:1790] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cabs.php"] [unique_id "aee1LjeHLhVUuu8cVXxRDQAAAEY"]
[Wed Apr 22 01:34:39.149913 2026] [:error] [pid 35321:tid 35402] [client 20.234.3.108:1751] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aee1LzeHLhVUuu8cVXxRDwAAAFI"]
[Wed Apr 22 01:34:40.059345 2026] [:error] [pid 4777:tid 4790] [client 20.234.3.108:1808] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aee1MKxXur6bykKyLZTLRQAAAQI"]
[Wed Apr 22 01:34:40.749608 2026] [:error] [pid 53731:tid 53760] [client 20.234.3.108:1930] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aee1MF2I9THUR-bRVGzVnAAAAhg"]
[Wed Apr 22 01:34:41.512004 2026] [:error] [pid 53731:tid 53743] [client 20.234.3.108:1895] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "aee1MV2I9THUR-bRVGzVowAAAgg"]
[Wed Apr 22 01:34:42.386800 2026] [:error] [pid 4823:tid 4876] [client 20.234.3.108:1799] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aee1Mvc8mke3PfHqsxEj-wAAAZc"]
[Wed Apr 22 01:34:43.113973 2026] [:error] [pid 4823:tid 4865] [client 20.234.3.108:1729] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aee1M_c8mke3PfHqsxEj_AAAAYw"]
[Wed Apr 22 01:34:43.643535 2026] [:error] [pid 35415:tid 35449] [client 20.234.3.108:1803] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aee1M0iqDinI4_22zziOawAAANY"]
[Wed Apr 22 01:34:44.396584 2026] [:error] [pid 53731:tid 53755] [client 20.234.3.108:11359] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x1da.php"] [unique_id "aee1NF2I9THUR-bRVGzVsQAAAhM"]
[Wed Apr 22 01:34:44.958267 2026] [:error] [pid 35320:tid 35354] [client 20.234.3.108:1861] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aee1NIJW6fdXWO6agMF7fAAAABg"]
[Wed Apr 22 01:34:45.638845 2026] [:error] [pid 35321:tid 35406] [client 20.234.3.108:1892] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aee1NTeHLhVUuu8cVXxRHwAAAFY"]
[Wed Apr 22 01:34:46.213170 2026] [:error] [pid 35321:tid 35396] [client 20.234.3.108:1758] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aee1NjeHLhVUuu8cVXxRIQAAAEw"]
[Wed Apr 22 01:34:46.826403 2026] [:error] [pid 53978:tid 54000] [client 20.234.3.108:11357] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "aee1Np1ivsR4hcOSQbZ1EQAAApQ"]
[Wed Apr 22 01:34:47.465035 2026] [:error] [pid 53731:tid 53758] [client 20.234.3.108:1814] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aee1N12I9THUR-bRVGzVuwAAAhY"]
[Wed Apr 22 01:34:48.103760 2026] [:error] [pid 54080:tid 54099] [client 20.234.3.108:1818] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aee1OIzEbQHHxtmWbab9oAAAAtE"]
[Wed Apr 22 01:34:48.664711 2026] [:error] [pid 4823:tid 4853] [client 20.234.3.108:1763] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aee1OPc8mke3PfHqsxEj_gAAAYA"]
[Wed Apr 22 01:34:49.617385 2026] [:error] [pid 35320:tid 35344] [client 20.234.3.108:1839] [client 20.234.3.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "aee1OYJW6fdXWO6agMF7hwAAAA4"]
[Wed Apr 22 03:19:33.986746 2026] [:error] [pid 56420:tid 56426] [client 182.42.105.144:40553] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aefNxdjeNbwvzOQ2uhudsQAAAAE"]
[Wed Apr 22 06:06:14.301916 2026] [:error] [pid 21683:tid 21763] [client 43.135.144.126:43106] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aef01lZBWT-0diZyYyaLfAAAAI0"]
[Wed Apr 22 07:34:13.888923 2026] [:error] [pid 31756:tid 31798] [client 43.153.15.51:58180] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aegJdd_WbkXbHaEfhd3jmwAAAkY"]
[Wed Apr 22 09:22:46.718656 2026] [:error] [pid 31755:tid 31771] [client 122.51.236.174:33928] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aegi5gz2mYMkg3X8q1uyKgAAAgg"]
[Wed Apr 22 09:46:09.331338 2026] [proxy_fcgi:error] [pid 23041:tid 23068] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:09.621200 2026] [proxy_fcgi:error] [pid 23041:tid 23058] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:09.914989 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:10.215877 2026] [proxy_fcgi:error] [pid 23041:tid 23063] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:10.493186 2026] [proxy_fcgi:error] [pid 23041:tid 23044] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:10.766603 2026] [proxy_fcgi:error] [pid 23041:tid 23058] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:11.043147 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:11.319281 2026] [proxy_fcgi:error] [pid 23041:tid 23049] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:11.868109 2026] [proxy_fcgi:error] [pid 23041:tid 23062] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:12.215275 2026] [proxy_fcgi:error] [pid 23041:tid 23051] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:12.490200 2026] [proxy_fcgi:error] [pid 23041:tid 23063] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:12.794643 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:13.068807 2026] [proxy_fcgi:error] [pid 23041:tid 23060] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:13.370183 2026] [proxy_fcgi:error] [pid 23041:tid 23044] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:13.694104 2026] [proxy_fcgi:error] [pid 23041:tid 23055] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:13.971442 2026] [proxy_fcgi:error] [pid 23041:tid 23056] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:14.257697 2026] [proxy_fcgi:error] [pid 23041:tid 23058] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:14.610969 2026] [proxy_fcgi:error] [pid 23041:tid 23048] [client 185.92.25.100:45517] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:18.676392 2026] [:error] [pid 23041:tid 23062] [client 185.92.25.100:45517] [client 185.92.25.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aegoakTXx_lUa7xwAb4z9QAAARI"]
[Wed Apr 22 09:46:20.165461 2026] [:error] [pid 23041:tid 23049] [client 185.92.25.100:41761] [client 185.92.25.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aegobETXx_lUa7xwAb40AQAAAQU"]
[Wed Apr 22 09:46:21.557424 2026] [proxy_fcgi:error] [pid 23041:tid 23068] [client 185.192.71.229:42309] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:22.369591 2026] [:error] [pid 23041:tid 23053] [client 185.192.71.229:42309] [client 185.192.71.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "aegobkTXx_lUa7xwAb40FAAAAQk"]
[Wed Apr 22 09:46:23.496650 2026] [proxy_fcgi:error] [pid 31756:tid 31790] [client 185.92.25.98:38439] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:23.789184 2026] [:error] [pid 31756:tid 31793] [client 185.92.25.98:38439] [client 185.92.25.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "aegob9_WbkXbHaEfhd3_rAAAAkM"]
[Wed Apr 22 09:46:24.608311 2026] [proxy_fcgi:error] [pid 21682:tid 21732] [client 185.192.71.244:57387] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 09:46:26.024387 2026] [:error] [pid 21682:tid 21723] [client 185.192.71.244:57387] [client 185.192.71.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aegocplXWQZUlmPHS3o6EwAAAEA"]
[Wed Apr 22 10:23:09.545456 2026] [proxy_fcgi:error] [pid 31755:tid 31773] [client 163.7.2.30:43384] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 10:23:11.199476 2026] [proxy_fcgi:error] [pid 31949:tid 31965] [client 163.7.2.30:43370] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 10:23:44.228699 2026] [proxy_fcgi:error] [pid 21683:tid 21760] [client 163.7.2.30:43908] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 10:23:44.349336 2026] [proxy_fcgi:error] [pid 21682:tid 21723] [client 163.7.2.30:43896] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 10:24:24.227639 2026] [proxy_fcgi:error] [pid 31755:tid 31769] [client 163.7.2.30:43930] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 10:24:24.235974 2026] [proxy_fcgi:error] [pid 31755:tid 31779] [client 163.7.2.30:43922] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 10:24:45.904040 2026] [:error] [pid 23041:tid 23065] [client 163.7.2.30:52342] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/wp-config.php"] [unique_id "aegxbUTXx_lUa7xwAb5FXgAAARU"]
[Wed Apr 22 10:29:53.156220 2026] [:error] [pid 21682:tid 21746] [client 163.7.2.30:43962] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "aegyoZlXWQZUlmPHS3pJ5AAAAFc"]
[Wed Apr 22 10:31:52.230589 2026] [:error] [pid 32053:tid 32071] [client 163.7.2.30:38600] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com"] [uri "/config.ini"] [unique_id "aegzGAzPjXx_ocfbYhtMDQAAA1A"]
[Wed Apr 22 10:34:02.987020 2026] [:error] [pid 23041:tid 23065] [client 163.7.2.30:55952] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourbrand.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourbrand.com"] [uri "/redis.conf"] [unique_id "aegzmkTXx_lUa7xwAb5IxwAAARU"]
[Wed Apr 22 10:35:51.821072 2026] [:error] [pid 31755:tid 31787] [client 163.7.2.30:49026] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aeg0Bwz2mYMkg3X8q1vbUAAAAhg"]
[Wed Apr 22 10:35:51.932797 2026] [:error] [pid 32095:tid 32114] [client 163.7.2.30:49032] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "aeg0B9fu5Cv628YPe5-POQAAA5A"]
[Wed Apr 22 10:36:22.705682 2026] [:error] [pid 31755:tid 31787] [client 163.7.2.30:47014] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/logs/HEAD"] [unique_id "aeg0Jgz2mYMkg3X8q1vbXAAAAhg"]
[Wed Apr 22 10:36:48.236883 2026] [:error] [pid 23041:tid 23061] [client 84.239.47.134:7999] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0QETXx_lUa7xwAb5J9QAAARE"]
[Wed Apr 22 10:36:49.401903 2026] [:error] [pid 31949:tid 31971] [client 84.239.47.134:23539] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0QX2WtGZh5JfbMUdefQAAAxM"]
[Wed Apr 22 10:36:54.415329 2026] [:error] [pid 23041:tid 23057] [client 84.239.47.134:50252] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0RkTXx_lUa7xwAb5KAAAAAQ0"]
[Wed Apr 22 10:36:54.927948 2026] [:error] [pid 23041:tid 23067] [client 84.239.47.134:29791] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0RkTXx_lUa7xwAb5KAQAAARc"]
[Wed Apr 22 10:36:57.264284 2026] [:error] [pid 31844:tid 31852] [client 84.239.47.134:46711] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0SWtAU9CprTB4b3JCPAAAAoY"]
[Wed Apr 22 10:36:58.218290 2026] [:error] [pid 21683:tid 21761] [client 84.239.47.134:4334] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0SlZBWT-0diZyYybA1QAAAIs"]
[Wed Apr 22 10:37:02.341845 2026] [:error] [pid 21683:tid 21769] [client 84.239.47.134:52616] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0TlZBWT-0diZyYybA3QAAAJM"]
[Wed Apr 22 10:37:02.795682 2026] [:error] [pid 31756:tid 31791] [client 84.239.47.134:32870] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0Tt_WbkXbHaEfhd0NlwAAAkE"]
[Wed Apr 22 10:37:03.417910 2026] [:error] [pid 21683:tid 21755] [client 84.239.47.134:52616] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0T1ZBWT-0diZyYybA3gAAAIU"]
[Wed Apr 22 10:37:03.993749 2026] [:error] [pid 21682:tid 21731] [client 84.239.47.134:32794] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0T5lXWQZUlmPHS3pLoQAAAEg"]
[Wed Apr 22 10:37:09.619011 2026] [:error] [pid 31706:tid 31729] [client 84.239.47.134:11656] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0VbGSe9Rnd4Q_z1iuGAAAAdQ"]
[Wed Apr 22 10:37:10.718670 2026] [:error] [pid 21683:tid 21756] [client 84.239.47.134:20359] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0VlZBWT-0diZyYybA5QAAAIY"]
[Wed Apr 22 10:37:11.886200 2026] [:error] [pid 21682:tid 21727] [client 84.239.47.134:43122] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/robots.txt"] [unique_id "aeg0V5lXWQZUlmPHS3pLqwAAAEQ"]
[Wed Apr 22 10:37:12.385770 2026] [:error] [pid 31755:tid 31782] [client 84.239.47.134:40471] [client 84.239.47.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.measureyourbrand.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeg0WAz2mYMkg3X8q1vbxAAAAhM"]
[Wed Apr 22 12:30:04.359147 2026] [:error] [pid 31755:tid 31769] [client 49.51.192.198:37740] [client 49.51.192.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aehOzAz2mYMkg3X8q1sKSwAAAgY"]
[Wed Apr 22 14:10:53.323669 2026] [:error] [pid 9085:tid 9102] [client 43.135.138.128:47710] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aehmbd-_-or9vQnlWnpvDwAAAU8"]
[Wed Apr 22 14:22:11.991755 2026] [:error] [pid 6250:tid 6259] [client 205.185.115.28:50531] [client 205.185.115.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 205.185.115.28, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aehpEw-iZeQkqmQVfj6rewAAAEU"]
[Wed Apr 22 14:22:12.005440 2026] [proxy_fcgi:error] [pid 6250:tid 6259] [client 205.185.115.28:50531] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 15:01:23.672721 2026] [:error] [pid 6384:tid 6393] [client 103.112.239.34:58877] [client 103.112.239.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.112.239.34, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aehyQz58M3t15ICeWHWbzwAAAMY"]
[Wed Apr 22 15:01:23.689627 2026] [proxy_fcgi:error] [pid 6384:tid 6393] [client 103.112.239.34:58877] AH01071: Got error 'Primary script unknown'
[Wed Apr 22 15:37:32.361519 2026] [:error] [pid 6252:tid 6319] [client 182.44.12.37:52987] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeh6vOtGYuiYb1nWBpQK9wAAAQc"]
[Wed Apr 22 18:52:43.426984 2026] [:error] [pid 9085:tid 9101] [client 49.51.166.228:44922] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeioe9-_-or9vQnlWnog1QAAAU4"]
[Wed Apr 22 20:16:54.032329 2026] [:error] [pid 6384:tid 6393] [client 43.128.156.124:55698] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aei8Nj58M3t15ICeWHUm0wAAAMY"]
[Wed Apr 22 22:10:04.738848 2026] [:error] [pid 6344:tid 6362] [client 49.7.227.204:51646] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aejWvEDOTF-pkQnDeUkJgAAAAA0"]
[Wed Apr 22 22:53:16.987577 2026] [:error] [pid 6250:tid 6270] [client 45.150.174.91:56780] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aejg3A-iZeQkqmQVfj4qIgAAAFA"]
[Wed Apr 22 22:53:16.992599 2026] [proxy_fcgi:error] [pid 6250:tid 6270] [client 45.150.174.91:56780] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 00:59:00.282568 2026] [:error] [pid 6384:tid 6389] [client 46.101.164.103:58670] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aej-VD58M3t15ICeWHW-HgAAAMI"], referer: https://www.google.com/search?q=wordpress
[Thu Apr 23 00:59:00.298308 2026] [proxy_fcgi:error] [pid 6384:tid 6389] [client 46.101.164.103:58670] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/search?q=wordpress
[Thu Apr 23 00:59:03.708102 2026] [:error] [pid 6384:tid 6393] [client 46.101.164.103:59395] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aej-Vz58M3t15ICeWHW-LAAAAMY"], referer: https://www.google.com/
[Thu Apr 23 00:59:03.710970 2026] [proxy_fcgi:error] [pid 6384:tid 6393] [client 46.101.164.103:59395] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Apr 23 01:08:53.322885 2026] [:error] [pid 23776:tid 23779] [client 170.106.202.141:40986] [client 170.106.202.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aekApbRExf-1pAbSeJtR9QAAAYE"]
[Thu Apr 23 03:08:37.228170 2026] [:error] [pid 9085:tid 9100] [client 43.153.192.98:38224] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aekctd-_-or9vQnlWnpcgwAAAU0"]
[Thu Apr 23 04:40:52.318707 2026] [:error] [pid 42973:tid 43045] [client 117.62.235.53:51722] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aekyVG6I0QqmmmLTHE2NmgAAAII"]
[Thu Apr 23 05:56:06.895709 2026] [:error] [pid 25635:tid 25648] [client 24.77.77.1:13262] [client 24.77.77.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.77.1, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aelD9sRxv6UsgRGKB3KaZwAAAQk"]
[Thu Apr 23 05:56:06.909922 2026] [proxy_fcgi:error] [pid 25635:tid 25648] [client 24.77.77.1:13262] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 05:59:36.736935 2026] [:error] [pid 42973:tid 43045] [client 155.248.183.67:59952] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEyG6I0QqmmmLTHE2kWgAAAII"]
[Thu Apr 23 05:59:37.964909 2026] [:error] [pid 25635:tid 25663] [client 155.248.183.67:58304] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEycRxv6UsgRGKB3KbiQAAARg"]
[Thu Apr 23 05:59:38.191975 2026] [:error] [pid 25635:tid 25653] [client 155.248.183.67:54040] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aelEysRxv6UsgRGKB3KbjAAAAQ4"]
[Thu Apr 23 08:10:10.904298 2026] [proxy_fcgi:error] [pid 64967:tid 64981] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:11.244568 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:11.525050 2026] [proxy_fcgi:error] [pid 64967:tid 64972] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:11.788855 2026] [proxy_fcgi:error] [pid 64967:tid 64983] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:12.059668 2026] [proxy_fcgi:error] [pid 64967:tid 64978] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:12.336767 2026] [proxy_fcgi:error] [pid 64967:tid 64974] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:14.310737 2026] [proxy_fcgi:error] [pid 64967:tid 64980] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:14.729982 2026] [proxy_fcgi:error] [pid 64967:tid 64982] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:14.996434 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 51.107.217.123:49359] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:10:15.257175 2026] [:error] [pid 64967:tid 64989] [client 51.107.217.123:49359] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aeljZ4AV4GfOOdX8QzoergAAAZQ"]
[Thu Apr 23 08:10:16.096284 2026] [:error] [pid 42971:tid 43006] [client 51.107.217.123:49925] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aeljaDEP2_5RswrH8bHALAAAABQ"]
[Thu Apr 23 08:10:16.866622 2026] [:error] [pid 64998:tid 65024] [client 51.107.217.123:61832] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aeljaIV5EysYcTLjmwgxLgAAAdY"]
[Thu Apr 23 08:10:17.534028 2026] [:error] [pid 65000:tid 65051] [client 51.107.217.123:50313] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "aeljab6vRb9j6psK2ZbLywAAAhI"]
[Thu Apr 23 08:10:18.092784 2026] [:error] [pid 43083:tid 43099] [client 51.107.217.123:50337] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeljajC5hrvNXosL83LvYwAAAM4"]
[Thu Apr 23 08:10:18.795273 2026] [:error] [pid 65000:tid 65045] [client 51.107.217.123:38323] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aeljar6vRb9j6psK2ZbLzAAAAgw"]
[Thu Apr 23 08:10:19.368445 2026] [:error] [pid 65000:tid 65056] [client 51.107.217.123:7009] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aelja76vRb9j6psK2ZbLzQAAAhc"]
[Thu Apr 23 08:10:19.967692 2026] [:error] [pid 42972:tid 43017] [client 51.107.217.123:49979] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/term.php"] [unique_id "aelja8OAb-3sOknsk4cvMAAAAEE"]
[Thu Apr 23 08:10:20.652357 2026] [:error] [pid 65000:tid 65046] [client 51.107.217.123:6466] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeljbL6vRb9j6psK2ZbL1AAAAg0"]
[Thu Apr 23 08:10:21.184452 2026] [:error] [pid 65000:tid 65054] [client 51.107.217.123:38658] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeljbb6vRb9j6psK2ZbL1wAAAhU"]
[Thu Apr 23 08:10:21.727143 2026] [:error] [pid 43083:tid 43103] [client 51.107.217.123:49344] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeljbTC5hrvNXosL83LvaAAAANI"]
[Thu Apr 23 08:10:22.254913 2026] [:error] [pid 65000:tid 65031] [client 51.107.217.123:38285] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeljbr6vRb9j6psK2ZbL3AAAAgI"]
[Thu Apr 23 08:10:22.850071 2026] [:error] [pid 64998:tid 65002] [client 51.107.217.123:50328] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeljboV5EysYcTLjmwgxMgAAAcA"]
[Thu Apr 23 08:10:23.423997 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:56865] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeljb4V5EysYcTLjmwgxMwAAAdI"]
[Thu Apr 23 08:10:24.137375 2026] [:error] [pid 43083:tid 43100] [client 51.107.217.123:39179] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeljcDC5hrvNXosL83LvawAAAM8"]
[Thu Apr 23 08:10:24.717083 2026] [:error] [pid 64998:tid 65011] [client 51.107.217.123:38330] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tt.php"] [unique_id "aeljcIV5EysYcTLjmwgxNQAAAck"]
[Thu Apr 23 08:10:25.413591 2026] [:error] [pid 59700:tid 59715] [client 51.107.217.123:51289] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeljcZXyGZJFeAIDWtl0fgAAAU0"]
[Thu Apr 23 08:10:26.065563 2026] [:error] [pid 65000:tid 65040] [client 51.107.217.123:38285] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeljcr6vRb9j6psK2ZbL4gAAAgc"]
[Thu Apr 23 08:10:26.619874 2026] [:error] [pid 42971:tid 42997] [client 51.107.217.123:51302] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeljcjEP2_5RswrH8bHAMQAAAAs"]
[Thu Apr 23 08:10:27.174565 2026] [:error] [pid 43083:tid 43095] [client 51.107.217.123:6490] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "aeljczC5hrvNXosL83LvbwAAAMo"]
[Thu Apr 23 08:10:27.871036 2026] [:error] [pid 43083:tid 43099] [client 51.107.217.123:39229] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeljczC5hrvNXosL83LvcgAAAM4"]
[Thu Apr 23 08:10:28.429866 2026] [:error] [pid 64998:tid 65014] [client 51.107.217.123:50362] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeljdIV5EysYcTLjmwgxNgAAAcw"]
[Thu Apr 23 08:10:29.069290 2026] [:error] [pid 64998:tid 65015] [client 51.107.217.123:43139] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeljdYV5EysYcTLjmwgxOAAAAc0"]
[Thu Apr 23 08:10:29.596487 2026] [:error] [pid 64998:tid 65008] [client 51.107.217.123:61862] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aeljdYV5EysYcTLjmwgxPQAAAcY"]
[Thu Apr 23 08:10:30.118762 2026] [:error] [pid 64998:tid 65009] [client 51.107.217.123:50355] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aeljdoV5EysYcTLjmwgxQgAAAcc"]
[Thu Apr 23 08:10:30.787478 2026] [:error] [pid 64998:tid 65018] [client 51.107.217.123:49945] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aeljdoV5EysYcTLjmwgxQwAAAdA"]
[Thu Apr 23 08:10:31.421632 2026] [:error] [pid 25635:tid 25652] [client 51.107.217.123:6504] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aeljd8Rxv6UsgRGKB3LsDgAAAQ0"]
[Thu Apr 23 08:10:31.985529 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:43180] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aeljd4V5EysYcTLjmwgxRQAAAdI"]
[Thu Apr 23 08:10:32.576917 2026] [:error] [pid 59700:tid 59722] [client 51.107.217.123:61850] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeljeJXyGZJFeAIDWtl0gAAAAVQ"]
[Thu Apr 23 08:10:33.247420 2026] [:error] [pid 59700:tid 59712] [client 51.107.217.123:49973] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeljeZXyGZJFeAIDWtl0gQAAAUo"]
[Thu Apr 23 08:10:34.054438 2026] [:error] [pid 42973:tid 43053] [client 51.107.217.123:38953] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeljem6I0QqmmmLTHE3jTQAAAIo"]
[Thu Apr 23 08:10:34.894739 2026] [:error] [pid 65000:tid 65048] [client 51.107.217.123:61860] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeljer6vRb9j6psK2ZbL6QAAAg8"]
[Thu Apr 23 08:10:35.643117 2026] [:error] [pid 64998:tid 65013] [client 51.107.217.123:56849] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "aelje4V5EysYcTLjmwgxRwAAAcs"]
[Thu Apr 23 08:10:36.773612 2026] [:error] [pid 43083:tid 43092] [client 51.107.217.123:62328] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "aeljfDC5hrvNXosL83LvhQAAAMc"]
[Thu Apr 23 08:10:37.389130 2026] [:error] [pid 59700:tid 59726] [client 51.107.217.123:38315] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "aeljfZXyGZJFeAIDWtl0ggAAAVg"]
[Thu Apr 23 08:10:38.349565 2026] [:error] [pid 43083:tid 43096] [client 51.107.217.123:38279] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "aeljfjC5hrvNXosL83LvigAAAMs"]
[Thu Apr 23 08:10:39.106037 2026] [:error] [pid 64967:tid 64984] [client 51.107.217.123:38926] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "aeljf4AV4GfOOdX8QzoetAAAAY8"]
[Thu Apr 23 08:10:40.478269 2026] [:error] [pid 64998:tid 65008] [client 51.107.217.123:38921] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "aeljgIV5EysYcTLjmwgxSgAAAcY"]
[Thu Apr 23 08:10:41.519185 2026] [:error] [pid 64998:tid 65005] [client 51.107.217.123:38191] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "aeljgYV5EysYcTLjmwgxTQAAAcM"]
[Thu Apr 23 08:10:42.693927 2026] [:error] [pid 65000:tid 65050] [client 51.107.217.123:56881] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bmi.php"] [unique_id "aeljgr6vRb9j6psK2ZbL7gAAAhE"]
[Thu Apr 23 08:10:43.527747 2026] [:error] [pid 64998:tid 65026] [client 51.107.217.123:49964] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeljg4V5EysYcTLjmwgxTgAAAdg"]
[Thu Apr 23 08:10:44.324371 2026] [:error] [pid 42973:tid 43046] [client 51.107.217.123:56841] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeljhG6I0QqmmmLTHE3jTwAAAIM"]
[Thu Apr 23 08:10:44.932791 2026] [:error] [pid 65000:tid 65040] [client 51.107.217.123:56836] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeljhL6vRb9j6psK2ZbL8gAAAgc"]
[Thu Apr 23 08:10:45.599507 2026] [:error] [pid 65000:tid 65041] [client 51.107.217.123:51285] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aeljhb6vRb9j6psK2ZbL9AAAAgg"]
[Thu Apr 23 08:10:46.146129 2026] [:error] [pid 64998:tid 65019] [client 51.107.217.123:38144] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeljhoV5EysYcTLjmwgxUwAAAdE"]
[Thu Apr 23 08:10:47.000811 2026] [:error] [pid 64998:tid 65011] [client 51.107.217.123:6468] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeljhoV5EysYcTLjmwgxVQAAAck"]
[Thu Apr 23 08:10:47.577055 2026] [:error] [pid 65000:tid 65038] [client 51.107.217.123:61855] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeljh76vRb9j6psK2ZbL9wAAAgU"]
[Thu Apr 23 08:10:48.320749 2026] [:error] [pid 65000:tid 65051] [client 51.107.217.123:44327] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "aeljiL6vRb9j6psK2ZbL-gAAAhI"]
[Thu Apr 23 08:10:48.949405 2026] [:error] [pid 65000:tid 65056] [client 51.107.217.123:49939] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeljiL6vRb9j6psK2ZbL_QAAAhc"]
[Thu Apr 23 08:10:49.522788 2026] [:error] [pid 59700:tid 59723] [client 51.107.217.123:62311] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeljiZXyGZJFeAIDWtl0hAAAAVU"]
[Thu Apr 23 08:10:50.497001 2026] [:error] [pid 65000:tid 65032] [client 51.107.217.123:44304] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aeljir6vRb9j6psK2ZbL_wAAAgM"]
[Thu Apr 23 08:10:51.138850 2026] [:error] [pid 59700:tid 59704] [client 51.107.217.123:39730] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "aelji5XyGZJFeAIDWtl0iQAAAUI"]
[Thu Apr 23 08:10:51.711839 2026] [:error] [pid 43083:tid 43106] [client 51.107.217.123:61918] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeljizC5hrvNXosL83LvlgAAANU"]
[Thu Apr 23 08:10:52.468086 2026] [:error] [pid 64998:tid 65005] [client 51.107.217.123:62325] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeljjIV5EysYcTLjmwgxWAAAAcM"]
[Thu Apr 23 08:10:53.044217 2026] [:error] [pid 59700:tid 59717] [client 51.107.217.123:44316] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeljjZXyGZJFeAIDWtl0jQAAAU8"]
[Thu Apr 23 08:10:53.565059 2026] [:error] [pid 64998:tid 65018] [client 51.107.217.123:61932] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wen.php"] [unique_id "aeljjYV5EysYcTLjmwgxWwAAAdA"]
[Thu Apr 23 08:10:54.366696 2026] [:error] [pid 64998:tid 65011] [client 51.107.217.123:49010] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "aeljjoV5EysYcTLjmwgxXgAAAck"]
[Thu Apr 23 08:10:55.158261 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:43910] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "aeljj4V5EysYcTLjmwgxXwAAAdI"]
[Thu Apr 23 08:10:56.212170 2026] [:error] [pid 65000:tid 65057] [client 51.107.217.123:62325] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "aeljkL6vRb9j6psK2ZbMAgAAAhg"]
[Thu Apr 23 08:10:57.041950 2026] [:error] [pid 65000:tid 65049] [client 51.107.217.123:48975] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "aeljkb6vRb9j6psK2ZbMBAAAAhA"]
[Thu Apr 23 08:10:57.688359 2026] [:error] [pid 59700:tid 59706] [client 51.107.217.123:51300] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "aeljkZXyGZJFeAIDWtl0kwAAAUQ"]
[Thu Apr 23 08:10:58.333362 2026] [:error] [pid 42973:tid 43055] [client 51.107.217.123:48980] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "aeljkm6I0QqmmmLTHE3jUQAAAIw"]
[Thu Apr 23 08:10:58.861477 2026] [:error] [pid 64998:tid 65008] [client 51.107.217.123:46028] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "aeljkoV5EysYcTLjmwgxZQAAAcY"]
[Thu Apr 23 08:10:59.451346 2026] [:error] [pid 42973:tid 43052] [client 51.107.217.123:45473] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi001.PhP7"] [unique_id "aeljk26I0QqmmmLTHE3jUgAAAIk"]
[Thu Apr 23 08:11:00.021075 2026] [:error] [pid 25635:tid 25641] [client 51.107.217.123:38057] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kikikoko.php"] [unique_id "aeljlMRxv6UsgRGKB3LsFgAAAQI"]
[Thu Apr 23 08:11:00.561705 2026] [:error] [pid 25635:tid 25647] [client 51.107.217.123:39070] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kikikoko.php"] [unique_id "aeljlMRxv6UsgRGKB3LsFwAAAQg"]
[Thu Apr 23 08:11:01.132145 2026] [:error] [pid 43083:tid 43097] [client 51.107.217.123:38382] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kikikoko.php"] [unique_id "aeljlTC5hrvNXosL83LvngAAAMw"]
[Thu Apr 23 08:11:01.706941 2026] [:error] [pid 65000:tid 65030] [client 51.107.217.123:39764] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kikikoko.php"] [unique_id "aeljlb6vRb9j6psK2ZbMDAAAAgE"]
[Thu Apr 23 08:11:02.310332 2026] [:error] [pid 65000:tid 65041] [client 51.107.217.123:62761] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeljlr6vRb9j6psK2ZbMDwAAAgg"]
[Thu Apr 23 08:11:02.984450 2026] [:error] [pid 64998:tid 65007] [client 51.107.217.123:42061] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeljloV5EysYcTLjmwgxaQAAAcU"]
[Thu Apr 23 08:11:03.530301 2026] [:error] [pid 64998:tid 65011] [client 51.107.217.123:44779] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeljl4V5EysYcTLjmwgxagAAAck"]
[Thu Apr 23 08:11:04.113646 2026] [:error] [pid 59700:tid 59719] [client 51.107.217.123:42077] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeljmJXyGZJFeAIDWtl0lgAAAVE"]
[Thu Apr 23 08:11:04.734674 2026] [:error] [pid 25635:tid 25646] [client 51.107.217.123:40045] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeljmMRxv6UsgRGKB3LsHAAAAQc"]
[Thu Apr 23 08:11:05.292671 2026] [:error] [pid 42972:tid 43036] [client 51.107.217.123:40815] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeljmcOAb-3sOknsk4cvVwAAAFQ"]
[Thu Apr 23 08:11:06.087185 2026] [:error] [pid 65000:tid 65037] [client 51.107.217.123:45086] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeljmr6vRb9j6psK2ZbMFAAAAgQ"]
[Thu Apr 23 08:11:06.647522 2026] [:error] [pid 42973:tid 43066] [client 51.107.217.123:40044] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "aeljmm6I0QqmmmLTHE3jVAAAAJc"]
[Thu Apr 23 08:11:07.224120 2026] [:error] [pid 65000:tid 65050] [client 51.107.217.123:45473] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeljm76vRb9j6psK2ZbMGAAAAhE"]
[Thu Apr 23 08:11:07.774184 2026] [:error] [pid 42971:tid 43009] [client 51.107.217.123:40787] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeljmzEP2_5RswrH8bHAOAAAABc"]
[Thu Apr 23 08:11:08.378909 2026] [:error] [pid 65000:tid 65029] [client 51.107.217.123:48637] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeljnL6vRb9j6psK2ZbMHAAAAgA"]
[Thu Apr 23 08:11:08.904734 2026] [:error] [pid 42971:tid 43005] [client 51.107.217.123:42857] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aeljnDEP2_5RswrH8bHAOgAAABM"]
[Thu Apr 23 08:11:09.542563 2026] [:error] [pid 59700:tid 59709] [client 51.107.217.123:52359] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aeljnZXyGZJFeAIDWtl0mAAAAUc"]
[Thu Apr 23 08:11:10.084828 2026] [:error] [pid 65000:tid 65057] [client 51.107.217.123:64660] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aeljnr6vRb9j6psK2ZbMHQAAAhg"]
[Thu Apr 23 08:11:10.715777 2026] [:error] [pid 64998:tid 65014] [client 51.107.217.123:48613] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aeljnoV5EysYcTLjmwgxbQAAAcw"]
[Thu Apr 23 08:11:11.463876 2026] [:error] [pid 64967:tid 64972] [client 51.107.217.123:48632] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/edit.php"] [unique_id "aeljn4AV4GfOOdX8QzoewQAAAYM"]
[Thu Apr 23 08:11:12.097328 2026] [:error] [pid 64967:tid 64981] [client 51.107.217.123:56658] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "aeljoIAV4GfOOdX8QzoewgAAAYw"]
[Thu Apr 23 08:11:13.004246 2026] [:error] [pid 43083:tid 43105] [client 51.107.217.123:42852] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws48.php"] [unique_id "aeljoTC5hrvNXosL83LvogAAANQ"]
[Thu Apr 23 08:11:14.138565 2026] [proxy_fcgi:error] [pid 42971:tid 42990] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:14.420449 2026] [proxy_fcgi:error] [pid 42971:tid 42987] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:14.683578 2026] [proxy_fcgi:error] [pid 42971:tid 42997] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:15.145471 2026] [proxy_fcgi:error] [pid 42971:tid 43001] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:15.423792 2026] [proxy_fcgi:error] [pid 42971:tid 42989] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:15.688601 2026] [proxy_fcgi:error] [pid 42971:tid 42996] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:15.962968 2026] [proxy_fcgi:error] [pid 42971:tid 42998] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:16.233080 2026] [proxy_fcgi:error] [pid 42971:tid 42988] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:16.498106 2026] [proxy_fcgi:error] [pid 42971:tid 42999] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:16.762659 2026] [proxy_fcgi:error] [pid 42971:tid 43004] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:17.035744 2026] [proxy_fcgi:error] [pid 42971:tid 43000] [client 51.107.217.123:6439] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:11:17.305286 2026] [:error] [pid 42971:tid 42992] [client 51.107.217.123:6439] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeljpTEP2_5RswrH8bHASwAAAAY"]
[Thu Apr 23 08:11:18.468777 2026] [:error] [pid 65000:tid 65053] [client 51.107.217.123:6450] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeljpr6vRb9j6psK2ZbMHwAAAhQ"]
[Thu Apr 23 08:11:19.326146 2026] [:error] [pid 65000:tid 65037] [client 51.107.217.123:42816] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeljp76vRb9j6psK2ZbMIAAAAgQ"]
[Thu Apr 23 08:11:20.520845 2026] [:error] [pid 65000:tid 65056] [client 51.107.217.123:53233] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "aeljqL6vRb9j6psK2ZbMIgAAAhc"]
[Thu Apr 23 08:11:21.468712 2026] [:error] [pid 43083:tid 43092] [client 51.107.217.123:53228] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeljqTC5hrvNXosL83LvpwAAAMc"]
[Thu Apr 23 08:11:22.389317 2026] [:error] [pid 64967:tid 64980] [client 51.107.217.123:63362] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeljqoAV4GfOOdX8QzoexAAAAYs"]
[Thu Apr 23 08:11:23.371322 2026] [:error] [pid 64967:tid 64979] [client 51.107.217.123:53230] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeljq4AV4GfOOdX8QzoexQAAAYo"]
[Thu Apr 23 08:11:24.522346 2026] [:error] [pid 42972:tid 43034] [client 51.107.217.123:63363] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeljrMOAb-3sOknsk4cveAAAAFI"]
[Thu Apr 23 08:11:25.374600 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:63378] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeljrYV5EysYcTLjmwgxeQAAAdI"]
[Thu Apr 23 08:11:26.550493 2026] [:error] [pid 65000:tid 65045] [client 51.107.217.123:56655] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeljrr6vRb9j6psK2ZbMJQAAAgw"]
[Thu Apr 23 08:11:27.560390 2026] [:error] [pid 25635:tid 25642] [client 51.107.217.123:56947] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeljr8Rxv6UsgRGKB3LsJgAAAQM"]
[Thu Apr 23 08:11:28.429172 2026] [:error] [pid 42972:tid 43018] [client 51.107.217.123:50759] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aeljsMOAb-3sOknsk4cvfwAAAEI"]
[Thu Apr 23 08:11:29.082131 2026] [:error] [pid 65000:tid 65039] [client 51.107.217.123:42853] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aeljsb6vRb9j6psK2ZbMKAAAAgY"]
[Thu Apr 23 08:11:29.777331 2026] [:error] [pid 65000:tid 65040] [client 51.107.217.123:6564] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aeljsb6vRb9j6psK2ZbMKgAAAgc"]
[Thu Apr 23 08:11:30.711005 2026] [:error] [pid 43083:tid 43091] [client 51.107.217.123:62825] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aeljsjC5hrvNXosL83LvtgAAAMY"]
[Thu Apr 23 08:11:31.441598 2026] [:error] [pid 25635:tid 25646] [client 51.107.217.123:40748] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Jcrop.php"] [unique_id "aeljs8Rxv6UsgRGKB3LsKgAAAQc"]
[Thu Apr 23 08:11:32.079820 2026] [:error] [pid 65000:tid 65038] [client 51.107.217.123:63416] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeljtL6vRb9j6psK2ZbMMwAAAgU"]
[Thu Apr 23 08:11:32.772871 2026] [:error] [pid 64998:tid 65025] [client 51.107.217.123:50764] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeljtIV5EysYcTLjmwgxiAAAAdc"]
[Thu Apr 23 08:11:33.432914 2026] [:error] [pid 65000:tid 65048] [client 51.107.217.123:62827] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeljtb6vRb9j6psK2ZbMOwAAAg8"]
[Thu Apr 23 08:11:34.118789 2026] [:error] [pid 65000:tid 65041] [client 51.107.217.123:41188] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "aeljtr6vRb9j6psK2ZbMPgAAAgg"]
[Thu Apr 23 08:11:34.787548 2026] [:error] [pid 64998:tid 65011] [client 51.107.217.123:40740] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeljtoV5EysYcTLjmwgxjgAAAck"]
[Thu Apr 23 08:11:35.711577 2026] [:error] [pid 65000:tid 65049] [client 51.107.217.123:48090] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeljt76vRb9j6psK2ZbMQgAAAhA"]
[Thu Apr 23 08:11:36.310021 2026] [:error] [pid 65000:tid 65054] [client 51.107.217.123:48098] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeljuL6vRb9j6psK2ZbMRQAAAhU"]
[Thu Apr 23 08:11:37.361088 2026] [:error] [pid 65000:tid 65055] [client 51.107.217.123:56679] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "aeljub6vRb9j6psK2ZbMRgAAAhY"]
[Thu Apr 23 08:11:39.149158 2026] [:error] [pid 65000:tid 65045] [client 51.107.217.123:50814] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "aelju76vRb9j6psK2ZbMSQAAAgw"]
[Thu Apr 23 08:11:40.109825 2026] [:error] [pid 65000:tid 65041] [client 51.107.217.123:63405] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "aeljvL6vRb9j6psK2ZbMSwAAAgg"]
[Thu Apr 23 08:11:41.541436 2026] [:error] [pid 65000:tid 65046] [client 51.107.217.123:41155] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "aeljvb6vRb9j6psK2ZbMTAAAAg0"]
[Thu Apr 23 08:11:42.842681 2026] [:error] [pid 65000:tid 65057] [client 51.107.217.123:53191] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bnm.php"] [unique_id "aeljvr6vRb9j6psK2ZbMTQAAAhg"]
[Thu Apr 23 08:11:43.614941 2026] [:error] [pid 65000:tid 65031] [client 51.107.217.123:63380] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeljv76vRb9j6psK2ZbMTgAAAgI"]
[Thu Apr 23 08:11:44.687781 2026] [:error] [pid 42971:tid 43006] [client 51.107.217.123:6826] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeljwDEP2_5RswrH8bHATwAAABQ"]
[Thu Apr 23 08:11:45.712400 2026] [:error] [pid 59700:tid 59725] [client 51.107.217.123:6840] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeljwZXyGZJFeAIDWtl0nAAAAVc"]
[Thu Apr 23 08:11:46.567374 2026] [:error] [pid 42973:tid 43047] [client 51.107.217.123:50818] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "aeljwm6I0QqmmmLTHE3jWQAAAIQ"]
[Thu Apr 23 08:11:47.300562 2026] [:error] [pid 59700:tid 59707] [client 51.107.217.123:62803] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/users.php"] [unique_id "aeljw5XyGZJFeAIDWtl0nwAAAUU"]
[Thu Apr 23 08:11:48.196603 2026] [:error] [pid 59700:tid 59721] [client 51.107.217.123:51884] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/users.php"] [unique_id "aeljxJXyGZJFeAIDWtl0oQAAAVM"]
[Thu Apr 23 08:11:49.135474 2026] [:error] [pid 64998:tid 65015] [client 51.107.217.123:50753] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/users.php"] [unique_id "aeljxYV5EysYcTLjmwgxogAAAc0"]
[Thu Apr 23 08:11:50.078141 2026] [:error] [pid 42973:tid 43063] [client 51.107.217.123:41156] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/users.php"] [unique_id "aeljxm6I0QqmmmLTHE3jWgAAAJQ"]
[Thu Apr 23 08:11:50.841832 2026] [:error] [pid 65000:tid 65045] [client 51.107.217.123:62828] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aeljxr6vRb9j6psK2ZbMXAAAAgw"]
[Thu Apr 23 08:11:51.728030 2026] [:error] [pid 42971:tid 42995] [client 51.107.217.123:56939] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aeljxzEP2_5RswrH8bHAUQAAAAk"]
[Thu Apr 23 08:11:52.563585 2026] [:error] [pid 65000:tid 65029] [client 51.107.217.123:56943] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aeljyL6vRb9j6psK2ZbMXwAAAgA"]
[Thu Apr 23 08:11:53.308383 2026] [:error] [pid 43083:tid 43091] [client 51.107.217.123:41170] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/s.php"] [unique_id "aeljyTC5hrvNXosL83Lv2QAAAMY"]
[Thu Apr 23 08:11:54.095803 2026] [:error] [pid 65000:tid 65051] [client 51.107.217.123:53212] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tymn.php"] [unique_id "aeljyr6vRb9j6psK2ZbMYgAAAhI"]
[Thu Apr 23 08:11:54.940530 2026] [:error] [pid 64998:tid 65009] [client 51.107.217.123:6440] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tymn.php"] [unique_id "aeljyoV5EysYcTLjmwgxqgAAAcc"]
[Thu Apr 23 08:11:55.578749 2026] [:error] [pid 64998:tid 65011] [client 51.107.217.123:56225] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tymn.php"] [unique_id "aeljy4V5EysYcTLjmwgxrQAAAck"]
[Thu Apr 23 08:11:56.333200 2026] [:error] [pid 64967:tid 64983] [client 51.107.217.123:41200] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tymn.php"] [unique_id "aeljzIAV4GfOOdX8QzoezwAAAY4"]
[Thu Apr 23 08:11:57.440059 2026] [:error] [pid 64998:tid 65003] [client 51.107.217.123:48589] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeljzYV5EysYcTLjmwgxtQAAAcE"]
[Thu Apr 23 08:11:58.196033 2026] [:error] [pid 65000:tid 65031] [client 51.107.217.123:41183] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeljzr6vRb9j6psK2ZbMagAAAgI"]
[Thu Apr 23 08:11:59.519951 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:56685] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aeljz4V5EysYcTLjmwgxwAAAAdI"]
[Thu Apr 23 08:12:00.526659 2026] [:error] [pid 42971:tid 43002] [client 51.107.217.123:53189] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "aelj0DEP2_5RswrH8bHAWgAAABA"]
[Thu Apr 23 08:12:01.245570 2026] [:error] [pid 65000:tid 65044] [client 51.107.217.123:42842] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aelj0b6vRb9j6psK2ZbMcAAAAgs"]
[Thu Apr 23 08:12:02.433927 2026] [:error] [pid 42971:tid 43010] [client 51.107.217.123:38460] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aelj0jEP2_5RswrH8bHAXAAAABg"]
[Thu Apr 23 08:12:03.401923 2026] [:error] [pid 64998:tid 65009] [client 51.107.217.123:38846] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aelj04V5EysYcTLjmwgxywAAAcc"]
[Thu Apr 23 08:12:04.321688 2026] [:error] [pid 64998:tid 65002] [client 51.107.217.123:48604] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aelj1IV5EysYcTLjmwgx0AAAAcA"]
[Thu Apr 23 08:12:05.099815 2026] [:error] [pid 64998:tid 65024] [client 51.107.217.123:52356] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aelj1YV5EysYcTLjmwgx1gAAAdY"]
[Thu Apr 23 08:12:05.832218 2026] [:error] [pid 64998:tid 65008] [client 51.107.217.123:41166] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aelj1YV5EysYcTLjmwgx2gAAAcY"]
[Thu Apr 23 08:12:06.777167 2026] [:error] [pid 42971:tid 42994] [client 51.107.217.123:56229] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aelj1jEP2_5RswrH8bHAYQAAAAg"]
[Thu Apr 23 08:12:07.413377 2026] [:error] [pid 42972:tid 43035] [client 51.107.217.123:56204] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms.php"] [unique_id "aelj18OAb-3sOknsk4cvsgAAAFM"]
[Thu Apr 23 08:12:08.005633 2026] [:error] [pid 43083:tid 43104] [client 51.107.217.123:42831] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aelj2DC5hrvNXosL83Lv4AAAANM"]
[Thu Apr 23 08:12:08.881763 2026] [:error] [pid 43083:tid 43109] [client 51.107.217.123:38840] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aelj2DC5hrvNXosL83Lv4wAAANg"]
[Thu Apr 23 08:12:09.889088 2026] [:error] [pid 64998:tid 65017] [client 51.107.217.123:6428] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aelj2YV5EysYcTLjmwgx4AAAAc8"]
[Thu Apr 23 08:12:10.584349 2026] [:error] [pid 64967:tid 64979] [client 51.107.217.123:48607] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aelj2oAV4GfOOdX8Qzoe0gAAAYo"]
[Thu Apr 23 08:12:11.221521 2026] [:error] [pid 59700:tid 59712] [client 51.107.217.123:45062] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "aelj25XyGZJFeAIDWtl0qgAAAUo"]
[Thu Apr 23 08:12:11.917505 2026] [:error] [pid 42971:tid 43001] [client 51.107.217.123:45057] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "aelj2zEP2_5RswrH8bHAZAAAAA8"]
[Thu Apr 23 08:12:12.548301 2026] [:error] [pid 64998:tid 65015] [client 51.107.217.123:6449] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "aelj3IV5EysYcTLjmwgx7AAAAc0"]
[Thu Apr 23 08:12:13.164110 2026] [:error] [pid 64998:tid 65002] [client 51.107.217.123:52367] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "aelj3YV5EysYcTLjmwgx7wAAAcA"]
[Thu Apr 23 08:12:14.045963 2026] [:error] [pid 64998:tid 65012] [client 51.107.217.123:48579] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aelj3oV5EysYcTLjmwgyBAAAAco"]
[Thu Apr 23 08:12:14.676398 2026] [:error] [pid 42972:tid 43032] [client 51.107.217.123:52363] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aelj3sOAb-3sOknsk4cvtwAAAFA"]
[Thu Apr 23 08:12:15.477058 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:39510] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aelj34V5EysYcTLjmwgyJAAAAdI"]
[Thu Apr 23 08:12:16.325216 2026] [:error] [pid 65000:tid 65056] [client 51.107.217.123:44747] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aelj4L6vRb9j6psK2ZbMfgAAAhc"]
[Thu Apr 23 08:12:16.908404 2026] [:error] [pid 65000:tid 65054] [client 51.107.217.123:44757] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aelj4L6vRb9j6psK2ZbMhAAAAhU"]
[Thu Apr 23 08:12:17.443163 2026] [proxy_fcgi:error] [pid 65000:tid 65047] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:17.722432 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:18.025176 2026] [proxy_fcgi:error] [pid 65000:tid 65039] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:18.288460 2026] [proxy_fcgi:error] [pid 65000:tid 65029] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:18.618692 2026] [proxy_fcgi:error] [pid 65000:tid 65043] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:18.889004 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:19.154559 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:19.512344 2026] [proxy_fcgi:error] [pid 65000:tid 65038] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:19.776881 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:20.041607 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:20.307108 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 51.107.217.123:62803] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:12:20.597008 2026] [:error] [pid 65000:tid 65045] [client 51.107.217.123:62803] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "aelj5L6vRb9j6psK2ZbMlQAAAgw"]
[Thu Apr 23 08:12:21.524560 2026] [:error] [pid 64998:tid 65024] [client 51.107.217.123:61839] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "aelj5YV5EysYcTLjmwgyOwAAAdY"]
[Thu Apr 23 08:12:22.212902 2026] [:error] [pid 64998:tid 65021] [client 51.107.217.123:39208] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "aelj5oV5EysYcTLjmwgyQgAAAdM"]
[Thu Apr 23 08:12:23.133611 2026] [:error] [pid 42971:tid 43006] [client 51.107.217.123:50361] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "aelj5zEP2_5RswrH8bHAbwAAABQ"]
[Thu Apr 23 08:12:23.748216 2026] [:error] [pid 64998:tid 65004] [client 51.107.217.123:55737] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adoms.php"] [unique_id "aelj54V5EysYcTLjmwgySgAAAcI"]
[Thu Apr 23 08:12:24.393403 2026] [:error] [pid 64998:tid 65023] [client 51.107.217.123:43523] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adoms.php"] [unique_id "aelj6IV5EysYcTLjmwgySwAAAdU"]
[Thu Apr 23 08:12:24.923037 2026] [:error] [pid 65000:tid 65032] [client 51.107.217.123:40292] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adoms.php"] [unique_id "aelj6L6vRb9j6psK2ZbMnAAAAgM"]
[Thu Apr 23 08:12:25.599084 2026] [:error] [pid 65000:tid 65045] [client 51.107.217.123:40319] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adoms.php"] [unique_id "aelj6b6vRb9j6psK2ZbMoQAAAgw"]
[Thu Apr 23 08:12:26.124343 2026] [:error] [pid 65000:tid 65030] [client 51.107.217.123:42000] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "aelj6r6vRb9j6psK2ZbMpAAAAgE"]
[Thu Apr 23 08:12:26.741885 2026] [:error] [pid 65000:tid 65037] [client 51.107.217.123:41136] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "aelj6r6vRb9j6psK2ZbMpwAAAgQ"]
[Thu Apr 23 08:12:27.538162 2026] [:error] [pid 42972:tid 43038] [client 51.107.217.123:6214] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "aelj68OAb-3sOknsk4cvuAAAAFY"]
[Thu Apr 23 08:12:28.291112 2026] [:error] [pid 59700:tid 59710] [client 51.107.217.123:57134] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "aelj7JXyGZJFeAIDWtl0tQAAAUg"]
[Thu Apr 23 08:12:29.544586 2026] [:error] [pid 65000:tid 65042] [client 51.107.217.123:39166] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aelj7b6vRb9j6psK2ZbMsgAAAgk"]
[Thu Apr 23 08:12:30.828088 2026] [:error] [pid 43083:tid 43106] [client 51.107.217.123:38091] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aelj7jC5hrvNXosL83Lv6gAAANU"]
[Thu Apr 23 08:12:32.265554 2026] [:error] [pid 42971:tid 42988] [client 51.107.217.123:38123] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aelj8DEP2_5RswrH8bHAdQAAAAI"]
[Thu Apr 23 08:12:33.031002 2026] [:error] [pid 42971:tid 42996] [client 51.107.217.123:39300] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aelj8TEP2_5RswrH8bHAdwAAAAo"]
[Thu Apr 23 08:12:33.673185 2026] [:error] [pid 64998:tid 65026] [client 51.107.217.123:57136] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aelj8YV5EysYcTLjmwgyXAAAAdg"]
[Thu Apr 23 08:12:34.244486 2026] [:error] [pid 64998:tid 65007] [client 51.107.217.123:57107] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aelj8oV5EysYcTLjmwgyXwAAAcU"]
[Thu Apr 23 08:12:34.854884 2026] [:error] [pid 64998:tid 65014] [client 51.107.217.123:62242] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aelj8oV5EysYcTLjmwgyYQAAAcw"]
[Thu Apr 23 08:12:35.557874 2026] [:error] [pid 42971:tid 42987] [client 51.107.217.123:6243] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an.php"] [unique_id "aelj8zEP2_5RswrH8bHAeAAAAAE"]
[Thu Apr 23 08:12:36.215025 2026] [:error] [pid 64998:tid 65019] [client 51.107.217.123:39315] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aelj9IV5EysYcTLjmwgyZAAAAdE"]
[Thu Apr 23 08:12:37.019528 2026] [:error] [pid 65000:tid 65040] [client 51.107.217.123:43566] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aelj9b6vRb9j6psK2ZbMwgAAAgc"]
[Thu Apr 23 08:12:37.824790 2026] [:error] [pid 65000:tid 65037] [client 51.107.217.123:41107] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aelj9b6vRb9j6psK2ZbMxQAAAgQ"]
[Thu Apr 23 08:12:38.567831 2026] [:error] [pid 43083:tid 43087] [client 51.107.217.123:41149] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "aelj9jC5hrvNXosL83Lv7AAAAMI"]
[Thu Apr 23 08:12:39.316338 2026] [:error] [pid 64998:tid 65003] [client 51.107.217.123:43567] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aelj94V5EysYcTLjmwgyagAAAcE"]
[Thu Apr 23 08:12:39.974018 2026] [:error] [pid 43083:tid 43102] [client 51.107.217.123:41112] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aelj9zC5hrvNXosL83Lv7wAAANE"]
[Thu Apr 23 08:12:40.612019 2026] [:error] [pid 43083:tid 43109] [client 51.107.217.123:42464] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aelj-DC5hrvNXosL83Lv8QAAANg"]
[Thu Apr 23 08:12:41.138269 2026] [:error] [pid 25635:tid 25647] [client 51.107.217.123:6267] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "aelj-cRxv6UsgRGKB3LsNQAAAQg"]
[Thu Apr 23 08:12:41.705811 2026] [:error] [pid 65000:tid 65044] [client 51.107.217.123:39355] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "aelj-b6vRb9j6psK2ZbMyAAAAgs"]
[Thu Apr 23 08:12:42.296888 2026] [:error] [pid 65000:tid 65048] [client 51.107.217.123:62229] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "aelj-r6vRb9j6psK2ZbMywAAAg8"]
[Thu Apr 23 08:12:42.945596 2026] [:error] [pid 65000:tid 65053] [client 51.107.217.123:7070] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "aelj-r6vRb9j6psK2ZbMzQAAAhQ"]
[Thu Apr 23 08:12:43.656880 2026] [:error] [pid 65000:tid 65029] [client 51.107.217.123:6868] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "aelj-76vRb9j6psK2ZbMzgAAAgA"]
[Thu Apr 23 08:12:44.418177 2026] [:error] [pid 65000:tid 65039] [client 51.107.217.123:62270] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aelj_L6vRb9j6psK2ZbM0QAAAgY"]
[Thu Apr 23 08:12:44.984084 2026] [:error] [pid 64998:tid 65017] [client 51.107.217.123:38477] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aelj_IV5EysYcTLjmwgycQAAAc8"]
[Thu Apr 23 08:12:45.627016 2026] [:error] [pid 64998:tid 65020] [client 51.107.217.123:38613] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aelj_YV5EysYcTLjmwgydAAAAdI"]
[Thu Apr 23 08:12:46.330765 2026] [:error] [pid 59700:tid 59705] [client 51.107.217.123:62265] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gaza.php"] [unique_id "aelj_pXyGZJFeAIDWtl0uQAAAUM"]
[Thu Apr 23 08:12:47.067834 2026] [:error] [pid 43083:tid 43101] [client 51.107.217.123:38527] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aelj_zC5hrvNXosL83Lv9QAAANA"]
[Thu Apr 23 08:12:47.709605 2026] [:error] [pid 64998:tid 65013] [client 51.107.217.123:57149] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aelj_4V5EysYcTLjmwgyewAAAcs"]
[Thu Apr 23 08:12:48.372447 2026] [:error] [pid 64998:tid 65026] [client 51.107.217.123:38640] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aelkAIV5EysYcTLjmwgyfwAAAdg"]
[Thu Apr 23 08:12:48.997513 2026] [:error] [pid 64998:tid 65018] [client 51.107.217.123:38497] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "aelkAIV5EysYcTLjmwgygQAAAdA"]
[Thu Apr 23 08:12:49.558148 2026] [:error] [pid 64998:tid 65009] [client 51.107.217.123:38616] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aelkAYV5EysYcTLjmwgygwAAAcc"]
[Thu Apr 23 08:12:50.441106 2026] [:error] [pid 42971:tid 43004] [client 51.107.217.123:38495] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aelkAjEP2_5RswrH8bHAeQAAABI"]
[Thu Apr 23 08:12:51.199310 2026] [:error] [pid 42972:tid 43033] [client 51.107.217.123:50287] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aelkA8OAb-3sOknsk4cvxAAAAFE"]
[Thu Apr 23 08:12:51.799631 2026] [:error] [pid 64998:tid 65008] [client 51.107.217.123:43606] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "aelkA4V5EysYcTLjmwgyiQAAAcY"]
[Thu Apr 23 08:12:52.618173 2026] [:error] [pid 64998:tid 65026] [client 51.107.217.123:42793] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aelkBIV5EysYcTLjmwgykAAAAdg"]
[Thu Apr 23 08:12:53.304814 2026] [:error] [pid 64998:tid 65023] [client 51.107.217.123:41720] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aelkBYV5EysYcTLjmwgykwAAAdU"]
[Thu Apr 23 08:12:54.144789 2026] [:error] [pid 42971:tid 42993] [client 51.107.217.123:41670] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aelkBjEP2_5RswrH8bHAfgAAAAc"]
[Thu Apr 23 08:12:54.750348 2026] [:error] [pid 65000:tid 65055] [client 51.107.217.123:51808] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws82.php"] [unique_id "aelkBr6vRb9j6psK2ZbM2QAAAhY"]
[Thu Apr 23 08:12:55.271323 2026] [:error] [pid 42971:tid 42995] [client 51.107.217.123:40459] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aelkBzEP2_5RswrH8bHAgQAAAAk"]
[Thu Apr 23 08:12:55.945322 2026] [:error] [pid 42971:tid 42997] [client 51.107.217.123:48910] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aelkBzEP2_5RswrH8bHAhAAAAAs"]
[Thu Apr 23 08:12:56.541867 2026] [:error] [pid 65000:tid 65030] [client 51.107.217.123:51884] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aelkCL6vRb9j6psK2ZbM2wAAAgE"]
[Thu Apr 23 08:12:57.112324 2026] [:error] [pid 59700:tid 59715] [client 51.107.217.123:65403] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aelkCZXyGZJFeAIDWtl0ugAAAU0"]
[Thu Apr 23 08:12:57.717885 2026] [:error] [pid 59700:tid 59724] [client 51.107.217.123:43642] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aelkCZXyGZJFeAIDWtl0vAAAAVY"]
[Thu Apr 23 08:12:58.549368 2026] [:error] [pid 59700:tid 59712] [client 51.107.217.123:46516] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aelkCpXyGZJFeAIDWtl0vQAAAUo"]
[Thu Apr 23 08:12:59.501774 2026] [:error] [pid 65000:tid 65054] [client 51.107.217.123:40222] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aelkC76vRb9j6psK2ZbM5QAAAhU"]
[Thu Apr 23 08:13:00.221239 2026] [:error] [pid 65000:tid 65047] [client 51.107.217.123:65296] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yw5bi63u.php"] [unique_id "aelkDL6vRb9j6psK2ZbM6gAAAg4"]
[Thu Apr 23 08:13:00.858966 2026] [:error] [pid 65000:tid 65051] [client 51.107.217.123:64032] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aelkDL6vRb9j6psK2ZbM7gAAAhI"]
[Thu Apr 23 08:13:01.498384 2026] [:error] [pid 65000:tid 65044] [client 51.107.217.123:48571] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aelkDb6vRb9j6psK2ZbM7wAAAgs"]
[Thu Apr 23 08:13:02.149406 2026] [:error] [pid 64998:tid 65007] [client 51.107.217.123:45965] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aelkDoV5EysYcTLjmwgyowAAAcU"]
[Thu Apr 23 08:13:02.803827 2026] [:error] [pid 65000:tid 65054] [client 51.107.217.123:65313] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "aelkDr6vRb9j6psK2ZbM8QAAAhU"]
[Thu Apr 23 08:13:03.511019 2026] [:error] [pid 43083:tid 43102] [client 51.107.217.123:38401] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aelkDzC5hrvNXosL83Lv_wAAANE"]
[Thu Apr 23 08:13:04.261070 2026] [:error] [pid 65000:tid 65032] [client 51.107.217.123:51358] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aelkEL6vRb9j6psK2ZbM9QAAAgM"]
[Thu Apr 23 08:13:05.022503 2026] [:error] [pid 64998:tid 65006] [client 51.107.217.123:50818] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aelkEYV5EysYcTLjmwgysAAAAcQ"]
[Thu Apr 23 08:13:05.795778 2026] [:error] [pid 64998:tid 65014] [client 51.107.217.123:38442] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "aelkEYV5EysYcTLjmwgytwAAAcw"]
[Thu Apr 23 08:13:06.416861 2026] [:error] [pid 64998:tid 65003] [client 51.107.217.123:64010] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aelkEoV5EysYcTLjmwgyuQAAAcE"]
[Thu Apr 23 08:13:07.024709 2026] [:error] [pid 59700:tid 59713] [client 51.107.217.123:47624] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aelkE5XyGZJFeAIDWtl0wQAAAUs"]
[Thu Apr 23 08:13:07.584628 2026] [:error] [pid 42971:tid 42990] [client 51.107.217.123:7166] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aelkEzEP2_5RswrH8bHAkAAAAAQ"]
[Thu Apr 23 08:13:08.287677 2026] [:error] [pid 42971:tid 43001] [client 51.107.217.123:51368] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aelkFDEP2_5RswrH8bHAkwAAAA8"]
[Thu Apr 23 08:13:09.031074 2026] [:error] [pid 64998:tid 65019] [client 51.107.217.123:64041] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aelkFYV5EysYcTLjmwgywAAAAdE"]
[Thu Apr 23 08:13:09.713869 2026] [:error] [pid 42973:tid 43054] [client 51.107.217.123:53269] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aelkFW6I0QqmmmLTHE3jhAAAAIs"]
[Thu Apr 23 08:13:10.425506 2026] [:error] [pid 25635:tid 25648] [client 51.107.217.123:64718] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aelkFsRxv6UsgRGKB3LsNgAAAQk"]
[Thu Apr 23 08:13:11.028525 2026] [:error] [pid 42973:tid 43047] [client 51.107.217.123:39957] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aelkF26I0QqmmmLTHE3jhQAAAIQ"]
[Thu Apr 23 08:13:11.619972 2026] [:error] [pid 64967:tid 64973] [client 51.107.217.123:47207] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aelkF4AV4GfOOdX8QzofWQAAAYQ"]
[Thu Apr 23 08:13:12.198529 2026] [:error] [pid 64967:tid 64983] [client 51.107.217.123:47659] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aelkGIAV4GfOOdX8QzofWgAAAY4"]
[Thu Apr 23 08:13:12.808218 2026] [:error] [pid 64967:tid 64987] [client 51.107.217.123:47655] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aelkGIAV4GfOOdX8QzofXQAAAZI"]
[Thu Apr 23 08:13:13.512841 2026] [:error] [pid 43083:tid 43100] [client 51.107.217.123:64733] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mk.php"] [unique_id "aelkGTC5hrvNXosL83LwAwAAAM8"]
[Thu Apr 23 08:13:14.090550 2026] [:error] [pid 43083:tid 43096] [client 51.107.217.123:49311] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aelkGjC5hrvNXosL83LwBAAAAMs"]
[Thu Apr 23 08:13:14.618543 2026] [:error] [pid 42971:tid 42998] [client 51.107.217.123:38254] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aelkGjEP2_5RswrH8bHAlgAAAAw"]
[Thu Apr 23 08:13:15.259825 2026] [:error] [pid 64998:tid 65014] [client 51.107.217.123:47656] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aelkG4V5EysYcTLjmwgyzgAAAcw"]
[Thu Apr 23 08:13:15.896839 2026] [:error] [pid 64998:tid 65009] [client 51.107.217.123:41648] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aelkG4V5EysYcTLjmwgy0QAAAcc"]
[Thu Apr 23 08:13:16.421966 2026] [:error] [pid 64998:tid 65004] [client 51.107.217.123:64053] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aelkHIV5EysYcTLjmwgy1wAAAcI"]
[Thu Apr 23 08:13:17.234463 2026] [:error] [pid 64998:tid 65016] [client 51.107.217.123:39407] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aelkHYV5EysYcTLjmwgy4QAAAc4"]
[Thu Apr 23 08:13:17.769978 2026] [:error] [pid 43083:tid 43091] [client 51.107.217.123:47216] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aelkHTC5hrvNXosL83LwCgAAAMY"]
[Thu Apr 23 08:13:18.410321 2026] [:error] [pid 59700:tid 59723] [client 51.107.217.123:41625] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "aelkHpXyGZJFeAIDWtl0zQAAAVU"]
[Thu Apr 23 08:13:18.944900 2026] [:error] [pid 43083:tid 43109] [client 51.107.217.123:49326] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/retu11.PhP7"] [unique_id "aelkHjC5hrvNXosL83LwEwAAANg"]
[Thu Apr 23 08:13:19.675444 2026] [:error] [pid 65000:tid 65031] [client 51.107.217.123:64757] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/retu11.PhP7"] [unique_id "aelkH76vRb9j6psK2ZbNAwAAAgI"]
[Thu Apr 23 08:13:20.657068 2026] [proxy_fcgi:error] [pid 65000:tid 65032] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:20.932167 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:21.195422 2026] [proxy_fcgi:error] [pid 65000:tid 65037] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:21.543202 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:21.807193 2026] [proxy_fcgi:error] [pid 65000:tid 65048] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:22.069629 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:22.344540 2026] [proxy_fcgi:error] [pid 65000:tid 65057] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:22.617437 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:22.882669 2026] [proxy_fcgi:error] [pid 65000:tid 65055] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:23.149194 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 51.107.217.123:47189] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 08:13:24.131742 2026] [:error] [pid 65000:tid 65030] [client 51.107.217.123:47189] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aelkJL6vRb9j6psK2ZbNHgAAAgE"]
[Thu Apr 23 08:13:24.857156 2026] [:error] [pid 59700:tid 59707] [client 51.107.217.123:42408] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aelkJJXyGZJFeAIDWtl03AAAAUU"]
[Thu Apr 23 08:13:25.657470 2026] [:error] [pid 43083:tid 43109] [client 51.107.217.123:43216] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aelkJTC5hrvNXosL83LwIAAAANg"]
[Thu Apr 23 08:13:26.393386 2026] [:error] [pid 42973:tid 43059] [client 51.107.217.123:6732] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "aelkJm6I0QqmmmLTHE3jkAAAAJA"]
[Thu Apr 23 08:13:26.969846 2026] [:error] [pid 42971:tid 42986] [client 51.107.217.123:6609] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aelkJjEP2_5RswrH8bHAnQAAAAA"]
[Thu Apr 23 08:13:27.536663 2026] [:error] [pid 65000:tid 65044] [client 51.107.217.123:39377] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aelkJ76vRb9j6psK2ZbNKgAAAgs"]
[Thu Apr 23 08:13:28.080877 2026] [:error] [pid 43083:tid 43098] [client 51.107.217.123:6624] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aelkKDC5hrvNXosL83LwIwAAAM0"]
[Thu Apr 23 08:13:28.647649 2026] [:error] [pid 43083:tid 43094] [client 51.107.217.123:49293] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccs.php"] [unique_id "aelkKDC5hrvNXosL83LwJQAAAMk"]
[Thu Apr 23 08:13:29.221474 2026] [:error] [pid 42971:tid 42999] [client 51.107.217.123:38259] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aelkKTEP2_5RswrH8bHAoAAAAA0"]
[Thu Apr 23 08:13:29.876961 2026] [:error] [pid 64967:tid 64986] [client 51.107.217.123:6755] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aelkKYAV4GfOOdX8QzofZwAAAZE"]
[Thu Apr 23 08:13:30.606666 2026] [:error] [pid 64967:tid 64993] [client 51.107.217.123:38222] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aelkKoAV4GfOOdX8QzofagAAAZg"]
[Thu Apr 23 08:13:31.270912 2026] [:error] [pid 42971:tid 42995] [client 51.107.217.123:38540] [client 51.107.217.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/first.php"] [unique_id "aelkKzEP2_5RswrH8bHAogAAAAk"]
[Thu Apr 23 10:44:43.533431 2026] [:error] [pid 42973:tid 43054] [client 170.106.113.159:48016] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aemHm26I0QqmmmLTHE0e0AAAAIs"]
[Thu Apr 23 14:58:27.885864 2026] [proxy_fcgi:error] [pid 25635:tid 25660] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:28.213307 2026] [proxy_fcgi:error] [pid 25635:tid 25655] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:28.481561 2026] [proxy_fcgi:error] [pid 25635:tid 25657] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:28.790509 2026] [proxy_fcgi:error] [pid 25635:tid 25662] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:29.058043 2026] [proxy_fcgi:error] [pid 25635:tid 25643] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:29.392338 2026] [proxy_fcgi:error] [pid 25635:tid 25646] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:29.738266 2026] [proxy_fcgi:error] [pid 25635:tid 25653] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:30.349836 2026] [proxy_fcgi:error] [pid 25635:tid 25654] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:30.658655 2026] [proxy_fcgi:error] [pid 25635:tid 25649] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:30.963543 2026] [proxy_fcgi:error] [pid 25635:tid 25652] [client 20.151.104.6:4663] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 14:58:31.265576 2026] [:error] [pid 25635:tid 25656] [client 20.151.104.6:4663] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aenDF8Rxv6UsgRGKB3IYFAAAARE"]
[Thu Apr 23 14:58:32.774632 2026] [:error] [pid 42972:tid 43020] [client 20.151.104.6:4616] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aenDGMOAb-3sOknsk4en1gAAAEQ"]
[Thu Apr 23 14:58:39.004128 2026] [:error] [pid 42971:tid 42991] [client 20.151.104.6:4516] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aenDHzEP2_5RswrH8bEDYwAAAAU"]
[Thu Apr 23 14:58:40.781764 2026] [:error] [pid 64967:tid 64981] [client 20.151.104.6:5105] [client 20.151.104.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "aenDIIAV4GfOOdX8QzpSAQAAAYw"]
[Thu Apr 23 15:19:36.273111 2026] [:error] [pid 64998:tid 65007] [client 43.134.236.33:57322] [client 43.134.236.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aenICIV5EysYcTLjmwjf-AAAAcU"]
[Thu Apr 23 16:55:03.158836 2026] [:error] [pid 42972:tid 43021] [client 43.133.66.51:51836] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeneZ8OAb-3sOknsk4fYewAAAEU"]
[Thu Apr 23 23:00:36.303400 2026] [:error] [pid 65000:tid 65040] [client 150.109.119.38:51980] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeo0FL6vRb9j6psK2ZbLeAAAAgc"]
[Thu Apr 23 23:01:37.770952 2026] [:error] [pid 25635:tid 25653] [client 8.229.166.217:36308] [client 8.229.166.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aeo0UcRxv6UsgRGKB3I8pwAAAQ4"]
[Thu Apr 23 23:43:29.663056 2026] [autoindex:error] [pid 42973:tid 43065] [client 173.239.218.36:33063] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 00:11:17.174894 2026] [:error] [pid 65000:tid 65041] [client 110.166.71.39:49583] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aepEpb6vRb9j6psK2ZYQGwAAAgg"]
[Fri Apr 24 01:33:33.978588 2026] [autoindex:error] [pid 59700:tid 59721] [client 164.68.118.19:51201] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 24 02:40:31.151482 2026] [proxy_fcgi:error] [pid 65000:tid 65052] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:40:31.393156 2026] [proxy_fcgi:error] [pid 65000:tid 65040] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:40:31.636110 2026] [proxy_fcgi:error] [pid 65000:tid 65045] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:40:31.878035 2026] [proxy_fcgi:error] [pid 65000:tid 65053] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:40:32.120275 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:40:32.364537 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 02:40:32.606673 2026] [proxy_fcgi:error] [pid 65000:tid 65044] [client 4.232.81.229:30966] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 05:15:17.199495 2026] [:error] [pid 19200:tid 19221] [client 170.106.197.109:49030] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeqL5TQ--M3-tsKAnhGD2wAAAM0"]
[Fri Apr 24 05:26:22.645656 2026] [:error] [pid 19102:tid 19178] [client 145.239.10.137:51843] [client 145.239.10.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "aeqOfgDSgrbLEZbkqD6xewAAAI4"], referer: http://measureyourbrand.com/fm.php
[Fri Apr 24 07:14:35.172917 2026] [:error] [pid 19102:tid 19178] [client 43.159.138.217:44796] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aeqn2wDSgrbLEZbkqD7gRwAAAI4"]
[Fri Apr 24 08:18:05.914882 2026] [:error] [pid 52129:tid 52144] [client 46.101.164.103:49274] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "aeq2veKCZKf8_u2LKiADTgAAAQs"]
[Fri Apr 24 08:18:05.926249 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 46.101.164.103:49274] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:17.920290 2026] [proxy_fcgi:error] [pid 52129:tid 52145] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:18.191936 2026] [proxy_fcgi:error] [pid 52129:tid 52136] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:18.463755 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:18.738856 2026] [proxy_fcgi:error] [pid 52129:tid 52146] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:19.026587 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:19.313544 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:19.630866 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:19.916220 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:20.188302 2026] [proxy_fcgi:error] [pid 52129:tid 52153] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:20.459183 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.238.82.232:21759] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:38:20.727673 2026] [:error] [pid 52129:tid 52141] [client 20.238.82.232:21759] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-In.php"] [unique_id "aeq7fOKCZKf8_u2LKiATmQAAAQg"]
[Fri Apr 24 08:38:23.504061 2026] [:error] [pid 19102:tid 19180] [client 20.238.82.232:22993] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-In.php"] [unique_id "aeq7fwDSgrbLEZbkqD4n5wAAAJA"]
[Fri Apr 24 08:38:28.164580 2026] [:error] [pid 52129:tid 52133] [client 20.238.82.232:7180] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-In.php"] [unique_id "aeq7hOKCZKf8_u2LKiATqgAAAQA"]
[Fri Apr 24 08:38:30.707000 2026] [:error] [pid 19102:tid 19182] [client 20.238.82.232:56428] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/G-In.php"] [unique_id "aeq7hgDSgrbLEZbkqD4n-AAAAJI"]
[Fri Apr 24 08:38:33.026726 2026] [:error] [pid 52129:tid 52147] [client 20.238.82.232:7558] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj11.php"] [unique_id "aeq7ieKCZKf8_u2LKiATtgAAAQ4"]
[Fri Apr 24 08:38:35.160828 2026] [:error] [pid 19102:tid 19166] [client 20.238.82.232:40067] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj11.php"] [unique_id "aeq7iwDSgrbLEZbkqD4oAQAAAII"]
[Fri Apr 24 08:38:39.267355 2026] [:error] [pid 52129:tid 52144] [client 20.238.82.232:7596] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj11.php"] [unique_id "aeq7j-KCZKf8_u2LKiAT0gAAAQs"]
[Fri Apr 24 08:38:41.814976 2026] [:error] [pid 52129:tid 52134] [client 20.238.82.232:43426] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aj11.php"] [unique_id "aeq7keKCZKf8_u2LKiAT4QAAAQE"]
[Fri Apr 24 08:38:43.555180 2026] [:error] [pid 19102:tid 19164] [client 20.238.82.232:43392] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "aeq7kwDSgrbLEZbkqD4oEAAAAIA"]
[Fri Apr 24 08:38:45.057277 2026] [:error] [pid 52129:tid 52135] [client 20.238.82.232:22283] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "aeq7leKCZKf8_u2LKiAT8QAAAQI"]
[Fri Apr 24 08:38:46.770993 2026] [:error] [pid 52129:tid 52135] [client 20.238.82.232:22306] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "aeq7luKCZKf8_u2LKiAT_gAAAQI"]
[Fri Apr 24 08:38:51.373354 2026] [:error] [pid 52129:tid 52137] [client 20.238.82.232:22344] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "aeq7m-KCZKf8_u2LKiAUKwAAAQQ"]
[Fri Apr 24 08:38:53.486922 2026] [:error] [pid 52129:tid 52140] [client 20.238.82.232:8357] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeq7neKCZKf8_u2LKiAUNwAAAQc"]
[Fri Apr 24 08:38:57.754315 2026] [:error] [pid 19102:tid 19185] [client 20.238.82.232:47856] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeq7oQDSgrbLEZbkqD4oLgAAAJU"]
[Fri Apr 24 08:39:01.050961 2026] [:error] [pid 52129:tid 52135] [client 20.238.82.232:9772] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeq7peKCZKf8_u2LKiAUWQAAAQI"]
[Fri Apr 24 08:39:04.241469 2026] [:error] [pid 19100:tid 19128] [client 20.238.82.232:9747] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot.php"] [unique_id "aeq7qLF_hzQs4CqbifdULAAAABI"]
[Fri Apr 24 08:39:08.280604 2026] [:error] [pid 52129:tid 52151] [client 20.238.82.232:64855] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeq7rOKCZKf8_u2LKiAUbgAAARI"]
[Fri Apr 24 08:39:15.700640 2026] [:error] [pid 19101:tid 19141] [client 20.238.82.232:58698] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tea.php"] [unique_id "aeq7s2AHj9bEvrTgbO0eJAAAAEQ"]
[Fri Apr 24 08:39:21.394312 2026] [proxy_fcgi:error] [pid 52129:tid 52143] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:21.687059 2026] [proxy_fcgi:error] [pid 52129:tid 52157] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:21.961122 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:23.372494 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:23.649757 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:23.925382 2026] [proxy_fcgi:error] [pid 52129:tid 52134] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:24.201649 2026] [proxy_fcgi:error] [pid 52129:tid 52137] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:24.476898 2026] [proxy_fcgi:error] [pid 52129:tid 52138] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:24.753012 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:25.029899 2026] [proxy_fcgi:error] [pid 52129:tid 52148] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:25.307492 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.238.82.232:7402] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:39:25.580207 2026] [:error] [pid 52129:tid 52135] [client 20.238.82.232:7402] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6ap7e.php"] [unique_id "aeq7veKCZKf8_u2LKiAVGQAAAQI"]
[Fri Apr 24 08:39:29.238056 2026] [:error] [pid 19200:tid 19217] [client 20.238.82.232:14359] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6ap7e.php"] [unique_id "aeq7wTQ--M3-tsKAnhEbXwAAAMk"]
[Fri Apr 24 08:39:33.079636 2026] [:error] [pid 19100:tid 19134] [client 20.238.82.232:29402] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6ap7e.php"] [unique_id "aeq7xbF_hzQs4CqbifdUYQAAABg"]
[Fri Apr 24 08:39:34.237441 2026] [:error] [pid 19102:tid 19180] [client 20.238.82.232:44031] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6ap7e.php"] [unique_id "aeq7xgDSgrbLEZbkqD4o3gAAAJA"]
[Fri Apr 24 08:39:36.149713 2026] [:error] [pid 19200:tid 19216] [client 20.238.82.232:14346] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeq7yDQ--M3-tsKAnhEbiAAAAMg"]
[Fri Apr 24 08:39:39.293210 2026] [:error] [pid 52129:tid 52136] [client 20.238.82.232:44875] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeq7y-KCZKf8_u2LKiAVPgAAAQM"]
[Fri Apr 24 08:39:41.224967 2026] [:error] [pid 52129:tid 52156] [client 20.238.82.232:19788] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeq7zeKCZKf8_u2LKiAVSwAAARc"]
[Fri Apr 24 08:39:44.807651 2026] [:error] [pid 19102:tid 19184] [client 20.238.82.232:35280] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aeq70ADSgrbLEZbkqD4o7wAAAJQ"]
[Fri Apr 24 08:39:49.011730 2026] [:error] [pid 52129:tid 52148] [client 20.238.82.232:19811] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeq71eKCZKf8_u2LKiAVZwAAAQ8"]
[Fri Apr 24 08:39:51.613318 2026] [:error] [pid 19101:tid 19138] [client 20.238.82.232:31341] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeq712AHj9bEvrTgbO0ecQAAAEE"]
[Fri Apr 24 08:39:54.694733 2026] [:error] [pid 19102:tid 19176] [client 20.238.82.232:42810] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeq72gDSgrbLEZbkqD4pDwAAAIw"]
[Fri Apr 24 08:39:56.365929 2026] [:error] [pid 19200:tid 19220] [client 20.238.82.232:26127] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "aeq73DQ--M3-tsKAnhEbxgAAAMw"]
[Fri Apr 24 08:40:00.568881 2026] [:error] [pid 19200:tid 19223] [client 20.238.82.232:65166] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeq74DQ--M3-tsKAnhEb1QAAAM8"]
[Fri Apr 24 08:40:03.718905 2026] [:error] [pid 19101:tid 19157] [client 20.238.82.232:42802] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeq742AHj9bEvrTgbO0eeAAAAFQ"]
[Fri Apr 24 08:40:07.764036 2026] [:error] [pid 52129:tid 52148] [client 20.238.82.232:42826] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeq75-KCZKf8_u2LKiAVewAAAQ8"]
[Fri Apr 24 08:40:09.860749 2026] [:error] [pid 52129:tid 52157] [client 20.238.82.232:30646] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aeq76eKCZKf8_u2LKiAVgwAAARg"]
[Fri Apr 24 08:40:11.856996 2026] [:error] [pid 52129:tid 52148] [client 20.238.82.232:23577] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeq76-KCZKf8_u2LKiAVjwAAAQ8"]
[Fri Apr 24 08:40:14.731395 2026] [:error] [pid 52129:tid 52141] [client 20.238.82.232:35287] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeq77uKCZKf8_u2LKiAVoAAAAQg"]
[Fri Apr 24 08:40:18.234831 2026] [:error] [pid 19101:tid 19139] [client 20.238.82.232:57015] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeq78mAHj9bEvrTgbO0ehAAAAEI"]
[Fri Apr 24 08:40:21.005383 2026] [:error] [pid 19101:tid 19154] [client 20.238.82.232:30610] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zogy1.php"] [unique_id "aeq79WAHj9bEvrTgbO0eiAAAAFE"]
[Fri Apr 24 08:40:23.578165 2026] [:error] [pid 52129:tid 52146] [client 20.238.82.232:23642] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "aeq79-KCZKf8_u2LKiAVtgAAAQ0"]
[Fri Apr 24 08:40:25.600883 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:25.891115 2026] [proxy_fcgi:error] [pid 52129:tid 52147] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:26.167752 2026] [proxy_fcgi:error] [pid 52129:tid 52150] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:26.449091 2026] [proxy_fcgi:error] [pid 52129:tid 52155] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:26.726892 2026] [proxy_fcgi:error] [pid 52129:tid 52139] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:27.003989 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:27.280905 2026] [proxy_fcgi:error] [pid 52129:tid 52149] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:27.566589 2026] [proxy_fcgi:error] [pid 52129:tid 52154] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:27.844252 2026] [proxy_fcgi:error] [pid 52129:tid 52140] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:28.125899 2026] [proxy_fcgi:error] [pid 52129:tid 52144] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:28.412965 2026] [proxy_fcgi:error] [pid 52129:tid 52152] [client 20.238.82.232:36607] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:40:28.686401 2026] [:error] [pid 52129:tid 52156] [client 20.238.82.232:36607] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aeq7_OKCZKf8_u2LKiAV4wAAARc"]
[Fri Apr 24 08:40:31.963893 2026] [:error] [pid 19102:tid 19188] [client 20.238.82.232:12497] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aeq7_wDSgrbLEZbkqD4pigAAAJg"]
[Fri Apr 24 08:40:35.367574 2026] [:error] [pid 52129:tid 52133] [client 20.238.82.232:56994] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aeq8A-KCZKf8_u2LKiAV9QAAAQA"]
[Fri Apr 24 08:40:42.716530 2026] [:error] [pid 52129:tid 52136] [client 20.238.82.232:23646] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "aeq8CuKCZKf8_u2LKiAWGwAAAQM"]
[Fri Apr 24 08:40:48.697163 2026] [:error] [pid 52129:tid 52149] [client 20.238.82.232:55805] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axe.php"] [unique_id "aeq8EOKCZKf8_u2LKiAWPAAAARA"]
[Fri Apr 24 08:40:52.731039 2026] [:error] [pid 52129:tid 52153] [client 20.238.82.232:62165] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axe.php"] [unique_id "aeq8FOKCZKf8_u2LKiAWXwAAARQ"]
[Fri Apr 24 08:40:56.593673 2026] [:error] [pid 19102:tid 19174] [client 20.238.82.232:36503] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axe.php"] [unique_id "aeq8GADSgrbLEZbkqD4psgAAAIo"]
[Fri Apr 24 08:41:03.133324 2026] [:error] [pid 19101:tid 19137] [client 20.238.82.232:29356] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "aeq8H2AHj9bEvrTgbO0e0wAAAEA"]
[Fri Apr 24 08:41:08.622344 2026] [:error] [pid 19102:tid 19183] [client 20.238.82.232:28148] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "aeq8JADSgrbLEZbkqD4pygAAAJM"]
[Fri Apr 24 08:41:10.392810 2026] [:error] [pid 19101:tid 19137] [client 20.238.82.232:21690] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "aeq8JmAHj9bEvrTgbO0e9wAAAEA"]
[Fri Apr 24 08:41:13.571809 2026] [:error] [pid 19101:tid 19144] [client 20.238.82.232:8802] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "aeq8KWAHj9bEvrTgbO0fBwAAAEc"]
[Fri Apr 24 08:41:19.496311 2026] [:error] [pid 19101:tid 19149] [client 20.238.82.232:44384] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeq8L2AHj9bEvrTgbO0fFgAAAEw"]
[Fri Apr 24 08:41:24.593695 2026] [:error] [pid 52129:tid 52157] [client 20.238.82.232:55056] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeq8NOKCZKf8_u2LKiAXHwAAARg"]
[Fri Apr 24 08:41:27.400722 2026] [:error] [pid 52129:tid 52134] [client 20.238.82.232:38926] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-01ul.php"] [unique_id "aeq8N-KCZKf8_u2LKiAXIwAAAQE"]
[Fri Apr 24 08:41:33.499682 2026] [proxy_fcgi:error] [pid 19102:tid 19171] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:33.776521 2026] [proxy_fcgi:error] [pid 19102:tid 19169] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:34.054999 2026] [proxy_fcgi:error] [pid 19102:tid 19173] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:34.337895 2026] [proxy_fcgi:error] [pid 19102:tid 19185] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:34.633125 2026] [proxy_fcgi:error] [pid 19102:tid 19174] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:34.909759 2026] [proxy_fcgi:error] [pid 19102:tid 19175] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:35.189129 2026] [proxy_fcgi:error] [pid 19102:tid 19167] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:35.466990 2026] [proxy_fcgi:error] [pid 19102:tid 19172] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:35.743749 2026] [proxy_fcgi:error] [pid 19102:tid 19171] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:36.024779 2026] [proxy_fcgi:error] [pid 19102:tid 19181] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:36.310250 2026] [proxy_fcgi:error] [pid 19102:tid 19180] [client 20.238.82.232:55078] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:41:36.583976 2026] [:error] [pid 19102:tid 19185] [client 20.238.82.232:55078] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpconf.php"] [unique_id "aeq8QADSgrbLEZbkqD4qDwAAAJU"]
[Fri Apr 24 08:41:41.130754 2026] [:error] [pid 19101:tid 19137] [client 20.238.82.232:8739] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpconf.php"] [unique_id "aeq8RWAHj9bEvrTgbO0fRAAAAEA"]
[Fri Apr 24 08:41:43.530348 2026] [:error] [pid 52129:tid 52154] [client 20.238.82.232:10171] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpconf.php"] [unique_id "aeq8R-KCZKf8_u2LKiAXWgAAARU"]
[Fri Apr 24 08:41:44.905845 2026] [:error] [pid 52129:tid 52156] [client 20.238.82.232:3650] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wpconf.php"] [unique_id "aeq8SOKCZKf8_u2LKiAXZgAAARc"]
[Fri Apr 24 08:41:47.712175 2026] [:error] [pid 19101:tid 19138] [client 20.238.82.232:7700] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeq8S2AHj9bEvrTgbO0fUQAAAEE"]
[Fri Apr 24 08:41:52.848422 2026] [:error] [pid 19200:tid 19229] [client 20.238.82.232:8714] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeq8UDQ--M3-tsKAnhEdJQAAANU"]
[Fri Apr 24 08:41:55.103072 2026] [:error] [pid 19200:tid 19213] [client 20.238.82.232:7508] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeq8UzQ--M3-tsKAnhEdKwAAAMU"]
[Fri Apr 24 08:41:56.593007 2026] [:error] [pid 19200:tid 19223] [client 20.238.82.232:3972] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aeq8VDQ--M3-tsKAnhEdMgAAAM8"]
[Fri Apr 24 08:41:59.718467 2026] [:error] [pid 19200:tid 19223] [client 20.238.82.232:3566] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-zx.php"] [unique_id "aeq8VzQ--M3-tsKAnhEdQAAAAM8"]
[Fri Apr 24 08:42:03.117669 2026] [:error] [pid 19100:tid 19112] [client 20.238.82.232:22954] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-zx.php"] [unique_id "aeq8W7F_hzQs4CqbifdVZQAAAAM"]
[Fri Apr 24 08:42:05.578594 2026] [:error] [pid 19102:tid 19175] [client 20.238.82.232:38918] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-zx.php"] [unique_id "aeq8XQDSgrbLEZbkqD4qVwAAAIs"]
[Fri Apr 24 08:42:08.734357 2026] [:error] [pid 52129:tid 52141] [client 20.238.82.232:32081] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-zx.php"] [unique_id "aeq8YOKCZKf8_u2LKiAXrwAAAQg"]
[Fri Apr 24 08:42:10.831015 2026] [:error] [pid 19200:tid 19219] [client 20.238.82.232:65250] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeq8YjQ--M3-tsKAnhEdYgAAAMs"]
[Fri Apr 24 08:42:15.243373 2026] [:error] [pid 19200:tid 19210] [client 20.238.82.232:25546] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeq8ZzQ--M3-tsKAnhEddgAAAMI"]
[Fri Apr 24 08:42:19.618133 2026] [:error] [pid 52129:tid 52155] [client 20.238.82.232:32743] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeq8a-KCZKf8_u2LKiAX3QAAARY"]
[Fri Apr 24 08:42:24.015344 2026] [:error] [pid 52129:tid 52137] [client 20.238.82.232:32048] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/000.php"] [unique_id "aeq8cOKCZKf8_u2LKiAX-wAAAQQ"]
[Fri Apr 24 08:42:27.933018 2026] [:error] [pid 19100:tid 19112] [client 20.238.82.232:40175] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "aeq8c7F_hzQs4CqbifdVrQAAAAM"]
[Fri Apr 24 08:42:29.932015 2026] [:error] [pid 19100:tid 19133] [client 20.238.82.232:40191] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "aeq8dbF_hzQs4CqbifdVswAAABc"]
[Fri Apr 24 08:42:34.159940 2026] [:error] [pid 19101:tid 19140] [client 20.238.82.232:19824] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "aeq8emAHj9bEvrTgbO0fiwAAAEM"]
[Fri Apr 24 08:42:38.426374 2026] [proxy_fcgi:error] [pid 19100:tid 19111] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:38.699543 2026] [proxy_fcgi:error] [pid 19100:tid 19112] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:38.971482 2026] [proxy_fcgi:error] [pid 19100:tid 19131] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:39.247152 2026] [proxy_fcgi:error] [pid 19100:tid 19109] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:39.527373 2026] [proxy_fcgi:error] [pid 19100:tid 19130] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:39.801615 2026] [proxy_fcgi:error] [pid 19100:tid 19124] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:40.082753 2026] [proxy_fcgi:error] [pid 19100:tid 19128] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:40.357441 2026] [proxy_fcgi:error] [pid 19100:tid 19127] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:40.637196 2026] [proxy_fcgi:error] [pid 19100:tid 19113] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:40.909442 2026] [proxy_fcgi:error] [pid 19100:tid 19114] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:41.184098 2026] [proxy_fcgi:error] [pid 19100:tid 19132] [client 20.238.82.232:22388] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:42:41.452367 2026] [:error] [pid 19100:tid 19129] [client 20.238.82.232:22388] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeq8gbF_hzQs4CqbifdV0AAAABM"]
[Fri Apr 24 08:42:48.151798 2026] [:error] [pid 52129:tid 52146] [client 20.238.82.232:22379] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeq8iOKCZKf8_u2LKiAYOAAAAQ0"]
[Fri Apr 24 08:42:53.385710 2026] [:error] [pid 52129:tid 52149] [client 20.238.82.232:40094] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "aeq8jeKCZKf8_u2LKiAYUgAAARA"]
[Fri Apr 24 08:42:58.943345 2026] [:error] [pid 52129:tid 52148] [client 20.238.82.232:25496] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbny.php"] [unique_id "aeq8kuKCZKf8_u2LKiAYeAAAAQ8"]
[Fri Apr 24 08:43:02.587923 2026] [:error] [pid 52129:tid 52143] [client 20.238.82.232:25527] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbny.php"] [unique_id "aeq8luKCZKf8_u2LKiAYgwAAAQo"]
[Fri Apr 24 08:43:05.922851 2026] [:error] [pid 19100:tid 19134] [client 20.238.82.232:33320] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbny.php"] [unique_id "aeq8mbF_hzQs4CqbifdV6AAAABg"]
[Fri Apr 24 08:43:08.327827 2026] [:error] [pid 52129:tid 52142] [client 20.238.82.232:38501] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bbny.php"] [unique_id "aeq8nOKCZKf8_u2LKiAYvQAAAQk"]
[Fri Apr 24 08:43:47.178741 2026] [proxy_fcgi:error] [pid 19100:tid 19124] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:47.513530 2026] [proxy_fcgi:error] [pid 19100:tid 19112] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:47.839354 2026] [proxy_fcgi:error] [pid 19100:tid 19128] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:48.169601 2026] [proxy_fcgi:error] [pid 19100:tid 19123] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:48.499083 2026] [proxy_fcgi:error] [pid 19100:tid 19130] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:48.824192 2026] [proxy_fcgi:error] [pid 19100:tid 19127] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:49.151685 2026] [proxy_fcgi:error] [pid 19100:tid 19110] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:49.475594 2026] [proxy_fcgi:error] [pid 19100:tid 19111] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:49.798029 2026] [proxy_fcgi:error] [pid 19100:tid 19109] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:50.121525 2026] [proxy_fcgi:error] [pid 19100:tid 19123] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:50.457023 2026] [proxy_fcgi:error] [pid 19100:tid 19116] [client 20.238.82.232:7624] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:43:50.790035 2026] [:error] [pid 19100:tid 19120] [client 20.238.82.232:7624] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filefuns.php"] [unique_id "aeq8xrF_hzQs4CqbifdWOQAAAAo"]
[Fri Apr 24 08:43:55.528998 2026] [:error] [pid 19101:tid 19138] [client 20.238.82.232:44827] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filefuns.php"] [unique_id "aeq8y2AHj9bEvrTgbO0gggAAAEE"]
[Fri Apr 24 08:43:59.989090 2026] [:error] [pid 19200:tid 19213] [client 20.238.82.232:22273] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filefuns.php"] [unique_id "aeq8zzQ--M3-tsKAnhEe0AAAAMU"]
[Fri Apr 24 08:44:02.502348 2026] [:error] [pid 19100:tid 19112] [client 20.238.82.232:12429] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filefuns.php"] [unique_id "aeq80rF_hzQs4CqbifdWZAAAAAM"]
[Fri Apr 24 08:44:05.256833 2026] [:error] [pid 19100:tid 19115] [client 20.238.82.232:7842] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "aeq81bF_hzQs4CqbifdWawAAAAY"]
[Fri Apr 24 08:44:06.988582 2026] [:error] [pid 19100:tid 19125] [client 20.238.82.232:57708] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "aeq81rF_hzQs4CqbifdWbQAAAA8"]
[Fri Apr 24 08:44:08.197529 2026] [:error] [pid 19101:tid 19137] [client 20.238.82.232:44851] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "aeq82GAHj9bEvrTgbO0guwAAAEA"]
[Fri Apr 24 08:44:11.315537 2026] [:error] [pid 52129:tid 52143] [client 20.238.82.232:7840] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ay.php"] [unique_id "aeq82-KCZKf8_u2LKiAZ3AAAAQo"]
[Fri Apr 24 08:44:12.919354 2026] [:error] [pid 19102:tid 19174] [client 20.238.82.232:53584] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "aeq83ADSgrbLEZbkqD4regAAAIo"]
[Fri Apr 24 08:44:16.952795 2026] [:error] [pid 19200:tid 19213] [client 20.238.82.232:7321] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "aeq84DQ--M3-tsKAnhEe_AAAAMU"]
[Fri Apr 24 08:44:20.603518 2026] [:error] [pid 19200:tid 19214] [client 20.238.82.232:42126] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "aeq85DQ--M3-tsKAnhEe_QAAAMY"]
[Fri Apr 24 08:44:23.807051 2026] [:error] [pid 19101:tid 19157] [client 20.238.82.232:7278] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "aeq852AHj9bEvrTgbO0g2QAAAFQ"]
[Fri Apr 24 08:44:24.715501 2026] [:error] [pid 19200:tid 19229] [client 20.238.82.232:7812] [client 20.238.82.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aeq86DQ--M3-tsKAnhEfDgAAANU"]
[Fri Apr 24 08:44:27.052555 2026] [:error] [pid 19200:tid 19214] [client 20.238.82.232:11674] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeq86zQ--M3-tsKAnhEfFgAAAMY"]
[Fri Apr 24 08:44:28.938532 2026] [:error] [pid 19101:tid 19155] [client 20.238.82.232:33984] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeq87GAHj9bEvrTgbO0g6wAAAFI"]
[Fri Apr 24 08:44:32.454585 2026] [:error] [pid 19200:tid 19225] [client 20.238.82.232:7332] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "aeq88DQ--M3-tsKAnhEfIgAAANE"]
[Fri Apr 24 08:44:34.239047 2026] [:error] [pid 19200:tid 19232] [client 20.238.82.232:12467] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aeq88jQ--M3-tsKAnhEfJgAAANg"]
[Fri Apr 24 08:44:36.500053 2026] [:error] [pid 19101:tid 19159] [client 20.238.82.232:42216] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aeq89GAHj9bEvrTgbO0hCQAAAFY"]
[Fri Apr 24 08:44:37.501193 2026] [:error] [pid 52129:tid 52136] [client 20.238.82.232:7309] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aeq89eKCZKf8_u2LKiAbGwAAAQM"]
[Fri Apr 24 08:44:38.952629 2026] [:error] [pid 52129:tid 52150] [client 20.238.82.232:7845] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1a.php"] [unique_id "aeq89uKCZKf8_u2LKiAbJQAAARE"]
[Fri Apr 24 08:44:41.357038 2026] [:error] [pid 19200:tid 19218] [client 20.238.82.232:7819] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeq8-TQ--M3-tsKAnhEfOAAAAMo"]
[Fri Apr 24 08:44:42.163408 2026] [:error] [pid 52129:tid 52135] [client 20.238.82.232:53577] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeq8-uKCZKf8_u2LKiAbMgAAAQI"]
[Fri Apr 24 08:44:44.903967 2026] [:error] [pid 19200:tid 19220] [client 20.238.82.232:11694] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeq8_DQ--M3-tsKAnhEfSAAAAMw"]
[Fri Apr 24 08:44:47.316618 2026] [:error] [pid 19101:tid 19151] [client 20.238.82.232:21008] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "aeq8_2AHj9bEvrTgbO0hGAAAAE4"]
[Fri Apr 24 08:44:49.102694 2026] [:error] [pid 52129:tid 52153] [client 20.238.82.232:11702] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-kikikoko.php"] [unique_id "aeq9AeKCZKf8_u2LKiAbRAAAARQ"]
[Fri Apr 24 08:44:52.347943 2026] [proxy_fcgi:error] [pid 19102:tid 19173] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:52.648996 2026] [proxy_fcgi:error] [pid 19102:tid 19185] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:52.928786 2026] [proxy_fcgi:error] [pid 19102:tid 19188] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:53.207503 2026] [proxy_fcgi:error] [pid 19102:tid 19169] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:53.484407 2026] [proxy_fcgi:error] [pid 19102:tid 19164] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:53.761064 2026] [proxy_fcgi:error] [pid 19102:tid 19168] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:54.050860 2026] [proxy_fcgi:error] [pid 19102:tid 19175] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:58.235323 2026] [proxy_fcgi:error] [pid 19102:tid 19181] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:58.511647 2026] [proxy_fcgi:error] [pid 19102:tid 19183] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:58.788655 2026] [proxy_fcgi:error] [pid 19102:tid 19167] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:59.068280 2026] [proxy_fcgi:error] [pid 19102:tid 19180] [client 20.238.82.232:44803] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:44:59.366184 2026] [:error] [pid 19102:tid 19173] [client 20.238.82.232:44803] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/133.php"] [unique_id "aeq9CwDSgrbLEZbkqD4r2AAAAIk"]
[Fri Apr 24 08:45:00.318432 2026] [:error] [pid 52129:tid 52152] [client 20.238.82.232:22275] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/133.php"] [unique_id "aeq9DOKCZKf8_u2LKiAbSwAAARM"]
[Fri Apr 24 08:45:01.237449 2026] [:error] [pid 19200:tid 19222] [client 20.238.82.232:7811] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/133.php"] [unique_id "aeq9DTQ--M3-tsKAnhEfgQAAAM4"]
[Fri Apr 24 08:45:03.403399 2026] [:error] [pid 19200:tid 19225] [client 20.238.82.232:3261] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/133.php"] [unique_id "aeq9DzQ--M3-tsKAnhEfiAAAANE"]
[Fri Apr 24 08:45:05.120415 2026] [:error] [pid 19200:tid 19218] [client 20.238.82.232:23656] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aeq9ETQ--M3-tsKAnhEfjAAAAMo"]
[Fri Apr 24 08:45:07.324573 2026] [:error] [pid 19102:tid 19180] [client 20.238.82.232:22319] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aeq9EwDSgrbLEZbkqD4r6QAAAJA"]
[Fri Apr 24 08:45:08.672331 2026] [:error] [pid 19102:tid 19166] [client 20.238.82.232:42163] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aeq9FADSgrbLEZbkqD4r8QAAAII"]
[Fri Apr 24 08:45:11.402417 2026] [:error] [pid 19101:tid 19158] [client 20.238.82.232:3249] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jq.php"] [unique_id "aeq9F2AHj9bEvrTgbO0hTwAAAFU"]
[Fri Apr 24 08:45:13.588334 2026] [:error] [pid 19102:tid 19181] [client 20.238.82.232:22272] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cro.php"] [unique_id "aeq9GQDSgrbLEZbkqD4sBAAAAJE"]
[Fri Apr 24 08:45:16.408275 2026] [:error] [pid 19102:tid 19178] [client 20.238.82.232:9338] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cro.php"] [unique_id "aeq9HADSgrbLEZbkqD4sEgAAAI4"]
[Fri Apr 24 08:45:18.881827 2026] [:error] [pid 19200:tid 19227] [client 20.238.82.232:14420] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cro.php"] [unique_id "aeq9HjQ--M3-tsKAnhEfqgAAANM"]
[Fri Apr 24 08:45:21.752447 2026] [:error] [pid 19200:tid 19217] [client 20.238.82.232:8148] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cro.php"] [unique_id "aeq9ITQ--M3-tsKAnhEfsQAAAMk"]
[Fri Apr 24 08:45:23.610887 2026] [:error] [pid 19101:tid 19137] [client 20.238.82.232:14435] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aeq9I2AHj9bEvrTgbO0hZgAAAEA"]
[Fri Apr 24 08:45:26.415141 2026] [:error] [pid 52129:tid 52138] [client 20.238.82.232:39010] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aeq9JuKCZKf8_u2LKiAbiQAAAQU"]
[Fri Apr 24 08:45:28.187020 2026] [:error] [pid 52129:tid 52140] [client 20.238.82.232:16017] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aeq9KOKCZKf8_u2LKiAblAAAAQc"]
[Fri Apr 24 08:45:29.729074 2026] [:error] [pid 52129:tid 52134] [client 20.238.82.232:39003] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wwx.php"] [unique_id "aeq9KeKCZKf8_u2LKiAbmgAAAQE"]
[Fri Apr 24 08:45:31.282614 2026] [:error] [pid 52129:tid 52157] [client 20.238.82.232:39019] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aeq9K-KCZKf8_u2LKiAboAAAARg"]
[Fri Apr 24 08:45:34.494163 2026] [:error] [pid 19100:tid 19118] [client 20.238.82.232:7349] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aeq9LrF_hzQs4CqbifdW1QAAAAg"]
[Fri Apr 24 08:45:35.709523 2026] [:error] [pid 19100:tid 19111] [client 20.238.82.232:34003] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aeq9L7F_hzQs4CqbifdW1gAAAAI"]
[Fri Apr 24 08:45:37.374348 2026] [:error] [pid 19101:tid 19142] [client 20.238.82.232:3239] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/trx24.php"] [unique_id "aeq9MWAHj9bEvrTgbO0heQAAAEU"]
[Fri Apr 24 08:45:38.266764 2026] [:error] [pid 19200:tid 19214] [client 20.238.82.232:33997] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blox.php"] [unique_id "aeq9MjQ--M3-tsKAnhEf3wAAAMY"]
[Fri Apr 24 08:45:39.036905 2026] [:error] [pid 52129:tid 52143] [client 20.238.82.232:34045] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blox.php"] [unique_id "aeq9M-KCZKf8_u2LKiAbsAAAAQo"]
[Fri Apr 24 08:45:39.893774 2026] [:error] [pid 19200:tid 19226] [client 20.238.82.232:3214] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blox.php"] [unique_id "aeq9MzQ--M3-tsKAnhEf5AAAANI"]
[Fri Apr 24 08:45:42.068598 2026] [:error] [pid 52129:tid 52151] [client 20.238.82.232:14415] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/blox.php"] [unique_id "aeq9NuKCZKf8_u2LKiAbuwAAARI"]
[Fri Apr 24 08:45:45.837508 2026] [:error] [pid 19101:tid 19145] [client 20.238.82.232:23643] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berax.php"] [unique_id "aeq9OWAHj9bEvrTgbO0hhwAAAEg"]
[Fri Apr 24 08:45:48.757167 2026] [:error] [pid 19102:tid 19171] [client 20.238.82.232:23666] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berax.php"] [unique_id "aeq9PADSgrbLEZbkqD4sPwAAAIc"]
[Fri Apr 24 08:45:50.540501 2026] [:error] [pid 19100:tid 19132] [client 20.238.82.232:16006] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berax.php"] [unique_id "aeq9PrF_hzQs4CqbifdW3AAAABY"]
[Fri Apr 24 08:45:53.824067 2026] [:error] [pid 52129:tid 52137] [client 20.238.82.232:28699] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/berax.php"] [unique_id "aeq9QeKCZKf8_u2LKiAbzAAAAQQ"]
[Fri Apr 24 08:45:55.350965 2026] [:error] [pid 19100:tid 19123] [client 20.238.82.232:53538] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bkxzo.php"] [unique_id "aeq9Q7F_hzQs4CqbifdW5AAAAA0"]
[Fri Apr 24 08:46:01.011622 2026] [proxy_fcgi:error] [pid 19100:tid 19132] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:01.268171 2026] [proxy_fcgi:error] [pid 19100:tid 19122] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:01.523746 2026] [proxy_fcgi:error] [pid 19100:tid 19110] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:01.777769 2026] [proxy_fcgi:error] [pid 19100:tid 19118] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:02.042033 2026] [proxy_fcgi:error] [pid 19100:tid 19123] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:02.297765 2026] [proxy_fcgi:error] [pid 19100:tid 19119] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:02.553796 2026] [proxy_fcgi:error] [pid 19100:tid 19127] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:02.809050 2026] [proxy_fcgi:error] [pid 19100:tid 19128] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:03.064138 2026] [proxy_fcgi:error] [pid 19100:tid 19133] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:03.324763 2026] [proxy_fcgi:error] [pid 19100:tid 19121] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:03.579466 2026] [proxy_fcgi:error] [pid 19100:tid 19115] [client 20.238.82.232:11728] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:46:03.830563 2026] [:error] [pid 19100:tid 19124] [client 20.238.82.232:11728] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saxzw9t.php"] [unique_id "aeq9S7F_hzQs4CqbifdW9gAAAA4"]
[Fri Apr 24 08:46:05.024618 2026] [:error] [pid 19102:tid 19165] [client 20.238.82.232:40147] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saxzw9t.php"] [unique_id "aeq9TQDSgrbLEZbkqD4skAAAAIE"]
[Fri Apr 24 08:46:08.289907 2026] [:error] [pid 19200:tid 19213] [client 20.238.82.232:3770] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saxzw9t.php"] [unique_id "aeq9UDQ--M3-tsKAnhEgEgAAAMU"]
[Fri Apr 24 08:46:15.344525 2026] [:error] [pid 19101:tid 19159] [client 20.238.82.232:3968] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saxzw9t.php"] [unique_id "aeq9V2AHj9bEvrTgbO0hnQAAAFY"]
[Fri Apr 24 08:46:18.932877 2026] [:error] [pid 19101:tid 19155] [client 20.238.82.232:33394] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sder5252u.php"] [unique_id "aeq9WmAHj9bEvrTgbO0hoAAAAFI"]
[Fri Apr 24 08:46:20.560709 2026] [:error] [pid 52129:tid 52140] [client 20.238.82.232:3548] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sder5252u.php"] [unique_id "aeq9XOKCZKf8_u2LKiAb-AAAAQc"]
[Fri Apr 24 08:46:22.614786 2026] [:error] [pid 52129:tid 52146] [client 20.238.82.232:25591] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sder5252u.php"] [unique_id "aeq9XuKCZKf8_u2LKiAb_gAAAQ0"]
[Fri Apr 24 08:46:26.702154 2026] [:error] [pid 19101:tid 19160] [client 20.238.82.232:18035] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sder5252u.php"] [unique_id "aeq9YmAHj9bEvrTgbO0hqQAAAFc"]
[Fri Apr 24 08:46:31.113420 2026] [:error] [pid 52129:tid 52157] [client 20.238.82.232:8989] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sderty5u.php"] [unique_id "aeq9Z-KCZKf8_u2LKiAcEwAAARg"]
[Fri Apr 24 08:46:32.982573 2026] [:error] [pid 19102:tid 19187] [client 20.238.82.232:55785] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sderty5u.php"] [unique_id "aeq9aADSgrbLEZbkqD4tBgAAAJc"]
[Fri Apr 24 08:46:34.434075 2026] [:error] [pid 52129:tid 52149] [client 20.238.82.232:26797] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sderty5u.php"] [unique_id "aeq9auKCZKf8_u2LKiAcHgAAARA"]
[Fri Apr 24 08:46:38.360684 2026] [:error] [pid 19101:tid 19146] [client 20.238.82.232:4094] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sderty5u.php"] [unique_id "aeq9bmAHj9bEvrTgbO0hsQAAAEk"]
[Fri Apr 24 08:46:40.859129 2026] [:error] [pid 19200:tid 19222] [client 20.238.82.232:12813] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hilk.php"] [unique_id "aeq9cDQ--M3-tsKAnhEgPgAAAM4"]
[Fri Apr 24 08:46:42.047531 2026] [:error] [pid 19102:tid 19185] [client 20.238.82.232:8453] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hilk.php"] [unique_id "aeq9cgDSgrbLEZbkqD4tDgAAAJU"]
[Fri Apr 24 08:46:44.512348 2026] [:error] [pid 52129:tid 52133] [client 20.238.82.232:30601] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hilk.php"] [unique_id "aeq9dOKCZKf8_u2LKiAcOAAAAQA"]
[Fri Apr 24 08:46:46.274444 2026] [:error] [pid 19102:tid 19164] [client 20.238.82.232:8299] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hilk.php"] [unique_id "aeq9dgDSgrbLEZbkqD4tGwAAAIA"]
[Fri Apr 24 08:46:48.167255 2026] [:error] [pid 19102:tid 19185] [client 20.238.82.232:8459] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aeq9eADSgrbLEZbkqD4tIAAAAJU"]
[Fri Apr 24 08:46:49.131291 2026] [:error] [pid 52129:tid 52151] [client 20.238.82.232:4088] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aeq9eeKCZKf8_u2LKiAcQQAAARI"]
[Fri Apr 24 08:46:50.535767 2026] [:error] [pid 19200:tid 19212] [client 20.238.82.232:9576] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aeq9ejQ--M3-tsKAnhEgSAAAAMQ"]
[Fri Apr 24 08:46:53.503659 2026] [:error] [pid 52129:tid 52148] [client 20.238.82.232:17926] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/miso.php"] [unique_id "aeq9feKCZKf8_u2LKiAcSAAAAQ8"]
[Fri Apr 24 08:46:57.264993 2026] [:error] [pid 52129:tid 52148] [client 20.238.82.232:37809] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeq9geKCZKf8_u2LKiAcVgAAAQ8"]
[Fri Apr 24 08:46:58.412568 2026] [:error] [pid 19200:tid 19228] [client 20.238.82.232:54554] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeq9gjQ--M3-tsKAnhEgUAAAANQ"]
[Fri Apr 24 08:46:59.823941 2026] [:error] [pid 52129:tid 52143] [client 20.238.82.232:55804] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeq9g-KCZKf8_u2LKiAcXQAAAQo"]
[Fri Apr 24 08:47:02.256317 2026] [:error] [pid 52129:tid 52141] [client 20.238.82.232:32715] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aeq9huKCZKf8_u2LKiAcZgAAAQg"]
[Fri Apr 24 08:47:04.343410 2026] [proxy_fcgi:error] [pid 19101:tid 19154] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:04.597403 2026] [proxy_fcgi:error] [pid 19101:tid 19157] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:04.855683 2026] [proxy_fcgi:error] [pid 19101:tid 19156] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:05.112003 2026] [proxy_fcgi:error] [pid 19101:tid 19151] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:05.662356 2026] [proxy_fcgi:error] [pid 19101:tid 19148] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:05.918059 2026] [proxy_fcgi:error] [pid 19101:tid 19142] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:06.172995 2026] [proxy_fcgi:error] [pid 19101:tid 19160] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:06.465120 2026] [proxy_fcgi:error] [pid 19101:tid 19147] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:06.730117 2026] [proxy_fcgi:error] [pid 19101:tid 19159] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:06.985585 2026] [proxy_fcgi:error] [pid 19101:tid 19140] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:07.243610 2026] [proxy_fcgi:error] [pid 19101:tid 19152] [client 20.238.82.232:8507] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 08:47:07.500364 2026] [:error] [pid 19101:tid 19155] [client 20.238.82.232:8507] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x402.php"] [unique_id "aeq9i2AHj9bEvrTgbO0hyQAAAFI"]
[Fri Apr 24 08:47:08.998893 2026] [:error] [pid 19200:tid 19218] [client 20.238.82.232:17992] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x402.php"] [unique_id "aeq9jDQ--M3-tsKAnhEgXQAAAMo"]
[Fri Apr 24 08:47:11.023496 2026] [:error] [pid 19102:tid 19173] [client 20.238.82.232:8971] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x402.php"] [unique_id "aeq9jwDSgrbLEZbkqD4tUAAAAIk"]
[Fri Apr 24 08:47:12.928199 2026] [:error] [pid 19101:tid 19153] [client 20.238.82.232:10204] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x402.php"] [unique_id "aeq9kGAHj9bEvrTgbO0hzQAAAFA"]
[Fri Apr 24 08:47:13.955171 2026] [:error] [pid 19102:tid 19170] [client 20.238.82.232:26211] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/485.php"] [unique_id "aeq9kQDSgrbLEZbkqD4tWQAAAIY"]
[Fri Apr 24 08:47:15.111431 2026] [:error] [pid 19102:tid 19184] [client 20.238.82.232:54069] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/485.php"] [unique_id "aeq9kwDSgrbLEZbkqD4tYAAAAJQ"]
[Fri Apr 24 08:47:16.335044 2026] [:error] [pid 19102:tid 19169] [client 20.238.82.232:57607] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/485.php"] [unique_id "aeq9lADSgrbLEZbkqD4taAAAAIU"]
[Fri Apr 24 08:47:18.117179 2026] [:error] [pid 19200:tid 19226] [client 20.238.82.232:54016] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/485.php"] [unique_id "aeq9ljQ--M3-tsKAnhEgcwAAANI"]
[Fri Apr 24 08:47:19.310848 2026] [:error] [pid 52129:tid 52136] [client 20.238.82.232:65265] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drykl.php"] [unique_id "aeq9l-KCZKf8_u2LKiAcewAAAQM"]
[Fri Apr 24 08:47:20.898610 2026] [:error] [pid 19200:tid 19219] [client 20.238.82.232:51074] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drykl.php"] [unique_id "aeq9mDQ--M3-tsKAnhEgeAAAAMs"]
[Fri Apr 24 08:47:21.646960 2026] [:error] [pid 19200:tid 19227] [client 20.238.82.232:9844] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drykl.php"] [unique_id "aeq9mTQ--M3-tsKAnhEgewAAANM"]
[Fri Apr 24 08:47:22.635437 2026] [:error] [pid 19102:tid 19181] [client 20.238.82.232:9825] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drykl.php"] [unique_id "aeq9mgDSgrbLEZbkqD4tcwAAAJE"]
[Fri Apr 24 08:47:24.569518 2026] [:error] [pid 19200:tid 19214] [client 20.238.82.232:22948] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "aeq9nDQ--M3-tsKAnhEghQAAAMY"]
[Fri Apr 24 08:47:26.564830 2026] [:error] [pid 52129:tid 52149] [client 20.238.82.232:10228] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "aeq9nuKCZKf8_u2LKiAchgAAARA"]
[Fri Apr 24 08:47:28.919050 2026] [:error] [pid 52129:tid 52142] [client 20.238.82.232:3537] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "aeq9oOKCZKf8_u2LKiAcjAAAAQk"]
[Fri Apr 24 08:47:30.117547 2026] [:error] [pid 52129:tid 52141] [client 20.238.82.232:53114] [client 20.238.82.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "aeq9ouKCZKf8_u2LKiAckwAAAQg"]
[Fri Apr 24 13:48:25.582769 2026] [:error] [pid 17721:tid 17794] [client 37.19.221.235:56988] [client 37.19.221.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.221.235, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aesEKeFXXkLeyDnfk__EPwAAAA0"]
[Fri Apr 24 13:48:25.815265 2026] [proxy_fcgi:error] [pid 17721:tid 17794] [client 37.19.221.235:56988] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 14:44:19.696750 2026] [:error] [pid 22114:tid 22141] [client 20.216.152.70:47121] [client 20.216.152.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aesRQ4AuWGz3WlMQjoetRAAAARg"]
[Fri Apr 24 14:44:20.392359 2026] [:error] [pid 17719:tid 17729] [client 20.216.152.70:42559] [client 20.216.152.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aesRRMTZ9gzEyL1BkPpanAAAAII"]
[Fri Apr 24 14:44:23.074138 2026] [:error] [pid 17808:tid 17833] [client 20.216.152.70:47136] [client 20.216.152.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aesRR-arbOEFI8qshvKrUgAAAFc"]
[Fri Apr 24 14:44:23.855945 2026] [:error] [pid 14531:tid 14545] [client 20.216.152.70:37389] [client 20.216.152.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aesRR3fLU2gw-6KR-GZPiQAAAUw"]
[Fri Apr 24 15:16:45.865073 2026] [:error] [pid 22114:tid 22127] [client 43.135.133.241:37514] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aesY3YAuWGz3WlMQjoex5wAAAQo"]
[Fri Apr 24 16:01:07.438174 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:07.702372 2026] [proxy_fcgi:error] [pid 17808:tid 17823] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:07.967817 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:08.230287 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:08.495853 2026] [proxy_fcgi:error] [pid 17808:tid 17814] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:08.769593 2026] [proxy_fcgi:error] [pid 17808:tid 17825] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:09.299352 2026] [proxy_fcgi:error] [pid 17808:tid 17818] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:09.563975 2026] [proxy_fcgi:error] [pid 17808:tid 17829] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:09.827869 2026] [proxy_fcgi:error] [pid 17808:tid 17821] [client 68.221.135.180:16019] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:01:10.088294 2026] [:error] [pid 17808:tid 17831] [client 68.221.135.180:16019] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aesjRuarbOEFI8qshvLFNgAAAFU"]
[Fri Apr 24 16:01:10.618075 2026] [:error] [pid 17720:tid 17777] [client 68.221.135.180:31855] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aesjRuhlUs6BS3Ng7_UU1gAAANc"]
[Fri Apr 24 16:01:11.200652 2026] [:error] [pid 17808:tid 17820] [client 68.221.135.180:13739] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aesjR-arbOEFI8qshvLFOAAAAEo"]
[Fri Apr 24 16:01:11.743789 2026] [:error] [pid 22114:tid 22129] [client 68.221.135.180:18307] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aesjR4AuWGz3WlMQjoe5VAAAAQw"]
[Fri Apr 24 16:01:12.378677 2026] [:error] [pid 17720:tid 17772] [client 68.221.135.180:31800] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesjSOhlUs6BS3Ng7_UU2gAAANI"]
[Fri Apr 24 16:01:13.045095 2026] [:error] [pid 17720:tid 17762] [client 68.221.135.180:16017] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesjSehlUs6BS3Ng7_UU3wAAAMg"]
[Fri Apr 24 16:01:13.529031 2026] [:error] [pid 22114:tid 22136] [client 68.221.135.180:31810] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesjSYAuWGz3WlMQjoe5VQAAARM"]
[Fri Apr 24 16:01:14.061840 2026] [:error] [pid 17719:tid 17727] [client 68.221.135.180:1783] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aesjSsTZ9gzEyL1BkPpr0AAAAIA"]
[Fri Apr 24 16:01:14.643946 2026] [:error] [pid 17721:tid 17802] [client 68.221.135.180:7577] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aesjSuFXXkLeyDnfk__ybgAAABU"]
[Fri Apr 24 16:01:15.729288 2026] [:error] [pid 17719:tid 17728] [client 68.221.135.180:8728] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aesjS8TZ9gzEyL1BkPpr0gAAAIE"]
[Fri Apr 24 16:01:16.343548 2026] [:error] [pid 17808:tid 17826] [client 68.221.135.180:7590] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aesjTOarbOEFI8qshvLFPQAAAFA"]
[Fri Apr 24 16:01:17.656836 2026] [:error] [pid 17720:tid 17762] [client 68.221.135.180:12218] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aesjTehlUs6BS3Ng7_UU7QAAAMg"]
[Fri Apr 24 16:01:18.503413 2026] [:error] [pid 17720:tid 17754] [client 68.221.135.180:11460] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesjTuhlUs6BS3Ng7_UU7gAAAMA"]
[Fri Apr 24 16:01:19.433157 2026] [:error] [pid 17720:tid 17769] [client 68.221.135.180:7585] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesjT-hlUs6BS3Ng7_UU8gAAAM8"]
[Fri Apr 24 16:01:20.776528 2026] [:error] [pid 17720:tid 17757] [client 68.221.135.180:8705] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesjUOhlUs6BS3Ng7_UU9gAAAMM"]
[Fri Apr 24 16:01:21.462437 2026] [:error] [pid 17721:tid 17803] [client 68.221.135.180:28245] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aesjUeFXXkLeyDnfk__ydAAAABY"]
[Fri Apr 24 16:01:22.146155 2026] [:error] [pid 22114:tid 22120] [client 68.221.135.180:12206] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aesjUoAuWGz3WlMQjoe5WAAAAQM"]
[Fri Apr 24 16:01:23.064818 2026] [:error] [pid 22114:tid 22121] [client 68.221.135.180:12278] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aesjU4AuWGz3WlMQjoe5XAAAAQQ"]
[Fri Apr 24 16:01:24.246729 2026] [:error] [pid 17720:tid 17763] [client 68.221.135.180:9560] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aesjVOhlUs6BS3Ng7_UU_AAAAMk"]
[Fri Apr 24 16:01:25.265075 2026] [:error] [pid 17719:tid 17746] [client 68.221.135.180:1758] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aesjVcTZ9gzEyL1BkPpr2AAAAJM"]
[Fri Apr 24 16:01:26.031545 2026] [:error] [pid 17808:tid 17810] [client 68.221.135.180:12287] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctex1.php"] [unique_id "aesjVuarbOEFI8qshvLFTgAAAEA"]
[Fri Apr 24 16:01:27.351063 2026] [:error] [pid 17720:tid 17763] [client 68.221.135.180:9560] [client 68.221.135.180] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.107_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aesjVOhlUs6BS3Ng7_UU_AAAAMk"]
[Fri Apr 24 16:01:46.632890 2026] [:error] [pid 17720:tid 17763] [client 68.221.135.180:17257] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aesjauhlUs6BS3Ng7_UVbQAAAMk"]
[Fri Apr 24 16:01:48.063420 2026] [:error] [pid 14531:tid 14534] [client 68.221.135.180:12284] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aesjbHfLU2gw-6KR-GZtugAAAUE"]
[Fri Apr 24 16:01:48.999653 2026] [:error] [pid 17808:tid 17830] [client 68.221.135.180:9575] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aesjbOarbOEFI8qshvLFawAAAFQ"]
[Fri Apr 24 16:01:50.465694 2026] [:error] [pid 17719:tid 17734] [client 68.221.135.180:32009] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lb.php"] [unique_id "aesjbsTZ9gzEyL1BkPpr_QAAAIc"]
[Fri Apr 24 16:01:51.856855 2026] [:error] [pid 17720:tid 17754] [client 68.221.135.180:16493] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aesjb-hlUs6BS3Ng7_UVeQAAAMA"]
[Fri Apr 24 16:01:52.907864 2026] [:error] [pid 14531:tid 14540] [client 68.221.135.180:12637] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aesjcHfLU2gw-6KR-GZtwQAAAUc"]
[Fri Apr 24 16:01:54.308120 2026] [:error] [pid 17720:tid 17773] [client 68.221.135.180:16883] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aesjcuhlUs6BS3Ng7_UVfAAAANM"]
[Fri Apr 24 16:01:55.898315 2026] [:error] [pid 17721:tid 17792] [client 68.221.135.180:12608] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "aesjc-FXXkLeyDnfk__ypwAAAAs"]
[Fri Apr 24 16:01:58.700511 2026] [:error] [pid 14531:tid 14552] [client 68.221.135.180:12232] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aesjdnfLU2gw-6KR-GZtzQAAAVM"]
[Fri Apr 24 16:02:00.874611 2026] [:error] [pid 14531:tid 14540] [client 68.221.135.180:32021] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aesjeHfLU2gw-6KR-GZt1AAAAUc"]
[Fri Apr 24 16:02:02.302314 2026] [:error] [pid 17720:tid 17774] [client 68.221.135.180:28586] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aesjeuhlUs6BS3Ng7_UVnwAAANQ"]
[Fri Apr 24 16:02:02.827505 2026] [:error] [pid 17720:tid 17770] [client 68.221.135.180:8490] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mh.php"] [unique_id "aesjeuhlUs6BS3Ng7_UVowAAANA"]
[Fri Apr 24 16:02:03.605159 2026] [:error] [pid 17720:tid 17759] [client 68.221.135.180:16414] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aesje-hlUs6BS3Ng7_UVpwAAAMU"]
[Fri Apr 24 16:02:04.192938 2026] [:error] [pid 17720:tid 17755] [client 68.221.135.180:9313] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aesjfOhlUs6BS3Ng7_UVrwAAAME"]
[Fri Apr 24 16:02:05.033279 2026] [:error] [pid 17721:tid 17798] [client 68.221.135.180:17267] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aesjfeFXXkLeyDnfk__yvAAAABE"]
[Fri Apr 24 16:02:05.730482 2026] [:error] [pid 14531:tid 14539] [client 68.221.135.180:16415] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "aesjfXfLU2gw-6KR-GZt2QAAAUY"]
[Fri Apr 24 16:02:06.398373 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:28589] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/auth.php"] [unique_id "aesjfnfLU2gw-6KR-GZt2gAAAVU"]
[Fri Apr 24 16:02:08.004007 2026] [:error] [pid 17720:tid 17762] [client 68.221.135.180:9285] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/auth.php"] [unique_id "aesjgOhlUs6BS3Ng7_UVuQAAAMg"]
[Fri Apr 24 16:02:10.392703 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:10.635274 2026] [proxy_fcgi:error] [pid 17720:tid 17768] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:10.886412 2026] [proxy_fcgi:error] [pid 17720:tid 17769] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:11.138794 2026] [proxy_fcgi:error] [pid 17720:tid 17778] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:11.380688 2026] [proxy_fcgi:error] [pid 17720:tid 17761] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:11.622596 2026] [proxy_fcgi:error] [pid 17720:tid 17764] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:12.117890 2026] [proxy_fcgi:error] [pid 17720:tid 17762] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:12.373546 2026] [proxy_fcgi:error] [pid 17720:tid 17772] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:12.621726 2026] [proxy_fcgi:error] [pid 17720:tid 17773] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:12.873996 2026] [proxy_fcgi:error] [pid 17720:tid 17768] [client 68.221.135.180:32116] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:02:13.111798 2026] [:error] [pid 17720:tid 17776] [client 68.221.135.180:32116] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aesjhehlUs6BS3Ng7_UV0wAAANY"]
[Fri Apr 24 16:02:14.752312 2026] [:error] [pid 14531:tid 14537] [client 68.221.135.180:1545] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aesjhnfLU2gw-6KR-GZt7gAAAUQ"]
[Fri Apr 24 16:02:16.340590 2026] [:error] [pid 17719:tid 17750] [client 68.221.135.180:25268] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aesjiMTZ9gzEyL1BkPpsFgAAAJc"]
[Fri Apr 24 16:02:17.807016 2026] [:error] [pid 17808:tid 17822] [client 68.221.135.180:1157] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aesjiearbOEFI8qshvLFlQAAAEw"]
[Fri Apr 24 16:02:19.602915 2026] [:error] [pid 17720:tid 17763] [client 68.221.135.180:9323] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aesji-hlUs6BS3Ng7_UV2AAAAMk"]
[Fri Apr 24 16:02:22.063784 2026] [:error] [pid 14531:tid 14539] [client 68.221.135.180:1197] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aesjjnfLU2gw-6KR-GZt-QAAAUY"]
[Fri Apr 24 16:02:23.855435 2026] [:error] [pid 17720:tid 17755] [client 68.221.135.180:8235] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aesjj-hlUs6BS3Ng7_UV7QAAAME"]
[Fri Apr 24 16:02:24.656974 2026] [:error] [pid 17808:tid 17831] [client 68.221.135.180:27886] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aesjkOarbOEFI8qshvLFpwAAAFU"]
[Fri Apr 24 16:02:26.601848 2026] [:error] [pid 17720:tid 17760] [client 68.221.135.180:27883] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aesjkuhlUs6BS3Ng7_UV9wAAAMY"]
[Fri Apr 24 16:02:27.975426 2026] [:error] [pid 17808:tid 17822] [client 68.221.135.180:7656] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aesjk-arbOEFI8qshvLFrAAAAEw"]
[Fri Apr 24 16:02:30.597023 2026] [:error] [pid 17808:tid 17826] [client 68.221.135.180:1167] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aesjluarbOEFI8qshvLFsgAAAFA"]
[Fri Apr 24 16:02:32.051025 2026] [:error] [pid 17808:tid 17822] [client 68.221.135.180:27072] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aesjmOarbOEFI8qshvLFtQAAAEw"]
[Fri Apr 24 16:02:32.921932 2026] [:error] [pid 14531:tid 14549] [client 68.221.135.180:9864] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aesjmHfLU2gw-6KR-GZuDgAAAVA"]
[Fri Apr 24 16:02:35.026447 2026] [:error] [pid 17720:tid 17758] [client 68.221.135.180:25304] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aesjm-hlUs6BS3Ng7_UWEgAAAMQ"]
[Fri Apr 24 16:02:40.088359 2026] [:error] [pid 17721:tid 17799] [client 68.221.135.180:7643] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aesjoOFXXkLeyDnfk__y2QAAABI"]
[Fri Apr 24 16:02:41.424524 2026] [:error] [pid 17808:tid 17818] [client 68.221.135.180:25284] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "aesjoearbOEFI8qshvLFzAAAAEg"]
[Fri Apr 24 16:02:42.246882 2026] [:error] [pid 17720:tid 17766] [client 68.221.135.180:11035] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aesjouhlUs6BS3Ng7_UWKAAAAMw"]
[Fri Apr 24 16:02:43.469561 2026] [:error] [pid 14531:tid 14549] [client 68.221.135.180:32422] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aesjo3fLU2gw-6KR-GZuFgAAAVA"]
[Fri Apr 24 16:02:45.794979 2026] [:error] [pid 22114:tid 22130] [client 68.221.135.180:1921] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aesjpYAuWGz3WlMQjoe5lwAAAQ0"]
[Fri Apr 24 16:02:49.394872 2026] [:error] [pid 17719:tid 17746] [client 68.221.135.180:26079] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aesjqcTZ9gzEyL1BkPpsMgAAAJM"]
[Fri Apr 24 16:02:52.663981 2026] [:error] [pid 17720:tid 17761] [client 68.221.135.180:18017] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aesjrOhlUs6BS3Ng7_UWQQAAAMc"]
[Fri Apr 24 16:02:56.274753 2026] [:error] [pid 17721:tid 17790] [client 68.221.135.180:9878] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aesjsOFXXkLeyDnfk__y9QAAAAk"]
[Fri Apr 24 16:03:01.702871 2026] [:error] [pid 17808:tid 17813] [client 68.221.135.180:15629] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aesjtearbOEFI8qshvLGAQAAAEM"]
[Fri Apr 24 16:03:03.170840 2026] [:error] [pid 17720:tid 17764] [client 68.221.135.180:7678] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/saorix1.php"] [unique_id "aesjt-hlUs6BS3Ng7_UWTgAAAMo"]
[Fri Apr 24 16:03:06.840752 2026] [:error] [pid 17808:tid 17827] [client 68.221.135.180:25335] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aesjuuarbOEFI8qshvLGDwAAAFE"]
[Fri Apr 24 16:03:08.327543 2026] [:error] [pid 17721:tid 17798] [client 68.221.135.180:8536] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aesjvOFXXkLeyDnfk__zCgAAABE"]
[Fri Apr 24 16:03:09.306801 2026] [:error] [pid 17720:tid 17760] [client 68.221.135.180:11015] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aesjvehlUs6BS3Ng7_UWWwAAAMY"]
[Fri Apr 24 16:03:10.208531 2026] [:error] [pid 14531:tid 14536] [client 68.221.135.180:8559] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "aesjvnfLU2gw-6KR-GZuUQAAAUM"]
[Fri Apr 24 16:03:11.593918 2026] [:error] [pid 22114:tid 22131] [client 68.221.135.180:14951] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rip.php"] [unique_id "aesjv4AuWGz3WlMQjoe5oQAAAQ4"]
[Fri Apr 24 16:03:13.187095 2026] [proxy_fcgi:error] [pid 17720:tid 17757] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:13.460910 2026] [proxy_fcgi:error] [pid 17720:tid 17758] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:13.724219 2026] [proxy_fcgi:error] [pid 17720:tid 17759] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:13.987126 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:14.258739 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:14.522943 2026] [proxy_fcgi:error] [pid 17720:tid 17775] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:14.802335 2026] [proxy_fcgi:error] [pid 17720:tid 17778] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:15.066276 2026] [proxy_fcgi:error] [pid 17720:tid 17776] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:15.330187 2026] [proxy_fcgi:error] [pid 17720:tid 17762] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:15.866661 2026] [proxy_fcgi:error] [pid 17720:tid 17769] [client 68.221.135.180:7731] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:03:17.507920 2026] [:error] [pid 17720:tid 17771] [client 68.221.135.180:7731] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aesjxehlUs6BS3Ng7_UWdgAAANE"]
[Fri Apr 24 16:03:18.794011 2026] [:error] [pid 17808:tid 17834] [client 68.221.135.180:14973] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aesjxuarbOEFI8qshvLGHAAAAFg"]
[Fri Apr 24 16:03:21.841532 2026] [:error] [pid 17720:tid 17761] [client 68.221.135.180:32836] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aesjyehlUs6BS3Ng7_UWeAAAAMc"]
[Fri Apr 24 16:03:23.546782 2026] [:error] [pid 22114:tid 22125] [client 68.221.135.180:32895] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aesjy4AuWGz3WlMQjoe5qQAAAQg"]
[Fri Apr 24 16:03:24.283175 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:11052] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aesjzHfLU2gw-6KR-GZuagAAAVU"]
[Fri Apr 24 16:03:25.297179 2026] [:error] [pid 17719:tid 17749] [client 68.221.135.180:26077] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aesjzcTZ9gzEyL1BkPpsaAAAAJY"]
[Fri Apr 24 16:03:26.118167 2026] [:error] [pid 14531:tid 14547] [client 68.221.135.180:32853] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aesjznfLU2gw-6KR-GZubgAAAU4"]
[Fri Apr 24 16:03:27.740284 2026] [:error] [pid 17720:tid 17778] [client 68.221.135.180:8566] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aesjz-hlUs6BS3Ng7_UWfwAAANg"]
[Fri Apr 24 16:03:28.413382 2026] [:error] [pid 17808:tid 17812] [client 68.221.135.180:16775] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aesj0OarbOEFI8qshvLGMwAAAEI"]
[Fri Apr 24 16:03:29.653723 2026] [:error] [pid 17808:tid 17816] [client 68.221.135.180:15672] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aesj0earbOEFI8qshvLGOQAAAEY"]
[Fri Apr 24 16:03:30.579853 2026] [:error] [pid 22114:tid 22135] [client 68.221.135.180:14919] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aesj0oAuWGz3WlMQjoe5sgAAARI"]
[Fri Apr 24 16:03:32.396843 2026] [:error] [pid 17720:tid 17763] [client 68.221.135.180:14950] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aesj1OhlUs6BS3Ng7_UWhgAAAMk"]
[Fri Apr 24 16:03:33.860648 2026] [:error] [pid 14531:tid 14542] [client 68.221.135.180:1966] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aesj1XfLU2gw-6KR-GZucgAAAUk"]
[Fri Apr 24 16:03:36.162575 2026] [:error] [pid 14531:tid 14534] [client 68.221.135.180:32844] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aesj2HfLU2gw-6KR-GZucwAAAUE"]
[Fri Apr 24 16:03:36.712914 2026] [:error] [pid 22114:tid 22130] [client 68.221.135.180:14912] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aesj2IAuWGz3WlMQjoe5uAAAAQ0"]
[Fri Apr 24 16:03:37.694727 2026] [:error] [pid 17808:tid 17820] [client 68.221.135.180:7704] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "aesj2earbOEFI8qshvLGTwAAAEo"]
[Fri Apr 24 16:03:38.347487 2026] [:error] [pid 17808:tid 17814] [client 68.221.135.180:9897] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aesj2uarbOEFI8qshvLGUgAAAEQ"]
[Fri Apr 24 16:03:39.022579 2026] [:error] [pid 14531:tid 14543] [client 68.221.135.180:14941] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aesj23fLU2gw-6KR-GZueQAAAUo"]
[Fri Apr 24 16:03:39.644448 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:14923] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aesj23fLU2gw-6KR-GZuewAAAVU"]
[Fri Apr 24 16:03:40.354038 2026] [:error] [pid 14531:tid 14542] [client 68.221.135.180:32893] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file61.php"] [unique_id "aesj3HfLU2gw-6KR-GZugQAAAUk"]
[Fri Apr 24 16:03:41.284721 2026] [:error] [pid 17808:tid 17829] [client 68.221.135.180:18000] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "aesj3earbOEFI8qshvLGZQAAAFM"]
[Fri Apr 24 16:03:42.252612 2026] [:error] [pid 14531:tid 14543] [client 68.221.135.180:32428] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "aesj3nfLU2gw-6KR-GZujAAAAUo"]
[Fri Apr 24 16:03:44.567885 2026] [:error] [pid 14531:tid 14550] [client 68.221.135.180:1941] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "aesj4HfLU2gw-6KR-GZujwAAAVE"]
[Fri Apr 24 16:03:45.197500 2026] [:error] [pid 22114:tid 22121] [client 68.221.135.180:18009] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Cap.php"] [unique_id "aesj4YAuWGz3WlMQjoe5xAAAAQQ"]
[Fri Apr 24 16:03:45.787594 2026] [:error] [pid 17808:tid 17816] [client 68.221.135.180:25318] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aesj4earbOEFI8qshvLGdQAAAEY"]
[Fri Apr 24 16:03:47.693121 2026] [:error] [pid 17720:tid 17777] [client 68.221.135.180:33278] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aesj4-hlUs6BS3Ng7_UWnwAAANc"]
[Fri Apr 24 16:03:48.813114 2026] [:error] [pid 17720:tid 17776] [client 68.221.135.180:15637] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aesj5OhlUs6BS3Ng7_UWqgAAANY"]
[Fri Apr 24 16:03:49.969006 2026] [:error] [pid 17720:tid 17762] [client 68.221.135.180:7729] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "aesj5ehlUs6BS3Ng7_UWsQAAAMg"]
[Fri Apr 24 16:03:50.507619 2026] [:error] [pid 22114:tid 22129] [client 68.221.135.180:14944] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aesj5oAuWGz3WlMQjoe5ygAAAQw"]
[Fri Apr 24 16:03:51.657356 2026] [:error] [pid 14531:tid 14544] [client 68.221.135.180:33254] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aesj53fLU2gw-6KR-GZumAAAAUs"]
[Fri Apr 24 16:03:52.383730 2026] [:error] [pid 14531:tid 14546] [client 68.221.135.180:32437] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aesj6HfLU2gw-6KR-GZumgAAAU0"]
[Fri Apr 24 16:03:53.795742 2026] [:error] [pid 17721:tid 17789] [client 68.221.135.180:33222] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xper1.php"] [unique_id "aesj6eFXXkLeyDnfk__zJAAAAAg"]
[Fri Apr 24 16:03:54.386132 2026] [:error] [pid 14531:tid 14537] [client 68.221.135.180:26076] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "aesj6nfLU2gw-6KR-GZunQAAAUQ"]
[Fri Apr 24 16:03:54.944568 2026] [:error] [pid 17808:tid 17816] [client 68.221.135.180:9858] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "aesj6uarbOEFI8qshvLGhwAAAEY"]
[Fri Apr 24 16:03:55.568404 2026] [:error] [pid 17720:tid 17778] [client 68.221.135.180:33255] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "aesj6-hlUs6BS3Ng7_UWwgAAANg"]
[Fri Apr 24 16:03:56.093219 2026] [:error] [pid 17720:tid 17772] [client 68.221.135.180:7684] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t00l.php"] [unique_id "aesj7OhlUs6BS3Ng7_UWxQAAANI"]
[Fri Apr 24 16:03:56.888454 2026] [:error] [pid 22114:tid 22120] [client 68.221.135.180:32469] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "aesj7IAuWGz3WlMQjoe5zgAAAQM"]
[Fri Apr 24 16:03:57.949749 2026] [:error] [pid 22114:tid 22118] [client 68.221.135.180:25316] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "aesj7YAuWGz3WlMQjoe5zwAAAQE"]
[Fri Apr 24 16:03:58.803062 2026] [:error] [pid 22114:tid 22134] [client 68.221.135.180:1969] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "aesj7oAuWGz3WlMQjoe50gAAARE"]
[Fri Apr 24 16:03:59.362749 2026] [:error] [pid 17808:tid 17820] [client 68.221.135.180:32413] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "aesj7-arbOEFI8qshvLGiwAAAEo"]
[Fri Apr 24 16:04:00.072033 2026] [:error] [pid 17808:tid 17830] [client 68.221.135.180:32412] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aesj8OarbOEFI8qshvLGkgAAAFQ"]
[Fri Apr 24 16:04:00.630890 2026] [:error] [pid 17721:tid 17796] [client 68.221.135.180:33267] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aesj8OFXXkLeyDnfk__zJwAAAA8"]
[Fri Apr 24 16:04:01.294962 2026] [:error] [pid 17721:tid 17785] [client 68.221.135.180:26072] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aesj8eFXXkLeyDnfk__zKQAAAAQ"]
[Fri Apr 24 16:04:02.488426 2026] [:error] [pid 17719:tid 17740] [client 68.221.135.180:33203] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acc.php"] [unique_id "aesj8sTZ9gzEyL1BkPpswQAAAI0"]
[Fri Apr 24 16:04:03.468546 2026] [:error] [pid 17719:tid 17744] [client 68.221.135.180:25281] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aesj88TZ9gzEyL1BkPpsxgAAAJE"]
[Fri Apr 24 16:04:04.331071 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:32430] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aesj9HfLU2gw-6KR-GZuqgAAAVU"]
[Fri Apr 24 16:04:06.108844 2026] [:error] [pid 17720:tid 17765] [client 68.221.135.180:1933] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aesj9uhlUs6BS3Ng7_UW0gAAAMs"]
[Fri Apr 24 16:04:07.196767 2026] [:error] [pid 17808:tid 17818] [client 68.221.135.180:32486] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "aesj9-arbOEFI8qshvLGmgAAAEg"]
[Fri Apr 24 16:04:07.741906 2026] [:error] [pid 14531:tid 14536] [client 68.221.135.180:8563] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aesj93fLU2gw-6KR-GZuswAAAUM"]
[Fri Apr 24 16:04:08.624251 2026] [:error] [pid 17808:tid 17812] [client 68.221.135.180:32436] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aesj-OarbOEFI8qshvLGoAAAAEI"]
[Fri Apr 24 16:04:09.269129 2026] [:error] [pid 17721:tid 17797] [client 68.221.135.180:32502] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aesj-eFXXkLeyDnfk__zPAAAABA"]
[Fri Apr 24 16:04:09.841937 2026] [:error] [pid 17721:tid 17787] [client 68.221.135.180:21030] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "aesj-eFXXkLeyDnfk__zPgAAAAY"]
[Fri Apr 24 16:04:10.426987 2026] [:error] [pid 17719:tid 17735] [client 68.221.135.180:33594] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aesj-sTZ9gzEyL1BkPps1QAAAIg"]
[Fri Apr 24 16:04:11.315874 2026] [:error] [pid 14531:tid 14533] [client 68.221.135.180:27401] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aesj-3fLU2gw-6KR-GZutQAAAUA"]
[Fri Apr 24 16:04:12.558326 2026] [:error] [pid 14531:tid 14550] [client 68.221.135.180:27051] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aesj_HfLU2gw-6KR-GZutwAAAVE"]
[Fri Apr 24 16:04:13.469930 2026] [:error] [pid 14531:tid 14557] [client 68.221.135.180:33246] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aesj_XfLU2gw-6KR-GZuuwAAAVg"]
[Fri Apr 24 16:04:15.556412 2026] [proxy_fcgi:error] [pid 17808:tid 17834] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:15.798690 2026] [proxy_fcgi:error] [pid 17808:tid 17833] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:16.040742 2026] [proxy_fcgi:error] [pid 17808:tid 17832] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:16.281213 2026] [proxy_fcgi:error] [pid 17808:tid 17830] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:16.533334 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:16.776993 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:17.023640 2026] [proxy_fcgi:error] [pid 17808:tid 17810] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:17.283394 2026] [proxy_fcgi:error] [pid 17808:tid 17815] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:17.533162 2026] [proxy_fcgi:error] [pid 17808:tid 17821] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:17.775129 2026] [proxy_fcgi:error] [pid 17808:tid 17831] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:18.017511 2026] [proxy_fcgi:error] [pid 17808:tid 17820] [client 68.221.135.180:27054] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:04:18.256673 2026] [:error] [pid 17808:tid 17833] [client 68.221.135.180:27054] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "aeskAuarbOEFI8qshvLGygAAAFc"]
[Fri Apr 24 16:04:19.899027 2026] [:error] [pid 14531:tid 14548] [client 68.221.135.180:19101] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "aeskA3fLU2gw-6KR-GZuwQAAAU8"]
[Fri Apr 24 16:04:20.998693 2026] [:error] [pid 17808:tid 17813] [client 68.221.135.180:33205] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "aeskBOarbOEFI8qshvLG3AAAAEM"]
[Fri Apr 24 16:04:22.113877 2026] [:error] [pid 22114:tid 22126] [client 68.221.135.180:21049] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ww.php"] [unique_id "aeskBoAuWGz3WlMQjoe56gAAAQk"]
[Fri Apr 24 16:04:23.182800 2026] [:error] [pid 17721:tid 17790] [client 68.221.135.180:32857] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsjzs.php"] [unique_id "aeskB-FXXkLeyDnfk__zRwAAAAk"]
[Fri Apr 24 16:04:24.077204 2026] [:error] [pid 14531:tid 14540] [client 68.221.135.180:27011] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsjzs.php"] [unique_id "aeskCHfLU2gw-6KR-GZuygAAAUc"]
[Fri Apr 24 16:04:24.975986 2026] [:error] [pid 17719:tid 17729] [client 68.221.135.180:8574] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsjzs.php"] [unique_id "aeskCMTZ9gzEyL1BkPptAAAAAII"]
[Fri Apr 24 16:04:25.715148 2026] [:error] [pid 22114:tid 22120] [client 68.221.135.180:32872] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fsjzs.php"] [unique_id "aeskCYAuWGz3WlMQjoe57AAAAQM"]
[Fri Apr 24 16:04:26.478047 2026] [:error] [pid 17720:tid 17758] [client 68.221.135.180:27449] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cwclass.php"] [unique_id "aeskCuhlUs6BS3Ng7_UW6wAAAMQ"]
[Fri Apr 24 16:04:27.837750 2026] [:error] [pid 17720:tid 17770] [client 68.221.135.180:27049] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cwclass.php"] [unique_id "aeskC-hlUs6BS3Ng7_UW-wAAANA"]
[Fri Apr 24 16:04:29.557932 2026] [:error] [pid 17720:tid 17763] [client 68.221.135.180:20698] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cwclass.php"] [unique_id "aeskDehlUs6BS3Ng7_UXCQAAAMk"]
[Fri Apr 24 16:04:30.876021 2026] [:error] [pid 22114:tid 22123] [client 68.221.135.180:20719] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cwclass.php"] [unique_id "aeskDoAuWGz3WlMQjoe58QAAAQY"]
[Fri Apr 24 16:04:31.430595 2026] [:error] [pid 14531:tid 14538] [client 68.221.135.180:33188] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit-tags.php"] [unique_id "aeskD3fLU2gw-6KR-GZu2AAAAUU"]
[Fri Apr 24 16:04:31.954190 2026] [:error] [pid 22114:tid 22117] [client 68.221.135.180:27442] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit-tags.php"] [unique_id "aeskD4AuWGz3WlMQjoe59AAAAQA"]
[Fri Apr 24 16:04:32.559148 2026] [:error] [pid 17720:tid 17758] [client 68.221.135.180:32808] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit-tags.php"] [unique_id "aeskEOhlUs6BS3Ng7_UXHAAAAMQ"]
[Fri Apr 24 16:04:33.238713 2026] [:error] [pid 17808:tid 17822] [client 68.221.135.180:1455] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit-tags.php"] [unique_id "aeskEearbOEFI8qshvLG-gAAAEw"]
[Fri Apr 24 16:04:34.412338 2026] [:error] [pid 14531:tid 14547] [client 68.221.135.180:27050] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aeskEnfLU2gw-6KR-GZu3AAAAU4"]
[Fri Apr 24 16:04:35.267925 2026] [:error] [pid 14531:tid 14554] [client 68.221.135.180:7226] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aeskE3fLU2gw-6KR-GZu4AAAAVU"]
[Fri Apr 24 16:04:35.798362 2026] [:error] [pid 17721:tid 17785] [client 68.221.135.180:24912] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aeskE-FXXkLeyDnfk__zUAAAAAQ"]
[Fri Apr 24 16:04:36.455168 2026] [:error] [pid 14531:tid 14535] [client 68.221.135.180:27056] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aeskFHfLU2gw-6KR-GZu4wAAAUI"]
[Fri Apr 24 16:04:38.754383 2026] [:error] [pid 17719:tid 17728] [client 68.221.135.180:8372] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "aeskFsTZ9gzEyL1BkPptEgAAAIE"]
[Fri Apr 24 16:04:39.828332 2026] [:error] [pid 22114:tid 22140] [client 68.221.135.180:7202] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "aeskF4AuWGz3WlMQjoe5-gAAARc"]
[Fri Apr 24 16:04:41.019359 2026] [:error] [pid 17720:tid 17775] [client 68.221.135.180:33983] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "aeskGehlUs6BS3Ng7_UXMQAAANU"]
[Fri Apr 24 16:04:41.779897 2026] [:error] [pid 17720:tid 17756] [client 68.221.135.180:33607] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoper1.php"] [unique_id "aeskGehlUs6BS3Ng7_UXNQAAAMI"]
[Fri Apr 24 16:04:42.650577 2026] [:error] [pid 17720:tid 17768] [client 68.221.135.180:33976] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeskGuhlUs6BS3Ng7_UXPQAAAM4"]
[Fri Apr 24 16:04:44.921650 2026] [:error] [pid 17720:tid 17768] [client 68.221.135.180:7170] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeskHOhlUs6BS3Ng7_UXTAAAAM4"]
[Fri Apr 24 16:04:46.313130 2026] [:error] [pid 17720:tid 17766] [client 68.221.135.180:33946] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeskHuhlUs6BS3Ng7_UXVQAAAMw"]
[Fri Apr 24 16:04:47.514841 2026] [:error] [pid 17720:tid 17775] [client 68.221.135.180:8373] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aeskH-hlUs6BS3Ng7_UXWQAAANU"]
[Fri Apr 24 16:04:48.556920 2026] [:error] [pid 14531:tid 14546] [client 68.221.135.180:7837] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeskIHfLU2gw-6KR-GZu7QAAAU0"]
[Fri Apr 24 16:04:49.218818 2026] [:error] [pid 17720:tid 17771] [client 68.221.135.180:8091] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeskIehlUs6BS3Ng7_UXZAAAANE"]
[Fri Apr 24 16:04:50.610336 2026] [:error] [pid 17719:tid 17747] [client 68.221.135.180:27783] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeskIsTZ9gzEyL1BkPptIgAAAJQ"]
[Fri Apr 24 16:04:52.978850 2026] [:error] [pid 14531:tid 14540] [client 68.221.135.180:8181] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeskJHfLU2gw-6KR-GZu_AAAAUc"]
[Fri Apr 24 16:04:54.210844 2026] [:error] [pid 22114:tid 22135] [client 68.221.135.180:33956] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeskJoAuWGz3WlMQjoe5_QAAARI"]
[Fri Apr 24 16:04:54.878589 2026] [:error] [pid 17720:tid 17761] [client 68.221.135.180:33954] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeskJuhlUs6BS3Ng7_UXcAAAAMc"]
[Fri Apr 24 16:04:55.989279 2026] [:error] [pid 17721:tid 17804] [client 68.221.135.180:7226] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeskJ-FXXkLeyDnfk__zYgAAABc"]
[Fri Apr 24 16:04:56.967849 2026] [:error] [pid 17808:tid 17832] [client 68.221.135.180:1087] [client 68.221.135.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeskKOarbOEFI8qshvLHFgAAAFY"]
[Fri Apr 24 16:05:50.557359 2026] [proxy_fcgi:error] [pid 17721:tid 17783] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:50.820747 2026] [proxy_fcgi:error] [pid 17721:tid 17787] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:51.075120 2026] [proxy_fcgi:error] [pid 17721:tid 17801] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:51.330933 2026] [proxy_fcgi:error] [pid 17721:tid 17796] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:51.584381 2026] [proxy_fcgi:error] [pid 17721:tid 17798] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:51.837606 2026] [proxy_fcgi:error] [pid 17721:tid 17785] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:52.357131 2026] [proxy_fcgi:error] [pid 17721:tid 17804] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:52.610672 2026] [proxy_fcgi:error] [pid 17721:tid 17794] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:54.119627 2026] [proxy_fcgi:error] [pid 17721:tid 17803] [client 20.238.112.20:16287] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:05:54.380596 2026] [:error] [pid 17721:tid 17790] [client 20.238.112.20:16287] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aeskYuFXXkLeyDnfk__zqgAAAAk"]
[Fri Apr 24 16:05:56.827282 2026] [:error] [pid 14531:tid 14533] [client 20.238.112.20:22465] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aeskZHfLU2gw-6KR-GZvVQAAAUA"]
[Fri Apr 24 16:05:59.437190 2026] [:error] [pid 17719:tid 17738] [client 20.238.112.20:9885] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aeskZ8TZ9gzEyL1BkPptbAAAAIs"]
[Fri Apr 24 16:06:00.931481 2026] [:error] [pid 14531:tid 14554] [client 20.238.112.20:16768] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wziar1.php"] [unique_id "aeskaHfLU2gw-6KR-GZvZgAAAVU"]
[Fri Apr 24 16:06:03.678962 2026] [:error] [pid 14531:tid 14542] [client 20.238.112.20:10901] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeska3fLU2gw-6KR-GZvdAAAAUk"]
[Fri Apr 24 16:06:05.152530 2026] [:error] [pid 17719:tid 17735] [client 20.238.112.20:16634] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeskbcTZ9gzEyL1BkPptdAAAAIg"]
[Fri Apr 24 16:06:06.138304 2026] [:error] [pid 17720:tid 17764] [client 20.238.112.20:21962] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeskbuhlUs6BS3Ng7_UYlgAAAMo"]
[Fri Apr 24 16:06:07.586511 2026] [:error] [pid 17720:tid 17777] [client 20.238.112.20:10428] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeskb-hlUs6BS3Ng7_UYmQAAANc"]
[Fri Apr 24 16:06:09.178307 2026] [:error] [pid 17721:tid 17787] [client 20.238.112.20:19964] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeskceFXXkLeyDnfk__zsQAAAAY"]
[Fri Apr 24 16:06:11.405204 2026] [:error] [pid 17808:tid 17818] [client 20.238.112.20:9912] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeskc-arbOEFI8qshvLHqAAAAEg"]
[Fri Apr 24 16:06:12.739389 2026] [:error] [pid 17721:tid 17788] [client 20.238.112.20:9949] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeskdOFXXkLeyDnfk__zswAAAAc"]
[Fri Apr 24 16:06:15.016629 2026] [:error] [pid 17719:tid 17749] [client 20.238.112.20:21991] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7logs.php"] [unique_id "aeskd8TZ9gzEyL1BkPptfwAAAJY"]
[Fri Apr 24 16:06:19.469513 2026] [:error] [pid 17720:tid 17755] [client 20.238.112.20:17110] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeske-hlUs6BS3Ng7_UYtwAAAME"]
[Fri Apr 24 16:06:21.263037 2026] [:error] [pid 14531:tid 14552] [client 20.238.112.20:21192] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeskfXfLU2gw-6KR-GZvjAAAAVM"]
[Fri Apr 24 16:06:23.671085 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:15305] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeskf-hlUs6BS3Ng7_UYwQAAANY"]
[Fri Apr 24 16:06:24.688413 2026] [:error] [pid 14531:tid 14542] [client 20.238.112.20:21203] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeskgHfLU2gw-6KR-GZvkQAAAUk"]
[Fri Apr 24 16:06:27.567467 2026] [:error] [pid 17808:tid 17817] [client 20.238.112.20:19958] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aeskg-arbOEFI8qshvLH5AAAAEc"]
[Fri Apr 24 16:06:31.144725 2026] [:error] [pid 17808:tid 17811] [client 20.238.112.20:15563] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aeskh-arbOEFI8qshvLH8AAAAEE"]
[Fri Apr 24 16:06:32.763637 2026] [:error] [pid 14531:tid 14536] [client 20.238.112.20:15060] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aeskiHfLU2gw-6KR-GZvwAAAAUM"]
[Fri Apr 24 16:06:35.495251 2026] [:error] [pid 14531:tid 14541] [client 20.238.112.20:7113] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "aeski3fLU2gw-6KR-GZwJgAAAUg"]
[Fri Apr 24 16:06:39.912164 2026] [:error] [pid 17720:tid 17758] [client 20.238.112.20:15313] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctex1.php"] [unique_id "aeskj-hlUs6BS3Ng7_UY_AAAAMQ"]
[Fri Apr 24 16:06:42.469853 2026] [:error] [pid 14531:tid 14557] [client 20.238.112.20:17371] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctex1.php"] [unique_id "aeskknfLU2gw-6KR-GZwOQAAAVg"]
[Fri Apr 24 16:06:46.555440 2026] [:error] [pid 17808:tid 17829] [client 20.238.112.20:15585] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctex1.php"] [unique_id "aeskluarbOEFI8qshvLIQwAAAFM"]
[Fri Apr 24 16:06:49.659564 2026] [:error] [pid 17808:tid 17817] [client 20.238.112.20:2389] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ctex1.php"] [unique_id "aeskmearbOEFI8qshvLISQAAAEc"]
[Fri Apr 24 16:06:54.303176 2026] [proxy_fcgi:error] [pid 14531:tid 14556] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:54.605270 2026] [proxy_fcgi:error] [pid 14531:tid 14548] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:54.913477 2026] [proxy_fcgi:error] [pid 14531:tid 14534] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:55.216116 2026] [proxy_fcgi:error] [pid 14531:tid 14536] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:55.527379 2026] [proxy_fcgi:error] [pid 14531:tid 14540] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:55.829203 2026] [proxy_fcgi:error] [pid 14531:tid 14556] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:56.142348 2026] [proxy_fcgi:error] [pid 14531:tid 14548] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:56.446159 2026] [proxy_fcgi:error] [pid 14531:tid 14535] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:56.748086 2026] [proxy_fcgi:error] [pid 14531:tid 14549] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:57.049888 2026] [proxy_fcgi:error] [pid 14531:tid 14538] [client 20.238.112.20:7634] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:06:57.648501 2026] [:error] [pid 14531:tid 14557] [client 20.238.112.20:7634] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeskoXfLU2gw-6KR-GZwmwAAAVg"]
[Fri Apr 24 16:07:00.268552 2026] [:error] [pid 14531:tid 14544] [client 20.238.112.20:7105] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeskpHfLU2gw-6KR-GZwngAAAUs"]
[Fri Apr 24 16:07:02.686887 2026] [:error] [pid 22114:tid 22127] [client 20.238.112.20:8614] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeskpoAuWGz3WlMQjoe6YwAAAQo"]
[Fri Apr 24 16:07:05.288139 2026] [:error] [pid 22114:tid 22117] [client 20.238.112.20:7125] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bfil.php"] [unique_id "aeskqYAuWGz3WlMQjoe6ZwAAAQA"]
[Fri Apr 24 16:07:11.245194 2026] [:error] [pid 17808:tid 17834] [client 20.238.112.20:19960] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abrand.php"] [unique_id "aeskr-arbOEFI8qshvLInAAAAFg"]
[Fri Apr 24 16:07:16.033448 2026] [:error] [pid 14531:tid 14548] [client 20.238.112.20:9913] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abrand.php"] [unique_id "aesktHfLU2gw-6KR-GZwuQAAAU8"]
[Fri Apr 24 16:07:16.978122 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:17122] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abrand.php"] [unique_id "aesktOhlUs6BS3Ng7_UZlwAAANE"]
[Fri Apr 24 16:07:19.599893 2026] [:error] [pid 17720:tid 17761] [client 20.238.112.20:21241] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abrand.php"] [unique_id "aeskt-hlUs6BS3Ng7_UZmwAAAMc"]
[Fri Apr 24 16:07:20.790831 2026] [:error] [pid 17808:tid 17834] [client 20.238.112.20:2694] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeskuOarbOEFI8qshvLIywAAAFg"]
[Fri Apr 24 16:07:22.702056 2026] [:error] [pid 17808:tid 17814] [client 20.238.112.20:16113] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeskuuarbOEFI8qshvLI0QAAAEQ"]
[Fri Apr 24 16:07:25.483188 2026] [:error] [pid 14531:tid 14543] [client 20.238.112.20:2560] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeskvXfLU2gw-6KR-GZw1wAAAUo"]
[Fri Apr 24 16:07:27.658628 2026] [:error] [pid 17808:tid 17831] [client 20.238.112.20:21894] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amax.php"] [unique_id "aeskv-arbOEFI8qshvLI2wAAAFU"]
[Fri Apr 24 16:07:28.743736 2026] [:error] [pid 17720:tid 17765] [client 20.238.112.20:10880] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeskwOhlUs6BS3Ng7_UZtwAAAMs"]
[Fri Apr 24 16:07:30.109574 2026] [:error] [pid 17720:tid 17761] [client 20.238.112.20:2499] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeskwuhlUs6BS3Ng7_UZyAAAAMc"]
[Fri Apr 24 16:07:31.131925 2026] [:error] [pid 17720:tid 17763] [client 20.238.112.20:25305] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeskw-hlUs6BS3Ng7_UZzgAAAMk"]
[Fri Apr 24 16:07:32.986190 2026] [:error] [pid 14531:tid 14548] [client 20.238.112.20:12436] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "aeskxHfLU2gw-6KR-GZw5gAAAU8"]
[Fri Apr 24 16:07:34.956980 2026] [:error] [pid 14531:tid 14538] [client 20.238.112.20:12435] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aeskxnfLU2gw-6KR-GZw6wAAAUU"]
[Fri Apr 24 16:07:35.856888 2026] [:error] [pid 17720:tid 17757] [client 20.238.112.20:17657] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aeskx-hlUs6BS3Ng7_UZ5AAAAMM"]
[Fri Apr 24 16:07:36.861659 2026] [:error] [pid 14531:tid 14533] [client 20.238.112.20:11730] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aeskyHfLU2gw-6KR-GZw8wAAAUA"]
[Fri Apr 24 16:07:38.289872 2026] [:error] [pid 17808:tid 17813] [client 20.238.112.20:13751] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amwxl.php"] [unique_id "aeskyuarbOEFI8qshvLI_wAAAEM"]
[Fri Apr 24 16:07:39.500071 2026] [:error] [pid 17719:tid 17736] [client 20.238.112.20:13700] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aesky8TZ9gzEyL1BkPpt_wAAAIk"]
[Fri Apr 24 16:07:42.835299 2026] [:error] [pid 14531:tid 14556] [client 20.238.112.20:30332] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeskznfLU2gw-6KR-GZw-gAAAVc"]
[Fri Apr 24 16:07:43.884455 2026] [:error] [pid 17808:tid 17827] [client 20.238.112.20:14279] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aeskz-arbOEFI8qshvLJGwAAAFE"]
[Fri Apr 24 16:07:47.432229 2026] [:error] [pid 14531:tid 14534] [client 20.238.112.20:16009] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wmore1.php"] [unique_id "aesk03fLU2gw-6KR-GZxEAAAAUE"]
[Fri Apr 24 16:07:49.051450 2026] [:error] [pid 17721:tid 17799] [client 20.238.112.20:8153] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aesk1eFXXkLeyDnfk__0IAAAABI"]
[Fri Apr 24 16:07:49.916385 2026] [:error] [pid 17721:tid 17791] [client 20.238.112.20:12738] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/userfuns.php"] [unique_id "aesk1eFXXkLeyDnfk__0IgAAAAo"]
[Fri Apr 24 16:07:57.044503 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:57.297590 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:57.550751 2026] [proxy_fcgi:error] [pid 17808:tid 17829] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:57.803748 2026] [proxy_fcgi:error] [pid 17808:tid 17823] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:58.066835 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:58.328463 2026] [proxy_fcgi:error] [pid 17808:tid 17815] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:58.581050 2026] [proxy_fcgi:error] [pid 17808:tid 17822] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:58.833689 2026] [proxy_fcgi:error] [pid 17808:tid 17821] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:59.087062 2026] [proxy_fcgi:error] [pid 17808:tid 17811] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:59.341095 2026] [proxy_fcgi:error] [pid 17808:tid 17830] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:59.598265 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 20.238.112.20:12000] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:07:59.850670 2026] [:error] [pid 17808:tid 17832] [client 20.238.112.20:12000] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aesk3-arbOEFI8qshvLJRQAAAFY"]
[Fri Apr 24 16:08:03.046662 2026] [:error] [pid 22114:tid 22129] [client 20.238.112.20:13752] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aesk44AuWGz3WlMQjoe61AAAAQw"]
[Fri Apr 24 16:08:06.703200 2026] [:error] [pid 17721:tid 17786] [client 20.238.112.20:10633] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aesk5uFXXkLeyDnfk__0QQAAAAU"]
[Fri Apr 24 16:08:09.705503 2026] [:error] [pid 17720:tid 17771] [client 20.238.112.20:16061] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/koiy.php"] [unique_id "aesk6ehlUs6BS3Ng7_UaJAAAANE"]
[Fri Apr 24 16:08:11.698499 2026] [:error] [pid 17721:tid 17789] [client 20.238.112.20:39568] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "aesk6-FXXkLeyDnfk__0SAAAAAg"]
[Fri Apr 24 16:08:13.217308 2026] [:error] [pid 17721:tid 17793] [client 20.238.112.20:25833] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "aesk7eFXXkLeyDnfk__0UAAAAAw"]
[Fri Apr 24 16:08:15.532372 2026] [:error] [pid 14531:tid 14548] [client 20.238.112.20:39642] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "aesk73fLU2gw-6KR-GZxKQAAAU8"]
[Fri Apr 24 16:08:17.487883 2026] [:error] [pid 22114:tid 22118] [client 20.238.112.20:38948] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "aesk8YAuWGz3WlMQjoe62wAAAQE"]
[Fri Apr 24 16:08:18.747309 2026] [:error] [pid 17808:tid 17826] [client 20.238.112.20:12778] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aesk8uarbOEFI8qshvLJXwAAAFA"]
[Fri Apr 24 16:08:20.201383 2026] [:error] [pid 17808:tid 17834] [client 20.238.112.20:14294] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aesk9OarbOEFI8qshvLJYwAAAFg"]
[Fri Apr 24 16:08:21.152006 2026] [:error] [pid 14531:tid 14533] [client 20.238.112.20:13718] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aesk9XfLU2gw-6KR-GZxNQAAAUA"]
[Fri Apr 24 16:08:22.354758 2026] [:error] [pid 17719:tid 17737] [client 20.238.112.20:12967] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aesk9sTZ9gzEyL1BkPpuSAAAAIo"]
[Fri Apr 24 16:08:24.279937 2026] [:error] [pid 17719:tid 17746] [client 20.238.112.20:8338] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sa.php7"] [unique_id "aesk-MTZ9gzEyL1BkPpuSgAAAJM"]
[Fri Apr 24 16:08:26.583505 2026] [:error] [pid 17719:tid 17729] [client 20.238.112.20:21198] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sa.php7"] [unique_id "aesk-sTZ9gzEyL1BkPpuTgAAAII"]
[Fri Apr 24 16:08:27.791480 2026] [:error] [pid 17719:tid 17749] [client 20.238.112.20:14332] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sa.php7"] [unique_id "aesk-8TZ9gzEyL1BkPpuVAAAAJY"]
[Fri Apr 24 16:08:29.767676 2026] [:error] [pid 14531:tid 14551] [client 20.238.112.20:8343] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sa.php7"] [unique_id "aesk_XfLU2gw-6KR-GZxTgAAAVI"]
[Fri Apr 24 16:08:31.300330 2026] [:error] [pid 17808:tid 17817] [client 20.238.112.20:8191] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aesk_-arbOEFI8qshvLJcQAAAEc"]
[Fri Apr 24 16:08:33.880590 2026] [:error] [pid 17720:tid 17763] [client 20.238.112.20:14283] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeslAehlUs6BS3Ng7_UaUQAAAMk"]
[Fri Apr 24 16:08:36.147344 2026] [:error] [pid 14531:tid 14545] [client 20.238.112.20:30304] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeslBHfLU2gw-6KR-GZxXQAAAUw"]
[Fri Apr 24 16:08:38.950215 2026] [:error] [pid 14531:tid 14545] [client 20.238.112.20:40089] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "aeslBnfLU2gw-6KR-GZxaAAAAUw"]
[Fri Apr 24 16:08:40.299600 2026] [:error] [pid 14531:tid 14556] [client 20.238.112.20:12953] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aeslCHfLU2gw-6KR-GZxdAAAAVc"]
[Fri Apr 24 16:08:40.899153 2026] [:error] [pid 17808:tid 17817] [client 20.238.112.20:8348] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aeslCOarbOEFI8qshvLJjQAAAEc"]
[Fri Apr 24 16:08:42.279302 2026] [:error] [pid 17720:tid 17776] [client 20.238.112.20:25834] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aeslCuhlUs6BS3Ng7_UaYQAAANY"]
[Fri Apr 24 16:08:42.888362 2026] [:error] [pid 17719:tid 17742] [client 20.238.112.20:38918] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "aeslCsTZ9gzEyL1BkPpuXAAAAI8"]
[Fri Apr 24 16:08:44.841000 2026] [:error] [pid 17720:tid 17757] [client 20.238.112.20:38928] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeslDOhlUs6BS3Ng7_UadAAAAMM"]
[Fri Apr 24 16:08:46.013759 2026] [:error] [pid 22114:tid 22125] [client 20.238.112.20:30312] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeslDoAuWGz3WlMQjoe66AAAAQg"]
[Fri Apr 24 16:08:48.734906 2026] [:error] [pid 17808:tid 17818] [client 20.238.112.20:39557] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeslEOarbOEFI8qshvLJqQAAAEg"]
[Fri Apr 24 16:08:49.907192 2026] [:error] [pid 14531:tid 14542] [client 20.238.112.20:40185] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "aeslEXfLU2gw-6KR-GZxeQAAAUk"]
[Fri Apr 24 16:08:52.276624 2026] [:error] [pid 17808:tid 17810] [client 20.238.112.20:29823] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aeslFOarbOEFI8qshvLJrwAAAEA"]
[Fri Apr 24 16:08:56.551006 2026] [:error] [pid 22114:tid 22128] [client 20.238.112.20:40075] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp5.php"] [unique_id "aeslGIAuWGz3WlMQjoe69gAAAQs"]
[Fri Apr 24 16:09:01.012895 2026] [proxy_fcgi:error] [pid 14531:tid 14538] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:01.268554 2026] [proxy_fcgi:error] [pid 14531:tid 14557] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:01.526447 2026] [proxy_fcgi:error] [pid 14531:tid 14552] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:01.798019 2026] [proxy_fcgi:error] [pid 14531:tid 14535] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:02.066521 2026] [proxy_fcgi:error] [pid 14531:tid 14548] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:02.327429 2026] [proxy_fcgi:error] [pid 14531:tid 14546] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:02.581089 2026] [proxy_fcgi:error] [pid 14531:tid 14543] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:02.834773 2026] [proxy_fcgi:error] [pid 14531:tid 14548] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:03.090304 2026] [proxy_fcgi:error] [pid 14531:tid 14544] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:03.345996 2026] [proxy_fcgi:error] [pid 14531:tid 14538] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:03.600268 2026] [proxy_fcgi:error] [pid 14531:tid 14543] [client 20.238.112.20:2096] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:09:03.887911 2026] [:error] [pid 14531:tid 14539] [client 20.238.112.20:2096] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aeslH3fLU2gw-6KR-GZx6QAAAUY"]
[Fri Apr 24 16:09:04.552680 2026] [:error] [pid 17720:tid 17761] [client 20.238.112.20:25743] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aeslIOhlUs6BS3Ng7_UazgAAAMc"]
[Fri Apr 24 16:09:09.653816 2026] [:error] [pid 14531:tid 14543] [client 20.238.112.20:25736] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aeslJXfLU2gw-6KR-GZx8AAAAUo"]
[Fri Apr 24 16:09:10.957651 2026] [:error] [pid 17808:tid 17815] [client 20.238.112.20:10173] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packsin1.php"] [unique_id "aeslJuarbOEFI8qshvLJzQAAAEU"]
[Fri Apr 24 16:09:12.830110 2026] [:error] [pid 17808:tid 17832] [client 20.238.112.20:19430] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeslKOarbOEFI8qshvLJ0gAAAFY"]
[Fri Apr 24 16:09:14.539474 2026] [:error] [pid 17719:tid 17745] [client 20.238.112.20:10725] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeslKsTZ9gzEyL1BkPpuqQAAAJI"]
[Fri Apr 24 16:09:16.606180 2026] [:error] [pid 17719:tid 17748] [client 20.238.112.20:15545] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeslLMTZ9gzEyL1BkPpusAAAAJU"]
[Fri Apr 24 16:09:17.665058 2026] [:error] [pid 17808:tid 17813] [client 20.238.112.20:17912] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "aeslLearbOEFI8qshvLJ1wAAAEM"]
[Fri Apr 24 16:09:18.841011 2026] [:error] [pid 17721:tid 17800] [client 20.238.112.20:40825] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "aeslLuFXXkLeyDnfk__0ngAAABM"]
[Fri Apr 24 16:09:21.453176 2026] [:error] [pid 17808:tid 17823] [client 20.238.112.20:26805] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "aeslMearbOEFI8qshvLJ4AAAAE0"]
[Fri Apr 24 16:09:23.858935 2026] [:error] [pid 17808:tid 17831] [client 20.238.112.20:9612] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "aeslM-arbOEFI8qshvLJ8gAAAFU"]
[Fri Apr 24 16:09:26.258970 2026] [:error] [pid 17720:tid 17774] [client 20.238.112.20:18637] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "aeslNuhlUs6BS3Ng7_UbGAAAANQ"]
[Fri Apr 24 16:09:27.966591 2026] [:error] [pid 22114:tid 22138] [client 20.238.112.20:13184] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeslN4AuWGz3WlMQjoe7AAAAARU"]
[Fri Apr 24 16:09:29.498681 2026] [:error] [pid 17720:tid 17766] [client 20.238.112.20:11511] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeslOehlUs6BS3Ng7_UbLQAAAMw"]
[Fri Apr 24 16:09:30.902823 2026] [:error] [pid 17720:tid 17770] [client 20.238.112.20:21511] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeslOuhlUs6BS3Ng7_UbPwAAANA"]
[Fri Apr 24 16:09:32.255618 2026] [:error] [pid 17808:tid 17815] [client 20.238.112.20:26857] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/motu.php"] [unique_id "aeslPOarbOEFI8qshvLKFAAAAEU"]
[Fri Apr 24 16:09:34.373778 2026] [:error] [pid 17720:tid 17762] [client 20.238.112.20:17059] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeslPuhlUs6BS3Ng7_UbXgAAAMg"]
[Fri Apr 24 16:09:36.691631 2026] [:error] [pid 17720:tid 17775] [client 20.238.112.20:35579] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeslQOhlUs6BS3Ng7_UbdgAAANU"]
[Fri Apr 24 16:09:37.410269 2026] [:error] [pid 17719:tid 17741] [client 20.238.112.20:2166] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeslQcTZ9gzEyL1BkPpuyQAAAI4"]
[Fri Apr 24 16:09:38.626818 2026] [:error] [pid 17808:tid 17817] [client 20.238.112.20:36202] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "aeslQuarbOEFI8qshvLKKAAAAEc"]
[Fri Apr 24 16:09:39.650923 2026] [:error] [pid 17720:tid 17758] [client 20.238.112.20:36154] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeslQ-hlUs6BS3Ng7_UbfAAAAMQ"]
[Fri Apr 24 16:09:41.361532 2026] [:error] [pid 22114:tid 22133] [client 20.238.112.20:34336] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeslRYAuWGz3WlMQjoe7DAAAARA"]
[Fri Apr 24 16:09:42.729529 2026] [:error] [pid 17719:tid 17751] [client 20.238.112.20:34360] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeslRsTZ9gzEyL1BkPpu0QAAAJg"]
[Fri Apr 24 16:09:44.543373 2026] [:error] [pid 17719:tid 17734] [client 20.238.112.20:2913] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xa.php"] [unique_id "aeslSMTZ9gzEyL1BkPpu4QAAAIc"]
[Fri Apr 24 16:09:47.550804 2026] [:error] [pid 17808:tid 17834] [client 20.238.112.20:12498] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeslS-arbOEFI8qshvLKOQAAAFg"]
[Fri Apr 24 16:09:49.150200 2026] [:error] [pid 17808:tid 17819] [client 20.238.112.20:34769] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeslTearbOEFI8qshvLKRgAAAEk"]
[Fri Apr 24 16:09:52.670275 2026] [:error] [pid 17720:tid 17760] [client 20.238.112.20:12237] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeslUOhlUs6BS3Ng7_UbjQAAAMY"]
[Fri Apr 24 16:09:53.839764 2026] [:error] [pid 17808:tid 17827] [client 20.238.112.20:17331] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8573.php"] [unique_id "aeslUearbOEFI8qshvLKZAAAAFE"]
[Fri Apr 24 16:09:55.412400 2026] [:error] [pid 17808:tid 17820] [client 20.238.112.20:12502] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeslU-arbOEFI8qshvLKcAAAAEo"]
[Fri Apr 24 16:09:56.056891 2026] [:error] [pid 14531:tid 14545] [client 20.238.112.20:2825] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeslVHfLU2gw-6KR-GZyLQAAAUw"]
[Fri Apr 24 16:09:58.472030 2026] [:error] [pid 14531:tid 14543] [client 20.238.112.20:14023] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeslVnfLU2gw-6KR-GZyPwAAAUo"]
[Fri Apr 24 16:09:59.365051 2026] [:error] [pid 14531:tid 14548] [client 20.238.112.20:9725] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sadcut1.php"] [unique_id "aeslV3fLU2gw-6KR-GZySAAAAU8"]
[Fri Apr 24 16:10:00.232693 2026] [:error] [pid 17808:tid 17813] [client 20.238.112.20:14019] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeslWOarbOEFI8qshvLKdgAAAEM"]
[Fri Apr 24 16:10:01.374331 2026] [:error] [pid 17808:tid 17823] [client 20.238.112.20:12535] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeslWearbOEFI8qshvLKeAAAAE0"]
[Fri Apr 24 16:10:02.464942 2026] [:error] [pid 17721:tid 17783] [client 20.238.112.20:9673] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "aeslWuFXXkLeyDnfk__00AAAAAI"]
[Fri Apr 24 16:10:03.371847 2026] [proxy_fcgi:error] [pid 17720:tid 17769] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:03.625291 2026] [proxy_fcgi:error] [pid 17720:tid 17759] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:03.878997 2026] [proxy_fcgi:error] [pid 17720:tid 17760] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:04.130521 2026] [proxy_fcgi:error] [pid 17720:tid 17763] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:04.382760 2026] [proxy_fcgi:error] [pid 17720:tid 17767] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:04.642508 2026] [proxy_fcgi:error] [pid 17720:tid 17774] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:04.904944 2026] [proxy_fcgi:error] [pid 17720:tid 17777] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:05.159357 2026] [proxy_fcgi:error] [pid 17720:tid 17768] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:05.414581 2026] [proxy_fcgi:error] [pid 17720:tid 17756] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:05.669730 2026] [proxy_fcgi:error] [pid 17720:tid 17770] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:05.923063 2026] [proxy_fcgi:error] [pid 17720:tid 17755] [client 20.238.112.20:35134] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 16:10:06.175561 2026] [:error] [pid 17720:tid 17754] [client 20.238.112.20:35134] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeslXuhlUs6BS3Ng7_UcBAAAAMA"]
[Fri Apr 24 16:10:08.874330 2026] [:error] [pid 17808:tid 17812] [client 20.238.112.20:15262] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeslYOarbOEFI8qshvLKfwAAAEI"]
[Fri Apr 24 16:10:09.833914 2026] [:error] [pid 17720:tid 17769] [client 20.238.112.20:14043] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeslYehlUs6BS3Ng7_UcEwAAAM8"]
[Fri Apr 24 16:10:10.821899 2026] [:error] [pid 17719:tid 17739] [client 20.238.112.20:34717] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ai.php"] [unique_id "aeslYsTZ9gzEyL1BkPpu9wAAAIw"]
[Fri Apr 24 16:10:11.457987 2026] [:error] [pid 17721:tid 17784] [client 20.238.112.20:7101] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeslY-FXXkLeyDnfk__0_AAAAAM"]
[Fri Apr 24 16:10:13.491364 2026] [:error] [pid 17721:tid 17782] [client 20.238.112.20:34756] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeslZeFXXkLeyDnfk__0_gAAAAE"]
[Fri Apr 24 16:10:15.324582 2026] [:error] [pid 17719:tid 17748] [client 20.238.112.20:12491] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeslZ8TZ9gzEyL1BkPpu_QAAAJU"]
[Fri Apr 24 16:10:16.322162 2026] [:error] [pid 22114:tid 22134] [client 20.238.112.20:18834] [client 20.238.112.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jga.php"] [unique_id "aeslaIAuWGz3WlMQjoe7WwAAARE"]
[Fri Apr 24 16:37:34.336453 2026] [:error] [pid 17720:tid 17770] [client 195.178.110.241:58942] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "aesrzuhlUs6BS3Ng7_UrSgAAANA"]
[Fri Apr 24 18:33:20.003604 2026] [proxy_fcgi:error] [pid 17721:tid 17785] [client 145.239.10.137:39387] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/php.php
[Fri Apr 24 20:36:09.380020 2026] [:error] [pid 17719:tid 17741] [client 160.30.179.124:39198] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env"] [unique_id "aetjucTZ9gzEyL1BkPqo0gAAAI4"]
[Fri Apr 24 20:41:16.528386 2026] [proxy_fcgi:error] [pid 22114:tid 22130] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:16.776529 2026] [proxy_fcgi:error] [pid 22114:tid 22137] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:17.141246 2026] [proxy_fcgi:error] [pid 22114:tid 22139] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:17.381414 2026] [proxy_fcgi:error] [pid 22114:tid 22127] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:17.670251 2026] [proxy_fcgi:error] [pid 22114:tid 22119] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:17.974279 2026] [proxy_fcgi:error] [pid 22114:tid 22129] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:18.215359 2026] [proxy_fcgi:error] [pid 22114:tid 22124] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:18.477720 2026] [proxy_fcgi:error] [pid 22114:tid 22136] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:18.719287 2026] [proxy_fcgi:error] [pid 22114:tid 22120] [client 51.107.76.164:23087] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:41:19.300516 2026] [:error] [pid 22114:tid 22132] [client 51.107.76.164:23087] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "aetk74AuWGz3WlMQjofqeQAAAQ8"]
[Fri Apr 24 20:41:19.940921 2026] [:error] [pid 17808:tid 17834] [client 51.107.76.164:27226] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "aetk7-arbOEFI8qshvI1KQAAAFg"]
[Fri Apr 24 20:41:20.803730 2026] [:error] [pid 17720:tid 17774] [client 51.107.76.164:32379] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "aetk8OhlUs6BS3Ng7_Wi4QAAANQ"]
[Fri Apr 24 20:41:21.555066 2026] [:error] [pid 17808:tid 17817] [client 51.107.76.164:32328] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "aetk8earbOEFI8qshvI1MgAAAEc"]
[Fri Apr 24 20:41:22.433035 2026] [:error] [pid 17720:tid 17769] [client 51.107.76.164:35083] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aetk8uhlUs6BS3Ng7_Wi5AAAAM8"]
[Fri Apr 24 20:41:23.121890 2026] [:error] [pid 17720:tid 17772] [client 51.107.76.164:2804] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aetk8-hlUs6BS3Ng7_Wi5gAAANI"]
[Fri Apr 24 20:41:23.755302 2026] [:error] [pid 17720:tid 17757] [client 51.107.76.164:2357] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aetk8-hlUs6BS3Ng7_Wi6AAAAMM"]
[Fri Apr 24 20:41:24.796473 2026] [:error] [pid 22114:tid 22117] [client 51.107.76.164:32382] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "aetk9IAuWGz3WlMQjofqfgAAAQA"]
[Fri Apr 24 20:41:25.521861 2026] [:error] [pid 17720:tid 17776] [client 51.107.76.164:34865] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "aetk9ehlUs6BS3Ng7_Wi6gAAANY"]
[Fri Apr 24 20:41:26.517597 2026] [:error] [pid 17720:tid 17767] [client 51.107.76.164:30227] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "aetk9uhlUs6BS3Ng7_Wi7AAAAM0"]
[Fri Apr 24 20:41:27.538183 2026] [:error] [pid 17720:tid 17773] [client 51.107.76.164:27231] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "aetk9-hlUs6BS3Ng7_Wi7wAAANM"]
[Fri Apr 24 20:41:28.287652 2026] [:error] [pid 4177:tid 4204] [client 51.107.76.164:14379] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "aetk-H2asKnvdrSe0x4KmQAAAZM"]
[Fri Apr 24 20:41:29.081744 2026] [:error] [pid 17719:tid 17737] [client 51.107.76.164:2784] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.admin.php"] [unique_id "aetk-cTZ9gzEyL1BkPqpvQAAAIo"]
[Fri Apr 24 20:41:29.635328 2026] [:error] [pid 4177:tid 4203] [client 51.107.76.164:18124] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.admin.php"] [unique_id "aetk-X2asKnvdrSe0x4KnQAAAZI"]
[Fri Apr 24 20:41:30.262685 2026] [:error] [pid 17721:tid 17801] [client 51.107.76.164:22345] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.admin.php"] [unique_id "aetk-uFXXkLeyDnfk_86VQAAABQ"]
[Fri Apr 24 20:41:32.114727 2026] [:error] [pid 17808:tid 17832] [client 51.107.76.164:38125] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.admin.php"] [unique_id "aetk_OarbOEFI8qshvI1XgAAAFY"]
[Fri Apr 24 20:41:34.231534 2026] [:error] [pid 4177:tid 4196] [client 51.107.76.164:40712] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sw.php"] [unique_id "aetk_n2asKnvdrSe0x4KqAAAAYs"]
[Fri Apr 24 20:41:35.516204 2026] [:error] [pid 17719:tid 17727] [client 51.107.76.164:2752] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sw.php"] [unique_id "aetk_8TZ9gzEyL1BkPqpwAAAAIA"]
[Fri Apr 24 20:41:36.673003 2026] [:error] [pid 4177:tid 4191] [client 51.107.76.164:18125] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sw.php"] [unique_id "aetlAH2asKnvdrSe0x4KtQAAAYY"]
[Fri Apr 24 20:41:37.568621 2026] [:error] [pid 4177:tid 4197] [client 51.107.76.164:30232] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sw.php"] [unique_id "aetlAX2asKnvdrSe0x4KuAAAAYw"]
[Fri Apr 24 20:41:38.308984 2026] [:error] [pid 4177:tid 4195] [client 51.107.76.164:34853] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aetlAn2asKnvdrSe0x4KvgAAAYo"]
[Fri Apr 24 20:41:39.279016 2026] [:error] [pid 17720:tid 17763] [client 51.107.76.164:35080] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aetlA-hlUs6BS3Ng7_Wi_QAAAMk"]
[Fri Apr 24 20:41:40.128251 2026] [:error] [pid 4177:tid 4193] [client 51.107.76.164:27204] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aetlBH2asKnvdrSe0x4KywAAAYg"]
[Fri Apr 24 20:41:40.919639 2026] [:error] [pid 22114:tid 22128] [client 51.107.76.164:27768] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vuln.php"] [unique_id "aetlBIAuWGz3WlMQjofqhAAAAQs"]
[Fri Apr 24 20:41:41.756492 2026] [:error] [pid 4177:tid 4193] [client 51.107.76.164:35116] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-temp.php"] [unique_id "aetlBX2asKnvdrSe0x4K0wAAAYg"]
[Fri Apr 24 20:41:42.940123 2026] [:error] [pid 4177:tid 4197] [client 51.107.76.164:40718] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-temp.php"] [unique_id "aetlBn2asKnvdrSe0x4K1wAAAYw"]
[Fri Apr 24 20:41:44.213474 2026] [:error] [pid 14531:tid 14547] [client 51.107.76.164:38122] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-temp.php"] [unique_id "aetlCHfLU2gw-6KR-GbHGgAAAU4"]
[Fri Apr 24 20:41:44.878704 2026] [:error] [pid 17720:tid 17762] [client 51.107.76.164:27720] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-temp.php"] [unique_id "aetlCOhlUs6BS3Ng7_WjAQAAAMg"]
[Fri Apr 24 20:41:45.719946 2026] [:error] [pid 4177:tid 4201] [client 51.107.76.164:48428] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aetlCX2asKnvdrSe0x4K4wAAAZA"]
[Fri Apr 24 20:41:46.404858 2026] [:error] [pid 17721:tid 17783] [client 51.107.76.164:38102] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aetlCuFXXkLeyDnfk_86bwAAAAI"]
[Fri Apr 24 20:41:47.104078 2026] [:error] [pid 4177:tid 4191] [client 51.107.76.164:18173] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aetlC32asKnvdrSe0x4K5wAAAYY"]
[Fri Apr 24 20:41:47.801137 2026] [:error] [pid 4177:tid 4188] [client 51.107.76.164:18909] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sxdfrt.php"] [unique_id "aetlC32asKnvdrSe0x4K6gAAAYM"]
[Fri Apr 24 20:41:48.643887 2026] [:error] [pid 4177:tid 4187] [client 51.107.76.164:22371] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aetlDH2asKnvdrSe0x4K7gAAAYI"]
[Fri Apr 24 20:41:49.237661 2026] [:error] [pid 4177:tid 4192] [client 51.107.76.164:18887] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aetlDX2asKnvdrSe0x4K8AAAAYc"]
[Fri Apr 24 20:41:49.859304 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:35110] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aetlDX2asKnvdrSe0x4K8QAAAYQ"]
[Fri Apr 24 20:41:50.423067 2026] [:error] [pid 4177:tid 4204] [client 51.107.76.164:17364] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aetlDn2asKnvdrSe0x4K9gAAAZM"]
[Fri Apr 24 20:41:50.989543 2026] [:error] [pid 17721:tid 17801] [client 51.107.76.164:35128] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aetlDuFXXkLeyDnfk_86cwAAABQ"]
[Fri Apr 24 20:41:51.773483 2026] [:error] [pid 17808:tid 17819] [client 51.107.76.164:22382] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aetlD-arbOEFI8qshvI1fgAAAEk"]
[Fri Apr 24 20:41:52.318698 2026] [:error] [pid 17808:tid 17824] [client 51.107.76.164:20063] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aetlEOarbOEFI8qshvI1hQAAAE4"]
[Fri Apr 24 20:41:53.206570 2026] [:error] [pid 4177:tid 4204] [client 51.107.76.164:48399] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aetlEX2asKnvdrSe0x4K_gAAAZM"]
[Fri Apr 24 20:41:53.689893 2026] [:error] [pid 4177:tid 4202] [client 51.107.76.164:35086] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-bda.php"] [unique_id "aetlEX2asKnvdrSe0x4LAAAAAZE"]
[Fri Apr 24 20:41:54.317357 2026] [:error] [pid 17808:tid 17821] [client 51.107.76.164:17358] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-bda.php"] [unique_id "aetlEuarbOEFI8qshvI1iwAAAEs"]
[Fri Apr 24 20:41:54.917476 2026] [:error] [pid 4177:tid 4186] [client 51.107.76.164:30215] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-bda.php"] [unique_id "aetlEn2asKnvdrSe0x4LBQAAAYE"]
[Fri Apr 24 20:41:55.668113 2026] [:error] [pid 14531:tid 14534] [client 51.107.76.164:17400] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-bda.php"] [unique_id "aetlE3fLU2gw-6KR-GbHIwAAAUE"]
[Fri Apr 24 20:41:56.247035 2026] [:error] [pid 17719:tid 17737] [client 51.107.76.164:18939] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bhm.php"] [unique_id "aetlFMTZ9gzEyL1BkPqpyAAAAIo"]
[Fri Apr 24 20:41:56.859186 2026] [:error] [pid 17720:tid 17773] [client 51.107.76.164:35085] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bhm.php"] [unique_id "aetlFOhlUs6BS3Ng7_WjCgAAANM"]
[Fri Apr 24 20:41:57.551310 2026] [:error] [pid 17720:tid 17762] [client 51.107.76.164:24601] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bhm.php"] [unique_id "aetlFehlUs6BS3Ng7_WjCwAAAMg"]
[Fri Apr 24 20:41:58.160777 2026] [:error] [pid 17720:tid 17777] [client 51.107.76.164:40706] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bhm.php"] [unique_id "aetlFuhlUs6BS3Ng7_WjDAAAANc"]
[Fri Apr 24 20:41:58.792332 2026] [:error] [pid 14531:tid 14538] [client 51.107.76.164:24624] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmu.php"] [unique_id "aetlFnfLU2gw-6KR-GbHKQAAAUU"]
[Fri Apr 24 20:41:59.405170 2026] [:error] [pid 4177:tid 4198] [client 51.107.76.164:30245] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmu.php"] [unique_id "aetlF32asKnvdrSe0x4LGQAAAY0"]
[Fri Apr 24 20:42:00.126387 2026] [:error] [pid 17719:tid 17729] [client 51.107.76.164:20080] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmu.php"] [unique_id "aetlGMTZ9gzEyL1BkPqpywAAAII"]
[Fri Apr 24 20:42:00.882678 2026] [:error] [pid 4177:tid 4192] [client 51.107.76.164:20034] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmu.php"] [unique_id "aetlGH2asKnvdrSe0x4LIAAAAYc"]
[Fri Apr 24 20:42:01.711624 2026] [:error] [pid 17720:tid 17763] [client 51.107.76.164:2757] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ref.php"] [unique_id "aetlGehlUs6BS3Ng7_WjFQAAAMk"]
[Fri Apr 24 20:42:02.432693 2026] [:error] [pid 17720:tid 17765] [client 51.107.76.164:27719] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ref.php"] [unique_id "aetlGuhlUs6BS3Ng7_WjFwAAAMs"]
[Fri Apr 24 20:42:02.982833 2026] [:error] [pid 17808:tid 17824] [client 51.107.76.164:18161] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ref.php"] [unique_id "aetlGuarbOEFI8qshvI1jgAAAE4"]
[Fri Apr 24 20:42:03.697539 2026] [:error] [pid 17808:tid 17823] [client 51.107.76.164:38114] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ref.php"] [unique_id "aetlG-arbOEFI8qshvI1kAAAAE0"]
[Fri Apr 24 20:42:04.302681 2026] [:error] [pid 17720:tid 17768] [client 51.107.76.164:2349] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xme.php"] [unique_id "aetlHOhlUs6BS3Ng7_WjIAAAAM4"]
[Fri Apr 24 20:42:04.854589 2026] [:error] [pid 17720:tid 17756] [client 51.107.76.164:2855] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xme.php"] [unique_id "aetlHOhlUs6BS3Ng7_WjJAAAAMI"]
[Fri Apr 24 20:42:05.405150 2026] [:error] [pid 14531:tid 14544] [client 51.107.76.164:18890] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xme.php"] [unique_id "aetlHXfLU2gw-6KR-GbHLwAAAUs"]
[Fri Apr 24 20:42:06.263929 2026] [:error] [pid 4177:tid 4187] [client 51.107.76.164:18929] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xme.php"] [unique_id "aetlHn2asKnvdrSe0x4LJQAAAYI"]
[Fri Apr 24 20:42:07.087138 2026] [:error] [pid 4177:tid 4207] [client 51.107.76.164:28756] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aetlH32asKnvdrSe0x4LKwAAAZY"]
[Fri Apr 24 20:42:07.763355 2026] [:error] [pid 22114:tid 22134] [client 51.107.76.164:24582] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aetlH4AuWGz3WlMQjofqlAAAARE"]
[Fri Apr 24 20:42:08.735310 2026] [:error] [pid 22114:tid 22129] [client 51.107.76.164:24637] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aetlIIAuWGz3WlMQjofqmwAAAQw"]
[Fri Apr 24 20:42:09.908575 2026] [:error] [pid 17719:tid 17749] [client 51.107.76.164:35105] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminer.php"] [unique_id "aetlIcTZ9gzEyL1BkPqpzwAAAJY"]
[Fri Apr 24 20:42:10.677722 2026] [:error] [pid 17808:tid 17816] [client 51.107.76.164:30265] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ktfow.php"] [unique_id "aetlIuarbOEFI8qshvI1mAAAAEY"]
[Fri Apr 24 20:42:11.632172 2026] [:error] [pid 17719:tid 17737] [client 51.107.76.164:18132] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ktfow.php"] [unique_id "aetlI8TZ9gzEyL1BkPqp0wAAAIo"]
[Fri Apr 24 20:42:12.618087 2026] [:error] [pid 17808:tid 17818] [client 51.107.76.164:30239] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ktfow.php"] [unique_id "aetlJOarbOEFI8qshvI1mgAAAEg"]
[Fri Apr 24 20:42:13.324640 2026] [:error] [pid 17719:tid 17731] [client 51.107.76.164:22369] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ktfow.php"] [unique_id "aetlJcTZ9gzEyL1BkPqp1gAAAIQ"]
[Fri Apr 24 20:42:14.548964 2026] [:error] [pid 14531:tid 14554] [client 51.107.76.164:17349] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "aetlJnfLU2gw-6KR-GbHNQAAAVU"]
[Fri Apr 24 20:42:15.442518 2026] [:error] [pid 4177:tid 4187] [client 51.107.76.164:35134] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "aetlJ32asKnvdrSe0x4LLgAAAYI"]
[Fri Apr 24 20:42:16.292551 2026] [:error] [pid 17721:tid 17797] [client 51.107.76.164:27203] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "aetlKOFXXkLeyDnfk_86iQAAABA"]
[Fri Apr 24 20:42:17.470281 2026] [:error] [pid 14531:tid 14537] [client 51.107.76.164:2839] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mode.php"] [unique_id "aetlKXfLU2gw-6KR-GbHOAAAAUQ"]
[Fri Apr 24 20:42:18.115677 2026] [proxy_fcgi:error] [pid 4177:tid 4200] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:18.412114 2026] [proxy_fcgi:error] [pid 4177:tid 4195] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:18.653968 2026] [proxy_fcgi:error] [pid 4177:tid 4193] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:19.135774 2026] [proxy_fcgi:error] [pid 4177:tid 4208] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:19.419650 2026] [proxy_fcgi:error] [pid 4177:tid 4187] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:19.712626 2026] [proxy_fcgi:error] [pid 4177:tid 4198] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:19.976870 2026] [proxy_fcgi:error] [pid 4177:tid 4201] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:20.219651 2026] [proxy_fcgi:error] [pid 4177:tid 4185] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:20.463746 2026] [proxy_fcgi:error] [pid 4177:tid 4205] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:20.750906 2026] [proxy_fcgi:error] [pid 4177:tid 4189] [client 51.107.76.164:18175] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:42:21.020482 2026] [:error] [pid 4177:tid 4209] [client 51.107.76.164:18175] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aetlLX2asKnvdrSe0x4LTQAAAZg"]
[Fri Apr 24 20:42:21.743815 2026] [:error] [pid 14531:tid 14552] [client 51.107.76.164:38126] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aetlLXfLU2gw-6KR-GbHOgAAAVM"]
[Fri Apr 24 20:42:22.318451 2026] [:error] [pid 22114:tid 22140] [client 51.107.76.164:47864] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aetlLoAuWGz3WlMQjofqpgAAARc"]
[Fri Apr 24 20:42:27.499419 2026] [:error] [pid 22114:tid 22139] [client 51.107.76.164:2785] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "aetlM4AuWGz3WlMQjofqqgAAARY"]
[Fri Apr 24 20:42:28.621981 2026] [:error] [pid 4177:tid 4205] [client 51.107.76.164:27220] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "aetlNH2asKnvdrSe0x4LUQAAAZQ"]
[Fri Apr 24 20:43:17.957398 2026] [:error] [pid 4177:tid 4205] [client 51.107.76.164:29550] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aetlZX2asKnvdrSe0x4LxQAAAZQ"]
[Fri Apr 24 20:43:18.595916 2026] [:error] [pid 4177:tid 4207] [client 51.107.76.164:51445] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aetlZn2asKnvdrSe0x4LxwAAAZY"]
[Fri Apr 24 20:43:19.155932 2026] [:error] [pid 17720:tid 17766] [client 51.107.76.164:31942] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "aetlZ-hlUs6BS3Ng7_WjfwAAAMw"]
[Fri Apr 24 20:43:20.247999 2026] [proxy_fcgi:error] [pid 14531:tid 14555] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:20.489651 2026] [proxy_fcgi:error] [pid 14531:tid 14541] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:20.731067 2026] [proxy_fcgi:error] [pid 14531:tid 14547] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:21.152198 2026] [proxy_fcgi:error] [pid 14531:tid 14548] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:21.392894 2026] [proxy_fcgi:error] [pid 14531:tid 14534] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:21.793979 2026] [proxy_fcgi:error] [pid 14531:tid 14546] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:22.272085 2026] [proxy_fcgi:error] [pid 14531:tid 14553] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:22.711979 2026] [proxy_fcgi:error] [pid 14531:tid 14540] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:22.953347 2026] [proxy_fcgi:error] [pid 14531:tid 14549] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:23.288071 2026] [proxy_fcgi:error] [pid 14531:tid 14539] [client 51.107.76.164:36922] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:43:23.526341 2026] [:error] [pid 14531:tid 14538] [client 51.107.76.164:36922] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aetla3fLU2gw-6KR-GbHZgAAAUU"]
[Fri Apr 24 20:43:25.388990 2026] [:error] [pid 4177:tid 4201] [client 51.107.76.164:39600] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aetlbX2asKnvdrSe0x4L3gAAAZA"]
[Fri Apr 24 20:43:26.853778 2026] [:error] [pid 4177:tid 4199] [client 51.107.76.164:41077] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aetlbn2asKnvdrSe0x4L6AAAAY4"]
[Fri Apr 24 20:43:28.160588 2026] [:error] [pid 14531:tid 14556] [client 51.107.76.164:20796] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/7.php"] [unique_id "aetlcHfLU2gw-6KR-GbHaQAAAVc"]
[Fri Apr 24 20:43:29.317016 2026] [:error] [pid 22114:tid 22120] [client 51.107.76.164:36614] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aetlcYAuWGz3WlMQjofqvAAAAQM"]
[Fri Apr 24 20:43:30.054682 2026] [:error] [pid 17719:tid 17743] [client 51.107.76.164:18102] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aetlcsTZ9gzEyL1BkPqqMwAAAJA"]
[Fri Apr 24 20:43:30.628505 2026] [:error] [pid 17721:tid 17801] [client 51.107.76.164:31954] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aetlcuFXXkLeyDnfk_860QAAABQ"]
[Fri Apr 24 20:43:31.144982 2026] [:error] [pid 17808:tid 17816] [client 51.107.76.164:36847] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "aetlc-arbOEFI8qshvI2DgAAAEY"]
[Fri Apr 24 20:43:32.172817 2026] [:error] [pid 22114:tid 22117] [client 51.107.76.164:36806] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aetldIAuWGz3WlMQjofqwgAAAQA"]
[Fri Apr 24 20:43:33.415555 2026] [:error] [pid 17808:tid 17831] [client 51.107.76.164:36644] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aetldearbOEFI8qshvI2EQAAAFU"]
[Fri Apr 24 20:43:34.856797 2026] [:error] [pid 4177:tid 4194] [client 51.107.76.164:36823] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aetldn2asKnvdrSe0x4L_QAAAYk"]
[Fri Apr 24 20:43:35.552548 2026] [:error] [pid 17720:tid 17762] [client 51.107.76.164:41485] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "aetld-hlUs6BS3Ng7_WjigAAAMg"]
[Fri Apr 24 20:43:36.221532 2026] [:error] [pid 14531:tid 14549] [client 51.107.76.164:51405] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aetleHfLU2gw-6KR-GbHbwAAAVA"]
[Fri Apr 24 20:43:36.802520 2026] [:error] [pid 14531:tid 14552] [client 51.107.76.164:39579] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aetleHfLU2gw-6KR-GbHcAAAAVM"]
[Fri Apr 24 20:43:37.668684 2026] [:error] [pid 4177:tid 4193] [client 51.107.76.164:39583] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aetleX2asKnvdrSe0x4MAwAAAYg"]
[Fri Apr 24 20:43:38.725642 2026] [:error] [pid 17721:tid 17787] [client 51.107.76.164:16537] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "aetleuFXXkLeyDnfk_860gAAAAY"]
[Fri Apr 24 20:43:39.514554 2026] [:error] [pid 4177:tid 4208] [client 51.107.76.164:2643] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aetle32asKnvdrSe0x4MCQAAAZc"]
[Fri Apr 24 20:43:40.385475 2026] [:error] [pid 4177:tid 4192] [client 51.107.76.164:41076] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aetlfH2asKnvdrSe0x4MDgAAAYc"]
[Fri Apr 24 20:43:40.911570 2026] [:error] [pid 14531:tid 14547] [client 51.107.76.164:25389] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aetlfHfLU2gw-6KR-GbHdQAAAU4"]
[Fri Apr 24 20:43:42.041574 2026] [:error] [pid 17719:tid 17731] [client 51.107.76.164:41024] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "aetlfsTZ9gzEyL1BkPqqOAAAAIQ"]
[Fri Apr 24 20:43:42.712196 2026] [:error] [pid 17719:tid 17732] [client 51.107.76.164:31021] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aetlfsTZ9gzEyL1BkPqqOgAAAIU"]
[Fri Apr 24 20:43:43.429442 2026] [:error] [pid 22114:tid 22138] [client 51.107.76.164:16272] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aetlf4AuWGz3WlMQjofqywAAARU"]
[Fri Apr 24 20:43:44.103429 2026] [:error] [pid 22114:tid 22129] [client 51.107.76.164:21173] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aetlgIAuWGz3WlMQjofqzAAAAQw"]
[Fri Apr 24 20:43:44.860867 2026] [:error] [pid 17721:tid 17800] [client 51.107.76.164:39555] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "aetlgOFXXkLeyDnfk_862QAAABM"]
[Fri Apr 24 20:43:45.686859 2026] [:error] [pid 4177:tid 4194] [client 51.107.76.164:33470] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aetlgX2asKnvdrSe0x4MFwAAAYk"]
[Fri Apr 24 20:43:46.409152 2026] [:error] [pid 17808:tid 17816] [client 51.107.76.164:36824] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aetlguarbOEFI8qshvI2GgAAAEY"]
[Fri Apr 24 20:43:47.458104 2026] [:error] [pid 14531:tid 14540] [client 51.107.76.164:39604] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aetlg3fLU2gw-6KR-GbHeAAAAUc"]
[Fri Apr 24 20:43:48.475653 2026] [:error] [pid 17721:tid 17787] [client 51.107.76.164:36824] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "aetlhOFXXkLeyDnfk_865gAAAAY"]
[Fri Apr 24 20:43:49.222537 2026] [:error] [pid 4177:tid 4186] [client 51.107.76.164:16263] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aetlhX2asKnvdrSe0x4MHgAAAYE"]
[Fri Apr 24 20:43:50.109391 2026] [:error] [pid 17720:tid 17762] [client 51.107.76.164:25352] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aetlhuhlUs6BS3Ng7_WjkwAAAMg"]
[Fri Apr 24 20:43:50.965605 2026] [:error] [pid 17721:tid 17800] [client 51.107.76.164:40706] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aetlhuFXXkLeyDnfk_866QAAABM"]
[Fri Apr 24 20:43:51.921135 2026] [:error] [pid 22114:tid 22122] [client 51.107.76.164:18824] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "aetlh4AuWGz3WlMQjofq0QAAAQU"]
[Fri Apr 24 20:43:54.233058 2026] [:error] [pid 4177:tid 4196] [client 51.107.76.164:16295] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aetlin2asKnvdrSe0x4MLQAAAYs"]
[Fri Apr 24 20:43:57.904066 2026] [:error] [pid 4177:tid 4198] [client 51.107.76.164:17312] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aetljX2asKnvdrSe0x4MMgAAAY0"]
[Fri Apr 24 20:43:59.318892 2026] [:error] [pid 17808:tid 17818] [client 51.107.76.164:26933] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aetlj-arbOEFI8qshvI2KAAAAEg"]
[Fri Apr 24 20:44:00.064321 2026] [:error] [pid 17719:tid 17750] [client 51.107.76.164:2663] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/9.php"] [unique_id "aetlkMTZ9gzEyL1BkPqqQwAAAJc"]
[Fri Apr 24 20:44:01.352404 2026] [:error] [pid 22114:tid 22133] [client 51.107.76.164:14692] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aetlkYAuWGz3WlMQjofq1gAAARA"]
[Fri Apr 24 20:44:02.243637 2026] [:error] [pid 4177:tid 4198] [client 51.107.76.164:2684] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aetlkn2asKnvdrSe0x4MOAAAAY0"]
[Fri Apr 24 20:44:02.879021 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:20778] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aetlkn2asKnvdrSe0x4MOwAAAYQ"]
[Fri Apr 24 20:44:03.650714 2026] [:error] [pid 17808:tid 17810] [client 51.107.76.164:51465] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/10.php"] [unique_id "aetlk-arbOEFI8qshvI2LAAAAEA"]
[Fri Apr 24 20:44:04.571104 2026] [:error] [pid 17808:tid 17817] [client 51.107.76.164:40335] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aetllOarbOEFI8qshvI2LgAAAEc"]
[Fri Apr 24 20:44:05.605073 2026] [:error] [pid 4177:tid 4206] [client 51.107.76.164:35827] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aetllX2asKnvdrSe0x4MPgAAAZU"]
[Fri Apr 24 20:44:07.084713 2026] [:error] [pid 14531:tid 14544] [client 51.107.76.164:41496] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aetll3fLU2gw-6KR-GbHhgAAAUs"]
[Fri Apr 24 20:44:08.508879 2026] [:error] [pid 14531:tid 14548] [client 51.107.76.164:2675] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "aetlmHfLU2gw-6KR-GbHiwAAAU8"]
[Fri Apr 24 20:44:09.250455 2026] [:error] [pid 17721:tid 17798] [client 51.107.76.164:15645] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "aetlmeFXXkLeyDnfk_87BQAAABE"]
[Fri Apr 24 20:44:10.367223 2026] [:error] [pid 4177:tid 4207] [client 51.107.76.164:62946] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "aetlmn2asKnvdrSe0x4MQgAAAZY"]
[Fri Apr 24 20:44:12.899610 2026] [:error] [pid 17808:tid 17822] [client 51.107.76.164:26911] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "aetlnOarbOEFI8qshvI2MwAAAEw"]
[Fri Apr 24 20:44:13.785569 2026] [:error] [pid 17720:tid 17776] [client 51.107.76.164:62941] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "aetlnehlUs6BS3Ng7_WjlwAAANY"]
[Fri Apr 24 20:44:15.407581 2026] [:error] [pid 17720:tid 17758] [client 51.107.76.164:40357] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "aetln-hlUs6BS3Ng7_WjnAAAAMQ"]
[Fri Apr 24 20:44:16.111851 2026] [:error] [pid 4177:tid 4201] [client 51.107.76.164:19032] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "aetloH2asKnvdrSe0x4MSgAAAZA"]
[Fri Apr 24 20:44:16.815761 2026] [:error] [pid 4177:tid 4185] [client 51.107.76.164:14712] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "aetloH2asKnvdrSe0x4MSwAAAYA"]
[Fri Apr 24 20:44:17.518324 2026] [:error] [pid 4177:tid 4200] [client 51.107.76.164:16338] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35_S.php"] [unique_id "aetloX2asKnvdrSe0x4MTwAAAY8"]
[Fri Apr 24 20:44:18.675458 2026] [:error] [pid 4177:tid 4207] [client 51.107.76.164:54233] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aetlon2asKnvdrSe0x4MUwAAAZY"]
[Fri Apr 24 20:44:19.431158 2026] [:error] [pid 17721:tid 17796] [client 51.107.76.164:2956] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aetlo-FXXkLeyDnfk_87DQAAAA8"]
[Fri Apr 24 20:44:20.108904 2026] [:error] [pid 17721:tid 17784] [client 51.107.76.164:16064] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aetlpOFXXkLeyDnfk_87DgAAAAM"]
[Fri Apr 24 20:44:20.737926 2026] [:error] [pid 22114:tid 22140] [client 51.107.76.164:33456] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "aetlpIAuWGz3WlMQjofq4gAAARc"]
[Fri Apr 24 20:44:21.418488 2026] [:error] [pid 17721:tid 17798] [client 51.107.76.164:15668] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aetlpeFXXkLeyDnfk_87DwAAABE"]
[Fri Apr 24 20:44:22.196569 2026] [:error] [pid 17721:tid 17790] [client 51.107.76.164:23836] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/111.php"] [unique_id "aetlpuFXXkLeyDnfk_87EAAAAAk"]
[Fri Apr 24 20:44:23.295835 2026] [proxy_fcgi:error] [pid 17719:tid 17735] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:23.641999 2026] [proxy_fcgi:error] [pid 17719:tid 17744] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:23.931634 2026] [proxy_fcgi:error] [pid 17719:tid 17740] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:24.173390 2026] [proxy_fcgi:error] [pid 17719:tid 17733] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:24.541352 2026] [proxy_fcgi:error] [pid 17719:tid 17729] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:25.039790 2026] [proxy_fcgi:error] [pid 17719:tid 17738] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:25.373570 2026] [proxy_fcgi:error] [pid 17719:tid 17746] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:25.614085 2026] [proxy_fcgi:error] [pid 17719:tid 17734] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:25.913654 2026] [proxy_fcgi:error] [pid 17719:tid 17741] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:26.153897 2026] [proxy_fcgi:error] [pid 17719:tid 17727] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:26.486111 2026] [proxy_fcgi:error] [pid 17719:tid 17748] [client 51.107.76.164:26905] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:44:26.735442 2026] [:error] [pid 17719:tid 17736] [client 51.107.76.164:26905] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aetlqsTZ9gzEyL1BkPqqXAAAAIk"]
[Fri Apr 24 20:44:27.298342 2026] [:error] [pid 4177:tid 4185] [client 51.107.76.164:18823] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aetlq32asKnvdrSe0x4MaQAAAYA"]
[Fri Apr 24 20:44:28.172472 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:33416] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aetlrH2asKnvdrSe0x4MbgAAAYQ"]
[Fri Apr 24 20:44:29.057421 2026] [:error] [pid 17719:tid 17744] [client 51.107.76.164:15677] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "aetlrcTZ9gzEyL1BkPqqXwAAAJE"]
[Fri Apr 24 20:44:30.200005 2026] [:error] [pid 17721:tid 17805] [client 51.107.76.164:35838] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aetlruFXXkLeyDnfk_87FwAAABg"]
[Fri Apr 24 20:44:30.786386 2026] [:error] [pid 17721:tid 17782] [client 51.107.76.164:33408] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aetlruFXXkLeyDnfk_87GAAAAAE"]
[Fri Apr 24 20:44:31.882351 2026] [:error] [pid 17719:tid 17748] [client 51.107.76.164:15629] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aetlr8TZ9gzEyL1BkPqqZwAAAJU"]
[Fri Apr 24 20:44:32.764917 2026] [:error] [pid 14531:tid 14556] [client 51.107.76.164:17058] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inege.php"] [unique_id "aetlsHfLU2gw-6KR-GbHqwAAAVc"]
[Fri Apr 24 20:44:33.556864 2026] [:error] [pid 4177:tid 4197] [client 51.107.76.164:28679] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetlsX2asKnvdrSe0x4McwAAAYw"]
[Fri Apr 24 20:44:34.374132 2026] [:error] [pid 17720:tid 17765] [client 51.107.76.164:54244] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetlsuhlUs6BS3Ng7_WjtQAAAMs"]
[Fri Apr 24 20:44:35.157563 2026] [:error] [pid 14531:tid 14543] [client 51.107.76.164:42670] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetls3fLU2gw-6KR-GbHtAAAAUo"]
[Fri Apr 24 20:44:36.213145 2026] [:error] [pid 4177:tid 4194] [client 51.107.76.164:39214] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetltH2asKnvdrSe0x4MdgAAAYk"]
[Fri Apr 24 20:44:38.698705 2026] [:error] [pid 17719:tid 17730] [client 51.107.76.164:23474] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aetltsTZ9gzEyL1BkPqqlQAAAIM"]
[Fri Apr 24 20:44:40.092981 2026] [:error] [pid 4177:tid 4188] [client 51.107.76.164:16331] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aetluH2asKnvdrSe0x4MhAAAAYM"]
[Fri Apr 24 20:44:40.794682 2026] [:error] [pid 17721:tid 17782] [client 51.107.76.164:39224] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aetluOFXXkLeyDnfk_87MQAAAAE"]
[Fri Apr 24 20:44:42.015194 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:14669] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uuu.php"] [unique_id "aetlun2asKnvdrSe0x4MjQAAAYQ"]
[Fri Apr 24 20:44:44.050989 2026] [:error] [pid 17719:tid 17732] [client 51.107.76.164:17063] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aetlvMTZ9gzEyL1BkPqqnQAAAIU"]
[Fri Apr 24 20:44:46.799291 2026] [:error] [pid 17808:tid 17825] [client 51.107.76.164:54246] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aetlvuarbOEFI8qshvI2RwAAAE8"]
[Fri Apr 24 20:44:48.214545 2026] [:error] [pid 17720:tid 17778] [client 51.107.76.164:39177] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aetlwOhlUs6BS3Ng7_WjvQAAANg"]
[Fri Apr 24 20:44:49.955081 2026] [:error] [pid 17719:tid 17738] [client 51.107.76.164:42630] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no1.php"] [unique_id "aetlwcTZ9gzEyL1BkPqqsQAAAIs"]
[Fri Apr 24 20:44:51.051391 2026] [:error] [pid 17720:tid 17759] [client 51.107.76.164:54227] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aetlw-hlUs6BS3Ng7_WjyQAAAMU"]
[Fri Apr 24 20:44:52.515743 2026] [:error] [pid 4177:tid 4209] [client 51.107.76.164:23464] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aetlxH2asKnvdrSe0x4MnAAAAZg"]
[Fri Apr 24 20:44:53.477783 2026] [:error] [pid 17719:tid 17737] [client 51.107.76.164:28727] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aetlxcTZ9gzEyL1BkPqqtQAAAIo"]
[Fri Apr 24 20:44:54.706693 2026] [:error] [pid 14531:tid 14557] [client 51.107.76.164:28694] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w2025.php"] [unique_id "aetlxnfLU2gw-6KR-GbH1QAAAVg"]
[Fri Apr 24 20:44:55.470351 2026] [:error] [pid 17720:tid 17758] [client 51.107.76.164:2434] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aetlx-hlUs6BS3Ng7_Wj2AAAAMQ"]
[Fri Apr 24 20:44:56.414627 2026] [:error] [pid 14531:tid 14556] [client 51.107.76.164:17070] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aetlyHfLU2gw-6KR-GbH2QAAAVc"]
[Fri Apr 24 20:44:57.125887 2026] [:error] [pid 17721:tid 17798] [client 51.107.76.164:42635] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aetlyeFXXkLeyDnfk_87OAAAABE"]
[Fri Apr 24 20:44:57.744966 2026] [:error] [pid 17720:tid 17778] [client 51.107.76.164:23444] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fvvff.php"] [unique_id "aetlyehlUs6BS3Ng7_Wj3wAAANg"]
[Fri Apr 24 20:44:59.228115 2026] [:error] [pid 4177:tid 4186] [client 51.107.76.164:23865] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aetly32asKnvdrSe0x4MoAAAAYE"]
[Fri Apr 24 20:45:01.872466 2026] [:error] [pid 17720:tid 17776] [client 51.107.76.164:22757] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aetlzehlUs6BS3Ng7_Wj4wAAANY"]
[Fri Apr 24 20:45:03.729730 2026] [:error] [pid 17719:tid 17744] [client 51.107.76.164:34603] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aetlz8TZ9gzEyL1BkPqqvAAAAJE"]
[Fri Apr 24 20:45:05.454408 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:28717] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a2.php"] [unique_id "aetl0X2asKnvdrSe0x4MtQAAAYQ"]
[Fri Apr 24 20:45:06.295489 2026] [:error] [pid 4177:tid 4194] [client 51.107.76.164:37591] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aetl0n2asKnvdrSe0x4MvAAAAYk"]
[Fri Apr 24 20:45:07.312157 2026] [:error] [pid 17719:tid 17727] [client 51.107.76.164:16370] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aetl08TZ9gzEyL1BkPqqvwAAAIA"]
[Fri Apr 24 20:45:08.220283 2026] [:error] [pid 22114:tid 22136] [client 51.107.76.164:41908] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aetl1IAuWGz3WlMQjofq8gAAARM"]
[Fri Apr 24 20:45:09.197702 2026] [:error] [pid 22114:tid 22131] [client 51.107.76.164:16353] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "aetl1YAuWGz3WlMQjofq-AAAAQ4"]
[Fri Apr 24 20:45:09.846418 2026] [:error] [pid 22114:tid 22132] [client 51.107.76.164:48399] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aetl1YAuWGz3WlMQjofq-gAAAQ8"]
[Fri Apr 24 20:45:10.643947 2026] [:error] [pid 17808:tid 17831] [client 51.107.76.164:37585] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aetl1uarbOEFI8qshvI2WQAAAFU"]
[Fri Apr 24 20:45:11.263465 2026] [:error] [pid 17719:tid 17748] [client 51.107.76.164:37897] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aetl18TZ9gzEyL1BkPqqxwAAAJU"]
[Fri Apr 24 20:45:11.777005 2026] [:error] [pid 17808:tid 17823] [client 51.107.76.164:34591] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "aetl1-arbOEFI8qshvI2XQAAAE0"]
[Fri Apr 24 20:45:12.325879 2026] [:error] [pid 17721:tid 17800] [client 51.107.76.164:37903] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl2OFXXkLeyDnfk_87QgAAABM"]
[Fri Apr 24 20:45:12.957095 2026] [:error] [pid 22114:tid 22129] [client 51.107.76.164:34567] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl2IAuWGz3WlMQjofq_QAAAQw"]
[Fri Apr 24 20:45:13.586514 2026] [:error] [pid 22114:tid 22118] [client 51.107.76.164:34560] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl2YAuWGz3WlMQjofq_wAAAQE"]
[Fri Apr 24 20:45:14.512119 2026] [:error] [pid 22114:tid 22124] [client 51.107.76.164:2975] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl2oAuWGz3WlMQjofrBAAAAQc"]
[Fri Apr 24 20:45:15.414178 2026] [:error] [pid 17808:tid 17818] [client 51.107.76.164:32631] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aetl2-arbOEFI8qshvI2aQAAAEg"]
[Fri Apr 24 20:45:16.255965 2026] [:error] [pid 4177:tid 4207] [client 51.107.76.164:16320] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aetl3H2asKnvdrSe0x4MxAAAAZY"]
[Fri Apr 24 20:45:19.693796 2026] [:error] [pid 17808:tid 17826] [client 51.107.76.164:37935] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aetl3-arbOEFI8qshvI2dgAAAFA"]
[Fri Apr 24 20:45:20.292297 2026] [:error] [pid 17720:tid 17776] [client 51.107.76.164:2474] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/66.php"] [unique_id "aetl4OhlUs6BS3Ng7_Wj6gAAANY"]
[Fri Apr 24 20:45:20.919012 2026] [:error] [pid 17808:tid 17831] [client 51.107.76.164:32581] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aetl4OarbOEFI8qshvI2fAAAAFU"]
[Fri Apr 24 20:45:21.517112 2026] [:error] [pid 14531:tid 14536] [client 51.107.76.164:37610] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aetl4XfLU2gw-6KR-GbH6AAAAUM"]
[Fri Apr 24 20:45:22.086119 2026] [:error] [pid 17721:tid 17805] [client 51.107.76.164:35379] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aetl4uFXXkLeyDnfk_87SAAAABg"]
[Fri Apr 24 20:45:23.029687 2026] [:error] [pid 14531:tid 14535] [client 51.107.76.164:22725] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "aetl43fLU2gw-6KR-GbH7AAAAUI"]
[Fri Apr 24 20:45:23.557413 2026] [:error] [pid 17719:tid 17731] [client 51.107.76.164:32604] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aetl48TZ9gzEyL1BkPqq0QAAAIQ"]
[Fri Apr 24 20:45:24.210276 2026] [:error] [pid 14531:tid 14550] [client 51.107.76.164:39185] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aetl5HfLU2gw-6KR-GbH8AAAAVE"]
[Fri Apr 24 20:45:24.848159 2026] [:error] [pid 17808:tid 17834] [client 51.107.76.164:35371] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aetl5OarbOEFI8qshvI2hwAAAFg"]
[Fri Apr 24 20:45:25.739311 2026] [:error] [pid 17808:tid 17824] [client 51.107.76.164:41871] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ol.php"] [unique_id "aetl5earbOEFI8qshvI2jAAAAE4"]
[Fri Apr 24 20:45:26.357303 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:26.597221 2026] [proxy_fcgi:error] [pid 17808:tid 17818] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:26.837366 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:27.144437 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:27.667603 2026] [proxy_fcgi:error] [pid 17808:tid 17811] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:27.913272 2026] [proxy_fcgi:error] [pid 17808:tid 17832] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:28.170722 2026] [proxy_fcgi:error] [pid 17808:tid 17827] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:28.972552 2026] [proxy_fcgi:error] [pid 17808:tid 17817] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:29.213089 2026] [proxy_fcgi:error] [pid 17808:tid 17823] [client 51.107.76.164:19483] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:45:29.450694 2026] [:error] [pid 17808:tid 17826] [client 51.107.76.164:19483] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aetl6earbOEFI8qshvI2oQAAAFA"]
[Fri Apr 24 20:45:30.179456 2026] [:error] [pid 22114:tid 22119] [client 51.107.76.164:49460] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aetl6oAuWGz3WlMQjofrCgAAAQI"]
[Fri Apr 24 20:45:31.157446 2026] [:error] [pid 4177:tid 4185] [client 51.107.76.164:35623] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aetl632asKnvdrSe0x4M1AAAAYA"]
[Fri Apr 24 20:45:31.891679 2026] [:error] [pid 17721:tid 17782] [client 51.107.76.164:41912] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/"] [unique_id "aetl6-FXXkLeyDnfk_87VgAAAAE"]
[Fri Apr 24 20:45:32.867049 2026] [:error] [pid 14531:tid 14540] [client 51.107.76.164:41811] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl7HfLU2gw-6KR-GbH_AAAAUc"]
[Fri Apr 24 20:45:33.928627 2026] [:error] [pid 17719:tid 17727] [client 51.107.76.164:35355] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl7cTZ9gzEyL1BkPqq3QAAAIA"]
[Fri Apr 24 20:45:35.284337 2026] [:error] [pid 14531:tid 14536] [client 51.107.76.164:16061] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl73fLU2gw-6KR-GbH_QAAAUM"]
[Fri Apr 24 20:45:36.508288 2026] [:error] [pid 14531:tid 14541] [client 51.107.76.164:41831] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "aetl8HfLU2gw-6KR-GbIAAAAAUg"]
[Fri Apr 24 20:45:37.119710 2026] [:error] [pid 14531:tid 14548] [client 51.107.76.164:24264] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl8XfLU2gw-6KR-GbIAwAAAU8"]
[Fri Apr 24 20:45:37.877425 2026] [:error] [pid 14531:tid 14537] [client 51.107.76.164:41818] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl8XfLU2gw-6KR-GbIBgAAAUQ"]
[Fri Apr 24 20:45:39.524948 2026] [:error] [pid 4177:tid 4200] [client 51.107.76.164:24277] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl832asKnvdrSe0x4M2wAAAY8"]
[Fri Apr 24 20:45:40.602447 2026] [:error] [pid 17719:tid 17743] [client 51.107.76.164:26947] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl9MTZ9gzEyL1BkPqq4QAAAJA"]
[Fri Apr 24 20:45:41.227323 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:14412] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aetl9X2asKnvdrSe0x4M3gAAAYQ"]
[Fri Apr 24 20:45:41.909704 2026] [:error] [pid 4177:tid 4206] [client 51.107.76.164:35363] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aetl9X2asKnvdrSe0x4M3wAAAZU"]
[Fri Apr 24 20:45:42.674577 2026] [:error] [pid 4177:tid 4199] [client 51.107.76.164:16015] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aetl9n2asKnvdrSe0x4M5AAAAY4"]
[Fri Apr 24 20:45:43.255933 2026] [:error] [pid 4177:tid 4204] [client 51.107.76.164:35353] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "aetl932asKnvdrSe0x4M6QAAAZM"]
[Fri Apr 24 20:45:43.972235 2026] [:error] [pid 17720:tid 17756] [client 51.107.76.164:19457] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl9-hlUs6BS3Ng7_WkBQAAAMI"]
[Fri Apr 24 20:45:44.464963 2026] [:error] [pid 17720:tid 17767] [client 51.107.76.164:44097] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl-OhlUs6BS3Ng7_WkCwAAAM0"]
[Fri Apr 24 20:45:45.021488 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:32638] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl-X2asKnvdrSe0x4M8QAAAYQ"]
[Fri Apr 24 20:45:45.699153 2026] [:error] [pid 17720:tid 17757] [client 51.107.76.164:31917] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "aetl-ehlUs6BS3Ng7_WkEAAAAMM"]
[Fri Apr 24 20:45:46.322208 2026] [:error] [pid 22114:tid 22141] [client 51.107.76.164:49425] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aetl-oAuWGz3WlMQjofrDQAAARg"]
[Fri Apr 24 20:45:46.927931 2026] [:error] [pid 14531:tid 14539] [client 51.107.76.164:26961] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aetl-nfLU2gw-6KR-GbIDwAAAUY"]
[Fri Apr 24 20:45:47.552014 2026] [:error] [pid 17719:tid 17727] [client 51.107.76.164:16884] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aetl-8TZ9gzEyL1BkPqq5gAAAIA"]
[Fri Apr 24 20:45:48.089370 2026] [:error] [pid 17808:tid 17828] [client 51.107.76.164:35387] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "aetl_OarbOEFI8qshvI2sgAAAFI"]
[Fri Apr 24 20:45:48.865579 2026] [:error] [pid 17808:tid 17819] [client 51.107.76.164:17134] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aetl_OarbOEFI8qshvI2tAAAAEk"]
[Fri Apr 24 20:45:49.419635 2026] [:error] [pid 17720:tid 17772] [client 51.107.76.164:16890] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aetl_ehlUs6BS3Ng7_WkHAAAANI"]
[Fri Apr 24 20:45:50.026456 2026] [:error] [pid 4177:tid 4201] [client 51.107.76.164:19531] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aetl_n2asKnvdrSe0x4M8wAAAZA"]
[Fri Apr 24 20:45:50.736248 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:26948] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/index.php"] [unique_id "aetl_n2asKnvdrSe0x4M9AAAAYQ"]
[Fri Apr 24 20:45:51.486114 2026] [:error] [pid 4177:tid 4188] [client 51.107.76.164:35595] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aetl_32asKnvdrSe0x4M-AAAAYM"]
[Fri Apr 24 20:45:52.128295 2026] [:error] [pid 17719:tid 17730] [client 51.107.76.164:32623] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aetmAMTZ9gzEyL1BkPqq7gAAAIM"]
[Fri Apr 24 20:45:52.762004 2026] [:error] [pid 17721:tid 17784] [client 51.107.76.164:17129] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aetmAOFXXkLeyDnfk_87YQAAAAM"]
[Fri Apr 24 20:45:53.245017 2026] [:error] [pid 17720:tid 17765] [client 51.107.76.164:24304] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "aetmAehlUs6BS3Ng7_WkJgAAAMs"]
[Fri Apr 24 20:45:53.846616 2026] [:error] [pid 17720:tid 17756] [client 51.107.76.164:49466] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmAehlUs6BS3Ng7_WkKQAAAMI"]
[Fri Apr 24 20:45:54.461567 2026] [:error] [pid 4177:tid 4200] [client 51.107.76.164:31878] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmAn2asKnvdrSe0x4M_AAAAY8"]
[Fri Apr 24 20:45:55.086708 2026] [:error] [pid 17808:tid 17823] [client 51.107.76.164:14402] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmA-arbOEFI8qshvI2uQAAAE0"]
[Fri Apr 24 20:45:55.914970 2026] [:error] [pid 17720:tid 17764] [client 51.107.76.164:19723] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmA-hlUs6BS3Ng7_WkMQAAAMo"]
[Fri Apr 24 20:45:56.661592 2026] [:error] [pid 17721:tid 17791] [client 51.107.76.164:14460] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aetmBOFXXkLeyDnfk_87ZgAAAAo"]
[Fri Apr 24 20:45:57.489414 2026] [:error] [pid 17720:tid 17776] [client 51.107.76.164:17112] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aetmBehlUs6BS3Ng7_WkNAAAANY"]
[Fri Apr 24 20:45:58.562807 2026] [:error] [pid 4177:tid 4198] [client 51.107.76.164:31900] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aetmBn2asKnvdrSe0x4NAAAAAY0"]
[Fri Apr 24 20:45:59.754087 2026] [:error] [pid 17808:tid 17813] [client 51.107.76.164:37634] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/we.php"] [unique_id "aetmB-arbOEFI8qshvI2wAAAAEM"]
[Fri Apr 24 20:46:00.464004 2026] [:error] [pid 4177:tid 4188] [client 51.107.76.164:19544] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aetmCH2asKnvdrSe0x4NAQAAAYM"]
[Fri Apr 24 20:46:01.091041 2026] [:error] [pid 17721:tid 17782] [client 51.107.76.164:24288] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aetmCeFXXkLeyDnfk_87agAAAAE"]
[Fri Apr 24 20:46:01.982383 2026] [:error] [pid 4177:tid 4185] [client 51.107.76.164:35635] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aetmCX2asKnvdrSe0x4NCAAAAYA"]
[Fri Apr 24 20:46:02.659040 2026] [:error] [pid 17720:tid 17754] [client 51.107.76.164:2083] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "aetmCuhlUs6BS3Ng7_WkRwAAAMA"]
[Fri Apr 24 20:46:03.193305 2026] [:error] [pid 17720:tid 17755] [client 51.107.76.164:31892] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aetmC-hlUs6BS3Ng7_WkSAAAAME"]
[Fri Apr 24 20:46:03.725553 2026] [:error] [pid 17720:tid 17762] [client 51.107.76.164:26971] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aetmC-hlUs6BS3Ng7_WkSwAAAMg"]
[Fri Apr 24 20:46:04.373781 2026] [:error] [pid 4177:tid 4202] [client 51.107.76.164:19814] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aetmDH2asKnvdrSe0x4NDQAAAZE"]
[Fri Apr 24 20:46:05.303943 2026] [:error] [pid 17720:tid 17778] [client 51.107.76.164:19800] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin1.php"] [unique_id "aetmDehlUs6BS3Ng7_WkUAAAANg"]
[Fri Apr 24 20:46:05.953844 2026] [:error] [pid 17808:tid 17833] [client 51.107.76.164:16786] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aetmDearbOEFI8qshvI2xgAAAFc"]
[Fri Apr 24 20:46:06.631964 2026] [:error] [pid 17808:tid 17821] [client 51.107.76.164:19459] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aetmDuarbOEFI8qshvI2xwAAAEs"]
[Fri Apr 24 20:46:07.203740 2026] [:error] [pid 17719:tid 17728] [client 51.107.76.164:16063] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aetmD8TZ9gzEyL1BkPqq-AAAAIE"]
[Fri Apr 24 20:46:07.865184 2026] [:error] [pid 22114:tid 22122] [client 51.107.76.164:17091] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "aetmD4AuWGz3WlMQjofrJQAAAQU"]
[Fri Apr 24 20:46:08.459117 2026] [:error] [pid 17808:tid 17824] [client 51.107.76.164:16063] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aetmEOarbOEFI8qshvI2zAAAAE4"]
[Fri Apr 24 20:46:09.217132 2026] [:error] [pid 22114:tid 22125] [client 51.107.76.164:16826] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aetmEYAuWGz3WlMQjofrJwAAAQg"]
[Fri Apr 24 20:46:09.860554 2026] [:error] [pid 22114:tid 22131] [client 51.107.76.164:16792] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aetmEYAuWGz3WlMQjofrKQAAAQ4"]
[Fri Apr 24 20:46:10.460815 2026] [:error] [pid 17719:tid 17741] [client 51.107.76.164:14459] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "aetmEsTZ9gzEyL1BkPqq_QAAAI4"]
[Fri Apr 24 20:46:11.107649 2026] [:error] [pid 17719:tid 17751] [client 51.107.76.164:35609] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aetmE8TZ9gzEyL1BkPqrAAAAAJg"]
[Fri Apr 24 20:46:11.689086 2026] [:error] [pid 17808:tid 17823] [client 51.107.76.164:37675] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aetmE-arbOEFI8qshvI20AAAAE0"]
[Fri Apr 24 20:46:12.345305 2026] [:error] [pid 17719:tid 17749] [client 51.107.76.164:19788] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aetmFMTZ9gzEyL1BkPqrAgAAAJY"]
[Fri Apr 24 20:46:13.053876 2026] [:error] [pid 17719:tid 17742] [client 51.107.76.164:16000] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "aetmFcTZ9gzEyL1BkPqrBAAAAI8"]
[Fri Apr 24 20:46:13.657315 2026] [:error] [pid 17720:tid 17756] [client 51.107.76.164:17146] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "aetmFehlUs6BS3Ng7_WkXwAAAMI"]
[Fri Apr 24 20:46:14.261579 2026] [:error] [pid 17808:tid 17833] [client 51.107.76.164:14432] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "aetmFuarbOEFI8qshvI20gAAAFc"]
[Fri Apr 24 20:46:14.957286 2026] [:error] [pid 17808:tid 17819] [client 51.107.76.164:19562] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "aetmFuarbOEFI8qshvI21wAAAEk"]
[Fri Apr 24 20:46:15.670135 2026] [:error] [pid 4177:tid 4192] [client 51.107.76.164:19570] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "aetmF32asKnvdrSe0x4NHAAAAYc"]
[Fri Apr 24 20:46:16.303980 2026] [:error] [pid 17808:tid 17829] [client 51.107.76.164:19768] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aetmGOarbOEFI8qshvI23AAAAFM"]
[Fri Apr 24 20:46:16.910867 2026] [:error] [pid 4177:tid 4197] [client 51.107.76.164:26991] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aetmGH2asKnvdrSe0x4NIgAAAYw"]
[Fri Apr 24 20:46:17.607621 2026] [:error] [pid 4177:tid 4194] [client 51.107.76.164:37659] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aetmGX2asKnvdrSe0x4NKAAAAYk"]
[Fri Apr 24 20:46:18.279620 2026] [:error] [pid 17720:tid 17754] [client 51.107.76.164:2077] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aetmGuhlUs6BS3Ng7_WkZQAAAMA"]
[Fri Apr 24 20:46:19.103251 2026] [:error] [pid 17720:tid 17763] [client 51.107.76.164:14452] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aetmG-hlUs6BS3Ng7_WkawAAAMk"]
[Fri Apr 24 20:46:19.723595 2026] [:error] [pid 22114:tid 22119] [client 51.107.76.164:14649] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aetmG4AuWGz3WlMQjofrMAAAAQI"]
[Fri Apr 24 20:46:20.319799 2026] [:error] [pid 22114:tid 22133] [client 51.107.76.164:19831] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aetmHIAuWGz3WlMQjofrMQAAARA"]
[Fri Apr 24 20:46:20.905707 2026] [:error] [pid 22114:tid 22131] [client 51.107.76.164:19805] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "aetmHIAuWGz3WlMQjofrNAAAAQ4"]
[Fri Apr 24 20:46:21.722882 2026] [:error] [pid 22114:tid 22121] [client 51.107.76.164:26955] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetmHYAuWGz3WlMQjofrNwAAAQQ"]
[Fri Apr 24 20:46:22.523795 2026] [:error] [pid 14531:tid 14551] [client 51.107.76.164:16820] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetmHnfLU2gw-6KR-GbIFwAAAVI"]
[Fri Apr 24 20:46:23.185582 2026] [:error] [pid 4177:tid 4195] [client 51.107.76.164:37663] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetmH32asKnvdrSe0x4NKgAAAYo"]
[Fri Apr 24 20:46:23.802710 2026] [:error] [pid 22114:tid 22139] [client 51.107.76.164:49455] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "aetmH4AuWGz3WlMQjofrOgAAARY"]
[Fri Apr 24 20:46:24.437386 2026] [:error] [pid 4177:tid 4204] [client 51.107.76.164:16788] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aetmIH2asKnvdrSe0x4NLgAAAZM"]
[Fri Apr 24 20:46:25.005467 2026] [:error] [pid 4177:tid 4187] [client 51.107.76.164:19778] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aetmIX2asKnvdrSe0x4NMAAAAYI"]
[Fri Apr 24 20:46:25.778451 2026] [:error] [pid 4177:tid 4186] [client 51.107.76.164:49471] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aetmIX2asKnvdrSe0x4NMwAAAYE"]
[Fri Apr 24 20:46:26.604873 2026] [:error] [pid 14531:tid 14547] [client 51.107.76.164:31920] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aetmInfLU2gw-6KR-GbIGwAAAU4"]
[Fri Apr 24 20:46:27.379647 2026] [:error] [pid 17721:tid 17796] [client 51.107.76.164:35634] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aetmI-FXXkLeyDnfk_87dwAAAA8"]
[Fri Apr 24 20:46:28.244819 2026] [:error] [pid 17721:tid 17797] [client 51.107.76.164:2089] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "aetmJOFXXkLeyDnfk_87ewAAABA"]
[Fri Apr 24 20:46:29.050528 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 51.107.76.164:14648] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:29.358556 2026] [proxy_fcgi:error] [pid 17808:tid 17819] [client 51.107.76.164:14648] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:29.621274 2026] [proxy_fcgi:error] [pid 17808:tid 17814] [client 51.107.76.164:14648] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:29.903663 2026] [proxy_fcgi:error] [pid 17808:tid 17811] [client 51.107.76.164:14648] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:30.463116 2026] [:error] [pid 17808:tid 17817] [client 51.107.76.164:14648] [client 51.107.76.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aetmJuarbOEFI8qshvI2-gAAAEc"]
[Fri Apr 24 20:46:31.254141 2026] [proxy_fcgi:error] [pid 17808:tid 17826] [client 51.107.76.164:16827] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:32.174825 2026] [proxy_fcgi:error] [pid 17808:tid 17813] [client 51.107.76.164:16827] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:32.458770 2026] [proxy_fcgi:error] [pid 17808:tid 17832] [client 51.107.76.164:16827] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:32.766703 2026] [proxy_fcgi:error] [pid 17808:tid 17823] [client 51.107.76.164:16827] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:46:33.049078 2026] [:error] [pid 17808:tid 17820] [client 51.107.76.164:16827] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aetmKearbOEFI8qshvI3CgAAAEo"]
[Fri Apr 24 20:46:33.973828 2026] [:error] [pid 4177:tid 4208] [client 51.107.76.164:16831] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aetmKX2asKnvdrSe0x4NOwAAAZc"]
[Fri Apr 24 20:46:34.638460 2026] [:error] [pid 17721:tid 17805] [client 51.107.76.164:35591] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aetmKuFXXkLeyDnfk_87fgAAABg"]
[Fri Apr 24 20:46:35.397737 2026] [:error] [pid 17720:tid 17775] [client 51.107.76.164:17117] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/in.php"] [unique_id "aetmK-hlUs6BS3Ng7_WkcgAAANU"]
[Fri Apr 24 20:46:36.423304 2026] [:error] [pid 17719:tid 17739] [client 51.107.76.164:24986] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aetmLMTZ9gzEyL1BkPqrGAAAAIw"]
[Fri Apr 24 20:46:37.176145 2026] [:error] [pid 22114:tid 22133] [client 51.107.76.164:34068] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aetmLYAuWGz3WlMQjofrSAAAARA"]
[Fri Apr 24 20:46:38.208869 2026] [:error] [pid 14531:tid 14545] [client 51.107.76.164:2048] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aetmLnfLU2gw-6KR-GbIIAAAAUw"]
[Fri Apr 24 20:46:39.023537 2026] [:error] [pid 22114:tid 22135] [client 51.107.76.164:39555] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gssdd.php"] [unique_id "aetmL4AuWGz3WlMQjofrUwAAARI"]
[Fri Apr 24 20:46:39.581566 2026] [:error] [pid 22114:tid 22137] [client 51.107.76.164:19784] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "aetmL4AuWGz3WlMQjofrVgAAARQ"]
[Fri Apr 24 20:46:40.340375 2026] [:error] [pid 4177:tid 4195] [client 51.107.76.164:31928] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "aetmMH2asKnvdrSe0x4NQAAAAYo"]
[Fri Apr 24 20:46:41.320745 2026] [:error] [pid 17808:tid 17816] [client 51.107.76.164:20320] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "aetmMearbOEFI8qshvI3FQAAAEY"]
[Fri Apr 24 20:46:42.408211 2026] [:error] [pid 17720:tid 17759] [client 51.107.76.164:16784] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "aetmMuhlUs6BS3Ng7_WkeQAAAMU"]
[Fri Apr 24 20:46:43.603094 2026] [:error] [pid 17720:tid 17771] [client 51.107.76.164:24281] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aetmM-hlUs6BS3Ng7_WkfQAAANE"]
[Fri Apr 24 20:46:45.095876 2026] [:error] [pid 17720:tid 17769] [client 51.107.76.164:32318] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aetmNehlUs6BS3Ng7_WkgQAAAM8"]
[Fri Apr 24 20:46:46.291552 2026] [:error] [pid 14531:tid 14553] [client 51.107.76.164:24985] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aetmNnfLU2gw-6KR-GbILQAAAVQ"]
[Fri Apr 24 20:46:47.417269 2026] [:error] [pid 4177:tid 4202] [client 51.107.76.164:29858] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "aetmN32asKnvdrSe0x4NTwAAAZE"]
[Fri Apr 24 20:46:48.208889 2026] [:error] [pid 17720:tid 17762] [client 51.107.76.164:23504] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aetmOOhlUs6BS3Ng7_WkhAAAAMg"]
[Fri Apr 24 20:46:49.209521 2026] [:error] [pid 17720:tid 17777] [client 51.107.76.164:34070] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aetmOehlUs6BS3Ng7_WkiAAAANc"]
[Fri Apr 24 20:46:50.127520 2026] [:error] [pid 17720:tid 17778] [client 51.107.76.164:48354] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aetmOuhlUs6BS3Ng7_WkiQAAANg"]
[Fri Apr 24 20:46:51.909485 2026] [:error] [pid 4177:tid 4202] [client 51.107.76.164:48373] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aetmO32asKnvdrSe0x4NVgAAAZE"]
[Fri Apr 24 20:46:53.109515 2026] [:error] [pid 17808:tid 17829] [client 51.107.76.164:24669] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aetmPearbOEFI8qshvI3JQAAAFM"]
[Fri Apr 24 20:46:54.058981 2026] [:error] [pid 17719:tid 17729] [client 51.107.76.164:32349] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aetmPsTZ9gzEyL1BkPqrJQAAAII"]
[Fri Apr 24 20:46:54.664691 2026] [:error] [pid 4177:tid 4204] [client 51.107.76.164:25021] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aetmPn2asKnvdrSe0x4NYQAAAZM"]
[Fri Apr 24 20:46:55.426913 2026] [:error] [pid 17720:tid 17773] [client 51.107.76.164:32383] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/axx.php"] [unique_id "aetmP-hlUs6BS3Ng7_WkjAAAANM"]
[Fri Apr 24 20:46:56.760984 2026] [:error] [pid 22114:tid 22137] [client 51.107.76.164:26584] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "aetmQIAuWGz3WlMQjofrYgAAARQ"]
[Fri Apr 24 20:46:57.605583 2026] [:error] [pid 4177:tid 4199] [client 51.107.76.164:2204] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "aetmQX2asKnvdrSe0x4NZgAAAY4"]
[Fri Apr 24 20:46:58.561428 2026] [:error] [pid 4177:tid 4186] [client 51.107.76.164:20291] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "aetmQn2asKnvdrSe0x4NaAAAAYE"]
[Fri Apr 24 20:46:59.692771 2026] [:error] [pid 4177:tid 4207] [client 51.107.76.164:49875] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfashell.php"] [unique_id "aetmQ32asKnvdrSe0x4NagAAAZY"]
[Fri Apr 24 20:47:00.655954 2026] [:error] [pid 17808:tid 17830] [client 51.107.76.164:15826] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aetmROarbOEFI8qshvI3JwAAAFQ"]
[Fri Apr 24 20:47:01.520333 2026] [:error] [pid 17720:tid 17764] [client 51.107.76.164:15861] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aetmRehlUs6BS3Ng7_WklQAAAMo"]
[Fri Apr 24 20:47:02.510412 2026] [:error] [pid 22114:tid 22118] [client 51.107.76.164:36352] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aetmRoAuWGz3WlMQjofrZwAAAQE"]
[Fri Apr 24 20:47:03.150164 2026] [:error] [pid 4177:tid 4209] [client 51.107.76.164:49871] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "aetmR32asKnvdrSe0x4NcgAAAZg"]
[Fri Apr 24 20:47:03.760308 2026] [:error] [pid 4177:tid 4192] [client 51.107.76.164:27960] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aetmR32asKnvdrSe0x4NdQAAAYc"]
[Fri Apr 24 20:47:04.663277 2026] [:error] [pid 17721:tid 17793] [client 51.107.76.164:36373] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aetmSOFXXkLeyDnfk_87ngAAAAw"]
[Fri Apr 24 20:47:05.461064 2026] [:error] [pid 4177:tid 4194] [client 51.107.76.164:27928] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aetmSX2asKnvdrSe0x4NgQAAAYk"]
[Fri Apr 24 20:47:06.391559 2026] [:error] [pid 22114:tid 22134] [client 51.107.76.164:37363] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "aetmSoAuWGz3WlMQjofraAAAARE"]
[Fri Apr 24 20:47:07.283552 2026] [:error] [pid 4177:tid 4190] [client 51.107.76.164:19229] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aetmS32asKnvdrSe0x4NjwAAAYU"]
[Fri Apr 24 20:47:08.130521 2026] [:error] [pid 17720:tid 17767] [client 51.107.76.164:15858] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aetmTOhlUs6BS3Ng7_WknQAAAM0"]
[Fri Apr 24 20:47:08.911777 2026] [:error] [pid 17808:tid 17816] [client 51.107.76.164:49912] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aetmTOarbOEFI8qshvI3KgAAAEY"]
[Fri Apr 24 20:47:10.825576 2026] [:error] [pid 17719:tid 17736] [client 51.107.76.164:18389] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file48.php"] [unique_id "aetmTsTZ9gzEyL1BkPqrKwAAAIk"]
[Fri Apr 24 20:47:11.532354 2026] [:error] [pid 4177:tid 4208] [client 51.107.76.164:17560] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aetmT32asKnvdrSe0x4NpQAAAZc"]
[Fri Apr 24 20:47:12.762785 2026] [:error] [pid 17720:tid 17755] [client 51.107.76.164:17567] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aetmUOhlUs6BS3Ng7_WkoQAAAME"]
[Fri Apr 24 20:47:13.773968 2026] [:error] [pid 4177:tid 4188] [client 51.107.76.164:43638] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aetmUX2asKnvdrSe0x4NsAAAAYM"]
[Fri Apr 24 20:47:14.693559 2026] [:error] [pid 14531:tid 14536] [client 51.107.76.164:15871] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/g.php"] [unique_id "aetmUnfLU2gw-6KR-GbIRAAAAUM"]
[Fri Apr 24 20:47:15.515877 2026] [:error] [pid 22114:tid 22126] [client 51.107.76.164:15816] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmU4AuWGz3WlMQjofragAAAQk"]
[Fri Apr 24 20:47:16.575970 2026] [:error] [pid 4177:tid 4189] [client 51.107.76.164:27694] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmVH2asKnvdrSe0x4NuAAAAYQ"]
[Fri Apr 24 20:47:17.290375 2026] [:error] [pid 4177:tid 4190] [client 51.107.76.164:21974] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmVX2asKnvdrSe0x4NvAAAAYU"]
[Fri Apr 24 20:47:18.236393 2026] [:error] [pid 4177:tid 4188] [client 51.107.76.164:49865] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "aetmVn2asKnvdrSe0x4NwAAAAYM"]
[Fri Apr 24 20:47:19.083281 2026] [:error] [pid 17720:tid 17774] [client 51.107.76.164:59697] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aetmV-hlUs6BS3Ng7_WkpAAAANQ"]
[Fri Apr 24 20:47:19.869862 2026] [:error] [pid 17808:tid 17821] [client 51.107.76.164:20251] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aetmV-arbOEFI8qshvI3MwAAAEs"]
[Fri Apr 24 20:47:23.142434 2026] [:error] [pid 4177:tid 4186] [client 51.107.76.164:39885] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aetmW32asKnvdrSe0x4NzAAAAYE"]
[Fri Apr 24 20:47:28.169734 2026] [:error] [pid 17808:tid 17816] [client 51.107.76.164:49356] [client 51.107.76.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "aetmYOarbOEFI8qshvI3OAAAAEY"]
[Fri Apr 24 20:48:03.866387 2026] [proxy_fcgi:error] [pid 17808:tid 17830] [client 51.107.76.164:22363] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:48:05.491582 2026] [proxy_fcgi:error] [pid 17808:tid 17825] [client 51.107.76.164:22363] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:48:05.731819 2026] [proxy_fcgi:error] [pid 17808:tid 17824] [client 51.107.76.164:22363] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 20:48:06.626329 2026] [proxy_fcgi:error] [pid 17808:tid 17812] [client 51.107.76.164:22363] AH01071: Got error 'Primary script unknown'
[Fri Apr 24 22:08:08.385118 2026] [proxy_fcgi:error] [pid 17721:tid 17795] [client 145.239.10.137:54732] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/trknish.php
[Sat Apr 25 00:02:31.606316 2026] [:error] [pid 42792:tid 42842] [client 209.87.169.176:65101] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aeuUF9Ni9qR4GtafpfG0vAAAAhQ"]
[Sat Apr 25 00:25:09.781776 2026] [proxy_fcgi:error] [pid 42852:tid 42875] [client 145.239.10.137:57609] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/ca3.php
[Sat Apr 25 00:57:48.329605 2026] [proxy_fcgi:error] [pid 14989:tid 14994] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:48.472873 2026] [proxy_fcgi:error] [pid 14989:tid 15004] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:48.758947 2026] [proxy_fcgi:error] [pid 14989:tid 14997] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:48.903890 2026] [proxy_fcgi:error] [pid 14989:tid 15015] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:49.189059 2026] [proxy_fcgi:error] [pid 14989:tid 15013] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:49.340043 2026] [proxy_fcgi:error] [pid 14989:tid 15014] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:49.483901 2026] [proxy_fcgi:error] [pid 14989:tid 15001] [client 20.193.226.44:2031] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 00:57:49.911336 2026] [:error] [pid 14989:tid 15007] [client 20.193.226.44:2031] [client 20.193.226.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aeuhDXhRYjsAsZTO4EOKjgAAABA"]
[Sat Apr 25 00:57:50.480425 2026] [:error] [pid 42852:tid 42856] [client 20.193.226.44:2021] [client 20.193.226.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aeuhDjMEwxhhak_EhMKHIgAAAkE"]
[Sat Apr 25 00:57:51.069706 2026] [:error] [pid 42852:tid 42861] [client 20.193.226.44:2019] [client 20.193.226.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aeuhDzMEwxhhak_EhMKHJAAAAkY"]
[Sat Apr 25 00:57:51.656695 2026] [:error] [pid 14989:tid 14991] [client 20.193.226.44:1284] [client 20.193.226.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "aeuhD3hRYjsAsZTO4EOKmgAAAAA"]
[Sat Apr 25 01:50:50.874690 2026] [:error] [pid 42852:tid 42856] [client 155.248.183.67:52412] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aeutejMEwxhhak_EhMKgogAAAkE"]
[Sat Apr 25 01:50:52.338578 2026] [:error] [pid 14989:tid 15013] [client 155.248.183.67:54143] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aeutfHhRYjsAsZTO4EOpzAAAABY"]
[Sat Apr 25 01:50:53.808548 2026] [:error] [pid 42852:tid 42862] [client 155.248.183.67:60356] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aeutfTMEwxhhak_EhMKgqgAAAkc"]
[Sat Apr 25 01:50:54.036194 2026] [:error] [pid 42852:tid 42858] [client 155.248.183.67:60394] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aeutfjMEwxhhak_EhMKgrwAAAkM"]
[Sat Apr 25 01:50:55.266193 2026] [:error] [pid 14989:tid 14998] [client 155.248.183.67:50523] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aeutf3hRYjsAsZTO4EOp2gAAAAc"]
[Sat Apr 25 01:50:56.493815 2026] [:error] [pid 14989:tid 14993] [client 155.248.183.67:63428] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file-manager/initialize"] [unique_id "aeutgHhRYjsAsZTO4EOp5wAAAAI"]
[Sat Apr 25 01:50:56.721419 2026] [:error] [pid 42792:tid 42831] [client 155.248.183.67:61802] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutgNNi9qR4GtafpfHjPAAAAgk"]
[Sat Apr 25 01:50:57.950346 2026] [:error] [pid 42791:tid 42797] [client 155.248.183.67:57597] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutgbKmN9doraCEWKX2qQAAAcI"]
[Sat Apr 25 01:50:59.178317 2026] [:error] [pid 42852:tid 42870] [client 155.248.183.67:59358] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutgzMEwxhhak_EhMKgyAAAAk8"]
[Sat Apr 25 01:50:59.405420 2026] [:error] [pid 42791:tid 42799] [client 155.248.183.67:59358] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutg7KmN9doraCEWKX2qgAAAcQ"]
[Sat Apr 25 04:09:11.851698 2026] [:error] [pid 46083:tid 46105] [client 154.54.100.171:37974] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "aevN5zxw_Zq74vWdjmnrTwAAARI"]
[Sat Apr 25 05:17:08.954400 2026] [proxy_fcgi:error] [pid 44320:tid 44373] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:09.226544 2026] [proxy_fcgi:error] [pid 44320:tid 44356] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:09.498450 2026] [proxy_fcgi:error] [pid 44320:tid 44375] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:09.767362 2026] [proxy_fcgi:error] [pid 44320:tid 44377] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:10.039845 2026] [proxy_fcgi:error] [pid 44320:tid 44368] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:10.309028 2026] [proxy_fcgi:error] [pid 44320:tid 44366] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:10.580183 2026] [proxy_fcgi:error] [pid 44320:tid 44378] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:10.851268 2026] [proxy_fcgi:error] [pid 44320:tid 44358] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:11.120792 2026] [proxy_fcgi:error] [pid 44320:tid 44374] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:11.391406 2026] [proxy_fcgi:error] [pid 44320:tid 44370] [client 20.250.14.166:61483] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:17:11.657716 2026] [:error] [pid 44320:tid 44379] [client 20.250.14.166:61483] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pinfo.php"] [unique_id "aevd1zmFqSpku_dij8hoSwAAAFc"]
[Sat Apr 25 05:17:12.167430 2026] [:error] [pid 46083:tid 46096] [client 20.250.14.166:56313] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pinfo.php"] [unique_id "aevd2Dxw_Zq74vWdjmkVqQAAAQk"]
[Sat Apr 25 05:17:12.669685 2026] [:error] [pid 44320:tid 44371] [client 20.250.14.166:43416] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pinfo.php"] [unique_id "aevd2DmFqSpku_dij8hoTAAAAE8"]
[Sat Apr 25 05:17:13.192026 2026] [:error] [pid 46083:tid 46095] [client 20.250.14.166:65446] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pinfo.php"] [unique_id "aevd2Txw_Zq74vWdjmkVrgAAAQg"]
[Sat Apr 25 05:17:13.665284 2026] [:error] [pid 44320:tid 44356] [client 20.250.14.166:62434] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/litespeed.php"] [unique_id "aevd2TmFqSpku_dij8hoUAAAAEA"]
[Sat Apr 25 05:17:14.142628 2026] [:error] [pid 46083:tid 46112] [client 20.250.14.166:50616] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/litespeed.php"] [unique_id "aevd2jxw_Zq74vWdjmkVsAAAARg"]
[Sat Apr 25 05:17:14.629699 2026] [:error] [pid 46083:tid 46111] [client 20.250.14.166:41146] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/litespeed.php"] [unique_id "aevd2jxw_Zq74vWdjmkVswAAARc"]
[Sat Apr 25 05:17:15.111083 2026] [:error] [pid 44319:tid 44331] [client 20.250.14.166:63677] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/litespeed.php"] [unique_id "aevd28zJPAVLUb2pWtJGnwAAAAI"]
[Sat Apr 25 05:17:15.585686 2026] [:error] [pid 44320:tid 44368] [client 20.250.14.166:65452] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environments.php"] [unique_id "aevd2zmFqSpku_dij8hoVQAAAEw"]
[Sat Apr 25 05:17:16.071280 2026] [:error] [pid 44425:tid 44449] [client 20.250.14.166:56293] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environments.php"] [unique_id "aevd3CUl-VlItvY2tR_v_AAAANY"]
[Sat Apr 25 05:17:16.543402 2026] [:error] [pid 46083:tid 46091] [client 20.250.14.166:43452] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environments.php"] [unique_id "aevd3Dxw_Zq74vWdjmkVuQAAAQQ"]
[Sat Apr 25 05:17:17.019565 2026] [:error] [pid 44319:tid 44332] [client 20.250.14.166:62417] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environments.php"] [unique_id "aevd3czJPAVLUb2pWtJGpAAAAAM"]
[Sat Apr 25 05:17:17.492011 2026] [:error] [pid 44321:tid 44407] [client 20.250.14.166:2775] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raf.php"] [unique_id "aevd3Y1b5lV-asWa_Y4aagAAAJg"]
[Sat Apr 25 05:17:17.974368 2026] [:error] [pid 44321:tid 44393] [client 20.250.14.166:61482] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raf.php"] [unique_id "aevd3Y1b5lV-asWa_Y4aawAAAIo"]
[Sat Apr 25 05:17:18.457983 2026] [:error] [pid 44321:tid 44391] [client 20.250.14.166:62419] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raf.php"] [unique_id "aevd3o1b5lV-asWa_Y4abQAAAIg"]
[Sat Apr 25 05:17:18.970741 2026] [:error] [pid 44321:tid 44390] [client 20.250.14.166:65465] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/raf.php"] [unique_id "aevd3o1b5lV-asWa_Y4abwAAAIc"]
[Sat Apr 25 05:17:19.479805 2026] [:error] [pid 44321:tid 44396] [client 20.250.14.166:43422] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aevd341b5lV-asWa_Y4acgAAAI0"]
[Sat Apr 25 05:17:19.960752 2026] [:error] [pid 44320:tid 44371] [client 20.250.14.166:43432] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aevd3zmFqSpku_dij8hoWQAAAE8"]
[Sat Apr 25 05:17:20.434437 2026] [:error] [pid 44321:tid 44389] [client 20.250.14.166:2807] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aevd4I1b5lV-asWa_Y4adQAAAIY"]
[Sat Apr 25 05:17:20.906656 2026] [:error] [pid 44319:tid 44334] [client 20.250.14.166:56306] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ayk.php"] [unique_id "aevd4MzJPAVLUb2pWtJGqwAAAAU"]
[Sat Apr 25 05:17:21.407785 2026] [:error] [pid 44319:tid 44341] [client 20.250.14.166:62416] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/infos.php"] [unique_id "aevd4czJPAVLUb2pWtJGrQAAAAw"]
[Sat Apr 25 05:17:21.911609 2026] [:error] [pid 44319:tid 44333] [client 20.250.14.166:65457] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/infos.php"] [unique_id "aevd4czJPAVLUb2pWtJGrwAAAAQ"]
[Sat Apr 25 05:17:22.384335 2026] [:error] [pid 44321:tid 44384] [client 20.250.14.166:2801] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/infos.php"] [unique_id "aevd4o1b5lV-asWa_Y4aewAAAIE"]
[Sat Apr 25 05:17:22.861676 2026] [:error] [pid 44425:tid 44433] [client 20.250.14.166:63623] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/infos.php"] [unique_id "aevd4iUl-VlItvY2tR_wAAAAAMY"]
[Sat Apr 25 05:17:23.339032 2026] [:error] [pid 44425:tid 44431] [client 20.250.14.166:65469] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aws.php"] [unique_id "aevd4yUl-VlItvY2tR_wAwAAAMQ"]
[Sat Apr 25 05:17:23.810617 2026] [:error] [pid 44425:tid 44432] [client 20.250.14.166:56297] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aws.php"] [unique_id "aevd4yUl-VlItvY2tR_wBwAAAMU"]
[Sat Apr 25 05:17:24.282790 2026] [:error] [pid 44320:tid 44372] [client 20.250.14.166:65418] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aws.php"] [unique_id "aevd5DmFqSpku_dij8hoWwAAAFA"]
[Sat Apr 25 05:17:24.757810 2026] [:error] [pid 44321:tid 44383] [client 20.250.14.166:62425] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aws.php"] [unique_id "aevd5I1b5lV-asWa_Y4afwAAAIA"]
[Sat Apr 25 05:17:25.244031 2026] [:error] [pid 44320:tid 44368] [client 20.250.14.166:41134] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/embed.php"] [unique_id "aevd5TmFqSpku_dij8hoXQAAAEw"]
[Sat Apr 25 05:17:25.720668 2026] [:error] [pid 44425:tid 44448] [client 20.250.14.166:65419] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/embed.php"] [unique_id "aevd5SUl-VlItvY2tR_wDAAAANU"]
[Sat Apr 25 05:17:26.223041 2026] [:error] [pid 46083:tid 46112] [client 20.250.14.166:43043] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/embed.php"] [unique_id "aevd5jxw_Zq74vWdjmkVwwAAARg"]
[Sat Apr 25 05:17:26.724864 2026] [:error] [pid 46083:tid 46089] [client 20.250.14.166:56272] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/embed.php"] [unique_id "aevd5jxw_Zq74vWdjmkVxQAAAQI"]
[Sat Apr 25 05:17:27.197223 2026] [:error] [pid 44320:tid 44358] [client 20.250.14.166:41109] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/stat.php"] [unique_id "aevd5zmFqSpku_dij8hoZAAAAEI"]
[Sat Apr 25 05:17:27.675874 2026] [:error] [pid 44321:tid 44407] [client 20.250.14.166:43413] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/stat.php"] [unique_id "aevd541b5lV-asWa_Y4ahgAAAJg"]
[Sat Apr 25 05:17:28.186295 2026] [:error] [pid 44321:tid 44383] [client 20.250.14.166:62432] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/stat.php"] [unique_id "aevd6I1b5lV-asWa_Y4aiAAAAIA"]
[Sat Apr 25 05:17:28.687675 2026] [:error] [pid 44425:tid 44443] [client 20.250.14.166:41129] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/stat.php"] [unique_id "aevd6CUl-VlItvY2tR_wEAAAANA"]
[Sat Apr 25 05:17:29.188881 2026] [:error] [pid 44425:tid 44433] [client 20.250.14.166:50564] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/setup.php"] [unique_id "aevd6SUl-VlItvY2tR_wEgAAAMY"]
[Sat Apr 25 05:17:29.705184 2026] [:error] [pid 44425:tid 44428] [client 20.250.14.166:63653] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/setup.php"] [unique_id "aevd6SUl-VlItvY2tR_wEwAAAME"]
[Sat Apr 25 05:17:30.184223 2026] [:error] [pid 44319:tid 44347] [client 20.250.14.166:63633] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/setup.php"] [unique_id "aevd6szJPAVLUb2pWtJGtAAAABI"]
[Sat Apr 25 05:17:30.661478 2026] [:error] [pid 46083:tid 46090] [client 20.250.14.166:56256] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/setup.php"] [unique_id "aevd6jxw_Zq74vWdjmkVyQAAAQM"]
[Sat Apr 25 05:17:31.131525 2026] [:error] [pid 46083:tid 46105] [client 20.250.14.166:56276] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/development.php"] [unique_id "aevd6zxw_Zq74vWdjmkVzAAAARI"]
[Sat Apr 25 05:17:31.608501 2026] [:error] [pid 44320:tid 44375] [client 20.250.14.166:58302] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/development.php"] [unique_id "aevd6zmFqSpku_dij8hoaAAAAFM"]
[Sat Apr 25 05:17:32.081094 2026] [:error] [pid 44425:tid 44449] [client 20.250.14.166:61467] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/development.php"] [unique_id "aevd7CUl-VlItvY2tR_wGgAAANY"]
[Sat Apr 25 05:17:32.558490 2026] [:error] [pid 44321:tid 44405] [client 20.250.14.166:2788] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/development.php"] [unique_id "aevd7I1b5lV-asWa_Y4ajAAAAJY"]
[Sat Apr 25 05:17:33.062398 2026] [:error] [pid 44321:tid 44398] [client 20.250.14.166:58290] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environment.php"] [unique_id "aevd7Y1b5lV-asWa_Y4ajgAAAI8"]
[Sat Apr 25 05:17:33.565551 2026] [:error] [pid 44319:tid 44349] [client 20.250.14.166:40635] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environment.php"] [unique_id "aevd7czJPAVLUb2pWtJGuAAAABQ"]
[Sat Apr 25 05:17:34.045173 2026] [:error] [pid 44320:tid 44363] [client 20.250.14.166:63632] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environment.php"] [unique_id "aevd7jmFqSpku_dij8hoawAAAEc"]
[Sat Apr 25 05:17:34.552909 2026] [:error] [pid 46083:tid 46101] [client 20.250.14.166:61463] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/environment.php"] [unique_id "aevd7jxw_Zq74vWdjmkV0QAAAQ4"]
[Sat Apr 25 05:17:35.055537 2026] [:error] [pid 44319:tid 44341] [client 20.250.14.166:65441] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db_config.php"] [unique_id "aevd78zJPAVLUb2pWtJGvwAAAAw"]
[Sat Apr 25 05:17:35.528953 2026] [:error] [pid 44321:tid 44395] [client 20.250.14.166:61502] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db_config.php"] [unique_id "aevd741b5lV-asWa_Y4algAAAIw"]
[Sat Apr 25 05:17:36.002522 2026] [:error] [pid 44321:tid 44389] [client 20.250.14.166:62439] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db_config.php"] [unique_id "aevd8I1b5lV-asWa_Y4amgAAAIY"]
[Sat Apr 25 05:17:36.476066 2026] [:error] [pid 44320:tid 44358] [client 20.250.14.166:50618] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db_config.php"] [unique_id "aevd8DmFqSpku_dij8hobgAAAEI"]
[Sat Apr 25 05:17:36.958346 2026] [:error] [pid 44321:tid 44387] [client 20.250.14.166:58254] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Get_Site_Info.php"] [unique_id "aevd8I1b5lV-asWa_Y4aogAAAIQ"]
[Sat Apr 25 05:17:37.434904 2026] [:error] [pid 44321:tid 44407] [client 20.250.14.166:65431] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Get_Site_Info.php"] [unique_id "aevd8Y1b5lV-asWa_Y4aqAAAAJg"]
[Sat Apr 25 05:17:37.940515 2026] [:error] [pid 44321:tid 44388] [client 20.250.14.166:63618] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Get_Site_Info.php"] [unique_id "aevd8Y1b5lV-asWa_Y4arAAAAIU"]
[Sat Apr 25 05:17:38.442130 2026] [:error] [pid 44321:tid 44389] [client 20.250.14.166:61460] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Get_Site_Info.php"] [unique_id "aevd8o1b5lV-asWa_Y4arwAAAIY"]
[Sat Apr 25 05:17:38.918579 2026] [:error] [pid 46083:tid 46099] [client 20.250.14.166:58282] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/deploy.php"] [unique_id "aevd8jxw_Zq74vWdjmkV1gAAAQw"]
[Sat Apr 25 05:17:39.400043 2026] [:error] [pid 46083:tid 46109] [client 20.250.14.166:62403] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/deploy.php"] [unique_id "aevd8zxw_Zq74vWdjmkV2QAAARU"]
[Sat Apr 25 05:17:39.904203 2026] [:error] [pid 46083:tid 46105] [client 20.250.14.166:61487] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/deploy.php"] [unique_id "aevd8zxw_Zq74vWdjmkV3QAAARI"]
[Sat Apr 25 05:17:40.411584 2026] [:error] [pid 44319:tid 44332] [client 20.250.14.166:58247] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/deploy.php"] [unique_id "aevd9MzJPAVLUb2pWtJGxAAAAAM"]
[Sat Apr 25 05:17:40.888330 2026] [:error] [pid 44320:tid 44375] [client 20.250.14.166:41092] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apis.php"] [unique_id "aevd9DmFqSpku_dij8hodQAAAFM"]
[Sat Apr 25 05:17:41.359650 2026] [:error] [pid 44319:tid 44341] [client 20.250.14.166:58275] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apis.php"] [unique_id "aevd9czJPAVLUb2pWtJGyQAAAAw"]
[Sat Apr 25 05:17:41.832294 2026] [:error] [pid 44319:tid 44335] [client 20.250.14.166:50604] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apis.php"] [unique_id "aevd9czJPAVLUb2pWtJGywAAAAY"]
[Sat Apr 25 05:17:42.311984 2026] [:error] [pid 44321:tid 44401] [client 20.250.14.166:43435] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/apis.php"] [unique_id "aevd9o1b5lV-asWa_Y4atQAAAJI"]
[Sat Apr 25 05:17:42.785839 2026] [:error] [pid 44319:tid 44329] [client 20.250.14.166:56270] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asdf.php"] [unique_id "aevd9szJPAVLUb2pWtJGzAAAAAA"]
[Sat Apr 25 05:17:43.259885 2026] [:error] [pid 44320:tid 44358] [client 20.250.14.166:41110] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asdf.php"] [unique_id "aevd9zmFqSpku_dij8hofQAAAEI"]
[Sat Apr 25 05:17:43.740024 2026] [:error] [pid 44319:tid 44336] [client 20.250.14.166:60811] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asdf.php"] [unique_id "aevd98zJPAVLUb2pWtJGzgAAAAc"]
[Sat Apr 25 05:17:44.242397 2026] [:error] [pid 44321:tid 44389] [client 20.250.14.166:50560] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asdf.php"] [unique_id "aevd-I1b5lV-asWa_Y4auwAAAIY"]
[Sat Apr 25 05:17:44.743623 2026] [:error] [pid 44321:tid 44405] [client 20.250.14.166:57312] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aevd-I1b5lV-asWa_Y4avAAAAJY"]
[Sat Apr 25 05:17:45.218157 2026] [:error] [pid 46083:tid 46101] [client 20.250.14.166:63673] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aevd-Txw_Zq74vWdjmkV4AAAAQ4"]
[Sat Apr 25 05:17:45.696926 2026] [:error] [pid 46083:tid 46094] [client 20.250.14.166:58252] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aevd-Txw_Zq74vWdjmkV4QAAAQc"]
[Sat Apr 25 05:17:46.171573 2026] [:error] [pid 44320:tid 44361] [client 20.250.14.166:41105] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1100.php"] [unique_id "aevd-jmFqSpku_dij8hogQAAAEU"]
[Sat Apr 25 05:17:46.676111 2026] [:error] [pid 44320:tid 44368] [client 20.250.14.166:41102] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/._info.php"] [unique_id "aevd-jmFqSpku_dij8hoggAAAEw"]
[Sat Apr 25 05:17:47.180583 2026] [:error] [pid 46083:tid 46097] [client 20.250.14.166:50599] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/._info.php"] [unique_id "aevd-zxw_Zq74vWdjmkV5gAAAQo"]
[Sat Apr 25 05:17:47.651636 2026] [:error] [pid 44320:tid 44380] [client 20.250.14.166:58287] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/._info.php"] [unique_id "aevd-zmFqSpku_dij8hogwAAAFg"]
[Sat Apr 25 05:17:48.126302 2026] [:error] [pid 44425:tid 44447] [client 20.250.14.166:56285] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/._info.php"] [unique_id "aevd_CUl-VlItvY2tR_wJQAAANQ"]
[Sat Apr 25 05:17:48.599467 2026] [:error] [pid 46083:tid 46103] [client 20.250.14.166:56289] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_flag.php"] [unique_id "aevd_Dxw_Zq74vWdjmkV7QAAARA"]
[Sat Apr 25 05:17:49.101339 2026] [:error] [pid 46083:tid 46102] [client 20.250.14.166:62433] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_flag.php"] [unique_id "aevd_Txw_Zq74vWdjmkV8QAAAQ8"]
[Sat Apr 25 05:17:49.633220 2026] [:error] [pid 46083:tid 46111] [client 20.250.14.166:2794] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_flag.php"] [unique_id "aevd_Txw_Zq74vWdjmkV9gAAARc"]
[Sat Apr 25 05:17:50.144624 2026] [:error] [pid 44321:tid 44404] [client 20.250.14.166:41130] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_flag.php"] [unique_id "aevd_o1b5lV-asWa_Y4awgAAAJU"]
[Sat Apr 25 05:17:50.619095 2026] [:error] [pid 44320:tid 44362] [client 20.250.14.166:58276] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_info4.php"] [unique_id "aevd_jmFqSpku_dij8hohgAAAEY"]
[Sat Apr 25 05:17:51.096655 2026] [:error] [pid 44321:tid 44405] [client 20.250.14.166:58251] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_info4.php"] [unique_id "aevd_41b5lV-asWa_Y4axgAAAJY"]
[Sat Apr 25 05:17:51.597014 2026] [:error] [pid 44321:tid 44385] [client 20.250.14.166:41098] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_info4.php"] [unique_id "aevd_41b5lV-asWa_Y4aywAAAII"]
[Sat Apr 25 05:17:52.132331 2026] [:error] [pid 44321:tid 44397] [client 20.250.14.166:58293] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_info4.php"] [unique_id "aeveAI1b5lV-asWa_Y4a0AAAAI4"]
[Sat Apr 25 05:17:52.633562 2026] [:error] [pid 46083:tid 46100] [client 20.250.14.166:43448] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_phpinfo2.php"] [unique_id "aeveADxw_Zq74vWdjmkV-QAAAQ0"]
[Sat Apr 25 05:17:53.142196 2026] [:error] [pid 44321:tid 44398] [client 20.250.14.166:61446] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_phpinfo2.php"] [unique_id "aeveAY1b5lV-asWa_Y4a1gAAAI8"]
[Sat Apr 25 05:17:53.675218 2026] [:error] [pid 44425:tid 44430] [client 20.250.14.166:43400] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_phpinfo2.php"] [unique_id "aeveASUl-VlItvY2tR_wKgAAAMM"]
[Sat Apr 25 05:17:54.179163 2026] [:error] [pid 46083:tid 46104] [client 20.250.14.166:2757] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test_phpinfo2.php"] [unique_id "aeveAjxw_Zq74vWdjmkV_AAAARE"]
[Sat Apr 25 05:17:54.651207 2026] [:error] [pid 44319:tid 44353] [client 20.250.14.166:61450] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HsFPDcD.php"] [unique_id "aeveAszJPAVLUb2pWtJG0gAAABg"]
[Sat Apr 25 05:17:55.128824 2026] [:error] [pid 44425:tid 44450] [client 20.250.14.166:63650] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HsFPDcD.php"] [unique_id "aeveAyUl-VlItvY2tR_wLQAAANc"]
[Sat Apr 25 05:17:55.600140 2026] [:error] [pid 44425:tid 44442] [client 20.250.14.166:63631] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HsFPDcD.php"] [unique_id "aeveAyUl-VlItvY2tR_wLwAAAM8"]
[Sat Apr 25 05:17:56.101966 2026] [:error] [pid 46083:tid 46107] [client 20.250.14.166:65447] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/HsFPDcD.php"] [unique_id "aeveBDxw_Zq74vWdjmkV_wAAARM"]
[Sat Apr 25 05:17:56.602295 2026] [:error] [pid 44321:tid 44399] [client 20.250.14.166:43394] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.inc.php"] [unique_id "aeveBI1b5lV-asWa_Y4a2QAAAJA"]
[Sat Apr 25 05:17:57.103281 2026] [:error] [pid 46083:tid 46094] [client 20.250.14.166:65430] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.inc.php"] [unique_id "aeveBTxw_Zq74vWdjmkWAQAAAQc"]
[Sat Apr 25 05:17:57.638663 2026] [:error] [pid 44321:tid 44400] [client 20.250.14.166:40577] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.inc.php"] [unique_id "aeveBY1b5lV-asWa_Y4a2wAAAJE"]
[Sat Apr 25 05:17:58.140828 2026] [:error] [pid 44321:tid 44395] [client 20.250.14.166:43412] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.inc.php"] [unique_id "aeveBo1b5lV-asWa_Y4a3QAAAIw"]
[Sat Apr 25 05:17:58.616369 2026] [:error] [pid 46083:tid 46102] [client 20.250.14.166:40621] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "aeveBjxw_Zq74vWdjmkWBgAAAQ8"]
[Sat Apr 25 05:17:59.089766 2026] [:error] [pid 46083:tid 46104] [client 20.250.14.166:58280] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "aeveBzxw_Zq74vWdjmkWDgAAARE"]
[Sat Apr 25 05:17:59.562761 2026] [:error] [pid 46083:tid 46101] [client 20.250.14.166:58291] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "aeveBzxw_Zq74vWdjmkWEgAAAQ4"]
[Sat Apr 25 05:18:00.037451 2026] [:error] [pid 46083:tid 46092] [client 20.250.14.166:2776] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "aeveCDxw_Zq74vWdjmkWFwAAAQU"]
[Sat Apr 25 05:18:00.508065 2026] [:error] [pid 44319:tid 44342] [client 20.250.14.166:50602] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asus.php"] [unique_id "aeveCMzJPAVLUb2pWtJG1QAAAA0"]
[Sat Apr 25 05:18:00.987452 2026] [:error] [pid 44425:tid 44446] [client 20.250.14.166:61481] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asus.php"] [unique_id "aeveCCUl-VlItvY2tR_wWQAAANM"]
[Sat Apr 25 05:18:01.488948 2026] [:error] [pid 44321:tid 44390] [client 20.250.14.166:63626] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asus.php"] [unique_id "aeveCY1b5lV-asWa_Y4a4QAAAIc"]
[Sat Apr 25 05:18:01.995097 2026] [:error] [pid 44321:tid 44406] [client 20.250.14.166:65411] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asus.php"] [unique_id "aeveCY1b5lV-asWa_Y4a4gAAAJc"]
[Sat Apr 25 05:18:02.469056 2026] [:error] [pid 44321:tid 44400] [client 20.250.14.166:56264] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_version.php"] [unique_id "aeveCo1b5lV-asWa_Y4a5AAAAJE"]
[Sat Apr 25 05:18:02.944431 2026] [:error] [pid 44321:tid 44393] [client 20.250.14.166:41123] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_version.php"] [unique_id "aeveCo1b5lV-asWa_Y4a5QAAAIo"]
[Sat Apr 25 05:18:03.418952 2026] [:error] [pid 44425:tid 44446] [client 20.250.14.166:60832] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_version.php"] [unique_id "aeveCyUl-VlItvY2tR_wYgAAANM"]
[Sat Apr 25 05:18:03.929112 2026] [:error] [pid 44319:tid 44345] [client 20.250.14.166:41127] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php_version.php"] [unique_id "aeveC8zJPAVLUb2pWtJG1gAAABA"]
[Sat Apr 25 05:18:04.400404 2026] [:error] [pid 44321:tid 44387] [client 20.250.14.166:43013] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abouts.php"] [unique_id "aeveDI1b5lV-asWa_Y4a6QAAAIQ"]
[Sat Apr 25 05:18:04.981792 2026] [:error] [pid 44321:tid 44407] [client 20.250.14.166:50596] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abouts.php"] [unique_id "aeveDI1b5lV-asWa_Y4a6wAAAJg"]
[Sat Apr 25 05:18:05.514616 2026] [:error] [pid 44425:tid 44444] [client 20.250.14.166:61459] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abouts.php"] [unique_id "aeveDSUl-VlItvY2tR_wZgAAANE"]
[Sat Apr 25 05:18:06.021653 2026] [:error] [pid 44321:tid 44396] [client 20.250.14.166:58303] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abouts.php"] [unique_id "aeveDo1b5lV-asWa_Y4a7QAAAI0"]
[Sat Apr 25 05:18:06.491704 2026] [:error] [pid 46083:tid 46097] [client 20.250.14.166:56269] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profmanage.php"] [unique_id "aeveDjxw_Zq74vWdjmkWLgAAAQo"]
[Sat Apr 25 05:18:06.963915 2026] [:error] [pid 44425:tid 44427] [client 20.250.14.166:50562] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profmanage.php"] [unique_id "aeveDiUl-VlItvY2tR_wagAAAMA"]
[Sat Apr 25 05:18:07.435918 2026] [:error] [pid 44425:tid 44434] [client 20.250.14.166:2755] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profmanage.php"] [unique_id "aeveDyUl-VlItvY2tR_wbQAAAMc"]
[Sat Apr 25 05:18:07.940928 2026] [:error] [pid 44319:tid 44335] [client 20.250.14.166:56319] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profmanage.php"] [unique_id "aeveD8zJPAVLUb2pWtJG2QAAAAY"]
[Sat Apr 25 05:18:08.441535 2026] [:error] [pid 44425:tid 44437] [client 20.250.14.166:65412] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makecvs.php"] [unique_id "aeveECUl-VlItvY2tR_wcAAAAMo"]
[Sat Apr 25 05:18:08.912763 2026] [:error] [pid 44321:tid 44389] [client 20.250.14.166:2769] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makecvs.php"] [unique_id "aeveEI1b5lV-asWa_Y4a7wAAAIY"]
[Sat Apr 25 05:18:09.414684 2026] [:error] [pid 44320:tid 44380] [client 20.250.14.166:58256] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makecvs.php"] [unique_id "aeveETmFqSpku_dij8homAAAAFg"]
[Sat Apr 25 05:18:09.952674 2026] [:error] [pid 44321:tid 44393] [client 20.250.14.166:2753] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makecvs.php"] [unique_id "aeveEY1b5lV-asWa_Y4a8gAAAIo"]
[Sat Apr 25 05:18:10.453587 2026] [:error] [pid 44321:tid 44392] [client 20.250.14.166:58277] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpreleaseinfo.php"] [unique_id "aeveEo1b5lV-asWa_Y4a9AAAAIk"]
[Sat Apr 25 05:18:10.962695 2026] [:error] [pid 44319:tid 44332] [client 20.250.14.166:43059] [client 20.250.14.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpreleaseinfo.php"] [unique_id "aeveEszJPAVLUb2pWtJG3gAAAAM"]
[Sat Apr 25 05:18:11.477632 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 20.250.14.166:62462] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:18:11.717647 2026] [proxy_fcgi:error] [pid 46083:tid 46095] [client 20.250.14.166:62462] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:18:11.957622 2026] [proxy_fcgi:error] [pid 46083:tid 46089] [client 20.250.14.166:62462] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:18:12.197764 2026] [proxy_fcgi:error] [pid 46083:tid 46104] [client 20.250.14.166:62462] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:18:12.437422 2026] [proxy_fcgi:error] [pid 46083:tid 46096] [client 20.250.14.166:62462] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 05:18:12.677193 2026] [proxy_fcgi:error] [pid 46083:tid 46088] [client 20.250.14.166:62462] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 06:07:12.206295 2026] [:error] [pid 44425:tid 44441] [client 98.159.37.119:59989] [client 98.159.37.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aevpkCUl-VlItvY2tR8FQQAAAM4"]
[Sat Apr 25 07:28:08.373706 2026] [:error] [pid 44321:tid 44385] [client 103.50.150.178:33670] [client 103.50.150.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.50.150.178, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aev8iI1b5lV-asWa_Y46ZAAAAII"]
[Sat Apr 25 07:28:08.386913 2026] [proxy_fcgi:error] [pid 44321:tid 44385] [client 103.50.150.178:33670] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 08:32:26.061390 2026] [proxy_fcgi:error] [pid 44425:tid 44433] [client 145.239.10.137:45505] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/maraz.php
[Sat Apr 25 11:10:14.060948 2026] [:error] [pid 44425:tid 44444] [client 43.157.181.189:55374] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aewwliUl-VlItvY2tR9mjAAAANE"]
[Sat Apr 25 12:19:03.976302 2026] [proxy_fcgi:error] [pid 46083:tid 46100] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:04.238570 2026] [proxy_fcgi:error] [pid 46083:tid 46098] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:04.498603 2026] [proxy_fcgi:error] [pid 46083:tid 46103] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:04.760042 2026] [proxy_fcgi:error] [pid 46083:tid 46093] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:05.021311 2026] [proxy_fcgi:error] [pid 46083:tid 46109] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:05.281488 2026] [proxy_fcgi:error] [pid 46083:tid 46105] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:05.541524 2026] [proxy_fcgi:error] [pid 46083:tid 46101] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 12:19:05.801693 2026] [proxy_fcgi:error] [pid 46083:tid 46087] [client 74.248.149.197:34807] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 18:08:58.795503 2026] [:error] [pid 16108:tid 16168] [client 43.157.179.227:35024] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aeySuobPF4HSQDj6WrlRgAAAAMQ"]
[Sat Apr 25 23:15:11.084526 2026] [proxy_fcgi:error] [pid 59897:tid 59944] [client 74.249.155.150:8646] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:15:11.509199 2026] [:error] [pid 59897:tid 59937] [client 74.249.155.150:8646] [client 74.249.155.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.249.155.150, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aezaf_BrrkdzpEbmK4edgQAAAIo"]
[Sat Apr 25 23:15:11.705652 2026] [proxy_fcgi:error] [pid 59897:tid 59936] [client 74.249.155.150:8646] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:15:12.514495 2026] [proxy_fcgi:error] [pid 59897:tid 59949] [client 74.249.155.150:8646] AH01071: Got error 'Primary script unknown'
[Sat Apr 25 23:15:13.134171 2026] [:error] [pid 59897:tid 59933] [client 74.249.155.150:8646] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aezagfBrrkdzpEbmK4ediQAAAIY"]
[Sat Apr 25 23:15:14.120864 2026] [:error] [pid 59985:tid 60009] [client 74.249.155.150:8202] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aezaggF_zDvEhKvyTH7QqQAAABY"]
[Sat Apr 25 23:15:15.215873 2026] [:error] [pid 59896:tid 59924] [client 74.249.155.150:8231] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aezag7LLzhtkd-OXUgAclgAAAFg"]
[Sat Apr 25 23:15:16.265331 2026] [:error] [pid 3212:tid 3233] [client 74.249.155.150:8771] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "aezahPg-28TY8_YLtUdulQAAARM"]
[Sun Apr 26 01:00:09.144857 2026] [:error] [pid 59896:tid 59903] [client 212.47.78.130:64604] [client 212.47.78.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aezzGbLLzhtkd-OXUgBIXwAAAEM"]
[Sun Apr 26 01:00:09.886635 2026] [:error] [pid 59896:tid 59909] [client 212.47.78.130:50635] [client 212.47.78.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "aezzGbLLzhtkd-OXUgBIZAAAAEk"]
[Sun Apr 26 02:06:20.640701 2026] [:error] [pid 3212:tid 3238] [client 43.135.182.43:50012] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae0CnPg-28TY8_YLtUfTrwAAARg"]
[Sun Apr 26 03:33:08.052125 2026] [:error] [pid 59896:tid 59906] [client 212.47.78.127:53597] [client 212.47.78.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae0W9LLLzhtkd-OXUgCFqAAAAEY"]
[Sun Apr 26 03:33:08.646566 2026] [:error] [pid 59898:tid 59961] [client 212.47.78.127:54448] [client 212.47.78.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0W9B-4vImxb0kbdzf8HAAAAMc"]
[Sun Apr 26 03:33:09.245284 2026] [:error] [pid 59896:tid 59911] [client 212.47.78.127:64442] [client 212.47.78.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "ae0W9bLLzhtkd-OXUgCFrQAAAEs"]
[Sun Apr 26 04:41:48.277464 2026] [proxy_fcgi:error] [pid 8383:tid 8416] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.296403 2026] [proxy_fcgi:error] [pid 8383:tid 8403] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.315417 2026] [proxy_fcgi:error] [pid 8383:tid 8414] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.336457 2026] [proxy_fcgi:error] [pid 8383:tid 8398] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.371572 2026] [proxy_fcgi:error] [pid 8383:tid 8420] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.390113 2026] [proxy_fcgi:error] [pid 8383:tid 8407] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.409293 2026] [proxy_fcgi:error] [pid 8383:tid 8405] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.447702 2026] [proxy_fcgi:error] [pid 8383:tid 8400] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.465873 2026] [proxy_fcgi:error] [pid 8383:tid 8404] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.485261 2026] [proxy_fcgi:error] [pid 8383:tid 8408] [client 20.5.74.70:6277] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 04:41:48.500560 2026] [:error] [pid 8383:tid 8406] [client 20.5.74.70:6277] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ae0nDNFa2S3EsATMdWOvmgAAAAk"]
[Sun Apr 26 04:41:48.587902 2026] [:error] [pid 31273:tid 31357] [client 20.5.74.70:6454] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ae0nDPhcNJEGrATcuEepEgAAAVI"]
[Sun Apr 26 04:41:48.659330 2026] [:error] [pid 41906:tid 41932] [client 20.5.74.70:7064] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ae0nDD3-0A3lxw9OXoDirQAAAZg"]
[Sun Apr 26 04:41:48.724067 2026] [:error] [pid 41906:tid 41908] [client 20.5.74.70:7089] [client 20.5.74.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ae0nDD3-0A3lxw9OXoDirwAAAYA"]
[Sun Apr 26 05:17:41.845914 2026] [:error] [pid 8390:tid 8465] [client 158.158.52.225:17274] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0vdYGPtFK_i9p5yxQGagAAAI4"]
[Sun Apr 26 05:17:42.378023 2026] [:error] [pid 31273:tid 31362] [client 158.158.52.225:59407] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0vdvhcNJEGrATcuEezqQAAAVc"]
[Sun Apr 26 05:17:42.879110 2026] [:error] [pid 8390:tid 8456] [client 158.158.52.225:47357] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0vdoGPtFK_i9p5yxQGbQAAAIU"]
[Sun Apr 26 05:17:43.377008 2026] [:error] [pid 41906:tid 41911] [client 158.158.52.225:64307] [client 158.158.52.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ae0vdz3-0A3lxw9OXoDzCwAAAYM"]
[Sun Apr 26 06:15:18.109814 2026] [:error] [pid 10315:tid 10321] [client 223.244.35.77:43824] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae089qJIw2vjkleLIaCmNQAAAQQ"]
[Sun Apr 26 08:36:09.299201 2026] [:error] [pid 13137:tid 13147] [client 20.29.53.17:18361] [client 20.29.53.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.29.53.17, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/wp/xmlrpc.php"] [unique_id "ae1d-d0RB4J0o4h5neHyUAAAAgc"]
[Sun Apr 26 09:42:02.624656 2026] [autoindex:error] [pid 8390:tid 8471] [client 195.2.81.171:55604] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sun Apr 26 10:40:33.062076 2026] [:error] [pid 8385:tid 8442] [client 137.184.235.240:50036] [client 137.184.235.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ae17ITOy7_J84Wx3-oyRRwAAAFI"]
[Sun Apr 26 12:14:11.778015 2026] [:error] [pid 8390:tid 8458] [client 43.159.128.237:56722] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae2RE4GPtFK_i9p5yxS1fwAAAIc"]
[Sun Apr 26 14:19:43.722859 2026] [:error] [pid 8390:tid 8473] [client 170.106.147.63:48028] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae2uf4GPtFK_i9p5yxTmzQAAAJY"]
[Sun Apr 26 19:58:05.783863 2026] [:error] [pid 8390:tid 8475] [client 182.44.67.97:46426] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae39zYGPtFK_i9p5yxRaPgAAAJg"]
[Sun Apr 26 22:01:39.507391 2026] [:error] [pid 8385:tid 8448] [client 170.106.152.218:58924] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae4awzOy7_J84Wx3-ozdegAAAFg"]
[Mon Apr 27 01:55:18.313002 2026] [:error] [pid 22572:tid 22601] [client 45.131.195.77:55061] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae5RhtXOViWCFU-pZzBe0AAAAVc"]
[Mon Apr 27 02:34:50.682215 2026] [proxy_fcgi:error] [pid 16515:tid 16525] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:50.905518 2026] [proxy_fcgi:error] [pid 16515:tid 16520] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:51.189497 2026] [proxy_fcgi:error] [pid 16515:tid 16528] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:51.330934 2026] [proxy_fcgi:error] [pid 16515:tid 16531] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:51.694845 2026] [proxy_fcgi:error] [pid 16515:tid 16524] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:51.837176 2026] [proxy_fcgi:error] [pid 16515:tid 16533] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:51.979446 2026] [proxy_fcgi:error] [pid 16515:tid 16539] [client 20.219.12.30:5642] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 02:34:52.398965 2026] [:error] [pid 16515:tid 16532] [client 20.219.12.30:5642] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "ae5azFtDrUmgHSvpuLxu8wAAAk4"]
[Mon Apr 27 02:34:52.944180 2026] [:error] [pid 8383:tid 8405] [client 20.219.12.30:5470] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "ae5azNFa2S3EsATMdWO9ggAAAAg"]
[Mon Apr 27 02:34:53.487417 2026] [:error] [pid 16574:tid 16639] [client 20.219.12.30:5389] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "ae5azX5MsX8wRQr99nZTYgAAA1Y"]
[Mon Apr 27 02:34:54.034287 2026] [:error] [pid 22573:tid 22625] [client 20.219.12.30:5474] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "ae5aznB3EmQlD4yKUt9ByAAAAZI"]
[Mon Apr 27 02:51:52.661274 2026] [:error] [pid 22573:tid 22610] [client 120.71.59.24:35101] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae5eyHB3EmQlD4yKUt9EPAAAAYQ"]
[Mon Apr 27 03:17:32.889853 2026] [proxy_fcgi:error] [pid 8390:tid 8460] [client 89.163.146.197:53880] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Mon Apr 27 03:17:41.735962 2026] [:error] [pid 22573:tid 22627] [client 89.163.146.197:53489] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "ae5k1XB3EmQlD4yKUt9HowAAAZQ"], referer: www.google.com
[Mon Apr 27 03:59:29.160515 2026] [:error] [pid 22645:tid 22678] [client 170.106.148.137:57200] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae5uoX-Pq2r302zQbMZ9ygAAABc"]
[Mon Apr 27 05:58:18.959383 2026] [:error] [pid 22646:tid 22691] [client 43.166.244.66:53358] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae6Keok_HyZhTP6AYaecAwAAAEg"]
[Mon Apr 27 08:38:04.898988 2026] [autoindex:error] [pid 50951:tid 50954] [client 212.34.141.109:41472] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 09:04:55.884429 2026] [:error] [pid 7056:tid 7060] [client 192.144.148.122:35326] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae62NyaiHlvwyvjHbetyCQAAAQE"]
[Mon Apr 27 12:21:38.039876 2026] [:error] [pid 62607:tid 62633] [client 43.153.73.200:39170] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae7kUoXk80_zcPo33vd-5AAAAFg"]
[Mon Apr 27 13:16:45.841709 2026] [autoindex:error] [pid 62607:tid 62616] [client 20.219.12.30:5791] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 13:16:45.996975 2026] [proxy_fcgi:error] [pid 62607:tid 62614] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:46.147377 2026] [proxy_fcgi:error] [pid 62607:tid 62623] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:46.600299 2026] [proxy_fcgi:error] [pid 62607:tid 62627] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:46.909798 2026] [proxy_fcgi:error] [pid 62607:tid 62632] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:47.058482 2026] [proxy_fcgi:error] [pid 62607:tid 62631] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:47.209467 2026] [proxy_fcgi:error] [pid 62607:tid 62622] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:47.381434 2026] [proxy_fcgi:error] [pid 62607:tid 62629] [client 20.219.12.30:5791] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 13:16:47.527324 2026] [:error] [pid 62607:tid 62621] [client 20.219.12.30:5791] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/22.php"] [unique_id "ae7xP4Xk80_zcPo33vedLAAAAEw"]
[Mon Apr 27 13:16:48.097515 2026] [:error] [pid 62607:tid 62626] [client 20.219.12.30:6814] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/22.php"] [unique_id "ae7xQIXk80_zcPo33vedLQAAAFE"]
[Mon Apr 27 13:16:48.673205 2026] [:error] [pid 62510:tid 62564] [client 20.219.12.30:5811] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/22.php"] [unique_id "ae7xQICpoM1jGOxUMpvw7AAAANM"]
[Mon Apr 27 13:16:49.263665 2026] [:error] [pid 62511:tid 62593] [client 20.219.12.30:5786] [client 20.219.12.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/22.php"] [unique_id "ae7xQbBjE-jhU4FY4HhqXgAAAVM"]
[Mon Apr 27 13:51:51.750704 2026] [:error] [pid 62510:tid 62560] [client 34.55.86.97:54508] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/media/system/js/core.js"] [unique_id "ae75d4CpoM1jGOxUMpv3aQAAAM8"]
[Mon Apr 27 14:40:05.875976 2026] [:error] [pid 41009:tid 41038] [client 43.131.243.61:37610] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae8ExdANrlkTbZMXYE18_wAAAZg"]
[Mon Apr 27 17:05:58.600386 2026] [proxy_fcgi:error] [pid 61339:tid 61341] [client 13.74.146.113:15084] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 18:23:54.626537 2026] [proxy_fcgi:error] [pid 41010:tid 41058] [client 40.69.66.178:8376] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 18:23:54.896605 2026] [proxy_fcgi:error] [pid 41010:tid 41060] [client 40.69.66.178:8376] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 18:49:51.909291 2026] [proxy_fcgi:error] [pid 41010:tid 41063] [client 20.166.9.204:9676] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 18:49:52.158753 2026] [:error] [pid 41010:tid 41049] [client 20.166.9.204:9676] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insc.php"] [unique_id "ae8_UDc-oOrM_e97_4BATgAAAcc"]
[Mon Apr 27 18:49:52.657217 2026] [:error] [pid 61339:tid 61346] [client 20.166.9.204:3964] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insc.php"] [unique_id "ae8_UCHHVuv2RN6lIrhv9QAAAEU"]
[Mon Apr 27 18:49:53.332803 2026] [:error] [pid 41098:tid 41115] [client 20.166.9.204:3939] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insc.php"] [unique_id "ae8_UeIJ72vFwurGAAt9dAAAAA8"]
[Mon Apr 27 18:49:54.005332 2026] [:error] [pid 41011:tid 41077] [client 20.166.9.204:9062] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insc.php"] [unique_id "ae8_Ugsl5QfsSXIdF6FLSQAAAgg"]
[Mon Apr 27 20:52:35.195140 2026] [:error] [pid 13464:tid 13488] [client 43.153.107.22:34810] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae9cE2IEa0q6oQ95zvEhIQAAAdQ"]
[Mon Apr 27 21:25:30.195768 2026] [:error] [pid 13465:tid 13514] [client 118.179.177.17:60733] [client 118.179.177.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.179.177.17, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ae9jyv19I-6GBJQxn_i1uwAAAFM"]
[Mon Apr 27 21:25:30.206527 2026] [proxy_fcgi:error] [pid 13465:tid 13514] [client 118.179.177.17:60733] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 01:17:08.108889 2026] [autoindex:error] [pid 13554:tid 13556] [client 185.21.13.119:41032] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 04:21:59.901224 2026] [proxy_fcgi:error] [pid 14578:tid 14636] [client 52.141.35.48:2332] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:22:00.195795 2026] [:error] [pid 14578:tid 14622] [client 52.141.35.48:2332] [client 52.141.35.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.141.35.48, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae_FaOngo3AwIJgfSHHaqgAAAEk"]
[Tue Apr 28 04:22:00.379383 2026] [proxy_fcgi:error] [pid 14578:tid 14632] [client 52.141.35.48:2332] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:22:00.974616 2026] [proxy_fcgi:error] [pid 14578:tid 14621] [client 52.141.35.48:2332] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:22:01.426872 2026] [proxy_fcgi:error] [pid 14578:tid 14635] [client 52.141.35.48:2332] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 04:22:01.572077 2026] [:error] [pid 14578:tid 14613] [client 52.141.35.48:2332] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_Faengo3AwIJgfSHHaswAAAEA"]
[Tue Apr 28 04:22:02.164855 2026] [:error] [pid 14577:tid 14610] [client 52.141.35.48:12530] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_FaizBH-jwzlgiBdGSjwAAABg"]
[Tue Apr 28 04:22:02.733914 2026] [:error] [pid 14577:tid 14587] [client 52.141.35.48:12495] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_FaizBH-jwzlgiBdGSkQAAAAE"]
[Tue Apr 28 04:22:03.532496 2026] [:error] [pid 14686:tid 14695] [client 52.141.35.48:2323] [client 52.141.35.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_Fa--YPF1Xm7uiWQ7zqgAAAMY"]
[Tue Apr 28 04:34:39.564438 2026] [:error] [pid 14686:tid 14698] [client 43.155.26.193:34570] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "ae_IX--YPF1Xm7uiWQ77CQAAAMk"]
[Tue Apr 28 06:21:49.539274 2026] [:error] [pid 14578:tid 14632] [client 43.153.104.196:48868] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ae_hfengo3AwIJgfSHEKmwAAAFM"]
[Tue Apr 28 09:56:26.138673 2026] [:error] [pid 33777:tid 33858] [client 64.89.160.114:63246] [client 64.89.160.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.89.160.114, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afATyrXUCFWqmordGGLtIgAAARc"]
[Tue Apr 28 09:56:26.148408 2026] [proxy_fcgi:error] [pid 33777:tid 33858] [client 64.89.160.114:63246] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:12:37.785119 2026] [autoindex:error] [pid 33776:tid 33827] [client 20.56.20.8:64919] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 28 11:22:48.356860 2026] [proxy_fcgi:error] [pid 2741:tid 2766] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:48.597282 2026] [proxy_fcgi:error] [pid 2741:tid 2757] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:50.451844 2026] [proxy_fcgi:error] [pid 2741:tid 2747] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:50.691213 2026] [proxy_fcgi:error] [pid 2741:tid 2751] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:51.170377 2026] [proxy_fcgi:error] [pid 2741:tid 2767] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:51.419714 2026] [proxy_fcgi:error] [pid 2741:tid 2755] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:51.658986 2026] [proxy_fcgi:error] [pid 2741:tid 2768] [client 20.203.150.235:6352] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 11:22:52.372060 2026] [:error] [pid 2741:tid 2770] [client 20.203.150.235:6352] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "afAoDPp92FeOz1h6ILxHVgAAAVg"]
[Tue Apr 28 11:22:53.348519 2026] [:error] [pid 33776:tid 33808] [client 20.203.150.235:9858] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "afAoDV-bEJ2CKP3iKADh3wAAAEA"]
[Tue Apr 28 11:22:54.294987 2026] [:error] [pid 2741:tid 2749] [client 20.203.150.235:4693] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "afAoDvp92FeOz1h6ILxHXAAAAUM"]
[Tue Apr 28 11:22:55.291291 2026] [:error] [pid 2741:tid 2751] [client 20.203.150.235:6383] [client 20.203.150.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws.php"] [unique_id "afAoD_p92FeOz1h6ILxHYAAAAUU"]
[Tue Apr 28 12:30:59.169434 2026] [:error] [pid 33864:tid 33866] [client 43.131.26.226:39408] [client 43.131.26.226] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afA4AzXchLGZ4QggCsnPAAAAAIA"]
[Tue Apr 28 14:26:52.045160 2026] [:error] [pid 2741:tid 2753] [client 101.32.15.141:53864] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afBTLPp92FeOz1h6ILyQGAAAAUc"]
[Tue Apr 28 16:05:27.571746 2026] [:error] [pid 33776:tid 33822] [client 206.255.112.6:61186] [client 206.255.112.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.255.112.6, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afBqR1-bEJ2CKP3iKAAMswAAAE4"]
[Tue Apr 28 16:05:27.587553 2026] [proxy_fcgi:error] [pid 33776:tid 33822] [client 206.255.112.6:61186] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 17:32:21.270139 2026] [:error] [pid 2741:tid 2764] [client 123.187.240.242:39244] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afB-pfp92FeOz1h6ILzFpAAAAVI"]
[Tue Apr 28 20:03:49.448421 2026] [:error] [pid 33864:tid 33870] [client 49.51.203.164:45230] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afCiJTXchLGZ4QggCskceAAAAIQ"]
[Tue Apr 28 21:49:50.060411 2026] [:error] [pid 50889:tid 50913] [client 43.153.62.161:37178] [client 43.153.62.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afC6_ozszBr00txEzGhaBgAAABU"]
[Wed Apr 29 00:34:21.601374 2026] [:error] [pid 33777:tid 33846] [client 182.42.111.156:40623] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afDhjbXUCFWqmordGGI-7gAAAQs"]
[Wed Apr 29 03:58:13.347684 2026] [:error] [pid 56756:tid 56793] [client 124.156.226.179:56738] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afERVXDi78vq-l2wwMz_OAAAAEE"]
[Wed Apr 29 05:59:14.907864 2026] [:error] [pid 40343:tid 40347] [client 43.153.96.79:55798] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afEtsmiaWCZjSxz2ZNtm8gAAAYA"]
[Wed Apr 29 06:42:56.067582 2026] [:error] [pid 40344:tid 40383] [client 1.15.52.154:48198] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afE38J_iiwb4cHXz-Jr-AwAAAcg"]
[Wed Apr 29 07:29:03.944882 2026] [:error] [pid 26594:tid 26618] [client 185.213.175.173:54782] [client 185.213.175.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "afFCv9s-37Kay1vO52k7JQAAARY"]
[Wed Apr 29 07:29:03.976666 2026] [:error] [pid 56757:tid 56834] [client 185.213.175.173:54808] [client 185.213.175.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "afFCv_j76quHaaG1miSYvgAAAI8"]
[Wed Apr 29 09:36:39.027690 2026] [:error] [pid 31749:tid 31771] [client 177.91.224.145:20594] [client 177.91.224.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.224.145, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afFgp_X0dDu1guIpvOvb5QAAAFQ"]
[Wed Apr 29 09:36:39.038760 2026] [proxy_fcgi:error] [pid 31749:tid 31771] [client 177.91.224.145:20594] AH01071: Got error 'Primary script unknown'
[Wed Apr 29 12:20:14.999500 2026] [:error] [pid 61628:tid 61644] [client 129.226.93.97:50548] [client 129.226.93.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afGG_vXzdLVcrP-YPZglVgAAAMs"]
[Wed Apr 29 15:35:00.947337 2026] [:error] [pid 45054:tid 45077] [client 45.119.85.39:61631] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-login.php"] [unique_id "afG0pItL6SUL31r23c-jAgAAApU"], referer: https://www.google.com
[Wed Apr 29 15:35:00.947398 2026] [:error] [pid 45054:tid 45077] [client 45.119.85.39:61631] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 118"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-login.php"] [unique_id "afG0pItL6SUL31r23c-jAgAAApU"], referer: https://www.google.com
[Wed Apr 29 16:58:45.946355 2026] [:error] [pid 44766:tid 44777] [client 20.2.52.208:51282] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/support"] [unique_id "afHIRaVI9GtM_JyauAI7fQAAAYk"]
[Wed Apr 29 16:58:45.947893 2026] [:error] [pid 2604:tid 2622] [client 20.2.52.208:51280] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/contact.html"] [unique_id "afHIRRx5WQMU1W68tTYpCwAAAFA"]
[Wed Apr 29 16:58:45.949301 2026] [:error] [pid 44860:tid 44872] [client 20.2.52.208:51279] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/request"] [unique_id "afHIRUQ82el2g7ESJ16Q3QAAAko"]
[Wed Apr 29 16:58:45.958975 2026] [:error] [pid 22901:tid 22911] [client 20.2.52.208:51273] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inquiry.html"] [unique_id "afHIRRvfVEXI-f42iRRVMQAAAQg"]
[Wed Apr 29 16:58:45.959498 2026] [:error] [pid 44766:tid 44769] [client 20.2.52.208:51285] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/form"] [unique_id "afHIRaVI9GtM_JyauAI7fgAAAYE"]
[Wed Apr 29 16:58:46.016497 2026] [:error] [pid 22901:tid 22907] [client 20.2.52.208:51276] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/support/contact"] [unique_id "afHIRhvfVEXI-f42iRRVMgAAAQQ"]
[Wed Apr 29 16:58:46.211004 2026] [:error] [pid 45289:tid 45295] [client 20.2.52.208:51278] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inquiry-form"] [unique_id "afHIRl_vGmZY7dOOIwrNqwAAA4M"]
[Wed Apr 29 16:58:46.388029 2026] [:error] [pid 61540:tid 61596] [client 20.2.52.208:51281] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/faq"] [unique_id "afHIRuQ8cJB7pQslzIfexwAAAJc"]
[Wed Apr 29 16:58:46.458523 2026] [:error] [pid 44766:tid 44773] [client 20.2.52.208:51284] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/access"] [unique_id "afHIRqVI9GtM_JyauAI7fwAAAYU"]
[Wed Apr 29 16:58:46.687672 2026] [:error] [pid 2604:tid 2627] [client 20.2.52.208:51288] [client 20.2.52.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/help"] [unique_id "afHIRhx5WQMU1W68tTYpDAAAAFU"]
[Wed Apr 29 17:12:16.437933 2026] [:error] [pid 45085:tid 45106] [client 43.165.195.234:46066] [client 43.165.195.234] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afHLcNS7eNjgd8gD6ZwErAAAAtM"]
[Wed Apr 29 18:22:18.150384 2026] [:error] [pid 45054:tid 45065] [client 170.106.72.93:43592] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afHb2otL6SUL31r23c_HEgAAAok"]
[Wed Apr 29 19:24:10.226640 2026] [:error] [pid 61540:tid 61595] [client 122.51.236.174:35538] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afHqWuQ8cJB7pQslzIfxPAAAAJY"]
[Wed Apr 29 22:32:17.279525 2026] [:error] [pid 21138:tid 21220] [client 43.135.142.7:35356] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afIWcZuzwUiyMeUnp33_KAAAARc"]
[Wed Apr 29 23:01:48.769054 2026] [:error] [pid 21138:tid 21219] [client 35.205.65.184:44164] [client 35.205.65.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "afIdXJuzwUiyMeUnp30GogAAARY"]
[Wed Apr 29 23:55:53.260652 2026] [:error] [pid 21137:tid 21188] [client 43.130.228.73:34114] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afIqCfw-HnaioFPIurV_iwAAABM"]
[Thu Apr 30 02:18:20.344451 2026] [:error] [pid 21536:tid 21556] [client 103.237.39.212:65104] [client 103.237.39.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.237.39.212, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afJLbCREaVkH9P5H_LROgAAAAJI"]
[Thu Apr 30 02:18:20.359390 2026] [proxy_fcgi:error] [pid 21536:tid 21556] [client 103.237.39.212:65104] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 02:18:48.524984 2026] [:error] [pid 21137:tid 21175] [client 223.185.134.204:29442] [client 223.185.134.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.204, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afJLiPw-HnaioFPIurWe_AAAAAY"]
[Thu Apr 30 02:18:48.536646 2026] [proxy_fcgi:error] [pid 21137:tid 21175] [client 223.185.134.204:29442] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:13.719286 2026] [proxy_fcgi:error] [pid 47618:tid 47628] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:13.959869 2026] [proxy_fcgi:error] [pid 47618:tid 47633] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:14.199822 2026] [proxy_fcgi:error] [pid 47618:tid 47634] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:14.439925 2026] [proxy_fcgi:error] [pid 47618:tid 47629] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:14.678763 2026] [proxy_fcgi:error] [pid 47618:tid 47632] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:14.918167 2026] [proxy_fcgi:error] [pid 47618:tid 47627] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:15.157680 2026] [proxy_fcgi:error] [pid 47618:tid 47625] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:15.399946 2026] [proxy_fcgi:error] [pid 47618:tid 47635] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:15.639933 2026] [proxy_fcgi:error] [pid 47618:tid 47642] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:15.879831 2026] [proxy_fcgi:error] [pid 47618:tid 47636] [client 4.211.173.68:33738] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 03:31:16.354368 2026] [:error] [pid 47618:tid 47630] [client 4.211.173.68:33738] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "afJchHHYUSxIrhce2OBclAAAAUk"]
[Thu Apr 30 03:31:17.384460 2026] [:error] [pid 21138:tid 21218] [client 4.211.173.68:32739] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "afJchZuzwUiyMeUnp31S4QAAARU"]
[Thu Apr 30 03:31:18.359810 2026] [:error] [pid 21138:tid 21207] [client 4.211.173.68:30754] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "afJchpuzwUiyMeUnp31S5gAAAQo"]
[Thu Apr 30 03:31:19.370644 2026] [:error] [pid 47618:tid 47627] [client 4.211.173.68:38097] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "afJch3HYUSxIrhce2OBcmgAAAUY"]
[Thu Apr 30 05:28:47.886937 2026] [:error] [pid 52350:tid 52358] [client 43.153.54.138:58044] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afJ4D_1j4GHE9hm7bfcxtgAAAQE"]
[Thu Apr 30 07:08:58.680447 2026] [:error] [pid 18113:tid 18179] [client 43.161.233.190:47938] [client 43.161.233.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afKPiniIjwsVGkvz5IlbUwAAAII"]
[Thu Apr 30 07:11:01.273745 2026] [:error] [pid 18220:tid 18236] [client 139.155.126.16:45524] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afKQBcyESVSfAPebmxb0oAAAAM0"]
[Thu Apr 30 09:55:45.480209 2026] [proxy_fcgi:error] [pid 52350:tid 52381] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:45.812481 2026] [proxy_fcgi:error] [pid 52350:tid 52372] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:46.483619 2026] [proxy_fcgi:error] [pid 52350:tid 52369] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:47.147556 2026] [proxy_fcgi:error] [pid 52350:tid 52361] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:47.479277 2026] [proxy_fcgi:error] [pid 52350:tid 52375] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:47.810576 2026] [proxy_fcgi:error] [pid 52350:tid 52362] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:48.142129 2026] [proxy_fcgi:error] [pid 52350:tid 52364] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:48.474124 2026] [proxy_fcgi:error] [pid 52350:tid 52374] [client 4.211.173.68:56678] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 09:55:48.801781 2026] [:error] [pid 52350:tid 52367] [client 4.211.173.68:56678] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afK2pP1j4GHE9hm7bfdoyQAAAQk"]
[Thu Apr 30 09:55:49.918068 2026] [:error] [pid 18112:tid 18157] [client 4.211.173.68:56663] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afK2pSUrJv3y8j6Lm1vN1AAAAEc"]
[Thu Apr 30 09:55:50.893224 2026] [:error] [pid 18111:tid 18142] [client 4.211.173.68:5303] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afK2pmctLbxB7Q1_oK22CQAAABQ"]
[Thu Apr 30 09:55:51.841752 2026] [:error] [pid 18111:tid 18133] [client 4.211.173.68:5776] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afK2p2ctLbxB7Q1_oK22CwAAAAs"]
[Thu Apr 30 12:31:50.364316 2026] [:error] [pid 52350:tid 52373] [client 43.159.149.216:55976] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afLbNv1j4GHE9hm7bfd8FAAAAQ8"]
[Thu Apr 30 13:08:06.264096 2026] [autoindex:error] [pid 18111:tid 18135] [client 212.34.135.52:35052] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Apr 30 14:28:10.980847 2026] [:error] [pid 52350:tid 52369] [client 43.135.172.89:38268] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afL2ev1j4GHE9hm7bfeLpgAAAQs"]
[Thu Apr 30 16:42:34.723846 2026] [:error] [pid 40003:tid 40028] [client 185.174.156.129:20436] [client 185.174.156.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.174.156.129, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afMV-jIyJ-Orl-2KA1LDggAAANY"]
[Thu Apr 30 16:42:34.734316 2026] [proxy_fcgi:error] [pid 40003:tid 40028] [client 185.174.156.129:20436] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 16:42:35.131186 2026] [:error] [pid 40003:tid 40009] [client 185.174.156.129:20436] [client 185.174.156.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.174.156.129, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afMV-zIyJ-Orl-2KA1LDgwAAAMM"]
[Thu Apr 30 16:42:35.136288 2026] [proxy_fcgi:error] [pid 40003:tid 40009] [client 185.174.156.129:20436] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 18:57:11.001034 2026] [:error] [pid 6456:tid 6469] [client 119.91.20.139:35932] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afM1hkOBwsDodnkJK5w4bgAAAEs"]
[Thu Apr 30 19:00:56.399499 2026] [:error] [pid 6456:tid 6473] [client 43.165.2.110:58606] [client 43.165.2.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afM2aEOBwsDodnkJK5w6YgAAAE8"]
[Thu Apr 30 20:25:44.499436 2026] [:error] [pid 5733:tid 5803] [client 43.165.186.188:46164] [client 43.165.186.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afNKSPT55_Ioa9J2OpLsrAAAAQ0"]
[Thu Apr 30 21:13:43.497191 2026] [:error] [pid 5820:tid 5838] [client 37.210.42.187:62462] [client 37.210.42.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.210.42.187, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afNVhwyrLh3-LgH3Xv9VggAAABA"]
[Thu Apr 30 21:13:43.508109 2026] [proxy_fcgi:error] [pid 5820:tid 5838] [client 37.210.42.187:62462] AH01071: Got error 'Primary script unknown'
[Thu Apr 30 21:27:06.852077 2026] [:error] [pid 6456:tid 6481] [client 195.170.172.102:40198] [client 195.170.172.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "afNYqkOBwsDodnkJK5xrzAAAAFc"]
[Thu Apr 30 21:27:06.852573 2026] [:error] [pid 5732:tid 5763] [client 195.170.172.102:40204] [client 195.170.172.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "afNYqtuJ3iSd5GdjqlhH0QAAAMA"]
[Thu Apr 30 21:35:02.875063 2026] [:error] [pid 5733:tid 5791] [client 105.102.15.139:60427] [client 105.102.15.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.102.15.139, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afNahvT55_Ioa9J2OpL24QAAAQE"]
[Thu Apr 30 21:35:02.886287 2026] [proxy_fcgi:error] [pid 5733:tid 5791] [client 105.102.15.139:60427] AH01071: Got error 'Primary script unknown'
[Fri May 01 01:08:57.754286 2026] [:error] [pid 6456:tid 6468] [client 43.164.0.21:57642] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afOMqUOBwsDodnkJK5ygmwAAAEo"]
[Fri May 01 02:54:23.473560 2026] [:error] [pid 5732:tid 5781] [client 43.166.253.94:46000] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afOlX9uJ3iSd5Gdjqlh2DAAAANI"]
[Fri May 01 04:56:40.958085 2026] [:error] [pid 38016:tid 38088] [client 92.53.64.155:58884] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "afPCCJFc1DCPy0LM72bbTwAAAIo"]
[Fri May 01 07:11:55.543528 2026] [:error] [pid 6045:tid 6057] [client 123.207.65.62:44224] [client 123.207.65.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afPhuz4a1vLt_qHgXBSxtwAAAUI"]
[Fri May 01 08:18:50.674117 2026] [:error] [pid 6046:tid 6104] [client 43.166.226.57:53582] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afPxaoyBrpmb1HMIbiT8QwAAAZQ"]
[Fri May 01 10:00:42.728485 2026] [:error] [pid 6045:tid 6072] [client 49.51.253.26:44608] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afQJSj4a1vLt_qHgXBTMzAAAAVE"]
[Fri May 01 11:57:33.835112 2026] [:error] [pid 33791:tid 33813] [client 34.118.114.138:58976] [client 34.118.114.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "afQkrW9ixd-moLycM9A4FgAAABM"]
[Fri May 01 11:57:37.387061 2026] [:error] [pid 25085:tid 25095] [client 34.118.114.138:52132] [client 34.118.114.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "afQksfuD8fWRiE0RX0GKwgAAAUQ"]
[Fri May 01 12:29:48.687985 2026] [:error] [pid 33791:tid 33804] [client 34.93.251.90:40248] [client 34.93.251.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "afQsPG9ixd-moLycM9BIkAAAAAo"]
[Fri May 01 15:04:41.657550 2026] [:error] [pid 24996:tid 25059] [client 49.51.33.159:45410] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afRQiSDBq9mMfUWQQeohYgAAAJg"]
[Fri May 01 15:53:56.320700 2026] [autoindex:error] [pid 24995:tid 25003] [client 85.137.49.10:7502] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Fri May 01 16:32:42.236862 2026] [:error] [pid 25085:tid 25098] [client 101.33.66.34:37434] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afRlKvuD8fWRiE0RX0HWDgAAAUc"]
[Fri May 01 19:57:24.788164 2026] [:error] [pid 24997:tid 25075] [client 119.91.20.139:55646] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afSVJPOkHa4ScY5oo8zPhgAAANM"]
[Fri May 01 21:08:32.431751 2026] [:error] [pid 25320:tid 25333] [client 43.165.167.72:56278] [client 43.165.167.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afSl0Fc3wJ-3-XaXB3oPRAAAAQo"]
[Fri May 01 22:31:02.766382 2026] [:error] [pid 33791:tid 33804] [client 43.130.72.40:56504] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afS5Jm9ixd-moLycM9Ax0AAAAAo"]
[Fri May 01 23:57:29.068726 2026] [autoindex:error] [pid 33791:tid 33808] [client 88.210.11.43:41242] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sat May 02 00:46:25.237154 2026] [:error] [pid 25320:tid 25334] [client 104.209.173.99:44196] [client 104.209.173.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afTY4Vc3wJ-3-XaXB3pF6AAAAQs"]
[Sat May 02 05:43:48.679759 2026] [:error] [pid 53436:tid 53516] [client 43.165.4.2:38824] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afUelK9N0xp8fccVM0BNNgAAAJE"]
[Sat May 02 08:18:59.913215 2026] [:error] [pid 53436:tid 53517] [client 43.166.253.94:54842] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afVC869N0xp8fccVM0CJOgAAAJI"]
[Sat May 02 08:19:10.894109 2026] [:error] [pid 11894:tid 11920] [client 139.155.126.16:33096] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afVC_jHh6DQF1tkXIKx7twAAAVc"]
[Sat May 02 12:35:12.946448 2026] [:error] [pid 51950:tid 51986] [client 192.96.159.129:60099] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "afV_AIoBJzYZ3RKUhdjwPAAAAkY"]
[Sat May 02 14:29:46.438392 2026] [:error] [pid 52010:tid 52063] [client 43.135.182.43:50578] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afWZ2giR6wohDtdeJMC4NgAAAtQ"]
[Sat May 02 16:20:12.063391 2026] [:error] [pid 51950:tid 51998] [client 49.51.72.236:45386] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afWzvIoBJzYZ3RKUhdgi9QAAAlI"]
[Sat May 02 20:42:59.613797 2026] [:error] [pid 52012:tid 52101] [client 101.42.46.71:49130] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afXxU0zSWr-8cpS83minowAAA1c"]
[Sat May 02 22:15:36.281282 2026] [:error] [pid 51950:tid 52000] [client 101.32.52.164:55456] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afYHCIoBJzYZ3RKUhdhlMAAAAlQ"]
[Sun May 03 00:57:54.059332 2026] [:error] [pid 52010:tid 52066] [client 34.24.172.92:38026] [client 34.24.172.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "afYtEgiR6wohDtdeJMBd4QAAAtc"]
[Sun May 03 03:54:53.191206 2026] [:error] [pid 40732:tid 40754] [client 49.51.243.156:49040] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afZWjf1lQrIvlEdzcVfglAAAAMo"]
[Sun May 03 05:57:44.081299 2026] [:error] [pid 40732:tid 40768] [client 170.106.72.93:58706] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afZzWP1lQrIvlEdzcVcdiQAAANg"]
[Sun May 03 11:33:25.797781 2026] [:error] [pid 40456:tid 40468] [client 185.198.240.237:48739] [client 185.198.240.237] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "afbCBTSujTvwdzEkjScHXwAAAYo"]
[Sun May 03 11:47:50.094678 2026] [:error] [pid 37246:tid 37261] [client 43.133.14.237:39744] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afbFZjhvYFGNwhnPamq0gAAAAQs"]
[Sun May 03 13:29:13.903047 2026] [:error] [pid 40422:tid 40449] [client 43.165.126.130:43694] [client 43.165.126.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afbdKUHBbBLrXh6PBuv3uwAAAVc"]
[Sun May 03 18:23:20.205887 2026] [:error] [pid 37126:tid 37165] [client 4.236.164.160:60321] [client 4.236.164.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.236.164.160, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/wp/xmlrpc.php"] [unique_id "afciGPR_A42N-LtDyrs14wAAAAw"]
[Sun May 03 19:41:17.228274 2026] [:error] [pid 40422:tid 40450] [client 4.236.164.160:60353] [client 4.236.164.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.236.164.160, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/wp/xmlrpc.php"] [unique_id "afc0XUHBbBLrXh6PButG1gAAAVg"]
[Sun May 03 21:13:32.731731 2026] [:error] [pid 34432:tid 34445] [client 162.14.109.170:39080] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afdJ_J73JKVQ0wlof4KADwAAAcs"]
[Mon May 04 09:17:11.811333 2026] [:error] [pid 11958:tid 11973] [client 106.54.62.156:42608] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "affzlzAK_o2NLEdfAUk07wAAAEw"]
[Mon May 04 09:54:03.698649 2026] [:error] [pid 12022:tid 12038] [client 20.9.90.138:15250] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aff8O0VhgvCNKBWnaTJF9gAAAI4"]
[Mon May 04 09:54:04.516456 2026] [:error] [pid 12022:tid 12030] [client 20.9.90.138:15284] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aff8PEVhgvCNKBWnaTJF_QAAAIY"]
[Mon May 04 09:54:05.270337 2026] [:error] [pid 12051:tid 12055] [client 20.9.90.138:15237] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aff8PerVB-w_PyOHK6leKgAAAUI"]
[Mon May 04 09:54:06.019912 2026] [:error] [pid 33186:tid 33206] [client 20.9.90.138:15275] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "aff8Prqlqe0DcmBS9Vzt4AAAABE"]
[Mon May 04 13:19:37.897548 2026] [:error] [pid 12022:tid 12028] [client 217.226.95.121:59411] [client 217.226.95.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.226.95.121, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afgsaUVhgvCNKBWnaTKF7wAAAIQ"]
[Mon May 04 13:19:37.910038 2026] [proxy_fcgi:error] [pid 12022:tid 12028] [client 217.226.95.121:59411] AH01071: Got error 'Primary script unknown'
[Mon May 04 13:50:40.398990 2026] [:error] [pid 11959:tid 12009] [client 35.209.133.82:35746] [client 35.209.133.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afgzsAojk2nvxs7h5KsMCgAAANU"]
[Mon May 04 20:26:20.621154 2026] [:error] [pid 61042:tid 61070] [client 43.167.239.66:35486] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afiQbEnAPPS1fjubA9RUwwAAANg"]
[Mon May 04 21:56:04.842694 2026] [:error] [pid 61044:tid 61117] [client 139.155.126.16:40616] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afildEw8w2zZZXI6H1unggAAAA8"]
[Mon May 04 23:35:24.473775 2026] [:error] [pid 61043:tid 61091] [client 47.82.180.81:55426] [client 47.82.180.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "afi8vJ8-LwtfURjiAbDmLwAAAFA"]
[Mon May 04 23:35:24.855676 2026] [:error] [pid 61150:tid 61166] [client 47.82.180.81:55891] [client 47.82.180.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "afi8vO8QXWVLiwIGVpekxwAAAU0"]
[Mon May 04 23:39:15.580411 2026] [:error] [pid 61043:tid 61090] [client 103.200.135.86:51032] [client 103.200.135.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "afi9o58-LwtfURjiAbDm3QAAAE8"]
[Mon May 04 23:39:15.805051 2026] [:error] [pid 3341:tid 3351] [client 103.200.135.86:51066] [client 103.200.135.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "afi9o09o3_LordU0wW6ZXwAAAIc"]
[Tue May 05 01:59:20.022307 2026] [proxy_fcgi:error] [pid 32471:tid 32474] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:20.232318 2026] [proxy_fcgi:error] [pid 32471:tid 32495] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:20.441898 2026] [proxy_fcgi:error] [pid 32471:tid 32483] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:20.651529 2026] [proxy_fcgi:error] [pid 32471:tid 32479] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:20.861948 2026] [proxy_fcgi:error] [pid 32471:tid 32485] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:21.072291 2026] [proxy_fcgi:error] [pid 32471:tid 32481] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:21.290986 2026] [proxy_fcgi:error] [pid 32471:tid 32478] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:21.501008 2026] [proxy_fcgi:error] [pid 32471:tid 32497] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:21.711106 2026] [proxy_fcgi:error] [pid 32471:tid 32489] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:21.921059 2026] [proxy_fcgi:error] [pid 32471:tid 32490] [client 4.204.197.96:63985] AH01071: Got error 'Primary script unknown'
[Tue May 05 01:59:22.128010 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:63985] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afjeenmjpb9EYq6AqhK5RwAAAQM"]
[Tue May 05 01:59:22.662149 2026] [:error] [pid 61044:tid 61107] [client 4.204.197.96:64605] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afjeekw8w2zZZXI6H1vMowAAAAU"]
[Tue May 05 01:59:23.081156 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:64545] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afjee0w8w2zZZXI6H1vMpwAAABY"]
[Tue May 05 01:59:23.630933 2026] [:error] [pid 61150:tid 61177] [client 4.204.197.96:63955] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afjee-8QXWVLiwIGVpe-sQAAAVg"]
[Tue May 05 01:59:24.055542 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:64616] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "afjefO8QXWVLiwIGVpe-swAAAUg"]
[Tue May 05 01:59:24.497713 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:65259] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "afjefO8QXWVLiwIGVpe-tgAAAVI"]
[Tue May 05 01:59:24.916322 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:65217] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "afjefEw8w2zZZXI6H1vMqgAAAAY"]
[Tue May 05 01:59:25.400085 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:64623] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "afjefU9o3_LordU0wW7RKgAAAI4"]
[Tue May 05 01:59:25.820830 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63965] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jk.php"] [unique_id "afjefU9o3_LordU0wW7RKwAAAJI"]
[Tue May 05 01:59:26.232896 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:63992] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jk.php"] [unique_id "afjefk9o3_LordU0wW7RLgAAAIE"]
[Tue May 05 01:59:26.665863 2026] [:error] [pid 61044:tid 61125] [client 4.204.197.96:65191] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jk.php"] [unique_id "afjefkw8w2zZZXI6H1vMsAAAABc"]
[Tue May 05 01:59:27.093922 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:64584] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jk.php"] [unique_id "afjef09o3_LordU0wW7RMAAAAIY"]
[Tue May 05 01:59:27.552313 2026] [:error] [pid 61043:tid 61076] [client 4.204.197.96:63941] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gcqoa.php"] [unique_id "afjef58-LwtfURjiAbAFYgAAAEE"]
[Tue May 05 01:59:27.971592 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:65264] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gcqoa.php"] [unique_id "afjef09o3_LordU0wW7RMQAAAIw"]
[Tue May 05 01:59:28.389611 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:64612] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gcqoa.php"] [unique_id "afjegJ8-LwtfURjiAbAFZQAAAFc"]
[Tue May 05 01:59:28.825600 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:65165] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gcqoa.php"] [unique_id "afjegE9o3_LordU0wW7RMwAAAIM"]
[Tue May 05 01:59:29.243131 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:65239] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "afjegU9o3_LordU0wW7RNAAAAJQ"]
[Tue May 05 01:59:29.727983 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:64577] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "afjegU9o3_LordU0wW7RNwAAAIk"]
[Tue May 05 01:59:30.144812 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:65190] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "afjegk9o3_LordU0wW7RPAAAAI4"]
[Tue May 05 01:59:30.573819 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:63878] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-editor.php"] [unique_id "afjegnmjpb9EYq6AqhK5SAAAAQE"]
[Tue May 05 01:59:30.992029 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:65228] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "afjegp8-LwtfURjiAbAFagAAAFE"]
[Tue May 05 01:59:31.409845 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:64589] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "afjeg09o3_LordU0wW7RQwAAAII"]
[Tue May 05 01:59:31.858438 2026] [:error] [pid 61044:tid 61109] [client 4.204.197.96:65164] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "afjeg0w8w2zZZXI6H1vMuwAAAAc"]
[Tue May 05 01:59:32.287684 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:64626] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/plugin-install.php"] [unique_id "afjehE9o3_LordU0wW7RRgAAAI0"]
[Tue May 05 01:59:32.711147 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:64614] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "afjehE9o3_LordU0wW7RSQAAAJA"]
[Tue May 05 01:59:33.134454 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:63918] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "afjehXmjpb9EYq6AqhK5SQAAAQI"]
[Tue May 05 01:59:33.546718 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:65256] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "afjehU9o3_LordU0wW7RTwAAAJc"]
[Tue May 05 01:59:33.968304 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:63906] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/profile.php"] [unique_id "afjehZ8-LwtfURjiAbAFbwAAAFI"]
[Tue May 05 01:59:34.390361 2026] [:error] [pid 61044:tid 61113] [client 4.204.197.96:65177] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "afjehkw8w2zZZXI6H1vMwwAAAAs"]
[Tue May 05 01:59:34.854411 2026] [:error] [pid 61043:tid 61080] [client 4.204.197.96:65219] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "afjehp8-LwtfURjiAbAFcQAAAEU"]
[Tue May 05 01:59:35.280528 2026] [:error] [pid 61044:tid 61117] [client 4.204.197.96:63907] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "afjeh0w8w2zZZXI6H1vMxgAAAA8"]
[Tue May 05 01:59:35.708507 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:65169] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-t.api.php"] [unique_id "afjeh58-LwtfURjiAbAFcgAAAFU"]
[Tue May 05 01:59:36.122158 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:65256] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "afjeiJ8-LwtfURjiAbAFdAAAAFY"]
[Tue May 05 01:59:36.535513 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:63890] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "afjeiJ8-LwtfURjiAbAFdgAAAFM"]
[Tue May 05 01:59:36.963813 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:55196] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "afjeiJ8-LwtfURjiAbAFeAAAAE4"]
[Tue May 05 01:59:37.392751 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:63897] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "afjeiU9o3_LordU0wW7RWAAAAJY"]
[Tue May 05 01:59:37.815284 2026] [:error] [pid 61044:tid 61106] [client 4.204.197.96:65163] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-api.php"] [unique_id "afjeiUw8w2zZZXI6H1vMygAAAAQ"]
[Tue May 05 01:59:38.237353 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:64634] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-api.php"] [unique_id "afjeik9o3_LordU0wW7RWgAAAIg"]
[Tue May 05 01:59:38.662795 2026] [:error] [pid 61043:tid 61080] [client 4.204.197.96:63899] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-api.php"] [unique_id "afjeip8-LwtfURjiAbAFewAAAEU"]
[Tue May 05 01:59:39.110035 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:65201] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-api.php"] [unique_id "afjei09o3_LordU0wW7RXQAAAJU"]
[Tue May 05 01:59:39.538314 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:64608] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "afjei58-LwtfURjiAbAFfAAAAEA"]
[Tue May 05 01:59:40.012839 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:65240] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "afjejE9o3_LordU0wW7RXwAAAIM"]
[Tue May 05 01:59:40.438345 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:64520] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "afjejO8QXWVLiwIGVpe-wwAAAUQ"]
[Tue May 05 01:59:40.866935 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:64537] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class-atom.php"] [unique_id "afjejE9o3_LordU0wW7RYAAAAIs"]
[Tue May 05 01:59:41.296390 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:64542] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afjejU9o3_LordU0wW7RYgAAAIg"]
[Tue May 05 01:59:41.724882 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:64525] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afjejZ8-LwtfURjiAbAFfQAAAEQ"]
[Tue May 05 01:59:42.211246 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:65199] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afjeju8QXWVLiwIGVpe-xQAAAVA"]
[Tue May 05 01:59:42.627659 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:64527] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afjejp8-LwtfURjiAbAFfgAAAE8"]
[Tue May 05 01:59:43.151432 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:63920] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "afjej09o3_LordU0wW7RZQAAAJQ"]
[Tue May 05 01:59:43.580161 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:65233] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "afjej09o3_LordU0wW7RZgAAAIc"]
[Tue May 05 01:59:44.001456 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:55213] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "afjekE9o3_LordU0wW7RagAAAIs"]
[Tue May 05 01:59:44.423264 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:65170] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "afjekE9o3_LordU0wW7RawAAAJM"]
[Tue May 05 01:59:44.848107 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:63941] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xmlsia.php"] [unique_id "afjekE9o3_LordU0wW7RbQAAAI8"]
[Tue May 05 01:59:45.284402 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:64621] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xmlsia.php"] [unique_id "afjekZ8-LwtfURjiAbAFggAAAFE"]
[Tue May 05 01:59:45.708522 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:64563] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xmlsia.php"] [unique_id "afjekU9o3_LordU0wW7RcQAAAJg"]
[Tue May 05 01:59:46.148609 2026] [:error] [pid 32471:tid 32479] [client 4.204.197.96:63999] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xmlsia.php"] [unique_id "afjeknmjpb9EYq6AqhK5TgAAAQU"]
[Tue May 05 01:59:46.568433 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:64550] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-inic3.php"] [unique_id "afjeku8QXWVLiwIGVpe-xgAAAVM"]
[Tue May 05 01:59:46.987365 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:55226] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-inic3.php"] [unique_id "afjekk9o3_LordU0wW7ReQAAAI4"]
[Tue May 05 01:59:47.411083 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:63926] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-inic3.php"] [unique_id "afjek58-LwtfURjiAbAFhAAAAE4"]
[Tue May 05 01:59:47.828430 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:63339] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-inic3.php"] [unique_id "afjek09o3_LordU0wW7RewAAAJA"]
[Tue May 05 01:59:48.315395 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:65179] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "afjelE9o3_LordU0wW7RfgAAAJg"]
[Tue May 05 01:59:48.735599 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:63952] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "afjelE9o3_LordU0wW7RfwAAAIM"]
[Tue May 05 01:59:49.157780 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:64560] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "afjelXmjpb9EYq6AqhK5UgAAARQ"]
[Tue May 05 01:59:49.587500 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:63990] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ftde.php"] [unique_id "afjelXmjpb9EYq6AqhK5UwAAAQE"]
[Tue May 05 01:59:50.006145 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:63884] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "afjelk9o3_LordU0wW7RhQAAAIg"]
[Tue May 05 01:59:50.475288 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:64556] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "afjelnmjpb9EYq6AqhK5WAAAAQ4"]
[Tue May 05 01:59:50.902135 2026] [:error] [pid 61150:tid 61176] [client 4.204.197.96:64635] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "afjelu8QXWVLiwIGVpe-yQAAAVc"]
[Tue May 05 01:59:51.390310 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:64554] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bthil.php"] [unique_id "afjel3mjpb9EYq6AqhK5WgAAARg"]
[Tue May 05 01:59:51.804187 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:64564] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "afjel3mjpb9EYq6AqhK5XQAAAQk"]
[Tue May 05 01:59:52.278440 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:65248] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "afjemE9o3_LordU0wW7RiQAAAI4"]
[Tue May 05 01:59:52.774394 2026] [:error] [pid 61042:tid 61061] [client 4.204.197.96:65263] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "afjemEnAPPS1fjubA9SDhQAAAM8"]
[Tue May 05 01:59:53.216566 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:63872] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "afjemU9o3_LordU0wW7RiwAAAIY"]
[Tue May 05 01:59:53.693965 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:63306] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "afjemXmjpb9EYq6AqhK5YwAAAQE"]
[Tue May 05 01:59:54.110325 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:65181] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "afjemnmjpb9EYq6AqhK5ZQAAARY"]
[Tue May 05 01:59:54.573420 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:63972] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "afjemu8QXWVLiwIGVpe-ywAAAUg"]
[Tue May 05 01:59:54.992367 2026] [:error] [pid 61150:tid 61154] [client 4.204.197.96:38523] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "afjemu8QXWVLiwIGVpe-zAAAAUE"]
[Tue May 05 01:59:55.426984 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:63300] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "afjem09o3_LordU0wW7RkgAAAIw"]
[Tue May 05 01:59:55.850838 2026] [:error] [pid 61042:tid 61046] [client 4.204.197.96:65215] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "afjem0nAPPS1fjubA9SDhgAAAMA"]
[Tue May 05 01:59:56.316389 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:65188] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "afjenO8QXWVLiwIGVpe-0AAAAUA"]
[Tue May 05 01:59:56.764671 2026] [:error] [pid 61150:tid 61157] [client 4.204.197.96:63970] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "afjenO8QXWVLiwIGVpe-0QAAAUQ"]
[Tue May 05 01:59:57.191476 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:55231] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "afjenZ8-LwtfURjiAbAFiAAAAEQ"]
[Tue May 05 01:59:57.657215 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:64583] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "afjenZ8-LwtfURjiAbAFiQAAAE8"]
[Tue May 05 01:59:58.107038 2026] [:error] [pid 61043:tid 61082] [client 4.204.197.96:63914] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "afjenp8-LwtfURjiAbAFigAAAEc"]
[Tue May 05 01:59:58.588503 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:38482] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "afjennmjpb9EYq6AqhK5awAAARY"]
[Tue May 05 01:59:59.011606 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:63993] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "afjen58-LwtfURjiAbAFjAAAAFM"]
[Tue May 05 01:59:59.499342 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:63944] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "afjen09o3_LordU0wW7RngAAAIs"]
[Tue May 05 01:59:59.926358 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:65253] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "afjen-8QXWVLiwIGVpe-0gAAAVA"]
[Tue May 05 02:00:00.354831 2026] [:error] [pid 61150:tid 61166] [client 4.204.197.96:65267] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "afjeoO8QXWVLiwIGVpe-0wAAAU0"]
[Tue May 05 02:00:00.794146 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:64535] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afjeoE9o3_LordU0wW7RpAAAAIY"]
[Tue May 05 02:00:01.215458 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:65247] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afjeoXmjpb9EYq6AqhK5bgAAAQY"]
[Tue May 05 02:00:01.644797 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:63891] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afjeoXmjpb9EYq6AqhK5cAAAAQk"]
[Tue May 05 02:00:02.069147 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:65278] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afjeok9o3_LordU0wW7RqAAAAIg"]
[Tue May 05 02:00:02.501710 2026] [:error] [pid 61044:tid 61103] [client 4.204.197.96:64586] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afjeokw8w2zZZXI6H1vM6QAAAAE"]
[Tue May 05 02:00:02.924091 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:65214] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afjeok9o3_LordU0wW7RqQAAAJM"]
[Tue May 05 02:00:03.343073 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:63928] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afjeo09o3_LordU0wW7RqwAAAI0"]
[Tue May 05 02:00:03.764796 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:63894] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afjeo09o3_LordU0wW7RrQAAAJY"]
[Tue May 05 02:00:04.199047 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:65249] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-slss.php"] [unique_id "afjepJ8-LwtfURjiAbAFkQAAAE0"]
[Tue May 05 02:00:04.623330 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:65159] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-slss.php"] [unique_id "afjepE9o3_LordU0wW7RrwAAAJc"]
[Tue May 05 02:00:05.042306 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:63284] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-slss.php"] [unique_id "afjepZ8-LwtfURjiAbAFkgAAAFI"]
[Tue May 05 02:00:05.513630 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:64615] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-slss.php"] [unique_id "afjepXmjpb9EYq6AqhK5cgAAAQw"]
[Tue May 05 02:00:05.964245 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:64513] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "afjepXmjpb9EYq6AqhK5cwAAARQ"]
[Tue May 05 02:00:06.383544 2026] [:error] [pid 61042:tid 61053] [client 4.204.197.96:55257] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "afjepknAPPS1fjubA9SDigAAAMc"]
[Tue May 05 02:00:06.810374 2026] [:error] [pid 61043:tid 61087] [client 4.204.197.96:64607] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "afjepp8-LwtfURjiAbAFlQAAAEw"]
[Tue May 05 02:00:07.221379 2026] [:error] [pid 61044:tid 61109] [client 4.204.197.96:64576] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "afjep0w8w2zZZXI6H1vM8AAAAAc"]
[Tue May 05 02:00:07.653309 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:65234] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "afjep58-LwtfURjiAbAFlwAAAE8"]
[Tue May 05 02:00:08.076205 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:65230] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "afjeqE9o3_LordU0wW7RtAAAAIY"]
[Tue May 05 02:00:08.501899 2026] [:error] [pid 61150:tid 61175] [client 4.204.197.96:55224] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "afjeqO8QXWVLiwIGVpe-1wAAAVY"]
[Tue May 05 02:00:08.914559 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:63888] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccou.php"] [unique_id "afjeqE9o3_LordU0wW7RtQAAAJU"]
[Tue May 05 02:00:09.336887 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:64558] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "afjeqU9o3_LordU0wW7RuAAAAIE"]
[Tue May 05 02:00:09.759901 2026] [:error] [pid 3341:tid 3346] [client 4.204.197.96:63885] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "afjeqU9o3_LordU0wW7RugAAAII"]
[Tue May 05 02:00:10.186291 2026] [:error] [pid 61044:tid 61108] [client 4.204.197.96:64618] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "afjeqkw8w2zZZXI6H1vM9wAAAAY"]
[Tue May 05 02:00:10.599861 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:64514] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "afjeqk9o3_LordU0wW7RvAAAAI0"]
[Tue May 05 02:00:11.028330 2026] [:error] [pid 61043:tid 61076] [client 4.204.197.96:64598] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "afjeq58-LwtfURjiAbAFmwAAAEE"]
[Tue May 05 02:00:11.450875 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:64597] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "afjeq58-LwtfURjiAbAFnAAAAFc"]
[Tue May 05 02:00:11.936301 2026] [:error] [pid 61042:tid 61052] [client 4.204.197.96:65223] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "afjeq0nAPPS1fjubA9SDjAAAAMY"]
[Tue May 05 02:00:12.352083 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:65274] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "afjerJ8-LwtfURjiAbAFoAAAAFI"]
[Tue May 05 02:00:12.764250 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:63333] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjerEw8w2zZZXI6H1vM_AAAAA4"]
[Tue May 05 02:00:13.178396 2026] [:error] [pid 61043:tid 61084] [client 4.204.197.96:63960] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjerZ8-LwtfURjiAbAFowAAAEk"]
[Tue May 05 02:00:13.609088 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:65196] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjerZ8-LwtfURjiAbAFpwAAAFE"]
[Tue May 05 02:00:14.036468 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:63347] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afjerp8-LwtfURjiAbAFqQAAAFg"]
[Tue May 05 02:00:14.450955 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:64629] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "afjerp8-LwtfURjiAbAFrAAAAEM"]
[Tue May 05 02:00:14.908435 2026] [:error] [pid 61043:tid 61084] [client 4.204.197.96:63929] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "afjerp8-LwtfURjiAbAFrgAAAEk"]
[Tue May 05 02:00:15.323616 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:65183] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "afjer3mjpb9EYq6AqhK5dwAAARM"]
[Tue May 05 02:00:15.745495 2026] [:error] [pid 32471:tid 32482] [client 4.204.197.96:64514] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/333.php"] [unique_id "afjer3mjpb9EYq6AqhK5eAAAAQg"]
[Tue May 05 02:00:16.167594 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:64622] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "afjesE9o3_LordU0wW7RwQAAAIc"]
[Tue May 05 02:00:16.579722 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:64534] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "afjesHmjpb9EYq6AqhK5eQAAAQA"]
[Tue May 05 02:00:17.050506 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:65241] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "afjesU9o3_LordU0wW7RwgAAAIg"]
[Tue May 05 02:00:17.468833 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63987] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "afjesU9o3_LordU0wW7RxAAAAJI"]
[Tue May 05 02:00:18.009881 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:63234] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "afjesp8-LwtfURjiAbAFtAAAAFg"]
[Tue May 05 02:00:18.431094 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:63910] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "afjesu8QXWVLiwIGVpe-2wAAAVA"]
[Tue May 05 02:00:18.960104 2026] [:error] [pid 61150:tid 61168] [client 4.204.197.96:63919] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "afjesu8QXWVLiwIGVpe-3AAAAU8"]
[Tue May 05 02:00:19.384389 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:64593] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ff1.php"] [unique_id "afjes-8QXWVLiwIGVpe-3gAAAU4"]
[Tue May 05 02:00:19.824024 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:63933] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "afjes58-LwtfURjiAbAFuAAAAFY"]
[Tue May 05 02:00:20.272697 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:63988] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "afjetO8QXWVLiwIGVpe-3wAAAUk"]
[Tue May 05 02:00:20.693605 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:65208] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ton.php"] [unique_id "afjetJ8-LwtfURjiAbAFugAAAFg"]
[Tue May 05 02:00:21.289248 2026] [proxy_fcgi:error] [pid 61042:tid 61065] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:21.499016 2026] [proxy_fcgi:error] [pid 61042:tid 61063] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:21.709353 2026] [proxy_fcgi:error] [pid 61042:tid 61061] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:21.940941 2026] [proxy_fcgi:error] [pid 61042:tid 61046] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:22.158081 2026] [proxy_fcgi:error] [pid 61042:tid 61056] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:22.369171 2026] [proxy_fcgi:error] [pid 61042:tid 61053] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:22.580546 2026] [proxy_fcgi:error] [pid 61042:tid 61049] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:22.793550 2026] [proxy_fcgi:error] [pid 61042:tid 61048] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:23.082774 2026] [proxy_fcgi:error] [pid 61042:tid 61057] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:23.292376 2026] [proxy_fcgi:error] [pid 61042:tid 61052] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:23.505773 2026] [proxy_fcgi:error] [pid 61042:tid 61062] [client 4.204.197.96:64555] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:00:23.711290 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:64555] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "afjet0nAPPS1fjubA9SDnQAAAMU"]
[Tue May 05 02:00:24.166416 2026] [:error] [pid 61043:tid 61076] [client 4.204.197.96:63986] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "afjeuJ8-LwtfURjiAbAFwQAAAEE"]
[Tue May 05 02:00:24.601494 2026] [:error] [pid 61150:tid 61155] [client 4.204.197.96:65192] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "afjeuO8QXWVLiwIGVpe-5AAAAUI"]
[Tue May 05 02:00:25.116685 2026] [:error] [pid 61150:tid 61154] [client 4.204.197.96:64512] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "afjeue8QXWVLiwIGVpe-5QAAAUE"]
[Tue May 05 02:00:25.567338 2026] [:error] [pid 61044:tid 61110] [client 4.204.197.96:64546] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolv2.php"] [unique_id "afjeuUw8w2zZZXI6H1vNDQAAAAg"]
[Tue May 05 02:00:25.980491 2026] [:error] [pid 61150:tid 61175] [client 4.204.197.96:63927] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolv2.php"] [unique_id "afjeue8QXWVLiwIGVpe-5wAAAVY"]
[Tue May 05 02:00:26.528025 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:63934] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolv2.php"] [unique_id "afjeukw8w2zZZXI6H1vNEAAAAA0"]
[Tue May 05 02:00:26.953089 2026] [:error] [pid 61042:tid 61058] [client 4.204.197.96:63967] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wolv2.php"] [unique_id "afjeuknAPPS1fjubA9SDnwAAAMw"]
[Tue May 05 02:00:27.561979 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:63978] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iov.php"] [unique_id "afjeu0w8w2zZZXI6H1vNFAAAABM"]
[Tue May 05 02:00:27.994772 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:64559] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iov.php"] [unique_id "afjeu09o3_LordU0wW7RyAAAAIM"]
[Tue May 05 02:00:28.613676 2026] [:error] [pid 61044:tid 61111] [client 4.204.197.96:63979] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iov.php"] [unique_id "afjevEw8w2zZZXI6H1vNFgAAAAk"]
[Tue May 05 02:00:29.044213 2026] [:error] [pid 61150:tid 61159] [client 4.204.197.96:63880] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/iov.php"] [unique_id "afjeve8QXWVLiwIGVpe-7AAAAUY"]
[Tue May 05 02:00:29.682361 2026] [:error] [pid 61042:tid 61065] [client 4.204.197.96:65205] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "afjevUnAPPS1fjubA9SDoQAAANM"]
[Tue May 05 02:00:30.148285 2026] [:error] [pid 61150:tid 61161] [client 4.204.197.96:65197] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "afjevu8QXWVLiwIGVpe-7gAAAUg"]
[Tue May 05 02:00:30.808177 2026] [:error] [pid 61043:tid 61097] [client 4.204.197.96:63945] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "afjevp8-LwtfURjiAbAFwwAAAFY"]
[Tue May 05 02:00:31.286941 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:63937] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "afjev58-LwtfURjiAbAFxwAAAE8"]
[Tue May 05 02:00:31.865548 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:65162] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "afjev3mjpb9EYq6AqhK5fAAAAQc"]
[Tue May 05 02:00:32.329973 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:64519] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "afjewHmjpb9EYq6AqhK5fgAAAQw"]
[Tue May 05 02:00:32.766066 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:38479] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "afjewHmjpb9EYq6AqhK5gwAAARQ"]
[Tue May 05 02:00:33.190795 2026] [:error] [pid 61042:tid 61047] [client 4.204.197.96:38486] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ffile.php"] [unique_id "afjewUnAPPS1fjubA9SDpAAAAME"]
[Tue May 05 02:00:33.660613 2026] [:error] [pid 61042:tid 61068] [client 4.204.197.96:65277] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "afjewUnAPPS1fjubA9SDpgAAANY"]
[Tue May 05 02:00:34.078998 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:63954] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "afjewknAPPS1fjubA9SDqAAAAMs"]
[Tue May 05 02:00:34.763085 2026] [:error] [pid 61042:tid 61052] [client 4.204.197.96:63261] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "afjewknAPPS1fjubA9SDqgAAAMY"]
[Tue May 05 02:00:35.186366 2026] [:error] [pid 61150:tid 61160] [client 4.204.197.96:64533] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "afjew-8QXWVLiwIGVpe-9AAAAUc"]
[Tue May 05 02:00:35.621277 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:64543] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "afjew3mjpb9EYq6AqhK5hAAAAQ4"]
[Tue May 05 02:00:36.061370 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:65276] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "afjexHmjpb9EYq6AqhK5hQAAAQM"]
[Tue May 05 02:00:36.565766 2026] [:error] [pid 61042:tid 61060] [client 4.204.197.96:64592] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "afjexEnAPPS1fjubA9SDrAAAAM4"]
[Tue May 05 02:00:37.032484 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63908] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "afjexU9o3_LordU0wW7RywAAAJI"]
[Tue May 05 02:00:37.502563 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:37806] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "afjexU9o3_LordU0wW7RzQAAAIs"]
[Tue May 05 02:00:37.940735 2026] [:error] [pid 32471:tid 32480] [client 4.204.197.96:65153] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "afjexXmjpb9EYq6AqhK5iAAAAQY"]
[Tue May 05 02:00:38.366530 2026] [:error] [pid 61042:tid 61067] [client 4.204.197.96:63238] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "afjexknAPPS1fjubA9SDrgAAANU"]
[Tue May 05 02:00:38.807079 2026] [:error] [pid 61043:tid 61086] [client 4.204.197.96:55268] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "afjexp8-LwtfURjiAbAFyQAAAEs"]
[Tue May 05 02:00:39.244575 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:63236] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "afjex3mjpb9EYq6AqhK5jgAAAQs"]
[Tue May 05 02:00:39.742569 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:64638] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "afjex3mjpb9EYq6AqhK5jwAAARQ"]
[Tue May 05 02:00:40.178295 2026] [:error] [pid 32471:tid 32478] [client 4.204.197.96:64540] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "afjeyHmjpb9EYq6AqhK5kQAAAQQ"]
[Tue May 05 02:00:40.603727 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:63950] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xozx.php"] [unique_id "afjeyJ8-LwtfURjiAbAFygAAAEM"]
[Tue May 05 02:00:41.033164 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:65203] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "afjeyUnAPPS1fjubA9SDsQAAAMs"]
[Tue May 05 02:00:41.464308 2026] [:error] [pid 61043:tid 61091] [client 4.204.197.96:64522] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "afjeyZ8-LwtfURjiAbAFywAAAFA"]
[Tue May 05 02:00:41.875117 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:64557] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "afjeyU9o3_LordU0wW7R0QAAAJc"]
[Tue May 05 02:00:42.293909 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:63895] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "afjeykw8w2zZZXI6H1vNJwAAAAI"]
[Tue May 05 02:00:42.743589 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:63329] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "afjeyk9o3_LordU0wW7R0wAAAJU"]
[Tue May 05 02:00:43.169685 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:65200] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "afjey09o3_LordU0wW7R1AAAAIM"]
[Tue May 05 02:00:43.586067 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:65209] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "afjey09o3_LordU0wW7R1QAAAI4"]
[Tue May 05 02:00:44.031867 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:63255] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "afjezE9o3_LordU0wW7R1gAAAJg"]
[Tue May 05 02:00:44.457912 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63948] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "afjezE9o3_LordU0wW7R2AAAAJI"]
[Tue May 05 02:00:44.879189 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:63982] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "afjezJ8-LwtfURjiAbAFzQAAAFI"]
[Tue May 05 02:00:45.303895 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:65178] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "afjezU9o3_LordU0wW7R3AAAAJM"]
[Tue May 05 02:00:45.724665 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:37867] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "afjezU9o3_LordU0wW7R3gAAAJQ"]
[Tue May 05 02:00:46.158177 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:63975] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afjezk9o3_LordU0wW7R4AAAAJc"]
[Tue May 05 02:00:46.611070 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:63962] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afjezk9o3_LordU0wW7R4wAAAIM"]
[Tue May 05 02:00:47.049718 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:65180] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afjez09o3_LordU0wW7R5QAAAJg"]
[Tue May 05 02:00:47.467642 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:64572] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afjez3mjpb9EYq6AqhK5mwAAARA"]
[Tue May 05 02:00:47.931728 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:38522] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "afjez3mjpb9EYq6AqhK5nAAAAQE"]
[Tue May 05 02:00:48.351244 2026] [:error] [pid 32471:tid 32487] [client 4.204.197.96:63896] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "afje0Hmjpb9EYq6AqhK5nwAAAQ0"]
[Tue May 05 02:00:48.803506 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:64599] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "afje0J8-LwtfURjiAbAFzwAAAEg"]
[Tue May 05 02:00:49.229984 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:55173] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wander.php"] [unique_id "afje0U9o3_LordU0wW7R6gAAAJQ"]
[Tue May 05 02:00:49.679919 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:63915] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-db.php"] [unique_id "afje0U9o3_LordU0wW7R7AAAAI8"]
[Tue May 05 02:00:50.097628 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:65204] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-db.php"] [unique_id "afje0k9o3_LordU0wW7R7gAAAIU"]
[Tue May 05 02:00:50.527512 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:64627] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-db.php"] [unique_id "afje0k9o3_LordU0wW7R8QAAAJY"]
[Tue May 05 02:00:51.025473 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:63353] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-db.php"] [unique_id "afje009o3_LordU0wW7R8wAAAJA"]
[Tue May 05 02:00:51.457415 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:63303] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "afje009o3_LordU0wW7R9QAAAIA"]
[Tue May 05 02:00:51.914199 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:64617] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "afje009o3_LordU0wW7R-QAAAI8"]
[Tue May 05 02:00:52.375469 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:63265] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "afje1E9o3_LordU0wW7R-wAAAIY"]
[Tue May 05 02:00:52.824710 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:55282] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/domains.php"] [unique_id "afje1E9o3_LordU0wW7R_gAAAIk"]
[Tue May 05 02:00:53.287276 2026] [:error] [pid 32471:tid 32497] [client 4.204.197.96:64600] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "afje1Xmjpb9EYq6AqhK5oAAAARc"]
[Tue May 05 02:00:53.811514 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:64541] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "afje1Xmjpb9EYq6AqhK5oQAAARg"]
[Tue May 05 02:00:54.287007 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:64587] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "afje1nmjpb9EYq6AqhK5owAAARQ"]
[Tue May 05 02:00:54.709374 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:64594] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "afje1p8-LwtfURjiAbAF1AAAAFM"]
[Tue May 05 02:00:55.152388 2026] [:error] [pid 61043:tid 61099] [client 4.204.197.96:63332] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ouh.php"] [unique_id "afje158-LwtfURjiAbAF1QAAAFg"]
[Tue May 05 02:00:55.591313 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:55198] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ouh.php"] [unique_id "afje1-8QXWVLiwIGVpe-9wAAAUA"]
[Tue May 05 02:00:56.021117 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:55189] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ouh.php"] [unique_id "afje2E9o3_LordU0wW7SBwAAAI8"]
[Tue May 05 02:00:56.451396 2026] [:error] [pid 61150:tid 61173] [client 4.204.197.96:63873] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ouh.php"] [unique_id "afje2O8QXWVLiwIGVpe--QAAAVQ"]
[Tue May 05 02:00:56.903432 2026] [:error] [pid 61044:tid 61124] [client 4.204.197.96:63337] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "afje2Ew8w2zZZXI6H1vNOgAAABY"]
[Tue May 05 02:00:57.380166 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:63947] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "afje2U9o3_LordU0wW7SCAAAAI0"]
[Tue May 05 02:00:57.811181 2026] [:error] [pid 61044:tid 61105] [client 4.204.197.96:63304] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "afje2Uw8w2zZZXI6H1vNPAAAAAM"]
[Tue May 05 02:00:58.266932 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:63267] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "afje2k9o3_LordU0wW7SCQAAAJU"]
[Tue May 05 02:00:58.707821 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:63285] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "afje2k9o3_LordU0wW7SCgAAAJY"]
[Tue May 05 02:00:59.234876 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:64628] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "afje209o3_LordU0wW7SDQAAAJI"]
[Tue May 05 02:00:59.712719 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:65152] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "afje2-8QXWVLiwIGVpe--gAAAU4"]
[Tue May 05 02:01:00.266686 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:65156] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sko.php"] [unique_id "afje3Hmjpb9EYq6AqhK5pwAAAQ4"]
[Tue May 05 02:01:00.712524 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:65171] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "afje3Hmjpb9EYq6AqhK5qAAAARA"]
[Tue May 05 02:01:01.196075 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:65206] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "afje3Z8-LwtfURjiAbAF1gAAAFI"]
[Tue May 05 02:01:01.707675 2026] [:error] [pid 3341:tid 3364] [client 4.204.197.96:65235] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "afje3U9o3_LordU0wW7SEQAAAJQ"]
[Tue May 05 02:01:02.372263 2026] [:error] [pid 32471:tid 32474] [client 4.204.197.96:65186] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "afje3nmjpb9EYq6AqhK5qwAAAQA"]
[Tue May 05 02:01:02.861528 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:64549] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cliner.php"] [unique_id "afje3k9o3_LordU0wW7SFgAAAJU"]
[Tue May 05 02:01:03.432826 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:55234] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cliner.php"] [unique_id "afje309o3_LordU0wW7SGgAAAIQ"]
[Tue May 05 02:01:03.903080 2026] [:error] [pid 61043:tid 61090] [client 4.204.197.96:64569] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cliner.php"] [unique_id "afje358-LwtfURjiAbAF2wAAAE8"]
[Tue May 05 02:01:04.511977 2026] [:error] [pid 61042:tid 61063] [client 4.204.197.96:64596] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-cliner.php"] [unique_id "afje4EnAPPS1fjubA9SDtgAAANE"]
[Tue May 05 02:01:05.102983 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:64551] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-sx10.php"] [unique_id "afje4U9o3_LordU0wW7SHQAAAIk"]
[Tue May 05 02:01:05.554612 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:64632] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-sx10.php"] [unique_id "afje4Z8-LwtfURjiAbAF4QAAAFE"]
[Tue May 05 02:01:06.056767 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:55266] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-sx10.php"] [unique_id "afje4p8-LwtfURjiAbAF5AAAAE0"]
[Tue May 05 02:01:06.724739 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:37879] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-sx10.php"] [unique_id "afje4k9o3_LordU0wW7SHwAAAJA"]
[Tue May 05 02:01:07.201944 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:65210] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "afje409o3_LordU0wW7SIQAAAJc"]
[Tue May 05 02:01:07.711837 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63951] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "afje409o3_LordU0wW7SIwAAAJI"]
[Tue May 05 02:01:08.204310 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:63327] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "afje5J8-LwtfURjiAbAF6QAAAEM"]
[Tue May 05 02:01:08.648300 2026] [:error] [pid 61043:tid 61095] [client 4.204.197.96:63883] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/packed.php"] [unique_id "afje5J8-LwtfURjiAbAF6gAAAFQ"]
[Tue May 05 02:01:09.082519 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:65227] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "afje5U9o3_LordU0wW7SKAAAAJU"]
[Tue May 05 02:01:09.588962 2026] [:error] [pid 61042:tid 61047] [client 4.204.197.96:65250] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "afje5UnAPPS1fjubA9SDuAAAAME"]
[Tue May 05 02:01:10.010066 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:63940] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "afje5k9o3_LordU0wW7SKgAAAJY"]
[Tue May 05 02:01:10.453282 2026] [:error] [pid 3341:tid 3367] [client 4.204.197.96:63256] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "afje5k9o3_LordU0wW7SLAAAAJc"]
[Tue May 05 02:01:10.883474 2026] [:error] [pid 3341:tid 3356] [client 4.204.197.96:65202] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc13.php"] [unique_id "afje5k9o3_LordU0wW7SLwAAAIw"]
[Tue May 05 02:01:11.319016 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:65154] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc13.php"] [unique_id "afje509o3_LordU0wW7SMQAAAIM"]
[Tue May 05 02:01:11.765883 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:38484] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc13.php"] [unique_id "afje50nAPPS1fjubA9SDuQAAAMs"]
[Tue May 05 02:01:12.188548 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:63956] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cc13.php"] [unique_id "afje6Hmjpb9EYq6AqhK5rAAAARg"]
[Tue May 05 02:01:12.684935 2026] [:error] [pid 32471:tid 32494] [client 4.204.197.96:38499] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fileas.php"] [unique_id "afje6Hmjpb9EYq6AqhK5rgAAARQ"]
[Tue May 05 02:01:13.127152 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:63356] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fileas.php"] [unique_id "afje6Xmjpb9EYq6AqhK5sAAAAQc"]
[Tue May 05 02:01:13.618752 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:37215] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fileas.php"] [unique_id "afje6U9o3_LordU0wW7SNAAAAJg"]
[Tue May 05 02:01:14.037629 2026] [:error] [pid 61150:tid 61163] [client 4.204.197.96:63921] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fileas.php"] [unique_id "afje6u8QXWVLiwIGVpe-_wAAAUo"]
[Tue May 05 02:01:14.491151 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:55245] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afje6u8QXWVLiwIGVpe_AQAAAVI"]
[Tue May 05 02:01:14.925409 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:64553] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afje6nmjpb9EYq6AqhK5tAAAAQM"]
[Tue May 05 02:01:16.122711 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:63240] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afje7J8-LwtfURjiAbAF8AAAAFc"]
[Tue May 05 02:01:18.987444 2026] [:error] [pid 61042:tid 61055] [client 4.204.197.96:64547] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afje7knAPPS1fjubA9SDvQAAAMk"]
[Tue May 05 02:01:20.030904 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:63932] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "afje8O8QXWVLiwIGVpe_CQAAAUk"]
[Tue May 05 02:01:21.096328 2026] [:error] [pid 61042:tid 61063] [client 4.204.197.96:63980] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "afje8UnAPPS1fjubA9SDwAAAANE"]
[Tue May 05 02:01:21.685431 2026] [:error] [pid 61044:tid 61116] [client 4.204.197.96:64630] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "afje8Uw8w2zZZXI6H1vNXAAAAA4"]
[Tue May 05 02:01:22.845270 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:65262] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/v3.php"] [unique_id "afje8kw8w2zZZXI6H1vNYQAAABA"]
[Tue May 05 02:01:23.943208 2026] [proxy_fcgi:error] [pid 3341:tid 3361] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:24.311514 2026] [proxy_fcgi:error] [pid 3341:tid 3347] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:24.573011 2026] [proxy_fcgi:error] [pid 3341:tid 3350] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:24.784199 2026] [proxy_fcgi:error] [pid 3341:tid 3358] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:25.189115 2026] [proxy_fcgi:error] [pid 3341:tid 3346] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:25.463074 2026] [proxy_fcgi:error] [pid 3341:tid 3364] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:25.888517 2026] [proxy_fcgi:error] [pid 3341:tid 3345] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:26.164953 2026] [proxy_fcgi:error] [pid 3341:tid 3367] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:26.422961 2026] [proxy_fcgi:error] [pid 3341:tid 3353] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:26.637323 2026] [proxy_fcgi:error] [pid 3341:tid 3357] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:26.931196 2026] [proxy_fcgi:error] [pid 3341:tid 3354] [client 4.204.197.96:63902] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:01:27.156818 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:63902] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "afje909o3_LordU0wW7SRQAAAJY"]
[Tue May 05 02:01:28.992207 2026] [:error] [pid 61044:tid 61103] [client 4.204.197.96:63973] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "afje-Ew8w2zZZXI6H1vNaQAAAAE"]
[Tue May 05 02:01:30.920135 2026] [:error] [pid 3341:tid 3349] [client 4.204.197.96:55264] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "afje-k9o3_LordU0wW7SSQAAAIU"]
[Tue May 05 02:01:33.737126 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:38526] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mga.php"] [unique_id "afje_U9o3_LordU0wW7STwAAAIA"]
[Tue May 05 02:01:43.067862 2026] [:error] [pid 3341:tid 3365] [client 4.204.197.96:65255] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xml.php"] [unique_id "afjfB09o3_LordU0wW7SXwAAAJU"]
[Tue May 05 02:01:44.222820 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:64573] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xml.php"] [unique_id "afjfCJ8-LwtfURjiAbAF9wAAAFE"]
[Tue May 05 02:01:44.867708 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:63877] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xml.php"] [unique_id "afjfCE9o3_LordU0wW7SZAAAAJY"]
[Tue May 05 02:01:45.461513 2026] [:error] [pid 61044:tid 61121] [client 4.204.197.96:63340] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xml.php"] [unique_id "afjfCUw8w2zZZXI6H1vNggAAABM"]
[Tue May 05 02:01:46.048177 2026] [:error] [pid 61042:tid 61064] [client 4.204.197.96:38471] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xinder.php"] [unique_id "afjfCknAPPS1fjubA9SDxwAAANI"]
[Tue May 05 02:01:46.554833 2026] [:error] [pid 32471:tid 32493] [client 4.204.197.96:55247] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xinder.php"] [unique_id "afjfCnmjpb9EYq6AqhK50AAAARM"]
[Tue May 05 02:01:47.038293 2026] [:error] [pid 61043:tid 61079] [client 4.204.197.96:65158] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xinder.php"] [unique_id "afjfC58-LwtfURjiAbAF-gAAAEQ"]
[Tue May 05 02:01:47.587512 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:55247] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xinder.php"] [unique_id "afjfC3mjpb9EYq6AqhK50gAAARU"]
[Tue May 05 02:01:48.111793 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:38461] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "afjfDHmjpb9EYq6AqhK50wAAARg"]
[Tue May 05 02:01:48.706208 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:64624] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "afjfDJ8-LwtfURjiAbAF_gAAAEA"]
[Tue May 05 02:01:49.134293 2026] [:error] [pid 32471:tid 32489] [client 4.204.197.96:55271] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "afjfDXmjpb9EYq6AqhK51QAAAQ8"]
[Tue May 05 02:01:49.627752 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:55242] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "afjfDXmjpb9EYq6AqhK51wAAAQw"]
[Tue May 05 02:01:50.144879 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:55290] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "afjfDnmjpb9EYq6AqhK52QAAAQ4"]
[Tue May 05 02:01:50.569214 2026] [:error] [pid 61150:tid 61175] [client 4.204.197.96:55233] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "afjfDu8QXWVLiwIGVpe_FQAAAVY"]
[Tue May 05 02:01:51.025566 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:63874] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "afjfD-8QXWVLiwIGVpe_FwAAAVA"]
[Tue May 05 02:01:51.452361 2026] [:error] [pid 61042:tid 61061] [client 4.204.197.96:55201] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "afjfD0nAPPS1fjubA9SDzAAAAM8"]
[Tue May 05 02:01:51.948372 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:38501] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/owl.php"] [unique_id "afjfD09o3_LordU0wW7SZwAAAI0"]
[Tue May 05 02:01:52.374410 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:55259] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/owl.php"] [unique_id "afjfEO8QXWVLiwIGVpe_GQAAAUk"]
[Tue May 05 02:01:52.813278 2026] [:error] [pid 61150:tid 61173] [client 4.204.197.96:63964] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/owl.php"] [unique_id "afjfEO8QXWVLiwIGVpe_GgAAAVQ"]
[Tue May 05 02:01:53.230866 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:38523] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/owl.php"] [unique_id "afjfEU9o3_LordU0wW7SagAAAIY"]
[Tue May 05 02:01:53.705888 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:63949] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "afjfEe8QXWVLiwIGVpe_GwAAAUA"]
[Tue May 05 02:01:54.173762 2026] [:error] [pid 61150:tid 61160] [client 4.204.197.96:65172] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "afjfEu8QXWVLiwIGVpe_HQAAAUc"]
[Tue May 05 02:01:54.769846 2026] [:error] [pid 61044:tid 61111] [client 4.204.197.96:65229] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "afjfEkw8w2zZZXI6H1vNjwAAAAk"]
[Tue May 05 02:01:55.270811 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:55193] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class19.php"] [unique_id "afjfE09o3_LordU0wW7SbwAAAJg"]
[Tue May 05 02:01:55.743497 2026] [:error] [pid 32471:tid 32477] [client 4.204.197.96:63331] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xm.php"] [unique_id "afjfE3mjpb9EYq6AqhK53wAAAQM"]
[Tue May 05 02:01:56.166871 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:63246] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xm.php"] [unique_id "afjfFE9o3_LordU0wW7ScgAAAIM"]
[Tue May 05 02:01:56.793917 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:55180] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xm.php"] [unique_id "afjfFHmjpb9EYq6AqhK54QAAARI"]
[Tue May 05 02:01:57.444729 2026] [:error] [pid 32471:tid 32475] [client 4.204.197.96:38400] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xm.php"] [unique_id "afjfFXmjpb9EYq6AqhK55QAAAQE"]
[Tue May 05 02:01:58.201840 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:38464] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/do.php"] [unique_id "afjfFk9o3_LordU0wW7SdQAAAIo"]
[Tue May 05 02:01:58.774931 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:65232] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/do.php"] [unique_id "afjfFp8-LwtfURjiAbAGAgAAAEA"]
[Tue May 05 02:01:59.278821 2026] [:error] [pid 32471:tid 32483] [client 4.204.197.96:63876] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/do.php"] [unique_id "afjfF3mjpb9EYq6AqhK55wAAAQk"]
[Tue May 05 02:01:59.755533 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63247] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/do.php"] [unique_id "afjfF09o3_LordU0wW7SeAAAAJI"]
[Tue May 05 02:02:00.198206 2026] [:error] [pid 61043:tid 61084] [client 4.204.197.96:55236] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "afjfGJ8-LwtfURjiAbAGBgAAAEk"]
[Tue May 05 02:02:00.632125 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:63971] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "afjfGHmjpb9EYq6AqhK56QAAAQc"]
[Tue May 05 02:02:01.094016 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:64524] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "afjfGZ8-LwtfURjiAbAGCQAAAEg"]
[Tue May 05 02:02:01.577388 2026] [:error] [pid 32471:tid 32488] [client 4.204.197.96:64578] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/myfile.php"] [unique_id "afjfGXmjpb9EYq6AqhK56gAAAQ4"]
[Tue May 05 02:02:02.116361 2026] [:error] [pid 61150:tid 61170] [client 4.204.197.96:63309] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "afjfGu8QXWVLiwIGVpe_KAAAAVE"]
[Tue May 05 02:02:02.597154 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:63961] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "afjfGu8QXWVLiwIGVpe_KQAAAUk"]
[Tue May 05 02:02:03.044017 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:64517] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "afjfG09o3_LordU0wW7SggAAAIQ"]
[Tue May 05 02:02:03.479087 2026] [:error] [pid 32471:tid 32476] [client 4.204.197.96:63974] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "afjfG3mjpb9EYq6AqhK58QAAAQI"]
[Tue May 05 02:02:03.943861 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:55270] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasfu.php"] [unique_id "afjfG58-LwtfURjiAbAGCgAAAFE"]
[Tue May 05 02:02:04.408214 2026] [:error] [pid 32471:tid 32481] [client 4.204.197.96:63922] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasfu.php"] [unique_id "afjfHHmjpb9EYq6AqhK58gAAAQc"]
[Tue May 05 02:02:04.869851 2026] [:error] [pid 3341:tid 3348] [client 4.204.197.96:63292] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasfu.php"] [unique_id "afjfHE9o3_LordU0wW7SigAAAIQ"]
[Tue May 05 02:02:05.351230 2026] [:error] [pid 61043:tid 61098] [client 4.204.197.96:63879] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yasfu.php"] [unique_id "afjfHZ8-LwtfURjiAbAGCwAAAFc"]
[Tue May 05 02:02:05.768277 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:63943] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "afjfHU9o3_LordU0wW7SjAAAAIg"]
[Tue May 05 02:02:06.224428 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:63998] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "afjfHk9o3_LordU0wW7SjwAAAIs"]
[Tue May 05 02:02:06.667669 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:55265] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "afjfHk9o3_LordU0wW7SkQAAAI8"]
[Tue May 05 02:02:07.092201 2026] [:error] [pid 3341:tid 3347] [client 4.204.197.96:65173] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "afjfH09o3_LordU0wW7SkwAAAIM"]
[Tue May 05 02:02:07.556125 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:65236] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "afjfH09o3_LordU0wW7SlgAAAIk"]
[Tue May 05 02:02:08.163533 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:55186] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "afjfIE9o3_LordU0wW7SmgAAAJA"]
[Tue May 05 02:02:08.701155 2026] [:error] [pid 3341:tid 3366] [client 4.204.197.96:65265] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "afjfIE9o3_LordU0wW7SnQAAAJY"]
[Tue May 05 02:02:09.367949 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:63983] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-update.php"] [unique_id "afjfIU9o3_LordU0wW7SoAAAAJg"]
[Tue May 05 02:02:10.096792 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:38415] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "afjfIk9o3_LordU0wW7SogAAAIk"]
[Tue May 05 02:02:10.542027 2026] [:error] [pid 61150:tid 61171] [client 4.204.197.96:63274] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "afjfIu8QXWVLiwIGVpe_KwAAAVI"]
[Tue May 05 02:02:11.000595 2026] [:error] [pid 61042:tid 61062] [client 4.204.197.96:63882] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "afjfIknAPPS1fjubA9SD0QAAANA"]
[Tue May 05 02:02:11.459184 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:64595] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "afjfI-8QXWVLiwIGVpe_MAAAAVA"]
[Tue May 05 02:02:11.994519 2026] [:error] [pid 61150:tid 61160] [client 4.204.197.96:65221] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "afjfI-8QXWVLiwIGVpe_NAAAAUc"]
[Tue May 05 02:02:12.474129 2026] [:error] [pid 61044:tid 61125] [client 4.204.197.96:55246] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "afjfJEw8w2zZZXI6H1vNoQAAABc"]
[Tue May 05 02:02:12.902662 2026] [:error] [pid 61042:tid 61069] [client 4.204.197.96:55228] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "afjfJEnAPPS1fjubA9SD0gAAANc"]
[Tue May 05 02:02:13.317298 2026] [:error] [pid 61044:tid 61111] [client 4.204.197.96:63912] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "afjfJUw8w2zZZXI6H1vNogAAAAk"]
[Tue May 05 02:02:13.763985 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:63881] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "afjfJZ8-LwtfURjiAbAGDAAAAFU"]
[Tue May 05 02:02:14.314589 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:63958] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "afjfJk9o3_LordU0wW7SpQAAAIc"]
[Tue May 05 02:02:14.751119 2026] [:error] [pid 61150:tid 61156] [client 4.204.197.96:65211] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "afjfJu8QXWVLiwIGVpe_OwAAAUM"]
[Tue May 05 02:02:15.215346 2026] [:error] [pid 61042:tid 61049] [client 4.204.197.96:38438] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "afjfJ0nAPPS1fjubA9SD1gAAAMM"]
[Tue May 05 02:02:15.666813 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:55291] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clirp.php"] [unique_id "afjfJ-8QXWVLiwIGVpe_PQAAAUk"]
[Tue May 05 02:02:16.096300 2026] [:error] [pid 61043:tid 61094] [client 4.204.197.96:64566] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clirp.php"] [unique_id "afjfKJ8-LwtfURjiAbAGDQAAAFM"]
[Tue May 05 02:02:16.774351 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:63909] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clirp.php"] [unique_id "afjfKO8QXWVLiwIGVpe_QAAAAUA"]
[Tue May 05 02:02:17.241979 2026] [:error] [pid 3341:tid 3345] [client 4.204.197.96:63963] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clirp.php"] [unique_id "afjfKU9o3_LordU0wW7SqQAAAIE"]
[Tue May 05 02:02:18.124495 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:51136] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rendi59.php"] [unique_id "afjfKk9o3_LordU0wW7SqgAAAIA"]
[Tue May 05 02:02:18.695206 2026] [:error] [pid 61043:tid 61075] [client 4.204.197.96:63930] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rendi59.php"] [unique_id "afjfKp8-LwtfURjiAbAGEAAAAEA"]
[Tue May 05 02:02:19.131067 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:63887] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rendi59.php"] [unique_id "afjfK0nAPPS1fjubA9SD2QAAAMs"]
[Tue May 05 02:02:19.627448 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:63957] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rendi59.php"] [unique_id "afjfK09o3_LordU0wW7SrQAAAI0"]
[Tue May 05 02:02:20.044168 2026] [:error] [pid 61150:tid 61169] [client 4.204.197.96:63968] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "afjfLO8QXWVLiwIGVpe_RgAAAVA"]
[Tue May 05 02:02:20.544930 2026] [:error] [pid 61044:tid 61126] [client 4.204.197.96:63938] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "afjfLEw8w2zZZXI6H1vNrAAAABg"]
[Tue May 05 02:02:20.969633 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:63905] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "afjfLE9o3_LordU0wW7SswAAAIg"]
[Tue May 05 02:02:21.400920 2026] [:error] [pid 61043:tid 61089] [client 4.204.197.96:63989] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gptsh.php"] [unique_id "afjfLZ8-LwtfURjiAbAGEQAAAE4"]
[Tue May 05 02:02:21.821132 2026] [:error] [pid 61150:tid 61153] [client 4.204.197.96:63338] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tox.php"] [unique_id "afjfLe8QXWVLiwIGVpe_SgAAAUA"]
[Tue May 05 02:02:22.246933 2026] [:error] [pid 61150:tid 61170] [client 4.204.197.96:38489] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tox.php"] [unique_id "afjfLu8QXWVLiwIGVpe_TQAAAVE"]
[Tue May 05 02:02:22.679150 2026] [:error] [pid 61044:tid 61104] [client 4.204.197.96:63981] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tox.php"] [unique_id "afjfLkw8w2zZZXI6H1vNrwAAAAI"]
[Tue May 05 02:02:23.102353 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:65258] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tox.php"] [unique_id "afjfL09o3_LordU0wW7SvgAAAI4"]
[Tue May 05 02:02:23.592311 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:64610] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "afjfL09o3_LordU0wW7SzgAAAJg"]
[Tue May 05 02:02:24.024859 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:38477] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "afjfME9o3_LordU0wW7S0wAAAIY"]
[Tue May 05 02:02:24.472503 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:63302] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "afjfME9o3_LordU0wW7S1gAAAJA"]
[Tue May 05 02:02:24.907253 2026] [:error] [pid 61043:tid 61078] [client 4.204.197.96:64580] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file9.php"] [unique_id "afjfMJ8-LwtfURjiAbAGEgAAAEM"]
[Tue May 05 02:02:25.344281 2026] [:error] [pid 3341:tid 3362] [client 4.204.197.96:63233] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "afjfMU9o3_LordU0wW7S2wAAAJI"]
[Tue May 05 02:02:25.820673 2026] [:error] [pid 3341:tid 3363] [client 4.204.197.96:55195] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ccu.php"] [unique_id "afjfMU9o3_LordU0wW7S3gAAAJM"]
[Tue May 05 02:02:26.298169 2026] [proxy_fcgi:error] [pid 32471:tid 32477] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:26.513938 2026] [proxy_fcgi:error] [pid 32471:tid 32476] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:26.729152 2026] [proxy_fcgi:error] [pid 32471:tid 32498] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:26.947146 2026] [proxy_fcgi:error] [pid 32471:tid 32483] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:27.162499 2026] [proxy_fcgi:error] [pid 32471:tid 32489] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:27.378641 2026] [proxy_fcgi:error] [pid 32471:tid 32481] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:27.593879 2026] [proxy_fcgi:error] [pid 32471:tid 32491] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:27.816633 2026] [proxy_fcgi:error] [pid 32471:tid 32486] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:28.033802 2026] [proxy_fcgi:error] [pid 32471:tid 32488] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:28.248808 2026] [proxy_fcgi:error] [pid 32471:tid 32479] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:28.488432 2026] [proxy_fcgi:error] [pid 32471:tid 32484] [client 4.204.197.96:64529] AH01071: Got error 'Primary script unknown'
[Tue May 05 02:02:28.708692 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:64529] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "afjfNHmjpb9EYq6AqhK6AwAAARI"]
[Tue May 05 02:02:29.149348 2026] [:error] [pid 61042:tid 61059] [client 4.204.197.96:63977] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "afjfNUnAPPS1fjubA9SD2gAAAM0"]
[Tue May 05 02:02:29.634206 2026] [:error] [pid 61042:tid 61062] [client 4.204.197.96:63935] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "afjfNUnAPPS1fjubA9SD3AAAANA"]
[Tue May 05 02:02:30.061675 2026] [:error] [pid 61150:tid 61159] [client 4.204.197.96:65216] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "afjfNu8QXWVLiwIGVpe_WgAAAUY"]
[Tue May 05 02:02:30.524522 2026] [:error] [pid 61150:tid 61165] [client 4.204.197.96:63343] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "afjfNu8QXWVLiwIGVpe_XAAAAUw"]
[Tue May 05 02:02:31.046801 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:64631] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "afjfN09o3_LordU0wW7S7QAAAIA"]
[Tue May 05 02:02:31.483730 2026] [:error] [pid 61150:tid 61162] [client 4.204.197.96:63966] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "afjfN-8QXWVLiwIGVpe_XgAAAUk"]
[Tue May 05 02:02:32.066532 2026] [:error] [pid 61043:tid 61096] [client 4.204.197.96:64613] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "afjfOJ8-LwtfURjiAbAGGgAAAFU"]
[Tue May 05 02:02:32.570297 2026] [:error] [pid 61150:tid 61154] [client 4.204.197.96:38490] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-acc.php"] [unique_id "afjfOO8QXWVLiwIGVpe_YgAAAUE"]
[Tue May 05 02:02:33.067685 2026] [:error] [pid 3341:tid 3360] [client 4.204.197.96:65251] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-acc.php"] [unique_id "afjfOU9o3_LordU0wW7S8AAAAJA"]
[Tue May 05 02:02:33.563921 2026] [:error] [pid 3341:tid 3357] [client 4.204.197.96:63248] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-acc.php"] [unique_id "afjfOU9o3_LordU0wW7S8gAAAI0"]
[Tue May 05 02:02:34.101268 2026] [:error] [pid 61043:tid 61087] [client 4.204.197.96:55244] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-acc.php"] [unique_id "afjfOp8-LwtfURjiAbAGHQAAAEw"]
[Tue May 05 02:02:34.531737 2026] [:error] [pid 3341:tid 3351] [client 4.204.197.96:65198] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "afjfOk9o3_LordU0wW7S9AAAAIc"]
[Tue May 05 02:02:35.013359 2026] [:error] [pid 61043:tid 61091] [client 4.204.197.96:38421] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "afjfO58-LwtfURjiAbAGIAAAAFA"]
[Tue May 05 02:02:35.455824 2026] [:error] [pid 3341:tid 3353] [client 4.204.197.96:38488] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "afjfO09o3_LordU0wW7S9gAAAIk"]
[Tue May 05 02:02:35.897154 2026] [:error] [pid 61150:tid 61172] [client 4.204.197.96:38496] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "afjfO-8QXWVLiwIGVpe_aAAAAVM"]
[Tue May 05 02:02:36.333828 2026] [:error] [pid 61044:tid 61118] [client 4.204.197.96:55272] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xx.php"] [unique_id "afjfPEw8w2zZZXI6H1vNvQAAABA"]
[Tue May 05 02:02:36.767401 2026] [:error] [pid 32471:tid 32490] [client 4.204.197.96:63349] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xx.php"] [unique_id "afjfPHmjpb9EYq6AqhK6BAAAARA"]
[Tue May 05 02:02:37.202886 2026] [:error] [pid 61043:tid 61083] [client 4.204.197.96:37201] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xx.php"] [unique_id "afjfPZ8-LwtfURjiAbAGIQAAAEg"]
[Tue May 05 02:02:37.653792 2026] [:error] [pid 61044:tid 61109] [client 4.204.197.96:37766] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-xx.php"] [unique_id "afjfPUw8w2zZZXI6H1vNvgAAAAc"]
[Tue May 05 02:02:38.071584 2026] [:error] [pid 3341:tid 3352] [client 4.204.197.96:63991] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/555.php"] [unique_id "afjfPk9o3_LordU0wW7S_AAAAIg"]
[Tue May 05 02:02:38.486668 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:63310] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/555.php"] [unique_id "afjfPnmjpb9EYq6AqhK6BQAAAQs"]
[Tue May 05 02:02:38.908000 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:63350] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/555.php"] [unique_id "afjfPp8-LwtfURjiAbAGIwAAAFE"]
[Tue May 05 02:02:39.326659 2026] [:error] [pid 32471:tid 32496] [client 4.204.197.96:64530] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/555.php"] [unique_id "afjfP3mjpb9EYq6AqhK6CQAAARY"]
[Tue May 05 02:02:39.737209 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:38520] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "afjfP3mjpb9EYq6AqhK6CwAAARg"]
[Tue May 05 02:02:40.154793 2026] [:error] [pid 61042:tid 61051] [client 4.204.197.96:63315] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "afjfQEnAPPS1fjubA9SD5QAAAMU"]
[Tue May 05 02:02:40.574674 2026] [:error] [pid 3341:tid 3358] [client 4.204.197.96:37793] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "afjfQE9o3_LordU0wW7TAwAAAI4"]
[Tue May 05 02:02:41.031128 2026] [:error] [pid 61043:tid 61088] [client 4.204.197.96:63301] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "afjfQZ8-LwtfURjiAbAGKAAAAE0"]
[Tue May 05 02:02:41.448732 2026] [:error] [pid 3341:tid 3359] [client 4.204.197.96:64536] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-Blogs.php"] [unique_id "afjfQU9o3_LordU0wW7TBgAAAI8"]
[Tue May 05 02:02:41.866898 2026] [:error] [pid 61043:tid 61081] [client 4.204.197.96:63323] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-Blogs.php"] [unique_id "afjfQZ8-LwtfURjiAbAGKQAAAEY"]
[Tue May 05 02:02:42.288623 2026] [:error] [pid 3341:tid 3368] [client 4.204.197.96:65168] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-Blogs.php"] [unique_id "afjfQk9o3_LordU0wW7TCgAAAJg"]
[Tue May 05 02:02:42.711902 2026] [:error] [pid 32471:tid 32484] [client 4.204.197.96:63346] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-Blogs.php"] [unique_id "afjfQnmjpb9EYq6AqhK6EQAAAQo"]
[Tue May 05 02:02:43.141207 2026] [:error] [pid 3341:tid 3354] [client 4.204.197.96:64574] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp_ok.php"] [unique_id "afjfQ09o3_LordU0wW7TDAAAAIo"]
[Tue May 05 02:02:43.552778 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:63901] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp_ok.php"] [unique_id "afjfQ3mjpb9EYq6AqhK6FAAAAQs"]
[Tue May 05 02:02:43.973746 2026] [:error] [pid 61043:tid 61093] [client 4.204.197.96:55253] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp_ok.php"] [unique_id "afjfQ58-LwtfURjiAbAGKgAAAFI"]
[Tue May 05 02:02:44.393477 2026] [:error] [pid 61044:tid 61102] [client 4.204.197.96:38509] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp_ok.php"] [unique_id "afjfREw8w2zZZXI6H1vNwQAAAAA"]
[Tue May 05 02:02:44.805629 2026] [:error] [pid 32471:tid 32498] [client 4.204.197.96:63293] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjfRHmjpb9EYq6AqhK6GQAAARg"]
[Tue May 05 02:02:45.219626 2026] [:error] [pid 61043:tid 61092] [client 4.204.197.96:37768] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjfRZ8-LwtfURjiAbAGLQAAAFE"]
[Tue May 05 02:02:45.637422 2026] [:error] [pid 32471:tid 32495] [client 4.204.197.96:63359] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjfRXmjpb9EYq6AqhK6HAAAARU"]
[Tue May 05 02:02:46.055321 2026] [:error] [pid 3341:tid 3344] [client 4.204.197.96:65207] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afjfRk9o3_LordU0wW7TDwAAAIA"]
[Tue May 05 02:02:46.473458 2026] [:error] [pid 32471:tid 32491] [client 4.204.197.96:64532] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file88.php"] [unique_id "afjfRnmjpb9EYq6AqhK6HgAAARE"]
[Tue May 05 02:02:46.896455 2026] [:error] [pid 61150:tid 61167] [client 4.204.197.96:63260] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file88.php"] [unique_id "afjfRu8QXWVLiwIGVpe_eAAAAU4"]
[Tue May 05 02:02:47.324005 2026] [:error] [pid 32471:tid 32486] [client 4.204.197.96:55295] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file88.php"] [unique_id "afjfR3mjpb9EYq6AqhK6IQAAAQw"]
[Tue May 05 02:02:47.746593 2026] [:error] [pid 61044:tid 61115] [client 4.204.197.96:63280] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file88.php"] [unique_id "afjfR0w8w2zZZXI6H1vNwwAAAA0"]
[Tue May 05 02:02:48.225944 2026] [:error] [pid 61042:tid 61061] [client 4.204.197.96:63282] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "afjfSEnAPPS1fjubA9SD5wAAAM8"]
[Tue May 05 02:02:48.641872 2026] [:error] [pid 61044:tid 61125] [client 4.204.197.96:38502] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "afjfSEw8w2zZZXI6H1vNxQAAABc"]
[Tue May 05 02:02:49.102064 2026] [:error] [pid 61044:tid 61126] [client 4.204.197.96:63320] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "afjfSUw8w2zZZXI6H1vNyAAAABg"]
[Tue May 05 02:02:49.545659 2026] [:error] [pid 32471:tid 32485] [client 4.204.197.96:63924] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file32.php"] [unique_id "afjfSXmjpb9EYq6AqhK6IwAAAQs"]
[Tue May 05 02:02:49.977932 2026] [:error] [pid 32471:tid 32492] [client 4.204.197.96:55205] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp.php"] [unique_id "afjfSXmjpb9EYq6AqhK6JAAAARI"]
[Tue May 05 02:02:50.462274 2026] [:error] [pid 3341:tid 3350] [client 4.204.197.96:64591] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp.php"] [unique_id "afjfSk9o3_LordU0wW7TEwAAAIY"]
[Tue May 05 02:02:50.888603 2026] [:error] [pid 61150:tid 61163] [client 4.204.197.96:65213] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp.php"] [unique_id "afjfSu8QXWVLiwIGVpe_fgAAAUo"]
[Tue May 05 02:02:51.469934 2026] [:error] [pid 3341:tid 3355] [client 4.204.197.96:37885] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class-wp.php"] [unique_id "afjfS09o3_LordU0wW7TFgAAAIs"]
[Tue May 05 02:02:51.885458 2026] [:error] [pid 61042:tid 61050] [client 4.204.197.96:64518] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afjfS0nAPPS1fjubA9SD6QAAAMQ"]
[Tue May 05 02:02:52.343588 2026] [:error] [pid 61042:tid 61049] [client 4.204.197.96:55219] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afjfTEnAPPS1fjubA9SD6wAAAMM"]
[Tue May 05 02:02:52.807700 2026] [:error] [pid 61042:tid 61057] [client 4.204.197.96:63316] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afjfTEnAPPS1fjubA9SD7wAAAMs"]
[Tue May 05 02:02:53.238719 2026] [:error] [pid 61042:tid 61054] [client 4.204.197.96:63348] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afjfTUnAPPS1fjubA9SD8QAAAMg"]
[Tue May 05 02:27:44.992679 2026] [:error] [pid 3341:tid 3349] [client 170.106.84.136:44046] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afjlIE9o3_LordU0wW7b-wAAAIU"]
[Tue May 05 05:27:33.352056 2026] [:error] [pid 39073:tid 39157] [client 209.87.169.202:52177] [client 209.87.169.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "afkPRf0kT1BNjk46BkcWoQAAAJc"]
[Tue May 05 07:44:04.191312 2026] [proxy_fcgi:error] [pid 39073:tid 39141] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:04.480298 2026] [proxy_fcgi:error] [pid 39073:tid 39152] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:04.756322 2026] [proxy_fcgi:error] [pid 39073:tid 39136] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:05.043519 2026] [proxy_fcgi:error] [pid 39073:tid 39158] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:05.348303 2026] [proxy_fcgi:error] [pid 39073:tid 39151] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:09.449278 2026] [proxy_fcgi:error] [pid 39073:tid 39138] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:09.731257 2026] [proxy_fcgi:error] [pid 39073:tid 39137] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:10.015587 2026] [proxy_fcgi:error] [pid 39073:tid 39149] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:10.573293 2026] [proxy_fcgi:error] [pid 39073:tid 39139] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:10.861303 2026] [proxy_fcgi:error] [pid 39073:tid 39145] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:11.136553 2026] [proxy_fcgi:error] [pid 39073:tid 39144] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:11.416477 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:11.719303 2026] [proxy_fcgi:error] [pid 39073:tid 39144] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:11.998291 2026] [proxy_fcgi:error] [pid 39073:tid 39151] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:12.279287 2026] [proxy_fcgi:error] [pid 39073:tid 39135] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:12.560295 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:12.838196 2026] [proxy_fcgi:error] [pid 39073:tid 39137] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:13.137308 2026] [proxy_fcgi:error] [pid 39073:tid 39150] [client 45.86.200.60:22839] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:17.069322 2026] [:error] [pid 39073:tid 39134] [client 45.86.200.60:22839] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvUf0kT1BNjk46BkdfkgAAAIA"]
[Tue May 05 07:44:18.171629 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.57:31909] [client 45.86.200.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "afkvUnG_NPOxSH0O9aT-kAAAAUI"]
[Tue May 05 07:44:18.996013 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.84:44149] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvUnG_NPOxSH0O9aT-wwAAAVE"]
[Tue May 05 07:44:20.396695 2026] [proxy_fcgi:error] [pid 39071:tid 39081] [client 45.86.200.97:50581] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:24.445606 2026] [:error] [pid 39071:tid 39103] [client 45.86.200.97:50581] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tinyfilemanager.php"] [unique_id "afkvWIvmnRMz9gRzix2WNgAAABc"]
[Tue May 05 07:44:25.740298 2026] [proxy_fcgi:error] [pid 53856:tid 53872] [client 45.86.200.54:29017] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:26.029618 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.54:29017] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "afkvWnG_NPOxSH0O9aQAGQAAAUg"]
[Tue May 05 07:44:26.881304 2026] [proxy_fcgi:error] [pid 53856:tid 53875] [client 45.86.200.87:41449] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:28.270920 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.87:41449] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvXHG_NPOxSH0O9aQAmwAAAVQ"]
[Tue May 05 07:44:29.129087 2026] [:error] [pid 39071:tid 39104] [client 45.86.200.53:35191] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvXYvmnRMz9gRzix2WlwAAABg"]
[Tue May 05 07:44:29.678793 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.55:53723] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvXfolSHl4aAnrIosfQwAAAEE"]
[Tue May 05 07:44:30.232460 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.83:28999] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvXv0kT1BNjk46Bkdg2AAAAIU"]
[Tue May 05 07:44:30.812358 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.101:64685] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvXovmnRMz9gRzix2W0gAAABY"]
[Tue May 05 07:44:31.345300 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.80:55137] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvX_0kT1BNjk46Bkdg9QAAAIQ"]
[Tue May 05 07:44:32.208769 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.105:63399] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvYP0kT1BNjk46BkdhCQAAAJI"]
[Tue May 05 07:44:32.800313 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.54:21081] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:33.381254 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.54:21081] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/filemanager.php"] [unique_id "afkvYXG_NPOxSH0O9aQBeQAAAUg"]
[Tue May 05 07:44:33.951334 2026] [proxy_fcgi:error] [pid 53856:tid 53882] [client 45.86.200.82:22907] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:34.524416 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.82:22907] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvYnG_NPOxSH0O9aQBnwAAAUM"]
[Tue May 05 07:44:35.406752 2026] [:error] [pid 53856:tid 53888] [client 45.86.200.104:62087] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvY3G_NPOxSH0O9aQBwwAAAVc"]
[Tue May 05 07:44:36.020293 2026] [proxy_fcgi:error] [pid 39072:tid 39124] [client 45.86.200.89:38189] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:36.308561 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.89:38189] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkvZPolSHl4aAnrIosgAwAAAEY"]
[Tue May 05 07:44:37.101315 2026] [proxy_fcgi:error] [pid 53856:tid 53865] [client 45.86.200.105:33091] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:37.986295 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.105:33091] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:38.859330 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.105:33091] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvZnG_NPOxSH0O9aQCVAAAAUs"]
[Tue May 05 07:44:39.402310 2026] [proxy_fcgi:error] [pid 39178:tid 39187] [client 45.86.200.100:56907] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:39.682271 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.100:56907] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvZzaPrgTaiOD_15ulbAAAAMs"]
[Tue May 05 07:44:40.227317 2026] [proxy_fcgi:error] [pid 39178:tid 39194] [client 45.86.200.110:43557] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:40.813503 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.110:43557] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/defaults.php"] [unique_id "afkvaDaPrgTaiOD_15ulhwAAANA"]
[Tue May 05 07:44:41.646521 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.59:64885] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvaYvmnRMz9gRzix2YJQAAABM"]
[Tue May 05 07:44:42.470309 2026] [proxy_fcgi:error] [pid 39071:tid 39099] [client 45.86.200.59:61207] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:42.771192 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.59:61207] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:43.323761 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.59:61207] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkva4vmnRMz9gRzix2YUgAAABY"]
[Tue May 05 07:44:44.175458 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.82:47553] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvbHG_NPOxSH0O9aQDKAAAAVE"]
[Tue May 05 07:44:45.054409 2026] [:error] [pid 53856:tid 53875] [client 45.86.200.107:34427] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvbXG_NPOxSH0O9aQDUAAAAUo"]
[Tue May 05 07:44:45.597256 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.78:44771] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkvbSepFwKgA_SKOHgJ4wAAAQ8"]
[Tue May 05 07:44:46.140220 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.102:63783] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkvbnG_NPOxSH0O9aQDjgAAAVU"]
[Tue May 05 07:44:47.280001 2026] [proxy_fcgi:error] [pid 39178:tid 39196] [client 45.86.200.99:21845] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:47.602886 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.99:21845] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/info.php"] [unique_id "afkvbzaPrgTaiOD_15umRgAAAMs"]
[Tue May 05 07:44:48.155279 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.86:26769] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class.api.php"] [unique_id "afkvcDaPrgTaiOD_15umVQAAAMs"]
[Tue May 05 07:44:49.727332 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.103:45673] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvcfolSHl4aAnrIoshSgAAAEQ"]
[Tue May 05 07:44:50.873331 2026] [proxy_fcgi:error] [pid 53856:tid 53868] [client 45.86.200.112:49987] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:58.783638 2026] [proxy_fcgi:error] [pid 53856:tid 53882] [client 45.86.200.112:49987] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:44:59.919550 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.112:49987] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "afkve3G_NPOxSH0O9aQGwgAAAVM"]
[Tue May 05 07:45:01.375876 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.94:23607] [client 45.86.200.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.94, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkvfSepFwKgA_SKOHgLjwAAAQs"]
[Tue May 05 07:45:01.670605 2026] [proxy_fcgi:error] [pid 41055:tid 41059] [client 45.86.200.94:23607] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:03.206356 2026] [proxy_fcgi:error] [pid 41055:tid 41078] [client 45.86.200.94:23607] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:03.512317 2026] [proxy_fcgi:error] [pid 41055:tid 41069] [client 45.86.200.94:23607] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:05.052838 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.94:23607] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvgSepFwKgA_SKOHgMFwAAARE"]
[Tue May 05 07:45:06.008681 2026] [proxy_fcgi:error] [pid 39071:tid 39085] [client 45.86.200.112:44069] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:06.298208 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.112:44069] [client 45.86.200.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.112, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvgovmnRMz9gRzix2aMwAAAAg"]
[Tue May 05 07:45:06.891350 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.112:44069] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/item.php"] [unique_id "afkvgovmnRMz9gRzix2aQwAAAA0"]
[Tue May 05 07:45:08.615342 2026] [proxy_fcgi:error] [pid 39071:tid 39085] [client 45.86.200.54:51485] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:09.216317 2026] [proxy_fcgi:error] [pid 39071:tid 39095] [client 45.86.200.54:51485] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:09.780414 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.54:51485] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvhYvmnRMz9gRzix2apwAAABQ"]
[Tue May 05 07:45:10.357302 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.58:51251] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:11.210325 2026] [proxy_fcgi:error] [pid 39073:tid 39157] [client 45.86.200.58:51251] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:11.807404 2026] [proxy_fcgi:error] [pid 39073:tid 39153] [client 45.86.200.58:51251] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:12.380674 2026] [proxy_fcgi:error] [pid 39073:tid 39134] [client 45.86.200.58:51251] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:12.693392 2026] [:error] [pid 39073:tid 39137] [client 45.86.200.58:51251] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkviP0kT1BNjk46BkdlEAAAAIM"]
[Tue May 05 07:45:13.267298 2026] [proxy_fcgi:error] [pid 39073:tid 39149] [client 45.86.200.82:20045] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:13.567916 2026] [proxy_fcgi:error] [pid 39073:tid 39142] [client 45.86.200.82:20045] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:13.844133 2026] [:error] [pid 39073:tid 39146] [client 45.86.200.82:20045] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkvif0kT1BNjk46BkdlNgAAAIw"]
[Tue May 05 07:45:14.714766 2026] [proxy_fcgi:error] [pid 41055:tid 41075] [client 45.86.200.102:53261] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:15.293850 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.102:53261] [client 45.86.200.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.102, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-login.php"] [unique_id "afkviyepFwKgA_SKOHgNWAAAAQ0"]
[Tue May 05 07:45:15.576947 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.102:53261] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkviyepFwKgA_SKOHgNYQAAAQM"]
[Tue May 05 07:45:19.151544 2026] [proxy_fcgi:error] [pid 53856:tid 53880] [client 45.86.200.97:53723] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:20.283323 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 45.86.200.97:53723] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:20.870704 2026] [proxy_fcgi:error] [pid 53856:tid 53882] [client 45.86.200.97:53723] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:21.152858 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.97:53723] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvkXG_NPOxSH0O9aQLPAAAAVM"]
[Tue May 05 07:45:21.706363 2026] [proxy_fcgi:error] [pid 53856:tid 53887] [client 185.82.72.4:43833] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:22.552622 2026] [:error] [pid 53856:tid 53868] [client 185.82.72.4:43833] [client 185.82.72.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.4, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvknG_NPOxSH0O9aQLgQAAAUM"]
[Tue May 05 07:45:22.850891 2026] [proxy_fcgi:error] [pid 53856:tid 53871] [client 185.82.72.4:43833] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:23.145310 2026] [proxy_fcgi:error] [pid 53856:tid 53877] [client 185.82.72.4:43833] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:23.445290 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 185.82.72.4:43833] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:23.716326 2026] [:error] [pid 53856:tid 53880] [client 185.82.72.4:43833] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/about.php"] [unique_id "afkvk3G_NPOxSH0O9aQLvAAAAU8"]
[Tue May 05 07:45:24.258068 2026] [proxy_fcgi:error] [pid 39073:tid 39150] [client 45.86.200.86:45759] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:24.531704 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.86:45759] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/infi.php"] [unique_id "afkvlP0kT1BNjk46BkdmHQAAAJM"]
[Tue May 05 07:45:25.418543 2026] [proxy_fcgi:error] [pid 39072:tid 39120] [client 45.86.200.98:59527] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:25.731507 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.98:59527] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkvlfolSHl4aAnrIosknAAAAE8"]
[Tue May 05 07:45:26.850299 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.78:59319] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:27.121361 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.78:59319] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkvl3G_NPOxSH0O9aQMUAAAAUI"]
[Tue May 05 07:45:27.664229 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.100:53513] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkvlzaPrgTaiOD_15uqrwAAAMU"]
[Tue May 05 07:45:28.223319 2026] [proxy_fcgi:error] [pid 39072:tid 39119] [client 45.86.200.81:29435] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:28.501303 2026] [proxy_fcgi:error] [pid 39072:tid 39117] [client 45.86.200.81:29435] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:29.626421 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.81:29435] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkvmfolSHl4aAnrIoslIAAAAEM"]
[Tue May 05 07:45:30.451252 2026] [:error] [pid 41055:tid 41076] [client 45.86.200.76:45101] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkvmiepFwKgA_SKOHgPBwAAARI"]
[Tue May 05 07:45:31.019305 2026] [proxy_fcgi:error] [pid 39178:tid 39188] [client 45.86.200.98:25135] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:31.852192 2026] [:error] [pid 39178:tid 39184] [client 45.86.200.98:25135] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit.php"] [unique_id "afkvmzaPrgTaiOD_15urXgAAAMQ"]
[Tue May 05 07:45:32.417383 2026] [proxy_fcgi:error] [pid 39071:tid 39100] [client 45.86.200.85:32287] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:33.009296 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.85:32287] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:33.288635 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.85:32287] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afkvnYvmnRMz9gRzix2dKAAAAAM"]
[Tue May 05 07:45:33.866303 2026] [proxy_fcgi:error] [pid 39072:tid 39113] [client 185.82.72.3:58709] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:34.426630 2026] [:error] [pid 39072:tid 39108] [client 185.82.72.3:58709] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/click.php"] [unique_id "afkvnvolSHl4aAnrIoslswAAAEE"]
[Tue May 05 07:45:34.997621 2026] [proxy_fcgi:error] [pid 39178:tid 39182] [client 45.86.200.100:38091] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:35.838583 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.100:38091] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afkvnzaPrgTaiOD_15ur6AAAANM"]
[Tue May 05 07:45:36.701844 2026] [proxy_fcgi:error] [pid 39073:tid 39145] [client 45.86.200.103:55961] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:37.263301 2026] [proxy_fcgi:error] [pid 39073:tid 39142] [client 45.86.200.103:55961] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:37.541294 2026] [proxy_fcgi:error] [pid 39073:tid 39150] [client 45.86.200.103:55961] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:38.142322 2026] [proxy_fcgi:error] [pid 39073:tid 39138] [client 45.86.200.103:55961] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:38.430363 2026] [:error] [pid 39073:tid 39145] [client 45.86.200.103:55961] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkvov0kT1BNjk46BkdnxgAAAIs"]
[Tue May 05 07:45:38.975366 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.98:60767] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/xl2023.php"] [unique_id "afkvovolSHl4aAnrIosmSgAAAEU"]
[Tue May 05 07:45:39.518903 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.80:27095] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkvoyepFwKgA_SKOHgQOwAAAQM"]
[Tue May 05 07:45:40.055696 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.57:37671] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afkvpPolSHl4aAnrIosmagAAAEE"]
[Tue May 05 07:45:40.610098 2026] [proxy_fcgi:error] [pid 41055:tid 41068] [client 45.86.200.58:23555] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:40.879332 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.58:23555] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afkvpCepFwKgA_SKOHgQYgAAAQk"]
[Tue May 05 07:45:41.426892 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.105:32349] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "afkvpfolSHl4aAnrIosmigAAAEI"]
[Tue May 05 07:45:42.021615 2026] [proxy_fcgi:error] [pid 39072:tid 39109] [client 45.86.200.91:49907] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:42.602229 2026] [:error] [pid 39072:tid 39125] [client 45.86.200.91:49907] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "afkvpvolSHl4aAnrIosmqgAAAFI"]
[Tue May 05 07:45:43.143550 2026] [:error] [pid 39073:tid 39157] [client 45.86.200.82:58991] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "afkvp_0kT1BNjk46BkdodwAAAJc"]
[Tue May 05 07:45:43.712186 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.90:48121] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afkvp3G_NPOxSH0O9aQPEgAAAUk"]
[Tue May 05 07:45:44.290744 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.103:48139] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/security.php"] [unique_id "afkvqHG_NPOxSH0O9aQPLgAAAUA"]
[Tue May 05 07:45:45.131898 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.80:42645] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afkvqfolSHl4aAnrIosnBAAAAE4"]
[Tue May 05 07:45:46.255839 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.109:45433] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "afkvqnG_NPOxSH0O9aQPnwAAAVY"]
[Tue May 05 07:45:46.819307 2026] [proxy_fcgi:error] [pid 39072:tid 39111] [client 45.86.200.105:43109] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:47.673313 2026] [proxy_fcgi:error] [pid 39072:tid 39108] [client 45.86.200.105:43109] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:47.948193 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.105:43109] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afkvq_olSHl4aAnrIosncQAAAEg"]
[Tue May 05 07:45:48.802298 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.101:51875] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:49.085358 2026] [proxy_fcgi:error] [pid 39073:tid 39154] [client 45.86.200.101:51875] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:50.207306 2026] [proxy_fcgi:error] [pid 39073:tid 39134] [client 45.86.200.101:51875] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:50.478082 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.101:51875] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/file.php"] [unique_id "afkvrv0kT1BNjk46BkdpcQAAAJM"]
[Tue May 05 07:45:51.094987 2026] [proxy_fcgi:error] [pid 41055:tid 41069] [client 45.86.200.91:59661] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:45:56.545917 2026] [:error] [pid 41055:tid 41074] [client 45.86.200.91:59661] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afkvtCepFwKgA_SKOHgRzQAAARA"]
[Tue May 05 07:45:57.122568 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.88:59391] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afkvtfolSHl4aAnrIosohwAAAEo"]
[Tue May 05 07:45:58.866509 2026] [:error] [pid 39073:tid 39149] [client 45.86.200.94:43785] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afkvtv0kT1BNjk46BkdqkQAAAI8"]
[Tue May 05 07:45:59.975417 2026] [proxy_fcgi:error] [pid 53856:tid 53883] [client 45.86.200.51:35983] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:00.276526 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.51:35983] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:00.620343 2026] [proxy_fcgi:error] [pid 53856:tid 53888] [client 45.86.200.51:35983] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:00.936309 2026] [proxy_fcgi:error] [pid 53856:tid 53870] [client 45.86.200.51:35983] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:02.389048 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.51:35983] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "afkvunG_NPOxSH0O9aQSsgAAAVg"]
[Tue May 05 07:46:03.971199 2026] [:error] [pid 39071:tid 39091] [client 45.86.200.87:29325] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afkvu4vmnRMz9gRzix2gmwAAAAs"]
[Tue May 05 07:46:04.537627 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.73:64995] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afkvvIvmnRMz9gRzix2gpgAAABY"]
[Tue May 05 07:46:05.106905 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.96:36041] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "afkvvYvmnRMz9gRzix2gsQAAAAE"]
[Tue May 05 07:46:05.718765 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.51:57479] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "afkvvYvmnRMz9gRzix2guwAAABQ"]
[Tue May 05 07:46:06.266254 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.55:57777] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "afkvvvolSHl4aAnrIospiwAAAEo"]
[Tue May 05 07:46:07.098313 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.57:48273] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/index.php"] [unique_id "afkvv3G_NPOxSH0O9aQT0QAAAU0"]
[Tue May 05 07:46:07.688142 2026] [:error] [pid 39073:tid 39154] [client 45.86.200.79:26885] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "afkvv_0kT1BNjk46BkdrlgAAAJQ"]
[Tue May 05 07:46:08.234978 2026] [:error] [pid 39178:tid 39201] [client 45.86.200.107:21883] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "afkvwDaPrgTaiOD_15uwTgAAANU"]
[Tue May 05 07:46:08.777251 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.101:54971] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "afkvwHG_NPOxSH0O9aQUHQAAAVQ"]
[Tue May 05 07:46:09.897577 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.100:23587] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/themes.php"] [unique_id "afkvwXG_NPOxSH0O9aQUXwAAAVU"]
[Tue May 05 07:46:10.828331 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.83:62393] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/index.php"] [unique_id "afkvwv0kT1BNjk46Bkdr6AAAAIc"]
[Tue May 05 07:46:11.411313 2026] [proxy_fcgi:error] [pid 41055:tid 41077] [client 45.86.200.79:62947] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:11.962054 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.79:62947] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "afkvwyepFwKgA_SKOHgTWQAAAQg"]
[Tue May 05 07:46:13.083141 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.100:37125] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/about.php"] [unique_id "afkvxfolSHl4aAnrIosqWgAAAFU"]
[Tue May 05 07:46:13.639330 2026] [proxy_fcgi:error] [pid 41055:tid 41070] [client 45.86.200.101:43553] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:14.205357 2026] [proxy_fcgi:error] [pid 41055:tid 41075] [client 45.86.200.101:43553] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:14.519119 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.101:43553] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "afkvxiepFwKgA_SKOHgTpAAAARg"]
[Tue May 05 07:46:15.347370 2026] [proxy_fcgi:error] [pid 41055:tid 41063] [client 185.82.72.4:36659] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:15.625019 2026] [proxy_fcgi:error] [pid 41055:tid 41080] [client 185.82.72.4:36659] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:15.909670 2026] [proxy_fcgi:error] [pid 41055:tid 41078] [client 185.82.72.4:36659] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:16.178960 2026] [:error] [pid 41055:tid 41075] [client 185.82.72.4:36659] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "afkvyCepFwKgA_SKOHgT1AAAARE"]
[Tue May 05 07:46:16.760286 2026] [proxy_fcgi:error] [pid 39072:tid 39113] [client 45.86.200.58:42473] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:17.082324 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.58:42473] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-class.php"] [unique_id "afkvyfolSHl4aAnrIosrBAAAAEU"]
[Tue May 05 07:46:18.201292 2026] [proxy_fcgi:error] [pid 39072:tid 39130] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:18.494289 2026] [proxy_fcgi:error] [pid 39072:tid 39114] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:18.769370 2026] [proxy_fcgi:error] [pid 39072:tid 39129] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:19.332575 2026] [proxy_fcgi:error] [pid 39072:tid 39114] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:20.167862 2026] [proxy_fcgi:error] [pid 39072:tid 39127] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:20.465347 2026] [proxy_fcgi:error] [pid 39072:tid 39128] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:20.760641 2026] [proxy_fcgi:error] [pid 39072:tid 39107] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:21.044312 2026] [proxy_fcgi:error] [pid 39072:tid 39131] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:21.883313 2026] [proxy_fcgi:error] [pid 39072:tid 39128] [client 45.86.200.104:36901] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:22.185381 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.104:36901] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "afkvzvolSHl4aAnrIosrxQAAAEw"]
[Tue May 05 07:46:22.740310 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.57:58689] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "afkvzjaPrgTaiOD_15uymgAAAMw"]
[Tue May 05 07:46:24.481300 2026] [proxy_fcgi:error] [pid 39072:tid 39110] [client 45.86.200.58:23503] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:24.756660 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.58:23503] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "afkv0PolSHl4aAnrIossFgAAAEY"]
[Tue May 05 07:46:25.625181 2026] [proxy_fcgi:error] [pid 39073:tid 39151] [client 45.86.200.82:33423] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:25.910146 2026] [:error] [pid 39073:tid 39149] [client 45.86.200.82:33423] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "afkv0f0kT1BNjk46BkdtOwAAAI8"]
[Tue May 05 07:46:26.457821 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.55:38527] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "afkv0iepFwKgA_SKOHgU_wAAAQg"]
[Tue May 05 07:46:28.118254 2026] [:error] [pid 39073:tid 39134] [client 45.86.200.58:57349] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afkv1P0kT1BNjk46BkdtbAAAAIA"]
[Tue May 05 07:46:28.681782 2026] [:error] [pid 39073:tid 39140] [client 45.86.200.104:55193] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "afkv1P0kT1BNjk46BkdteQAAAIY"]
[Tue May 05 07:46:30.073191 2026] [proxy_fcgi:error] [pid 53856:tid 53868] [client 45.86.200.107:44659] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:30.640252 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.107:44659] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "afkv1nG_NPOxSH0O9aQZEgAAAVE"]
[Tue May 05 07:46:31.483304 2026] [proxy_fcgi:error] [pid 53856:tid 53887] [client 45.86.200.99:53185] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:32.044800 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.99:53185] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/function.php"] [unique_id "afkv2HG_NPOxSH0O9aQZWQAAAUU"]
[Tue May 05 07:46:32.631754 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.55:51185] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/plugins.php"] [unique_id "afkv2HG_NPOxSH0O9aQZdgAAAVM"]
[Tue May 05 07:46:33.520318 2026] [proxy_fcgi:error] [pid 39073:tid 39139] [client 45.86.200.111:40135] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:33.821496 2026] [:error] [pid 39073:tid 39147] [client 45.86.200.111:40135] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "afkv2f0kT1BNjk46Bkdt_AAAAI0"]
[Tue May 05 07:46:34.382561 2026] [:error] [pid 39073:tid 39139] [client 185.82.72.3:62491] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "afkv2v0kT1BNjk46BkduCgAAAIU"]
[Tue May 05 07:46:35.553306 2026] [proxy_fcgi:error] [pid 39072:tid 39114] [client 45.86.200.86:47325] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:35.840312 2026] [proxy_fcgi:error] [pid 39072:tid 39128] [client 45.86.200.86:47325] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:36.416312 2026] [proxy_fcgi:error] [pid 39072:tid 39121] [client 45.86.200.86:47325] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:36.999908 2026] [:error] [pid 39072:tid 39131] [client 45.86.200.86:47325] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/atomlib.php"] [unique_id "afkv3PolSHl4aAnrIostwwAAAFg"]
[Tue May 05 07:46:37.539204 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.88:39381] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/index.php"] [unique_id "afkv3XG_NPOxSH0O9aQaYwAAAUs"]
[Tue May 05 07:46:38.170317 2026] [proxy_fcgi:error] [pid 39178:tid 39193] [client 45.86.200.101:40405] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:38.470132 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.101:40405] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:39.057329 2026] [proxy_fcgi:error] [pid 39178:tid 39191] [client 45.86.200.101:40405] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:39.340351 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.101:40405] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "afkv3zaPrgTaiOD_15u1BgAAAME"]
[Tue May 05 07:46:39.951427 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.111:20075] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "afkv3yepFwKgA_SKOHgWZwAAAQI"]
[Tue May 05 07:46:40.539759 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.110:33815] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "afkv4HG_NPOxSH0O9aQa9wAAAVU"]
[Tue May 05 07:46:42.539661 2026] [proxy_fcgi:error] [pid 39072:tid 39119] [client 45.86.200.81:43909] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:42.831332 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.81:43909] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "afkv4volSHl4aAnrIosuYQAAAEM"]
[Tue May 05 07:46:43.682162 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.111:46841] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "afkv4_olSHl4aAnrIosugAAAAE8"]
[Tue May 05 07:46:44.306909 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 45.86.200.100:56577] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:44.603315 2026] [proxy_fcgi:error] [pid 53856:tid 53868] [client 45.86.200.100:56577] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:45.162294 2026] [proxy_fcgi:error] [pid 53856:tid 53876] [client 45.86.200.100:56577] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:53.936090 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.100:56577] [client 45.86.200.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.100, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/js/wp-login.php"] [unique_id "afkv7XG_NPOxSH0O9aQd0gAAAVg"]
[Tue May 05 07:46:54.521078 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.100:56577] File does not exist: /home/measureyourbrand/public_html/measureyourbrand.com/worm.PhP
[Tue May 05 07:46:54.806321 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.100:56577] [client 45.86.200.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ext.php"] [unique_id "afkv7nG_NPOxSH0O9aQeDQAAAVY"]
[Tue May 05 07:46:55.363795 2026] [proxy_fcgi:error] [pid 39178:tid 39183] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:55.674316 2026] [proxy_fcgi:error] [pid 39178:tid 39185] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:56.233103 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.55:44621] [client 45.86.200.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.55, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "afkv8DaPrgTaiOD_15u21AAAANM"]
[Tue May 05 07:46:57.095024 2026] [proxy_fcgi:error] [pid 39178:tid 39188] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:57.382690 2026] [proxy_fcgi:error] [pid 39178:tid 39183] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:58.041299 2026] [proxy_fcgi:error] [pid 39178:tid 39188] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:58.618877 2026] [proxy_fcgi:error] [pid 39178:tid 39200] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:59.474288 2026] [proxy_fcgi:error] [pid 39178:tid 39185] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:01.587084 2026] [proxy_fcgi:error] [pid 39178:tid 39194] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:05.667288 2026] [proxy_fcgi:error] [pid 39178:tid 39184] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:07.063131 2026] [proxy_fcgi:error] [pid 39178:tid 39187] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:07.346294 2026] [proxy_fcgi:error] [pid 39178:tid 39197] [client 45.86.200.55:44621] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:07.645441 2026] [:error] [pid 39178:tid 39195] [client 45.86.200.55:44621] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "afkv-zaPrgTaiOD_15u4XgAAAM8"]
[Tue May 05 07:47:08.498605 2026] [proxy_fcgi:error] [pid 53856:tid 53877] [client 45.86.200.106:21087] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:08.783295 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 45.86.200.106:21087] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:09.058021 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.106:21087] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "afkv_XG_NPOxSH0O9aQgnQAAAVY"]
[Tue May 05 07:47:09.899298 2026] [proxy_fcgi:error] [pid 39178:tid 39192] [client 45.86.200.59:53597] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:10.177422 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.59:53597] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/atomlib.php"] [unique_id "afkv_jaPrgTaiOD_15u4ywAAANI"]
[Tue May 05 07:47:11.344333 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 45.86.200.53:63271] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:11.907715 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.53:63271] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:12.495299 2026] [proxy_fcgi:error] [pid 53856:tid 53880] [client 45.86.200.53:63271] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:12.786346 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.53:63271] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:13.360940 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.53:63271] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "afkwAXG_NPOxSH0O9aQhMwAAAVA"]
[Tue May 05 07:47:13.945259 2026] [proxy_fcgi:error] [pid 39073:tid 39134] [client 45.86.200.99:53073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:14.231676 2026] [proxy_fcgi:error] [pid 39073:tid 39153] [client 45.86.200.99:53073] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:14.502157 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.99:53073] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "afkwAv0kT1BNjk46Bkdy9gAAAIc"]
[Tue May 05 07:47:15.353634 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.92:30683] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "afkwA_olSHl4aAnrIoszKQAAAEw"]
[Tue May 05 07:47:16.209860 2026] [proxy_fcgi:error] [pid 39178:tid 39184] [client 45.86.200.59:36995] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:17.071312 2026] [proxy_fcgi:error] [pid 39178:tid 39202] [client 45.86.200.59:36995] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:17.364580 2026] [proxy_fcgi:error] [pid 39178:tid 39196] [client 45.86.200.59:36995] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:17.652695 2026] [:error] [pid 39178:tid 39184] [client 45.86.200.59:36995] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "afkwBTaPrgTaiOD_15u6OAAAAMQ"]
[Tue May 05 07:47:18.242630 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.108:62741] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "afkwBovmnRMz9gRzix2mxQAAAAw"]
[Tue May 05 07:47:20.402426 2026] [proxy_fcgi:error] [pid 53856:tid 53876] [client 45.86.200.54:37297] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:21.022300 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.54:37297] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/dist/default.php"] [unique_id "afkwCXG_NPOxSH0O9aQiQwAAAVY"]
[Tue May 05 07:47:21.841840 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.85:64913] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "afkwCSepFwKgA_SKOHgbhgAAARQ"]
[Tue May 05 07:47:22.731314 2026] [proxy_fcgi:error] [pid 39073:tid 39140] [client 45.86.200.60:60453] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:23.021314 2026] [proxy_fcgi:error] [pid 39073:tid 39142] [client 45.86.200.60:60453] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:23.305644 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.60:60453] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "afkwC_0kT1BNjk46Bkdz3wAAAJY"]
[Tue May 05 07:47:24.150303 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.107:32223] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:24.475300 2026] [proxy_fcgi:error] [pid 39071:tid 39092] [client 45.86.200.107:32223] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:25.054710 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.107:32223] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:25.894130 2026] [:error] [pid 39071:tid 39082] [client 45.86.200.107:32223] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "afkwDYvmnRMz9gRzix2npAAAAAI"]
[Tue May 05 07:47:26.495330 2026] [proxy_fcgi:error] [pid 39073:tid 39147] [client 45.86.200.57:43759] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:27.417934 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.57:43759] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "afkwD_0kT1BNjk46Bkd0PgAAAIE"]
[Tue May 05 07:47:28.269324 2026] [proxy_fcgi:error] [pid 39072:tid 39124] [client 45.86.200.77:63679] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:29.117907 2026] [proxy_fcgi:error] [pid 39072:tid 39130] [client 45.86.200.77:63679] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:29.404328 2026] [proxy_fcgi:error] [pid 39072:tid 39110] [client 45.86.200.77:63679] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:29.969194 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.77:63679] [client 45.86.200.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.77, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "afkwEfolSHl4aAnrIos1rAAAAEY"]
[Tue May 05 07:47:30.541521 2026] [proxy_fcgi:error] [pid 39072:tid 39130] [client 45.86.200.77:63679] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:31.388441 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.77:63679] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "afkwE_olSHl4aAnrIos16AAAAEI"]
[Tue May 05 07:47:31.934289 2026] [proxy_fcgi:error] [pid 39072:tid 39115] [client 45.86.200.105:54529] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:32.204184 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.105:54529] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "afkwFPolSHl4aAnrIos2DQAAAEI"]
[Tue May 05 07:47:32.748518 2026] [proxy_fcgi:error] [pid 53856:tid 53886] [client 45.86.200.59:28627] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:33.327391 2026] [proxy_fcgi:error] [pid 53856:tid 53872] [client 45.86.200.59:28627] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:33.871399 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.59:28627] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "afkwFXG_NPOxSH0O9aQkIgAAAU8"]
[Tue May 05 07:47:35.804798 2026] [proxy_fcgi:error] [pid 53856:tid 53889] [client 45.86.200.103:52553] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:36.096842 2026] [proxy_fcgi:error] [pid 53856:tid 53886] [client 45.86.200.103:52553] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:36.392021 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.103:52553] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "afkwGHG_NPOxSH0O9aQkpgAAAVg"]
[Tue May 05 07:47:36.957723 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.109:27175] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "afkwGCepFwKgA_SKOHgdSQAAARM"]
[Tue May 05 07:47:37.521114 2026] [proxy_fcgi:error] [pid 39071:tid 39089] [client 45.86.200.82:22371] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:37.814294 2026] [proxy_fcgi:error] [pid 39071:tid 39094] [client 45.86.200.82:22371] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:38.378548 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.82:22371] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-feed-index.php"] [unique_id "afkwGovmnRMz9gRzix2o1QAAAA0"]
[Tue May 05 07:47:38.939478 2026] [proxy_fcgi:error] [pid 39071:tid 39098] [client 45.86.200.56:60579] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:39.515085 2026] [proxy_fcgi:error] [pid 39071:tid 39089] [client 45.86.200.56:60579] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:39.798280 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.56:60579] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "afkwG4vmnRMz9gRzix2pBAAAAAQ"]
[Tue May 05 07:47:40.652653 2026] [:error] [pid 39072:tid 39110] [client 185.82.72.4:29281] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/db.php"] [unique_id "afkwHPolSHl4aAnrIos3IQAAAEM"]
[Tue May 05 07:47:41.192724 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.92:34167] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "afkwHYvmnRMz9gRzix2pKQAAAAE"]
[Tue May 05 07:47:41.726244 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.100:27333] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "afkwHfolSHl4aAnrIos3PwAAAEg"]
[Tue May 05 07:47:42.295164 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.53:48119] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "afkwHovmnRMz9gRzix2pQgAAAAw"]
[Tue May 05 07:47:42.846557 2026] [:error] [pid 39071:tid 39080] [client 45.86.200.94:34811] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "afkwHovmnRMz9gRzix2pVgAAAAA"]
[Tue May 05 07:47:43.375396 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.56:57815] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "afkwH_olSHl4aAnrIos3bAAAAEE"]
[Tue May 05 07:47:44.503314 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.80:22863] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "afkwICepFwKgA_SKOHgeSQAAAQs"]
[Tue May 05 07:47:45.061372 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.73:48061] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "afkwISepFwKgA_SKOHgeXQAAAQ0"]
[Tue May 05 07:47:45.647252 2026] [:error] [pid 41055:tid 41068] [client 45.86.200.77:35429] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "afkwISepFwKgA_SKOHgebwAAAQo"]
[Tue May 05 07:47:46.185102 2026] [:error] [pid 41055:tid 41068] [client 45.86.200.92:24791] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "afkwIiepFwKgA_SKOHgegQAAAQo"]
[Tue May 05 07:47:46.744358 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.89:62799] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/options.php"] [unique_id "afkwIiepFwKgA_SKOHgekQAAAQw"]
[Tue May 05 07:47:47.304310 2026] [proxy_fcgi:error] [pid 39178:tid 39196] [client 45.86.200.85:26345] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:48.130360 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.85:26345] [client 45.86.200.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.85, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "afkwJDaPrgTaiOD_15u-awAAAMo"]
[Tue May 05 07:47:49.541461 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.85:26345] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/goto.php"] [unique_id "afkwJTaPrgTaiOD_15u-ngAAAMI"]
[Tue May 05 07:47:50.666308 2026] [proxy_fcgi:error] [pid 39071:tid 39082] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:50.974303 2026] [proxy_fcgi:error] [pid 39071:tid 39086] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:52.111397 2026] [proxy_fcgi:error] [pid 39071:tid 39088] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:52.401306 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:53.516292 2026] [proxy_fcgi:error] [pid 39071:tid 39102] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:53.801698 2026] [proxy_fcgi:error] [pid 39071:tid 39096] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:54.077931 2026] [proxy_fcgi:error] [pid 39071:tid 39087] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:54.369604 2026] [proxy_fcgi:error] [pid 39071:tid 39103] [client 45.86.200.56:51169] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:54.645295 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.56:51169] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afkwKovmnRMz9gRzix2q_AAAAAE"]
[Tue May 05 07:47:55.250344 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.53:43529] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "afkwK3G_NPOxSH0O9aQokAAAAUI"]
[Tue May 05 07:47:55.803594 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.77:23169] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "afkwKyepFwKgA_SKOHgfpQAAAQ8"]
[Tue May 05 07:47:56.652306 2026] [proxy_fcgi:error] [pid 39178:tid 39180] [client 45.86.200.84:34309] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:56.938305 2026] [proxy_fcgi:error] [pid 39178:tid 39194] [client 45.86.200.84:34309] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:57.558315 2026] [proxy_fcgi:error] [pid 39178:tid 39202] [client 45.86.200.84:34309] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:58.117616 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.84:34309] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "afkwLjaPrgTaiOD_15u_wAAAANA"]
[Tue May 05 07:47:58.667255 2026] [:error] [pid 39073:tid 39143] [client 45.86.200.97:59867] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "afkwLv0kT1BNjk46Bkd3MQAAAIk"]
[Tue May 05 07:47:59.242083 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.52:46619] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "afkwLzaPrgTaiOD_15u_3AAAAMw"]
[Tue May 05 07:48:00.887772 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.106:30143] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "afkwMDaPrgTaiOD_15vACgAAANI"]
[Tue May 05 07:48:01.721950 2026] [:error] [pid 39071:tid 39095] [client 45.86.200.109:38947] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "afkwMYvmnRMz9gRzix2rtgAAAA8"]
[Tue May 05 07:48:02.833567 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.78:49695] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "afkwMnG_NPOxSH0O9aQqRwAAAUk"]
[Tue May 05 07:48:03.964309 2026] [proxy_fcgi:error] [pid 53856:tid 53878] [client 45.86.200.97:48695] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:06.542726 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.97:48695] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "afkwNnG_NPOxSH0O9aQrJQAAAVQ"]
[Tue May 05 07:48:07.092297 2026] [proxy_fcgi:error] [pid 39073:tid 39147] [client 185.82.72.4:62411] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:07.376458 2026] [:error] [pid 39073:tid 39143] [client 185.82.72.4:62411] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/about.php"] [unique_id "afkwN_0kT1BNjk46Bkd4VgAAAIk"]
[Tue May 05 07:48:08.555350 2026] [proxy_fcgi:error] [pid 39072:tid 39131] [client 45.86.200.109:39353] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:09.436618 2026] [proxy_fcgi:error] [pid 39072:tid 39123] [client 45.86.200.109:39353] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:09.715138 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.109:39353] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wp-sup.php"] [unique_id "afkwOfolSHl4aAnrIos6YgAAAEY"]
[Tue May 05 07:48:10.853286 2026] [:error] [pid 39073:tid 39148] [client 45.86.200.53:40229] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "afkwOv0kT1BNjk46Bkd47gAAAI4"]
[Tue May 05 07:48:11.669305 2026] [proxy_fcgi:error] [pid 39073:tid 39155] [client 45.86.200.97:47271] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:12.505004 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.97:47271] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "afkwPP0kT1BNjk46Bkd5MgAAAIc"]
[Tue May 05 07:48:15.310273 2026] [:error] [pid 39072:tid 39124] [client 45.86.200.73:38037] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "afkwP_olSHl4aAnrIos7KgAAAFE"]
[Tue May 05 07:48:16.185312 2026] [proxy_fcgi:error] [pid 41055:tid 41079] [client 45.86.200.80:23781] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:16.461571 2026] [:error] [pid 41055:tid 41074] [client 45.86.200.80:23781] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "afkwQCepFwKgA_SKOHgiXwAAARA"]
[Tue May 05 07:48:17.013317 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.91:39953] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "afkwQfolSHl4aAnrIos7agAAAEg"]
[Tue May 05 07:48:19.981030 2026] [:error] [pid 39073:tid 39150] [client 45.86.200.77:35383] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "afkwQ_0kT1BNjk46Bkd6FwAAAJA"]
[Tue May 05 07:48:20.545360 2026] [proxy_fcgi:error] [pid 41055:tid 41075] [client 45.86.200.95:20843] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:21.672029 2026] [proxy_fcgi:error] [pid 41055:tid 41058] [client 45.86.200.95:20843] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:21.944416 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.95:20843] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine-session.php"] [unique_id "afkwRSepFwKgA_SKOHgjHQAAAQQ"]
[Tue May 05 07:48:23.108761 2026] [proxy_fcgi:error] [pid 39071:tid 39093] [client 45.86.200.52:31057] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:23.714849 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.52:31057] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "afkwR4vmnRMz9gRzix2txQAAAAE"]
[Tue May 05 07:48:25.460546 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.99:24635] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "afkwSYvmnRMz9gRzix2uCAAAABU"]
[Tue May 05 07:48:26.312205 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.56:42461] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "afkwSjaPrgTaiOD_15vCjAAAAMU"]
[Tue May 05 07:48:27.401183 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.74:26609] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/install.php"] [unique_id "afkwS_0kT1BNjk46Bkd64AAAAIU"]
[Tue May 05 07:48:27.935215 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.103:39397] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "afkwS_0kT1BNjk46Bkd67AAAAJg"]
[Tue May 05 07:48:28.836312 2026] [proxy_fcgi:error] [pid 39073:tid 39151] [client 45.86.200.109:33443] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:35.390059 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.109:33443] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/category-double.php"] [unique_id "afkwU_0kT1BNjk46Bkd7pQAAAJg"]
[Tue May 05 07:48:37.596383 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.55:63305] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/db.php"] [unique_id "afkwVXG_NPOxSH0O9aQwLgAAAVM"]
[Tue May 05 07:48:39.168529 2026] [:error] [pid 39071:tid 39094] [client 45.86.200.54:49717] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/security.php"] [unique_id "afkwV4vmnRMz9gRzix2veAAAAA4"]
[Tue May 05 07:48:39.992627 2026] [proxy_fcgi:error] [pid 41055:tid 41069] [client 45.86.200.108:59815] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:40.267131 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.108:59815] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "afkwWCepFwKgA_SKOHgl_wAAARY"]
[Tue May 05 07:48:41.105141 2026] [:error] [pid 39073:tid 39147] [client 45.86.200.102:26571] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "afkwWf0kT1BNjk46Bkd8PgAAAI0"]
[Tue May 05 07:48:43.064738 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.54:25811] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "afkwWyepFwKgA_SKOHgmgAAAARU"]
[Tue May 05 07:48:43.938340 2026] [proxy_fcgi:error] [pid 39072:tid 39116] [client 45.86.200.111:40879] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:44.215555 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.111:40879] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "afkwXPolSHl4aAnrIos_PQAAAEw"]
[Tue May 05 07:48:45.356502 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.110:36523] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "afkwXXG_NPOxSH0O9aQxDAAAAUw"]
[Tue May 05 07:48:46.182381 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.112:49721] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/as.php"] [unique_id "afkwXjaPrgTaiOD_15vEgAAAANI"]
[Tue May 05 07:48:47.010157 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.102:51661] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "afkwX3G_NPOxSH0O9aQxVgAAAUc"]
[Tue May 05 07:48:47.546643 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.91:58915] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/install.php"] [unique_id "afkwX_0kT1BNjk46Bkd86AAAAIE"]
[Tue May 05 07:48:48.079893 2026] [:error] [pid 39073:tid 39141] [client 45.86.200.89:35077] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/db.php"] [unique_id "afkwYP0kT1BNjk46Bkd8-gAAAIc"]
[Tue May 05 07:48:50.278095 2026] [:error] [pid 53856:tid 53887] [client 185.82.72.4:44721] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "afkwYnG_NPOxSH0O9aQx5wAAAVY"]
[Tue May 05 07:48:55.780849 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.55:45069] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rk2.php"] [unique_id "afkwZzaPrgTaiOD_15vFfQAAANc"]
[Tue May 05 07:48:56.624792 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.100:31791] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:56.898872 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.100:31791] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/past.php"] [unique_id "afkwaHG_NPOxSH0O9aQy6QAAAVY"]
[Tue May 05 07:48:58.015048 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.86:44593] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/edit-tags.php"] [unique_id "afkwav0kT1BNjk46Bkd-SQAAAIg"]
[Tue May 05 07:48:58.592313 2026] [proxy_fcgi:error] [pid 41055:tid 41059] [client 45.86.200.82:36667] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:49:00.238377 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.82:36667] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "afkwbCepFwKgA_SKOHgodAAAAQM"]
[Tue May 05 07:49:04.741438 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.77:58283] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "afkwcDaPrgTaiOD_15vGOQAAANg"]
[Tue May 05 07:49:07.043003 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.80:40957] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "afkwczaPrgTaiOD_15vGcgAAAMw"]
[Tue May 05 07:49:09.430880 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.83:48165] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "afkwdXG_NPOxSH0O9aQz8wAAAVE"]
[Tue May 05 07:49:13.778523 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.59:55427] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "afkwefolSHl4aAnrIotB3AAAAEQ"]
[Tue May 05 07:49:14.308841 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.105:46489] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "afkwenG_NPOxSH0O9aQ0bAAAAUU"]
[Tue May 05 07:49:25.160806 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.105:45975] [client 45.86.200.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "afkwhSepFwKgA_SKOHgrBAAAAQM"]
[Tue May 05 07:49:51.460443 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.51:49357] [client 45.86.200.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/"] [unique_id "afkwn3G_NPOxSH0O9aQ62QAAAU0"]
[Tue May 05 07:49:56.892953 2026] [autoindex:error] [pid 53856:tid 53876] [client 45.86.200.98:47443] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 09:14:47.588291 2026] [:error] [pid 39072:tid 39109] [client 162.62.213.165:52866] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aflEh_olSHl4aAnrIoukTQAAAEI"]
[Tue May 05 09:43:40.430855 2026] [:error] [pid 41055:tid 41062] [client 175.27.163.171:52794] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "aflLTCepFwKgA_SKOHhr7AAAAQQ"]
[Tue May 05 10:32:05.715309 2026] [:error] [pid 25744:tid 25779] [client 180.195.40.205:54276] [client 180.195.40.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.40.205, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aflWpSR8IuyzjkW06ONqIQAAAIU"]
[Tue May 05 10:32:05.715309 2026] [:error] [pid 25745:tid 25812] [client 180.195.40.205:30227] [client 180.195.40.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.40.205, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "aflWpZsd7hb7vrvCNBm4CAAAAMs"]
[Tue May 05 10:32:05.726884 2026] [proxy_fcgi:error] [pid 25745:tid 25812] [client 180.195.40.205:30227] AH01071: Got error 'Primary script unknown'
[Tue May 05 10:32:05.728160 2026] [proxy_fcgi:error] [pid 25744:tid 25779] [client 180.195.40.205:54276] AH01071: Got error 'Primary script unknown'
[Tue May 05 14:05:10.266675 2026] [:error] [pid 54732:tid 54739] [client 43.130.14.245:48592] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afmIlrGgYlDOb3nfuJSc4QAAAEU"]
[Tue May 05 20:04:54.761642 2026] [:error] [pid 25835:tid 25845] [client 43.166.247.82:51396] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afnc5lDT5nGJyh1439zewgAAAQg"]
[Tue May 05 21:31:39.314692 2026] [:error] [pid 25743:tid 25769] [client 170.106.11.141:56640] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afnxO2-PCMRhF5DdUnP22gAAABY"]
[Tue May 05 22:12:31.660091 2026] [:error] [pid 25835:tid 25853] [client 194.62.107.225:47617] [client 194.62.107.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "afn6z1DT5nGJyh1439zwEwAAARA"]
[Tue May 05 23:24:40.292375 2026] [proxy_fcgi:error] [pid 25744:tid 25785] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:40.390936 2026] [proxy_fcgi:error] [pid 25744:tid 25792] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:40.576983 2026] [proxy_fcgi:error] [pid 25744:tid 25788] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:40.789471 2026] [proxy_fcgi:error] [pid 25744:tid 25783] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:40.880840 2026] [proxy_fcgi:error] [pid 25744:tid 25795] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:40.971718 2026] [proxy_fcgi:error] [pid 25744:tid 25798] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:41.063150 2026] [proxy_fcgi:error] [pid 25744:tid 25793] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:41.176686 2026] [proxy_fcgi:error] [pid 25744:tid 25789] [client 40.65.144.155:4942] AH01071: Got error 'Primary script unknown'
[Tue May 05 23:24:41.264310 2026] [:error] [pid 25744:tid 25781] [client 40.65.144.155:4942] [client 40.65.144.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afoLuSR8IuyzjkW06OMSzwAAAIc"]
[Tue May 05 23:24:41.674295 2026] [:error] [pid 25743:tid 25764] [client 40.65.144.155:4932] [client 40.65.144.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afoLuW-PCMRhF5DdUnMUVgAAABE"]
[Tue May 05 23:24:42.030205 2026] [:error] [pid 25743:tid 25767] [client 40.65.144.155:4938] [client 40.65.144.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afoLum-PCMRhF5DdUnMUVwAAABQ"]
[Tue May 05 23:24:42.428267 2026] [:error] [pid 25745:tid 25803] [client 40.65.144.155:4987] [client 40.65.144.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "afoLupsd7hb7vrvCNBlfZgAAAMI"]
[Wed May 06 01:07:16.477954 2026] [:error] [pid 25743:tid 25760] [client 192.129.178.51:41822] [client 192.129.178.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.129.178.51, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afojxG-PCMRhF5DdUnMulAAAAA0"]
[Wed May 06 01:07:16.487030 2026] [proxy_fcgi:error] [pid 25743:tid 25760] [client 192.129.178.51:41822] AH01071: Got error 'Primary script unknown'
[Wed May 06 01:07:17.339917 2026] [:error] [pid 25744:tid 25781] [client 192.129.178.51:41496] [client 192.129.178.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.129.178.51, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afojxSR8IuyzjkW06OMnjwAAAIc"]
[Wed May 06 01:07:17.343830 2026] [proxy_fcgi:error] [pid 25744:tid 25781] [client 192.129.178.51:41496] AH01071: Got error 'Primary script unknown'
[Wed May 06 01:50:02.749420 2026] [:error] [pid 2324:tid 2329] [client 212.227.10.225:43500] [client 212.227.10.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.227.10.225, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afotymqe2hrcI52A1HzpIQAAAUM"]
[Wed May 06 01:50:02.757645 2026] [proxy_fcgi:error] [pid 2324:tid 2329] [client 212.227.10.225:43500] AH01071: Got error 'Primary script unknown'
[Wed May 06 01:50:02.791078 2026] [:error] [pid 25744:tid 25793] [client 212.227.10.225:43626] [client 212.227.10.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.227.10.225, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afotyiR8IuyzjkW06OMvAgAAAJM"]
[Wed May 06 01:50:02.795294 2026] [proxy_fcgi:error] [pid 25744:tid 25793] [client 212.227.10.225:43626] AH01071: Got error 'Primary script unknown'
[Wed May 06 04:48:10.589309 2026] [:error] [pid 48867:tid 48882] [client 93.87.35.213:65313] [client 93.87.35.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.87.35.213, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afpXilZQ-8ZcCbMZPy714gAAAMw"]
[Wed May 06 04:48:10.600674 2026] [proxy_fcgi:error] [pid 48867:tid 48882] [client 93.87.35.213:65313] AH01071: Got error 'Primary script unknown'
[Wed May 06 06:15:42.620530 2026] [:error] [pid 33660:tid 33680] [client 212.124.183.40:54818] [client 212.124.183.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.124.183.40, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afpsDv6jj6Ce_ERq7qN1hAAAARI"]
[Wed May 06 06:15:42.630136 2026] [proxy_fcgi:error] [pid 33660:tid 33680] [client 212.124.183.40:54818] AH01071: Got error 'Primary script unknown'
[Wed May 06 07:54:57.694754 2026] [:error] [pid 9664:tid 9777] [client 68.183.22.192:36140] [client 68.183.22.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.22.192, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afqDUQH4OZbrg1SjsBO1fgAAAI8"]
[Wed May 06 07:54:57.704833 2026] [proxy_fcgi:error] [pid 9664:tid 9777] [client 68.183.22.192:36140] AH01071: Got error 'Primary script unknown'
[Wed May 06 07:54:58.307085 2026] [:error] [pid 9664:tid 9769] [client 68.183.22.192:36152] [client 68.183.22.192] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.22.192, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afqDUgH4OZbrg1SjsBO1ggAAAIc"]
[Wed May 06 07:54:58.313995 2026] [proxy_fcgi:error] [pid 9664:tid 9769] [client 68.183.22.192:36152] AH01071: Got error 'Primary script unknown'
[Wed May 06 08:39:11.761841 2026] [:error] [pid 13443:tid 13450] [client 43.157.52.37:48606] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afqNrwCyfZallDmsQrdcSQAAAUU"]
[Wed May 06 10:12:20.811250 2026] [:error] [pid 9789:tid 9811] [client 64.227.87.28:53411] [client 64.227.87.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.87.28, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afqjhD_YStPJSCHPkUUhtQAAAFQ"]
[Wed May 06 10:12:20.822284 2026] [proxy_fcgi:error] [pid 9789:tid 9811] [client 64.227.87.28:53411] AH01071: Got error 'Primary script unknown'
[Wed May 06 10:27:27.647972 2026] [:error] [pid 9664:tid 9786] [client 43.159.143.139:37914] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afqnDwH4OZbrg1SjsBPwgwAAAJg"]
[Wed May 06 10:28:34.270632 2026] [:error] [pid 9789:tid 9795] [client 147.182.140.243:53891] [client 147.182.140.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.140.243, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "afqnUj_YStPJSCHPkUUmPQAAAEQ"]
[Wed May 06 10:28:34.282489 2026] [proxy_fcgi:error] [pid 9789:tid 9795] [client 147.182.140.243:53891] AH01071: Got error 'Primary script unknown'
[Wed May 06 11:01:32.986341 2026] [proxy_fcgi:error] [pid 9653:tid 9706] [client 145.239.10.137:35887] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/files1bac.php
[Wed May 06 11:01:37.069279 2026] [proxy_fcgi:error] [pid 9659:tid 9757] [client 145.239.10.137:37078] AH01071: Got error 'Primary script unknown', referer: http://measureyourbrand.com/indexcard.php
[Wed May 06 15:30:38.023746 2026] [:error] [pid 9789:tid 9812] [client 43.164.194.198:33620] [client 43.164.194.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afruHj_YStPJSCHPkUVezwAAAFU"]
[Wed May 06 17:12:46.748012 2026] [:error] [pid 9653:tid 9721] [client 43.135.185.59:58800] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afsGDqhJ49Xc4dqq0B7SsgAAABc"]
[Wed May 06 23:05:20.316070 2026] [proxy_fcgi:error] [pid 9653:tid 9705] [client 45.86.202.87:25185] AH01071: Got error 'Primary script unknown'
[Wed May 06 23:13:06.262113 2026] [:error] [pid 482:tid 490] [client 150.109.230.210:33086] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aftagsxs8HOc_nWgOW5ydgAAAcY"]
[Wed May 06 23:16:12.832404 2026] [:error] [pid 13414:tid 13419] [client 123.207.65.62:47936] [client 123.207.65.62] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "aftbPEuJQpWjVpJTu_ktPQAAAQM"]
[Thu May 07 00:31:14.233441 2026] [:error] [pid 9653:tid 9714] [client 103.252.166.144:3219] [client 103.252.166.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.144, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afts0qhJ49Xc4dqq0B5YkAAAABA"]
[Thu May 07 00:31:14.246167 2026] [proxy_fcgi:error] [pid 9653:tid 9714] [client 103.252.166.144:3219] AH01071: Got error 'Primary script unknown'
[Thu May 07 00:31:14.249374 2026] [:error] [pid 482:tid 499] [client 103.252.166.144:3218] [client 103.252.166.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.144, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afts0sxs8HOc_nWgOW6IiwAAAc8"]
[Thu May 07 00:31:14.255907 2026] [proxy_fcgi:error] [pid 482:tid 499] [client 103.252.166.144:3218] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:41:59.644529 2026] [proxy_fcgi:error] [pid 9653:tid 9706] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:41:59.837633 2026] [proxy_fcgi:error] [pid 9653:tid 9714] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:00.028000 2026] [proxy_fcgi:error] [pid 9653:tid 9700] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:00.221331 2026] [proxy_fcgi:error] [pid 9653:tid 9702] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:00.414016 2026] [proxy_fcgi:error] [pid 9653:tid 9698] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:00.604119 2026] [proxy_fcgi:error] [pid 9653:tid 9699] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:00.794528 2026] [proxy_fcgi:error] [pid 9653:tid 9703] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:00.985317 2026] [proxy_fcgi:error] [pid 9653:tid 9713] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:01.177187 2026] [proxy_fcgi:error] [pid 9653:tid 9717] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:01.369498 2026] [proxy_fcgi:error] [pid 9653:tid 9709] [client 20.9.85.117:57297] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:42:01.556564 2026] [:error] [pid 9653:tid 9712] [client 20.9.85.117:57297] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aft9aahJ49Xc4dqq0B5zUAAAAA4"]
[Thu May 07 01:42:01.933152 2026] [:error] [pid 9789:tid 9795] [client 20.9.85.117:57341] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aft9aT_YStPJSCHPkUXTOQAAAEQ"]
[Thu May 07 01:42:02.313067 2026] [:error] [pid 9789:tid 9803] [client 20.9.85.117:57226] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aft9aj_YStPJSCHPkUXTOgAAAEw"]
[Thu May 07 01:42:02.687896 2026] [:error] [pid 13414:tid 13420] [client 20.9.85.117:57342] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "aft9akuJQpWjVpJTu_k9FAAAAQQ"]
[Thu May 07 01:42:03.064752 2026] [:error] [pid 9653:tid 9708] [client 20.9.85.117:57223] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "aft9a6hJ49Xc4dqq0B5zUgAAAAo"]
[Thu May 07 01:42:03.437751 2026] [:error] [pid 482:tid 508] [client 20.9.85.117:57336] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "aft9a8xs8HOc_nWgOW6d_QAAAdY"]
[Thu May 07 01:42:03.810992 2026] [:error] [pid 9664:tid 9762] [client 20.9.85.117:57267] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "aft9awH4OZbrg1SjsBN16gAAAIA"]
[Thu May 07 01:42:04.185471 2026] [:error] [pid 9789:tid 9802] [client 20.9.85.117:57216] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "aft9bD_YStPJSCHPkUXTPAAAAEs"]
[Thu May 07 01:42:04.561988 2026] [:error] [pid 9664:tid 9785] [client 20.9.85.117:57315] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aft9bAH4OZbrg1SjsBN17QAAAJc"]
[Thu May 07 01:42:04.937979 2026] [:error] [pid 592:tid 620] [client 20.9.85.117:57327] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aft9bJiX28mb6xLi2PzHzAAAApU"]
[Thu May 07 01:42:05.311985 2026] [:error] [pid 13443:tid 13450] [client 20.9.85.117:57232] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aft9bQCyfZallDmsQrezFQAAAUU"]
[Thu May 07 01:42:05.687878 2026] [:error] [pid 9653:tid 9706] [client 20.9.85.117:57231] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "aft9bahJ49Xc4dqq0B5zVQAAAAg"]
[Thu May 07 01:42:06.062375 2026] [:error] [pid 482:tid 490] [client 20.9.85.117:57299] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aft9bsxs8HOc_nWgOW6eAAAAAcY"]
[Thu May 07 01:42:06.438726 2026] [:error] [pid 482:tid 491] [client 20.9.85.117:57310] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aft9bsxs8HOc_nWgOW6eAgAAAcc"]
[Thu May 07 01:42:06.813624 2026] [:error] [pid 592:tid 605] [client 20.9.85.117:57281] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aft9bpiX28mb6xLi2PzHzQAAAok"]
[Thu May 07 01:42:07.188226 2026] [:error] [pid 9653:tid 9700] [client 20.9.85.117:57233] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "aft9b6hJ49Xc4dqq0B5zVwAAAAI"]
[Thu May 07 01:42:07.561955 2026] [:error] [pid 9664:tid 9772] [client 20.9.85.117:57292] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aft9bwH4OZbrg1SjsBN18gAAAIo"]
[Thu May 07 01:42:07.943856 2026] [:error] [pid 9664:tid 9777] [client 20.9.85.117:57308] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aft9bwH4OZbrg1SjsBN18wAAAI8"]
[Thu May 07 01:42:08.320147 2026] [:error] [pid 9664:tid 9765] [client 20.9.85.117:57305] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aft9cAH4OZbrg1SjsBN19QAAAIM"]
[Thu May 07 01:42:08.693561 2026] [:error] [pid 592:tid 603] [client 20.9.85.117:57293] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "aft9cJiX28mb6xLi2PzHzwAAAoc"]
[Thu May 07 01:42:09.068050 2026] [:error] [pid 9789:tid 9810] [client 20.9.85.117:57331] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "aft9cT_YStPJSCHPkUXTQQAAAFM"]
[Thu May 07 01:42:09.443163 2026] [:error] [pid 9653:tid 9720] [client 20.9.85.117:57218] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "aft9cahJ49Xc4dqq0B5zZQAAABY"]
[Thu May 07 01:42:09.820555 2026] [:error] [pid 9659:tid 9750] [client 20.9.85.117:57225] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "aft9cfwJnWjd8JHpBtu2gAAAANA"]
[Thu May 07 01:42:10.197269 2026] [:error] [pid 9659:tid 9747] [client 20.9.85.117:57295] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "aft9cvwJnWjd8JHpBtu2gwAAAM0"]
[Thu May 07 01:42:10.575951 2026] [:error] [pid 9789:tid 9813] [client 20.9.85.117:57227] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aft9cj_YStPJSCHPkUXTQgAAAFY"]
[Thu May 07 01:42:10.951740 2026] [:error] [pid 482:tid 509] [client 20.9.85.117:57321] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aft9csxs8HOc_nWgOW6eCQAAAdc"]
[Thu May 07 01:42:11.330249 2026] [:error] [pid 9664:tid 9762] [client 20.9.85.117:57289] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aft9cwH4OZbrg1SjsBN1-QAAAIA"]
[Thu May 07 01:42:11.711121 2026] [:error] [pid 9653:tid 9700] [client 20.9.85.117:57290] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "aft9c6hJ49Xc4dqq0B5zZwAAAAI"]
[Thu May 07 01:42:12.085184 2026] [:error] [pid 482:tid 487] [client 20.9.85.117:57332] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aft9dMxs8HOc_nWgOW6eDQAAAcM"]
[Thu May 07 01:42:12.464953 2026] [:error] [pid 9653:tid 9699] [client 20.9.85.117:57287] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aft9dKhJ49Xc4dqq0B5zawAAAAE"]
[Thu May 07 01:42:12.843776 2026] [:error] [pid 9789:tid 9799] [client 20.9.85.117:57317] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aft9dD_YStPJSCHPkUXTRQAAAEg"]
[Thu May 07 01:42:13.225157 2026] [:error] [pid 9653:tid 9709] [client 20.9.85.117:57303] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "aft9dahJ49Xc4dqq0B5zbQAAAAs"]
[Thu May 07 01:42:13.605088 2026] [:error] [pid 9789:tid 9796] [client 20.9.85.117:57236] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "aft9dT_YStPJSCHPkUXTSAAAAEU"]
[Thu May 07 01:42:13.985319 2026] [:error] [pid 482:tid 490] [client 20.9.85.117:57240] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "aft9dcxs8HOc_nWgOW6eEQAAAcY"]
[Thu May 07 01:42:14.370214 2026] [:error] [pid 482:tid 497] [client 20.9.85.117:57294] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "aft9dsxs8HOc_nWgOW6eEgAAAc0"]
[Thu May 07 01:42:14.747019 2026] [:error] [pid 9653:tid 9712] [client 20.9.85.117:57244] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "aft9dqhJ49Xc4dqq0B5zbwAAAA4"]
[Thu May 07 01:42:15.131288 2026] [:error] [pid 13443:tid 13464] [client 20.9.85.117:57241] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aft9dwCyfZallDmsQrezGAAAAVM"]
[Thu May 07 01:42:15.516022 2026] [:error] [pid 13443:tid 13465] [client 20.9.85.117:57242] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aft9dwCyfZallDmsQrezGQAAAVQ"]
[Thu May 07 01:42:15.893491 2026] [:error] [pid 9653:tid 9708] [client 20.9.85.117:57324] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aft9d6hJ49Xc4dqq0B5zcgAAAAo"]
[Thu May 07 01:42:16.269518 2026] [:error] [pid 9653:tid 9705] [client 20.9.85.117:57219] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "aft9eKhJ49Xc4dqq0B5zdQAAAAc"]
[Thu May 07 01:42:16.654869 2026] [:error] [pid 592:tid 617] [client 20.9.85.117:57217] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "aft9eJiX28mb6xLi2PzH1QAAApI"]
[Thu May 07 01:42:17.030813 2026] [:error] [pid 592:tid 601] [client 20.9.85.117:57270] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "aft9eZiX28mb6xLi2PzH1gAAAoU"]
[Thu May 07 01:42:17.406479 2026] [:error] [pid 9659:tid 9751] [client 20.9.85.117:57158] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "aft9efwJnWjd8JHpBtu2hwAAANE"]
[Thu May 07 01:42:17.788040 2026] [:error] [pid 592:tid 596] [client 20.9.85.117:57283] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "aft9eZiX28mb6xLi2PzH2AAAAoA"]
[Thu May 07 01:42:18.160965 2026] [:error] [pid 9653:tid 9707] [client 20.9.85.117:57246] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aft9eqhJ49Xc4dqq0B5zeAAAAAk"]
[Thu May 07 01:42:18.537293 2026] [:error] [pid 482:tid 489] [client 20.9.85.117:57234] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aft9esxs8HOc_nWgOW6eFgAAAcU"]
[Thu May 07 01:42:18.913538 2026] [:error] [pid 9653:tid 9699] [client 20.9.85.117:57326] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aft9eqhJ49Xc4dqq0B5zewAAAAE"]
[Thu May 07 01:42:19.287288 2026] [:error] [pid 9664:tid 9774] [client 20.9.85.117:57328] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "aft9ewH4OZbrg1SjsBN1-wAAAIw"]
[Thu May 07 01:42:19.663792 2026] [:error] [pid 9653:tid 9714] [client 20.9.85.117:57273] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "aft9e6hJ49Xc4dqq0B5zfwAAABA"]
[Thu May 07 01:42:20.038438 2026] [:error] [pid 482:tid 502] [client 20.9.85.117:57296] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "aft9fMxs8HOc_nWgOW6eGQAAAdI"]
[Thu May 07 01:42:20.413853 2026] [:error] [pid 9659:tid 9737] [client 20.9.85.117:57254] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "aft9fPwJnWjd8JHpBtu2igAAAMM"]
[Thu May 07 01:42:20.790108 2026] [:error] [pid 9653:tid 9720] [client 20.9.85.117:57333] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "aft9fKhJ49Xc4dqq0B5zgAAAABY"]
[Thu May 07 01:42:21.166752 2026] [:error] [pid 482:tid 504] [client 20.9.85.117:57160] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aft9fcxs8HOc_nWgOW6eHgAAAdQ"]
[Thu May 07 01:42:21.541248 2026] [:error] [pid 13443:tid 13455] [client 20.9.85.117:57309] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aft9fQCyfZallDmsQrezHAAAAUo"]
[Thu May 07 01:42:21.918020 2026] [:error] [pid 557:tid 570] [client 20.9.85.117:57320] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aft9fTZjFR8Vd8ce80BAQAAAAks"]
[Thu May 07 01:42:22.292460 2026] [:error] [pid 13414:tid 13430] [client 20.9.85.117:57229] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "aft9fkuJQpWjVpJTu_k9FgAAAQ4"]
[Thu May 07 01:42:22.666870 2026] [:error] [pid 482:tid 507] [client 20.9.85.117:57153] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "aft9fsxs8HOc_nWgOW6eHwAAAdU"]
[Thu May 07 01:42:23.040623 2026] [:error] [pid 13414:tid 13421] [client 20.9.85.117:57163] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "aft9f0uJQpWjVpJTu_k9GQAAAQU"]
[Thu May 07 01:42:23.415030 2026] [:error] [pid 13414:tid 13439] [client 20.9.85.117:57179] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "aft9f0uJQpWjVpJTu_k9GwAAARc"]
[Thu May 07 01:42:23.791104 2026] [:error] [pid 482:tid 488] [client 20.9.85.117:57268] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "aft9f8xs8HOc_nWgOW6eIwAAAcQ"]
[Thu May 07 01:42:24.165764 2026] [:error] [pid 13443:tid 13458] [client 20.9.85.117:57230] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aft9gACyfZallDmsQrezHgAAAU0"]
[Thu May 07 01:42:24.540640 2026] [:error] [pid 482:tid 495] [client 20.9.85.117:57314] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aft9gMxs8HOc_nWgOW6eJAAAAcs"]
[Thu May 07 01:42:24.914800 2026] [:error] [pid 482:tid 489] [client 20.9.85.117:57266] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aft9gMxs8HOc_nWgOW6eJgAAAcU"]
[Thu May 07 01:42:25.290407 2026] [:error] [pid 557:tid 562] [client 20.9.85.117:57243] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "aft9gTZjFR8Vd8ce80BAQwAAAkM"]
[Thu May 07 01:42:25.666046 2026] [:error] [pid 13414:tid 13427] [client 20.9.85.117:57251] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "aft9gUuJQpWjVpJTu_k9HwAAAQs"]
[Thu May 07 01:42:26.039925 2026] [:error] [pid 9653:tid 9704] [client 20.9.85.117:57282] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "aft9gqhJ49Xc4dqq0B5zgwAAAAY"]
[Thu May 07 01:42:26.412999 2026] [:error] [pid 9653:tid 9714] [client 20.9.85.117:57285] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "aft9gqhJ49Xc4dqq0B5zhQAAABA"]
[Thu May 07 01:42:26.789800 2026] [:error] [pid 482:tid 486] [client 20.9.85.117:57252] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "aft9gsxs8HOc_nWgOW6eKwAAAcI"]
[Thu May 07 01:42:27.167324 2026] [:error] [pid 482:tid 493] [client 20.9.85.117:57313] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aft9g8xs8HOc_nWgOW6eLQAAAck"]
[Thu May 07 01:42:27.541786 2026] [:error] [pid 482:tid 499] [client 20.9.85.117:57279] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aft9g8xs8HOc_nWgOW6eMAAAAc8"]
[Thu May 07 01:42:27.918736 2026] [:error] [pid 9664:tid 9775] [client 20.9.85.117:57318] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aft9gwH4OZbrg1SjsBN2AwAAAI0"]
[Thu May 07 01:42:28.296843 2026] [:error] [pid 9664:tid 9770] [client 20.9.85.117:57247] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "aft9hAH4OZbrg1SjsBN2BgAAAIg"]
[Thu May 07 01:42:28.678662 2026] [:error] [pid 482:tid 500] [client 20.9.85.117:57334] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aft9hMxs8HOc_nWgOW6eNAAAAdA"]
[Thu May 07 01:42:29.054856 2026] [:error] [pid 482:tid 503] [client 20.9.85.117:57343] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aft9hcxs8HOc_nWgOW6eNgAAAdM"]
[Thu May 07 01:42:29.435667 2026] [:error] [pid 482:tid 507] [client 20.9.85.117:57277] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aft9hcxs8HOc_nWgOW6ePQAAAdU"]
[Thu May 07 01:42:29.811979 2026] [:error] [pid 482:tid 489] [client 20.9.85.117:57269] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "aft9hcxs8HOc_nWgOW6eQAAAAcU"]
[Thu May 07 01:42:30.186303 2026] [:error] [pid 13414:tid 13433] [client 20.9.85.117:57301] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aft9hkuJQpWjVpJTu_k9IgAAARE"]
[Thu May 07 01:42:30.567158 2026] [:error] [pid 9653:tid 9710] [client 20.9.85.117:57271] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aft9hqhJ49Xc4dqq0B5ziAAAAAw"]
[Thu May 07 01:42:30.947071 2026] [:error] [pid 9653:tid 9701] [client 20.9.85.117:57307] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aft9hqhJ49Xc4dqq0B5zigAAAAM"]
[Thu May 07 01:42:31.328490 2026] [:error] [pid 482:tid 509] [client 20.9.85.117:57166] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "aft9h8xs8HOc_nWgOW6eTAAAAdc"]
[Thu May 07 01:42:31.705062 2026] [:error] [pid 9653:tid 9705] [client 20.9.85.117:57337] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aft9h6hJ49Xc4dqq0B5zjQAAAAc"]
[Thu May 07 01:42:32.081466 2026] [:error] [pid 9789:tid 9814] [client 20.9.85.117:57263] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aft9iD_YStPJSCHPkUXTVAAAAFc"]
[Thu May 07 01:42:32.458579 2026] [:error] [pid 13414:tid 13421] [client 20.9.85.117:57162] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aft9iEuJQpWjVpJTu_k9JAAAAQU"]
[Thu May 07 01:42:32.840796 2026] [:error] [pid 13443:tid 13469] [client 20.9.85.117:57228] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "aft9iACyfZallDmsQrezIgAAAVg"]
[Thu May 07 01:42:33.216853 2026] [:error] [pid 9789:tid 9791] [client 20.9.85.117:57186] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "aft9iT_YStPJSCHPkUXTWwAAAEA"]
[Thu May 07 01:42:33.591139 2026] [:error] [pid 482:tid 492] [client 20.9.85.117:57261] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "aft9icxs8HOc_nWgOW6eTgAAAcg"]
[Thu May 07 01:42:33.973865 2026] [:error] [pid 13414:tid 13422] [client 20.9.85.117:57164] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "aft9iUuJQpWjVpJTu_k9KAAAAQY"]
[Thu May 07 01:42:34.348937 2026] [:error] [pid 9664:tid 9786] [client 20.9.85.117:57255] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "aft9igH4OZbrg1SjsBN2DAAAAJg"]
[Thu May 07 01:42:34.733735 2026] [:error] [pid 9789:tid 9809] [client 20.9.85.117:57224] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aft9ij_YStPJSCHPkUXTXwAAAFI"]
[Thu May 07 01:42:35.110777 2026] [:error] [pid 9789:tid 9810] [client 20.9.85.117:57325] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aft9iz_YStPJSCHPkUXTYQAAAFM"]
[Thu May 07 01:42:35.488642 2026] [:error] [pid 9789:tid 9813] [client 20.9.85.117:57172] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aft9iz_YStPJSCHPkUXTYwAAAFY"]
[Thu May 07 01:42:35.867202 2026] [:error] [pid 13443:tid 13446] [client 20.9.85.117:57221] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "aft9iwCyfZallDmsQrezJgAAAUE"]
[Thu May 07 01:42:36.242055 2026] [:error] [pid 557:tid 581] [client 20.9.85.117:57338] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aft9jDZjFR8Vd8ce80BASAAAAlY"]
[Thu May 07 01:42:36.630031 2026] [:error] [pid 557:tid 570] [client 20.9.85.117:57312] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aft9jDZjFR8Vd8ce80BASQAAAks"]
[Thu May 07 01:42:37.005814 2026] [:error] [pid 13443:tid 13454] [client 20.9.85.117:57248] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aft9jQCyfZallDmsQrezJwAAAUk"]
[Thu May 07 01:42:37.381384 2026] [:error] [pid 13414:tid 13436] [client 20.9.85.117:57319] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "aft9jUuJQpWjVpJTu_k9LAAAARQ"]
[Thu May 07 01:42:37.756011 2026] [:error] [pid 482:tid 490] [client 20.9.85.117:57249] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aft9jcxs8HOc_nWgOW6eUgAAAcY"]
[Thu May 07 01:42:38.134252 2026] [:error] [pid 482:tid 500] [client 20.9.85.117:57201] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aft9jsxs8HOc_nWgOW6eUwAAAdA"]
[Thu May 07 01:42:38.510455 2026] [:error] [pid 9659:tid 9754] [client 20.9.85.117:57165] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aft9jvwJnWjd8JHpBtu2jQAAANQ"]
[Thu May 07 01:42:38.892758 2026] [:error] [pid 9653:tid 9721] [client 20.9.85.117:57178] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new.php"] [unique_id "aft9jqhJ49Xc4dqq0B5zkgAAABc"]
[Thu May 07 01:42:39.282598 2026] [:error] [pid 63810:tid 63832] [client 20.9.85.117:57154] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aft9j3pnbsN9Zf6i5IFRmQAAAZI"]
[Thu May 07 01:42:39.665381 2026] [:error] [pid 9664:tid 9762] [client 20.9.85.117:57202] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aft9jwH4OZbrg1SjsBN2EQAAAIA"]
[Thu May 07 01:42:40.038909 2026] [:error] [pid 9664:tid 9785] [client 20.9.85.117:57168] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aft9kAH4OZbrg1SjsBN2EgAAAJc"]
[Thu May 07 01:42:40.415205 2026] [:error] [pid 9664:tid 9771] [client 20.9.85.117:57156] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "aft9kAH4OZbrg1SjsBN2FQAAAIk"]
[Thu May 07 01:42:40.791018 2026] [:error] [pid 9664:tid 9774] [client 20.9.85.117:57329] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aft9kAH4OZbrg1SjsBN2GAAAAIw"]
[Thu May 07 01:42:41.174211 2026] [:error] [pid 9664:tid 9778] [client 20.9.85.117:57161] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aft9kQH4OZbrg1SjsBN2GwAAAJA"]
[Thu May 07 01:42:41.564986 2026] [:error] [pid 9664:tid 9765] [client 20.9.85.117:57175] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aft9kQH4OZbrg1SjsBN2HQAAAIM"]
[Thu May 07 01:42:41.941832 2026] [:error] [pid 9664:tid 9773] [client 20.9.85.117:57278] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "aft9kQH4OZbrg1SjsBN2HgAAAIs"]
[Thu May 07 01:42:42.319075 2026] [:error] [pid 9653:tid 9703] [client 20.9.85.117:57323] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "aft9kqhJ49Xc4dqq0B5zlAAAAAU"]
[Thu May 07 01:42:42.695735 2026] [:error] [pid 557:tid 566] [client 20.9.85.117:57235] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "aft9kjZjFR8Vd8ce80BATwAAAkc"]
[Thu May 07 01:42:43.070527 2026] [:error] [pid 13443:tid 13453] [client 20.9.85.117:57262] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "aft9kwCyfZallDmsQrezLwAAAUg"]
[Thu May 07 01:42:43.448520 2026] [:error] [pid 63810:tid 63827] [client 20.9.85.117:57206] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/txets.php"] [unique_id "aft9k3pnbsN9Zf6i5IFRnQAAAY0"]
[Thu May 07 01:42:43.826379 2026] [:error] [pid 9664:tid 9777] [client 20.9.85.117:57107] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aft9kwH4OZbrg1SjsBN2HwAAAI8"]
[Thu May 07 01:42:44.199296 2026] [:error] [pid 557:tid 562] [client 20.9.85.117:57213] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aft9lDZjFR8Vd8ce80BAUQAAAkM"]
[Thu May 07 01:42:44.573133 2026] [:error] [pid 9659:tid 9746] [client 20.9.85.117:57311] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aft9lPwJnWjd8JHpBtu2kAAAAMw"]
[Thu May 07 01:42:44.946560 2026] [:error] [pid 9659:tid 9749] [client 20.9.85.117:57314] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file59.php"] [unique_id "aft9lPwJnWjd8JHpBtu2kQAAAM8"]
[Thu May 07 01:42:45.328609 2026] [:error] [pid 9664:tid 9769] [client 20.9.85.117:57284] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aft9lQH4OZbrg1SjsBN2IAAAAIc"]
[Thu May 07 01:42:45.701938 2026] [:error] [pid 9659:tid 9744] [client 20.9.85.117:57238] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aft9lfwJnWjd8JHpBtu2lAAAAMo"]
[Thu May 07 01:42:46.076999 2026] [:error] [pid 9659:tid 9751] [client 20.9.85.117:57192] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aft9lvwJnWjd8JHpBtu2lwAAANE"]
[Thu May 07 01:42:46.453830 2026] [:error] [pid 9664:tid 9762] [client 20.9.85.117:57159] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lala.php"] [unique_id "aft9lgH4OZbrg1SjsBN2IgAAAIA"]
[Thu May 07 01:42:46.829719 2026] [:error] [pid 482:tid 496] [client 20.9.85.117:57091] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "aft9lsxs8HOc_nWgOW6eWwAAAcw"]
[Thu May 07 01:42:47.204836 2026] [:error] [pid 9664:tid 9786] [client 20.9.85.117:57090] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "aft9lwH4OZbrg1SjsBN2JQAAAJg"]
[Thu May 07 01:42:47.581376 2026] [:error] [pid 13443:tid 13451] [client 20.9.85.117:57253] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "aft9lwCyfZallDmsQrezOQAAAUY"]
[Thu May 07 01:42:47.956321 2026] [:error] [pid 9659:tid 9737] [client 20.9.85.117:57187] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-at.php"] [unique_id "aft9l_wJnWjd8JHpBtu2mgAAAMM"]
[Thu May 07 01:42:48.332418 2026] [:error] [pid 9659:tid 9745] [client 20.9.85.117:57250] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aft9mPwJnWjd8JHpBtu2mwAAAMs"]
[Thu May 07 01:42:48.708316 2026] [:error] [pid 9664:tid 9775] [client 20.9.85.117:57198] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aft9mAH4OZbrg1SjsBN2JwAAAI0"]
[Thu May 07 01:42:49.085669 2026] [:error] [pid 482:tid 501] [client 20.9.85.117:57182] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aft9mcxs8HOc_nWgOW6eXAAAAdE"]
[Thu May 07 01:42:49.460882 2026] [:error] [pid 9664:tid 9768] [client 20.9.85.117:57191] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "aft9mQH4OZbrg1SjsBN2KAAAAIY"]
[Thu May 07 01:42:49.848708 2026] [:error] [pid 9664:tid 9778] [client 20.9.85.117:57340] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aft9mQH4OZbrg1SjsBN2KQAAAJA"]
[Thu May 07 01:42:50.253123 2026] [:error] [pid 63810:tid 63831] [client 20.9.85.117:57286] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aft9mnpnbsN9Zf6i5IFRpQAAAZE"]
[Thu May 07 01:42:50.626278 2026] [:error] [pid 482:tid 508] [client 20.9.85.117:57335] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aft9msxs8HOc_nWgOW6eYAAAAdY"]
[Thu May 07 01:42:51.002156 2026] [:error] [pid 13414:tid 13420] [client 20.9.85.117:57148] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sys.php"] [unique_id "aft9m0uJQpWjVpJTu_k9NwAAAQQ"]
[Thu May 07 01:42:51.377183 2026] [:error] [pid 9789:tid 9797] [client 20.9.85.117:57280] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aft9mz_YStPJSCHPkUXTaAAAAEY"]
[Thu May 07 01:42:51.763796 2026] [:error] [pid 9789:tid 9810] [client 20.9.85.117:57264] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aft9mz_YStPJSCHPkUXTaQAAAFM"]
[Thu May 07 01:42:52.149363 2026] [:error] [pid 9659:tid 9744] [client 20.9.85.117:57280] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aft9nPwJnWjd8JHpBtu2ogAAAMo"]
[Thu May 07 01:42:52.524170 2026] [:error] [pid 592:tid 607] [client 20.9.85.117:57339] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "aft9nJiX28mb6xLi2PzH6gAAAos"]
[Thu May 07 01:42:52.898702 2026] [:error] [pid 13414:tid 13435] [client 20.9.85.117:57272] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aft9nEuJQpWjVpJTu_k9OAAAARM"]
[Thu May 07 01:42:53.271923 2026] [:error] [pid 9664:tid 9773] [client 20.9.85.117:57237] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aft9nQH4OZbrg1SjsBN2KwAAAIs"]
[Thu May 07 01:42:53.645448 2026] [:error] [pid 13414:tid 13430] [client 20.9.85.117:57114] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aft9nUuJQpWjVpJTu_k9OQAAAQ4"]
[Thu May 07 01:42:54.019887 2026] [:error] [pid 9659:tid 9755] [client 20.9.85.117:57300] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "aft9nvwJnWjd8JHpBtu2pgAAANU"]
[Thu May 07 01:42:54.394860 2026] [:error] [pid 9659:tid 9735] [client 20.9.85.117:57155] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aft9nvwJnWjd8JHpBtu2pwAAAME"]
[Thu May 07 01:42:54.769700 2026] [:error] [pid 9653:tid 9700] [client 20.9.85.117:57288] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aft9nqhJ49Xc4dqq0B5zmwAAAAI"]
[Thu May 07 01:42:55.145195 2026] [:error] [pid 9653:tid 9716] [client 20.9.85.117:57185] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aft9n6hJ49Xc4dqq0B5znQAAABI"]
[Thu May 07 01:42:55.519921 2026] [:error] [pid 9653:tid 9699] [client 20.9.85.117:57220] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "aft9n6hJ49Xc4dqq0B5zoAAAAAE"]
[Thu May 07 01:42:55.896953 2026] [:error] [pid 9653:tid 9704] [client 20.9.85.117:57265] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aft9n6hJ49Xc4dqq0B5zoQAAAAY"]
[Thu May 07 01:42:56.270228 2026] [:error] [pid 9653:tid 9714] [client 20.9.85.117:57199] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aft9oKhJ49Xc4dqq0B5zogAAABA"]
[Thu May 07 01:42:56.646153 2026] [:error] [pid 482:tid 502] [client 20.9.85.117:57188] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aft9oMxs8HOc_nWgOW6eYwAAAdI"]
[Thu May 07 01:42:57.021835 2026] [:error] [pid 9789:tid 9793] [client 20.9.85.117:57291] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "aft9oT_YStPJSCHPkUXTbAAAAEI"]
[Thu May 07 01:42:57.396205 2026] [:error] [pid 592:tid 605] [client 20.9.85.117:57169] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aft9oZiX28mb6xLi2PzH7QAAAok"]
[Thu May 07 01:42:57.771215 2026] [:error] [pid 592:tid 610] [client 20.9.85.117:57181] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aft9oZiX28mb6xLi2PzH7wAAAo4"]
[Thu May 07 01:42:58.145534 2026] [:error] [pid 592:tid 606] [client 20.9.85.117:57089] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aft9opiX28mb6xLi2PzH8QAAAoo"]
[Thu May 07 01:42:58.518455 2026] [:error] [pid 13414:tid 13438] [client 20.9.85.117:57167] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "aft9okuJQpWjVpJTu_k9PwAAARY"]
[Thu May 07 01:42:58.894305 2026] [:error] [pid 9653:tid 9707] [client 20.9.85.117:57108] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aft9oqhJ49Xc4dqq0B5zqgAAAAk"]
[Thu May 07 01:42:59.271812 2026] [:error] [pid 9653:tid 9716] [client 20.9.85.117:57157] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aft9o6hJ49Xc4dqq0B5zrQAAABI"]
[Thu May 07 01:42:59.649562 2026] [:error] [pid 9659:tid 9748] [client 20.9.85.117:57222] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aft9o_wJnWjd8JHpBtu2qwAAAM4"]
[Thu May 07 01:43:00.025016 2026] [:error] [pid 9653:tid 9699] [client 20.9.85.117:57194] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "aft9pKhJ49Xc4dqq0B5zsAAAAAE"]
[Thu May 07 01:43:00.404392 2026] [:error] [pid 13414:tid 13436] [client 20.9.85.117:57183] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aft9pEuJQpWjVpJTu_k9QAAAARQ"]
[Thu May 07 01:43:00.780763 2026] [:error] [pid 9664:tid 9776] [client 20.9.85.117:57125] [client 20.9.85.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "aft9pAH4OZbrg1SjsBN2MgAAAI4"]
[Thu May 07 01:43:01.168278 2026] [proxy_fcgi:error] [pid 9659:tid 9757] [client 20.9.85.117:57211] AH01071: Got error 'Primary script unknown'
[Thu May 07 01:43:01.360724 2026] [proxy_fcgi:error] [pid 9659:tid 9749] [client 20.9.85.117:57211] AH01071: Got error 'Primary script unknown'
[Thu May 07 02:05:01.581171 2026] [:error] [pid 9664:tid 9765] [client 20.104.207.18:60489] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuCzQH4OZbrg1SjsBN99AAAAIM"]
[Thu May 07 02:05:02.029882 2026] [:error] [pid 13414:tid 13427] [client 20.104.207.18:60502] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuCzkuJQpWjVpJTu_lARwAAAQs"]
[Thu May 07 02:05:02.450628 2026] [:error] [pid 9659:tid 9748] [client 20.104.207.18:60481] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuCzvwJnWjd8JHpBtu5yQAAAM4"]
[Thu May 07 02:05:02.894081 2026] [:error] [pid 482:tid 499] [client 20.104.207.18:60417] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afuCzsxs8HOc_nWgOW6j8AAAAc8"]
[Thu May 07 04:46:00.564616 2026] [:error] [pid 29710:tid 29725] [client 170.106.15.3:32880] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afuoiP0atTQld9Y2ht_GiwAAAM0"]
[Thu May 07 06:19:06.726070 2026] [:error] [pid 4539:tid 4555] [client 170.106.152.218:37130] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afu-WoPEZE1565sDGnw5UgAAAQ4"]
[Thu May 07 07:43:26.438370 2026] [proxy_fcgi:error] [pid 29606:tid 29663] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:26.631389 2026] [proxy_fcgi:error] [pid 29606:tid 29655] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:26.825726 2026] [proxy_fcgi:error] [pid 29606:tid 29648] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:27.017649 2026] [proxy_fcgi:error] [pid 29606:tid 29645] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:27.209006 2026] [proxy_fcgi:error] [pid 29606:tid 29643] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:27.404561 2026] [proxy_fcgi:error] [pid 29606:tid 29659] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:27.609908 2026] [proxy_fcgi:error] [pid 29606:tid 29644] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:27.804190 2026] [proxy_fcgi:error] [pid 29606:tid 29653] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:27.997473 2026] [proxy_fcgi:error] [pid 29606:tid 29655] [client 20.9.31.235:44881] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:43:28.416098 2026] [:error] [pid 29606:tid 29641] [client 20.9.31.235:44881] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSIBR5HjZ1PlSAiKuEUgAAAEA"]
[Thu May 07 07:43:29.873632 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:50170] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSIf0atTQld9Y2ht8QYwAAANE"]
[Thu May 07 07:43:32.038087 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:43040] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSJP0atTQld9Y2ht8QZwAAANU"]
[Thu May 07 07:43:33.038127 2026] [:error] [pid 29710:tid 29720] [client 20.9.31.235:34828] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSJf0atTQld9Y2ht8QawAAAMg"]
[Thu May 07 07:43:34.557930 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:44902] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "afvSJv0atTQld9Y2ht8QbgAAAMk"]
[Thu May 07 07:43:35.038498 2026] [:error] [pid 29605:tid 29615] [client 20.9.31.235:50129] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "afvSJ4nxrTjETioEY0T-uwAAAAE"]
[Thu May 07 07:43:35.985674 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:42474] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "afvSJ6bP7TJOAh7WSUOSrAAAAJQ"]
[Thu May 07 07:43:36.992749 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:41140] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "afvSKP0atTQld9Y2ht8QdQAAANg"]
[Thu May 07 07:43:38.258347 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:41124] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/wp-info.php"] [unique_id "afvSKoPEZE1565sDGnxxFgAAAQU"]
[Thu May 07 07:43:39.245348 2026] [:error] [pid 29605:tid 29637] [client 20.9.31.235:47397] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/wp-info.php"] [unique_id "afvSK4nxrTjETioEY0T-vwAAABc"]
[Thu May 07 07:43:40.648987 2026] [:error] [pid 29605:tid 29635] [client 20.9.31.235:43037] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/wp-info.php"] [unique_id "afvSLInxrTjETioEY0T-wgAAABU"]
[Thu May 07 07:43:41.645097 2026] [:error] [pid 29605:tid 29636] [client 20.9.31.235:39690] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/wp-info.php"] [unique_id "afvSLYnxrTjETioEY0T-xAAAABY"]
[Thu May 07 07:43:42.810166 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:39685] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afvSLoPEZE1565sDGnxxGwAAAQA"]
[Thu May 07 07:43:44.065289 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:50146] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afvSMP0atTQld9Y2ht8QeQAAAM4"]
[Thu May 07 07:43:44.762161 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:47399] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afvSMKbP7TJOAh7WSUOSugAAAIU"]
[Thu May 07 07:43:45.588465 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:44912] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colour.php"] [unique_id "afvSMf0atTQld9Y2ht8QegAAANc"]
[Thu May 07 07:43:46.766031 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:41853] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/half.php"] [unique_id "afvSMqbP7TJOAh7WSUOSxAAAAIk"]
[Thu May 07 07:43:47.904785 2026] [:error] [pid 4539:tid 4556] [client 20.9.31.235:41100] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/half.php"] [unique_id "afvSM4PEZE1565sDGnxxKAAAAQ8"]
[Thu May 07 07:43:48.934441 2026] [:error] [pid 29606:tid 29650] [client 20.9.31.235:43071] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/half.php"] [unique_id "afvSNBR5HjZ1PlSAiKuEaAAAAEk"]
[Thu May 07 07:43:50.259761 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:47404] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/half.php"] [unique_id "afvSNv0atTQld9Y2ht8QfwAAAM0"]
[Thu May 07 07:43:52.797143 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:42483] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2P.php"] [unique_id "afvSOKbP7TJOAh7WSUOS0gAAAIk"]
[Thu May 07 07:43:53.910035 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:44865] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2P.php"] [unique_id "afvSOYPEZE1565sDGnxxNgAAAQA"]
[Thu May 07 07:43:56.230987 2026] [:error] [pid 4539:tid 4552] [client 20.9.31.235:42480] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2P.php"] [unique_id "afvSPIPEZE1565sDGnxxRAAAAQs"]
[Thu May 07 07:43:57.325591 2026] [:error] [pid 29606:tid 29649] [client 20.9.31.235:41108] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2P.php"] [unique_id "afvSPRR5HjZ1PlSAiKuEbQAAAEg"]
[Thu May 07 07:43:59.077534 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:50168] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afvSP4PEZE1565sDGnxxTQAAAQ4"]
[Thu May 07 07:44:00.421972 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:34871] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afvSQIPEZE1565sDGnxxUwAAAQU"]
[Thu May 07 07:44:01.177967 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:42486] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afvSQabP7TJOAh7WSUOS2gAAAJA"]
[Thu May 07 07:44:02.010996 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:43020] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tires.php"] [unique_id "afvSQv0atTQld9Y2ht8QigAAANc"]
[Thu May 07 07:44:02.823602 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:34832] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afvSQv0atTQld9Y2ht8QjgAAANU"]
[Thu May 07 07:44:03.605027 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:50152] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afvSQ6bP7TJOAh7WSUOS3AAAAIk"]
[Thu May 07 07:44:04.920574 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:34857] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afvSRKbP7TJOAh7WSUOS4QAAAJM"]
[Thu May 07 07:44:06.415662 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:42491] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aevly.php"] [unique_id "afvSRqbP7TJOAh7WSUOS5QAAAIE"]
[Thu May 07 07:44:07.400142 2026] [:error] [pid 29606:tid 29657] [client 20.9.31.235:39693] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvSRxR5HjZ1PlSAiKuEbwAAAFA"]
[Thu May 07 07:44:08.464770 2026] [:error] [pid 29606:tid 29644] [client 20.9.31.235:44914] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvSSBR5HjZ1PlSAiKuEcAAAAEM"]
[Thu May 07 07:44:09.598272 2026] [:error] [pid 29605:tid 29629] [client 20.9.31.235:44867] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvSSYnxrTjETioEY0T-1AAAAA8"]
[Thu May 07 07:44:10.306319 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:41111] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afvSSqbP7TJOAh7WSUOS7AAAAIk"]
[Thu May 07 07:44:11.195927 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:47360] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afvSS4nxrTjETioEY0T-2AAAAAA"]
[Thu May 07 07:44:11.980511 2026] [:error] [pid 29605:tid 29632] [client 20.9.31.235:41131] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afvSS4nxrTjETioEY0T-3AAAABI"]
[Thu May 07 07:44:12.931550 2026] [:error] [pid 4539:tid 4560] [client 20.9.31.235:50164] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afvSTIPEZE1565sDGnxxZwAAARM"]
[Thu May 07 07:44:13.850002 2026] [:error] [pid 29605:tid 29623] [client 20.9.31.235:39682] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-block.php"] [unique_id "afvSTYnxrTjETioEY0T-4AAAAAk"]
[Thu May 07 07:44:16.179834 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:42468] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/like.php"] [unique_id "afvSUKbP7TJOAh7WSUOS8wAAAIE"]
[Thu May 07 07:44:17.716405 2026] [:error] [pid 4539:tid 4545] [client 20.9.31.235:42453] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/like.php"] [unique_id "afvSUYPEZE1565sDGnxxcgAAAQQ"]
[Thu May 07 07:44:18.277828 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:42479] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/like.php"] [unique_id "afvSUoPEZE1565sDGnxxdgAAAQU"]
[Thu May 07 07:44:19.056047 2026] [:error] [pid 4539:tid 4564] [client 20.9.31.235:41128] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/like.php"] [unique_id "afvSU4PEZE1565sDGnxxewAAARc"]
[Thu May 07 07:44:20.266312 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:42494] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olik.php"] [unique_id "afvSVIPEZE1565sDGnxxggAAAQ4"]
[Thu May 07 07:44:23.564081 2026] [:error] [pid 29607:tid 29682] [client 20.9.31.235:34846] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olik.php"] [unique_id "afvSV6bP7TJOAh7WSUOS_gAAAI4"]
[Thu May 07 07:44:24.463050 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:44874] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olik.php"] [unique_id "afvSWP0atTQld9Y2ht8QqAAAANU"]
[Thu May 07 07:44:25.475675 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:50131] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/olik.php"] [unique_id "afvSWYPEZE1565sDGnxxjgAAAQA"]
[Thu May 07 07:44:26.150509 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:50173] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "afvSWoPEZE1565sDGnxxjwAAAQg"]
[Thu May 07 07:44:26.785661 2026] [:error] [pid 4539:tid 4545] [client 20.9.31.235:34836] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "afvSWoPEZE1565sDGnxxkQAAAQQ"]
[Thu May 07 07:44:27.847750 2026] [:error] [pid 29605:tid 29624] [client 20.9.31.235:34827] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/h.php"] [unique_id "afvSW4nxrTjETioEY0T-6QAAAAo"]
[Thu May 07 07:44:28.719880 2026] [proxy_fcgi:error] [pid 4539:tid 4544] [client 20.9.31.235:41099] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:28.909008 2026] [proxy_fcgi:error] [pid 4539:tid 4565] [client 20.9.31.235:41099] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:29.101948 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.9.31.235:41099] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:29.287339 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:41099] [client 20.9.31.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "afvSXYPEZE1565sDGnxxmwAAAQc"]
[Thu May 07 07:44:30.076663 2026] [proxy_fcgi:error] [pid 29606:tid 29648] [client 20.9.31.235:47406] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:30.286141 2026] [proxy_fcgi:error] [pid 29606:tid 29641] [client 20.9.31.235:47406] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:30.480514 2026] [proxy_fcgi:error] [pid 29606:tid 29651] [client 20.9.31.235:47406] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:30.694607 2026] [proxy_fcgi:error] [pid 29606:tid 29643] [client 20.9.31.235:47406] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:30.887859 2026] [proxy_fcgi:error] [pid 29606:tid 29659] [client 20.9.31.235:47406] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:44:31.712031 2026] [:error] [pid 29606:tid 29664] [client 20.9.31.235:47406] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/configuration.php"] [unique_id "afvSXxR5HjZ1PlSAiKuElgAAAFc"]
[Thu May 07 07:44:32.852131 2026] [:error] [pid 29607:tid 29679] [client 20.9.31.235:50133] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/configuration.php"] [unique_id "afvSYKbP7TJOAh7WSUOTBwAAAIs"]
[Thu May 07 07:44:34.372579 2026] [:error] [pid 4539:tid 4560] [client 20.9.31.235:47392] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/configuration.php"] [unique_id "afvSYoPEZE1565sDGnxxrAAAARM"]
[Thu May 07 07:44:35.343521 2026] [:error] [pid 29605:tid 29621] [client 20.9.31.235:43056] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/configuration.php"] [unique_id "afvSY4nxrTjETioEY0T-9QAAAAc"]
[Thu May 07 07:44:37.288689 2026] [:error] [pid 4539:tid 4558] [client 20.9.31.235:42478] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSZYPEZE1565sDGnxxuQAAARE"]
[Thu May 07 07:44:38.079109 2026] [:error] [pid 4539:tid 4560] [client 20.9.31.235:41090] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSZoPEZE1565sDGnxxuwAAARM"]
[Thu May 07 07:44:38.693187 2026] [:error] [pid 29606:tid 29648] [client 20.9.31.235:50158] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSZhR5HjZ1PlSAiKuEmwAAAEc"]
[Thu May 07 07:44:39.305962 2026] [:error] [pid 4539:tid 4551] [client 20.9.31.235:42471] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/"] [unique_id "afvSZ4PEZE1565sDGnxxwgAAAQo"]
[Thu May 07 07:44:40.026445 2026] [:error] [pid 29607:tid 29689] [client 20.9.31.235:41113] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwu.php"] [unique_id "afvSaKbP7TJOAh7WSUOTEwAAAJU"]
[Thu May 07 07:44:40.568184 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:43033] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwu.php"] [unique_id "afvSaP0atTQld9Y2ht8QswAAAME"]
[Thu May 07 07:44:41.173019 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:44864] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwu.php"] [unique_id "afvSaYnxrTjETioEY0T_AQAAAAw"]
[Thu May 07 07:44:41.994913 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:43021] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwu.php"] [unique_id "afvSaf0atTQld9Y2ht8QtgAAANE"]
[Thu May 07 07:44:42.674102 2026] [:error] [pid 29605:tid 29622] [client 20.9.31.235:43018] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwa.php"] [unique_id "afvSaonxrTjETioEY0T_BAAAAAg"]
[Thu May 07 07:44:43.161193 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:34088] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwa.php"] [unique_id "afvSa4PEZE1565sDGnxxzwAAARA"]
[Thu May 07 07:44:43.617555 2026] [:error] [pid 29710:tid 29717] [client 20.9.31.235:42446] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwa.php"] [unique_id "afvSa_0atTQld9Y2ht8QwQAAAMU"]
[Thu May 07 07:44:44.117595 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:34833] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uwa.php"] [unique_id "afvSbP0atTQld9Y2ht8QwwAAAME"]
[Thu May 07 07:44:44.523098 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:41122] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/crgio.php"] [unique_id "afvSbP0atTQld9Y2ht8QxQAAANE"]
[Thu May 07 07:44:45.015020 2026] [:error] [pid 29605:tid 29632] [client 20.9.31.235:42456] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/crgio.php"] [unique_id "afvSbYnxrTjETioEY0T_CQAAABI"]
[Thu May 07 07:44:45.580358 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:42477] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/crgio.php"] [unique_id "afvSbYPEZE1565sDGnxx0wAAAQA"]
[Thu May 07 07:44:46.109326 2026] [:error] [pid 4539:tid 4544] [client 20.9.31.235:44885] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/crgio.php"] [unique_id "afvSboPEZE1565sDGnxx2QAAAQM"]
[Thu May 07 07:44:46.525414 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:42487] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geforce.php"] [unique_id "afvSboPEZE1565sDGnxx3gAAAQI"]
[Thu May 07 07:44:46.954658 2026] [:error] [pid 29607:tid 29668] [client 20.9.31.235:42402] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geforce.php"] [unique_id "afvSbqbP7TJOAh7WSUOTIAAAAIA"]
[Thu May 07 07:44:47.467928 2026] [:error] [pid 4539:tid 4544] [client 20.9.31.235:39696] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geforce.php"] [unique_id "afvSb4PEZE1565sDGnxx6gAAAQM"]
[Thu May 07 07:44:48.050616 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:43065] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/geforce.php"] [unique_id "afvScP0atTQld9Y2ht8QywAAANQ"]
[Thu May 07 07:44:48.463156 2026] [:error] [pid 29607:tid 29671] [client 20.9.31.235:34841] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afvScKbP7TJOAh7WSUOTKAAAAIM"]
[Thu May 07 07:44:48.976065 2026] [:error] [pid 4539:tid 4561] [client 20.9.31.235:44896] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afvScIPEZE1565sDGnxx7AAAARQ"]
[Thu May 07 07:44:49.563428 2026] [:error] [pid 29607:tid 29680] [client 20.9.31.235:44875] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afvScabP7TJOAh7WSUOTLwAAAIw"]
[Thu May 07 07:44:50.186559 2026] [:error] [pid 29606:tid 29654] [client 20.9.31.235:34858] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-load.php"] [unique_id "afvSchR5HjZ1PlSAiKuEsgAAAE0"]
[Thu May 07 07:44:51.192372 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:42467] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "afvSc4PEZE1565sDGnxx8gAAARg"]
[Thu May 07 07:44:51.915671 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:34862] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "afvSc_0atTQld9Y2ht8Q0gAAANE"]
[Thu May 07 07:44:52.873804 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:45441] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "afvSdInxrTjETioEY0T_FwAAAAs"]
[Thu May 07 07:44:53.990858 2026] [:error] [pid 29605:tid 29616] [client 20.9.31.235:47417] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/byypas.php"] [unique_id "afvSdYnxrTjETioEY0T_HQAAAAI"]
[Thu May 07 07:44:54.712494 2026] [:error] [pid 29605:tid 29634] [client 20.9.31.235:43057] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.sghb.php"] [unique_id "afvSdonxrTjETioEY0T_IAAAABQ"]
[Thu May 07 07:44:55.418841 2026] [:error] [pid 29710:tid 29727] [client 20.9.31.235:42444] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.sghb.php"] [unique_id "afvSd_0atTQld9Y2ht8Q1QAAAM8"]
[Thu May 07 07:44:55.951540 2026] [:error] [pid 29607:tid 29681] [client 20.9.31.235:47408] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.sghb.php"] [unique_id "afvSd6bP7TJOAh7WSUOTQAAAAI0"]
[Thu May 07 07:44:56.570336 2026] [:error] [pid 4539:tid 4562] [client 20.9.31.235:50143] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.sghb.php"] [unique_id "afvSeIPEZE1565sDGnxx9gAAARU"]
[Thu May 07 07:44:57.030756 2026] [:error] [pid 29605:tid 29627] [client 20.9.31.235:44905] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoko.php"] [unique_id "afvSeYnxrTjETioEY0T_JAAAAA0"]
[Thu May 07 07:44:57.776879 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:42382] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoko.php"] [unique_id "afvSef0atTQld9Y2ht8Q2gAAAMo"]
[Thu May 07 07:44:58.329954 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:39715] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoko.php"] [unique_id "afvSeoPEZE1565sDGnxx_QAAAQA"]
[Thu May 07 07:44:59.010038 2026] [:error] [pid 29607:tid 29678] [client 20.9.31.235:42457] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoko.php"] [unique_id "afvSe6bP7TJOAh7WSUOTTQAAAIo"]
[Thu May 07 07:44:59.618346 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:42465] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class892.php"] [unique_id "afvSe_0atTQld9Y2ht8Q6wAAANc"]
[Thu May 07 07:45:00.139918 2026] [:error] [pid 29606:tid 29663] [client 20.9.31.235:47371] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class892.php"] [unique_id "afvSfBR5HjZ1PlSAiKuEwQAAAFY"]
[Thu May 07 07:45:01.093811 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:34074] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class892.php"] [unique_id "afvSff0atTQld9Y2ht8Q9wAAANE"]
[Thu May 07 07:45:01.585644 2026] [:error] [pid 29605:tid 29635] [client 20.9.31.235:43022] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class892.php"] [unique_id "afvSfYnxrTjETioEY0T_KgAAABU"]
[Thu May 07 07:45:02.122772 2026] [:error] [pid 29606:tid 29650] [client 20.9.31.235:34851] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/locales.php"] [unique_id "afvSfhR5HjZ1PlSAiKuExQAAAEk"]
[Thu May 07 07:45:02.643148 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:39727] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/locales.php"] [unique_id "afvSfv0atTQld9Y2ht8Q_QAAAMM"]
[Thu May 07 07:45:03.176873 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:47367] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/locales.php"] [unique_id "afvSf_0atTQld9Y2ht8RAAAAAMo"]
[Thu May 07 07:45:03.635091 2026] [:error] [pid 4539:tid 4560] [client 20.9.31.235:41092] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/locales.php"] [unique_id "afvSf4PEZE1565sDGnxyBQAAARM"]
[Thu May 07 07:45:04.673140 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:41093] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "afvSgIPEZE1565sDGnxyBwAAARA"]
[Thu May 07 07:45:05.370859 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:43012] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "afvSgYPEZE1565sDGnxyDAAAAQA"]
[Thu May 07 07:45:06.986310 2026] [:error] [pid 4539:tid 4551] [client 20.9.31.235:41120] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "afvSgoPEZE1565sDGnxyFgAAAQo"]
[Thu May 07 07:45:07.605669 2026] [:error] [pid 29607:tid 29674] [client 20.9.31.235:34844] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "afvSg6bP7TJOAh7WSUOTVgAAAIY"]
[Thu May 07 07:45:08.519266 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:39731] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pucci.php"] [unique_id "afvShP0atTQld9Y2ht8RDAAAANA"]
[Thu May 07 07:45:09.134508 2026] [:error] [pid 29710:tid 29719] [client 20.9.31.235:43579] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pucci.php"] [unique_id "afvShf0atTQld9Y2ht8REAAAAMc"]
[Thu May 07 07:45:09.665046 2026] [:error] [pid 4539:tid 4556] [client 20.9.31.235:43038] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pucci.php"] [unique_id "afvShYPEZE1565sDGnxyIwAAAQ8"]
[Thu May 07 07:45:10.281735 2026] [:error] [pid 29607:tid 29683] [client 20.9.31.235:34874] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pucci.php"] [unique_id "afvShqbP7TJOAh7WSUOTWwAAAI8"]
[Thu May 07 07:45:11.065845 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:41138] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/details/"] [unique_id "afvSh6bP7TJOAh7WSUOTXAAAAJA"]
[Thu May 07 07:45:12.053822 2026] [:error] [pid 29606:tid 29665] [client 20.9.31.235:42383] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/details/"] [unique_id "afvSiBR5HjZ1PlSAiKuExwAAAFg"]
[Thu May 07 07:45:12.556148 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:41808] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/details/"] [unique_id "afvSiIPEZE1565sDGnxyMAAAAQc"]
[Thu May 07 07:45:13.809399 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:50115] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/details/"] [unique_id "afvSif0atTQld9Y2ht8RHAAAAMo"]
[Thu May 07 07:45:14.273119 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:34847] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "afvSioPEZE1565sDGnxyNQAAAQU"]
[Thu May 07 07:45:14.794868 2026] [:error] [pid 4539:tid 4552] [client 20.9.31.235:47379] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "afvSioPEZE1565sDGnxyNgAAAQs"]
[Thu May 07 07:45:16.920031 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:41794] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "afvSjP0atTQld9Y2ht8RJQAAAMQ"]
[Thu May 07 07:45:18.917842 2026] [:error] [pid 29606:tid 29648] [client 20.9.31.235:50157] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.dj/index.php"] [unique_id "afvSjhR5HjZ1PlSAiKuEzgAAAEc"]
[Thu May 07 07:45:19.680479 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:42441] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "afvSj4PEZE1565sDGnxyPQAAAQI"]
[Thu May 07 07:45:20.851575 2026] [:error] [pid 29607:tid 29681] [client 20.9.31.235:43014] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "afvSkKbP7TJOAh7WSUOTZQAAAI0"]
[Thu May 07 07:45:22.373273 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:41143] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "afvSkv0atTQld9Y2ht8RNwAAAMw"]
[Thu May 07 07:45:23.359928 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:39680] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/audio/"] [unique_id "afvSk_0atTQld9Y2ht8RPQAAANc"]
[Thu May 07 07:45:24.281270 2026] [:error] [pid 4539:tid 4547] [client 20.9.31.235:41110] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "afvSlIPEZE1565sDGnxyQAAAAQY"]
[Thu May 07 07:45:24.954959 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:34825] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "afvSlP0atTQld9Y2ht8RRQAAANY"]
[Thu May 07 07:45:25.730668 2026] [:error] [pid 4539:tid 4544] [client 20.9.31.235:42387] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "afvSlYPEZE1565sDGnxyQwAAAQM"]
[Thu May 07 07:45:26.327837 2026] [:error] [pid 4539:tid 4556] [client 20.9.31.235:43024] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.tmb/"] [unique_id "afvSloPEZE1565sDGnxyRAAAAQ8"]
[Thu May 07 07:45:26.875992 2026] [:error] [pid 4539:tid 4559] [client 20.9.31.235:34853] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "afvSloPEZE1565sDGnxyRQAAARI"]
[Thu May 07 07:45:27.282282 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:42472] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "afvSl6bP7TJOAh7WSUOTZgAAAIU"]
[Thu May 07 07:45:27.874948 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:34839] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "afvSl_0atTQld9Y2ht8RTQAAAMQ"]
[Thu May 07 07:45:28.307942 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:44898] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "afvSmIPEZE1565sDGnxyTgAAARg"]
[Thu May 07 07:45:28.778158 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:43026] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no20.php"] [unique_id "afvSmIPEZE1565sDGnxyUQAAAQI"]
[Thu May 07 07:45:29.333540 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:43536] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no20.php"] [unique_id "afvSmabP7TJOAh7WSUOTZwAAAJc"]
[Thu May 07 07:45:29.974333 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:44869] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no20.php"] [unique_id "afvSmabP7TJOAh7WSUOTaAAAAJY"]
[Thu May 07 07:45:30.625737 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:39695] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/no20.php"] [unique_id "afvSmv0atTQld9Y2ht8RWAAAAMk"]
[Thu May 07 07:45:31.194959 2026] [proxy_fcgi:error] [pid 29606:tid 29662] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:31.576386 2026] [proxy_fcgi:error] [pid 29606:tid 29648] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:31.790031 2026] [proxy_fcgi:error] [pid 29606:tid 29655] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:32.425080 2026] [proxy_fcgi:error] [pid 29606:tid 29650] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:32.652161 2026] [proxy_fcgi:error] [pid 29606:tid 29654] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:32.871973 2026] [proxy_fcgi:error] [pid 29606:tid 29649] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:33.099058 2026] [proxy_fcgi:error] [pid 29606:tid 29643] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:33.294498 2026] [proxy_fcgi:error] [pid 29606:tid 29646] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:33.507626 2026] [proxy_fcgi:error] [pid 29606:tid 29659] [client 20.9.31.235:44886] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:45:33.730823 2026] [:error] [pid 29606:tid 29651] [client 20.9.31.235:44886] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "afvSnRR5HjZ1PlSAiKuE5gAAAEo"]
[Thu May 07 07:45:34.250160 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:41149] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "afvSnqbP7TJOAh7WSUOTcgAAAJM"]
[Thu May 07 07:45:34.807052 2026] [:error] [pid 29606:tid 29665] [client 20.9.31.235:42440] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "afvSnhR5HjZ1PlSAiKuE6QAAAFg"]
[Thu May 07 07:45:35.436472 2026] [:error] [pid 29607:tid 29670] [client 20.9.31.235:42451] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/index.php"] [unique_id "afvSn6bP7TJOAh7WSUOTdwAAAII"]
[Thu May 07 07:45:35.862050 2026] [:error] [pid 4539:tid 4558] [client 20.9.31.235:43032] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSn4PEZE1565sDGnxyWwAAARE"]
[Thu May 07 07:45:36.337263 2026] [:error] [pid 29606:tid 29652] [client 20.9.31.235:42431] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSoBR5HjZ1PlSAiKuE7QAAAEs"]
[Thu May 07 07:45:36.787585 2026] [:error] [pid 29606:tid 29663] [client 20.9.31.235:39688] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSoBR5HjZ1PlSAiKuE8QAAAFY"]
[Thu May 07 07:45:37.373793 2026] [:error] [pid 29606:tid 29642] [client 20.9.31.235:42424] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSoRR5HjZ1PlSAiKuE8wAAAEE"]
[Thu May 07 07:45:37.869550 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:42460] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "afvSoabP7TJOAh7WSUOTfgAAAJA"]
[Thu May 07 07:45:38.530553 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:42452] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "afvSoonxrTjETioEY0T_RgAAAAs"]
[Thu May 07 07:45:39.003802 2026] [:error] [pid 29605:tid 29620] [client 20.9.31.235:42469] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "afvSo4nxrTjETioEY0T_RwAAAAY"]
[Thu May 07 07:45:39.531357 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:44876] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amdin.php"] [unique_id "afvSo4PEZE1565sDGnxyZQAAAQg"]
[Thu May 07 07:45:40.482417 2026] [:error] [pid 29605:tid 29616] [client 20.9.31.235:50172] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "afvSpInxrTjETioEY0T_SgAAAAI"]
[Thu May 07 07:45:41.406160 2026] [:error] [pid 29605:tid 29638] [client 20.9.31.235:47395] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "afvSpYnxrTjETioEY0T_TAAAABg"]
[Thu May 07 07:45:42.705573 2026] [:error] [pid 29605:tid 29618] [client 20.9.31.235:47370] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "afvSponxrTjETioEY0T_TwAAAAQ"]
[Thu May 07 07:45:43.967004 2026] [:error] [pid 29710:tid 29719] [client 20.9.31.235:42412] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/huya.php"] [unique_id "afvSp_0atTQld9Y2ht8RcwAAAMc"]
[Thu May 07 07:45:44.880312 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:41142] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "afvSqKbP7TJOAh7WSUOTlAAAAJQ"]
[Thu May 07 07:45:46.077945 2026] [:error] [pid 29606:tid 29661] [client 20.9.31.235:43529] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "afvSqhR5HjZ1PlSAiKuE_AAAAFQ"]
[Thu May 07 07:45:47.001937 2026] [:error] [pid 29606:tid 29660] [client 20.9.31.235:44866] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "afvSqxR5HjZ1PlSAiKuE_gAAAFM"]
[Thu May 07 07:45:47.701498 2026] [:error] [pid 4539:tid 4547] [client 20.9.31.235:43069] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/puc.php"] [unique_id "afvSq4PEZE1565sDGnxybwAAAQY"]
[Thu May 07 07:45:48.246421 2026] [:error] [pid 29607:tid 29668] [client 20.9.31.235:34877] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "afvSrKbP7TJOAh7WSUOTnQAAAIA"]
[Thu May 07 07:45:48.676340 2026] [:error] [pid 29606:tid 29647] [client 20.9.31.235:43059] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "afvSrBR5HjZ1PlSAiKuFAAAAAEY"]
[Thu May 07 07:45:49.477181 2026] [:error] [pid 4539:tid 4554] [client 20.9.31.235:47421] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "afvSrYPEZE1565sDGnxydgAAAQ0"]
[Thu May 07 07:45:50.214400 2026] [:error] [pid 29607:tid 29680] [client 20.9.31.235:41139] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "afvSrqbP7TJOAh7WSUOToAAAAIw"]
[Thu May 07 07:45:50.857047 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:39684] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "afvSroPEZE1565sDGnxyfQAAAQc"]
[Thu May 07 07:45:51.517515 2026] [:error] [pid 29606:tid 29644] [client 20.9.31.235:42482] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "afvSrxR5HjZ1PlSAiKuFAgAAAEM"]
[Thu May 07 07:45:52.307364 2026] [:error] [pid 4539:tid 4564] [client 20.9.31.235:39691] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "afvSsIPEZE1565sDGnxyhAAAARc"]
[Thu May 07 07:45:53.096487 2026] [:error] [pid 4539:tid 4558] [client 20.9.31.235:38562] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ewp.php"] [unique_id "afvSsYPEZE1565sDGnxyiQAAARE"]
[Thu May 07 07:45:53.842610 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:43048] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSsYPEZE1565sDGnxykQAAAQI"]
[Thu May 07 07:45:54.421671 2026] [:error] [pid 29605:tid 29622] [client 20.9.31.235:41106] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSsonxrTjETioEY0T_VAAAAAg"]
[Thu May 07 07:45:54.995342 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:41115] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSsqbP7TJOAh7WSUOTrAAAAJM"]
[Thu May 07 07:45:55.895043 2026] [:error] [pid 29607:tid 29676] [client 20.9.31.235:34821] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dx.php"] [unique_id "afvSs6bP7TJOAh7WSUOTrgAAAIg"]
[Thu May 07 07:45:56.448657 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:43041] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "afvStIPEZE1565sDGnxynAAAAQc"]
[Thu May 07 07:45:57.591043 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:50145] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "afvStYPEZE1565sDGnxypAAAAQI"]
[Thu May 07 07:45:58.251363 2026] [:error] [pid 4539:tid 4559] [client 20.9.31.235:47423] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "afvStoPEZE1565sDGnxyqAAAARI"]
[Thu May 07 07:45:58.767933 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:50148] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "afvStoPEZE1565sDGnxyqgAAARA"]
[Thu May 07 07:45:59.478411 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:50171] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "afvSt_0atTQld9Y2ht8RkwAAAMQ"]
[Thu May 07 07:46:00.068785 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:47401] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "afvSuIPEZE1565sDGnxysAAAAQg"]
[Thu May 07 07:46:00.525790 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:50162] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "afvSuKbP7TJOAh7WSUOTwwAAAJg"]
[Thu May 07 07:46:01.106114 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:44871] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lupo.php"] [unique_id "afvSuf0atTQld9Y2ht8RlQAAANY"]
[Thu May 07 07:46:02.161773 2026] [:error] [pid 4539:tid 4556] [client 20.9.31.235:47422] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "afvSuoPEZE1565sDGnxywwAAAQ8"]
[Thu May 07 07:46:04.509565 2026] [:error] [pid 4539:tid 4553] [client 20.9.31.235:34097] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "afvSvIPEZE1565sDGnxy0wAAAQw"]
[Thu May 07 07:46:08.361294 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:45481] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "afvSwP0atTQld9Y2ht8RqQAAANg"]
[Thu May 07 07:46:09.997900 2026] [:error] [pid 29710:tid 29720] [client 20.9.31.235:44906] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/awa.php"] [unique_id "afvSwf0atTQld9Y2ht8RsAAAAMg"]
[Thu May 07 07:46:12.461794 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:41141] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afvSxInxrTjETioEY0T_YAAAAAw"]
[Thu May 07 07:46:16.137569 2026] [:error] [pid 29607:tid 29682] [client 20.9.31.235:44868] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afvSyKbP7TJOAh7WSUOT0AAAAI4"]
[Thu May 07 07:46:18.727716 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:39705] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afvSyv0atTQld9Y2ht8RwAAAANY"]
[Thu May 07 07:46:20.107355 2026] [:error] [pid 4539:tid 4551] [client 20.9.31.235:50112] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/popo.php"] [unique_id "afvSzIPEZE1565sDGnxzCwAAAQo"]
[Thu May 07 07:46:22.271571 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:34829] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "afvSzonxrTjETioEY0T_cwAAAAw"]
[Thu May 07 07:46:26.505311 2026] [:error] [pid 29606:tid 29647] [client 20.9.31.235:34849] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "afvS0hR5HjZ1PlSAiKuFIAAAAEY"]
[Thu May 07 07:46:30.284303 2026] [:error] [pid 29606:tid 29648] [client 20.9.31.235:44918] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "afvS1hR5HjZ1PlSAiKuFJwAAAEc"]
[Thu May 07 07:46:32.048780 2026] [:error] [pid 29606:tid 29646] [client 20.9.31.235:34095] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/13.php"] [unique_id "afvS2BR5HjZ1PlSAiKuFLQAAAEU"]
[Thu May 07 07:46:33.493291 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:33.818341 2026] [proxy_fcgi:error] [pid 4539:tid 4544] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:34.037116 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:34.291261 2026] [proxy_fcgi:error] [pid 4539:tid 4565] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:34.960062 2026] [proxy_fcgi:error] [pid 4539:tid 4551] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:35.229658 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:35.547212 2026] [proxy_fcgi:error] [pid 4539:tid 4562] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:35.964131 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:36.202795 2026] [proxy_fcgi:error] [pid 4539:tid 4561] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:36.491463 2026] [proxy_fcgi:error] [pid 4539:tid 4560] [client 20.9.31.235:47413] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:46:36.683269 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:47413] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "afvS3IPEZE1565sDGnxzHgAAAQU"]
[Thu May 07 07:46:38.369618 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:34059] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "afvS3v0atTQld9Y2ht8R0QAAAMQ"]
[Thu May 07 07:46:40.130681 2026] [:error] [pid 29605:tid 29622] [client 20.9.31.235:41134] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "afvS4InxrTjETioEY0T_gwAAAAg"]
[Thu May 07 07:46:40.888504 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:43060] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2.php"] [unique_id "afvS4KbP7TJOAh7WSUOUAQAAAJg"]
[Thu May 07 07:46:41.880426 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:39724] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "afvS4abP7TJOAh7WSUOUAwAAAJQ"]
[Thu May 07 07:46:42.625666 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:34076] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "afvS4oPEZE1565sDGnxzJAAAAQA"]
[Thu May 07 07:46:44.917437 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:42495] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "afvS5IPEZE1565sDGnxzKgAAAQI"]
[Thu May 07 07:46:47.031851 2026] [:error] [pid 4539:tid 4554] [client 20.9.31.235:34835] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3.php"] [unique_id "afvS54PEZE1565sDGnxzLgAAAQ0"]
[Thu May 07 07:46:48.067383 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:34864] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "afvS6BR5HjZ1PlSAiKuFogAAAEI"]
[Thu May 07 07:46:50.387826 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:42435] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "afvS6v0atTQld9Y2ht8R3AAAAM4"]
[Thu May 07 07:46:51.706001 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:41112] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "afvS64PEZE1565sDGnxzMAAAAQk"]
[Thu May 07 07:46:52.816282 2026] [:error] [pid 4539:tid 4542] [client 20.9.31.235:43581] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/4.php"] [unique_id "afvS7IPEZE1565sDGnxzMgAAAQE"]
[Thu May 07 07:46:53.508123 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:41831] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "afvS7abP7TJOAh7WSUOUOgAAAJQ"]
[Thu May 07 07:46:54.312210 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:34840] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "afvS7qbP7TJOAh7WSUOUPQAAAIk"]
[Thu May 07 07:46:55.390192 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:34070] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "afvS76bP7TJOAh7WSUOUQgAAAJE"]
[Thu May 07 07:46:55.948171 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:47373] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/5.php"] [unique_id "afvS7_0atTQld9Y2ht8R4QAAANU"]
[Thu May 07 07:46:57.470708 2026] [:error] [pid 4539:tid 4552] [client 20.9.31.235:43045] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "afvS8YPEZE1565sDGnxzQwAAAQs"]
[Thu May 07 07:46:59.144932 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:50155] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "afvS8_0atTQld9Y2ht8R9AAAANc"]
[Thu May 07 07:47:01.424411 2026] [:error] [pid 4539:tid 4547] [client 20.9.31.235:39742] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "afvS9YPEZE1565sDGnxzUwAAAQY"]
[Thu May 07 07:47:02.994899 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:50156] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/6.php"] [unique_id "afvS9qbP7TJOAh7WSUOUYwAAAJQ"]
[Thu May 07 07:47:05.395285 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:50127] [client 20.9.31.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/nss.php"] [unique_id "afvS-f0atTQld9Y2ht8R_QAAAMs"]
[Thu May 07 07:47:06.564521 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:43525] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "afvS-oPEZE1565sDGnxzWwAAAQk"]
[Thu May 07 07:47:08.387797 2026] [:error] [pid 4539:tid 4545] [client 20.9.31.235:47394] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "afvS_IPEZE1565sDGnxzXQAAAQQ"]
[Thu May 07 07:47:09.491081 2026] [:error] [pid 29607:tid 29672] [client 20.9.31.235:41129] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "afvS_abP7TJOAh7WSUOUZgAAAIQ"]
[Thu May 07 07:47:10.251671 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:47385] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "afvS_hR5HjZ1PlSAiKuFuwAAAFI"]
[Thu May 07 07:47:10.809292 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:34060] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "afvS_hR5HjZ1PlSAiKuFvAAAAEI"]
[Thu May 07 07:47:11.501779 2026] [:error] [pid 29605:tid 29635] [client 20.9.31.235:47405] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "afvS_4nxrTjETioEY0T_kAAAABU"]
[Thu May 07 07:47:12.212517 2026] [:error] [pid 29606:tid 29658] [client 20.9.31.235:47366] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "afvTABR5HjZ1PlSAiKuFvgAAAFE"]
[Thu May 07 07:47:20.613573 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:41127] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "afvTCP0atTQld9Y2ht8SCwAAAMw"]
[Thu May 07 07:47:22.064356 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:44927] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "afvTCv0atTQld9Y2ht8SDQAAAMo"]
[Thu May 07 07:47:23.365438 2026] [:error] [pid 4539:tid 4562] [client 20.9.31.235:41125] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "afvTC4PEZE1565sDGnxzdAAAARU"]
[Thu May 07 07:47:24.650104 2026] [:error] [pid 4539:tid 4547] [client 20.9.31.235:42455] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "afvTDIPEZE1565sDGnxzegAAAQY"]
[Thu May 07 07:47:29.155554 2026] [:error] [pid 29605:tid 29633] [client 20.9.31.235:42459] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/nastar.php"] [unique_id "afvTEYnxrTjETioEY0T_mgAAABM"]
[Thu May 07 07:47:32.206890 2026] [:error] [pid 29606:tid 29650] [client 20.9.31.235:50161] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "afvTFBR5HjZ1PlSAiKuFzAAAAEk"]
[Thu May 07 07:47:34.439389 2026] [:error] [pid 29710:tid 29727] [client 20.9.31.235:44873] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "afvTFv0atTQld9Y2ht8SEgAAAM8"]
[Thu May 07 07:47:35.632736 2026] [:error] [pid 29607:tid 29689] [client 20.9.31.235:41133] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "afvTF6bP7TJOAh7WSUOUdwAAAJU"]
[Thu May 07 07:47:37.440287 2026] [proxy_fcgi:error] [pid 4539:tid 4546] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:37.731929 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:37.990198 2026] [proxy_fcgi:error] [pid 4539:tid 4552] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:38.182100 2026] [proxy_fcgi:error] [pid 4539:tid 4545] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:38.374704 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:38.628516 2026] [proxy_fcgi:error] [pid 4539:tid 4564] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:39.036685 2026] [proxy_fcgi:error] [pid 4539:tid 4558] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:39.228250 2026] [proxy_fcgi:error] [pid 4539:tid 4541] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:39.442276 2026] [proxy_fcgi:error] [pid 4539:tid 4551] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:39.676316 2026] [proxy_fcgi:error] [pid 4539:tid 4557] [client 20.9.31.235:39681] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:47:39.864525 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:39681] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "afvTG4PEZE1565sDGnxzlQAAARY"]
[Thu May 07 07:47:40.410529 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:34870] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "afvTHIPEZE1565sDGnxzlgAAAQk"]
[Thu May 07 07:47:41.243807 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:39737] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "afvTHYnxrTjETioEY0T_ngAAAAA"]
[Thu May 07 07:47:41.768938 2026] [:error] [pid 4539:tid 4554] [client 20.9.31.235:47418] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "afvTHYPEZE1565sDGnxzmgAAAQ0"]
[Thu May 07 07:47:42.452912 2026] [:error] [pid 29605:tid 29632] [client 20.9.31.235:44911] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "afvTHonxrTjETioEY0T_nwAAABI"]
[Thu May 07 07:47:43.107924 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:43008] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "afvTH_0atTQld9Y2ht8SIQAAANU"]
[Thu May 07 07:47:45.036997 2026] [:error] [pid 4539:tid 4542] [client 20.9.31.235:50119] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "afvTIYPEZE1565sDGnxznQAAAQE"]
[Thu May 07 07:47:46.493911 2026] [:error] [pid 4539:tid 4558] [client 20.9.31.235:42410] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "afvTIoPEZE1565sDGnxzogAAARE"]
[Thu May 07 07:47:47.824998 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:45445] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "afvTI_0atTQld9Y2ht8SJgAAAMk"]
[Thu May 07 07:47:51.850523 2026] [:error] [pid 29710:tid 29731] [client 20.9.31.235:47419] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "afvTJ_0atTQld9Y2ht8SLgAAANM"]
[Thu May 07 07:47:53.928782 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:50174] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "afvTKYPEZE1565sDGnxzpAAAARA"]
[Thu May 07 07:47:55.084481 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:42449] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "afvTK4PEZE1565sDGnxzpgAAARY"]
[Thu May 07 07:47:56.681872 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:44888] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "afvTLKbP7TJOAh7WSUOUfQAAAIc"]
[Thu May 07 07:47:58.409857 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:47361] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "afvTLv0atTQld9Y2ht8SMwAAAMw"]
[Thu May 07 07:48:08.568906 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:41105] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "afvTOP0atTQld9Y2ht8SOgAAANY"]
[Thu May 07 07:48:10.116380 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:47387] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f6.php"] [unique_id "afvTOv0atTQld9Y2ht8SPQAAAMw"]
[Thu May 07 07:48:10.845640 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:41151] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "afvTOoPEZE1565sDGnxzsAAAAQc"]
[Thu May 07 07:48:12.844061 2026] [:error] [pid 29605:tid 29629] [client 20.9.31.235:41094] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "afvTPInxrTjETioEY0T_pwAAAA8"]
[Thu May 07 07:48:15.309422 2026] [:error] [pid 29605:tid 29620] [client 20.9.31.235:42493] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "afvTP4nxrTjETioEY0T_qQAAAAY"]
[Thu May 07 07:48:16.724076 2026] [:error] [pid 29607:tid 29679] [client 20.9.31.235:47409] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "afvTQKbP7TJOAh7WSUOUgwAAAIs"]
[Thu May 07 07:48:17.759267 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:39694] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "afvTQabP7TJOAh7WSUOUhwAAAJE"]
[Thu May 07 07:48:18.886284 2026] [:error] [pid 29605:tid 29627] [client 20.9.31.235:50152] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "afvTQonxrTjETioEY0T_rAAAAA0"]
[Thu May 07 07:48:20.023572 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:41101] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "afvTRBR5HjZ1PlSAiKuF2QAAAFI"]
[Thu May 07 07:48:22.173939 2026] [:error] [pid 29606:tid 29657] [client 20.9.31.235:45450] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "afvTRhR5HjZ1PlSAiKuF4AAAAFA"]
[Thu May 07 07:48:24.003744 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:42489] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvTSIPEZE1565sDGnxzsQAAAQU"]
[Thu May 07 07:48:27.233295 2026] [:error] [pid 29605:tid 29619] [client 20.9.31.235:44916] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvTS4nxrTjETioEY0T_sQAAAAU"]
[Thu May 07 07:48:28.934987 2026] [:error] [pid 29605:tid 29628] [client 20.9.31.235:47396] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvTTInxrTjETioEY0T_sgAAAA4"]
[Thu May 07 07:48:29.537857 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:39698] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvTTf0atTQld9Y2ht8SUAAAAMk"]
[Thu May 07 07:48:30.085449 2026] [:error] [pid 4539:tid 4562] [client 20.9.31.235:43552] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afvTToPEZE1565sDGnxztAAAARU"]
[Thu May 07 07:48:31.040559 2026] [:error] [pid 4539:tid 4561] [client 20.9.31.235:42492] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afvTT4PEZE1565sDGnxztQAAARQ"]
[Thu May 07 07:48:31.756437 2026] [:error] [pid 29605:tid 29623] [client 20.9.31.235:34063] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afvTT4nxrTjETioEY0T_tAAAAAk"]
[Thu May 07 07:48:32.295914 2026] [:error] [pid 4539:tid 4545] [client 20.9.31.235:43027] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-act.php"] [unique_id "afvTUIPEZE1565sDGnxztgAAAQQ"]
[Thu May 07 07:48:33.385265 2026] [:error] [pid 4539:tid 4542] [client 20.9.31.235:43028] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "afvTUYPEZE1565sDGnxzuQAAAQE"]
[Thu May 07 07:48:34.573188 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:34856] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "afvTUoPEZE1565sDGnxzvAAAARg"]
[Thu May 07 07:48:36.127432 2026] [:error] [pid 29607:tid 29672] [client 20.9.31.235:42493] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "afvTVKbP7TJOAh7WSUOUkAAAAIQ"]
[Thu May 07 07:48:37.371880 2026] [:error] [pid 29606:tid 29661] [client 20.9.31.235:42484] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "afvTVRR5HjZ1PlSAiKuGGgAAAFQ"]
[Thu May 07 07:48:38.308912 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:39699] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "afvTVqbP7TJOAh7WSUOUlQAAAJY"]
[Thu May 07 07:48:39.632013 2026] [proxy_fcgi:error] [pid 29710:tid 29732] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:39.867604 2026] [proxy_fcgi:error] [pid 29710:tid 29726] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:40.592588 2026] [proxy_fcgi:error] [pid 29710:tid 29731] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:40.970328 2026] [proxy_fcgi:error] [pid 29710:tid 29716] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:41.228548 2026] [proxy_fcgi:error] [pid 29710:tid 29728] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:41.470800 2026] [proxy_fcgi:error] [pid 29710:tid 29722] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:41.696424 2026] [proxy_fcgi:error] [pid 29710:tid 29733] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:41.893770 2026] [proxy_fcgi:error] [pid 29710:tid 29720] [client 20.9.31.235:47407] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:48:42.116278 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:47407] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "afvTWv0atTQld9Y2ht8SXgAAAM0"]
[Thu May 07 07:48:42.985116 2026] [:error] [pid 29607:tid 29671] [client 20.9.31.235:44881] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "afvTWqbP7TJOAh7WSUOUmQAAAIM"]
[Thu May 07 07:48:43.919314 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:41132] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "afvTW_0atTQld9Y2ht8SYAAAANc"]
[Thu May 07 07:48:44.694856 2026] [:error] [pid 4539:tid 4545] [client 20.9.31.235:50164] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "afvTXIPEZE1565sDGnxzwwAAAQQ"]
[Thu May 07 07:48:45.958815 2026] [:error] [pid 29710:tid 29717] [client 20.9.31.235:47397] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pwnd.php"] [unique_id "afvTXf0atTQld9Y2ht8SYQAAAMU"]
[Thu May 07 07:48:47.307071 2026] [:error] [pid 29605:tid 29630] [client 20.9.31.235:41119] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pwnd.php"] [unique_id "afvTX4nxrTjETioEY0T_uwAAABA"]
[Thu May 07 07:48:48.161494 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:42458] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pwnd.php"] [unique_id "afvTYP0atTQld9Y2ht8SYwAAAMA"]
[Thu May 07 07:48:49.172727 2026] [:error] [pid 29606:tid 29662] [client 20.9.31.235:47369] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/pwnd.php"] [unique_id "afvTYRR5HjZ1PlSAiKuGHgAAAFU"]
[Thu May 07 07:48:50.552022 2026] [:error] [pid 29606:tid 29653] [client 20.9.31.235:34872] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "afvTYhR5HjZ1PlSAiKuGHwAAAEw"]
[Thu May 07 07:48:51.199587 2026] [:error] [pid 29606:tid 29642] [client 20.9.31.235:47391] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "afvTYxR5HjZ1PlSAiKuGIAAAAEE"]
[Thu May 07 07:48:52.498313 2026] [:error] [pid 29605:tid 29634] [client 20.9.31.235:34867] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "afvTZInxrTjETioEY0T_wAAAABQ"]
[Thu May 07 07:48:53.351930 2026] [:error] [pid 29606:tid 29651] [client 20.9.31.235:39708] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/"] [unique_id "afvTZRR5HjZ1PlSAiKuGIgAAAEo"]
[Thu May 07 07:48:54.105813 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:42445] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "afvTZhR5HjZ1PlSAiKuGIwAAAFI"]
[Thu May 07 07:48:55.073219 2026] [:error] [pid 4539:tid 4556] [client 20.9.31.235:44879] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "afvTZ4PEZE1565sDGnxzygAAAQ8"]
[Thu May 07 07:48:55.911284 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:47364] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "afvTZ6bP7TJOAh7WSUOUngAAAJE"]
[Thu May 07 07:48:57.094035 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:50133] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "afvTaRR5HjZ1PlSAiKuGJAAAAEI"]
[Thu May 07 07:48:58.193252 2026] [:error] [pid 29606:tid 29649] [client 20.9.31.235:43053] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "afvTahR5HjZ1PlSAiKuGJgAAAEg"]
[Thu May 07 07:48:59.627272 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:41096] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "afvTa4PEZE1565sDGnxzzwAAAQ4"]
[Thu May 07 07:49:01.314672 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:44891] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "afvTbabP7TJOAh7WSUOUogAAAJc"]
[Thu May 07 07:49:06.549220 2026] [:error] [pid 29606:tid 29665] [client 20.9.31.235:41100] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/l10n/"] [unique_id "afvTchR5HjZ1PlSAiKuGOAAAAFg"]
[Thu May 07 07:49:11.899951 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:41107] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "afvTd6bP7TJOAh7WSUOUsQAAAJE"]
[Thu May 07 07:49:14.371224 2026] [:error] [pid 29606:tid 29655] [client 20.9.31.235:42448] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "afvTehR5HjZ1PlSAiKuGPQAAAE4"]
[Thu May 07 07:49:20.818190 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:50136] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "afvTgKbP7TJOAh7WSUOVFgAAAIE"]
[Thu May 07 07:49:21.588944 2026] [:error] [pid 4539:tid 4559] [client 20.9.31.235:43063] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "afvTgYPEZE1565sDGnx0AAAAARI"]
[Thu May 07 07:49:23.343733 2026] [:error] [pid 29606:tid 29646] [client 20.9.31.235:34834] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "afvTgxR5HjZ1PlSAiKuGQQAAAEU"]
[Thu May 07 07:49:25.481996 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:42439] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "afvThabP7TJOAh7WSUOVGAAAAIU"]
[Thu May 07 07:49:26.456288 2026] [:error] [pid 29606:tid 29660] [client 20.9.31.235:42475] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "afvThhR5HjZ1PlSAiKuGQwAAAFM"]
[Thu May 07 07:49:27.860195 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:47398] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "afvThxR5HjZ1PlSAiKuGRAAAAEI"]
[Thu May 07 07:49:28.703449 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:43038] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "afvTiP0atTQld9Y2ht8SaQAAAM0"]
[Thu May 07 07:49:30.117491 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:44867] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "afvTihR5HjZ1PlSAiKuGRQAAAFI"]
[Thu May 07 07:49:32.137217 2026] [:error] [pid 29606:tid 29650] [client 20.9.31.235:43050] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "afvTjBR5HjZ1PlSAiKuGSQAAAEk"]
[Thu May 07 07:49:34.408412 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:34828] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/fi.php"] [unique_id "afvTjoPEZE1565sDGnx0DAAAARg"]
[Thu May 07 07:49:34.914134 2026] [:error] [pid 29607:tid 29668] [client 20.9.31.235:34832] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "afvTjqbP7TJOAh7WSUOVGwAAAIA"]
[Thu May 07 07:49:36.692041 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:47386] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "afvTkP0atTQld9Y2ht8SbgAAAMk"]
[Thu May 07 07:49:38.258288 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:41109] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "afvTkoPEZE1565sDGnx0DwAAAQc"]
[Thu May 07 07:49:39.177063 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:43068] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fe5.php"] [unique_id "afvTk_0atTQld9Y2ht8ScAAAAMw"]
[Thu May 07 07:49:39.997311 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:43033] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afvTk4PEZE1565sDGnx0EQAAAQg"]
[Thu May 07 07:49:41.277788 2026] [proxy_fcgi:error] [pid 29710:tid 29722] [client 20.9.31.235:34859] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:42.020004 2026] [proxy_fcgi:error] [pid 29710:tid 29725] [client 20.9.31.235:34859] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:43.549006 2026] [proxy_fcgi:error] [pid 29710:tid 29718] [client 20.9.31.235:34859] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:43.987622 2026] [:error] [pid 29710:tid 29720] [client 20.9.31.235:34859] [client 20.9.31.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afvTl_0atTQld9Y2ht8SeQAAAMg"]
[Thu May 07 07:49:45.709244 2026] [proxy_fcgi:error] [pid 29605:tid 29622] [client 20.9.31.235:42436] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:46.434908 2026] [proxy_fcgi:error] [pid 29605:tid 29625] [client 20.9.31.235:42436] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:46.711396 2026] [proxy_fcgi:error] [pid 29605:tid 29631] [client 20.9.31.235:42436] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:46.903420 2026] [proxy_fcgi:error] [pid 29605:tid 29615] [client 20.9.31.235:42436] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:49:47.090305 2026] [:error] [pid 29605:tid 29621] [client 20.9.31.235:42436] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "afvTm4nxrTjETioEY0T_yAAAAAc"]
[Thu May 07 07:49:48.657736 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:47370] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "afvTnP0atTQld9Y2ht8SgQAAANc"]
[Thu May 07 07:49:49.527884 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:39685] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "afvTnabP7TJOAh7WSUOVHwAAAIc"]
[Thu May 07 07:49:50.881433 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:42438] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/admin.php"] [unique_id "afvTnoPEZE1565sDGnx0GQAAARg"]
[Thu May 07 07:49:51.669960 2026] [:error] [pid 4539:tid 4551] [client 20.9.31.235:42446] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "afvTn4PEZE1565sDGnx0GgAAAQo"]
[Thu May 07 07:49:52.504361 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:47417] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "afvToIPEZE1565sDGnx0HAAAARY"]
[Thu May 07 07:49:53.346139 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:47412] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "afvToYnxrTjETioEY0T_yQAAAAA"]
[Thu May 07 07:49:54.554375 2026] [:error] [pid 29607:tid 29689] [client 20.9.31.235:50142] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bs1.php"] [unique_id "afvToqbP7TJOAh7WSUOVIAAAAJU"]
[Thu May 07 07:49:56.167353 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:44865] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvTpIPEZE1565sDGnx0HQAAAQk"]
[Thu May 07 07:49:56.795047 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:34049] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvTpKbP7TJOAh7WSUOVJgAAAIE"]
[Thu May 07 07:49:57.548760 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:42487] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvTpf0atTQld9Y2ht8ShQAAAMA"]
[Thu May 07 07:49:58.094669 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:41145] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvTpoPEZE1565sDGnx0HgAAAQc"]
[Thu May 07 07:49:58.630155 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:43024] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "afvTpoPEZE1565sDGnx0HwAAAQ4"]
[Thu May 07 07:49:59.810957 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:47382] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "afvTp_0atTQld9Y2ht8ShwAAANU"]
[Thu May 07 07:50:01.534414 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:34875] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "afvTqYPEZE1565sDGnx0IAAAAQg"]
[Thu May 07 07:50:02.299433 2026] [:error] [pid 29607:tid 29683] [client 20.9.31.235:42394] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "afvTqqbP7TJOAh7WSUOVQQAAAI8"]
[Thu May 07 07:50:03.033343 2026] [:error] [pid 4539:tid 4561] [client 20.9.31.235:43533] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "afvTq4PEZE1565sDGnx0IQAAARQ"]
[Thu May 07 07:50:05.763384 2026] [:error] [pid 29710:tid 29718] [client 20.9.31.235:41089] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "afvTrf0atTQld9Y2ht8SlgAAAMY"]
[Thu May 07 07:50:08.168225 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:44878] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "afvTsP0atTQld9Y2ht8SmAAAAMk"]
[Thu May 07 07:50:10.708639 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:44886] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/BypassBest.php"] [unique_id "afvTsv0atTQld9Y2ht8SmgAAAMw"]
[Thu May 07 07:50:11.611493 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:41150] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "afvTs_0atTQld9Y2ht8SmwAAAMs"]
[Thu May 07 07:50:14.337074 2026] [:error] [pid 29607:tid 29680] [client 20.9.31.235:34839] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "afvTtqbP7TJOAh7WSUOVZQAAAIw"]
[Thu May 07 07:50:18.540501 2026] [:error] [pid 4539:tid 4564] [client 20.9.31.235:41124] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "afvTuoPEZE1565sDGnx0UQAAARc"]
[Thu May 07 07:50:20.686165 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:41137] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/"] [unique_id "afvTvIPEZE1565sDGnx0UwAAARA"]
[Thu May 07 07:50:21.780580 2026] [:error] [pid 29606:tid 29661] [client 20.9.31.235:47420] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "afvTvRR5HjZ1PlSAiKuGTQAAAFQ"]
[Thu May 07 07:50:22.439601 2026] [:error] [pid 4539:tid 4548] [client 20.9.31.235:41835] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "afvTvoPEZE1565sDGnx0VQAAAQc"]
[Thu May 07 07:50:23.774464 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:39736] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "afvTv4PEZE1565sDGnx0VgAAAQ4"]
[Thu May 07 07:50:24.999570 2026] [:error] [pid 29710:tid 29717] [client 20.9.31.235:39701] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "afvTwP0atTQld9Y2ht8SowAAAMU"]
[Thu May 07 07:50:26.415530 2026] [:error] [pid 29606:tid 29641] [client 20.9.31.235:50173] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "afvTwhR5HjZ1PlSAiKuGTwAAAEA"]
[Thu May 07 07:50:27.236177 2026] [:error] [pid 29605:tid 29637] [client 20.9.31.235:42477] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "afvTw4nxrTjETioEY0T_0QAAABc"]
[Thu May 07 07:50:28.631904 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:41110] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "afvTxP0atTQld9Y2ht8SqAAAAMo"]
[Thu May 07 07:50:29.188886 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:50124] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/buy.php"] [unique_id "afvTxf0atTQld9Y2ht8SqQAAAMs"]
[Thu May 07 07:50:30.138446 2026] [:error] [pid 4539:tid 4562] [client 20.9.31.235:50166] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "afvTxoPEZE1565sDGnx0WAAAARU"]
[Thu May 07 07:50:32.551634 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:47381] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "afvTyP0atTQld9Y2ht8SqgAAAME"]
[Thu May 07 07:50:33.433823 2026] [:error] [pid 4539:tid 4559] [client 20.9.31.235:45458] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "afvTyYPEZE1565sDGnx0WgAAARI"]
[Thu May 07 07:50:34.668776 2026] [:error] [pid 4539:tid 4542] [client 20.9.31.235:41130] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "afvTyoPEZE1565sDGnx0XAAAAQE"]
[Thu May 07 07:50:35.682626 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:50121] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "afvTy4PEZE1565sDGnx0XgAAAQA"]
[Thu May 07 07:50:36.328574 2026] [:error] [pid 29606:tid 29648] [client 20.9.31.235:43046] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "afvTzBR5HjZ1PlSAiKuGVAAAAEc"]
[Thu May 07 07:50:37.004893 2026] [:error] [pid 4539:tid 4552] [client 20.9.31.235:50150] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "afvTzYPEZE1565sDGnx0XwAAAQs"]
[Thu May 07 07:50:38.092187 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:44864] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hypo.php"] [unique_id "afvTzv0atTQld9Y2ht8SsQAAAMA"]
[Thu May 07 07:50:39.407985 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:34077] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "afvTz4PEZE1565sDGnx0YQAAARY"]
[Thu May 07 07:50:40.073931 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:34862] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "afvT0IPEZE1565sDGnx0YwAAAQ4"]
[Thu May 07 07:50:41.167884 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:41136] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "afvT0f0atTQld9Y2ht8StwAAAMs"]
[Thu May 07 07:50:41.747333 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:44905] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "afvT0f0atTQld9Y2ht8SuwAAAME"]
[Thu May 07 07:50:42.575957 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:34861] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvT0qbP7TJOAh7WSUOVbAAAAIk"]
[Thu May 07 07:50:43.358525 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:47414] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvT06bP7TJOAh7WSUOVbQAAAIU"]
[Thu May 07 07:50:44.031977 2026] [:error] [pid 4539:tid 4553] [client 20.9.31.235:39700] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvT1IPEZE1565sDGnx0cQAAAQw"]
[Thu May 07 07:50:44.708390 2026] [:error] [pid 4539:tid 4554] [client 20.9.31.235:39706] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvT1IPEZE1565sDGnx0dAAAAQ0"]
[Thu May 07 07:50:45.376616 2026] [:error] [pid 29606:tid 29660] [client 20.9.31.235:47392] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "afvT1RR5HjZ1PlSAiKuGZAAAAFM"]
[Thu May 07 07:50:45.880519 2026] [:error] [pid 29606:tid 29654] [client 20.9.31.235:44887] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/chosen.php"] [unique_id "afvT1RR5HjZ1PlSAiKuGZQAAAE0"]
[Thu May 07 07:50:46.959309 2026] [proxy_fcgi:error] [pid 4539:tid 4547] [client 20.9.31.235:44872] AH01071: Got error 'Primary script unknown'
[Thu May 07 07:50:47.153359 2026] [proxy_fcgi:error] [pid 4539:tid 4542] [client 20.9.31.235:44872] AH01071: Got error 'Primary script unknown'
[Thu May 07 11:30:41.856629 2026] [:error] [pid 1143:tid 1146] [client 43.161.217.205:37238] [client 43.161.217.205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afwHYZb7qeI8X5VYRr5h2QAAAQE"]
[Thu May 07 12:08:12.012965 2026] [proxy_fcgi:error] [pid 1143:tid 1158] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:12.205813 2026] [proxy_fcgi:error] [pid 1143:tid 1153] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:12.604905 2026] [proxy_fcgi:error] [pid 1143:tid 1152] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:12.807078 2026] [proxy_fcgi:error] [pid 1143:tid 1160] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:13.193202 2026] [proxy_fcgi:error] [pid 1143:tid 1164] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:13.387136 2026] [proxy_fcgi:error] [pid 1143:tid 1167] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:13.593394 2026] [proxy_fcgi:error] [pid 1143:tid 1150] [client 172.202.28.4:2121] AH01071: Got error 'Primary script unknown'
[Thu May 07 12:08:13.975539 2026] [:error] [pid 1143:tid 1153] [client 172.202.28.4:2121] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "afwQLZb7qeI8X5VYRr5yNwAAAQg"]
[Thu May 07 12:08:14.756231 2026] [:error] [pid 1143:tid 1145] [client 172.202.28.4:2129] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "afwQLpb7qeI8X5VYRr5yPgAAAQA"]
[Thu May 07 12:08:15.538559 2026] [:error] [pid 56065:tid 56106] [client 172.202.28.4:2148] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "afwQL3dV4hYThdnhfxDYwQAAAIo"]
[Thu May 07 12:08:16.292790 2026] [:error] [pid 56150:tid 56164] [client 172.202.28.4:2164] [client 172.202.28.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "afwQMNu4duXJJeTigXQ2HQAAAEw"]
[Thu May 07 18:13:28.850713 2026] [:error] [pid 15629:tid 15650] [client 49.51.243.156:35430] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afxlyPrIJCALdUrO43ls7QAAABE"]
[Thu May 07 20:36:01.179818 2026] [:error] [pid 15629:tid 15643] [client 120.56.127.13:50162] [client 120.56.127.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.56.127.13, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afyHMfrIJCALdUrO43l7fQAAAAo"]
[Thu May 07 20:36:01.192316 2026] [proxy_fcgi:error] [pid 15629:tid 15643] [client 120.56.127.13:50162] AH01071: Got error 'Primary script unknown'
[Thu May 07 20:36:24.236411 2026] [:error] [pid 15715:tid 15720] [client 186.179.192.143:61575] [client 186.179.192.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.179.192.143, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "afyHSCY4dZsLOttMkcekZwAAAQM"]
[Thu May 07 20:36:24.247548 2026] [proxy_fcgi:error] [pid 15715:tid 15720] [client 186.179.192.143:61575] AH01071: Got error 'Primary script unknown'
[Fri May 08 00:13:39.897580 2026] [:error] [pid 15631:tid 15690] [client 106.54.62.156:43174] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afy6M3vP1GkPUuuLfqVstwAAAMM"]
[Fri May 08 00:25:02.027981 2026] [:error] [pid 15631:tid 15708] [client 43.164.1.211:55544] [client 43.164.1.211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "afy83nvP1GkPUuuLfqVuvAAAANU"]
[Fri May 08 00:43:18.402551 2026] [:error] [pid 15630:tid 15680] [client 34.106.134.142:60400] [client 34.106.134.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "afzBJnTithRAi4821qvl-QAAAJQ"]
[Fri May 08 02:17:07.486031 2026] [:error] [pid 15715:tid 15732] [client 43.135.130.202:54544] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "afzXIyY4dZsLOttMkccHNQAAAQw"]
[Fri May 08 04:47:37.768683 2026] [:error] [pid 51113:tid 51126] [client 34.176.22.115:53644] [client 34.176.22.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "afz6aUQfs7sWtqkpQIfvCQAAAMs"]
[Fri May 08 09:30:46.263279 2026] [:error] [pid 61355:tid 61383] [client 4.193.137.131:4441] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "af08xvkhJTi30CBXmMn4ZQAAAZY"]
[Fri May 08 09:30:46.618362 2026] [:error] [pid 61317:tid 61330] [client 4.193.137.131:4454] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "af08xs-fFk_CedOCOYtVagAAAUo"]
[Fri May 08 09:30:46.984565 2026] [:error] [pid 51009:tid 51093] [client 4.193.137.131:4425] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "af08xuB0GbUWhxgzX9XBKAAAAJE"]
[Fri May 08 09:30:47.367830 2026] [:error] [pid 51113:tid 51122] [client 4.193.137.131:4271] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xleet.php"] [unique_id "af08x0Qfs7sWtqkpQIdBYgAAAMc"]
[Fri May 08 10:08:54.856326 2026] [:error] [pid 61355:tid 61363] [client 43.166.247.155:59710] [client 43.166.247.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "af1FtvkhJTi30CBXmMkIoQAAAYI"]
[Fri May 08 11:47:29.546427 2026] [:error] [pid 61356:tid 61391] [client 35.244.17.39:58228] [client 35.244.17.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "af1c0Yx3vpB8oWhUq2PnAgAAAcM"]
[Fri May 08 12:04:56.966829 2026] [:error] [pid 34318:tid 34321] [client 192.144.148.122:41136] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af1g6Mr3guirgJiKhzCphQAAAQE"]
[Fri May 08 15:04:51.802544 2026] [:error] [pid 61356:tid 61403] [client 43.130.57.76:50838] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af2LE4x3vpB8oWhUq2MusAAAAc8"]
[Fri May 08 21:01:14.343519 2026] [proxy_fcgi:error] [pid 61356:tid 61396] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:14.536301 2026] [proxy_fcgi:error] [pid 61356:tid 61393] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:15.315142 2026] [proxy_fcgi:error] [pid 61356:tid 61410] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:15.517934 2026] [proxy_fcgi:error] [pid 61356:tid 61397] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:15.714160 2026] [proxy_fcgi:error] [pid 61356:tid 61409] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:16.397013 2026] [proxy_fcgi:error] [pid 61356:tid 61389] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:16.603308 2026] [proxy_fcgi:error] [pid 61356:tid 61401] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:16.799995 2026] [proxy_fcgi:error] [pid 61356:tid 61402] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:17.000179 2026] [proxy_fcgi:error] [pid 61356:tid 61395] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:17.216706 2026] [proxy_fcgi:error] [pid 61356:tid 61398] [client 130.131.249.131:9239] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:01:17.405862 2026] [:error] [pid 61356:tid 61404] [client 130.131.249.131:9239] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "af3enYx3vpB8oWhUq2O5nAAAAdA"]
[Fri May 08 21:01:17.796417 2026] [:error] [pid 51009:tid 51077] [client 130.131.249.131:9304] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "af3eneB0GbUWhxgzX9VGdQAAAIE"]
[Fri May 08 21:01:18.239223 2026] [:error] [pid 61356:tid 61400] [client 130.131.249.131:9307] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "af3enox3vpB8oWhUq2O5oAAAAcw"]
[Fri May 08 21:01:18.639245 2026] [:error] [pid 61356:tid 61408] [client 130.131.249.131:9237] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albin.php"] [unique_id "af3enox3vpB8oWhUq2O5ogAAAdQ"]
[Fri May 08 21:01:19.010930 2026] [:error] [pid 61356:tid 61391] [client 130.131.249.131:9323] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "af3en4x3vpB8oWhUq2O5pAAAAcM"]
[Fri May 08 21:01:19.485187 2026] [:error] [pid 61355:tid 61383] [client 130.131.249.131:9343] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "af3en_khJTi30CBXmMm55AAAAZY"]
[Fri May 08 21:01:19.871282 2026] [:error] [pid 61355:tid 61384] [client 130.131.249.131:9290] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "af3en_khJTi30CBXmMm55wAAAZc"]
[Fri May 08 21:01:20.513569 2026] [:error] [pid 51113:tid 51138] [client 130.131.249.131:9221] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sbhu.php"] [unique_id "af3eoEQfs7sWtqkpQId8vgAAANc"]
[Fri May 08 21:01:20.935825 2026] [:error] [pid 34318:tid 34342] [client 130.131.249.131:9333] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "af3eoMr3guirgJiKhzDeZwAAARY"]
[Fri May 08 21:01:21.320497 2026] [:error] [pid 51008:tid 51070] [client 130.131.249.131:9325] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "af3eoXB58C2Y1tgLtuKnqAAAAFU"]
[Fri May 08 21:01:22.331246 2026] [:error] [pid 51008:tid 51057] [client 130.131.249.131:9296] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "af3eonB58C2Y1tgLtuKnqQAAAEg"]
[Fri May 08 21:01:22.753435 2026] [:error] [pid 61356:tid 61397] [client 130.131.249.131:9339] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xda.php"] [unique_id "af3eoox3vpB8oWhUq2O5qQAAAck"]
[Fri May 08 21:01:24.134508 2026] [:error] [pid 51007:tid 51030] [client 130.131.249.131:9226] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "af3epFMagSGstWKyzzXxuwAAAAg"]
[Fri May 08 21:01:24.551687 2026] [:error] [pid 61317:tid 61335] [client 130.131.249.131:9243] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "af3epM-fFk_CedOCOYvOCAAAAU8"]
[Fri May 08 21:01:24.934677 2026] [:error] [pid 61317:tid 61328] [client 130.131.249.131:9245] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "af3epM-fFk_CedOCOYvOCgAAAUg"]
[Fri May 08 21:01:25.325400 2026] [:error] [pid 61356:tid 61406] [client 130.131.249.131:9312] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yellow.php"] [unique_id "af3epYx3vpB8oWhUq2O5rwAAAdI"]
[Fri May 08 21:01:25.727077 2026] [:error] [pid 51009:tid 51096] [client 130.131.249.131:9217] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "af3epeB0GbUWhxgzX9VGfAAAAJQ"]
[Fri May 08 21:01:26.124512 2026] [:error] [pid 51008:tid 51056] [client 130.131.249.131:5064] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "af3epnB58C2Y1tgLtuKnrQAAAEc"]
[Fri May 08 21:01:26.503310 2026] [:error] [pid 51009:tid 51090] [client 130.131.249.131:9287] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "af3epuB0GbUWhxgzX9VGfgAAAI4"]
[Fri May 08 21:01:26.904692 2026] [:error] [pid 51009:tid 51088] [client 130.131.249.131:9234] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "af3epuB0GbUWhxgzX9VGfwAAAIw"]
[Fri May 08 21:01:27.277176 2026] [:error] [pid 51009:tid 51076] [client 130.131.249.131:9342] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "af3ep-B0GbUWhxgzX9VGgQAAAIA"]
[Fri May 08 21:01:28.712467 2026] [:error] [pid 34318:tid 34339] [client 130.131.249.131:9324] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "af3eqMr3guirgJiKhzDejgAAARM"]
[Fri May 08 21:01:29.104472 2026] [:error] [pid 61355:tid 61382] [client 130.131.249.131:9229] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "af3eqfkhJTi30CBXmMm57AAAAZU"]
[Fri May 08 21:01:29.487908 2026] [:error] [pid 34318:tid 34342] [client 130.131.249.131:9314] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ah25.php"] [unique_id "af3eqcr3guirgJiKhzDekgAAARY"]
[Fri May 08 21:01:29.921029 2026] [:error] [pid 61317:tid 61339] [client 130.131.249.131:9310] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "af3eqc-fFk_CedOCOYvOGwAAAVM"]
[Fri May 08 21:01:30.322420 2026] [:error] [pid 51008:tid 51073] [client 130.131.249.131:9252] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "af3eqnB58C2Y1tgLtuKnvgAAAFg"]
[Fri May 08 21:01:31.715800 2026] [:error] [pid 34318:tid 34321] [client 130.131.249.131:9258] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "af3eq8r3guirgJiKhzDeoQAAAQE"]
[Fri May 08 21:01:32.094968 2026] [:error] [pid 61356:tid 61393] [client 130.131.249.131:9247] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/revealability.php"] [unique_id "af3erIx3vpB8oWhUq2O5twAAAcU"]
[Fri May 08 21:01:32.557483 2026] [:error] [pid 34318:tid 34343] [client 130.131.249.131:9300] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "af3erMr3guirgJiKhzDepwAAARc"]
[Fri May 08 21:01:35.153051 2026] [:error] [pid 51007:tid 51044] [client 130.131.249.131:9231] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "af3er1MagSGstWKyzzXxxQAAABY"]
[Fri May 08 21:01:35.528341 2026] [:error] [pid 51007:tid 51039] [client 130.131.249.131:9326] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "af3er1MagSGstWKyzzXxxgAAABE"]
[Fri May 08 21:01:38.240809 2026] [:error] [pid 51007:tid 51031] [client 130.131.249.131:9306] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file4.php"] [unique_id "af3eslMagSGstWKyzzXxzAAAAAk"]
[Fri May 08 21:01:38.621085 2026] [:error] [pid 61356:tid 61397] [client 130.131.249.131:9236] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "af3esox3vpB8oWhUq2O5vAAAAck"]
[Fri May 08 21:01:38.999483 2026] [:error] [pid 61355:tid 61373] [client 130.131.249.131:9305] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "af3esvkhJTi30CBXmMm58wAAAYw"]
[Fri May 08 21:01:39.986071 2026] [:error] [pid 61355:tid 61371] [client 130.131.249.131:9242] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "af3es_khJTi30CBXmMm59AAAAYo"]
[Fri May 08 21:01:40.360204 2026] [:error] [pid 61355:tid 61365] [client 130.131.249.131:9283] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "af3etPkhJTi30CBXmMm59QAAAYQ"]
[Fri May 08 21:01:40.732655 2026] [:error] [pid 61355:tid 61382] [client 130.131.249.131:9340] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "af3etPkhJTi30CBXmMm5-AAAAZU"]
[Fri May 08 21:01:41.136407 2026] [:error] [pid 51008:tid 51068] [client 130.131.249.131:5088] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "af3etXB58C2Y1tgLtuKnxAAAAFM"]
[Fri May 08 21:01:41.614463 2026] [:error] [pid 51008:tid 51057] [client 130.131.249.131:9327] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "af3etXB58C2Y1tgLtuKnxQAAAEg"]
[Fri May 08 21:01:43.009870 2026] [:error] [pid 51007:tid 51042] [client 130.131.249.131:9329] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file30.php"] [unique_id "af3et1MagSGstWKyzzXx1QAAABQ"]
[Fri May 08 21:01:43.408945 2026] [:error] [pid 61355:tid 61370] [client 130.131.249.131:9220] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "af3et_khJTi30CBXmMm6AAAAAYk"]
[Fri May 08 21:01:44.434437 2026] [:error] [pid 61355:tid 61377] [client 130.131.249.131:9331] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "af3euPkhJTi30CBXmMm6AgAAAZA"]
[Fri May 08 21:01:44.822913 2026] [:error] [pid 51009:tid 51099] [client 130.131.249.131:9265] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "af3euOB0GbUWhxgzX9VGhwAAAJc"]
[Fri May 08 21:01:45.220752 2026] [:error] [pid 51113:tid 51131] [client 130.131.249.131:9285] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/forbidals.php"] [unique_id "af3euUQfs7sWtqkpQId8zwAAANA"]
[Fri May 08 21:01:45.604575 2026] [:error] [pid 34318:tid 34320] [client 130.131.249.131:9309] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "af3eucr3guirgJiKhzDesQAAAQA"]
[Fri May 08 21:01:45.983623 2026] [:error] [pid 61356:tid 61394] [client 130.131.249.131:5063] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "af3euYx3vpB8oWhUq2O5vQAAAcY"]
[Fri May 08 21:01:46.367802 2026] [:error] [pid 51009:tid 51084] [client 130.131.249.131:9320] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "af3euuB0GbUWhxgzX9VGiwAAAIg"]
[Fri May 08 21:01:46.751191 2026] [:error] [pid 51009:tid 51091] [client 130.131.249.131:5108] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-firewall.php"] [unique_id "af3euuB0GbUWhxgzX9VGjAAAAI8"]
[Fri May 08 21:01:47.134973 2026] [:error] [pid 51009:tid 51078] [client 130.131.249.131:9281] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "af3eu-B0GbUWhxgzX9VGjQAAAII"]
[Fri May 08 21:01:47.605974 2026] [:error] [pid 51009:tid 51077] [client 130.131.249.131:9219] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "af3eu-B0GbUWhxgzX9VGkAAAAIE"]
[Fri May 08 21:01:48.001104 2026] [:error] [pid 51009:tid 51080] [client 130.131.249.131:9289] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "af3evOB0GbUWhxgzX9VGkQAAAIQ"]
[Fri May 08 21:01:48.380078 2026] [:error] [pid 61356:tid 61412] [client 130.131.249.131:9257] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell20211028.php"] [unique_id "af3evIx3vpB8oWhUq2O5vwAAAdg"]
[Fri May 08 21:01:48.800976 2026] [:error] [pid 51009:tid 51096] [client 130.131.249.131:9337] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "af3evOB0GbUWhxgzX9VGlQAAAJQ"]
[Fri May 08 21:01:49.270186 2026] [:error] [pid 51009:tid 51088] [client 130.131.249.131:9241] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "af3eveB0GbUWhxgzX9VGlgAAAIw"]
[Fri May 08 21:01:49.654379 2026] [:error] [pid 61355:tid 61380] [client 130.131.249.131:9319] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "af3evfkhJTi30CBXmMm6CgAAAZM"]
[Fri May 08 21:01:50.033333 2026] [:error] [pid 61355:tid 61364] [client 130.131.249.131:9303] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wuasr.php"] [unique_id "af3evvkhJTi30CBXmMm6CwAAAYM"]
[Fri May 08 21:01:50.448527 2026] [:error] [pid 51009:tid 51087] [client 130.131.249.131:9328] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "af3evuB0GbUWhxgzX9VGmgAAAIs"]
[Fri May 08 21:01:50.827688 2026] [:error] [pid 61355:tid 61374] [client 130.131.249.131:9282] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "af3evvkhJTi30CBXmMm6DAAAAY0"]
[Fri May 08 21:01:51.312480 2026] [:error] [pid 51009:tid 51077] [client 130.131.249.131:5062] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "af3ev-B0GbUWhxgzX9VGnwAAAIE"]
[Fri May 08 21:01:51.690911 2026] [:error] [pid 51009:tid 51089] [client 130.131.249.131:9335] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1index.php"] [unique_id "af3ev-B0GbUWhxgzX9VGoQAAAI0"]
[Fri May 08 21:01:52.064988 2026] [:error] [pid 51008:tid 51052] [client 130.131.249.131:9316] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "af3ewHB58C2Y1tgLtuKnyAAAAEM"]
[Fri May 08 21:01:52.518346 2026] [:error] [pid 61356:tid 61389] [client 130.131.249.131:9299] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "af3ewIx3vpB8oWhUq2O5zAAAAcE"]
[Fri May 08 21:01:52.894483 2026] [:error] [pid 61356:tid 61392] [client 130.131.249.131:9227] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "af3ewIx3vpB8oWhUq2O5zQAAAcQ"]
[Fri May 08 21:01:53.337662 2026] [:error] [pid 61356:tid 61394] [client 130.131.249.131:9295] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/png.php"] [unique_id "af3ewYx3vpB8oWhUq2O5zwAAAcY"]
[Fri May 08 21:01:53.715716 2026] [:error] [pid 51009:tid 51099] [client 130.131.249.131:9232] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "af3eweB0GbUWhxgzX9VGpwAAAJc"]
[Fri May 08 21:01:54.109237 2026] [:error] [pid 61356:tid 61395] [client 130.131.249.131:9298] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "af3ewox3vpB8oWhUq2O50gAAAcc"]
[Fri May 08 21:01:55.205559 2026] [:error] [pid 61356:tid 61398] [client 130.131.249.131:9223] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "af3ew4x3vpB8oWhUq2O50wAAAco"]
[Fri May 08 21:01:55.579303 2026] [:error] [pid 61356:tid 61396] [client 130.131.249.131:5057] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "af3ew4x3vpB8oWhUq2O51wAAAcg"]
[Fri May 08 21:01:55.961912 2026] [:error] [pid 61356:tid 61390] [client 130.131.249.131:9315] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af3ew4x3vpB8oWhUq2O52gAAAcI"]
[Fri May 08 21:01:56.818229 2026] [:error] [pid 61356:tid 61409] [client 130.131.249.131:9254] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af3exIx3vpB8oWhUq2O53AAAAdU"]
[Fri May 08 21:01:57.194646 2026] [:error] [pid 61356:tid 61393] [client 130.131.249.131:9233] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af3exYx3vpB8oWhUq2O53wAAAcU"]
[Fri May 08 21:01:57.580682 2026] [:error] [pid 61355:tid 61384] [client 130.131.249.131:9284] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af3exfkhJTi30CBXmMm6DgAAAZc"]
[Fri May 08 21:01:57.966511 2026] [:error] [pid 61355:tid 61382] [client 130.131.249.131:9301] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "af3exfkhJTi30CBXmMm6EQAAAZU"]
[Fri May 08 21:02:00.565752 2026] [:error] [pid 61317:tid 61331] [client 130.131.249.131:9238] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "af3eyM-fFk_CedOCOYvORwAAAUs"]
[Fri May 08 21:02:00.953268 2026] [:error] [pid 61355:tid 61363] [client 130.131.249.131:9228] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "af3eyPkhJTi30CBXmMm6FQAAAYI"]
[Fri May 08 21:02:01.347367 2026] [:error] [pid 61355:tid 61376] [client 130.131.249.131:5097] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "af3eyfkhJTi30CBXmMm6FgAAAY8"]
[Fri May 08 21:02:01.743755 2026] [:error] [pid 61355:tid 61370] [client 130.131.249.131:9246] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "af3eyfkhJTi30CBXmMm6GAAAAYk"]
[Fri May 08 21:02:02.115869 2026] [:error] [pid 61356:tid 61395] [client 130.131.249.131:9338] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "af3eyox3vpB8oWhUq2O56AAAAcc"]
[Fri May 08 21:02:02.544616 2026] [:error] [pid 61355:tid 61383] [client 130.131.249.131:5096] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "af3eyvkhJTi30CBXmMm6GgAAAZY"]
[Fri May 08 21:02:02.933471 2026] [:error] [pid 61355:tid 61361] [client 130.131.249.131:9275] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "af3eyvkhJTi30CBXmMm6GwAAAYA"]
[Fri May 08 21:02:03.313856 2026] [:error] [pid 61356:tid 61393] [client 130.131.249.131:5086] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "af3ey4x3vpB8oWhUq2O56wAAAcU"]
[Fri May 08 21:02:06.698177 2026] [:error] [pid 61356:tid 61388] [client 130.131.249.131:9235] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "af3ezox3vpB8oWhUq2O57wAAAcA"]
[Fri May 08 21:02:07.081069 2026] [:error] [pid 61356:tid 61401] [client 130.131.249.131:9332] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "af3ez4x3vpB8oWhUq2O58gAAAc0"]
[Fri May 08 21:02:07.468947 2026] [:error] [pid 51008:tid 51063] [client 130.131.249.131:9317] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fun.php"] [unique_id "af3ez3B58C2Y1tgLtuKnygAAAE4"]
[Fri May 08 21:02:07.865789 2026] [:error] [pid 61356:tid 61399] [client 130.131.249.131:5078] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3ez4x3vpB8oWhUq2O59wAAAcs"]
[Fri May 08 21:02:08.245638 2026] [:error] [pid 61356:tid 61409] [client 130.131.249.131:9222] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3e0Ix3vpB8oWhUq2O5-QAAAdU"]
[Fri May 08 21:02:09.638194 2026] [:error] [pid 61317:tid 61341] [client 130.131.249.131:9240] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3e0c-fFk_CedOCOYvOTgAAAVU"]
[Fri May 08 21:02:10.619678 2026] [:error] [pid 61355:tid 61372] [client 130.131.249.131:9279] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af3e0vkhJTi30CBXmMm6IwAAAYs"]
[Fri May 08 21:02:11.011218 2026] [:error] [pid 61355:tid 61361] [client 130.131.249.131:9341] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "af3e0_khJTi30CBXmMm6JQAAAYA"]
[Fri May 08 21:02:11.387407 2026] [:error] [pid 61355:tid 61379] [client 130.131.249.131:9253] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "af3e0_khJTi30CBXmMm6JwAAAZI"]
[Fri May 08 21:02:11.764381 2026] [:error] [pid 51009:tid 51095] [client 130.131.249.131:9261] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "af3e0-B0GbUWhxgzX9VGsAAAAJM"]
[Fri May 08 21:02:15.213066 2026] [:error] [pid 51009:tid 51099] [client 130.131.249.131:5059] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/explorer/index_.php"] [unique_id "af3e1-B0GbUWhxgzX9VGtQAAAJc"]
[Fri May 08 21:02:15.613796 2026] [:error] [pid 51007:tid 51032] [client 130.131.249.131:9336] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "af3e11MagSGstWKyzzXx6gAAAAo"]
[Fri May 08 21:02:16.999722 2026] [:error] [pid 61356:tid 61412] [client 130.131.249.131:9268] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-trackback.php"] [unique_id "af3e2Ix3vpB8oWhUq2O6AgAAAdg"]
[Fri May 08 21:02:17.388849 2026] [proxy_fcgi:error] [pid 51009:tid 51083] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:17.771464 2026] [proxy_fcgi:error] [pid 51009:tid 51088] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:17.962981 2026] [proxy_fcgi:error] [pid 51009:tid 51085] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:18.154497 2026] [proxy_fcgi:error] [pid 51009:tid 51090] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:18.346162 2026] [proxy_fcgi:error] [pid 51009:tid 51097] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:18.537254 2026] [proxy_fcgi:error] [pid 51009:tid 51087] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:18.728917 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:18.921912 2026] [proxy_fcgi:error] [pid 51009:tid 51081] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:19.115933 2026] [proxy_fcgi:error] [pid 51009:tid 51095] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:19.307488 2026] [proxy_fcgi:error] [pid 51009:tid 51098] [client 130.131.249.131:9277] AH01071: Got error 'Primary script unknown'
[Fri May 08 21:02:19.494971 2026] [:error] [pid 51009:tid 51086] [client 130.131.249.131:9277] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "af3e2-B0GbUWhxgzX9VGxAAAAIo"]
[Fri May 08 21:02:19.879808 2026] [:error] [pid 61356:tid 61398] [client 130.131.249.131:5058] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "af3e24x3vpB8oWhUq2O6BwAAAco"]
[Fri May 08 21:02:20.265861 2026] [:error] [pid 51008:tid 51058] [client 130.131.249.131:5105] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "af3e3HB58C2Y1tgLtuKn1QAAAEk"]
[Fri May 08 21:02:20.649294 2026] [:error] [pid 51009:tid 51094] [client 130.131.249.131:5091] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lv.php"] [unique_id "af3e3OB0GbUWhxgzX9VGxQAAAJI"]
[Fri May 08 21:02:21.033615 2026] [:error] [pid 51008:tid 51071] [client 130.131.249.131:5110] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af3e3XB58C2Y1tgLtuKn1wAAAFY"]
[Fri May 08 21:02:23.832321 2026] [:error] [pid 61356:tid 61410] [client 130.131.249.131:9322] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af3e34x3vpB8oWhUq2O6DwAAAdY"]
[Fri May 08 21:02:24.207005 2026] [:error] [pid 51008:tid 51066] [client 130.131.249.131:9248] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af3e4HB58C2Y1tgLtuKn2QAAAFE"]
[Fri May 08 21:02:24.615730 2026] [:error] [pid 61356:tid 61407] [client 130.131.249.131:5114] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af3e4Ix3vpB8oWhUq2O6FgAAAdM"]
[Fri May 08 21:02:24.989850 2026] [:error] [pid 61356:tid 61389] [client 130.131.249.131:5085] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "af3e4Ix3vpB8oWhUq2O6GQAAAcE"]
[Fri May 08 21:02:26.411597 2026] [:error] [pid 34318:tid 34343] [client 130.131.249.131:4996] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "af3e4sr3guirgJiKhzDetgAAARc"]
[Fri May 08 21:02:26.792743 2026] [:error] [pid 61355:tid 61372] [client 130.131.249.131:5090] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "af3e4vkhJTi30CBXmMm6NAAAAYs"]
[Fri May 08 21:02:27.165122 2026] [:error] [pid 61355:tid 61362] [client 130.131.249.131:5046] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/db.php"] [unique_id "af3e4_khJTi30CBXmMm6OAAAAYE"]
[Fri May 08 21:02:27.537024 2026] [:error] [pid 61355:tid 61378] [client 130.131.249.131:9321] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "af3e4_khJTi30CBXmMm6OgAAAZE"]
[Fri May 08 21:02:27.909972 2026] [:error] [pid 61355:tid 61385] [client 130.131.249.131:5068] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "af3e4_khJTi30CBXmMm6PgAAAZg"]
[Fri May 08 21:02:28.282734 2026] [:error] [pid 61356:tid 61398] [client 130.131.249.131:5107] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "af3e5Ix3vpB8oWhUq2O6HwAAAco"]
[Fri May 08 21:02:28.662373 2026] [:error] [pid 61317:tid 61326] [client 130.131.249.131:9225] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.php"] [unique_id "af3e5M-fFk_CedOCOYvOYQAAAUY"]
[Fri May 08 21:02:29.123433 2026] [:error] [pid 61356:tid 61389] [client 130.131.249.131:9244] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "af3e5Yx3vpB8oWhUq2O6JAAAAcE"]
[Fri May 08 21:02:29.510806 2026] [:error] [pid 61356:tid 61396] [client 130.131.249.131:9230] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "af3e5Yx3vpB8oWhUq2O6JQAAAcg"]
[Fri May 08 21:02:29.886134 2026] [:error] [pid 61356:tid 61408] [client 130.131.249.131:5025] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "af3e5Yx3vpB8oWhUq2O6JwAAAdQ"]
[Fri May 08 21:02:30.275118 2026] [:error] [pid 61355:tid 61372] [client 130.131.249.131:9288] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "af3e5vkhJTi30CBXmMm6QwAAAYs"]
[Fri May 08 21:02:30.653687 2026] [:error] [pid 61355:tid 61362] [client 130.131.249.131:5070] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "af3e5vkhJTi30CBXmMm6RAAAAYE"]
[Fri May 08 21:02:31.036798 2026] [:error] [pid 61355:tid 61378] [client 130.131.249.131:9266] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "af3e5_khJTi30CBXmMm6RwAAAZE"]
[Fri May 08 21:02:31.414733 2026] [:error] [pid 61317:tid 61333] [client 130.131.249.131:5060] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "af3e58-fFk_CedOCOYvOYwAAAU0"]
[Fri May 08 21:02:31.789470 2026] [:error] [pid 51007:tid 51027] [client 130.131.249.131:9269] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ok.php"] [unique_id "af3e51MagSGstWKyzzXx8wAAAAU"]
[Fri May 08 21:02:32.165227 2026] [:error] [pid 61317:tid 61330] [client 130.131.249.131:5021] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "af3e6M-fFk_CedOCOYvOZAAAAUo"]
[Fri May 08 21:02:32.554519 2026] [:error] [pid 51009:tid 51094] [client 130.131.249.131:9256] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "af3e6OB0GbUWhxgzX9VG1wAAAJI"]
[Fri May 08 21:02:32.950400 2026] [:error] [pid 61317:tid 61324] [client 130.131.249.131:9273] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "af3e6M-fFk_CedOCOYvOZgAAAUQ"]
[Fri May 08 21:02:33.331492 2026] [:error] [pid 61317:tid 61338] [client 130.131.249.131:9224] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/samll.php"] [unique_id "af3e6c-fFk_CedOCOYvOZwAAAVI"]
[Fri May 08 21:02:33.724741 2026] [:error] [pid 61317:tid 61329] [client 130.131.249.131:5008] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "af3e6c-fFk_CedOCOYvOaQAAAUk"]
[Fri May 08 21:02:34.110860 2026] [:error] [pid 34318:tid 34338] [client 130.131.249.131:5111] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "af3e6sr3guirgJiKhzDeuAAAARI"]
[Fri May 08 21:02:34.496888 2026] [:error] [pid 34318:tid 34326] [client 130.131.249.131:9263] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "af3e6sr3guirgJiKhzDeuQAAAQY"]
[Fri May 08 21:02:34.871601 2026] [:error] [pid 61317:tid 61344] [client 130.131.249.131:5099] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "af3e6s-fFk_CedOCOYvObgAAAVg"]
[Fri May 08 23:11:33.689540 2026] [proxy_fcgi:error] [pid 34318:tid 34321] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:33.995692 2026] [proxy_fcgi:error] [pid 34318:tid 34333] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:34.310754 2026] [proxy_fcgi:error] [pid 34318:tid 34341] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:34.624860 2026] [proxy_fcgi:error] [pid 34318:tid 34338] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:34.927860 2026] [proxy_fcgi:error] [pid 34318:tid 34339] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:35.235242 2026] [proxy_fcgi:error] [pid 34318:tid 34322] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:35.542096 2026] [proxy_fcgi:error] [pid 34318:tid 34325] [client 20.166.9.204:4935] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:11:35.848216 2026] [:error] [pid 34318:tid 34334] [client 20.166.9.204:4935] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doo.php"] [unique_id "af39J8r3guirgJiKhzDvggAAAQ4"]
[Fri May 08 23:11:36.437589 2026] [:error] [pid 61356:tid 61402] [client 20.166.9.204:1390] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doo.php"] [unique_id "af39KIx3vpB8oWhUq2PxoQAAAc4"]
[Fri May 08 23:11:36.983523 2026] [:error] [pid 61356:tid 61395] [client 20.166.9.204:1366] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doo.php"] [unique_id "af39KIx3vpB8oWhUq2PxpgAAAcc"]
[Fri May 08 23:11:37.570412 2026] [:error] [pid 61356:tid 61405] [client 20.166.9.204:15785] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doo.php"] [unique_id "af39KYx3vpB8oWhUq2PxqgAAAdE"]
[Fri May 08 23:11:38.076787 2026] [:error] [pid 61356:tid 61408] [client 20.166.9.204:4289] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "af39Kox3vpB8oWhUq2PxqwAAAdQ"]
[Fri May 08 23:11:38.606636 2026] [:error] [pid 51113:tid 51130] [client 20.166.9.204:9521] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "af39KkQfs7sWtqkpQIeKVgAAAM8"]
[Fri May 08 23:11:39.124721 2026] [:error] [pid 61355:tid 61378] [client 20.166.9.204:13976] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "af39K_khJTi30CBXmMnm0AAAAZE"]
[Fri May 08 23:11:39.658427 2026] [:error] [pid 61355:tid 61372] [client 20.166.9.204:14517] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gm.php"] [unique_id "af39K_khJTi30CBXmMnm1gAAAYs"]
[Fri May 08 23:11:40.157625 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:12293] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "af39LPkhJTi30CBXmMnm3AAAAZA"]
[Fri May 08 23:11:40.701532 2026] [:error] [pid 61356:tid 61392] [client 20.166.9.204:10033] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "af39LIx3vpB8oWhUq2PxsgAAAcQ"]
[Fri May 08 23:11:41.240878 2026] [:error] [pid 51009:tid 51078] [client 20.166.9.204:4009] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "af39LeB0GbUWhxgzX9VnMgAAAII"]
[Fri May 08 23:11:41.819502 2026] [:error] [pid 61356:tid 61390] [client 20.166.9.204:18381] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/eetu.php"] [unique_id "af39LYx3vpB8oWhUq2PxuQAAAcI"]
[Fri May 08 23:11:42.397473 2026] [:error] [pid 61356:tid 61404] [client 20.166.9.204:17535] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af39Lox3vpB8oWhUq2PxvQAAAdA"]
[Fri May 08 23:11:42.924636 2026] [:error] [pid 61355:tid 61384] [client 20.166.9.204:17534] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af39LvkhJTi30CBXmMnm7gAAAZc"]
[Fri May 08 23:11:43.431096 2026] [:error] [pid 61317:tid 61336] [client 20.166.9.204:15781] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af39L8-fFk_CedOCOYvnxQAAAVA"]
[Fri May 08 23:11:44.041753 2026] [:error] [pid 61355:tid 61362] [client 20.166.9.204:11972] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "af39MPkhJTi30CBXmMnm9gAAAYE"]
[Fri May 08 23:11:44.589443 2026] [:error] [pid 61355:tid 61368] [client 20.166.9.204:17527] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "af39MPkhJTi30CBXmMnm-gAAAYc"]
[Fri May 08 23:11:45.148309 2026] [:error] [pid 61355:tid 61384] [client 20.166.9.204:4960] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "af39MfkhJTi30CBXmMnm_gAAAZc"]
[Fri May 08 23:11:45.662732 2026] [:error] [pid 61355:tid 61366] [client 20.166.9.204:15764] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "af39MfkhJTi30CBXmMnnAgAAAYU"]
[Fri May 08 23:11:46.277401 2026] [:error] [pid 61355:tid 61385] [client 20.166.9.204:4953] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-tymanage.php"] [unique_id "af39MvkhJTi30CBXmMnnBQAAAZg"]
[Fri May 08 23:11:46.826558 2026] [:error] [pid 61356:tid 61389] [client 20.166.9.204:17707] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "af39Mox3vpB8oWhUq2PxxAAAAcE"]
[Fri May 08 23:11:47.457755 2026] [:error] [pid 51113:tid 51121] [client 20.166.9.204:13111] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "af39M0Qfs7sWtqkpQIeKWgAAAMY"]
[Fri May 08 23:11:48.127951 2026] [:error] [pid 61356:tid 61403] [client 20.166.9.204:14470] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/r.php"] [unique_id "af39NIx3vpB8oWhUq2PxxwAAAc8"]
[Fri May 08 23:11:48.666466 2026] [:error] [pid 51009:tid 51090] [client 20.166.9.204:18368] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/r.php"] [unique_id "af39NOB0GbUWhxgzX9VnOwAAAI4"]
[Fri May 08 23:11:49.245276 2026] [:error] [pid 51009:tid 51076] [client 20.166.9.204:11994] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/r.php"] [unique_id "af39NeB0GbUWhxgzX9VnPgAAAIA"]
[Fri May 08 23:11:49.800631 2026] [:error] [pid 61355:tid 61375] [client 20.166.9.204:15771] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/r.php"] [unique_id "af39NfkhJTi30CBXmMnnCwAAAY4"]
[Fri May 08 23:11:50.314940 2026] [:error] [pid 61317:tid 61327] [client 20.166.9.204:13071] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af39Ns-fFk_CedOCOYvnxwAAAUc"]
[Fri May 08 23:11:50.814522 2026] [:error] [pid 61356:tid 61398] [client 20.166.9.204:4968] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af39Nox3vpB8oWhUq2PxywAAAco"]
[Fri May 08 23:11:51.310704 2026] [:error] [pid 61356:tid 61396] [client 20.166.9.204:16263] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af39N4x3vpB8oWhUq2Px0AAAAcg"]
[Fri May 08 23:11:51.824896 2026] [:error] [pid 61317:tid 61328] [client 20.166.9.204:12021] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yas.php"] [unique_id "af39N8-fFk_CedOCOYvnywAAAUg"]
[Fri May 08 23:11:52.393026 2026] [:error] [pid 51008:tid 51063] [client 20.166.9.204:15763] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tymi.php"] [unique_id "af39OHB58C2Y1tgLtuK-PAAAAE4"]
[Fri May 08 23:11:52.913701 2026] [:error] [pid 51113:tid 51115] [client 20.166.9.204:16984] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "af39OEQfs7sWtqkpQIeKXwAAAMA"]
[Fri May 08 23:11:53.432079 2026] [:error] [pid 61356:tid 61398] [client 20.166.9.204:14838] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "af39OYx3vpB8oWhUq2Px4AAAAco"]
[Fri May 08 23:11:53.947951 2026] [:error] [pid 61356:tid 61393] [client 20.166.9.204:15755] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "af39OYx3vpB8oWhUq2Px5wAAAcU"]
[Fri May 08 23:11:54.465281 2026] [:error] [pid 61356:tid 61392] [client 20.166.9.204:10861] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lolz.php"] [unique_id "af39Oox3vpB8oWhUq2Px7gAAAcQ"]
[Fri May 08 23:11:55.028474 2026] [:error] [pid 51007:tid 51042] [client 20.166.9.204:17700] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "af39O1MagSGstWKyzzUEewAAABQ"]
[Fri May 08 23:11:55.586937 2026] [:error] [pid 51007:tid 51039] [client 20.166.9.204:17503] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "af39O1MagSGstWKyzzUEgAAAABE"]
[Fri May 08 23:11:56.120944 2026] [:error] [pid 51007:tid 51043] [client 20.166.9.204:14708] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "af39PFMagSGstWKyzzUEhQAAABU"]
[Fri May 08 23:11:56.670117 2026] [:error] [pid 51007:tid 51029] [client 20.166.9.204:4339] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd67.php"] [unique_id "af39PFMagSGstWKyzzUEhwAAAAc"]
[Fri May 08 23:11:57.200524 2026] [:error] [pid 61317:tid 61339] [client 20.166.9.204:12315] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i6z19N.php"] [unique_id "af39Pc-fFk_CedOCOYvn0AAAAVM"]
[Fri May 08 23:11:57.747795 2026] [:error] [pid 61317:tid 61331] [client 20.166.9.204:13105] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i6z19N.php"] [unique_id "af39Pc-fFk_CedOCOYvn0gAAAUs"]
[Fri May 08 23:11:58.298641 2026] [:error] [pid 61356:tid 61407] [client 20.166.9.204:13103] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i6z19N.php"] [unique_id "af39Pox3vpB8oWhUq2Px_AAAAdM"]
[Fri May 08 23:11:58.834060 2026] [:error] [pid 61356:tid 61404] [client 20.166.9.204:1825] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/i6z19N.php"] [unique_id "af39Pox3vpB8oWhUq2PyAgAAAdA"]
[Fri May 08 23:11:59.368191 2026] [:error] [pid 61355:tid 61374] [client 20.166.9.204:9996] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clque.php"] [unique_id "af39P_khJTi30CBXmMnnEAAAAY0"]
[Fri May 08 23:11:59.905742 2026] [:error] [pid 61356:tid 61410] [client 20.166.9.204:11984] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clque.php"] [unique_id "af39P4x3vpB8oWhUq2PyCAAAAdY"]
[Fri May 08 23:12:00.425748 2026] [:error] [pid 61356:tid 61403] [client 20.166.9.204:8337] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clque.php"] [unique_id "af39QIx3vpB8oWhUq2PyCQAAAc8"]
[Fri May 08 23:12:00.927075 2026] [:error] [pid 61356:tid 61391] [client 20.166.9.204:14664] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/clque.php"] [unique_id "af39QIx3vpB8oWhUq2PyDQAAAcM"]
[Fri May 08 23:12:01.455576 2026] [:error] [pid 51009:tid 51076] [client 20.166.9.204:13058] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "af39QeB0GbUWhxgzX9VnSQAAAIA"]
[Fri May 08 23:12:01.971226 2026] [:error] [pid 61317:tid 61337] [client 20.166.9.204:13725] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "af39Qc-fFk_CedOCOYvn2AAAAVE"]
[Fri May 08 23:12:02.509631 2026] [:error] [pid 51008:tid 51068] [client 20.166.9.204:16302] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "af39QnB58C2Y1tgLtuK-RAAAAFM"]
[Fri May 08 23:12:03.028669 2026] [:error] [pid 51008:tid 51052] [client 20.166.9.204:6635] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-ver.php"] [unique_id "af39Q3B58C2Y1tgLtuK-RgAAAEM"]
[Fri May 08 23:12:03.562624 2026] [:error] [pid 51008:tid 51061] [client 20.166.9.204:16976] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "af39Q3B58C2Y1tgLtuK-SAAAAEw"]
[Fri May 08 23:12:04.079249 2026] [:error] [pid 51113:tid 51134] [client 20.166.9.204:4944] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "af39REQfs7sWtqkpQIeKZgAAANM"]
[Fri May 08 23:12:04.594670 2026] [:error] [pid 51009:tid 51084] [client 20.166.9.204:14827] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "af39ROB0GbUWhxgzX9VnUAAAAIg"]
[Fri May 08 23:12:05.128294 2026] [:error] [pid 61317:tid 61320] [client 20.166.9.204:1391] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wert.php"] [unique_id "af39Rc-fFk_CedOCOYvn2wAAAUA"]
[Fri May 08 23:12:05.675417 2026] [:error] [pid 51009:tid 51098] [client 20.166.9.204:15780] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "af39ReB0GbUWhxgzX9VnVgAAAJY"]
[Fri May 08 23:12:06.171151 2026] [:error] [pid 51009:tid 51090] [client 20.166.9.204:9991] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "af39RuB0GbUWhxgzX9VnWgAAAI4"]
[Fri May 08 23:12:06.718881 2026] [:error] [pid 51009:tid 51076] [client 20.166.9.204:15807] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "af39RuB0GbUWhxgzX9VnXAAAAIA"]
[Fri May 08 23:12:07.253575 2026] [:error] [pid 61356:tid 61394] [client 20.166.9.204:13708] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "af39R4x3vpB8oWhUq2PyIQAAAcY"]
[Fri May 08 23:12:07.787379 2026] [:error] [pid 61317:tid 61331] [client 20.166.9.204:18388] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "af39R8-fFk_CedOCOYvn3gAAAUs"]
[Fri May 08 23:12:08.354594 2026] [:error] [pid 61355:tid 61381] [client 20.166.9.204:16123] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "af39SPkhJTi30CBXmMnnFwAAAZQ"]
[Fri May 08 23:12:08.889099 2026] [:error] [pid 61355:tid 61380] [client 20.166.9.204:12290] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "af39SPkhJTi30CBXmMnnGwAAAZM"]
[Fri May 08 23:12:09.405761 2026] [:error] [pid 51008:tid 51065] [client 20.166.9.204:18467] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "af39SXB58C2Y1tgLtuK-SwAAAFA"]
[Fri May 08 23:12:09.922382 2026] [:error] [pid 61317:tid 61341] [client 20.166.9.204:18484] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xslclbn.php"] [unique_id "af39Sc-fFk_CedOCOYvn3wAAAVU"]
[Fri May 08 23:12:10.457961 2026] [:error] [pid 51007:tid 51046] [client 20.166.9.204:10827] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xslclbn.php"] [unique_id "af39SlMagSGstWKyzzUEqQAAABg"]
[Fri May 08 23:12:10.998877 2026] [:error] [pid 51007:tid 51026] [client 20.166.9.204:15361] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xslclbn.php"] [unique_id "af39SlMagSGstWKyzzUErAAAAAQ"]
[Fri May 08 23:12:11.514641 2026] [:error] [pid 61356:tid 61393] [client 20.166.9.204:1089] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xslclbn.php"] [unique_id "af39S4x3vpB8oWhUq2PyKwAAAcU"]
[Fri May 08 23:12:12.045276 2026] [:error] [pid 51009:tid 51100] [client 20.166.9.204:18458] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "af39TOB0GbUWhxgzX9VnXwAAAJg"]
[Fri May 08 23:12:12.564719 2026] [:error] [pid 61317:tid 61327] [client 20.166.9.204:4951] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "af39TM-fFk_CedOCOYvn5AAAAUc"]
[Fri May 08 23:12:13.092496 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:12319] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "af39TfkhJTi30CBXmMnnKwAAAZA"]
[Fri May 08 23:12:13.591125 2026] [:error] [pid 61356:tid 61396] [client 20.166.9.204:14705] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/less.php"] [unique_id "af39TYx3vpB8oWhUq2PyOgAAAcg"]
[Fri May 08 23:12:14.105369 2026] [:error] [pid 51008:tid 51054] [client 20.166.9.204:14484] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "af39TnB58C2Y1tgLtuK-TQAAAEU"]
[Fri May 08 23:12:14.619810 2026] [:error] [pid 51008:tid 51051] [client 20.166.9.204:18486] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "af39TnB58C2Y1tgLtuK-UAAAAEI"]
[Fri May 08 23:12:15.146680 2026] [:error] [pid 51008:tid 51068] [client 20.166.9.204:18398] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "af39T3B58C2Y1tgLtuK-UwAAAFM"]
[Fri May 08 23:12:15.660670 2026] [:error] [pid 34318:tid 34333] [client 20.166.9.204:17007] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/albrt.php"] [unique_id "af39T8r3guirgJiKhzDvnQAAAQ0"]
[Fri May 08 23:12:16.194832 2026] [:error] [pid 51009:tid 51084] [client 20.166.9.204:11992] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "af39UOB0GbUWhxgzX9VnZgAAAIg"]
[Fri May 08 23:12:16.709745 2026] [:error] [pid 51113:tid 51122] [client 20.166.9.204:16257] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "af39UEQfs7sWtqkpQIeKbwAAAMc"]
[Fri May 08 23:12:17.227224 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:15777] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "af39UfkhJTi30CBXmMnnLwAAAZA"]
[Fri May 08 23:12:17.775175 2026] [:error] [pid 51007:tid 51031] [client 20.166.9.204:14691] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tiny2.php"] [unique_id "af39UVMagSGstWKyzzUEswAAAAk"]
[Fri May 08 23:12:18.342408 2026] [:error] [pid 34318:tid 34330] [client 20.166.9.204:4470] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an8.php"] [unique_id "af39Usr3guirgJiKhzDvngAAAQo"]
[Fri May 08 23:12:18.891245 2026] [:error] [pid 51009:tid 51082] [client 20.166.9.204:17507] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an8.php"] [unique_id "af39UuB0GbUWhxgzX9VnawAAAIY"]
[Fri May 08 23:12:19.420205 2026] [:error] [pid 51008:tid 51056] [client 20.166.9.204:13074] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an8.php"] [unique_id "af39U3B58C2Y1tgLtuK-ZwAAAEc"]
[Fri May 08 23:12:19.967145 2026] [:error] [pid 51008:tid 51066] [client 20.166.9.204:4448] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/an8.php"] [unique_id "af39U3B58C2Y1tgLtuK-aQAAAFE"]
[Fri May 08 23:12:20.483385 2026] [:error] [pid 34318:tid 34339] [client 20.166.9.204:4453] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq.php"] [unique_id "af39VMr3guirgJiKhzDvnwAAARM"]
[Fri May 08 23:12:21.030560 2026] [:error] [pid 61317:tid 61341] [client 20.166.9.204:15804] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq.php"] [unique_id "af39Vc-fFk_CedOCOYvn7QAAAVU"]
[Fri May 08 23:12:21.587283 2026] [:error] [pid 51007:tid 51045] [client 20.166.9.204:16837] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq.php"] [unique_id "af39VVMagSGstWKyzzUEtgAAABc"]
[Fri May 08 23:12:22.136405 2026] [:error] [pid 61356:tid 61399] [client 20.166.9.204:11985] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zwq.php"] [unique_id "af39Vox3vpB8oWhUq2PyQgAAAcs"]
[Fri May 08 23:12:22.666889 2026] [:error] [pid 51007:tid 51026] [client 20.166.9.204:13745] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "af39VlMagSGstWKyzzUEugAAAAQ"]
[Fri May 08 23:12:23.182535 2026] [:error] [pid 61317:tid 61340] [client 20.166.9.204:14469] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "af39V8-fFk_CedOCOYvoCQAAAVQ"]
[Fri May 08 23:12:23.698744 2026] [:error] [pid 51009:tid 51098] [client 20.166.9.204:17502] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "af39V-B0GbUWhxgzX9VnewAAAJY"]
[Fri May 08 23:12:24.235718 2026] [:error] [pid 34318:tid 34327] [client 20.166.9.204:15769] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "af39WMr3guirgJiKhzDvpQAAAQc"]
[Fri May 08 23:12:24.753888 2026] [:error] [pid 61317:tid 61335] [client 20.166.9.204:17485] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "af39WM-fFk_CedOCOYvoEAAAAU8"]
[Fri May 08 23:12:25.268082 2026] [:error] [pid 61356:tid 61399] [client 20.166.9.204:14487] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "af39WYx3vpB8oWhUq2PyWgAAAcs"]
[Fri May 08 23:12:25.782911 2026] [:error] [pid 61356:tid 61406] [client 20.166.9.204:1145] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "af39WYx3vpB8oWhUq2PyXgAAAdI"]
[Fri May 08 23:12:26.301888 2026] [:error] [pid 51008:tid 51072] [client 20.166.9.204:8172] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/55.php"] [unique_id "af39WnB58C2Y1tgLtuK-cwAAAFc"]
[Fri May 08 23:12:26.828688 2026] [:error] [pid 51113:tid 51124] [client 20.166.9.204:14795] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "af39WkQfs7sWtqkpQIeKewAAAMk"]
[Fri May 08 23:12:27.375162 2026] [:error] [pid 34318:tid 34342] [client 20.166.9.204:7066] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "af39W8r3guirgJiKhzDvqQAAARY"]
[Fri May 08 23:12:27.889786 2026] [:error] [pid 61356:tid 61390] [client 20.166.9.204:10040] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "af39W4x3vpB8oWhUq2PyZgAAAcI"]
[Fri May 08 23:12:28.436171 2026] [:error] [pid 61355:tid 61370] [client 20.166.9.204:17023] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ups.php"] [unique_id "af39XPkhJTi30CBXmMnnMAAAAYk"]
[Fri May 08 23:12:28.970578 2026] [:error] [pid 51007:tid 51042] [client 20.166.9.204:1788] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-demomav.php"] [unique_id "af39XFMagSGstWKyzzUExAAAABQ"]
[Fri May 08 23:12:29.484742 2026] [:error] [pid 51113:tid 51134] [client 20.166.9.204:15800] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-demomav.php"] [unique_id "af39XUQfs7sWtqkpQIeKgAAAANM"]
[Fri May 08 23:12:30.032068 2026] [:error] [pid 51007:tid 51039] [client 20.166.9.204:4342] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-demomav.php"] [unique_id "af39XlMagSGstWKyzzUEyAAAABE"]
[Fri May 08 23:12:30.548662 2026] [:error] [pid 61355:tid 61383] [client 20.166.9.204:10867] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-demomav.php"] [unique_id "af39XvkhJTi30CBXmMnnMQAAAZY"]
[Fri May 08 23:12:31.066530 2026] [:error] [pid 61355:tid 61362] [client 20.166.9.204:14682] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "af39X_khJTi30CBXmMnnNQAAAYE"]
[Fri May 08 23:12:31.604613 2026] [:error] [pid 61356:tid 61396] [client 20.166.9.204:14493] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "af39X4x3vpB8oWhUq2PycAAAAcg"]
[Fri May 08 23:12:32.171844 2026] [:error] [pid 34318:tid 34338] [client 20.166.9.204:17497] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "af39YMr3guirgJiKhzDvqwAAARI"]
[Fri May 08 23:12:32.744465 2026] [:error] [pid 61356:tid 61391] [client 20.166.9.204:17526] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/greateb.php"] [unique_id "af39YIx3vpB8oWhUq2PycgAAAcM"]
[Fri May 08 23:12:33.258043 2026] [:error] [pid 61356:tid 61399] [client 20.166.9.204:5366] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "af39YYx3vpB8oWhUq2PydAAAAcs"]
[Fri May 08 23:12:33.786572 2026] [:error] [pid 61355:tid 61372] [client 20.166.9.204:16989] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "af39YfkhJTi30CBXmMnnPAAAAYs"]
[Fri May 08 23:12:34.284376 2026] [:error] [pid 61355:tid 61371] [client 20.166.9.204:18454] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "af39YvkhJTi30CBXmMnnQAAAAYo"]
[Fri May 08 23:12:34.847283 2026] [:error] [pid 61355:tid 61383] [client 20.166.9.204:3231] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/co.php"] [unique_id "af39YvkhJTi30CBXmMnnRAAAAZY"]
[Fri May 08 23:12:35.356473 2026] [proxy_fcgi:error] [pid 61355:tid 61378] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:35.608655 2026] [proxy_fcgi:error] [pid 61355:tid 61380] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:35.860154 2026] [proxy_fcgi:error] [pid 61355:tid 61369] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:36.111806 2026] [proxy_fcgi:error] [pid 61355:tid 61372] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:36.363045 2026] [proxy_fcgi:error] [pid 61355:tid 61366] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:36.615831 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:36.866585 2026] [proxy_fcgi:error] [pid 61355:tid 61364] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:37.117518 2026] [proxy_fcgi:error] [pid 61355:tid 61363] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Fri May 08 23:12:37.368045 2026] [proxy_fcgi:error] [pid 61355:tid 61374] [client 20.166.9.204:10165] AH01071: Got error 'Primary script unknown'
[Sat May 09 00:56:27.987452 2026] [:error] [pid 61317:tid 61321] [client 175.27.163.171:52656] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "af4Vu8-fFk_CedOCOYv9rQAAAUE"]
[Sat May 09 01:17:01.004375 2026] [:error] [pid 51007:tid 51031] [client 13.208.252.11:51934] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "af4ajVMagSGstWKyzzUWmwAAAAk"]
[Sat May 09 01:17:01.735538 2026] [:error] [pid 51007:tid 51034] [client 13.208.252.11:51972] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4ajVMagSGstWKyzzUWpAAAAAw"]
[Sat May 09 01:17:02.330708 2026] [proxy_fcgi:error] [pid 61355:tid 61384] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:02.484087 2026] [proxy_fcgi:error] [pid 61355:tid 61377] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:02.635421 2026] [proxy_fcgi:error] [pid 61355:tid 61365] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:02.785728 2026] [proxy_fcgi:error] [pid 61355:tid 61375] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:02.937726 2026] [proxy_fcgi:error] [pid 61355:tid 61368] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:03.088175 2026] [proxy_fcgi:error] [pid 61355:tid 61373] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:03.239926 2026] [proxy_fcgi:error] [pid 61355:tid 61380] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:03.540723 2026] [proxy_fcgi:error] [pid 61355:tid 61370] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:03.690392 2026] [proxy_fcgi:error] [pid 61355:tid 61368] [client 13.208.252.11:52046] AH01071: Got error 'Primary script unknown'
[Sat May 09 01:17:03.988000 2026] [:error] [pid 61355:tid 61367] [client 13.208.252.11:52046] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test/phpinfo.php"] [unique_id "af4aj_khJTi30CBXmMkiegAAAYY"]
[Sat May 09 01:17:04.572928 2026] [:error] [pid 61355:tid 61372] [client 13.208.252.11:57082] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dev/phpinfo.php"] [unique_id "af4akPkhJTi30CBXmMkifAAAAYs"]
[Sat May 09 01:17:05.164771 2026] [:error] [pid 61356:tid 61389] [client 13.208.252.11:57134] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old/phpinfo.php"] [unique_id "af4akYx3vpB8oWhUq2MeSwAAAcE"]
[Sat May 09 01:17:05.751077 2026] [:error] [pid 61317:tid 61324] [client 13.208.252.11:57202] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tmp/phpinfo.php"] [unique_id "af4akc-fFk_CedOCOYsGYQAAAUQ"]
[Sat May 09 01:17:06.340385 2026] [:error] [pid 61356:tid 61407] [client 13.208.252.11:57252] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public/phpinfo.php"] [unique_id "af4akox3vpB8oWhUq2MeVAAAAdM"]
[Sat May 09 01:17:06.921689 2026] [:error] [pid 51113:tid 51121] [client 13.208.252.11:57304] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info"] [unique_id "af4akkQfs7sWtqkpQIeYtgAAAMY"]
[Sat May 09 01:17:07.502063 2026] [:error] [pid 61355:tid 61364] [client 13.208.252.11:57354] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php-info.php"] [unique_id "af4ak_khJTi30CBXmMkiigAAAYM"]
[Sat May 09 01:17:08.078164 2026] [:error] [pid 61355:tid 61372] [client 13.208.252.11:57394] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "af4alPkhJTi30CBXmMkijQAAAYs"]
[Sat May 09 01:17:08.667281 2026] [:error] [pid 51008:tid 51063] [client 13.208.252.11:57448] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/_phpinfo.php"] [unique_id "af4alHB58C2Y1tgLtuLU1AAAAE4"]
[Sat May 09 01:17:09.255440 2026] [:error] [pid 51008:tid 51062] [client 13.208.252.11:57496] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/old_phpinfo.php"] [unique_id "af4alXB58C2Y1tgLtuLU2AAAAE0"]
[Sat May 09 01:17:09.842380 2026] [:error] [pid 61317:tid 61340] [client 13.208.252.11:57534] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/server-info.php"] [unique_id "af4alc-fFk_CedOCOYsGcAAAAVQ"]
[Sat May 09 01:17:10.428549 2026] [:error] [pid 61355:tid 61369] [client 13.208.252.11:57572] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/server-status.php"] [unique_id "af4alvkhJTi30CBXmMkioAAAAYg"]
[Sat May 09 01:17:11.008842 2026] [:error] [pid 51009:tid 51087] [client 13.208.252.11:57610] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/_profiler/phpinfo"] [unique_id "af4al-B0GbUWhxgzX9WKYwAAAIs"]
[Sat May 09 01:17:11.590968 2026] [:error] [pid 61356:tid 61405] [client 13.208.252.11:57668] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/_environment"] [unique_id "af4al4x3vpB8oWhUq2MebAAAAdE"]
[Sat May 09 01:17:12.169661 2026] [:error] [pid 61356:tid 61388] [client 13.208.252.11:57728] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webroot/index.php/_environment"] [unique_id "af4amIx3vpB8oWhUq2MecAAAAcA"]
[Sat May 09 01:17:12.755737 2026] [:error] [pid 61356:tid 61397] [client 13.208.252.11:57780] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mail/phpinfo.php"] [unique_id "af4amIx3vpB8oWhUq2MedgAAAck"]
[Sat May 09 01:17:13.343107 2026] [:error] [pid 61317:tid 61323] [client 13.208.252.11:57828] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cpanel/phpinfo.php"] [unique_id "af4amc-fFk_CedOCOYsGdgAAAUM"]
[Sat May 09 01:17:13.926069 2026] [:error] [pid 34318:tid 34343] [client 13.208.252.11:57860] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hosting/phpinfo.php"] [unique_id "af4amcr3guirgJiKhzAAxgAAARc"]
[Sat May 09 01:17:14.512763 2026] [:error] [pid 61355:tid 61366] [client 13.208.252.11:52718] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/webmail/phpinfo.php"] [unique_id "af4amvkhJTi30CBXmMkiwQAAAYU"]
[Sat May 09 01:17:15.097082 2026] [:error] [pid 61356:tid 61409] [client 13.208.252.11:52770] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/smtp/phpinfo.php"] [unique_id "af4am4x3vpB8oWhUq2MeggAAAdU"]
[Sat May 09 01:17:15.683825 2026] [:error] [pid 34318:tid 34337] [client 13.208.252.11:52800] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php.bak"] [unique_id "af4am8r3guirgJiKhzAAywAAARE"]
[Sat May 09 01:17:16.263960 2026] [:error] [pid 61356:tid 61401] [client 13.208.252.11:52862] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php.old"] [unique_id "af4anIx3vpB8oWhUq2MeiAAAAc0"]
[Sat May 09 01:17:16.844741 2026] [:error] [pid 51009:tid 51078] [client 13.208.252.11:52902] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php~"] [unique_id "af4anOB0GbUWhxgzX9WKcgAAAII"]
[Sat May 09 01:17:17.424875 2026] [:error] [pid 51009:tid 51097] [client 13.208.252.11:52936] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php.bak"] [unique_id "af4aneB0GbUWhxgzX9WKdgAAAJU"]
[Sat May 09 01:17:18.011298 2026] [:error] [pid 61317:tid 61340] [client 13.208.252.11:53002] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo.php.save"] [unique_id "af4ans-fFk_CedOCOYsGgQAAAVQ"]
[Sat May 09 01:17:18.592750 2026] [:error] [pid 51007:tid 51045] [client 13.208.252.11:53054] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/staging/phpinfo.php"] [unique_id "af4anlMagSGstWKyzzUWvgAAABc"]
[Sat May 09 01:17:19.171492 2026] [:error] [pid 61355:tid 61376] [client 13.208.252.11:53100] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/beta/phpinfo.php"] [unique_id "af4an_khJTi30CBXmMki1QAAAY8"]
[Sat May 09 01:17:19.755804 2026] [:error] [pid 61355:tid 61371] [client 13.208.252.11:53132] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/uat/phpinfo.php"] [unique_id "af4an_khJTi30CBXmMki4AAAAYo"]
[Sat May 09 01:17:20.338520 2026] [:error] [pid 61355:tid 61377] [client 13.208.252.11:53176] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/qa/phpinfo.php"] [unique_id "af4aoPkhJTi30CBXmMki6QAAAZA"]
[Sat May 09 01:17:20.918680 2026] [:error] [pid 61317:tid 61331] [client 13.208.252.11:53212] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/preview/phpinfo.php"] [unique_id "af4aoM-fFk_CedOCOYsGhAAAAUs"]
[Sat May 09 01:17:21.499108 2026] [:error] [pid 51009:tid 51082] [client 13.208.252.11:53262] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/www/phpinfo.php"] [unique_id "af4aoeB0GbUWhxgzX9WKeQAAAIY"]
[Sat May 09 01:17:22.086838 2026] [:error] [pid 61355:tid 61379] [client 13.208.252.11:53300] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/htdocs/phpinfo.php"] [unique_id "af4aovkhJTi30CBXmMki7gAAAZI"]
[Sat May 09 01:17:22.675674 2026] [:error] [pid 61356:tid 61392] [client 13.208.252.11:53334] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/public_html/phpinfo.php"] [unique_id "af4aoox3vpB8oWhUq2MenwAAAcQ"]
[Sat May 09 01:17:23.255422 2026] [:error] [pid 51007:tid 51026] [client 13.208.252.11:53374] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/site/phpinfo.php"] [unique_id "af4ao1MagSGstWKyzzUWxwAAAAQ"]
[Sat May 09 01:17:23.835052 2026] [:error] [pid 61356:tid 61397] [client 13.208.252.11:53404] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/docs/phpinfo.php"] [unique_id "af4ao4x3vpB8oWhUq2MeqQAAAck"]
[Sat May 09 01:17:24.421254 2026] [:error] [pid 34318:tid 34343] [client 13.208.252.11:36712] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4apMr3guirgJiKhzAA4wAAARc"]
[Sat May 09 01:17:25.007649 2026] [:error] [pid 61356:tid 61405] [client 13.208.252.11:36750] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/administrator/phpinfo.php"] [unique_id "af4apYx3vpB8oWhUq2MergAAAdE"]
[Sat May 09 01:17:25.598285 2026] [:error] [pid 61355:tid 61367] [client 13.208.252.11:36796] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/core/phpinfo.php"] [unique_id "af4apfkhJTi30CBXmMki-wAAAYY"]
[Sat May 09 01:17:26.181208 2026] [:error] [pid 51007:tid 51043] [client 13.208.252.11:36838] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/includes/phpinfo.php"] [unique_id "af4aplMagSGstWKyzzUWzAAAABU"]
[Sat May 09 02:22:33.638173 2026] [:error] [pid 61356:tid 61411] [client 3.101.153.28:44288] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "af4p6Yx3vpB8oWhUq2NCxwAAAdc"]
[Sat May 09 02:22:34.455745 2026] [:error] [pid 61356:tid 61403] [client 3.101.153.28:44358] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4p6ox3vpB8oWhUq2NCzAAAAc8"]
[Sat May 09 02:22:35.108742 2026] [proxy_fcgi:error] [pid 51009:tid 51077] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:35.279525 2026] [proxy_fcgi:error] [pid 51009:tid 51085] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:35.447539 2026] [proxy_fcgi:error] [pid 51009:tid 51084] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:35.614467 2026] [proxy_fcgi:error] [pid 51009:tid 51095] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:35.785704 2026] [proxy_fcgi:error] [pid 51009:tid 51090] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:35.953456 2026] [proxy_fcgi:error] [pid 51009:tid 51093] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:36.121045 2026] [proxy_fcgi:error] [pid 51009:tid 51099] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:36.458342 2026] [proxy_fcgi:error] [pid 51009:tid 51080] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:36.625821 2026] [proxy_fcgi:error] [pid 51009:tid 51091] [client 3.101.153.28:44412] AH01071: Got error 'Primary script unknown'
[Sat May 09 02:22:36.957156 2026] [:error] [pid 51009:tid 51092] [client 3.101.153.28:44412] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/test/phpinfo.php"] [unique_id "af4p7OB0GbUWhxgzX9WlngAAAJA"]
[Sat May 09 02:22:37.612194 2026] [:error] [pid 51113:tid 51123] [client 3.101.153.28:44484] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/dev/phpinfo.php"] [unique_id "af4p7UQfs7sWtqkpQIehbwAAAMg"]
[Sat May 09 02:22:38.269772 2026] [:error] [pid 61355:tid 61366] [client 3.101.153.28:44520] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/old/phpinfo.php"] [unique_id "af4p7vkhJTi30CBXmMlYiAAAAYU"]
[Sat May 09 02:22:38.928810 2026] [:error] [pid 51008:tid 51066] [client 3.101.153.28:44534] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/tmp/phpinfo.php"] [unique_id "af4p7nB58C2Y1tgLtuLn5wAAAFE"]
[Sat May 09 02:22:39.589331 2026] [:error] [pid 61356:tid 61408] [client 3.101.153.28:44584] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/public/phpinfo.php"] [unique_id "af4p74x3vpB8oWhUq2NC7wAAAdQ"]
[Sat May 09 02:22:40.251947 2026] [:error] [pid 61355:tid 61377] [client 3.101.153.28:44636] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info"] [unique_id "af4p8PkhJTi30CBXmMlYkgAAAZA"]
[Sat May 09 02:22:40.908144 2026] [:error] [pid 61356:tid 61395] [client 3.101.153.28:42482] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/php-info.php"] [unique_id "af4p8Ix3vpB8oWhUq2NC9AAAAcc"]
[Sat May 09 02:22:41.560900 2026] [:error] [pid 61355:tid 61366] [client 3.101.153.28:42530] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpversion.php"] [unique_id "af4p8fkhJTi30CBXmMlYlgAAAYU"]
[Sat May 09 02:22:42.223182 2026] [:error] [pid 34318:tid 34340] [client 3.101.153.28:42568] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/_phpinfo.php"] [unique_id "af4p8sr3guirgJiKhzAMZAAAARQ"]
[Sat May 09 02:22:42.883939 2026] [:error] [pid 51007:tid 51039] [client 3.101.153.28:42620] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/old_phpinfo.php"] [unique_id "af4p8lMagSGstWKyzzUk-AAAABE"]
[Sat May 09 02:22:43.537092 2026] [:error] [pid 51007:tid 51024] [client 3.101.153.28:42658] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server-info.php"] [unique_id "af4p81MagSGstWKyzzUk-wAAAAI"]
[Sat May 09 02:22:44.202855 2026] [:error] [pid 51113:tid 51125] [client 3.101.153.28:42688] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/server-status.php"] [unique_id "af4p9EQfs7sWtqkpQIehcwAAAMo"]
[Sat May 09 02:22:44.859017 2026] [:error] [pid 61356:tid 61401] [client 3.101.153.28:42746] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/_profiler/phpinfo"] [unique_id "af4p9Ix3vpB8oWhUq2NC-wAAAc0"]
[Sat May 09 02:22:45.517909 2026] [:error] [pid 34318:tid 34337] [client 3.101.153.28:42768] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/_environment"] [unique_id "af4p9cr3guirgJiKhzAMbQAAARE"]
[Sat May 09 02:22:46.178118 2026] [:error] [pid 61356:tid 61399] [client 3.101.153.28:42826] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/webroot/index.php/_environment"] [unique_id "af4p9ox3vpB8oWhUq2NDAAAAAcs"]
[Sat May 09 02:22:46.832608 2026] [:error] [pid 51009:tid 51100] [client 3.101.153.28:42874] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/mail/phpinfo.php"] [unique_id "af4p9uB0GbUWhxgzX9WlpQAAAJg"]
[Sat May 09 02:22:47.489440 2026] [:error] [pid 51009:tid 51083] [client 3.101.153.28:42904] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/cpanel/phpinfo.php"] [unique_id "af4p9-B0GbUWhxgzX9WlqwAAAIc"]
[Sat May 09 02:22:48.147246 2026] [:error] [pid 34318:tid 34333] [client 3.101.153.28:42942] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/hosting/phpinfo.php"] [unique_id "af4p-Mr3guirgJiKhzAMcAAAAQ0"]
[Sat May 09 02:22:48.799606 2026] [:error] [pid 51007:tid 51039] [client 3.101.153.28:43000] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/webmail/phpinfo.php"] [unique_id "af4p-FMagSGstWKyzzUlBgAAABE"]
[Sat May 09 02:22:49.456500 2026] [:error] [pid 61355:tid 61367] [client 3.101.153.28:43052] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/smtp/phpinfo.php"] [unique_id "af4p-fkhJTi30CBXmMlYogAAAYY"]
[Sat May 09 02:22:50.105530 2026] [:error] [pid 61356:tid 61392] [client 3.101.153.28:43088] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php.bak"] [unique_id "af4p-ox3vpB8oWhUq2NDBAAAAcQ"]
[Sat May 09 02:22:50.767164 2026] [:error] [pid 61356:tid 61390] [client 3.101.153.28:43126] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php.old"] [unique_id "af4p-ox3vpB8oWhUq2NDBgAAAcI"]
[Sat May 09 02:22:51.417560 2026] [:error] [pid 61356:tid 61405] [client 3.101.153.28:49068] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php~"] [unique_id "af4p-4x3vpB8oWhUq2NDDQAAAdE"]
[Sat May 09 02:22:52.069327 2026] [:error] [pid 61355:tid 61362] [client 3.101.153.28:49114] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/info.php.bak"] [unique_id "af4p_PkhJTi30CBXmMlYpgAAAYE"]
[Sat May 09 02:22:52.721827 2026] [:error] [pid 34318:tid 34338] [client 3.101.153.28:49150] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/phpinfo.php.save"] [unique_id "af4p_Mr3guirgJiKhzAMcwAAARI"]
[Sat May 09 02:22:53.379066 2026] [:error] [pid 51113:tid 51131] [client 3.101.153.28:49188] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/staging/phpinfo.php"] [unique_id "af4p_UQfs7sWtqkpQIehdgAAANA"]
[Sat May 09 02:22:54.040100 2026] [:error] [pid 51007:tid 51041] [client 3.101.153.28:49226] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/beta/phpinfo.php"] [unique_id "af4p_lMagSGstWKyzzUlDwAAABM"]
[Sat May 09 02:22:54.709667 2026] [:error] [pid 51007:tid 51042] [client 3.101.153.28:49272] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/uat/phpinfo.php"] [unique_id "af4p_lMagSGstWKyzzUlEwAAABQ"]
[Sat May 09 02:22:55.377116 2026] [:error] [pid 61356:tid 61402] [client 3.101.153.28:49296] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/qa/phpinfo.php"] [unique_id "af4p_4x3vpB8oWhUq2NDEwAAAc4"]
[Sat May 09 02:22:56.034676 2026] [:error] [pid 51007:tid 51035] [client 3.101.153.28:49328] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/preview/phpinfo.php"] [unique_id "af4qAFMagSGstWKyzzUlFwAAAA0"]
[Sat May 09 02:22:56.692473 2026] [:error] [pid 51009:tid 51082] [client 3.101.153.28:49376] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/www/phpinfo.php"] [unique_id "af4qAOB0GbUWhxgzX9WlvQAAAIY"]
[Sat May 09 02:22:57.351894 2026] [:error] [pid 51009:tid 51077] [client 3.101.153.28:49422] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/htdocs/phpinfo.php"] [unique_id "af4qAeB0GbUWhxgzX9WlvgAAAIE"]
[Sat May 09 02:22:58.010538 2026] [:error] [pid 51009:tid 51079] [client 3.101.153.28:49460] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/public_html/phpinfo.php"] [unique_id "af4qAuB0GbUWhxgzX9WlwAAAAIM"]
[Sat May 09 02:22:58.665849 2026] [:error] [pid 51007:tid 51028] [client 3.101.153.28:49492] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/site/phpinfo.php"] [unique_id "af4qAlMagSGstWKyzzUlHgAAAAY"]
[Sat May 09 02:22:59.318027 2026] [:error] [pid 51007:tid 51034] [client 3.101.153.28:49530] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/docs/phpinfo.php"] [unique_id "af4qA1MagSGstWKyzzUlIAAAAAw"]
[Sat May 09 02:22:59.975232 2026] [:error] [pid 51009:tid 51089] [client 3.101.153.28:49590] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4qA-B0GbUWhxgzX9WlyAAAAI0"]
[Sat May 09 02:23:00.641443 2026] [:error] [pid 51007:tid 51037] [client 3.101.153.28:49640] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/administrator/phpinfo.php"] [unique_id "af4qBFMagSGstWKyzzUlJAAAAA8"]
[Sat May 09 02:23:01.304053 2026] [:error] [pid 61355:tid 61367] [client 3.101.153.28:49260] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/core/phpinfo.php"] [unique_id "af4qBfkhJTi30CBXmMlYwgAAAYY"]
[Sat May 09 02:23:01.959367 2026] [:error] [pid 61356:tid 61410] [client 3.101.153.28:49314] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourbrand.com"] [uri "/includes/phpinfo.php"] [unique_id "af4qBYx3vpB8oWhUq2NDGgAAAdY"]
[Sat May 09 03:43:17.794481 2026] [:error] [pid 9393:tid 9457] [client 34.62.119.207:37918] [client 34.62.119.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/config"] [unique_id "af481eteVHhYnMN-AjhDMQAAAIc"]
[Sat May 09 04:00:21.213921 2026] [:error] [pid 9760:tid 9771] [client 45.130.83.105:37677] [client 45.130.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.105, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "af5A1WIkCp-C_fh0s7L0oAAAAUU"]
[Sat May 09 04:00:21.241686 2026] [proxy_fcgi:error] [pid 9760:tid 9771] [client 45.130.83.105:37677] AH01071: Got error 'Primary script unknown'
[Sat May 09 04:03:26.013219 2026] [:error] [pid 9833:tid 9858] [client 13.208.252.11:41872] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "af5BjiM9JmxIS0KGZUAd5AAAAZQ"]
[Sat May 09 04:03:26.751939 2026] [:error] [pid 9833:tid 9860] [client 13.208.252.11:41896] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "af5BjiM9JmxIS0KGZUAd5wAAAZY"]
[Sat May 09 04:03:27.332625 2026] [:error] [pid 9186:tid 9233] [client 13.208.252.11:41916] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "af5BjxW4eFOEw1mKOgJfqAAAAEc"]
[Sat May 09 04:03:27.921573 2026] [:error] [pid 9293:tid 9319] [client 13.208.252.11:41930] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "af5Bj5R__qEzV5O6Z2OH-wAAANY"]
[Sat May 09 04:03:28.507965 2026] [:error] [pid 9293:tid 9318] [client 13.208.252.11:41950] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "af5BkJR__qEzV5O6Z2OH_QAAANU"]
[Sat May 09 04:03:29.100496 2026] [:error] [pid 9187:tid 9260] [client 13.208.252.11:41970] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "af5BkRC7An6gkXsRsaG6IgAAAIc"]
[Sat May 09 04:03:29.680949 2026] [:error] [pid 9187:tid 9257] [client 13.208.252.11:42006] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "af5BkRC7An6gkXsRsaG6JwAAAIQ"]
[Sat May 09 04:03:30.268573 2026] [:error] [pid 9293:tid 9306] [client 13.208.252.11:42030] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.remote"] [unique_id "af5BkpR__qEzV5O6Z2OIAwAAAMk"]
[Sat May 09 04:03:30.859154 2026] [:error] [pid 9186:tid 9240] [client 13.208.252.11:42060] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "af5BkhW4eFOEw1mKOgJfqgAAAE4"]
[Sat May 09 04:03:31.471602 2026] [:error] [pid 9187:tid 9270] [client 13.208.252.11:42102] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "af5BkxC7An6gkXsRsaG6KwAAAJE"]
[Sat May 09 04:03:32.052555 2026] [:error] [pid 9663:tid 9674] [client 13.208.252.11:42134] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "af5BlJcWIu01SCxbjwuqjQAAAQg"]
[Sat May 09 04:03:32.638834 2026] [:error] [pid 9833:tid 9855] [client 13.208.252.11:42166] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "af5BlCM9JmxIS0KGZUAd7wAAAZE"]
[Sat May 09 04:03:33.226813 2026] [:error] [pid 9186:tid 9229] [client 13.208.252.11:42202] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.sample"] [unique_id "af5BlRW4eFOEw1mKOgJfrQAAAEM"]
[Sat May 09 04:03:33.809244 2026] [:error] [pid 9184:tid 9198] [client 13.208.252.11:42214] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "af5BlYjfODqb_i0Fm99LHwAAAAE"]
[Sat May 09 04:03:34.397506 2026] [:error] [pid 9184:tid 9211] [client 13.208.252.11:42236] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "af5BlojfODqb_i0Fm99LIQAAAA4"]
[Sat May 09 04:03:34.987330 2026] [:error] [pid 9760:tid 9782] [client 13.208.252.11:42422] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "af5BlmIkCp-C_fh0s7L0-gAAAVA"]
[Sat May 09 04:03:35.569153 2026] [:error] [pid 9663:tid 9667] [client 13.208.252.11:42436] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.stage"] [unique_id "af5Bl5cWIu01SCxbjwuqkwAAAQE"]
[Sat May 09 04:03:36.157202 2026] [:error] [pid 9663:tid 9690] [client 13.208.252.11:42456] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.ci"] [unique_id "af5BmJcWIu01SCxbjwuqlAAAARg"]
[Sat May 09 04:03:36.744841 2026] [:error] [pid 9760:tid 9772] [client 13.208.252.11:42490] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.docker"] [unique_id "af5BmGIkCp-C_fh0s7L0_QAAAUY"]
[Sat May 09 04:03:37.328661 2026] [:error] [pid 9186:tid 9243] [client 13.208.252.11:42522] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.live"] [unique_id "af5BmRW4eFOEw1mKOgJfsQAAAFE"]
[Sat May 09 04:03:37.907275 2026] [:error] [pid 9184:tid 9197] [client 13.208.252.11:42562] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.preprod"] [unique_id "af5BmYjfODqb_i0Fm99LKAAAAAA"]
[Sat May 09 04:03:38.494499 2026] [:error] [pid 9920:tid 9931] [client 13.208.252.11:42576] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.uat"] [unique_id "af5BmkxitGYhlzgZb5Y4cwAAAck"]
[Sat May 09 04:03:39.078025 2026] [:error] [pid 9187:tid 9274] [client 13.208.252.11:42604] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "af5BmxC7An6gkXsRsaG6LgAAAJU"]
[Sat May 09 04:03:39.658289 2026] [:error] [pid 9293:tid 9301] [client 13.208.252.11:42642] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.swp"] [unique_id "af5Bm5R__qEzV5O6Z2OIEAAAAMQ"]
[Sat May 09 04:03:40.250062 2026] [:error] [pid 9293:tid 9305] [client 13.208.252.11:42676] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "af5BnJR__qEzV5O6Z2OIFQAAAMg"]
[Sat May 09 04:03:40.832411 2026] [:error] [pid 9663:tid 9689] [client 13.208.252.11:42728] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env1"] [unique_id "af5BnJcWIu01SCxbjwuqmQAAARc"]
[Sat May 09 04:03:41.413626 2026] [:error] [pid 9663:tid 9669] [client 13.208.252.11:42764] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env2"] [unique_id "af5BnZcWIu01SCxbjwuqnwAAAQM"]
[Sat May 09 04:03:41.993729 2026] [:error] [pid 9920:tid 9937] [client 13.208.252.11:42810] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_copy"] [unique_id "af5BnUxitGYhlzgZb5Y4eQAAAc8"]
[Sat May 09 05:28:34.643269 2026] [:error] [pid 9663:tid 9675] [client 94.247.172.129:11984] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af5VgpcWIu01SCxbjwvFRgAAAQk"]
[Sat May 09 07:59:31.880300 2026] [:error] [pid 9920:tid 9943] [client 43.157.150.69:48812] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af5440xitGYhlzgZb5Z8rAAAAdU"]
[Sat May 09 11:39:43.114816 2026] [:error] [pid 9833:tid 9845] [client 20.220.146.147:50346] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "af6sfyM9JmxIS0KGZUBkkAAAAYc"]
[Sat May 09 11:39:43.956167 2026] [:error] [pid 9187:tid 9265] [client 20.220.146.147:13242] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "af6sfxC7An6gkXsRsaFP5QAAAIw"]
[Sat May 09 11:39:44.781041 2026] [:error] [pid 9187:tid 9253] [client 20.220.146.147:35919] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "af6sgBC7An6gkXsRsaFP5gAAAIA"]
[Sat May 09 11:39:45.606568 2026] [:error] [pid 9760:tid 9783] [client 20.220.146.147:13965] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wk/index.php"] [unique_id "af6sgWIkCp-C_fh0s7IuJwAAAVE"]
[Sat May 09 13:02:54.228095 2026] [:error] [pid 9184:tid 9205] [client 111.230.233.46:40116] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af6__ojfODqb_i0Fm9-G-AAAAAg"]
[Sat May 09 14:43:50.404304 2026] [:error] [pid 9186:tid 9235] [client 106.215.161.193:19318] [client 106.215.161.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.161.193, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "af7XphW4eFOEw1mKOgLLAgAAAEk"]
[Sat May 09 14:43:50.416848 2026] [proxy_fcgi:error] [pid 9186:tid 9235] [client 106.215.161.193:19318] AH01071: Got error 'Primary script unknown'
[Sat May 09 15:14:11.351550 2026] [autoindex:error] [pid 9293:tid 9308] [client 91.84.99.6:38394] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sat May 09 15:29:09.624408 2026] [:error] [pid 9187:tid 9262] [client 172.70.247.144:13688] [client 172.70.247.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "af7iRRC7An6gkXsRsaGaywAAAIk"]
[Sat May 09 16:30:47.766135 2026] [:error] [pid 9760:tid 9768] [client 43.130.15.147:47894] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af7wt2IkCp-C_fh0s7JKRwAAAUI"]
[Sat May 09 17:29:49.585656 2026] [autoindex:error] [pid 9186:tid 9229] [client 80.85.245.241:33298] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sat May 09 18:09:43.462363 2026] [:error] [pid 9186:tid 9234] [client 43.164.133.138:37396] [client 43.164.133.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "af8H5xW4eFOEw1mKOgLmyQAAAEg"]
[Sat May 09 18:49:13.813473 2026] [:error] [pid 9293:tid 9317] [client 194.62.107.239:32721] [client 194.62.107.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "af8RKZR__qEzV5O6Z2PY0QAAANQ"]
[Sat May 09 23:24:49.311527 2026] [:error] [pid 55186:tid 55253] [client 43.135.172.89:58274] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "af9RwZPIspqZdXg7QQvECwAAAEQ"]
[Sun May 10 00:11:34.445447 2026] [:error] [pid 55353:tid 55372] [client 34.165.154.140:49822] [client 34.165.154.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "af9ctiDuyNO3XosoIYR-iwAAARE"]
[Sun May 10 02:17:38.270185 2026] [:error] [pid 55186:tid 55273] [client 146.56.199.139:40798] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "af96QpPIspqZdXg7QQvabgAAAFg"]
[Sun May 10 11:50:51.630646 2026] [:error] [pid 46329:tid 46338] [client 43.130.16.140:46012] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "agAAm-Fo7Z2I88d0gPJk1gAAAAU"]
[Sun May 10 13:52:49.356467 2026] [:error] [pid 52634:tid 52642] [client 103.252.166.50:3053] [client 103.252.166.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.50, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "agAdMdwp8XoWCwFb54DqCwAAAMQ"]
[Sun May 10 13:52:49.368628 2026] [proxy_fcgi:error] [pid 52634:tid 52642] [client 103.252.166.50:3053] AH01071: Got error 'Primary script unknown'
[Sun May 10 15:23:50.252353 2026] [:error] [pid 46329:tid 46348] [client 154.54.100.175:44454] [client 154.54.100.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "agAyhuFo7Z2I88d0gPJ5sAAAAA8"]
[Sun May 10 17:48:17.210849 2026] [:error] [pid 64850:tid 64937] [client 43.135.142.37:43096] [client 43.135.142.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourbrand.com"] [uri "/"] [unique_id "agBUYTP6aKL2C-mxHw-0vwAAAIE"]
[Sun May 10 18:21:39.535367 2026] [:error] [pid 16038:tid 16092] [client 194.233.84.132:59436] [client 194.233.84.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "agBcM04hf5Tcsfa2scJGGAAAAZg"]
[Wed May 20 12:23:42.233844 2026] [proxy_fcgi:error] [pid 41364:tid 41368] [client 212.30.36.162:39791] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:43.275309 2026] [proxy_fcgi:error] [pid 41364:tid 41375] [client 212.30.36.106:51693] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:43.792319 2026] [proxy_fcgi:error] [pid 41364:tid 41388] [client 212.30.36.148:20717] AH01071: Got error 'Primary script unknown'
[Wed May 20 12:23:44.296313 2026] [proxy_fcgi:error] [pid 7664:tid 7684] [client 212.30.36.147:24799] AH01071: Got error 'Primary script unknown'
[Wed May 20 14:34:00.242950 2026] [:error] [pid 44059:tid 44064] [client 34.46.57.55:53263] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag1V2BfFs-oSOOcyjyzQVAAAAQM"]
[Wed May 20 14:34:00.629352 2026] [:error] [pid 41279:tid 41337] [client 34.46.57.55:57538] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag1V2LEFyfaehGZbt4xzLAAAAME"]
[Wed May 20 14:34:01.015580 2026] [:error] [pid 41364:tid 41383] [client 34.46.57.55:64977] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2RKTmyvxtNXrN-iUugAAAJE"]
[Wed May 20 20:27:38.958697 2026] [proxy_fcgi:error] [pid 7731:tid 7746] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:39.225094 2026] [proxy_fcgi:error] [pid 7731:tid 7737] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:39.349281 2026] [proxy_fcgi:error] [pid 7731:tid 7748] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:39.492757 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:39.768364 2026] [proxy_fcgi:error] [pid 7731:tid 7739] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:40.015548 2026] [proxy_fcgi:error] [pid 7731:tid 7747] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:40.139355 2026] [proxy_fcgi:error] [pid 7731:tid 7744] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:40.265190 2026] [proxy_fcgi:error] [pid 7731:tid 7751] [client 20.89.246.202:3351] AH01071: Got error 'Primary script unknown'
[Wed May 20 20:27:40.391527 2026] [:error] [pid 7731:tid 7741] [client 20.89.246.202:3351] [client 20.89.246.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ag2ovH9qQlHXbkl2nEsPnQAAAYg"]
[Wed May 20 20:27:41.076465 2026] [:error] [pid 41364:tid 41384] [client 20.89.246.202:4108] [client 20.89.246.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ag2ovRKTmyvxtNXrN-jSggAAAJI"]
[Wed May 20 20:27:41.766727 2026] [:error] [pid 41278:tid 41325] [client 20.89.246.202:4952] [client 20.89.246.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ag2ovfWiNKASEfiGdwa21AAAAFA"]
[Wed May 20 20:27:42.376616 2026] [:error] [pid 7731:tid 7742] [client 20.89.246.202:4124] [client 20.89.246.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/simple.php"] [unique_id "ag2ovn9qQlHXbkl2nEsPnwAAAYk"]
[Thu May 21 00:15:24.872715 2026] [:error] [pid 44059:tid 44072] [client 155.103.71.238:51649] [client 155.103.71.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "ag3eHBfFs-oSOOcyjyxOCAAAAQs"]
[Thu May 21 00:15:27.396389 2026] [:error] [pid 7731:tid 7750] [client 155.103.71.238:51767] [client 155.103.71.238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "ag3eH39qQlHXbkl2nEtRDAAAAZE"]
[Thu May 21 02:39:11.990822 2026] [:error] [pid 41364:tid 41381] [client 52.183.216.98:7426] [client 52.183.216.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.183.216.98, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/wp/xmlrpc.php"] [unique_id "ag3_zxKTmyvxtNXrN-g_cwAAAI8"]
[Thu May 21 03:35:13.227871 2026] [proxy_fcgi:error] [pid 41364:tid 41371] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:13.447406 2026] [proxy_fcgi:error] [pid 41364:tid 41373] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:16.948088 2026] [proxy_fcgi:error] [pid 41364:tid 41381] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:18.498535 2026] [proxy_fcgi:error] [pid 41364:tid 41376] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:18.727089 2026] [proxy_fcgi:error] [pid 41364:tid 41382] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:19.148701 2026] [proxy_fcgi:error] [pid 41364:tid 41380] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:19.637287 2026] [proxy_fcgi:error] [pid 41364:tid 41387] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:19.871831 2026] [proxy_fcgi:error] [pid 41364:tid 41371] [client 135.119.26.13:9170] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:35:20.106585 2026] [:error] [pid 41364:tid 41381] [client 135.119.26.13:9170] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/class.php"] [unique_id "ag4M-BKTmyvxtNXrN-hRKwAAAI8"]
[Thu May 21 03:35:47.591757 2026] [:error] [pid 7664:tid 7682] [client 135.119.26.13:8205] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/goods.php"] [unique_id "ag4NE3Z8s7o3eiqT2ktFHgAAAU8"]
[Thu May 21 03:36:06.648500 2026] [:error] [pid 41364:tid 41376] [client 135.119.26.13:44805] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "ag4NJhKTmyvxtNXrN-hRgQAAAIo"]
[Thu May 21 03:36:11.719758 2026] [:error] [pid 44059:tid 44081] [client 135.119.26.13:44802] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/info.php"] [unique_id "ag4NKxfFs-oSOOcyjyxycAAAARQ"]
[Thu May 21 03:36:42.442879 2026] [proxy_fcgi:error] [pid 41277:tid 41284] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:42.634719 2026] [proxy_fcgi:error] [pid 41277:tid 41298] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:42.830932 2026] [proxy_fcgi:error] [pid 41277:tid 41292] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:43.046873 2026] [proxy_fcgi:error] [pid 41277:tid 41306] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:43.261392 2026] [proxy_fcgi:error] [pid 41277:tid 41288] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:43.452081 2026] [proxy_fcgi:error] [pid 41277:tid 41286] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:43.668949 2026] [proxy_fcgi:error] [pid 41277:tid 41297] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:43.861672 2026] [proxy_fcgi:error] [pid 41277:tid 41287] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:44.052964 2026] [proxy_fcgi:error] [pid 41277:tid 41289] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:44.243858 2026] [proxy_fcgi:error] [pid 41277:tid 41290] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:44.438143 2026] [proxy_fcgi:error] [pid 41277:tid 41291] [client 135.119.26.13:33650] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:36:44.627075 2026] [:error] [pid 41277:tid 41283] [client 135.119.26.13:33650] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag4NTLTTCltJmboB5uctMgAAAAE"]
[Thu May 21 03:36:48.522178 2026] [:error] [pid 7731:tid 7733] [client 135.119.26.13:9053] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag4NUH9qQlHXbkl2nEt-kAAAAYA"]
[Thu May 21 03:36:51.974464 2026] [:error] [pid 41364:tid 41384] [client 135.119.26.13:38608] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag4NUxKTmyvxtNXrN-hRvgAAAJI"]
[Thu May 21 03:36:55.515581 2026] [:error] [pid 7664:tid 7691] [client 135.119.26.13:32455] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag4NV3Z8s7o3eiqT2ktFTAAAAVg"]
[Thu May 21 03:36:59.038839 2026] [:error] [pid 7664:tid 7680] [client 135.119.26.13:9082] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag4NW3Z8s7o3eiqT2ktFVAAAAU0"]
[Thu May 21 03:37:03.581649 2026] [:error] [pid 41364:tid 41370] [client 135.119.26.13:8833] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag4NXxKTmyvxtNXrN-hR0AAAAIQ"]
[Thu May 21 03:37:09.321385 2026] [:error] [pid 7664:tid 7672] [client 135.119.26.13:32478] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag4NZXZ8s7o3eiqT2ktFWQAAAUU"]
[Thu May 21 03:37:14.882408 2026] [:error] [pid 41364:tid 41374] [client 135.119.26.13:8662] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/load.php"] [unique_id "ag4NahKTmyvxtNXrN-hR3QAAAIg"]
[Thu May 21 03:37:22.226646 2026] [:error] [pid 41279:tid 41351] [client 135.119.26.13:8359] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/load.php"] [unique_id "ag4NcrEFyfaehGZbt4zQ1gAAAM8"]
[Thu May 21 03:37:27.212110 2026] [:error] [pid 41364:tid 41379] [client 135.119.26.13:8360] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/load.php"] [unique_id "ag4NdxKTmyvxtNXrN-hR7AAAAI0"]
[Thu May 21 03:37:43.889765 2026] [:error] [pid 7731:tid 7739] [client 135.119.26.13:32018] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ag4Nh39qQlHXbkl2nEt-zwAAAYY"]
[Thu May 21 03:37:54.979419 2026] [proxy_fcgi:error] [pid 7731:tid 7755] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:56.371851 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:56.632531 2026] [proxy_fcgi:error] [pid 7731:tid 7750] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:56.851142 2026] [proxy_fcgi:error] [pid 7731:tid 7735] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:57.057846 2026] [proxy_fcgi:error] [pid 7731:tid 7738] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:57.270457 2026] [proxy_fcgi:error] [pid 7731:tid 7733] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:58.354162 2026] [proxy_fcgi:error] [pid 7731:tid 7756] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:58.556073 2026] [proxy_fcgi:error] [pid 7731:tid 7757] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:58.755967 2026] [proxy_fcgi:error] [pid 7731:tid 7734] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:58.969483 2026] [proxy_fcgi:error] [pid 7731:tid 7745] [client 135.119.26.13:8322] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:37:59.168711 2026] [:error] [pid 7731:tid 7746] [client 135.119.26.13:8322] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bc.php"] [unique_id "ag4Nl39qQlHXbkl2nEt-9QAAAY0"]
[Thu May 21 03:38:09.017019 2026] [:error] [pid 44059:tid 44080] [client 135.119.26.13:54139] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bc.php"] [unique_id "ag4NoRfFs-oSOOcyjyxzNwAAARM"]
[Thu May 21 03:38:17.187593 2026] [:error] [pid 7664:tid 7683] [client 135.119.26.13:37464] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "ag4NqXZ8s7o3eiqT2ktFowAAAVA"]
[Thu May 21 03:38:23.747504 2026] [:error] [pid 7664:tid 7669] [client 135.119.26.13:34281] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/av.php"] [unique_id "ag4Nr3Z8s7o3eiqT2ktFrgAAAUI"]
[Thu May 21 03:38:37.369115 2026] [:error] [pid 41364:tid 41370] [client 135.119.26.13:31842] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "ag4NvRKTmyvxtNXrN-hSLwAAAIQ"]
[Thu May 21 03:38:38.284338 2026] [:error] [pid 7731:tid 7756] [client 135.119.26.13:34302] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "ag4Nvn9qQlHXbkl2nEt_IgAAAZc"]
[Thu May 21 03:38:46.021664 2026] [:error] [pid 41364:tid 41375] [client 135.119.26.13:34626] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/casp1.php"] [unique_id "ag4NxhKTmyvxtNXrN-hSTQAAAIk"]
[Thu May 21 03:39:09.041494 2026] [proxy_fcgi:error] [pid 7731:tid 7753] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:09.231067 2026] [proxy_fcgi:error] [pid 7731:tid 7749] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:09.420590 2026] [proxy_fcgi:error] [pid 7731:tid 7733] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:09.630947 2026] [proxy_fcgi:error] [pid 7731:tid 7738] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:09.820660 2026] [proxy_fcgi:error] [pid 7731:tid 7740] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:10.028920 2026] [proxy_fcgi:error] [pid 7731:tid 7734] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:13.123475 2026] [proxy_fcgi:error] [pid 7731:tid 7751] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:13.315395 2026] [proxy_fcgi:error] [pid 7731:tid 7740] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:13.530246 2026] [proxy_fcgi:error] [pid 7731:tid 7746] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:13.739541 2026] [proxy_fcgi:error] [pid 7731:tid 7734] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:13.928527 2026] [proxy_fcgi:error] [pid 7731:tid 7743] [client 135.119.26.13:32501] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:39:14.156585 2026] [:error] [pid 7731:tid 7757] [client 135.119.26.13:32501] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag4N4n9qQlHXbkl2nEt_dwAAAZg"]
[Thu May 21 03:39:18.876347 2026] [:error] [pid 41364:tid 41383] [client 135.119.26.13:8835] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag4N5hKTmyvxtNXrN-hSegAAAJE"]
[Thu May 21 03:39:29.204013 2026] [:error] [pid 41279:tid 41340] [client 135.119.26.13:8650] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag4N8bEFyfaehGZbt4zRLQAAAMQ"]
[Thu May 21 03:39:41.306446 2026] [:error] [pid 41277:tid 41299] [client 135.119.26.13:32481] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ag4N_bTTCltJmboB5uctfgAAABE"]
[Thu May 21 03:39:51.712460 2026] [:error] [pid 44059:tid 44067] [client 135.119.26.13:8855] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ag4OBxfFs-oSOOcyjyxzvQAAAQY"]
[Thu May 21 03:39:58.117332 2026] [:error] [pid 7664:tid 7690] [client 135.119.26.13:8668] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ag4ODnZ8s7o3eiqT2ktGFAAAAVc"]
[Thu May 21 03:40:05.712970 2026] [:error] [pid 41278:tid 41332] [client 135.119.26.13:32460] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ag4OFfWiNKASEfiGdwbmugAAAFc"]
[Thu May 21 03:40:15.304759 2026] [proxy_fcgi:error] [pid 41364:tid 41377] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:15.518606 2026] [proxy_fcgi:error] [pid 41364:tid 41366] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:15.719077 2026] [proxy_fcgi:error] [pid 41364:tid 41382] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:15.934673 2026] [proxy_fcgi:error] [pid 41364:tid 41380] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:16.146763 2026] [proxy_fcgi:error] [pid 41364:tid 41378] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:16.336913 2026] [proxy_fcgi:error] [pid 41364:tid 41376] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:16.536421 2026] [proxy_fcgi:error] [pid 41364:tid 41386] [client 135.119.26.13:32468] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:16.736665 2026] [:error] [pid 41364:tid 41367] [client 135.119.26.13:32468] [client 135.119.26.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "ag4OIBKTmyvxtNXrN-hSxAAAAIE"]
[Thu May 21 03:40:24.075518 2026] [proxy_fcgi:error] [pid 41279:tid 41338] [client 135.119.26.13:36852] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:24.266058 2026] [proxy_fcgi:error] [pid 41279:tid 41348] [client 135.119.26.13:36852] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:24.455461 2026] [proxy_fcgi:error] [pid 41279:tid 41345] [client 135.119.26.13:36852] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:24.662353 2026] [proxy_fcgi:error] [pid 41279:tid 41339] [client 135.119.26.13:36852] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:40:24.849300 2026] [:error] [pid 41279:tid 41351] [client 135.119.26.13:36852] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ag4OKLEFyfaehGZbt4zRTQAAAM8"]
[Thu May 21 03:41:12.519926 2026] [:error] [pid 41279:tid 41360] [client 135.119.26.13:43604] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "ag4OWLEFyfaehGZbt4zRaAAAANg"]
[Thu May 21 03:41:13.199560 2026] [:error] [pid 7731:tid 7745] [client 135.119.26.13:44848] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "ag4OWX9qQlHXbkl2nEt_5gAAAYw"]
[Thu May 21 03:41:13.749036 2026] [:error] [pid 41278:tid 41329] [client 135.119.26.13:34191] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "ag4OWfWiNKASEfiGdwbm1gAAAFQ"]
[Thu May 21 03:41:14.341099 2026] [:error] [pid 41364:tid 41389] [client 135.119.26.13:8552] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/man.php"] [unique_id "ag4OWhKTmyvxtNXrN-hS_wAAAJc"]
[Thu May 21 03:41:19.141289 2026] [:error] [pid 44059:tid 44061] [client 135.119.26.13:9130] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ag4OXxfFs-oSOOcyjyxz-gAAAQA"]
[Thu May 21 03:41:25.339454 2026] [proxy_fcgi:error] [pid 41364:tid 41371] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:25.531656 2026] [proxy_fcgi:error] [pid 41364:tid 41383] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:25.739196 2026] [proxy_fcgi:error] [pid 41364:tid 41390] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:25.972792 2026] [proxy_fcgi:error] [pid 41364:tid 41387] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:26.178365 2026] [proxy_fcgi:error] [pid 41364:tid 41388] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:26.380314 2026] [proxy_fcgi:error] [pid 41364:tid 41370] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:26.587748 2026] [proxy_fcgi:error] [pid 41364:tid 41368] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:26.789097 2026] [proxy_fcgi:error] [pid 41364:tid 41386] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:27.025607 2026] [proxy_fcgi:error] [pid 41364:tid 41375] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:27.231322 2026] [proxy_fcgi:error] [pid 41364:tid 41378] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:27.440868 2026] [proxy_fcgi:error] [pid 41364:tid 41390] [client 135.119.26.13:31753] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:41:27.634441 2026] [:error] [pid 41364:tid 41372] [client 135.119.26.13:31753] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag4OZxKTmyvxtNXrN-hTLAAAAIY"]
[Thu May 21 03:41:33.954129 2026] [:error] [pid 41278:tid 41328] [client 135.119.26.13:38668] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag4ObfWiNKASEfiGdwbm4AAAAFM"]
[Thu May 21 03:41:38.902161 2026] [:error] [pid 7731:tid 7735] [client 135.119.26.13:38180] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag4Ocn9qQlHXbkl2nEuAFQAAAYI"]
[Thu May 21 03:41:47.511990 2026] [:error] [pid 41364:tid 41389] [client 135.119.26.13:52314] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag4OexKTmyvxtNXrN-hTPAAAAJc"]
[Thu May 21 03:41:51.905659 2026] [:error] [pid 41364:tid 41384] [client 135.119.26.13:9049] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag4OfxKTmyvxtNXrN-hTRgAAAJI"]
[Thu May 21 03:41:56.467639 2026] [:error] [pid 7731:tid 7735] [client 135.119.26.13:38634] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag4OhH9qQlHXbkl2nEuAWAAAAYI"]
[Thu May 21 03:42:08.486174 2026] [:error] [pid 7664:tid 7673] [client 135.119.26.13:8391] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "ag4OkHZ8s7o3eiqT2ktGewAAAUY"]
[Thu May 21 03:42:24.169492 2026] [:error] [pid 7731:tid 7755] [client 135.119.26.13:52341] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ag4OoH9qQlHXbkl2nEuAmQAAAZY"]
[Thu May 21 03:42:32.120608 2026] [proxy_fcgi:error] [pid 41364:tid 41377] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:32.334611 2026] [proxy_fcgi:error] [pid 41364:tid 41376] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:32.525954 2026] [proxy_fcgi:error] [pid 41364:tid 41366] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:32.723176 2026] [proxy_fcgi:error] [pid 41364:tid 41380] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:32.912689 2026] [proxy_fcgi:error] [pid 41364:tid 41373] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:33.103226 2026] [proxy_fcgi:error] [pid 41364:tid 41369] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:33.317632 2026] [proxy_fcgi:error] [pid 41364:tid 41374] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:33.531860 2026] [proxy_fcgi:error] [pid 41364:tid 41389] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:33.761334 2026] [proxy_fcgi:error] [pid 41364:tid 41382] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:33.952781 2026] [proxy_fcgi:error] [pid 41364:tid 41377] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:34.146109 2026] [proxy_fcgi:error] [pid 41364:tid 41380] [client 135.119.26.13:8749] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:42:34.368380 2026] [:error] [pid 41364:tid 41373] [client 135.119.26.13:8749] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "ag4OqhKTmyvxtNXrN-hTzAAAAIc"]
[Thu May 21 03:42:49.834751 2026] [:error] [pid 41364:tid 41369] [client 135.119.26.13:52291] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "ag4OuRKTmyvxtNXrN-hT9gAAAIM"]
[Thu May 21 03:43:19.954165 2026] [:error] [pid 44500:tid 44518] [client 135.119.26.13:52317] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag4O1xXnr6jCkfWhZmUJ7gAAAM4"]
[Thu May 21 03:43:24.431721 2026] [:error] [pid 44500:tid 44512] [client 135.119.26.13:8390] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag4O3BXnr6jCkfWhZmUJ9QAAAMg"]
[Thu May 21 03:43:29.502533 2026] [:error] [pid 44598:tid 44605] [client 135.119.26.13:8766] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag4O4e01_Oy9stnT-xOdywAAAQU"]
[Thu May 21 03:43:42.922111 2026] [proxy_fcgi:error] [pid 44598:tid 44615] [client 135.119.26.13:8413] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:48.304108 2026] [proxy_fcgi:error] [pid 44500:tid 44525] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:48.533020 2026] [proxy_fcgi:error] [pid 44500:tid 44521] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:48.750579 2026] [proxy_fcgi:error] [pid 44500:tid 44509] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:48.978744 2026] [proxy_fcgi:error] [pid 44500:tid 44525] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:49.180069 2026] [proxy_fcgi:error] [pid 44500:tid 44521] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:49.371908 2026] [proxy_fcgi:error] [pid 44500:tid 44524] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:49.562022 2026] [proxy_fcgi:error] [pid 44500:tid 44509] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:50.227570 2026] [proxy_fcgi:error] [pid 44500:tid 44519] [client 135.119.26.13:8411] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:43:50.416884 2026] [:error] [pid 44500:tid 44525] [client 135.119.26.13:8411] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "ag4O9hXnr6jCkfWhZmUKGgAAANU"]
[Thu May 21 03:43:54.189609 2026] [:error] [pid 44401:tid 44473] [client 135.119.26.13:38652] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "ag4O-oeuJeI91c5JTiKy7AAAAI4"]
[Thu May 21 03:43:58.990982 2026] [:error] [pid 44500:tid 44522] [client 135.119.26.13:9212] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-theme.php"] [unique_id "ag4O_hXnr6jCkfWhZmUKJQAAANI"]
[Thu May 21 03:44:17.980124 2026] [:error] [pid 44401:tid 44477] [client 135.119.26.13:8440] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-file.php"] [unique_id "ag4PEYeuJeI91c5JTiKy9gAAAJI"]
[Thu May 21 03:44:57.596246 2026] [proxy_fcgi:error] [pid 45090:tid 45125] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:57.800784 2026] [proxy_fcgi:error] [pid 45090:tid 45126] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:57.989799 2026] [proxy_fcgi:error] [pid 45090:tid 45127] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:58.189618 2026] [proxy_fcgi:error] [pid 45090:tid 45128] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:58.421030 2026] [proxy_fcgi:error] [pid 45090:tid 45129] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:58.640358 2026] [proxy_fcgi:error] [pid 45090:tid 45130] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:58.836413 2026] [proxy_fcgi:error] [pid 45090:tid 45131] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:59.222189 2026] [proxy_fcgi:error] [pid 45090:tid 45133] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:59.411878 2026] [proxy_fcgi:error] [pid 45090:tid 45134] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:59.623648 2026] [proxy_fcgi:error] [pid 45090:tid 45135] [client 135.119.26.13:34271] AH01071: Got error 'Primary script unknown'
[Thu May 21 03:44:59.808856 2026] [:error] [pid 45090:tid 45136] [client 135.119.26.13:34271] [client 135.119.26.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "ag4PO36VZGW_fIyOm0ABvgAAAE0"]
[Thu May 21 03:45:03.899029 2026] [:error] [pid 45970:tid 45984] [client 135.119.26.13:34274] [client 135.119.26.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.ph"] [unique_id "ag4PPz0kxQ7to156hrQ5_gAAAAI"]
[Thu May 21 04:22:51.957408 2026] [:error] [pid 49982:tid 49991] [client 170.106.143.6:36516] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag4YG2FwIDa5Tf8O4bbyxQAAAMc"]
[Thu May 21 09:21:32.800764 2026] [:error] [pid 49982:tid 50000] [client 43.166.255.122:33500] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag5eHGFwIDa5Tf8O4bZSvgAAANA"]
[Thu May 21 18:36:20.592561 2026] [:error] [pid 49877:tid 49889] [client 129.226.174.80:37960] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag7gJBgN4MeSe4kIL9A1xgAAAAE"]
[Thu May 21 23:24:10.383434 2026] [:error] [pid 49884:tid 49969] [client 34.150.255.112:58557] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXpwAAAJY"]
[Thu May 21 23:24:10.845272 2026] [:error] [pid 9188:tid 9202] [client 34.150.255.112:55081] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag8jmrGYm6q5dNSUvA__BgAAAco"]
[Thu May 21 23:24:11.269990 2026] [:error] [pid 9188:tid 9212] [client 34.150.255.112:49400] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jm7GYm6q5dNSUvA__PAAAAdQ"]
[Fri May 22 06:29:01.948625 2026] [proxy_fcgi:error] [pid 15679:tid 15703] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:02.762280 2026] [proxy_fcgi:error] [pid 15679:tid 15686] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:03.233716 2026] [proxy_fcgi:error] [pid 15679:tid 15689] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:03.456899 2026] [proxy_fcgi:error] [pid 15679:tid 15690] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:03.677029 2026] [proxy_fcgi:error] [pid 15679:tid 15687] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:03.898929 2026] [proxy_fcgi:error] [pid 15679:tid 15696] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:04.133397 2026] [proxy_fcgi:error] [pid 15679:tid 15699] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:04.385841 2026] [proxy_fcgi:error] [pid 15679:tid 15701] [client 4.204.236.27:17898] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:29:04.651427 2026] [:error] [pid 15679:tid 15681] [client 4.204.236.27:17898] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ag-HMCh8tgGc38WJ-GxwjAAAAMA"]
[Fri May 22 06:29:05.451769 2026] [:error] [pid 58813:tid 58834] [client 4.204.236.27:17919] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ag-HMZ6yyKWDKULhxJ3-egAAAVI"]
[Fri May 22 06:29:06.198207 2026] [:error] [pid 15679:tid 15704] [client 4.204.236.27:17901] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ag-HMih8tgGc38WJ-GxwjwAAANc"]
[Fri May 22 06:29:06.768201 2026] [:error] [pid 15679:tid 15688] [client 4.204.236.27:17917] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ag-HMih8tgGc38WJ-GxwkAAAAMc"]
[Fri May 22 06:29:07.711023 2026] [:error] [pid 15583:tid 15605] [client 4.204.236.27:17890] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ag-HM3naOncRcIm17YV7rwAAABE"]
[Fri May 22 06:29:08.578588 2026] [:error] [pid 58813:tid 58830] [client 4.204.236.27:17809] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ag-HNJ6yyKWDKULhxJ3-fAAAAU4"]
[Fri May 22 06:29:09.297216 2026] [:error] [pid 15583:tid 15601] [client 4.204.236.27:17792] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ag-HNXnaOncRcIm17YV7sAAAAA0"]
[Fri May 22 06:29:10.736651 2026] [:error] [pid 15585:tid 15658] [client 4.204.236.27:17915] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/222.php"] [unique_id "ag-HNiKb-vB41AF-LC1JOQAAAIs"]
[Fri May 22 06:29:11.753984 2026] [:error] [pid 15585:tid 15661] [client 4.204.236.27:17863] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test1.php"] [unique_id "ag-HNyKb-vB41AF-LC1JPwAAAI4"]
[Fri May 22 06:29:12.442210 2026] [:error] [pid 15584:tid 15620] [client 4.204.236.27:17793] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test1.php"] [unique_id "ag-HON9Z_TVLbNEx52h93AAAAEA"]
[Fri May 22 06:29:13.458838 2026] [:error] [pid 15585:tid 15663] [client 4.204.236.27:17872] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test1.php"] [unique_id "ag-HOSKb-vB41AF-LC1JRwAAAJA"]
[Fri May 22 06:29:14.388911 2026] [:error] [pid 15583:tid 15606] [client 4.204.236.27:17867] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test1.php"] [unique_id "ag-HOnnaOncRcIm17YV7twAAABI"]
[Fri May 22 06:29:14.957073 2026] [:error] [pid 15585:tid 15660] [client 4.204.236.27:17869] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "ag-HOiKb-vB41AF-LC1JUAAAAI0"]
[Fri May 22 06:29:15.795297 2026] [:error] [pid 15585:tid 15664] [client 4.204.236.27:17879] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "ag-HOyKb-vB41AF-LC1JVAAAAJE"]
[Fri May 22 06:29:16.538916 2026] [:error] [pid 15585:tid 15658] [client 4.204.236.27:17888] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "ag-HPCKb-vB41AF-LC1JYwAAAIs"]
[Fri May 22 06:29:17.466577 2026] [:error] [pid 15585:tid 15655] [client 4.204.236.27:17912] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-mail.php"] [unique_id "ag-HPSKb-vB41AF-LC1JaQAAAIg"]
[Fri May 22 06:29:18.879510 2026] [:error] [pid 15585:tid 15665] [client 4.204.236.27:17910] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ag-HPiKb-vB41AF-LC1JcAAAAJI"]
[Fri May 22 06:29:20.070033 2026] [:error] [pid 15585:tid 15663] [client 4.204.236.27:17903] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ag-HQCKb-vB41AF-LC1JdQAAAJA"]
[Fri May 22 06:29:20.983058 2026] [:error] [pid 15585:tid 15650] [client 4.204.236.27:17907] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ag-HQCKb-vB41AF-LC1JeAAAAIM"]
[Fri May 22 06:29:21.727514 2026] [:error] [pid 15585:tid 15661] [client 4.204.236.27:17908] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ag-HQSKb-vB41AF-LC1JewAAAI4"]
[Fri May 22 06:29:22.198846 2026] [:error] [pid 15585:tid 15654] [client 4.204.236.27:17892] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ag-HQiKb-vB41AF-LC1JfgAAAIc"]
[Fri May 22 06:29:22.834381 2026] [:error] [pid 15679:tid 15688] [client 4.204.236.27:17897] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ag-HQih8tgGc38WJ-GxwoQAAAMc"]
[Fri May 22 06:29:23.750592 2026] [:error] [pid 58813:tid 58835] [client 4.204.236.27:17878] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ag-HQ56yyKWDKULhxJ3-gAAAAVM"]
[Fri May 22 06:29:24.645361 2026] [:error] [pid 15585:tid 15648] [client 4.204.236.27:17886] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ag-HRCKb-vB41AF-LC1JhQAAAIE"]
[Fri May 22 06:29:25.295924 2026] [:error] [pid 15583:tid 15609] [client 4.204.236.27:17806] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php8.php"] [unique_id "ag-HRXnaOncRcIm17YV7uwAAABU"]
[Fri May 22 06:29:26.080106 2026] [:error] [pid 15583:tid 15603] [client 4.204.236.27:17817] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php8.php"] [unique_id "ag-HRnnaOncRcIm17YV7vAAAAA8"]
[Fri May 22 06:29:27.397135 2026] [:error] [pid 15679:tid 15693] [client 4.204.236.27:17914] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php8.php"] [unique_id "ag-HRyh8tgGc38WJ-GxwpwAAAMw"]
[Fri May 22 06:29:29.156368 2026] [:error] [pid 15584:tid 15630] [client 4.204.236.27:20419] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/php8.php"] [unique_id "ag-HSd9Z_TVLbNEx52h95gAAAEo"]
[Fri May 22 06:29:30.469901 2026] [:error] [pid 15585:tid 15662] [client 4.204.236.27:17800] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ag-HSiKb-vB41AF-LC1JiAAAAI8"]
[Fri May 22 06:29:31.455945 2026] [:error] [pid 15585:tid 15664] [client 4.204.236.27:17840] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ag-HSyKb-vB41AF-LC1JjAAAAJE"]
[Fri May 22 06:29:32.403093 2026] [:error] [pid 15583:tid 15602] [client 4.204.236.27:17883] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ag-HTHnaOncRcIm17YV7vwAAAA4"]
[Fri May 22 06:29:33.364422 2026] [:error] [pid 15585:tid 15654] [client 4.204.236.27:17837] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ag-HTSKb-vB41AF-LC1JjgAAAIc"]
[Fri May 22 06:29:36.059637 2026] [:error] [pid 15583:tid 15605] [client 4.204.236.27:17818] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag-HUHnaOncRcIm17YV7wgAAABE"]
[Fri May 22 06:29:36.945475 2026] [:error] [pid 15585:tid 15657] [client 4.204.236.27:17816] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag-HUCKb-vB41AF-LC1JlgAAAIo"]
[Fri May 22 06:29:38.669245 2026] [:error] [pid 15583:tid 15596] [client 4.204.236.27:17896] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag-HUnnaOncRcIm17YV7xQAAAAg"]
[Fri May 22 06:29:40.234360 2026] [:error] [pid 15583:tid 15588] [client 4.204.236.27:17905] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ag-HVHnaOncRcIm17YV7xgAAAAA"]
[Fri May 22 06:29:42.638090 2026] [:error] [pid 15585:tid 15655] [client 4.204.236.27:17821] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag-HViKb-vB41AF-LC1JqQAAAIg"]
[Fri May 22 06:29:43.571481 2026] [:error] [pid 58813:tid 58836] [client 4.204.236.27:17834] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag-HV56yyKWDKULhxJ3-kgAAAVQ"]
[Fri May 22 06:29:45.359821 2026] [:error] [pid 15679:tid 15681] [client 4.204.236.27:17856] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag-HWSh8tgGc38WJ-GxwtQAAAMA"]
[Fri May 22 06:29:46.451564 2026] [:error] [pid 15585:tid 15654] [client 4.204.236.27:17796] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sid3.php"] [unique_id "ag-HWiKb-vB41AF-LC1JsAAAAIc"]
[Fri May 22 06:29:48.412162 2026] [:error] [pid 15584:tid 15629] [client 4.204.236.27:17894] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ag-HXN9Z_TVLbNEx52h9_AAAAEk"]
[Fri May 22 06:29:49.520943 2026] [:error] [pid 15679:tid 15686] [client 4.204.236.27:17866] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ag-HXSh8tgGc38WJ-GxwvAAAAMU"]
[Fri May 22 06:29:51.149041 2026] [:error] [pid 15583:tid 15605] [client 4.204.236.27:17795] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ag-HX3naOncRcIm17YV71QAAABE"]
[Fri May 22 06:29:52.189064 2026] [:error] [pid 58813:tid 58831] [client 4.204.236.27:17864] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ag-HYJ6yyKWDKULhxJ3-lwAAAU8"]
[Fri May 22 06:29:52.737942 2026] [:error] [pid 58813:tid 58817] [client 4.204.236.27:17807] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "ag-HYJ6yyKWDKULhxJ3-mAAAAUE"]
[Fri May 22 06:29:53.347001 2026] [:error] [pid 15584:tid 15639] [client 4.204.236.27:17822] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "ag-HYd9Z_TVLbNEx52h-AgAAAFM"]
[Fri May 22 06:29:54.495390 2026] [:error] [pid 58782:tid 58799] [client 4.204.236.27:17804] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "ag-HYoxsdTFafgO8vhSu-gAAAQ8"]
[Fri May 22 06:29:55.302524 2026] [:error] [pid 15679:tid 15695] [client 4.204.236.27:17823] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/test.php"] [unique_id "ag-HYyh8tgGc38WJ-GxwvgAAAM4"]
[Fri May 22 06:29:55.970353 2026] [:error] [pid 15679:tid 15693] [client 4.204.236.27:20467] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo/info.php"] [unique_id "ag-HYyh8tgGc38WJ-GxwwAAAAMw"]
[Fri May 22 06:29:56.719209 2026] [:error] [pid 15583:tid 15607] [client 4.204.236.27:17861] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo/info.php"] [unique_id "ag-HZHnaOncRcIm17YV73gAAABM"]
[Fri May 22 06:29:57.169501 2026] [:error] [pid 15583:tid 15611] [client 4.204.236.27:17846] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo/info.php"] [unique_id "ag-HZXnaOncRcIm17YV74AAAABc"]
[Fri May 22 06:29:58.396067 2026] [:error] [pid 15679:tid 15704] [client 4.204.236.27:17801] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/phpinfo/info.php"] [unique_id "ag-HZih8tgGc38WJ-GxwxgAAANc"]
[Fri May 22 06:29:59.410474 2026] [:error] [pid 15679:tid 15694] [client 4.204.236.27:20418] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ag-HZyh8tgGc38WJ-GxwyQAAAM0"]
[Fri May 22 06:30:00.260412 2026] [:error] [pid 15679:tid 15705] [client 4.204.236.27:17838] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ag-HaCh8tgGc38WJ-GxwzAAAANg"]
[Fri May 22 06:30:01.517288 2026] [:error] [pid 15679:tid 15696] [client 4.204.236.27:17819] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ag-HaSh8tgGc38WJ-Gxw0AAAAM8"]
[Fri May 22 06:30:02.924164 2026] [:error] [pid 58813:tid 58832] [client 4.204.236.27:20444] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-the.php"] [unique_id "ag-Hap6yyKWDKULhxJ3-mgAAAVA"]
[Fri May 22 06:30:04.467467 2026] [proxy_fcgi:error] [pid 15679:tid 15695] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:05.059514 2026] [proxy_fcgi:error] [pid 15679:tid 15693] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:05.281550 2026] [proxy_fcgi:error] [pid 15679:tid 15691] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:05.500912 2026] [proxy_fcgi:error] [pid 15679:tid 15692] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:05.724555 2026] [proxy_fcgi:error] [pid 15679:tid 15701] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:05.970323 2026] [proxy_fcgi:error] [pid 15679:tid 15700] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:06.194007 2026] [proxy_fcgi:error] [pid 15679:tid 15684] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:06.418060 2026] [proxy_fcgi:error] [pid 15679:tid 15705] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:06.637847 2026] [proxy_fcgi:error] [pid 15679:tid 15699] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:06.861885 2026] [proxy_fcgi:error] [pid 15679:tid 15685] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:07.084098 2026] [proxy_fcgi:error] [pid 15679:tid 15683] [client 4.204.236.27:20462] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:30:07.312560 2026] [:error] [pid 15679:tid 15689] [client 4.204.236.27:20462] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "ag-Hbyh8tgGc38WJ-Gxw5AAAAMg"]
[Fri May 22 06:30:08.286451 2026] [:error] [pid 15585:tid 15655] [client 4.204.236.27:17805] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "ag-HcCKb-vB41AF-LC1JugAAAIg"]
[Fri May 22 06:30:08.976882 2026] [:error] [pid 58813:tid 58818] [client 4.204.236.27:20437] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "ag-HcJ6yyKWDKULhxJ3-pwAAAUI"]
[Fri May 22 06:30:10.200356 2026] [:error] [pid 15679:tid 15701] [client 4.204.236.27:17794] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index0.php"] [unique_id "ag-Hcih8tgGc38WJ-Gxw6AAAANQ"]
[Fri May 22 06:30:11.258645 2026] [:error] [pid 15585:tid 15649] [client 4.204.236.27:17843] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ag-HcyKb-vB41AF-LC1JvgAAAII"]
[Fri May 22 06:30:12.309796 2026] [:error] [pid 15585:tid 15657] [client 4.204.236.27:17814] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ag-HdCKb-vB41AF-LC1JxAAAAIo"]
[Fri May 22 06:30:13.213132 2026] [:error] [pid 15584:tid 15636] [client 4.204.236.27:17887] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ag-Hdd9Z_TVLbNEx52h-HQAAAFA"]
[Fri May 22 06:30:14.010826 2026] [:error] [pid 15585:tid 15652] [client 4.204.236.27:17862] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ag-HdiKb-vB41AF-LC1JxwAAAIU"]
[Fri May 22 06:30:14.667345 2026] [:error] [pid 15583:tid 15591] [client 4.204.236.27:20432] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "ag-HdnnaOncRcIm17YV79QAAAAM"]
[Fri May 22 06:30:15.169734 2026] [:error] [pid 15585:tid 15666] [client 4.204.236.27:17889] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "ag-HdyKb-vB41AF-LC1JzQAAAJM"]
[Fri May 22 06:30:15.932277 2026] [:error] [pid 15584:tid 15638] [client 4.204.236.27:17899] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "ag-Hd99Z_TVLbNEx52h-IgAAAFI"]
[Fri May 22 06:30:16.565069 2026] [:error] [pid 15584:tid 15635] [client 4.204.236.27:17797] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/19.php"] [unique_id "ag-HeN9Z_TVLbNEx52h-JAAAAE8"]
[Fri May 22 06:30:17.175168 2026] [:error] [pid 15585:tid 15671] [client 4.204.236.27:17865] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "ag-HeSKb-vB41AF-LC1J1QAAAJg"]
[Fri May 22 06:30:18.101392 2026] [:error] [pid 15583:tid 15611] [client 4.204.236.27:20422] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "ag-HennaOncRcIm17YV79wAAABc"]
[Fri May 22 06:30:19.036813 2026] [:error] [pid 15679:tid 15685] [client 4.204.236.27:20465] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "ag-Heyh8tgGc38WJ-Gxw7QAAAMQ"]
[Fri May 22 06:30:19.898497 2026] [:error] [pid 58813:tid 58838] [client 4.204.236.27:17824] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/11.php"] [unique_id "ag-He56yyKWDKULhxJ3-qwAAAVY"]
[Fri May 22 06:30:20.984939 2026] [:error] [pid 15585:tid 15648] [client 4.204.236.27:17825] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "ag-HfCKb-vB41AF-LC1J6wAAAIE"]
[Fri May 22 06:30:21.710038 2026] [:error] [pid 15585:tid 15671] [client 4.204.236.27:17815] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "ag-HfSKb-vB41AF-LC1J7AAAAJg"]
[Fri May 22 06:30:22.752074 2026] [:error] [pid 58782:tid 58802] [client 4.204.236.27:17836] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "ag-HfoxsdTFafgO8vhSvCQAAARI"]
[Fri May 22 06:30:23.552559 2026] [:error] [pid 15583:tid 15600] [client 4.204.236.27:17900] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/w.php"] [unique_id "ag-Hf3naOncRcIm17YV7_QAAAAw"]
[Fri May 22 06:30:24.573862 2026] [:error] [pid 15585:tid 15668] [client 4.204.236.27:17895] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "ag-HgCKb-vB41AF-LC1J9gAAAJU"]
[Fri May 22 06:30:25.600739 2026] [:error] [pid 15679:tid 15682] [client 4.204.236.27:17884] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "ag-HgSh8tgGc38WJ-Gxw8AAAAME"]
[Fri May 22 06:30:26.499453 2026] [:error] [pid 15679:tid 15681] [client 4.204.236.27:17880] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "ag-Hgih8tgGc38WJ-Gxw8QAAAMA"]
[Fri May 22 06:30:28.051133 2026] [:error] [pid 15585:tid 15671] [client 4.204.236.27:17798] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws78.php"] [unique_id "ag-HhCKb-vB41AF-LC1J_QAAAJg"]
[Fri May 22 06:30:32.581878 2026] [:error] [pid 15679:tid 15684] [client 4.204.236.27:17870] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ag-HiCh8tgGc38WJ-Gxw9wAAAMM"]
[Fri May 22 06:30:36.003912 2026] [:error] [pid 15679:tid 15694] [client 4.204.236.27:20442] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ag-HjCh8tgGc38WJ-GxxAwAAAM0"]
[Fri May 22 06:30:38.467752 2026] [:error] [pid 58782:tid 58792] [client 4.204.236.27:17904] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ag-HjoxsdTFafgO8vhSvEAAAAQg"]
[Fri May 22 06:30:39.898270 2026] [:error] [pid 15583:tid 15608] [client 4.204.236.27:17803] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ag-Hj3naOncRcIm17YV8CAAAABQ"]
[Fri May 22 06:30:40.860030 2026] [:error] [pid 15679:tid 15696] [client 4.204.236.27:20435] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ag-HkCh8tgGc38WJ-GxxDwAAAM8"]
[Fri May 22 06:30:41.927816 2026] [:error] [pid 15679:tid 15701] [client 4.204.236.27:17813] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ag-HkSh8tgGc38WJ-GxxEgAAANQ"]
[Fri May 22 06:30:42.814465 2026] [:error] [pid 15583:tid 15602] [client 4.204.236.27:17811] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ag-HknnaOncRcIm17YV8DgAAAA4"]
[Fri May 22 06:30:43.361006 2026] [:error] [pid 58782:tid 58789] [client 4.204.236.27:17909] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ag-Hk4xsdTFafgO8vhSvEgAAAQU"]
[Fri May 22 06:30:44.450428 2026] [:error] [pid 15585:tid 15659] [client 4.204.236.27:17868] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag-HlCKb-vB41AF-LC1KEwAAAIw"]
[Fri May 22 06:30:45.141073 2026] [:error] [pid 15584:tid 15636] [client 4.204.236.27:20446] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag-Hld9Z_TVLbNEx52h-OAAAAFA"]
[Fri May 22 06:30:46.042060 2026] [:error] [pid 15679:tid 15682] [client 4.204.236.27:17841] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag-Hlih8tgGc38WJ-GxxGwAAAME"]
[Fri May 22 06:30:46.804291 2026] [:error] [pid 15679:tid 15701] [client 4.204.236.27:17855] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/BDKR28WP.php"] [unique_id "ag-Hlih8tgGc38WJ-GxxHAAAANQ"]
[Fri May 22 06:30:47.524677 2026] [:error] [pid 15679:tid 15699] [client 4.204.236.27:17808] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ag-Hlyh8tgGc38WJ-GxxHwAAANI"]
[Fri May 22 06:30:48.213395 2026] [:error] [pid 15584:tid 15627] [client 4.204.236.27:20452] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ag-HmN9Z_TVLbNEx52h-OwAAAEc"]
[Fri May 22 06:30:49.405344 2026] [:error] [pid 15584:tid 15637] [client 4.204.236.27:17858] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ag-Hmd9Z_TVLbNEx52h-PQAAAFE"]
[Fri May 22 06:30:50.313987 2026] [:error] [pid 15584:tid 15644] [client 4.204.236.27:20473] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a1.php"] [unique_id "ag-Hmt9Z_TVLbNEx52h-PwAAAFg"]
[Fri May 22 06:30:51.156347 2026] [:error] [pid 15679:tid 15696] [client 4.204.236.27:17828] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ag-Hmyh8tgGc38WJ-GxxJgAAAM8"]
[Fri May 22 06:30:51.700557 2026] [:error] [pid 58782:tid 58805] [client 4.204.236.27:17852] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ag-Hm4xsdTFafgO8vhSvFwAAARU"]
[Fri May 22 06:30:52.247305 2026] [:error] [pid 15679:tid 15681] [client 4.204.236.27:17882] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ag-HnCh8tgGc38WJ-GxxKgAAAMA"]
[Fri May 22 06:30:52.717446 2026] [:error] [pid 15583:tid 15609] [client 4.204.236.27:17833] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ag-HnHnaOncRcIm17YV8FwAAABU"]
[Fri May 22 06:30:53.181708 2026] [:error] [pid 58813:tid 58819] [client 4.204.236.27:20439] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ag-HnZ6yyKWDKULhxJ3-uAAAAUM"]
[Fri May 22 06:30:53.802652 2026] [:error] [pid 15583:tid 15598] [client 4.204.236.27:17820] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ag-HnXnaOncRcIm17YV8GAAAAAo"]
[Fri May 22 06:30:54.381139 2026] [:error] [pid 15584:tid 15641] [client 4.204.236.27:17891] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ag-Hnt9Z_TVLbNEx52h-QQAAAFU"]
[Fri May 22 06:30:55.065767 2026] [:error] [pid 58813:tid 58830] [client 4.204.236.27:17876] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xff.php"] [unique_id "ag-Hn56yyKWDKULhxJ3-uQAAAU4"]
[Fri May 22 06:30:55.533681 2026] [:error] [pid 15583:tid 15603] [client 4.204.236.27:17916] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ag-Hn3naOncRcIm17YV8HAAAAA8"]
[Fri May 22 06:30:56.132443 2026] [:error] [pid 15583:tid 15608] [client 4.204.236.27:17859] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ag-HoHnaOncRcIm17YV8HQAAABQ"]
[Fri May 22 06:30:56.882400 2026] [:error] [pid 58782:tid 58802] [client 4.204.236.27:20425] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ag-HoIxsdTFafgO8vhSvIAAAARI"]
[Fri May 22 06:30:57.460075 2026] [:error] [pid 15584:tid 15620] [client 4.204.236.27:20430] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ag-Hod9Z_TVLbNEx52h-RgAAAEA"]
[Fri May 22 06:30:58.104786 2026] [:error] [pid 58813:tid 58833] [client 4.204.236.27:20396] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son.php"] [unique_id "ag-Hop6yyKWDKULhxJ3-vQAAAVE"]
[Fri May 22 06:30:59.191993 2026] [:error] [pid 15584:tid 15638] [client 4.204.236.27:20433] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son.php"] [unique_id "ag-Ho99Z_TVLbNEx52h-SQAAAFI"]
[Fri May 22 06:30:59.892113 2026] [:error] [pid 15583:tid 15606] [client 4.204.236.27:20431] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son.php"] [unique_id "ag-Ho3naOncRcIm17YV8HwAAABI"]
[Fri May 22 06:31:00.661634 2026] [:error] [pid 15679:tid 15695] [client 4.204.236.27:20381] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son.php"] [unique_id "ag-HpCh8tgGc38WJ-GxxRQAAAM4"]
[Fri May 22 06:31:01.597656 2026] [:error] [pid 15679:tid 15700] [client 4.204.236.27:20424] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "ag-HpSh8tgGc38WJ-GxxSAAAANM"]
[Fri May 22 06:31:02.477307 2026] [:error] [pid 58813:tid 58826] [client 4.204.236.27:20448] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "ag-Hpp6yyKWDKULhxJ3-wAAAAUo"]
[Fri May 22 06:31:03.261877 2026] [:error] [pid 58782:tid 58791] [client 4.204.236.27:20399] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "ag-Hp4xsdTFafgO8vhSvJgAAAQc"]
[Fri May 22 06:31:04.000609 2026] [:error] [pid 58782:tid 58807] [client 4.204.236.27:20457] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/doc.php"] [unique_id "ag-Hp4xsdTFafgO8vhSvJwAAARc"]
[Fri May 22 06:31:04.963165 2026] [:error] [pid 15679:tid 15700] [client 4.204.236.27:17918] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zo.php"] [unique_id "ag-HqCh8tgGc38WJ-GxxVgAAANM"]
[Fri May 22 06:31:05.703147 2026] [:error] [pid 15679:tid 15689] [client 4.204.236.27:20445] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zo.php"] [unique_id "ag-HqSh8tgGc38WJ-GxxXAAAAMg"]
[Fri May 22 06:31:06.192088 2026] [:error] [pid 15584:tid 15644] [client 4.204.236.27:17850] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zo.php"] [unique_id "ag-Hqt9Z_TVLbNEx52h-SgAAAFg"]
[Fri May 22 06:31:06.971440 2026] [:error] [pid 58813:tid 58816] [client 4.204.236.27:20427] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zo.php"] [unique_id "ag-Hqp6yyKWDKULhxJ3-ygAAAUA"]
[Fri May 22 06:31:07.697456 2026] [proxy_fcgi:error] [pid 58813:tid 58822] [client 4.204.236.27:20475] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:07.938730 2026] [:error] [pid 58813:tid 58840] [client 4.204.236.27:20475] [client 4.204.236.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "ag-Hq56yyKWDKULhxJ3-zAAAAVg"]
[Fri May 22 06:31:08.638997 2026] [proxy_fcgi:error] [pid 15585:tid 15665] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:08.870517 2026] [proxy_fcgi:error] [pid 15585:tid 15650] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:09.151864 2026] [proxy_fcgi:error] [pid 15585:tid 15649] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:09.371988 2026] [proxy_fcgi:error] [pid 15585:tid 15647] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:09.600159 2026] [proxy_fcgi:error] [pid 15585:tid 15661] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:09.936638 2026] [proxy_fcgi:error] [pid 15585:tid 15656] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:10.159471 2026] [proxy_fcgi:error] [pid 15585:tid 15648] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:10.381580 2026] [proxy_fcgi:error] [pid 15585:tid 15652] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:10.602413 2026] [proxy_fcgi:error] [pid 15585:tid 15654] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:10.823057 2026] [proxy_fcgi:error] [pid 15585:tid 15666] [client 4.204.236.27:17827] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:31:11.039383 2026] [:error] [pid 15585:tid 15658] [client 4.204.236.27:17827] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ag-HryKb-vB41AF-LC1KNwAAAIs"]
[Fri May 22 06:31:11.893559 2026] [:error] [pid 15585:tid 15659] [client 4.204.236.27:20474] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ag-HryKb-vB41AF-LC1KOAAAAIw"]
[Fri May 22 06:31:12.426641 2026] [:error] [pid 15583:tid 15612] [client 4.204.236.27:20458] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ag-HsHnaOncRcIm17YV8KwAAABg"]
[Fri May 22 06:31:13.017395 2026] [:error] [pid 15585:tid 15667] [client 4.204.236.27:17799] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ag-HsSKb-vB41AF-LC1KOwAAAJQ"]
[Fri May 22 06:31:13.952086 2026] [:error] [pid 15585:tid 15653] [client 4.204.236.27:17810] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ag-HsSKb-vB41AF-LC1KPwAAAIY"]
[Fri May 22 06:31:14.626882 2026] [:error] [pid 15585:tid 15663] [client 4.204.236.27:20440] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ag-HsiKb-vB41AF-LC1KQQAAAJA"]
[Fri May 22 06:31:15.487964 2026] [:error] [pid 15584:tid 15628] [client 4.204.236.27:20384] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ag-Hs99Z_TVLbNEx52h-VgAAAEg"]
[Fri May 22 06:31:16.000648 2026] [:error] [pid 15679:tid 15690] [client 4.204.236.27:20441] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ag-Hsyh8tgGc38WJ-GxxfwAAAMk"]
[Fri May 22 06:31:16.560367 2026] [:error] [pid 15679:tid 15698] [client 4.204.236.27:20476] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zdd.php"] [unique_id "ag-HtCh8tgGc38WJ-GxxgwAAANE"]
[Fri May 22 06:31:17.011745 2026] [:error] [pid 15679:tid 15688] [client 4.204.236.27:20471] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zdd.php"] [unique_id "ag-HtSh8tgGc38WJ-GxxhgAAAMc"]
[Fri May 22 06:31:17.824058 2026] [:error] [pid 15585:tid 15657] [client 4.204.236.27:20468] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zdd.php"] [unique_id "ag-HtSKb-vB41AF-LC1KRwAAAIo"]
[Fri May 22 06:31:18.772076 2026] [:error] [pid 58813:tid 58832] [client 4.204.236.27:17902] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zdd.php"] [unique_id "ag-Htp6yyKWDKULhxJ3-0gAAAVA"]
[Fri May 22 06:31:19.310270 2026] [:error] [pid 15584:tid 15634] [client 4.204.236.27:20451] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ag-Ht99Z_TVLbNEx52h-WAAAAE4"]
[Fri May 22 06:31:19.851138 2026] [:error] [pid 15583:tid 15596] [client 4.204.236.27:20363] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ag-Ht3naOncRcIm17YV8LwAAAAg"]
[Fri May 22 06:31:20.469359 2026] [:error] [pid 15584:tid 15639] [client 4.204.236.27:20398] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ag-HuN9Z_TVLbNEx52h-WgAAAFM"]
[Fri May 22 06:31:21.027968 2026] [:error] [pid 58813:tid 58839] [client 4.204.236.27:17857] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ag-HuZ6yyKWDKULhxJ3-1AAAAVc"]
[Fri May 22 06:31:21.590077 2026] [:error] [pid 15585:tid 15668] [client 4.204.236.27:17812] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ag-HuSKb-vB41AF-LC1KTAAAAJU"]
[Fri May 22 06:31:22.060464 2026] [:error] [pid 15585:tid 15657] [client 4.204.236.27:17885] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ag-HuiKb-vB41AF-LC1KTwAAAIo"]
[Fri May 22 06:31:22.586781 2026] [:error] [pid 15585:tid 15647] [client 4.204.236.27:17851] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ag-HuiKb-vB41AF-LC1KUQAAAIA"]
[Fri May 22 06:31:23.278766 2026] [:error] [pid 58813:tid 58823] [client 4.204.236.27:20369] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ag-Hu56yyKWDKULhxJ3-1QAAAUc"]
[Fri May 22 06:31:24.002014 2026] [:error] [pid 15585:tid 15665] [client 4.204.236.27:20416] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ag-HvCKb-vB41AF-LC1KVQAAAJI"]
[Fri May 22 06:31:24.623772 2026] [:error] [pid 15585:tid 15663] [client 4.204.236.27:20461] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ag-HvCKb-vB41AF-LC1KVgAAAJA"]
[Fri May 22 06:31:25.141651 2026] [:error] [pid 15585:tid 15668] [client 4.204.236.27:20360] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ag-HvSKb-vB41AF-LC1KWgAAAJU"]
[Fri May 22 06:31:25.644633 2026] [:error] [pid 15585:tid 15670] [client 4.204.236.27:17871] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aboute.php"] [unique_id "ag-HvSKb-vB41AF-LC1KXAAAAJc"]
[Fri May 22 06:31:26.318411 2026] [:error] [pid 58782:tid 58795] [client 4.204.236.27:20397] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag-HvoxsdTFafgO8vhSvOgAAAQs"]
[Fri May 22 06:31:26.835780 2026] [:error] [pid 15583:tid 15593] [client 4.204.236.27:17829] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag-HvnnaOncRcIm17YV8NQAAAAU"]
[Fri May 22 06:31:27.276099 2026] [:error] [pid 15585:tid 15653] [client 4.204.236.27:20382] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag-HvyKb-vB41AF-LC1KXgAAAIY"]
[Fri May 22 06:31:27.736935 2026] [:error] [pid 15585:tid 15650] [client 4.204.236.27:17802] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/one.php"] [unique_id "ag-HvyKb-vB41AF-LC1KXwAAAIM"]
[Fri May 22 06:31:28.218458 2026] [:error] [pid 15585:tid 15660] [client 4.204.236.27:20388] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag-HwCKb-vB41AF-LC1KYQAAAI0"]
[Fri May 22 06:31:29.001214 2026] [:error] [pid 15585:tid 15652] [client 4.204.236.27:17839] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag-HwSKb-vB41AF-LC1KYwAAAIU"]
[Fri May 22 06:31:29.488115 2026] [:error] [pid 15585:tid 15668] [client 4.204.236.27:20373] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag-HwSKb-vB41AF-LC1KZQAAAJU"]
[Fri May 22 06:31:29.998420 2026] [:error] [pid 58813:tid 58839] [client 4.204.236.27:17844] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ag-HwZ6yyKWDKULhxJ3-3gAAAVc"]
[Fri May 22 06:31:30.462310 2026] [:error] [pid 15679:tid 15705] [client 4.204.236.27:20472] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "ag-Hwih8tgGc38WJ-GxxsQAAANg"]
[Fri May 22 06:31:30.946070 2026] [:error] [pid 15585:tid 15658] [client 4.204.236.27:20377] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "ag-HwiKb-vB41AF-LC1KZwAAAIs"]
[Fri May 22 06:31:31.439779 2026] [:error] [pid 15585:tid 15655] [client 4.204.236.27:20394] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "ag-HwyKb-vB41AF-LC1KagAAAIg"]
[Fri May 22 06:31:31.917999 2026] [:error] [pid 15583:tid 15599] [client 4.204.236.27:20447] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-class.php"] [unique_id "ag-Hw3naOncRcIm17YV8OwAAAAs"]
[Fri May 22 06:31:32.432818 2026] [:error] [pid 15679:tid 15688] [client 4.204.236.27:17911] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ag-HxCh8tgGc38WJ-GxxtwAAAMc"]
[Fri May 22 06:31:33.006341 2026] [:error] [pid 15584:tid 15634] [client 4.204.236.27:17860] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ag-Hxd9Z_TVLbNEx52h-YQAAAE4"]
[Fri May 22 06:31:33.538803 2026] [:error] [pid 58782:tid 58803] [client 4.204.236.27:17854] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ag-HxYxsdTFafgO8vhSvPQAAARM"]
[Fri May 22 06:31:34.059157 2026] [:error] [pid 15679:tid 15702] [client 4.204.236.27:20291] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/8.php"] [unique_id "ag-Hxih8tgGc38WJ-GxxuwAAANU"]
[Fri May 22 06:31:34.646228 2026] [:error] [pid 58782:tid 58785] [client 4.204.236.27:20309] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "ag-HxoxsdTFafgO8vhSvQgAAAQE"]
[Fri May 22 06:31:35.100964 2026] [:error] [pid 15679:tid 15682] [client 4.204.236.27:20409] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "ag-Hxyh8tgGc38WJ-GxxvAAAAME"]
[Fri May 22 06:31:35.688578 2026] [:error] [pid 15584:tid 15639] [client 4.204.236.27:20374] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "ag-Hx99Z_TVLbNEx52h-YwAAAFM"]
[Fri May 22 06:31:36.223447 2026] [:error] [pid 15584:tid 15633] [client 4.204.236.27:17847] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "ag-HyN9Z_TVLbNEx52h-ZAAAAE0"]
[Fri May 22 06:31:36.785727 2026] [:error] [pid 58782:tid 58793] [client 4.204.236.27:20390] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ag-HyIxsdTFafgO8vhSvRAAAAQk"]
[Fri May 22 06:31:37.300470 2026] [:error] [pid 58782:tid 58792] [client 4.204.236.27:20357] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ag-HyYxsdTFafgO8vhSvRQAAAQg"]
[Fri May 22 06:31:37.799217 2026] [:error] [pid 58813:tid 58816] [client 4.204.236.27:17875] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ag-HyZ6yyKWDKULhxJ3-5gAAAUA"]
[Fri May 22 06:31:38.430759 2026] [:error] [pid 58813:tid 58838] [client 4.204.236.27:17881] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ag-Hyp6yyKWDKULhxJ3-5wAAAVY"]
[Fri May 22 06:31:38.919521 2026] [:error] [pid 15679:tid 15694] [client 4.204.236.27:20464] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ag-Hyih8tgGc38WJ-GxxwQAAAM0"]
[Fri May 22 06:31:39.616322 2026] [:error] [pid 15583:tid 15612] [client 4.204.236.27:20367] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ag-Hy3naOncRcIm17YV8PAAAABg"]
[Fri May 22 06:31:40.131381 2026] [:error] [pid 58782:tid 58801] [client 4.204.236.27:17894] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ag-HzIxsdTFafgO8vhSvRwAAARE"]
[Fri May 22 06:31:40.668717 2026] [:error] [pid 15583:tid 15592] [client 4.204.236.27:17906] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ag-HzHnaOncRcIm17YV8PwAAAAQ"]
[Fri May 22 06:31:41.114897 2026] [:error] [pid 58813:tid 58825] [client 4.204.236.27:20450] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son1.php"] [unique_id "ag-HzZ6yyKWDKULhxJ3-6wAAAUk"]
[Fri May 22 06:31:41.670072 2026] [:error] [pid 15679:tid 15695] [client 4.204.236.27:17842] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son1.php"] [unique_id "ag-HzSh8tgGc38WJ-GxxxgAAAM4"]
[Fri May 22 06:31:42.209643 2026] [:error] [pid 15679:tid 15697] [client 4.204.236.27:20460] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son1.php"] [unique_id "ag-Hzih8tgGc38WJ-GxxyAAAANA"]
[Fri May 22 06:31:42.699973 2026] [:error] [pid 15679:tid 15700] [client 4.204.236.27:20290] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/son1.php"] [unique_id "ag-Hzih8tgGc38WJ-GxxyQAAANM"]
[Fri May 22 06:31:43.199109 2026] [:error] [pid 15679:tid 15684] [client 4.204.236.27:20423] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ag-Hzyh8tgGc38WJ-GxxzQAAAMM"]
[Fri May 22 06:31:43.736460 2026] [:error] [pid 15583:tid 15610] [client 4.204.236.27:20469] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ag-Hz3naOncRcIm17YV8QwAAABY"]
[Fri May 22 06:31:44.218863 2026] [:error] [pid 15585:tid 15662] [client 4.204.236.27:20353] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ag-H0CKb-vB41AF-LC1KiQAAAI8"]
[Fri May 22 06:31:44.689589 2026] [:error] [pid 15679:tid 15702] [client 4.204.236.27:20470] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ggb.php"] [unique_id "ag-H0Ch8tgGc38WJ-Gxx0gAAANU"]
[Fri May 22 06:31:45.157614 2026] [:error] [pid 15583:tid 15608] [client 4.204.236.27:20307] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ag-H0XnaOncRcIm17YV8RQAAABQ"]
[Fri May 22 06:31:45.738517 2026] [:error] [pid 15679:tid 15691] [client 4.204.236.27:20260] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ag-H0Sh8tgGc38WJ-Gxx1AAAAMo"]
[Fri May 22 06:31:46.259503 2026] [:error] [pid 15585:tid 15653] [client 4.204.236.27:20477] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ag-H0iKb-vB41AF-LC1KjAAAAIY"]
[Fri May 22 06:31:46.784949 2026] [:error] [pid 15585:tid 15664] [client 4.204.236.27:20355] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ag-H0iKb-vB41AF-LC1KjQAAAJE"]
[Fri May 22 06:31:47.280924 2026] [:error] [pid 58813:tid 58829] [client 4.204.236.27:20436] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "ag-H056yyKWDKULhxJ3-9wAAAU0"]
[Fri May 22 06:31:47.781140 2026] [:error] [pid 15679:tid 15704] [client 4.204.236.27:17873] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "ag-H0yh8tgGc38WJ-Gxx1QAAANc"]
[Fri May 22 06:31:48.269401 2026] [:error] [pid 58782:tid 58791] [client 4.204.236.27:20449] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "ag-H1IxsdTFafgO8vhSvTAAAAQc"]
[Fri May 22 06:31:48.817026 2026] [:error] [pid 15583:tid 15594] [client 4.204.236.27:20426] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/rh.php"] [unique_id "ag-H1HnaOncRcIm17YV8TAAAAAY"]
[Fri May 22 06:31:49.321648 2026] [:error] [pid 15679:tid 15703] [client 4.204.236.27:20313] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/99.php"] [unique_id "ag-H1Sh8tgGc38WJ-Gxx2QAAANY"]
[Fri May 22 06:31:49.865000 2026] [:error] [pid 15679:tid 15702] [client 4.204.236.27:20459] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/99.php"] [unique_id "ag-H1Sh8tgGc38WJ-Gxx2gAAANU"]
[Fri May 22 06:31:50.329140 2026] [:error] [pid 58813:tid 58837] [client 4.204.236.27:20420] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/99.php"] [unique_id "ag-H1p6yyKWDKULhxJ3-_AAAAVU"]
[Fri May 22 06:31:50.765970 2026] [:error] [pid 15583:tid 15599] [client 4.204.236.27:17832] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/99.php"] [unique_id "ag-H1nnaOncRcIm17YV8UAAAAAs"]
[Fri May 22 06:31:51.226047 2026] [:error] [pid 15583:tid 15591] [client 4.204.236.27:20429] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "ag-H13naOncRcIm17YV8UQAAAAM"]
[Fri May 22 06:31:51.755222 2026] [:error] [pid 15584:tid 15622] [client 4.204.236.27:20456] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "ag-H199Z_TVLbNEx52h-aQAAAEI"]
[Fri May 22 06:31:52.262831 2026] [:error] [pid 15585:tid 15667] [client 4.204.236.27:20341] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "ag-H2CKb-vB41AF-LC1KkAAAAJQ"]
[Fri May 22 06:31:52.854012 2026] [:error] [pid 15679:tid 15695] [client 4.204.236.27:20478] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/layout.php"] [unique_id "ag-H2Ch8tgGc38WJ-Gxx3gAAAM4"]
[Fri May 22 06:31:53.348253 2026] [:error] [pid 15584:tid 15624] [client 4.204.236.27:17848] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "ag-H2d9Z_TVLbNEx52h-bAAAAEQ"]
[Fri May 22 06:31:53.789162 2026] [:error] [pid 15583:tid 15595] [client 4.204.236.27:20316] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "ag-H2XnaOncRcIm17YV8UwAAAAc"]
[Fri May 22 06:31:54.258093 2026] [:error] [pid 15583:tid 15609] [client 4.204.236.27:17830] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "ag-H2nnaOncRcIm17YV8VQAAABU"]
[Fri May 22 06:31:54.716898 2026] [:error] [pid 15584:tid 15636] [client 4.204.236.27:20303] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/12.php"] [unique_id "ag-H2t9Z_TVLbNEx52h-bwAAAFA"]
[Fri May 22 06:31:55.194314 2026] [:error] [pid 15679:tid 15682] [client 4.204.236.27:20408] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag-H2yh8tgGc38WJ-Gxx4QAAAME"]
[Fri May 22 06:31:55.668317 2026] [:error] [pid 58813:tid 58818] [client 4.204.236.27:20428] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag-H256yyKWDKULhxJ3-_wAAAUI"]
[Fri May 22 06:31:56.146090 2026] [:error] [pid 58782:tid 58795] [client 4.204.236.27:17826] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag-H3IxsdTFafgO8vhSvUwAAAQs"]
[Fri May 22 06:31:56.588440 2026] [:error] [pid 15583:tid 15605] [client 4.204.236.27:20361] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ag-H3HnaOncRcIm17YV8WQAAABE"]
[Fri May 22 06:31:57.052278 2026] [:error] [pid 58782:tid 58808] [client 4.204.236.27:20453] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ag-H3YxsdTFafgO8vhSvVQAAARg"]
[Fri May 22 06:31:57.492609 2026] [:error] [pid 15679:tid 15705] [client 4.204.236.27:20392] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ag-H3Sh8tgGc38WJ-Gxx4wAAANg"]
[Fri May 22 06:31:57.946053 2026] [:error] [pid 15679:tid 15688] [client 4.204.236.27:20411] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ag-H3Sh8tgGc38WJ-Gxx5AAAAMc"]
[Fri May 22 06:31:58.396700 2026] [:error] [pid 15585:tid 15663] [client 4.204.236.27:20417] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ag-H3iKb-vB41AF-LC1KnQAAAJA"]
[Fri May 22 06:31:59.017243 2026] [:error] [pid 15585:tid 15669] [client 4.204.236.27:20413] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "ag-H3yKb-vB41AF-LC1KogAAAJY"]
[Fri May 22 06:31:59.457819 2026] [:error] [pid 15585:tid 15664] [client 4.204.236.27:20387] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "ag-H3yKb-vB41AF-LC1KpQAAAJE"]
[Fri May 22 06:31:59.924627 2026] [:error] [pid 15583:tid 15598] [client 4.204.236.27:20364] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "ag-H33naOncRcIm17YV8XQAAAAo"]
[Fri May 22 06:32:00.457719 2026] [:error] [pid 15584:tid 15644] [client 4.204.236.27:17845] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Ov-Simple1.php"] [unique_id "ag-H4N9Z_TVLbNEx52h-cwAAAFg"]
[Fri May 22 06:32:00.912847 2026] [:error] [pid 15583:tid 15595] [client 4.204.236.27:20224] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ag-H4HnaOncRcIm17YV8XgAAAAc"]
[Fri May 22 06:32:01.359355 2026] [:error] [pid 15584:tid 15635] [client 4.204.236.27:20380] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ag-H4d9Z_TVLbNEx52h-dgAAAE8"]
[Fri May 22 06:32:01.835511 2026] [:error] [pid 58813:tid 58820] [client 4.204.236.27:20421] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ag-H4Z6yyKWDKULhxJ3_BQAAAUQ"]
[Fri May 22 06:32:02.276478 2026] [:error] [pid 15585:tid 15668] [client 4.204.236.27:17831] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a5.php"] [unique_id "ag-H4iKb-vB41AF-LC1KrAAAAJU"]
[Fri May 22 06:32:02.716549 2026] [:error] [pid 15585:tid 15658] [client 4.204.236.27:20288] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ag-H4iKb-vB41AF-LC1KrgAAAIs"]
[Fri May 22 06:32:03.160010 2026] [:error] [pid 15584:tid 15639] [client 4.204.236.27:20256] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ag-H499Z_TVLbNEx52h-eAAAAFM"]
[Fri May 22 06:32:03.600552 2026] [:error] [pid 15583:tid 15609] [client 4.204.236.27:20372] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ag-H43naOncRcIm17YV8YQAAABU"]
[Fri May 22 06:32:04.032898 2026] [:error] [pid 15584:tid 15633] [client 4.204.236.27:20414] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ag-H5N9Z_TVLbNEx52h-egAAAE0"]
[Fri May 22 06:32:04.469281 2026] [:error] [pid 15584:tid 15636] [client 4.204.236.27:20359] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ag-H5N9Z_TVLbNEx52h-fQAAAFA"]
[Fri May 22 06:32:04.925350 2026] [:error] [pid 15679:tid 15694] [client 4.204.236.27:20466] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ag-H5Ch8tgGc38WJ-Gxx6AAAAM0"]
[Fri May 22 06:32:05.401617 2026] [:error] [pid 15679:tid 15684] [client 4.204.236.27:20314] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ag-H5Sh8tgGc38WJ-Gxx6gAAAMM"]
[Fri May 22 06:32:05.876508 2026] [:error] [pid 15584:tid 15628] [client 4.204.236.27:20393] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ag-H5d9Z_TVLbNEx52h-gwAAAEg"]
[Fri May 22 06:32:06.332799 2026] [:error] [pid 15679:tid 15693] [client 4.204.236.27:20400] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ag-H5ih8tgGc38WJ-Gxx7AAAAMw"]
[Fri May 22 06:32:06.766328 2026] [:error] [pid 15584:tid 15620] [client 4.204.236.27:17874] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ag-H5t9Z_TVLbNEx52h-iQAAAEA"]
[Fri May 22 06:32:07.200399 2026] [:error] [pid 15583:tid 15603] [client 4.204.236.27:20299] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ag-H53naOncRcIm17YV8YwAAAA8"]
[Fri May 22 06:32:07.638295 2026] [:error] [pid 58782:tid 58793] [client 4.204.236.27:17849] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ag-H54xsdTFafgO8vhSvWQAAAQk"]
[Fri May 22 06:32:08.104705 2026] [:error] [pid 15679:tid 15698] [client 4.204.236.27:20336] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ag-H6Ch8tgGc38WJ-Gxx8QAAANE"]
[Fri May 22 06:32:08.549311 2026] [:error] [pid 15679:tid 15696] [client 4.204.236.27:20378] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ag-H6Ch8tgGc38WJ-Gxx8gAAAM8"]
[Fri May 22 06:32:08.984350 2026] [:error] [pid 15584:tid 15636] [client 4.204.236.27:20376] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ag-H6N9Z_TVLbNEx52h-jwAAAFA"]
[Fri May 22 06:32:09.426768 2026] [:error] [pid 15583:tid 15596] [client 4.204.236.27:20368] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ag-H6XnaOncRcIm17YV8aAAAAAg"]
[Fri May 22 06:32:09.890188 2026] [:error] [pid 15679:tid 15701] [client 4.204.236.27:20293] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/index/function.php"] [unique_id "ag-H6Sh8tgGc38WJ-Gxx9AAAANQ"]
[Fri May 22 06:32:10.791466 2026] [proxy_fcgi:error] [pid 15583:tid 15595] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:11.011611 2026] [proxy_fcgi:error] [pid 15583:tid 15604] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:11.233411 2026] [proxy_fcgi:error] [pid 15583:tid 15611] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:11.458457 2026] [proxy_fcgi:error] [pid 15583:tid 15609] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:11.685058 2026] [proxy_fcgi:error] [pid 15583:tid 15603] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:11.906903 2026] [proxy_fcgi:error] [pid 15583:tid 15592] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:12.128935 2026] [proxy_fcgi:error] [pid 15583:tid 15610] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:12.351372 2026] [proxy_fcgi:error] [pid 15583:tid 15599] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:12.572036 2026] [proxy_fcgi:error] [pid 15583:tid 15605] [client 4.204.236.27:20247] AH01071: Got error 'Primary script unknown'
[Fri May 22 06:32:14.250194 2026] [:error] [pid 15583:tid 15590] [client 4.204.236.27:20247] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ag-H7nnaOncRcIm17YV8dwAAAAI"]
[Fri May 22 06:32:14.703352 2026] [:error] [pid 15585:tid 15659] [client 4.204.236.27:20415] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ag-H7iKb-vB41AF-LC1KwgAAAIw"]
[Fri May 22 06:32:15.147088 2026] [:error] [pid 15679:tid 15696] [client 4.204.236.27:20322] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ag-H7yh8tgGc38WJ-Gxx_gAAAM8"]
[Fri May 22 06:32:15.594998 2026] [:error] [pid 15585:tid 15651] [client 4.204.236.27:20292] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ag-H7yKb-vB41AF-LC1KxwAAAIQ"]
[Fri May 22 06:32:16.048310 2026] [:error] [pid 15583:tid 15612] [client 4.204.236.27:20366] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca4.php"] [unique_id "ag-H8HnaOncRcIm17YV8eQAAABg"]
[Fri May 22 06:32:16.512293 2026] [:error] [pid 15585:tid 15657] [client 4.204.236.27:20298] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca4.php"] [unique_id "ag-H8CKb-vB41AF-LC1KywAAAIo"]
[Fri May 22 06:32:16.951298 2026] [:error] [pid 15583:tid 15611] [client 4.204.236.27:17853] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca4.php"] [unique_id "ag-H8HnaOncRcIm17YV8ewAAABc"]
[Fri May 22 06:32:17.406786 2026] [:error] [pid 58782:tid 58800] [client 4.204.236.27:20454] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ca4.php"] [unique_id "ag-H8YxsdTFafgO8vhSvWwAAARA"]
[Fri May 22 06:32:17.870995 2026] [:error] [pid 15585:tid 15661] [client 4.204.236.27:20340] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ag-H8SKb-vB41AF-LC1KzgAAAI4"]
[Fri May 22 06:32:18.303123 2026] [:error] [pid 15585:tid 15671] [client 4.204.236.27:20334] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ag-H8iKb-vB41AF-LC1KzwAAAJg"]
[Fri May 22 06:32:18.739891 2026] [:error] [pid 15584:tid 15624] [client 4.204.236.27:20412] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ag-H8t9Z_TVLbNEx52h-mQAAAEQ"]
[Fri May 22 06:32:19.207037 2026] [:error] [pid 15585:tid 15659] [client 4.204.236.27:20304] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ag-H8yKb-vB41AF-LC1K0gAAAIw"]
[Fri May 22 06:32:19.639354 2026] [:error] [pid 15585:tid 15660] [client 4.204.236.27:20385] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "ag-H8yKb-vB41AF-LC1K0wAAAI0"]
[Fri May 22 06:32:20.078564 2026] [:error] [pid 15679:tid 15683] [client 4.204.236.27:20362] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "ag-H9Ch8tgGc38WJ-Gxx_wAAAMI"]
[Fri May 22 06:32:20.556544 2026] [:error] [pid 15679:tid 15705] [client 4.204.236.27:20245] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "ag-H9Ch8tgGc38WJ-GxyAQAAANg"]
[Fri May 22 06:32:21.027056 2026] [:error] [pid 15585:tid 15670] [client 4.204.236.27:20262] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-info.php"] [unique_id "ag-H9SKb-vB41AF-LC1K1QAAAJc"]
[Fri May 22 06:32:21.476311 2026] [:error] [pid 15679:tid 15690] [client 4.204.236.27:17835] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "ag-H9Sh8tgGc38WJ-GxyBAAAAMk"]
[Fri May 22 06:32:21.915442 2026] [:error] [pid 58813:tid 58827] [client 4.204.236.27:20354] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "ag-H9Z6yyKWDKULhxJ3_DwAAAUs"]
[Fri May 22 06:32:22.387637 2026] [:error] [pid 15585:tid 15656] [client 4.204.236.27:20327] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "ag-H9iKb-vB41AF-LC1K1wAAAIk"]
[Fri May 22 06:32:22.843312 2026] [:error] [pid 15679:tid 15701] [client 4.204.236.27:20389] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/init.php"] [unique_id "ag-H9ih8tgGc38WJ-GxyCAAAANQ"]
[Fri May 22 06:32:23.340631 2026] [:error] [pid 15679:tid 15682] [client 4.204.236.27:20331] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ag-H9yh8tgGc38WJ-GxyCwAAAME"]
[Fri May 22 06:32:23.803388 2026] [:error] [pid 15585:tid 15659] [client 4.204.236.27:20333] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ag-H9yKb-vB41AF-LC1K2AAAAIw"]
[Fri May 22 06:32:24.248882 2026] [:error] [pid 15585:tid 15669] [client 4.204.236.27:20342] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ag-H-CKb-vB41AF-LC1K3QAAAJY"]
[Fri May 22 06:32:24.723510 2026] [:error] [pid 15585:tid 15654] [client 4.204.236.27:20358] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ag-H-CKb-vB41AF-LC1K4AAAAIc"]
[Fri May 22 06:32:25.166627 2026] [:error] [pid 15584:tid 15635] [client 4.204.236.27:20266] [client 4.204.236.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/fm.php"] [unique_id "ag-H-d9Z_TVLbNEx52h-ngAAAE8"]
[Fri May 22 06:32:25.639304 2026] [:error] [pid 15584:tid 15620] [client 4.204.236.27:20301] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.ph"] [unique_id "ag-H-d9Z_TVLbNEx52h-nwAAAEA"]
[Fri May 22 06:32:26.101024 2026] [:error] [pid 15583:tid 15612] [client 4.204.236.27:17877] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.ph"] [unique_id "ag-H-nnaOncRcIm17YV8hQAAABg"]
[Fri May 22 06:32:26.581664 2026] [:error] [pid 58782:tid 58808] [client 4.204.236.27:20339] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.ph"] [unique_id "ag-H-oxsdTFafgO8vhSvXwAAARg"]
[Fri May 22 06:32:27.037014 2026] [:error] [pid 58782:tid 58794] [client 4.204.236.27:20348] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/z.ph"] [unique_id "ag-H-4xsdTFafgO8vhSvYAAAAQo"]
[Fri May 22 06:32:27.469088 2026] [:error] [pid 58782:tid 58790] [client 4.204.236.27:17913] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot7.php"] [unique_id "ag-H-4xsdTFafgO8vhSvYgAAAQY"]
[Fri May 22 06:32:27.903716 2026] [:error] [pid 15583:tid 15600] [client 4.204.236.27:20406] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot7.php"] [unique_id "ag-H-3naOncRcIm17YV8iwAAAAw"]
[Fri May 22 06:32:28.342063 2026] [:error] [pid 15679:tid 15690] [client 4.204.236.27:20226] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot7.php"] [unique_id "ag-H_Ch8tgGc38WJ-GxyDgAAAMk"]
[Fri May 22 06:32:28.902507 2026] [:error] [pid 15584:tid 15641] [client 4.204.236.27:20337] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xroot7.php"] [unique_id "ag-H_N9Z_TVLbNEx52h-ogAAAFU"]
[Fri May 22 06:32:29.406057 2026] [:error] [pid 58813:tid 58838] [client 4.204.236.27:20455] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ag-H_Z6yyKWDKULhxJ3_GAAAAVY"]
[Fri May 22 06:32:29.884494 2026] [:error] [pid 58782:tid 58793] [client 4.204.236.27:20347] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ag-H_YxsdTFafgO8vhSvZwAAAQk"]
[Fri May 22 06:32:30.341116 2026] [:error] [pid 15585:tid 15671] [client 4.204.236.27:20308] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ag-H_iKb-vB41AF-LC1K6AAAAJg"]
[Fri May 22 06:32:30.857852 2026] [:error] [pid 15584:tid 15623] [client 4.204.236.27:20184] [client 4.204.236.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mini.php"] [unique_id "ag-H_t9Z_TVLbNEx52h-pAAAAEM"]
[Fri May 22 06:32:57.575383 2026] [:error] [pid 15585:tid 15668] [client 38.154.97.38:49325] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/sitemap.xml"] [unique_id "ag-IGSKb-vB41AF-LC1LIgAAAJU"]
[Fri May 22 06:32:57.575423 2026] [:error] [pid 15585:tid 15666] [client 38.154.97.38:48445] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "ag-IGSKb-vB41AF-LC1LIwAAAJM"]
[Fri May 22 06:32:57.602726 2026] [:error] [pid 15585:tid 15660] [client 38.154.97.38:58185] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag-IGSKb-vB41AF-LC1LJAAAAI0"]
[Fri May 22 06:32:58.934531 2026] [:error] [pid 58813:tid 58829] [client 38.154.97.38:40096] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/sitemap.xml"] [unique_id "ag-IGp6yyKWDKULhxJ3_NQAAAU0"]
[Fri May 22 06:32:58.972082 2026] [:error] [pid 58813:tid 58828] [client 38.154.97.38:33910] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/robots.txt"] [unique_id "ag-IGp6yyKWDKULhxJ3_NgAAAUw"]
[Fri May 22 07:14:03.425090 2026] [proxy_fcgi:error] [pid 15585:tid 15662] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:03.793443 2026] [proxy_fcgi:error] [pid 15585:tid 15655] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:03.915839 2026] [proxy_fcgi:error] [pid 15585:tid 15658] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.037935 2026] [proxy_fcgi:error] [pid 15585:tid 15664] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.161720 2026] [proxy_fcgi:error] [pid 15585:tid 15654] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.283812 2026] [proxy_fcgi:error] [pid 15585:tid 15651] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.406286 2026] [proxy_fcgi:error] [pid 15585:tid 15666] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.529387 2026] [proxy_fcgi:error] [pid 15585:tid 15660] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.651454 2026] [proxy_fcgi:error] [pid 15585:tid 15647] [client 20.205.110.7:12609] AH01071: Got error 'Primary script unknown'
[Fri May 22 07:14:04.783061 2026] [:error] [pid 15585:tid 15671] [client 20.205.110.7:12609] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag-RvCKb-vB41AF-LC1bGQAAAJg"]
[Fri May 22 07:14:05.256106 2026] [:error] [pid 15585:tid 15669] [client 20.205.110.7:21379] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag-RvSKb-vB41AF-LC1bGgAAAJY"]
[Fri May 22 07:14:05.734392 2026] [:error] [pid 15679:tid 15704] [client 20.205.110.7:21423] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag-RvSh8tgGc38WJ-Gx9tgAAANc"]
[Fri May 22 07:14:06.267030 2026] [:error] [pid 15584:tid 15643] [client 20.205.110.7:12618] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag-Rvt9Z_TVLbNEx52iG5QAAAFc"]
[Fri May 22 08:14:36.534726 2026] [:error] [pid 15584:tid 15628] [client 104.28.240.60:29389] [client 104.28.240.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/ms-themes.php"] [unique_id "ag-f7N9Z_TVLbNEx52iTvAAAAEg"]
[Fri May 22 09:18:00.266863 2026] [:error] [pid 15585:tid 15658] [client 45.131.195.23:45429] [client 45.131.195.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag-uyCKb-vB41AF-LC2YEwAAAIs"]
[Fri May 22 10:03:24.032913 2026] [:error] [pid 15679:tid 15701] [client 159.65.178.191:58002] [client 159.65.178.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.178.191, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "ag-5bCh8tgGc38WJ-Gy4mgAAANQ"]
[Fri May 22 10:03:24.042780 2026] [proxy_fcgi:error] [pid 15679:tid 15701] [client 159.65.178.191:58002] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:13.858118 2026] [proxy_fcgi:error] [pid 15584:tid 15628] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.232802 2026] [proxy_fcgi:error] [pid 15584:tid 15630] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.377412 2026] [proxy_fcgi:error] [pid 15584:tid 15642] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.494976 2026] [proxy_fcgi:error] [pid 15584:tid 15637] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.613458 2026] [proxy_fcgi:error] [pid 15584:tid 15638] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.759517 2026] [proxy_fcgi:error] [pid 15584:tid 15641] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.877395 2026] [proxy_fcgi:error] [pid 15584:tid 15625] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:14.995074 2026] [proxy_fcgi:error] [pid 15584:tid 15621] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:15.112407 2026] [proxy_fcgi:error] [pid 15584:tid 15628] [client 20.222.17.182:6511] AH01071: Got error 'Primary script unknown'
[Fri May 22 14:43:15.226290 2026] [:error] [pid 15584:tid 15623] [client 20.222.17.182:6511] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag_7A99Z_TVLbNEx52jtiQAAAEM"]
[Fri May 22 14:43:15.762721 2026] [:error] [pid 58782:tid 58806] [client 20.222.17.182:11259] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag_7A4xsdTFafgO8vhT5-QAAARY"]
[Fri May 22 14:43:16.253361 2026] [:error] [pid 15679:tid 15696] [client 20.222.17.182:11247] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag_7BCh8tgGc38WJ-GwHnQAAAM8"]
[Fri May 22 14:43:16.725306 2026] [:error] [pid 15679:tid 15694] [client 20.222.17.182:6485] [client 20.222.17.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/config.php"] [unique_id "ag_7BCh8tgGc38WJ-GwHnwAAAM0"]
[Fri May 22 14:55:25.446901 2026] [:error] [pid 15585:tid 15655] [client 43.166.129.247:58356] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ag_93SKb-vB41AF-LC0X5QAAAIg"]
[Fri May 22 15:21:04.284418 2026] [:error] [pid 15679:tid 15691] [client 162.14.81.106:53676] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahAD4Ch8tgGc38WJ-GwTYgAAAMo"]
[Fri May 22 17:11:08.157516 2026] [:error] [pid 58782:tid 58788] [client 34.93.63.75:61004] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahAdrIxsdTFafgO8vhQNrwAAAQQ"]
[Fri May 22 17:11:08.447695 2026] [:error] [pid 15584:tid 15631] [client 34.93.63.75:62515] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrN9Z_TVLbNEx52gMFgAAAEs"]
[Fri May 22 17:11:08.742979 2026] [:error] [pid 15679:tid 15700] [client 34.93.63.75:64234] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/feed/"] [unique_id "ahAdrCh8tgGc38WJ-GwwigAAANM"]
[Fri May 22 20:02:26.338129 2026] [:error] [pid 58813:tid 58840] [client 43.133.66.51:47262] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahBF0p6yyKWDKULhxJ2BSwAAAVg"]
[Sat May 23 07:46:15.786188 2026] [:error] [pid 31039:tid 31064] [client 20.200.215.186:4623] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahDqx6IYDYo8WvA5zLJ6SQAAANc"]
[Sat May 23 07:46:16.415011 2026] [:error] [pid 31039:tid 31042] [client 20.200.215.186:2246] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahDqyKIYDYo8WvA5zLJ6SwAAAME"]
[Sat May 23 07:46:17.052896 2026] [:error] [pid 31039:tid 31055] [client 20.200.215.186:2269] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahDqyaIYDYo8WvA5zLJ6TgAAAM4"]
[Sat May 23 07:46:17.682388 2026] [:error] [pid 31039:tid 31043] [client 20.200.215.186:4242] [client 20.200.215.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahDqyaIYDYo8WvA5zLJ6UAAAAMI"]
[Sat May 23 12:27:07.148093 2026] [proxy_fcgi:error] [pid 25876:tid 25888] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:07.464456 2026] [proxy_fcgi:error] [pid 25876:tid 25898] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:07.776755 2026] [proxy_fcgi:error] [pid 25876:tid 25878] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:08.089471 2026] [proxy_fcgi:error] [pid 25876:tid 25890] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:08.402085 2026] [proxy_fcgi:error] [pid 25876:tid 25899] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:08.714176 2026] [proxy_fcgi:error] [pid 25876:tid 25894] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:09.026965 2026] [proxy_fcgi:error] [pid 25876:tid 25902] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:09.339470 2026] [proxy_fcgi:error] [pid 25876:tid 25879] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:09.652038 2026] [proxy_fcgi:error] [pid 25876:tid 25892] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:09.965675 2026] [proxy_fcgi:error] [pid 25876:tid 25884] [client 191.232.209.213:64988] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:27:10.275586 2026] [:error] [pid 25876:tid 25891] [client 191.232.209.213:64988] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ahEsngSpWUCKPezIBJAPVwAAAQ0"]
[Sat May 23 12:27:11.083877 2026] [:error] [pid 30942:tid 31008] [client 191.232.209.213:64960] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ahEsn9Uosz64YFiBlG0RZQAAAIU"]
[Sat May 23 12:27:11.852702 2026] [:error] [pid 30940:tid 30971] [client 191.232.209.213:64912] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ahEsn5qUP2XZmzp7RDq8dQAAABY"]
[Sat May 23 12:27:12.763816 2026] [:error] [pid 30941:tid 30989] [client 191.232.209.213:64986] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kj.php"] [unique_id "ahEsoHTIgjSDhiZmvlVnMgAAAE0"]
[Sat May 23 12:27:13.612195 2026] [:error] [pid 30940:tid 30949] [client 191.232.209.213:10779] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ahEsoZqUP2XZmzp7RDq8eQAAAAA"]
[Sat May 23 12:27:14.376304 2026] [:error] [pid 30941:tid 30978] [client 191.232.209.213:64908] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ahEsonTIgjSDhiZmvlVnNAAAAEI"]
[Sat May 23 12:27:15.038122 2026] [:error] [pid 31039:tid 31041] [client 191.232.209.213:65022] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ahEso6IYDYo8WvA5zLLKfAAAAMA"]
[Sat May 23 12:27:15.831711 2026] [:error] [pid 25876:tid 25895] [client 191.232.209.213:10797] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gettest.php"] [unique_id "ahEsowSpWUCKPezIBJAPXAAAARE"]
[Sat May 23 12:27:16.485132 2026] [:error] [pid 25876:tid 25880] [client 191.232.209.213:10782] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ahEspASpWUCKPezIBJAPXgAAAQI"]
[Sat May 23 12:27:17.241113 2026] [:error] [pid 30942:tid 31008] [client 191.232.209.213:10798] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ahEspdUosz64YFiBlG0RcwAAAIU"]
[Sat May 23 12:27:17.910192 2026] [:error] [pid 25876:tid 25887] [client 191.232.209.213:65008] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ahEspQSpWUCKPezIBJAPZAAAAQk"]
[Sat May 23 12:27:18.552384 2026] [:error] [pid 25876:tid 25895] [client 191.232.209.213:10804] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/bolt.php"] [unique_id "ahEspgSpWUCKPezIBJAPZQAAARE"]
[Sat May 23 12:27:19.180782 2026] [:error] [pid 25876:tid 25897] [client 191.232.209.213:65014] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "ahEspwSpWUCKPezIBJAPZwAAARM"]
[Sat May 23 12:27:19.831061 2026] [:error] [pid 30941:tid 30995] [client 191.232.209.213:10780] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "ahEsp3TIgjSDhiZmvlVnNwAAAFM"]
[Sat May 23 12:27:20.561540 2026] [:error] [pid 25876:tid 25888] [client 191.232.209.213:10761] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "ahEsqASpWUCKPezIBJAPagAAAQo"]
[Sat May 23 12:27:21.186026 2026] [:error] [pid 31039:tid 31057] [client 191.232.209.213:64905] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/academy.php"] [unique_id "ahEsqaIYDYo8WvA5zLLKgQAAANA"]
[Sat May 23 12:27:21.875461 2026] [:error] [pid 31039:tid 31051] [client 191.232.209.213:10787] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahEsqaIYDYo8WvA5zLLKggAAAMo"]
[Sat May 23 12:27:22.538053 2026] [:error] [pid 31039:tid 31041] [client 191.232.209.213:64919] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahEsqqIYDYo8WvA5zLLKhAAAAMA"]
[Sat May 23 12:27:23.241109 2026] [:error] [pid 30942:tid 31022] [client 191.232.209.213:10764] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahEsq9Uosz64YFiBlG0ReAAAAJM"]
[Sat May 23 12:27:23.868356 2026] [:error] [pid 30941:tid 31000] [client 191.232.209.213:64974] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahEsq3TIgjSDhiZmvlVnPQAAAFg"]
[Sat May 23 12:27:24.525287 2026] [:error] [pid 25876:tid 25889] [client 191.232.209.213:10813] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "ahEsrASpWUCKPezIBJAPbwAAAQs"]
[Sat May 23 12:27:25.156669 2026] [:error] [pid 30941:tid 30996] [client 191.232.209.213:64977] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "ahEsrXTIgjSDhiZmvlVnPgAAAFQ"]
[Sat May 23 12:27:25.848671 2026] [:error] [pid 25876:tid 25879] [client 191.232.209.213:65015] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "ahEsrQSpWUCKPezIBJAPcgAAAQE"]
[Sat May 23 12:27:26.516601 2026] [:error] [pid 30941:tid 30994] [client 191.232.209.213:64965] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/green.php"] [unique_id "ahEsrnTIgjSDhiZmvlVnQwAAAFI"]
[Sat May 23 12:27:27.340565 2026] [:error] [pid 30940:tid 30952] [client 191.232.209.213:65017] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "ahEsr5qUP2XZmzp7RDq8gQAAAAM"]
[Sat May 23 12:27:28.182622 2026] [:error] [pid 31039:tid 31054] [client 191.232.209.213:10774] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "ahEssKIYDYo8WvA5zLLKiAAAAM0"]
[Sat May 23 12:27:28.933088 2026] [:error] [pid 31039:tid 31061] [client 191.232.209.213:64926] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "ahEssKIYDYo8WvA5zLLKigAAANQ"]
[Sat May 23 12:27:29.709421 2026] [:error] [pid 30941:tid 30995] [client 191.232.209.213:10772] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/radio.php"] [unique_id "ahEssXTIgjSDhiZmvlVnRgAAAFM"]
[Sat May 23 12:27:30.397151 2026] [:error] [pid 30940:tid 30969] [client 191.232.209.213:64907] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "ahEsspqUP2XZmzp7RDq8hgAAABQ"]
[Sat May 23 12:27:31.049723 2026] [:error] [pid 30942:tid 31003] [client 191.232.209.213:64967] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "ahEss9Uosz64YFiBlG0RewAAAIA"]
[Sat May 23 12:27:31.751030 2026] [:error] [pid 31039:tid 31057] [client 191.232.209.213:64992] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "ahEss6IYDYo8WvA5zLLKjgAAANA"]
[Sat May 23 12:27:32.552677 2026] [:error] [pid 30942:tid 31013] [client 191.232.209.213:64341] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/elp.php"] [unique_id "ahEstNUosz64YFiBlG0RfAAAAIo"]
[Sat May 23 12:27:33.361477 2026] [:error] [pid 30942:tid 31027] [client 191.232.209.213:64991] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ahEstdUosz64YFiBlG0RfQAAAJg"]
[Sat May 23 12:27:34.096698 2026] [:error] [pid 30940:tid 30959] [client 191.232.209.213:64324] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ahEstpqUP2XZmzp7RDq8iAAAAAo"]
[Sat May 23 12:27:34.846697 2026] [:error] [pid 30942:tid 31024] [client 191.232.209.213:10769] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ahEsttUosz64YFiBlG0RggAAAJU"]
[Sat May 23 12:27:35.685579 2026] [:error] [pid 30941:tid 30983] [client 191.232.209.213:64929] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws85.php"] [unique_id "ahEst3TIgjSDhiZmvlVnSgAAAEc"]
[Sat May 23 12:27:36.450560 2026] [:error] [pid 30940:tid 30956] [client 191.232.209.213:64959] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "ahEsuJqUP2XZmzp7RDq8igAAAAc"]
[Sat May 23 12:27:37.124005 2026] [:error] [pid 30942:tid 31018] [client 191.232.209.213:64349] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "ahEsudUosz64YFiBlG0RhQAAAI8"]
[Sat May 23 12:27:37.800809 2026] [:error] [pid 31039:tid 31056] [client 191.232.209.213:64996] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "ahEsuaIYDYo8WvA5zLLKlgAAAM8"]
[Sat May 23 12:27:38.534866 2026] [:error] [pid 25876:tid 25892] [client 191.232.209.213:64973] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/0x.php"] [unique_id "ahEsugSpWUCKPezIBJAPeAAAAQ4"]
[Sat May 23 12:27:39.202837 2026] [:error] [pid 30940:tid 30971] [client 191.232.209.213:64934] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "ahEsu5qUP2XZmzp7RDq8jAAAABY"]
[Sat May 23 12:27:39.985890 2026] [:error] [pid 25876:tid 25893] [client 191.232.209.213:65013] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "ahEsuwSpWUCKPezIBJAPegAAAQ8"]
[Sat May 23 12:27:40.945202 2026] [:error] [pid 25876:tid 25894] [client 191.232.209.213:65004] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "ahEsvASpWUCKPezIBJAPfQAAARA"]
[Sat May 23 12:27:41.666736 2026] [:error] [pid 30941:tid 30979] [client 191.232.209.213:64904] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a4.php"] [unique_id "ahEsvXTIgjSDhiZmvlVnTgAAAEM"]
[Sat May 23 12:27:42.446148 2026] [:error] [pid 30941:tid 30986] [client 191.232.209.213:10808] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "ahEsvnTIgjSDhiZmvlVnUAAAAEo"]
[Sat May 23 12:27:43.318874 2026] [:error] [pid 30941:tid 31000] [client 191.232.209.213:64896] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "ahEsv3TIgjSDhiZmvlVnUgAAAFg"]
[Sat May 23 12:27:44.058517 2026] [:error] [pid 31039:tid 31056] [client 191.232.209.213:64994] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "ahEswKIYDYo8WvA5zLLKnQAAAM8"]
[Sat May 23 12:27:44.828300 2026] [:error] [pid 31039:tid 31041] [client 191.232.209.213:10810] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/Sanskrit.php"] [unique_id "ahEswKIYDYo8WvA5zLLKoQAAAMA"]
[Sat May 23 12:27:45.604063 2026] [:error] [pid 31039:tid 31048] [client 191.232.209.213:64987] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ahEswaIYDYo8WvA5zLLKpAAAAMc"]
[Sat May 23 12:27:46.498533 2026] [:error] [pid 25876:tid 25892] [client 191.232.209.213:65006] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ahEswgSpWUCKPezIBJAPiAAAAQ4"]
[Sat May 23 12:27:47.236066 2026] [:error] [pid 30941:tid 30991] [client 191.232.209.213:10790] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ahEsw3TIgjSDhiZmvlVnVQAAAE8"]
[Sat May 23 12:27:47.915486 2026] [:error] [pid 30940:tid 30953] [client 191.232.209.213:10775] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gk.php"] [unique_id "ahEsw5qUP2XZmzp7RDq8kQAAAAQ"]
[Sat May 23 12:27:48.737108 2026] [:error] [pid 30940:tid 30965] [client 191.232.209.213:10788] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ahEsxJqUP2XZmzp7RDq8lAAAABA"]
[Sat May 23 12:27:49.400345 2026] [:error] [pid 30940:tid 30956] [client 191.232.209.213:64985] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ahEsxZqUP2XZmzp7RDq8lgAAAAc"]
[Sat May 23 12:27:50.068153 2026] [:error] [pid 31039:tid 31061] [client 191.232.209.213:10789] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ahEsxqIYDYo8WvA5zLLKpwAAANQ"]
[Sat May 23 12:27:50.697858 2026] [:error] [pid 31039:tid 31049] [client 191.232.209.213:64924] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws88.php"] [unique_id "ahEsxqIYDYo8WvA5zLLKqAAAAMg"]
[Sat May 23 12:27:51.338154 2026] [:error] [pid 30941:tid 30977] [client 191.232.209.213:65016] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ahEsx3TIgjSDhiZmvlVnWgAAAEE"]
[Sat May 23 12:27:51.965536 2026] [:error] [pid 30940:tid 30972] [client 191.232.209.213:10803] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ahEsx5qUP2XZmzp7RDq8mAAAABc"]
[Sat May 23 12:27:52.584382 2026] [:error] [pid 30940:tid 30957] [client 191.232.209.213:64963] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ahEsyJqUP2XZmzp7RDq8mQAAAAg"]
[Sat May 23 12:27:53.232127 2026] [:error] [pid 31039:tid 31065] [client 191.232.209.213:10763] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/t.php"] [unique_id "ahEsyaIYDYo8WvA5zLLKrgAAANg"]
[Sat May 23 12:27:53.870782 2026] [:error] [pid 31039:tid 31057] [client 191.232.209.213:10794] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ahEsyaIYDYo8WvA5zLLKsAAAANA"]
[Sat May 23 12:27:54.543626 2026] [:error] [pid 31039:tid 31063] [client 191.232.209.213:10815] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ahEsyqIYDYo8WvA5zLLKsgAAANY"]
[Sat May 23 12:27:55.234940 2026] [:error] [pid 25876:tid 25897] [client 191.232.209.213:64901] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ahEsywSpWUCKPezIBJAPlAAAARM"]
[Sat May 23 12:27:55.941760 2026] [:error] [pid 31039:tid 31055] [client 191.232.209.213:64902] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/1.php"] [unique_id "ahEsy6IYDYo8WvA5zLLKtQAAAM4"]
[Sat May 23 12:27:56.658486 2026] [:error] [pid 31039:tid 31056] [client 191.232.209.213:64900] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "ahEszKIYDYo8WvA5zLLKuQAAAM8"]
[Sat May 23 12:27:57.371150 2026] [:error] [pid 31039:tid 31043] [client 191.232.209.213:10809] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "ahEszaIYDYo8WvA5zLLKvQAAAMI"]
[Sat May 23 12:27:58.052526 2026] [:error] [pid 30940:tid 30961] [client 191.232.209.213:10785] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "ahEszpqUP2XZmzp7RDq8nQAAAAw"]
[Sat May 23 12:27:58.697060 2026] [:error] [pid 30942:tid 31006] [client 191.232.209.213:64932] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/abc.php"] [unique_id "ahEsztUosz64YFiBlG0RkQAAAIM"]
[Sat May 23 12:27:59.334940 2026] [:error] [pid 25876:tid 25889] [client 191.232.209.213:64897] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ahEszwSpWUCKPezIBJAPnAAAAQs"]
[Sat May 23 12:27:59.968899 2026] [:error] [pid 31039:tid 31060] [client 191.232.209.213:64335] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ahEsz6IYDYo8WvA5zLLKwAAAANM"]
[Sat May 23 12:28:00.620015 2026] [:error] [pid 31039:tid 31058] [client 191.232.209.213:64938] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ahEs0KIYDYo8WvA5zLLKwwAAANE"]
[Sat May 23 12:28:01.277686 2026] [:error] [pid 30942:tid 31008] [client 191.232.209.213:64327] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/b.php"] [unique_id "ahEs0dUosz64YFiBlG0RlQAAAIU"]
[Sat May 23 12:28:01.908031 2026] [:error] [pid 30941:tid 30993] [client 191.232.209.213:64323] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ahEs0XTIgjSDhiZmvlVnXgAAAFE"]
[Sat May 23 12:28:02.565385 2026] [:error] [pid 30942:tid 31012] [client 191.232.209.213:65003] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ahEs0tUosz64YFiBlG0RlgAAAIk"]
[Sat May 23 12:28:03.267882 2026] [:error] [pid 30942:tid 31015] [client 191.232.209.213:64925] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ahEs09Uosz64YFiBlG0RlwAAAIw"]
[Sat May 23 12:28:03.931918 2026] [:error] [pid 30942:tid 31025] [client 191.232.209.213:64931] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tool.php"] [unique_id "ahEs09Uosz64YFiBlG0RmAAAAJY"]
[Sat May 23 12:28:04.592351 2026] [:error] [pid 31039:tid 31056] [client 191.232.209.213:64969] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a80.php"] [unique_id "ahEs1KIYDYo8WvA5zLLKzQAAAM8"]
[Sat May 23 12:28:05.292146 2026] [:error] [pid 31039:tid 31045] [client 191.232.209.213:64982] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a80.php"] [unique_id "ahEs1aIYDYo8WvA5zLLKzgAAAMQ"]
[Sat May 23 12:28:05.924987 2026] [:error] [pid 31039:tid 31042] [client 191.232.209.213:64949] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a80.php"] [unique_id "ahEs1aIYDYo8WvA5zLLK0QAAAME"]
[Sat May 23 12:28:06.635477 2026] [:error] [pid 31039:tid 31048] [client 191.232.209.213:64899] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a80.php"] [unique_id "ahEs1qIYDYo8WvA5zLLK0gAAAMc"]
[Sat May 23 12:28:07.285158 2026] [:error] [pid 31039:tid 31061] [client 191.232.209.213:64367] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahEs16IYDYo8WvA5zLLK1QAAANQ"]
[Sat May 23 12:28:07.949429 2026] [:error] [pid 31039:tid 31045] [client 191.232.209.213:64903] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahEs16IYDYo8WvA5zLLK2AAAAMQ"]
[Sat May 23 12:28:08.688201 2026] [:error] [pid 31039:tid 31044] [client 191.232.209.213:65005] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahEs2KIYDYo8WvA5zLLK3QAAAMM"]
[Sat May 23 12:28:09.389598 2026] [proxy_fcgi:error] [pid 30941:tid 30999] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:09.711108 2026] [proxy_fcgi:error] [pid 30941:tid 30980] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:10.030733 2026] [proxy_fcgi:error] [pid 30941:tid 30986] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:10.344306 2026] [proxy_fcgi:error] [pid 30941:tid 30998] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:10.656805 2026] [proxy_fcgi:error] [pid 30941:tid 31000] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:10.968959 2026] [proxy_fcgi:error] [pid 30941:tid 30987] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:11.281904 2026] [proxy_fcgi:error] [pid 30941:tid 30993] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:11.595213 2026] [proxy_fcgi:error] [pid 30941:tid 30992] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:11.915689 2026] [proxy_fcgi:error] [pid 30941:tid 30988] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:12.227461 2026] [proxy_fcgi:error] [pid 30941:tid 30978] [client 191.232.209.213:65000] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:28:13.946492 2026] [:error] [pid 30941:tid 30984] [client 191.232.209.213:65000] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "ahEs3XTIgjSDhiZmvlVncwAAAEg"]
[Sat May 23 12:28:14.568374 2026] [:error] [pid 31039:tid 31045] [client 191.232.209.213:64943] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "ahEs3qIYDYo8WvA5zLLK5gAAAMQ"]
[Sat May 23 12:28:15.204156 2026] [:error] [pid 31039:tid 31042] [client 191.232.209.213:65018] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "ahEs36IYDYo8WvA5zLLK6AAAAME"]
[Sat May 23 12:28:15.843615 2026] [:error] [pid 31039:tid 31046] [client 191.232.209.213:64352] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/144.php"] [unique_id "ahEs36IYDYo8WvA5zLLK6wAAAMU"]
[Sat May 23 12:28:16.467547 2026] [:error] [pid 30942:tid 31010] [client 191.232.209.213:10807] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ahEs4NUosz64YFiBlG0RqAAAAIc"]
[Sat May 23 12:28:17.132231 2026] [:error] [pid 25876:tid 25891] [client 191.232.209.213:64962] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ahEs4QSpWUCKPezIBJAPpAAAAQ0"]
[Sat May 23 12:28:17.811621 2026] [:error] [pid 31039:tid 31043] [client 191.232.209.213:64921] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ahEs4aIYDYo8WvA5zLLK8gAAAMI"]
[Sat May 23 12:28:18.488275 2026] [:error] [pid 30941:tid 30981] [client 191.232.209.213:64978] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bgymj.php"] [unique_id "ahEs4nTIgjSDhiZmvlVndAAAAEU"]
[Sat May 23 12:28:19.221409 2026] [:error] [pid 25876:tid 25896] [client 191.232.209.213:64923] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ahEs4wSpWUCKPezIBJAPqQAAARI"]
[Sat May 23 12:28:19.887389 2026] [:error] [pid 31039:tid 31060] [client 191.232.209.213:64910] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ahEs46IYDYo8WvA5zLLK_QAAANM"]
[Sat May 23 12:28:20.522468 2026] [:error] [pid 30940:tid 30971] [client 191.232.209.213:10783] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ahEs5JqUP2XZmzp7RDq8qQAAABY"]
[Sat May 23 12:28:21.171664 2026] [:error] [pid 25876:tid 25901] [client 191.232.209.213:64952] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fs.php"] [unique_id "ahEs5QSpWUCKPezIBJAPqwAAARc"]
[Sat May 23 12:28:21.883085 2026] [:error] [pid 31039:tid 31043] [client 191.232.209.213:65023] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "ahEs5aIYDYo8WvA5zLLLBQAAAMI"]
[Sat May 23 12:28:22.555557 2026] [:error] [pid 31039:tid 31048] [client 191.232.209.213:64939] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "ahEs5qIYDYo8WvA5zLLLCQAAAMc"]
[Sat May 23 12:28:23.207646 2026] [:error] [pid 30942:tid 31003] [client 191.232.209.213:64320] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "ahEs59Uosz64YFiBlG0RrQAAAIA"]
[Sat May 23 12:28:23.868946 2026] [:error] [pid 25876:tid 25893] [client 191.232.209.213:64353] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/menu.php"] [unique_id "ahEs5wSpWUCKPezIBJAPrgAAAQ8"]
[Sat May 23 12:28:24.588140 2026] [:error] [pid 25876:tid 25888] [client 191.232.209.213:10812] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amba5.php"] [unique_id "ahEs6ASpWUCKPezIBJAPrwAAAQo"]
[Sat May 23 12:28:25.435751 2026] [:error] [pid 25876:tid 25890] [client 191.232.209.213:64906] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amba5.php"] [unique_id "ahEs6QSpWUCKPezIBJAPsQAAAQw"]
[Sat May 23 12:28:26.160894 2026] [:error] [pid 25876:tid 25887] [client 191.232.209.213:64941] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amba5.php"] [unique_id "ahEs6gSpWUCKPezIBJAPtAAAAQk"]
[Sat May 23 12:28:26.788438 2026] [:error] [pid 31039:tid 31058] [client 191.232.209.213:64338] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amba5.php"] [unique_id "ahEs6qIYDYo8WvA5zLLLEwAAANE"]
[Sat May 23 12:28:27.456944 2026] [:error] [pid 31039:tid 31052] [client 191.232.209.213:10792] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ahEs66IYDYo8WvA5zLLLFgAAAMs"]
[Sat May 23 12:28:28.242973 2026] [:error] [pid 30942:tid 31012] [client 191.232.209.213:65009] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ahEs7NUosz64YFiBlG0RrwAAAIk"]
[Sat May 23 12:28:28.927385 2026] [:error] [pid 25876:tid 25899] [client 191.232.209.213:10768] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ahEs7ASpWUCKPezIBJAPuwAAARU"]
[Sat May 23 12:28:29.628593 2026] [:error] [pid 30940:tid 30962] [client 191.232.209.213:64274] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.php"] [unique_id "ahEs7ZqUP2XZmzp7RDq8rAAAAA0"]
[Sat May 23 12:28:30.276047 2026] [:error] [pid 25876:tid 25888] [client 191.232.209.213:65019] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahEs7gSpWUCKPezIBJAPwAAAAQo"]
[Sat May 23 12:28:30.895705 2026] [:error] [pid 25876:tid 25881] [client 191.232.209.213:10806] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahEs7gSpWUCKPezIBJAPwgAAAQM"]
[Sat May 23 12:28:31.559745 2026] [:error] [pid 30942:tid 31024] [client 191.232.209.213:64280] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahEs79Uosz64YFiBlG0RtAAAAJU"]
[Sat May 23 12:28:32.242538 2026] [:error] [pid 30942:tid 31020] [client 191.232.209.213:65021] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahEs8NUosz64YFiBlG0RtwAAAJE"]
[Sat May 23 12:28:32.870553 2026] [:error] [pid 30940:tid 30964] [client 191.232.209.213:64979] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ahEs8JqUP2XZmzp7RDq8sQAAAA8"]
[Sat May 23 12:28:33.535948 2026] [:error] [pid 30940:tid 30950] [client 191.232.209.213:64984] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ahEs8ZqUP2XZmzp7RDq8tAAAAAE"]
[Sat May 23 12:28:34.281567 2026] [:error] [pid 30942:tid 31003] [client 191.232.209.213:64366] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ahEs8tUosz64YFiBlG0RvgAAAIA"]
[Sat May 23 12:28:34.916348 2026] [:error] [pid 30942:tid 31008] [client 191.232.209.213:64306] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-png.php"] [unique_id "ahEs8tUosz64YFiBlG0RwAAAAIU"]
[Sat May 23 12:28:35.591515 2026] [:error] [pid 30940:tid 30966] [client 191.232.209.213:64913] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "ahEs85qUP2XZmzp7RDq8uQAAABE"]
[Sat May 23 12:28:36.269681 2026] [:error] [pid 30942:tid 31010] [client 191.232.209.213:10778] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "ahEs9NUosz64YFiBlG0RxQAAAIc"]
[Sat May 23 12:28:36.924804 2026] [:error] [pid 30940:tid 30960] [client 191.232.209.213:64980] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "ahEs9JqUP2XZmzp7RDq8vwAAAAs"]
[Sat May 23 12:28:37.608711 2026] [:error] [pid 31039:tid 31042] [client 191.232.209.213:64911] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gifclass.php"] [unique_id "ahEs9aIYDYo8WvA5zLLLGAAAAME"]
[Sat May 23 12:28:38.300415 2026] [:error] [pid 25876:tid 25889] [client 191.232.209.213:64343] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cx.php"] [unique_id "ahEs9gSpWUCKPezIBJAPxwAAAQs"]
[Sat May 23 12:28:38.965903 2026] [:error] [pid 30942:tid 31007] [client 191.232.209.213:64342] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cx.php"] [unique_id "ahEs9tUosz64YFiBlG0RxwAAAIQ"]
[Sat May 23 12:28:39.609801 2026] [:error] [pid 30940:tid 30970] [client 191.232.209.213:10784] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cx.php"] [unique_id "ahEs95qUP2XZmzp7RDq8xAAAABU"]
[Sat May 23 12:28:40.406318 2026] [:error] [pid 30940:tid 30960] [client 191.232.209.213:64916] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cx.php"] [unique_id "ahEs-JqUP2XZmzp7RDq8xgAAAAs"]
[Sat May 23 12:28:41.099358 2026] [:error] [pid 25876:tid 25886] [client 191.232.209.213:64357] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahEs-QSpWUCKPezIBJAPzAAAAQg"]
[Sat May 23 12:28:41.744708 2026] [:error] [pid 25876:tid 25892] [client 191.232.209.213:64940] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahEs-QSpWUCKPezIBJAPzwAAAQ4"]
[Sat May 23 12:28:42.514028 2026] [:error] [pid 25876:tid 25902] [client 191.232.209.213:10765] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahEs-gSpWUCKPezIBJAP0gAAARg"]
[Sat May 23 12:28:43.190888 2026] [:error] [pid 25876:tid 25885] [client 191.232.209.213:64987] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahEs-wSpWUCKPezIBJAP1gAAAQc"]
[Sat May 23 12:28:43.838389 2026] [:error] [pid 25876:tid 25896] [client 191.232.209.213:64999] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ahEs-wSpWUCKPezIBJAP2QAAARI"]
[Sat May 23 12:28:44.488624 2026] [:error] [pid 30940:tid 30949] [client 191.232.209.213:64935] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ahEs_JqUP2XZmzp7RDq8yQAAAAA"]
[Sat May 23 12:28:45.124069 2026] [:error] [pid 30942:tid 31017] [client 191.232.209.213:64344] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ahEs_dUosz64YFiBlG0RywAAAI4"]
[Sat May 23 12:28:45.757911 2026] [:error] [pid 30942:tid 31016] [client 191.232.209.213:64328] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a7.php"] [unique_id "ahEs_dUosz64YFiBlG0RzgAAAI0"]
[Sat May 23 12:28:46.389636 2026] [:error] [pid 30940:tid 30961] [client 191.232.209.213:64303] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "ahEs_pqUP2XZmzp7RDq8ygAAAAw"]
[Sat May 23 12:28:47.055180 2026] [:error] [pid 25876:tid 25889] [client 191.232.209.213:65001] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "ahEs_wSpWUCKPezIBJAP5AAAAQs"]
[Sat May 23 12:28:47.743271 2026] [:error] [pid 30940:tid 30950] [client 191.232.209.213:64917] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "ahEs_5qUP2XZmzp7RDq8zQAAAAE"]
[Sat May 23 12:28:48.388125 2026] [:error] [pid 25876:tid 25891] [client 191.232.209.213:64989] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-access.php"] [unique_id "ahEtAASpWUCKPezIBJAP5gAAAQ0"]
[Sat May 23 12:28:49.045045 2026] [:error] [pid 30940:tid 30958] [client 191.232.209.213:64927] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ahEtAZqUP2XZmzp7RDq81AAAAAk"]
[Sat May 23 12:28:49.700596 2026] [:error] [pid 30942:tid 31026] [client 191.232.209.213:64972] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ahEtAdUosz64YFiBlG0R0AAAAJc"]
[Sat May 23 12:28:50.344670 2026] [:error] [pid 25876:tid 25895] [client 191.232.209.213:64374] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ahEtAgSpWUCKPezIBJAP8AAAARE"]
[Sat May 23 12:28:50.977871 2026] [:error] [pid 25876:tid 25887] [client 191.232.209.213:64371] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ms-edit.php"] [unique_id "ahEtAgSpWUCKPezIBJAP9QAAAQk"]
[Sat May 23 12:28:51.633487 2026] [:error] [pid 31039:tid 31057] [client 191.232.209.213:64273] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "ahEtA6IYDYo8WvA5zLLLJQAAANA"]
[Sat May 23 12:28:52.296741 2026] [:error] [pid 31039:tid 31052] [client 191.232.209.213:64258] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "ahEtBKIYDYo8WvA5zLLLJwAAAMs"]
[Sat May 23 12:28:52.965380 2026] [:error] [pid 25876:tid 25895] [client 191.232.209.213:64971] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "ahEtBASpWUCKPezIBJAP-QAAARE"]
[Sat May 23 12:28:53.586278 2026] [:error] [pid 31039:tid 31063] [client 191.232.209.213:64993] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws75.php"] [unique_id "ahEtBaIYDYo8WvA5zLLLKwAAANY"]
[Sat May 23 12:28:54.247529 2026] [:error] [pid 25876:tid 25887] [client 191.232.209.213:10767] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ahEtBgSpWUCKPezIBJAP-gAAAQk"]
[Sat May 23 12:28:54.893944 2026] [:error] [pid 25876:tid 25886] [client 191.232.209.213:65012] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ahEtBgSpWUCKPezIBJAP-wAAAQg"]
[Sat May 23 12:28:55.588338 2026] [:error] [pid 25876:tid 25883] [client 191.232.209.213:64981] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ahEtBwSpWUCKPezIBJAP_wAAAQU"]
[Sat May 23 12:28:56.244736 2026] [:error] [pid 25876:tid 25885] [client 191.232.209.213:64364] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-good.php"] [unique_id "ahEtCASpWUCKPezIBJAQAAAAAQc"]
[Sat May 23 12:28:56.966843 2026] [:error] [pid 25876:tid 25898] [client 191.232.209.213:10814] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "ahEtCASpWUCKPezIBJAQAQAAARQ"]
[Sat May 23 12:28:57.620339 2026] [:error] [pid 25876:tid 25896] [client 191.232.209.213:64322] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "ahEtCQSpWUCKPezIBJAQAwAAARI"]
[Sat May 23 12:28:58.258893 2026] [:error] [pid 25876:tid 25894] [client 191.232.209.213:64936] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "ahEtCgSpWUCKPezIBJAQBwAAARA"]
[Sat May 23 12:28:58.923552 2026] [:error] [pid 31039:tid 31041] [client 191.232.209.213:64321] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/155.php"] [unique_id "ahEtCqIYDYo8WvA5zLLLNAAAAMA"]
[Sat May 23 12:28:59.586272 2026] [:error] [pid 25876:tid 25878] [client 191.232.209.213:64970] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "ahEtCwSpWUCKPezIBJAQCQAAAQA"]
[Sat May 23 12:29:00.213950 2026] [:error] [pid 25876:tid 25897] [client 191.232.209.213:64928] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "ahEtDASpWUCKPezIBJAQDAAAARM"]
[Sat May 23 12:29:00.851010 2026] [:error] [pid 30941:tid 30983] [client 191.232.209.213:64326] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "ahEtDHTIgjSDhiZmvlVnfgAAAEc"]
[Sat May 23 12:29:01.511480 2026] [:error] [pid 25876:tid 25898] [client 191.232.209.213:64302] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ortasekerli1.php"] [unique_id "ahEtDQSpWUCKPezIBJAQDwAAARQ"]
[Sat May 23 12:29:02.149870 2026] [:error] [pid 30940:tid 30953] [client 191.232.209.213:64270] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "ahEtDpqUP2XZmzp7RDq81QAAAAQ"]
[Sat May 23 12:29:02.771328 2026] [:error] [pid 30941:tid 30980] [client 191.232.209.213:64256] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "ahEtDnTIgjSDhiZmvlVnfwAAAEQ"]
[Sat May 23 12:29:03.413251 2026] [:error] [pid 25876:tid 25882] [client 191.232.209.213:64345] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "ahEtDwSpWUCKPezIBJAQFAAAAQQ"]
[Sat May 23 12:29:04.097997 2026] [:error] [pid 31039:tid 31045] [client 191.232.209.213:64332] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asd.php"] [unique_id "ahEtEKIYDYo8WvA5zLLLOQAAAMQ"]
[Sat May 23 12:29:04.769169 2026] [:error] [pid 25876:tid 25888] [client 191.232.209.213:64065] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/solo1.php"] [unique_id "ahEtEASpWUCKPezIBJAQGgAAAQo"]
[Sat May 23 12:29:05.475170 2026] [:error] [pid 30942:tid 31013] [client 191.232.209.213:10795] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/solo1.php"] [unique_id "ahEtEdUosz64YFiBlG0R4AAAAIo"]
[Sat May 23 12:29:06.101621 2026] [:error] [pid 30942:tid 31024] [client 191.232.209.213:10770] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/solo1.php"] [unique_id "ahEtEtUosz64YFiBlG0R4wAAAJU"]
[Sat May 23 12:29:06.726590 2026] [:error] [pid 25876:tid 25884] [client 191.232.209.213:64006] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/solo1.php"] [unique_id "ahEtEgSpWUCKPezIBJAQIgAAAQY"]
[Sat May 23 12:29:07.356976 2026] [:error] [pid 30941:tid 30986] [client 191.232.209.213:64958] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ahEtE3TIgjSDhiZmvlVngAAAAEo"]
[Sat May 23 12:29:08.038579 2026] [:error] [pid 30942:tid 31012] [client 191.232.209.213:64998] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ahEtFNUosz64YFiBlG0R5AAAAIk"]
[Sat May 23 12:29:08.695966 2026] [:error] [pid 30941:tid 30981] [client 191.232.209.213:64383] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ahEtFHTIgjSDhiZmvlVnggAAAEU"]
[Sat May 23 12:29:09.502027 2026] [:error] [pid 25876:tid 25896] [client 191.232.209.213:64966] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws86.php"] [unique_id "ahEtFQSpWUCKPezIBJAQLQAAARI"]
[Sat May 23 12:29:10.332710 2026] [:error] [pid 30941:tid 31000] [client 191.232.209.213:64356] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a34.php"] [unique_id "ahEtFnTIgjSDhiZmvlVngwAAAFg"]
[Sat May 23 12:29:11.189742 2026] [:error] [pid 31039:tid 31050] [client 191.232.209.213:64276] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a34.php"] [unique_id "ahEtF6IYDYo8WvA5zLLLRwAAAMk"]
[Sat May 23 12:29:11.904798 2026] [:error] [pid 30940:tid 30971] [client 191.232.209.213:64333] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a34.php"] [unique_id "ahEtF5qUP2XZmzp7RDq83AAAABY"]
[Sat May 23 12:29:12.574678 2026] [:error] [pid 30942:tid 31007] [client 191.232.209.213:64265] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a34.php"] [unique_id "ahEtGNUosz64YFiBlG0R5gAAAIQ"]
[Sat May 23 12:29:13.282989 2026] [proxy_fcgi:error] [pid 30941:tid 30993] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:13.597324 2026] [proxy_fcgi:error] [pid 30941:tid 30996] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:13.912930 2026] [proxy_fcgi:error] [pid 30941:tid 30982] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:14.226469 2026] [proxy_fcgi:error] [pid 30941:tid 30977] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:14.542541 2026] [proxy_fcgi:error] [pid 30941:tid 30994] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:14.855809 2026] [proxy_fcgi:error] [pid 30941:tid 30978] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:15.168790 2026] [proxy_fcgi:error] [pid 30941:tid 30999] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:15.490068 2026] [proxy_fcgi:error] [pid 30941:tid 30979] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:15.803561 2026] [proxy_fcgi:error] [pid 30941:tid 30980] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:16.116419 2026] [proxy_fcgi:error] [pid 30941:tid 30995] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:16.429267 2026] [proxy_fcgi:error] [pid 30941:tid 30986] [client 191.232.209.213:64282] AH01071: Got error 'Primary script unknown'
[Sat May 23 12:29:16.740309 2026] [:error] [pid 30941:tid 30981] [client 191.232.209.213:64282] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "ahEtHHTIgjSDhiZmvlVnlAAAAEU"]
[Sat May 23 12:29:17.422298 2026] [:error] [pid 25876:tid 25893] [client 191.232.209.213:10791] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "ahEtHQSpWUCKPezIBJAQOAAAAQ8"]
[Sat May 23 12:29:18.152263 2026] [:error] [pid 31039:tid 31052] [client 191.232.209.213:64316] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "ahEtHqIYDYo8WvA5zLLLUwAAAMs"]
[Sat May 23 12:29:18.879347 2026] [:error] [pid 31039:tid 31041] [client 191.232.209.213:64946] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tfm.php"] [unique_id "ahEtHqIYDYo8WvA5zLLLVgAAAMA"]
[Sat May 23 12:29:19.640761 2026] [:error] [pid 25876:tid 25885] [client 191.232.209.213:64915] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ahEtHwSpWUCKPezIBJAQOgAAAQc"]
[Sat May 23 12:29:20.265771 2026] [:error] [pid 25876:tid 25891] [client 191.232.209.213:64072] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ahEtIASpWUCKPezIBJAQPQAAAQ0"]
[Sat May 23 12:29:20.931161 2026] [:error] [pid 30940:tid 30969] [client 191.232.209.213:10799] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ahEtIJqUP2XZmzp7RDq85QAAABQ"]
[Sat May 23 12:29:21.602048 2026] [:error] [pid 25876:tid 25899] [client 191.232.209.213:10773] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/666.php"] [unique_id "ahEtIQSpWUCKPezIBJAQQAAAARU"]
[Sat May 23 12:29:22.221995 2026] [:error] [pid 30940:tid 30952] [client 191.232.209.213:10805] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ahEtIpqUP2XZmzp7RDq85wAAAAM"]
[Sat May 23 12:29:22.847445 2026] [:error] [pid 30941:tid 30983] [client 191.232.209.213:10762] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ahEtInTIgjSDhiZmvlVnmQAAAEc"]
[Sat May 23 12:29:23.503569 2026] [:error] [pid 25876:tid 25893] [client 191.232.209.213:10811] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ahEtIwSpWUCKPezIBJAQQgAAAQ8"]
[Sat May 23 12:29:24.195359 2026] [:error] [pid 30942:tid 31011] [client 191.232.209.213:64914] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/166.php"] [unique_id "ahEtJNUosz64YFiBlG0R9AAAAIg"]
[Sat May 23 12:29:24.863310 2026] [:error] [pid 30941:tid 30995] [client 191.232.209.213:10802] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ahEtJHTIgjSDhiZmvlVnnAAAAFM"]
[Sat May 23 12:29:25.534871 2026] [:error] [pid 31039:tid 31051] [client 191.232.209.213:64997] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ahEtJaIYDYo8WvA5zLLLXgAAAMo"]
[Sat May 23 12:29:26.277575 2026] [:error] [pid 31039:tid 31045] [client 191.232.209.213:64025] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ahEtJqIYDYo8WvA5zLLLYQAAAMQ"]
[Sat May 23 12:29:26.939962 2026] [:error] [pid 30941:tid 30989] [client 191.232.209.213:10776] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/jp.php"] [unique_id "ahEtJnTIgjSDhiZmvlVnnQAAAE0"]
[Sat May 23 12:29:27.638707 2026] [:error] [pid 30941:tid 31000] [client 191.232.209.213:64096] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "ahEtJ3TIgjSDhiZmvlVnngAAAFg"]
[Sat May 23 12:29:28.320516 2026] [:error] [pid 30942:tid 31020] [client 191.232.209.213:65010] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "ahEtKNUosz64YFiBlG0R9gAAAJE"]
[Sat May 23 12:29:29.025214 2026] [:error] [pid 30942:tid 31005] [client 191.232.209.213:64945] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "ahEtKdUosz64YFiBlG0R-gAAAII"]
[Sat May 23 12:29:29.696055 2026] [:error] [pid 25876:tid 25887] [client 191.232.209.213:10777] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ws80.php"] [unique_id "ahEtKQSpWUCKPezIBJAQRQAAAQk"]
[Sat May 23 12:29:30.418317 2026] [:error] [pid 25876:tid 25884] [client 191.232.209.213:64285] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a31.php"] [unique_id "ahEtKgSpWUCKPezIBJAQRwAAAQY"]
[Sat May 23 12:29:31.289096 2026] [:error] [pid 30942:tid 31004] [client 191.232.209.213:64348] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a31.php"] [unique_id "ahEtK9Uosz64YFiBlG0R_AAAAIE"]
[Sat May 23 12:29:31.963365 2026] [:error] [pid 25876:tid 25897] [client 191.232.209.213:64990] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a31.php"] [unique_id "ahEtKwSpWUCKPezIBJAQSQAAARM"]
[Sat May 23 12:29:32.649624 2026] [:error] [pid 30941:tid 30994] [client 191.232.209.213:64261] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/a31.php"] [unique_id "ahEtLHTIgjSDhiZmvlVnogAAAFI"]
[Sat May 23 12:29:33.395311 2026] [:error] [pid 30941:tid 30984] [client 191.232.209.213:64346] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahEtLXTIgjSDhiZmvlVnowAAAEg"]
[Sat May 23 12:29:34.415755 2026] [:error] [pid 30941:tid 30985] [client 191.232.209.213:64339] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahEtLnTIgjSDhiZmvlVnpAAAAEk"]
[Sat May 23 12:29:35.135944 2026] [:error] [pid 25876:tid 25892] [client 191.232.209.213:64317] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahEtLwSpWUCKPezIBJAQYAAAAQ4"]
[Sat May 23 12:29:35.870747 2026] [:error] [pid 30941:tid 30989] [client 191.232.209.213:64292] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahEtL3TIgjSDhiZmvlVnqQAAAE0"]
[Sat May 23 12:29:36.764773 2026] [:error] [pid 31039:tid 31048] [client 191.232.209.213:64918] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ahEtMKIYDYo8WvA5zLLLbgAAAMc"]
[Sat May 23 12:29:37.502107 2026] [:error] [pid 31039:tid 31060] [client 191.232.209.213:64281] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ahEtMaIYDYo8WvA5zLLLbwAAANM"]
[Sat May 23 12:29:38.158109 2026] [:error] [pid 25876:tid 25882] [client 191.232.209.213:64365] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ahEtMgSpWUCKPezIBJAQZAAAAQQ"]
[Sat May 23 12:29:38.952114 2026] [:error] [pid 25876:tid 25898] [client 191.232.209.213:65007] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fff.php"] [unique_id "ahEtMgSpWUCKPezIBJAQZgAAARQ"]
[Sat May 23 12:29:39.773029 2026] [:error] [pid 31039:tid 31053] [client 191.232.209.213:64360] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amp.php"] [unique_id "ahEtM6IYDYo8WvA5zLLLcQAAAMw"]
[Sat May 23 12:29:40.665924 2026] [:error] [pid 31039:tid 31050] [client 191.232.209.213:64376] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amp.php"] [unique_id "ahEtNKIYDYo8WvA5zLLLdQAAAMk"]
[Sat May 23 12:29:41.435909 2026] [:error] [pid 30942:tid 31026] [client 191.232.209.213:64325] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amp.php"] [unique_id "ahEtNdUosz64YFiBlG0R_wAAAJc"]
[Sat May 23 12:29:42.772777 2026] [:error] [pid 30942:tid 31027] [client 191.232.209.213:64085] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/amp.php"] [unique_id "ahEtNtUosz64YFiBlG0SAAAAAJg"]
[Sat May 23 12:29:44.090181 2026] [:error] [pid 30942:tid 31013] [client 191.232.209.213:64278] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ahEtONUosz64YFiBlG0SBgAAAIo"]
[Sat May 23 12:29:44.723853 2026] [:error] [pid 30941:tid 30993] [client 191.232.209.213:64975] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ahEtOHTIgjSDhiZmvlVnqwAAAFE"]
[Sat May 23 12:29:45.706268 2026] [:error] [pid 31039:tid 31053] [client 191.232.209.213:64096] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ahEtOaIYDYo8WvA5zLLLewAAAMw"]
[Sat May 23 12:29:46.585001 2026] [:error] [pid 30942:tid 31019] [client 191.232.209.213:10766] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog.php"] [unique_id "ahEtOtUosz64YFiBlG0SCQAAAJA"]
[Sat May 23 12:29:47.310756 2026] [:error] [pid 31039:tid 31044] [client 191.232.209.213:10760] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX6.php"] [unique_id "ahEtO6IYDYo8WvA5zLLLfgAAAMM"]
[Sat May 23 12:29:48.046541 2026] [:error] [pid 30942:tid 31007] [client 191.232.209.213:64272] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX6.php"] [unique_id "ahEtPNUosz64YFiBlG0SDAAAAIQ"]
[Sat May 23 12:29:49.042554 2026] [:error] [pid 30941:tid 30992] [client 191.232.209.213:64898] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX6.php"] [unique_id "ahEtPXTIgjSDhiZmvlVnrQAAAFA"]
[Sat May 23 12:29:50.066667 2026] [:error] [pid 31039:tid 31064] [client 191.232.209.213:64379] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/CDX6.php"] [unique_id "ahEtPqIYDYo8WvA5zLLLhAAAANc"]
[Sat May 23 12:29:50.882643 2026] [:error] [pid 30942:tid 31010] [client 191.232.209.213:10793] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahEtPtUosz64YFiBlG0SDwAAAIc"]
[Sat May 23 12:29:51.661145 2026] [:error] [pid 30941:tid 30984] [client 191.232.209.213:64263] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahEtP3TIgjSDhiZmvlVnrwAAAEg"]
[Sat May 23 12:29:52.398606 2026] [:error] [pid 30940:tid 30954] [client 191.232.209.213:64947] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahEtQJqUP2XZmzp7RDq8-QAAAAU"]
[Sat May 23 12:29:53.053381 2026] [:error] [pid 25876:tid 25892] [client 191.232.209.213:64950] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahEtQQSpWUCKPezIBJAQbAAAAQ4"]
[Sat May 23 12:29:53.764134 2026] [:error] [pid 25876:tid 25896] [client 191.232.209.213:10786] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahEtQQSpWUCKPezIBJAQbQAAARI"]
[Sat May 23 12:29:54.425586 2026] [:error] [pid 25876:tid 25893] [client 191.232.209.213:10801] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahEtQgSpWUCKPezIBJAQbgAAAQ8"]
[Sat May 23 12:29:55.164087 2026] [:error] [pid 31039:tid 31049] [client 191.232.209.213:64983] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahEtQ6IYDYo8WvA5zLLLiAAAAMg"]
[Sat May 23 12:29:55.937176 2026] [:error] [pid 25876:tid 25898] [client 191.232.209.213:64363] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahEtQwSpWUCKPezIBJAQcwAAARQ"]
[Sat May 23 12:29:56.726691 2026] [:error] [pid 30942:tid 31021] [client 191.232.209.213:64266] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahEtRNUosz64YFiBlG0SEgAAAJI"]
[Sat May 23 12:29:57.414809 2026] [:error] [pid 30941:tid 30976] [client 191.232.209.213:64369] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahEtRXTIgjSDhiZmvlVntAAAAEA"]
[Sat May 23 12:29:58.125679 2026] [:error] [pid 30942:tid 31015] [client 191.232.209.213:64268] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahEtRtUosz64YFiBlG0SEwAAAIw"]
[Sat May 23 12:29:58.882825 2026] [:error] [pid 30941:tid 30990] [client 191.232.209.213:64023] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahEtRnTIgjSDhiZmvlVnuAAAAE4"]
[Sat May 23 12:29:59.719135 2026] [:error] [pid 30940:tid 30955] [client 191.232.209.213:64375] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahEtR5qUP2XZmzp7RDq9BQAAAAY"]
[Sat May 23 12:30:00.390620 2026] [:error] [pid 30940:tid 30953] [client 191.232.209.213:65014] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahEtSJqUP2XZmzp7RDq9BgAAAAQ"]
[Sat May 23 12:30:01.028246 2026] [:error] [pid 30940:tid 30964] [client 191.232.209.213:64300] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahEtSZqUP2XZmzp7RDq9CAAAAA8"]
[Sat May 23 12:30:01.739086 2026] [:error] [pid 25876:tid 25888] [client 191.232.209.213:64948] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahEtSQSpWUCKPezIBJAQfgAAAQo"]
[Sat May 23 12:30:02.431453 2026] [:error] [pid 30940:tid 30972] [client 191.232.209.213:64951] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahEtSpqUP2XZmzp7RDq9CgAAABc"]
[Sat May 23 12:30:03.099904 2026] [:error] [pid 25876:tid 25897] [client 191.232.209.213:64331] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahEtSwSpWUCKPezIBJAQggAAARM"]
[Sat May 23 12:30:03.737413 2026] [:error] [pid 25876:tid 25896] [client 191.232.209.213:64361] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahEtSwSpWUCKPezIBJAQhAAAARI"]
[Sat May 23 12:30:04.385200 2026] [:error] [pid 25876:tid 25883] [client 191.232.209.213:64334] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahEtTASpWUCKPezIBJAQhQAAAQU"]
[Sat May 23 12:30:05.047006 2026] [:error] [pid 30942:tid 31008] [client 191.232.209.213:64078] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhf.php"] [unique_id "ahEtTdUosz64YFiBlG0SFgAAAIU"]
[Sat May 23 12:30:05.768102 2026] [:error] [pid 30941:tid 30981] [client 191.232.209.213:64101] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhf.php"] [unique_id "ahEtTXTIgjSDhiZmvlVnwQAAAEU"]
[Sat May 23 12:30:06.448345 2026] [:error] [pid 30940:tid 30958] [client 191.232.209.213:64296] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhf.php"] [unique_id "ahEtTpqUP2XZmzp7RDq9DAAAAAk"]
[Sat May 23 12:30:07.296505 2026] [:error] [pid 31039:tid 31061] [client 191.232.209.213:64070] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hhf.php"] [unique_id "ahEtT6IYDYo8WvA5zLLLkwAAANQ"]
[Sat May 23 12:30:07.936726 2026] [:error] [pid 30941:tid 30994] [client 191.232.209.213:64922] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "ahEtT3TIgjSDhiZmvlVnxgAAAFI"]
[Sat May 23 12:30:08.749606 2026] [:error] [pid 31039:tid 31056] [client 191.232.209.213:64976] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "ahEtUKIYDYo8WvA5zLLLlAAAAM8"]
[Sat May 23 12:30:09.625135 2026] [:error] [pid 30940:tid 30955] [client 191.232.209.213:64286] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "ahEtUZqUP2XZmzp7RDq9EQAAAAY"]
[Sat May 23 12:30:10.416706 2026] [:error] [pid 31039:tid 31051] [client 191.232.209.213:64370] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp9.php"] [unique_id "ahEtUqIYDYo8WvA5zLLLlgAAAMo"]
[Sat May 23 12:30:11.087128 2026] [:error] [pid 30940:tid 30967] [client 191.232.209.213:64293] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "ahEtU5qUP2XZmzp7RDq9FgAAABI"]
[Sat May 23 12:30:11.788010 2026] [:error] [pid 30941:tid 30997] [client 191.232.209.213:64287] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "ahEtU3TIgjSDhiZmvlVnzgAAAFU"]
[Sat May 23 12:30:12.577285 2026] [:error] [pid 31039:tid 31057] [client 191.232.209.213:63754] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "ahEtVKIYDYo8WvA5zLLLmAAAANA"]
[Sat May 23 12:30:13.581938 2026] [:error] [pid 31039:tid 31041] [client 191.232.209.213:65002] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-blog-header.php"] [unique_id "ahEtVaIYDYo8WvA5zLLLmgAAAMA"]
[Sat May 23 12:30:14.261492 2026] [:error] [pid 30942:tid 31004] [client 191.232.209.213:64995] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wper.php"] [unique_id "ahEtVtUosz64YFiBlG0SHgAAAIE"]
[Sat May 23 12:30:14.896003 2026] [:error] [pid 30941:tid 30988] [client 191.232.209.213:64005] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wper.php"] [unique_id "ahEtVnTIgjSDhiZmvlVnzwAAAEw"]
[Sat May 23 12:30:15.587507 2026] [:error] [pid 31039:tid 31045] [client 191.232.209.213:64909] [client 191.232.209.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wper.php"] [unique_id "ahEtV6IYDYo8WvA5zLLLmwAAAMQ"]
[Sat May 23 12:30:16.282631 2026] [proxy_fcgi:error] [pid 30941:tid 30977] [client 191.232.209.213:64304] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:11:28.229057 2026] [:error] [pid 30942:tid 31012] [client 162.14.81.106:53188] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahFTINUosz64YFiBlG08UwAAAIk"]
[Sat May 23 15:39:27.784180 2026] [proxy_fcgi:error] [pid 25876:tid 25882] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:27.906958 2026] [proxy_fcgi:error] [pid 25876:tid 25891] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.030176 2026] [proxy_fcgi:error] [pid 25876:tid 25901] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.163805 2026] [proxy_fcgi:error] [pid 25876:tid 25889] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.287655 2026] [proxy_fcgi:error] [pid 25876:tid 25882] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.415327 2026] [proxy_fcgi:error] [pid 25876:tid 25890] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.673772 2026] [proxy_fcgi:error] [pid 25876:tid 25879] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.796027 2026] [proxy_fcgi:error] [pid 25876:tid 25895] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:28.942587 2026] [proxy_fcgi:error] [pid 25876:tid 25901] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:29.065914 2026] [proxy_fcgi:error] [pid 25876:tid 25889] [client 20.210.129.142:11454] AH01071: Got error 'Primary script unknown'
[Sat May 23 15:39:29.185275 2026] [:error] [pid 25876:tid 25897] [client 20.210.129.142:11454] [client 20.210.129.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahFZsQSpWUCKPezIBJBnSwAAARM"]
[Sat May 23 15:39:29.746116 2026] [:error] [pid 25876:tid 25879] [client 20.210.129.142:11394] [client 20.210.129.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahFZsQSpWUCKPezIBJBnUwAAAQE"]
[Sat May 23 15:39:30.266021 2026] [:error] [pid 25876:tid 25891] [client 20.210.129.142:11440] [client 20.210.129.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahFZsgSpWUCKPezIBJBnWgAAAQ0"]
[Sat May 23 15:39:30.745725 2026] [:error] [pid 25876:tid 25902] [client 20.210.129.142:11446] [client 20.210.129.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahFZsgSpWUCKPezIBJBnXwAAARg"]
[Sat May 23 23:06:51.022403 2026] [:error] [pid 30941:tid 30987] [client 20.196.97.33:1131] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahHCi3TIgjSDhiZmvlUgvwAAAEs"]
[Sat May 23 23:06:51.587072 2026] [:error] [pid 30941:tid 30982] [client 20.196.97.33:1094] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahHCi3TIgjSDhiZmvlUgwAAAAEY"]
[Sat May 23 23:06:52.192167 2026] [:error] [pid 30941:tid 30978] [client 20.196.97.33:3114] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahHCjHTIgjSDhiZmvlUgwwAAAEI"]
[Sat May 23 23:06:52.744873 2026] [:error] [pid 30942:tid 31004] [client 20.196.97.33:3191] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahHCjNUosz64YFiBlG2H5QAAAIE"]
[Sat May 23 23:56:19.481366 2026] [:error] [pid 30940:tid 30956] [client 43.159.152.184:40494] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahHOI5qUP2XZmzp7RDojvgAAAAc"]
[Sun May 24 01:08:18.706593 2026] [:error] [pid 44296:tid 44320] [client 45.130.203.150:55575] [client 45.130.203.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/HEAD"] [unique_id "ahHfApdrUdFI6ijvMkm-FQAAAVY"]
[Sun May 24 07:30:05.123037 2026] [:error] [pid 58521:tid 58532] [client 43.134.236.33:42320] [client 43.134.236.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahI4fWu03QVCX-cF2G_hgwAAAQk"]
[Sun May 24 08:46:08.246887 2026] [:error] [pid 58797:tid 58803] [client 103.99.37.229:52740] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "ahJKUPzoIKLVypLB5NhKCQAAAUM"]
[Sun May 24 08:46:08.248188 2026] [:error] [pid 50871:tid 50882] [client 103.99.37.229:52704] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/www/.env"] [unique_id "ahJKUOcdOvA3ACH24letcwAAAAI"]
[Sun May 24 08:46:08.251158 2026] [:error] [pid 58918:tid 58930] [client 103.99.37.229:52758] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBAQAAAYo"]
[Sun May 24 08:46:08.251924 2026] [:error] [pid 58918:tid 58926] [client 103.99.37.229:52736] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBAgAAAYY"]
[Sun May 24 08:46:08.255534 2026] [:error] [pid 58918:tid 58936] [client 103.99.37.229:52714] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBAwAAAZA"]
[Sun May 24 08:46:08.256995 2026] [:error] [pid 50873:tid 50952] [client 103.99.37.229:52722] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "ahJKUOlYxsqwDcWZbhLhOgAAAIw"]
[Sun May 24 08:46:08.259958 2026] [:error] [pid 58797:tid 58802] [client 103.99.37.229:52754] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/storage/.env"] [unique_id "ahJKUPzoIKLVypLB5NhKCgAAAUI"]
[Sun May 24 08:46:08.284370 2026] [:error] [pid 58797:tid 58805] [client 103.99.37.229:52712] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/backend/.env"] [unique_id "ahJKUPzoIKLVypLB5NhKDQAAAUU"]
[Sun May 24 10:21:06.065451 2026] [:error] [pid 49744:tid 49760] [client 13.203.193.137:57694] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ahJgkjsE5kPdFpUbbHFx1gAAAM4"]
[Sun May 24 10:21:07.087531 2026] [:error] [pid 2639:tid 2643] [client 13.203.193.137:57714] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/credentials"] [unique_id "ahJgk0zQncQTd0Z0Oe_ewwAAAQI"]
[Sun May 24 10:21:08.134010 2026] [:error] [pid 49688:tid 49702] [client 13.203.193.137:57730] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "ahJglGYoQ9V6a_4pBshogAAAAEs"]
[Sun May 24 10:21:09.387458 2026] [:error] [pid 49775:tid 49786] [client 13.203.193.137:55440] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "ahJglYvZb8G6T8WpI1gqKQAAAAk"]
[Sun May 24 10:21:10.339049 2026] [:error] [pid 49688:tid 49706] [client 13.203.193.137:55452] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "ahJglmYoQ9V6a_4pBshogwAAAE8"]
[Sun May 24 10:21:11.508892 2026] [:error] [pid 49688:tid 49705] [client 13.203.193.137:55468] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "ahJgl2YoQ9V6a_4pBshoiAAAAE4"]
[Sun May 24 10:21:12.375711 2026] [:error] [pid 49775:tid 49784] [client 13.203.193.137:55490] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "ahJgmIvZb8G6T8WpI1gqNgAAAAc"]
[Sun May 24 10:21:13.567729 2026] [:error] [pid 2639:tid 2661] [client 13.203.193.137:55514] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "ahJgmUzQncQTd0Z0Oe_e3AAAARQ"]
[Sun May 24 10:21:14.337196 2026] [:error] [pid 2639:tid 2646] [client 13.203.193.137:55544] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.remote"] [unique_id "ahJgmkzQncQTd0Z0Oe_e4AAAAQU"]
[Sun May 24 10:21:15.139689 2026] [:error] [pid 2639:tid 2653] [client 13.203.193.137:55554] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "ahJgm0zQncQTd0Z0Oe_e5AAAAQw"]
[Sun May 24 10:21:16.054030 2026] [:error] [pid 49775:tid 49777] [client 13.203.193.137:55570] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "ahJgnIvZb8G6T8WpI1gqQQAAAAA"]
[Sun May 24 10:21:16.964748 2026] [:error] [pid 49688:tid 49715] [client 13.203.193.137:55582] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "ahJgnGYoQ9V6a_4pBsholwAAAFg"]
[Sun May 24 10:21:18.183837 2026] [:error] [pid 49689:tid 49734] [client 13.203.193.137:55604] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "ahJgngaxiY3NxLUD97UjLwAAAJA"]
[Sun May 24 10:21:19.057582 2026] [:error] [pid 49688:tid 49714] [client 13.203.193.137:57342] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.sample"] [unique_id "ahJgn2YoQ9V6a_4pBshomAAAAFc"]
[Sun May 24 10:21:20.021436 2026] [:error] [pid 2639:tid 2663] [client 13.203.193.137:57354] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "ahJgoEzQncQTd0Z0Oe_fBAAAARY"]
[Sun May 24 10:21:21.120278 2026] [:error] [pid 49689:tid 49738] [client 13.203.193.137:57372] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "ahJgoQaxiY3NxLUD97UjOQAAAJQ"]
[Sun May 24 10:21:21.862748 2026] [:error] [pid 49744:tid 49753] [client 13.203.193.137:57392] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "ahJgoTsE5kPdFpUbbHFx3wAAAMc"]
[Sun May 24 10:21:23.129631 2026] [:error] [pid 49775:tid 49790] [client 13.203.193.137:57406] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.stage"] [unique_id "ahJgo4vZb8G6T8WpI1gqSwAAAA0"]
[Sun May 24 10:21:24.144852 2026] [:error] [pid 49775:tid 49784] [client 13.203.193.137:57430] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.ci"] [unique_id "ahJgpIvZb8G6T8WpI1gqVAAAAAc"]
[Sun May 24 10:21:25.376611 2026] [:error] [pid 2639:tid 2651] [client 13.203.193.137:57448] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.docker"] [unique_id "ahJgpUzQncQTd0Z0Oe_fEgAAAQo"]
[Sun May 24 10:21:27.924095 2026] [:error] [pid 49688:tid 49703] [client 13.203.193.137:57474] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.live"] [unique_id "ahJgp2YoQ9V6a_4pBshoqgAAAEw"]
[Sun May 24 10:21:29.177604 2026] [:error] [pid 49775:tid 49777] [client 13.203.193.137:58884] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.preprod"] [unique_id "ahJgqYvZb8G6T8WpI1gqYwAAAAA"]
[Sun May 24 10:21:30.054985 2026] [:error] [pid 2639:tid 2649] [client 13.203.193.137:58892] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.uat"] [unique_id "ahJgqkzQncQTd0Z0Oe_fLwAAAQg"]
[Sun May 24 10:21:30.858836 2026] [:error] [pid 2639:tid 2648] [client 13.203.193.137:58906] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "ahJgqkzQncQTd0Z0Oe_fNAAAAQc"]
[Sun May 24 10:21:31.661307 2026] [:error] [pid 49775:tid 49793] [client 13.203.193.137:58922] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.swp"] [unique_id "ahJgq4vZb8G6T8WpI1gqbAAAABA"]
[Sun May 24 10:21:32.537537 2026] [:error] [pid 49775:tid 49790] [client 13.203.193.137:58942] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "ahJgrIvZb8G6T8WpI1gqcAAAAA0"]
[Sun May 24 10:21:33.631483 2026] [:error] [pid 49775:tid 49779] [client 13.203.193.137:58952] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env1"] [unique_id "ahJgrYvZb8G6T8WpI1gqeAAAAAI"]
[Sun May 24 10:21:34.478857 2026] [:error] [pid 49689:tid 49732] [client 13.203.193.137:58974] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env2"] [unique_id "ahJgrgaxiY3NxLUD97UjVAAAAI4"]
[Sun May 24 10:21:35.412624 2026] [:error] [pid 49744:tid 49750] [client 13.203.193.137:58978] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_copy"] [unique_id "ahJgrzsE5kPdFpUbbHFx9wAAAMQ"]
[Sun May 24 10:21:36.610974 2026] [:error] [pid 49689:tid 49735] [client 13.203.193.137:58992] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.txt"] [unique_id "ahJgsAaxiY3NxLUD97UjXgAAAJE"]
[Sun May 24 10:21:37.342929 2026] [:error] [pid 49775:tid 49783] [client 13.203.193.137:59006] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.json"] [unique_id "ahJgsYvZb8G6T8WpI1gqhwAAAAY"]
[Sun May 24 10:21:38.576302 2026] [:error] [pid 2639:tid 2664] [client 13.203.193.137:59034] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.yaml"] [unique_id "ahJgskzQncQTd0Z0Oe_fRQAAARc"]
[Sun May 24 10:21:40.288182 2026] [:error] [pid 49689:tid 49725] [client 13.203.193.137:48670] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.yml"] [unique_id "ahJgtAaxiY3NxLUD97UjYwAAAIc"]
[Sun May 24 10:21:41.016875 2026] [:error] [pid 2639:tid 2650] [client 13.203.193.137:48692] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "ahJgtUzQncQTd0Z0Oe_fUQAAAQk"]
[Sun May 24 10:21:41.703401 2026] [:error] [pid 2639:tid 2643] [client 13.203.193.137:48710] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/apps/.env"] [unique_id "ahJgtUzQncQTd0Z0Oe_fWQAAAQI"]
[Sun May 24 10:21:42.425835 2026] [:error] [pid 2639:tid 2642] [client 13.203.193.137:48734] [client 13.203.193.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "ahJgtkzQncQTd0Z0Oe_fXQAAAQE"]
[Sun May 24 14:19:14.757857 2026] [autoindex:error] [pid 49688:tid 49714] [client 5.35.69.6:60486] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Sun May 24 14:19:52.845681 2026] [:error] [pid 23497:tid 23524] [client 111.230.233.46:60992] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahKYiCPlV47QcYwd2v-jHQAAAVg"]
[Sun May 24 15:26:13.376581 2026] [proxy_fcgi:error] [pid 49689:tid 49729] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:13.518777 2026] [proxy_fcgi:error] [pid 49689:tid 49739] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:13.663088 2026] [proxy_fcgi:error] [pid 49689:tid 49738] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:13.805200 2026] [proxy_fcgi:error] [pid 49689:tid 49735] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:13.968220 2026] [proxy_fcgi:error] [pid 49689:tid 49741] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:14.126054 2026] [proxy_fcgi:error] [pid 49689:tid 49723] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:14.459389 2026] [proxy_fcgi:error] [pid 49689:tid 49719] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:14.633605 2026] [proxy_fcgi:error] [pid 49689:tid 49724] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:14.812060 2026] [proxy_fcgi:error] [pid 49689:tid 49722] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:14.981139 2026] [proxy_fcgi:error] [pid 49689:tid 49733] [client 20.196.97.33:1354] AH01071: Got error 'Primary script unknown'
[Sun May 24 15:26:15.156096 2026] [:error] [pid 49689:tid 49727] [client 20.196.97.33:1354] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahKoFwaxiY3NxLUD97VhjwAAAIk"]
[Sun May 24 15:26:15.745193 2026] [:error] [pid 49744:tid 49754] [client 20.196.97.33:1081] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahKoFzsE5kPdFpUbbHG4-wAAAMg"]
[Sun May 24 15:26:16.346366 2026] [:error] [pid 41708:tid 41727] [client 20.196.97.33:1258] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahKoGP4tQzoTxpuHBF6cRwAAAZE"]
[Sun May 24 15:26:16.960631 2026] [:error] [pid 49775:tid 49801] [client 20.196.97.33:1243] [client 20.196.97.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alfa.php"] [unique_id "ahKoGIvZb8G6T8WpI1iBTgAAABg"]
[Sun May 24 15:37:16.825230 2026] [:error] [pid 41708:tid 41712] [client 182.8.195.41:4078] [client 182.8.195.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.195.41, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahKqrP4tQzoTxpuHBF6hFwAAAYI"]
[Sun May 24 15:37:16.836535 2026] [proxy_fcgi:error] [pid 41708:tid 41712] [client 182.8.195.41:4078] AH01071: Got error 'Primary script unknown'
[Mon May 25 06:27:28.454409 2026] [:error] [pid 9302:tid 9312] [client 13.207.69.122:56418] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/config"] [unique_id "ahN7UC1RaFfTSnDQnqFR5QAAAAU"]
[Mon May 25 06:27:29.396121 2026] [:error] [pid 9398:tid 9424] [client 13.207.69.122:56426] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.git/credentials"] [unique_id "ahN7UehIu7KstzsCua-q8QAAANQ"]
[Mon May 25 06:27:30.372444 2026] [:error] [pid 9304:tid 9378] [client 13.207.69.122:57686] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env"] [unique_id "ahN7UuVEV2qpMC_1UzSBoQAAAJE"]
[Mon May 25 06:27:31.164507 2026] [:error] [pid 50423:tid 50445] [client 13.207.69.122:57704] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.local"] [unique_id "ahN7U6JWO7En4nKEQ3gxhQAAARQ"]
[Mon May 25 06:27:31.973685 2026] [:error] [pid 9304:tid 9363] [client 13.207.69.122:57728] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.production"] [unique_id "ahN7U-VEV2qpMC_1UzSBpwAAAII"]
[Mon May 25 06:27:32.811319 2026] [:error] [pid 50423:tid 50437] [client 13.207.69.122:57736] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.staging"] [unique_id "ahN7VKJWO7En4nKEQ3gxiAAAAQw"]
[Mon May 25 06:27:33.544087 2026] [:error] [pid 9302:tid 9313] [client 13.207.69.122:57746] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.development"] [unique_id "ahN7VS1RaFfTSnDQnqFR5gAAAAY"]
[Mon May 25 06:27:34.300105 2026] [:error] [pid 9398:tid 9422] [client 13.207.69.122:57776] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.test"] [unique_id "ahN7VuhIu7KstzsCua-q-gAAANI"]
[Mon May 25 06:27:35.056280 2026] [:error] [pid 9398:tid 9418] [client 13.207.69.122:57800] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.remote"] [unique_id "ahN7V-hIu7KstzsCua-q_gAAAM4"]
[Mon May 25 06:27:35.883151 2026] [:error] [pid 9302:tid 9314] [client 13.207.69.122:57828] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.bak"] [unique_id "ahN7Vy1RaFfTSnDQnqFR6gAAAAc"]
[Mon May 25 06:27:36.697814 2026] [:error] [pid 9304:tid 9363] [client 13.207.69.122:57850] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.backup"] [unique_id "ahN7WOVEV2qpMC_1UzSBtgAAAII"]
[Mon May 25 06:27:37.545738 2026] [:error] [pid 9304:tid 9385] [client 13.207.69.122:57894] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.save"] [unique_id "ahN7WeVEV2qpMC_1UzSBuwAAAJg"]
[Mon May 25 06:27:38.319537 2026] [:error] [pid 9302:tid 9325] [client 13.207.69.122:57912] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.old"] [unique_id "ahN7Wi1RaFfTSnDQnqFR7AAAABI"]
[Mon May 25 06:27:39.117634 2026] [:error] [pid 9303:tid 9356] [client 13.207.69.122:57936] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.sample"] [unique_id "ahN7W33bQScbssitjPQ5GAAAAFY"]
[Mon May 25 06:27:39.891283 2026] [:error] [pid 50423:tid 50449] [client 13.207.69.122:57960] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.example"] [unique_id "ahN7W6JWO7En4nKEQ3gxjAAAARg"]
[Mon May 25 06:27:40.591007 2026] [:error] [pid 9303:tid 9343] [client 13.207.69.122:60828] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dev"] [unique_id "ahN7XH3bQScbssitjPQ5HQAAAEk"]
[Mon May 25 06:27:41.488086 2026] [:error] [pid 9398:tid 9402] [client 13.207.69.122:60852] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.prod"] [unique_id "ahN7XehIu7KstzsCua-rCQAAAMI"]
[Mon May 25 06:27:42.424730 2026] [:error] [pid 9302:tid 9330] [client 13.207.69.122:60868] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.stage"] [unique_id "ahN7Xi1RaFfTSnDQnqFR8wAAABc"]
[Mon May 25 06:27:43.358845 2026] [:error] [pid 9302:tid 9322] [client 13.207.69.122:60888] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.ci"] [unique_id "ahN7Xy1RaFfTSnDQnqFR-AAAAA8"]
[Mon May 25 06:27:44.565035 2026] [:error] [pid 9304:tid 9374] [client 13.207.69.122:60898] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.docker"] [unique_id "ahN7YOVEV2qpMC_1UzSB0wAAAI0"]
[Mon May 25 06:27:45.425838 2026] [:error] [pid 9304:tid 9375] [client 13.207.69.122:60914] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.live"] [unique_id "ahN7YeVEV2qpMC_1UzSB1gAAAI4"]
[Mon May 25 06:27:46.144509 2026] [:error] [pid 9304:tid 9369] [client 13.207.69.122:60936] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.preprod"] [unique_id "ahN7YuVEV2qpMC_1UzSB3QAAAIg"]
[Mon May 25 06:27:46.890414 2026] [:error] [pid 9303:tid 9356] [client 13.207.69.122:60956] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.uat"] [unique_id "ahN7Yn3bQScbssitjPQ5JwAAAFY"]
[Mon May 25 06:27:47.663344 2026] [:error] [pid 50423:tid 50446] [client 13.207.69.122:60980] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.dist"] [unique_id "ahN7Y6JWO7En4nKEQ3gxkwAAARU"]
[Mon May 25 06:27:48.492805 2026] [:error] [pid 9398:tid 9415] [client 13.207.69.122:32768] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.swp"] [unique_id "ahN7ZOhIu7KstzsCua-rHgAAAMs"]
[Mon May 25 06:27:49.347651 2026] [:error] [pid 9303:tid 9353] [client 13.207.69.122:32780] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env~"] [unique_id "ahN7ZX3bQScbssitjPQ5KQAAAFM"]
[Mon May 25 06:27:50.152411 2026] [:error] [pid 9302:tid 9311] [client 13.207.69.122:58458] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env1"] [unique_id "ahN7Zi1RaFfTSnDQnqFR_AAAAAQ"]
[Mon May 25 06:27:51.095997 2026] [:error] [pid 9304:tid 9369] [client 13.207.69.122:58468] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env2"] [unique_id "ahN7Z-VEV2qpMC_1UzSB6wAAAIg"]
[Mon May 25 06:27:51.893007 2026] [:error] [pid 50423:tid 50441] [client 13.207.69.122:58486] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env_copy"] [unique_id "ahN7Z6JWO7En4nKEQ3gxlQAAARA"]
[Mon May 25 06:27:52.660123 2026] [:error] [pid 9304:tid 9385] [client 13.207.69.122:58498] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.txt"] [unique_id "ahN7aOVEV2qpMC_1UzSB8QAAAJg"]
[Mon May 25 06:27:53.449126 2026] [:error] [pid 9304:tid 9370] [client 13.207.69.122:58516] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.json"] [unique_id "ahN7aeVEV2qpMC_1UzSB9QAAAIk"]
[Mon May 25 06:27:54.273052 2026] [:error] [pid 9304:tid 9371] [client 13.207.69.122:58536] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.yaml"] [unique_id "ahN7auVEV2qpMC_1UzSB-AAAAIo"]
[Mon May 25 06:27:55.102792 2026] [:error] [pid 9304:tid 9375] [client 13.207.69.122:58554] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/.env.yml"] [unique_id "ahN7a-VEV2qpMC_1UzSB-gAAAI4"]
[Mon May 25 06:27:55.832767 2026] [:error] [pid 50423:tid 50425] [client 13.207.69.122:58572] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/app/.env"] [unique_id "ahN7a6JWO7En4nKEQ3gxmwAAAQA"]
[Mon May 25 06:27:56.607661 2026] [:error] [pid 9398:tid 9400] [client 13.207.69.122:58580] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/apps/.env"] [unique_id "ahN7bOhIu7KstzsCua-rKwAAAMA"]
[Mon May 25 06:27:57.423984 2026] [:error] [pid 21606:tid 21631] [client 13.207.69.122:58582] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/api/.env"] [unique_id "ahN7bWswdp0RYkH5t9XBcAAAAVc"]
[Mon May 25 06:27:58.425991 2026] [:error] [pid 9304:tid 9375] [client 13.207.69.122:58612] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/web/.env"] [unique_id "ahN7buVEV2qpMC_1UzSCAgAAAI4"]
[Mon May 25 06:27:59.633874 2026] [:error] [pid 9303:tid 9343] [client 13.207.69.122:58656] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/site/.env"] [unique_id "ahN7b33bQScbssitjPQ5OgAAAEk"]
[Mon May 25 06:28:00.563554 2026] [:error] [pid 50423:tid 50426] [client 13.207.69.122:40228] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/public/.env"] [unique_id "ahN7cKJWO7En4nKEQ3gxogAAAQE"]
[Mon May 25 06:28:01.494626 2026] [:error] [pid 50423:tid 50448] [client 13.207.69.122:40240] [client 13.207.69.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourbrand.com"] [uri "/admin/.env"] [unique_id "ahN7caJWO7En4nKEQ3gxpAAAARc"]
[Mon May 25 07:28:48.024903 2026] [proxy_fcgi:error] [pid 50423:tid 50426] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:48.218480 2026] [proxy_fcgi:error] [pid 50423:tid 50429] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:48.647759 2026] [proxy_fcgi:error] [pid 50423:tid 50425] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:48.880940 2026] [proxy_fcgi:error] [pid 50423:tid 50431] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:49.267629 2026] [proxy_fcgi:error] [pid 50423:tid 50430] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:49.514635 2026] [proxy_fcgi:error] [pid 50423:tid 50442] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:49.707651 2026] [proxy_fcgi:error] [pid 50423:tid 50426] [client 20.9.45.132:4035] AH01071: Got error 'Primary script unknown'
[Mon May 25 07:28:50.143354 2026] [:error] [pid 50423:tid 50449] [client 20.9.45.132:4035] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "ahOJsqJWO7En4nKEQ3hIBAAAARg"]
[Mon May 25 07:28:51.150919 2026] [:error] [pid 9304:tid 9366] [client 20.9.45.132:20242] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "ahOJs-VEV2qpMC_1UzSkgAAAAIU"]
[Mon May 25 07:28:52.574584 2026] [:error] [pid 9304:tid 9363] [client 20.9.45.132:19487] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "ahOJtOVEV2qpMC_1UzSkhAAAAII"]
[Mon May 25 07:28:53.574994 2026] [:error] [pid 9304:tid 9385] [client 20.9.45.132:2527] [client 20.9.45.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/randkeyword.PhP7"] [unique_id "ahOJteVEV2qpMC_1UzSkigAAAJg"]
[Mon May 25 08:02:14.586156 2026] [:error] [pid 62722:tid 62739] [client 43.157.62.101:58102] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahORhqM6ssnLWYf6CVA_UAAAAE8"]
[Mon May 25 14:50:31.326609 2026] [:error] [pid 62426:tid 62434] [client 43.153.204.189:55910] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahPxN0j3D3Mo8ANpTRC7LAAAAAQ"]
[Mon May 25 17:38:05.470333 2026] [:error] [pid 62515:tid 62538] [client 119.73.97.194:3868] [client 119.73.97.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.97.194, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQYfRig0_XsOwmnrv8DTQAAANU"]
[Mon May 25 17:38:05.482247 2026] [proxy_fcgi:error] [pid 62515:tid 62538] [client 119.73.97.194:3868] AH01071: Got error 'Primary script unknown'
[Mon May 25 17:38:05.493051 2026] [:error] [pid 62515:tid 62524] [client 119.73.97.194:3869] [client 119.73.97.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.97.194, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQYfRig0_XsOwmnrv8DTgAAAMc"]
[Mon May 25 17:38:05.497015 2026] [proxy_fcgi:error] [pid 62515:tid 62524] [client 119.73.97.194:3869] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:27.752925 2026] [proxy_fcgi:error] [pid 62722:tid 62730] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:28.069036 2026] [proxy_fcgi:error] [pid 62722:tid 62725] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:28.400731 2026] [proxy_fcgi:error] [pid 62722:tid 62726] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:28.797257 2026] [proxy_fcgi:error] [pid 62722:tid 62741] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:29.110051 2026] [proxy_fcgi:error] [pid 62722:tid 62739] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:29.423163 2026] [proxy_fcgi:error] [pid 62722:tid 62740] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:29.737276 2026] [proxy_fcgi:error] [pid 62722:tid 62728] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:30.051316 2026] [proxy_fcgi:error] [pid 62722:tid 62735] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:30.364037 2026] [proxy_fcgi:error] [pid 62722:tid 62738] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:30.691294 2026] [proxy_fcgi:error] [pid 62722:tid 62731] [client 20.226.80.139:9189] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:50:31.000439 2026] [:error] [pid 62722:tid 62734] [client 20.226.80.139:9189] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-indx.php"] [unique_id "ahQpdqM6ssnLWYf6CVA8UgAAAEo"]
[Mon May 25 18:50:32.489884 2026] [:error] [pid 3698:tid 3719] [client 20.226.80.139:9194] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-indx.php"] [unique_id "ahQpeAtZBEwA4fyFLKPglQAAARM"]
[Mon May 25 18:50:33.585869 2026] [:error] [pid 62722:tid 62733] [client 20.226.80.139:9176] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-indx.php"] [unique_id "ahQpeaM6ssnLWYf6CVA8WAAAAEk"]
[Mon May 25 18:50:35.305709 2026] [:error] [pid 62426:tid 62450] [client 20.226.80.139:9101] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-indx.php"] [unique_id "ahQpe0j3D3Mo8ANpTRDoIgAAABQ"]
[Mon May 25 18:50:38.330161 2026] [:error] [pid 62428:tid 62485] [client 20.226.80.139:9090] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ahQpfpNosGBa7mui3VQypwAAAIE"]
[Mon May 25 18:50:39.573869 2026] [:error] [pid 53791:tid 53803] [client 20.226.80.139:9098] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ahQpfyCRhhNTD40Nf1UHpwAAAYo"]
[Mon May 25 18:50:40.743196 2026] [:error] [pid 62515:tid 62540] [client 20.226.80.139:9116] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ahQpgBig0_XsOwmnrv8cNwAAANc"]
[Mon May 25 18:50:42.095398 2026] [:error] [pid 62515:tid 62530] [client 20.226.80.139:9108] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/zoo.php"] [unique_id "ahQpghig0_XsOwmnrv8cOQAAAM0"]
[Mon May 25 18:50:43.759420 2026] [:error] [pid 62428:tid 62494] [client 20.226.80.139:9156] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-spm.php"] [unique_id "ahQpg5NosGBa7mui3VQysAAAAIo"]
[Mon May 25 18:50:45.230678 2026] [:error] [pid 62428:tid 62498] [client 20.226.80.139:9203] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-spm.php"] [unique_id "ahQphZNosGBa7mui3VQyswAAAI4"]
[Mon May 25 18:50:47.249551 2026] [:error] [pid 62428:tid 62502] [client 20.226.80.139:9152] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-spm.php"] [unique_id "ahQph5NosGBa7mui3VQyuQAAAJI"]
[Mon May 25 18:50:49.334848 2026] [:error] [pid 62428:tid 62501] [client 20.226.80.139:9184] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-spm.php"] [unique_id "ahQpiZNosGBa7mui3VQywQAAAJE"]
[Mon May 25 18:50:50.455295 2026] [:error] [pid 62428:tid 62488] [client 20.226.80.139:9158] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-snpm.php"] [unique_id "ahQpipNosGBa7mui3VQyxAAAAIQ"]
[Mon May 25 18:50:51.945088 2026] [:error] [pid 62515:tid 62520] [client 20.226.80.139:9106] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-snpm.php"] [unique_id "ahQpixig0_XsOwmnrv8cRAAAAMM"]
[Mon May 25 18:50:52.889747 2026] [:error] [pid 53791:tid 53808] [client 20.226.80.139:9093] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-snpm.php"] [unique_id "ahQpjCCRhhNTD40Nf1UHqwAAAY8"]
[Mon May 25 18:50:54.347469 2026] [:error] [pid 62426:tid 62454] [client 20.226.80.139:9170] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-link-snpm.php"] [unique_id "ahQpjkj3D3Mo8ANpTRDoKgAAABg"]
[Mon May 25 18:50:55.510662 2026] [:error] [pid 62722:tid 62744] [client 20.226.80.139:9175] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xminie.php"] [unique_id "ahQpj6M6ssnLWYf6CVA8XAAAAFQ"]
[Mon May 25 18:50:56.926461 2026] [:error] [pid 62427:tid 62476] [client 20.226.80.139:9196] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xminie.php"] [unique_id "ahQpkPMUa83fc4GDyBxwrwAAAVM"]
[Mon May 25 18:50:58.450831 2026] [:error] [pid 53791:tid 53803] [client 20.226.80.139:9159] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xminie.php"] [unique_id "ahQpkiCRhhNTD40Nf1UHtAAAAYo"]
[Mon May 25 18:51:01.706087 2026] [:error] [pid 3698:tid 3719] [client 20.226.80.139:9199] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xminie.php"] [unique_id "ahQplQtZBEwA4fyFLKPgngAAARM"]
[Mon May 25 18:51:04.669881 2026] [:error] [pid 62426:tid 62439] [client 20.226.80.139:9168] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQpmEj3D3Mo8ANpTRDoMAAAAAk"]
[Mon May 25 18:51:08.092478 2026] [:error] [pid 62426:tid 62432] [client 20.226.80.139:9135] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQpnEj3D3Mo8ANpTRDoMgAAAAI"]
[Mon May 25 18:51:08.986636 2026] [:error] [pid 62426:tid 62430] [client 20.226.80.139:9214] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQpnEj3D3Mo8ANpTRDoNQAAAAA"]
[Mon May 25 18:51:10.744775 2026] [:error] [pid 62426:tid 62437] [client 20.226.80.139:9204] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQpnkj3D3Mo8ANpTRDoOQAAAAc"]
[Mon May 25 18:51:15.489566 2026] [:error] [pid 62428:tid 62492] [client 20.226.80.139:9146] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ahQpo5NosGBa7mui3VQy2gAAAIg"]
[Mon May 25 18:51:19.286616 2026] [:error] [pid 62515:tid 62540] [client 20.226.80.139:9165] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ahQppxig0_XsOwmnrv8caAAAANc"]
[Mon May 25 18:51:26.087574 2026] [:error] [pid 53791:tid 53807] [client 20.226.80.139:9180] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bal.php"] [unique_id "ahQpriCRhhNTD40Nf1UH0AAAAY4"]
[Mon May 25 18:51:29.088086 2026] [:error] [pid 62722:tid 62743] [client 20.226.80.139:9172] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/drykl.php"] [unique_id "ahQpsaM6ssnLWYf6CVA8dAAAAFM"]
[Mon May 25 18:51:31.211713 2026] [proxy_fcgi:error] [pid 62722:tid 62739] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:31.531321 2026] [proxy_fcgi:error] [pid 62722:tid 62744] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:31.843231 2026] [proxy_fcgi:error] [pid 62722:tid 62733] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:32.160564 2026] [proxy_fcgi:error] [pid 62722:tid 62745] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:32.472426 2026] [proxy_fcgi:error] [pid 62722:tid 62748] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:32.784012 2026] [proxy_fcgi:error] [pid 62722:tid 62735] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:33.096047 2026] [proxy_fcgi:error] [pid 62722:tid 62726] [client 20.226.80.139:9195] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:33.411878 2026] [:error] [pid 62722:tid 62740] [client 20.226.80.139:9195] [client 20.226.80.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourbrand.com"] [uri "/tiny.php"] [unique_id "ahQptaM6ssnLWYf6CVA8fQAAAFA"]
[Mon May 25 18:51:35.122968 2026] [proxy_fcgi:error] [pid 62426:tid 62449] [client 20.226.80.139:9104] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:35.436175 2026] [proxy_fcgi:error] [pid 62426:tid 62442] [client 20.226.80.139:9104] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:35.766404 2026] [proxy_fcgi:error] [pid 62426:tid 62450] [client 20.226.80.139:9104] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:36.251930 2026] [proxy_fcgi:error] [pid 62426:tid 62441] [client 20.226.80.139:9104] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:51:36.582287 2026] [:error] [pid 62426:tid 62432] [client 20.226.80.139:9104] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ahQpuEj3D3Mo8ANpTRDoYwAAAAI"]
[Mon May 25 18:51:39.969637 2026] [:error] [pid 62722:tid 62728] [client 20.226.80.139:9162] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ahQpu6M6ssnLWYf6CVA8gAAAAEQ"]
[Mon May 25 18:51:42.552777 2026] [:error] [pid 53791:tid 53794] [client 20.226.80.139:9182] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ahQpviCRhhNTD40Nf1UH1gAAAYE"]
[Mon May 25 18:51:46.266817 2026] [:error] [pid 62722:tid 62743] [client 20.226.80.139:9188] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/d.php"] [unique_id "ahQpwqM6ssnLWYf6CVA8iAAAAFM"]
[Mon May 25 18:51:47.989953 2026] [:error] [pid 62515:tid 62534] [client 20.226.80.139:9105] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "ahQpwxig0_XsOwmnrv8ccQAAANE"]
[Mon May 25 18:51:50.075663 2026] [:error] [pid 62428:tid 62508] [client 20.226.80.139:9039] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "ahQpxpNosGBa7mui3VQy7QAAAJg"]
[Mon May 25 18:51:52.033394 2026] [:error] [pid 62426:tid 62443] [client 20.226.80.139:9208] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "ahQpyEj3D3Mo8ANpTRDocAAAAA0"]
[Mon May 25 18:51:53.968399 2026] [:error] [pid 3698:tid 3702] [client 20.226.80.139:9178] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cu.php"] [unique_id "ahQpyQtZBEwA4fyFLKPgugAAAQI"]
[Mon May 25 18:51:56.390888 2026] [:error] [pid 62515:tid 62525] [client 20.226.80.139:9154] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "ahQpzBig0_XsOwmnrv8cfQAAAMg"]
[Mon May 25 18:51:58.741729 2026] [:error] [pid 62426:tid 62451] [client 20.226.80.139:9113] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "ahQpzkj3D3Mo8ANpTRDocgAAABU"]
[Mon May 25 18:52:00.054022 2026] [:error] [pid 62428:tid 62488] [client 20.226.80.139:9092] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "ahQp0JNosGBa7mui3VQzAgAAAIQ"]
[Mon May 25 18:52:02.238249 2026] [:error] [pid 62428:tid 62490] [client 20.226.80.139:9166] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/fone1.php"] [unique_id "ahQp0pNosGBa7mui3VQzCAAAAIY"]
[Mon May 25 18:52:04.854787 2026] [:error] [pid 3698:tid 3713] [client 20.226.80.139:9212] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ahQp1AtZBEwA4fyFLKPgwwAAAQ0"]
[Mon May 25 18:52:06.432390 2026] [:error] [pid 62428:tid 62490] [client 20.226.80.139:9145] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ahQp1pNosGBa7mui3VQzEwAAAIY"]
[Mon May 25 18:52:07.702528 2026] [:error] [pid 53791:tid 53813] [client 20.226.80.139:9032] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ahQp1yCRhhNTD40Nf1UH2gAAAZQ"]
[Mon May 25 18:52:14.006325 2026] [:error] [pid 62515:tid 62535] [client 20.226.80.139:9186] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sallu.php"] [unique_id "ahQp3hig0_XsOwmnrv8ciwAAANI"]
[Mon May 25 18:52:15.641655 2026] [:error] [pid 62515:tid 62525] [client 20.226.80.139:9210] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ahQp3xig0_XsOwmnrv8ckAAAAMg"]
[Mon May 25 18:52:16.901159 2026] [:error] [pid 62515:tid 62523] [client 20.226.80.139:9132] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ahQp4Big0_XsOwmnrv8cmwAAAMY"]
[Mon May 25 18:52:18.040977 2026] [:error] [pid 62426:tid 62451] [client 20.226.80.139:9169] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ahQp4kj3D3Mo8ANpTRDofgAAABU"]
[Mon May 25 18:52:19.197473 2026] [:error] [pid 62426:tid 62446] [client 20.226.80.139:9111] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ng.php"] [unique_id "ahQp40j3D3Mo8ANpTRDogAAAABA"]
[Mon May 25 18:52:21.777804 2026] [:error] [pid 62426:tid 62453] [client 20.226.80.139:9036] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ahQp5Uj3D3Mo8ANpTRDohwAAABc"]
[Mon May 25 18:52:24.119566 2026] [:error] [pid 62428:tid 62495] [client 20.226.80.139:9174] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ahQp6JNosGBa7mui3VQzNwAAAIs"]
[Mon May 25 18:52:27.766195 2026] [:error] [pid 62426:tid 62437] [client 20.226.80.139:9112] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ahQp60j3D3Mo8ANpTRDojgAAAAc"]
[Mon May 25 18:52:30.653620 2026] [:error] [pid 62426:tid 62443] [client 20.226.80.139:9024] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/link.php"] [unique_id "ahQp7kj3D3Mo8ANpTRDokwAAAA0"]
[Mon May 25 18:52:34.092702 2026] [:error] [pid 62427:tid 62462] [client 20.226.80.139:9131] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ahQp8vMUa83fc4GDyBxw4gAAAUU"]
[Mon May 25 18:52:35.208511 2026] [:error] [pid 62428:tid 62503] [client 20.226.80.139:9137] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xxx.php"] [unique_id "ahQp85NosGBa7mui3VQzTgAAAJM"]
[Mon May 25 18:52:36.668785 2026] [proxy_fcgi:error] [pid 3698:tid 3712] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:37.046094 2026] [proxy_fcgi:error] [pid 3698:tid 3720] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:37.360600 2026] [proxy_fcgi:error] [pid 3698:tid 3718] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:37.675340 2026] [proxy_fcgi:error] [pid 3698:tid 3722] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:38.110778 2026] [proxy_fcgi:error] [pid 3698:tid 3709] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:38.423206 2026] [proxy_fcgi:error] [pid 3698:tid 3702] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:38.738399 2026] [proxy_fcgi:error] [pid 3698:tid 3704] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:39.059310 2026] [proxy_fcgi:error] [pid 3698:tid 3717] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:39.385444 2026] [proxy_fcgi:error] [pid 3698:tid 3723] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:39.702704 2026] [proxy_fcgi:error] [pid 3698:tid 3712] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:40.023138 2026] [proxy_fcgi:error] [pid 3698:tid 3714] [client 20.226.80.139:9096] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:52:40.332206 2026] [:error] [pid 3698:tid 3715] [client 20.226.80.139:9096] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahQp-AtZBEwA4fyFLKPg5QAAAQ8"]
[Mon May 25 18:52:42.605617 2026] [:error] [pid 62427:tid 62478] [client 20.226.80.139:9119] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahQp-vMUa83fc4GDyBxw5AAAAVU"]
[Mon May 25 18:52:44.285743 2026] [:error] [pid 62722:tid 62741] [client 20.226.80.139:9205] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahQp_KM6ssnLWYf6CVA8nAAAAFE"]
[Mon May 25 18:52:45.873792 2026] [:error] [pid 53791:tid 53813] [client 20.226.80.139:9138] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/100.php"] [unique_id "ahQp_SCRhhNTD40Nf1UH7gAAAZQ"]
[Mon May 25 18:52:47.963008 2026] [:error] [pid 62426:tid 62454] [client 20.226.80.139:9115] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ahQp_0j3D3Mo8ANpTRDoogAAABg"]
[Mon May 25 18:52:49.731661 2026] [:error] [pid 62426:tid 62431] [client 20.226.80.139:9117] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ahQqAUj3D3Mo8ANpTRDoqgAAAAE"]
[Mon May 25 18:52:51.345507 2026] [:error] [pid 53791:tid 53804] [client 20.226.80.139:9099] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ahQqAyCRhhNTD40Nf1UH8AAAAYs"]
[Mon May 25 18:52:52.898503 2026] [:error] [pid 62426:tid 62450] [client 20.226.80.139:9141] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f5.php"] [unique_id "ahQqBEj3D3Mo8ANpTRDorAAAABQ"]
[Mon May 25 18:52:54.988312 2026] [:error] [pid 62428:tid 62504] [client 20.226.80.139:9026] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "ahQqBpNosGBa7mui3VQzZwAAAJQ"]
[Mon May 25 18:52:57.584291 2026] [:error] [pid 62426:tid 62439] [client 20.226.80.139:9094] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "ahQqCUj3D3Mo8ANpTRDosgAAAAk"]
[Mon May 25 18:52:59.383902 2026] [:error] [pid 62426:tid 62450] [client 20.226.80.139:9088] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "ahQqC0j3D3Mo8ANpTRDotAAAABQ"]
[Mon May 25 18:53:01.000300 2026] [:error] [pid 62428:tid 62489] [client 20.226.80.139:9056] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/view.php"] [unique_id "ahQqDJNosGBa7mui3VQzbAAAAIU"]
[Mon May 25 18:53:02.814678 2026] [:error] [pid 62426:tid 62441] [client 20.226.80.139:9103] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bc.php"] [unique_id "ahQqDkj3D3Mo8ANpTRDougAAAAs"]
[Mon May 25 18:53:04.908089 2026] [:error] [pid 3698:tid 3720] [client 20.226.80.139:9151] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bc.php"] [unique_id "ahQqEAtZBEwA4fyFLKPg7wAAARQ"]
[Mon May 25 18:53:07.129494 2026] [:error] [pid 62426:tid 62436] [client 20.226.80.139:9160] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bc.php"] [unique_id "ahQqE0j3D3Mo8ANpTRDovwAAAAY"]
[Mon May 25 18:53:09.020991 2026] [:error] [pid 62722:tid 62727] [client 20.226.80.139:9200] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bc.php"] [unique_id "ahQqFaM6ssnLWYf6CVA8qQAAAEM"]
[Mon May 25 18:53:11.071129 2026] [:error] [pid 62426:tid 62432] [client 20.226.80.139:9173] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ahQqF0j3D3Mo8ANpTRDowAAAAAI"]
[Mon May 25 18:53:15.887738 2026] [:error] [pid 62515:tid 62532] [client 20.226.80.139:9091] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ahQqGxig0_XsOwmnrv8cxAAAAM8"]
[Mon May 25 18:53:18.724787 2026] [:error] [pid 62426:tid 62436] [client 20.226.80.139:9051] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ahQqHkj3D3Mo8ANpTRDoxwAAAAY"]
[Mon May 25 18:53:21.305260 2026] [:error] [pid 53791:tid 53799] [client 20.226.80.139:9134] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/tx79.php"] [unique_id "ahQqISCRhhNTD40Nf1UIDAAAAYY"]
[Mon May 25 18:53:23.091674 2026] [:error] [pid 53791:tid 53793] [client 20.226.80.139:9120] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "ahQqIyCRhhNTD40Nf1UIEAAAAYA"]
[Mon May 25 18:53:25.174339 2026] [:error] [pid 62426:tid 62441] [client 20.226.80.139:9148] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "ahQqJUj3D3Mo8ANpTRDozAAAAAs"]
[Mon May 25 18:53:26.872728 2026] [:error] [pid 62515:tid 62523] [client 20.226.80.139:9193] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "ahQqJhig0_XsOwmnrv8c0QAAAMY"]
[Mon May 25 18:53:28.089716 2026] [:error] [pid 53791:tid 53808] [client 20.226.80.139:9185] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moshou.php"] [unique_id "ahQqKCCRhhNTD40Nf1UIGAAAAY8"]
[Mon May 25 18:53:32.581463 2026] [:error] [pid 62427:tid 62457] [client 20.226.80.139:9140] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ahQqLPMUa83fc4GDyBxxAQAAAUA"]
[Mon May 25 18:53:36.553762 2026] [:error] [pid 62515:tid 62531] [client 20.226.80.139:9062] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/lib.php"] [unique_id "ahQqMBig0_XsOwmnrv8c3AAAAM4"]
[Mon May 25 18:53:40.169523 2026] [proxy_fcgi:error] [pid 62426:tid 62448] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:40.481860 2026] [proxy_fcgi:error] [pid 62426:tid 62440] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:40.793650 2026] [proxy_fcgi:error] [pid 62426:tid 62452] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:41.104992 2026] [proxy_fcgi:error] [pid 62426:tid 62444] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:41.416624 2026] [proxy_fcgi:error] [pid 62426:tid 62447] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:41.820655 2026] [proxy_fcgi:error] [pid 62426:tid 62446] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:42.131768 2026] [proxy_fcgi:error] [pid 62426:tid 62431] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:42.442787 2026] [proxy_fcgi:error] [pid 62426:tid 62450] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:42.757642 2026] [proxy_fcgi:error] [pid 62426:tid 62453] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:43.297450 2026] [proxy_fcgi:error] [pid 62426:tid 62434] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:43.617511 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 20.226.80.139:9110] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:53:43.925739 2026] [:error] [pid 62426:tid 62430] [client 20.226.80.139:9110] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahQqN0j3D3Mo8ANpTRDo6wAAAAA"]
[Mon May 25 18:53:47.225555 2026] [:error] [pid 62428:tid 62499] [client 20.226.80.139:9177] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahQqO5NosGBa7mui3VQzfwAAAI8"]
[Mon May 25 18:53:52.261858 2026] [:error] [pid 62426:tid 62437] [client 20.226.80.139:9183] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahQqQEj3D3Mo8ANpTRDo9QAAAAc"]
[Mon May 25 18:53:55.112658 2026] [:error] [pid 62426:tid 62443] [client 20.226.80.139:9122] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xltt.php"] [unique_id "ahQqQ0j3D3Mo8ANpTRDo-gAAAA0"]
[Mon May 25 18:53:58.224289 2026] [:error] [pid 62428:tid 62496] [client 20.226.80.139:9211] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahQqRpNosGBa7mui3VQzkAAAAIw"]
[Mon May 25 18:54:01.255780 2026] [:error] [pid 62515:tid 62533] [client 20.226.80.139:9209] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahQqSRig0_XsOwmnrv8dCAAAANA"]
[Mon May 25 18:54:04.266154 2026] [:error] [pid 62515:tid 62523] [client 20.226.80.139:9102] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahQqTBig0_XsOwmnrv8dDgAAAMY"]
[Mon May 25 18:54:10.306925 2026] [:error] [pid 62722:tid 62744] [client 20.226.80.139:9030] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cilus.php"] [unique_id "ahQqUqM6ssnLWYf6CVA82AAAAFQ"]
[Mon May 25 18:54:18.565988 2026] [:error] [pid 62428:tid 62505] [client 20.226.80.139:9187] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ahQqWpNosGBa7mui3VQzrgAAAJU"]
[Mon May 25 18:54:20.156524 2026] [:error] [pid 62428:tid 62490] [client 20.226.80.139:9142] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ahQqXJNosGBa7mui3VQzsAAAAIY"]
[Mon May 25 18:54:21.176452 2026] [:error] [pid 62428:tid 62491] [client 20.226.80.139:9143] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ahQqXZNosGBa7mui3VQzsgAAAIc"]
[Mon May 25 18:54:23.256619 2026] [:error] [pid 62427:tid 62465] [client 20.226.80.139:9123] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/press.php"] [unique_id "ahQqX_MUa83fc4GDyBxxBQAAAUg"]
[Mon May 25 18:54:24.816136 2026] [:error] [pid 62428:tid 62489] [client 20.226.80.139:8977] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file6.php"] [unique_id "ahQqYJNosGBa7mui3VQzwQAAAIU"]
[Mon May 25 18:54:26.824977 2026] [:error] [pid 62428:tid 62498] [client 20.226.80.139:9171] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file6.php"] [unique_id "ahQqYpNosGBa7mui3VQzyQAAAI4"]
[Mon May 25 18:54:27.838579 2026] [:error] [pid 62428:tid 62489] [client 20.226.80.139:9047] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file6.php"] [unique_id "ahQqY5NosGBa7mui3VQzzgAAAIU"]
[Mon May 25 18:54:29.236448 2026] [:error] [pid 62722:tid 62736] [client 20.226.80.139:9055] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file6.php"] [unique_id "ahQqZaM6ssnLWYf6CVA85gAAAEw"]
[Mon May 25 18:54:31.592768 2026] [:error] [pid 62426:tid 62453] [client 20.226.80.139:9192] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ahQqZ0j3D3Mo8ANpTRDpCgAAABc"]
[Mon May 25 18:54:33.497069 2026] [:error] [pid 62428:tid 62502] [client 20.226.80.139:9206] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ahQqaZNosGBa7mui3VQz8wAAAJI"]
[Mon May 25 18:54:35.278776 2026] [:error] [pid 62428:tid 62487] [client 20.226.80.139:9058] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ahQqa5NosGBa7mui3VQz-gAAAIM"]
[Mon May 25 18:54:38.490290 2026] [:error] [pid 62515:tid 62538] [client 20.226.80.139:9079] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ss.php"] [unique_id "ahQqbhig0_XsOwmnrv8dJwAAANU"]
[Mon May 25 18:54:41.312154 2026] [:error] [pid 62428:tid 62491] [client 20.226.80.139:9118] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/options.php"] [unique_id "ahQqcZNosGBa7mui3VQ0EgAAAIc"]
[Mon May 25 18:54:45.677642 2026] [proxy_fcgi:error] [pid 3698:tid 3701] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:46.002765 2026] [proxy_fcgi:error] [pid 3698:tid 3700] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:46.320022 2026] [proxy_fcgi:error] [pid 3698:tid 3719] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:46.633387 2026] [proxy_fcgi:error] [pid 3698:tid 3711] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:47.327149 2026] [proxy_fcgi:error] [pid 3698:tid 3724] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:47.639925 2026] [proxy_fcgi:error] [pid 3698:tid 3723] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:47.954489 2026] [proxy_fcgi:error] [pid 3698:tid 3703] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:49.443134 2026] [proxy_fcgi:error] [pid 3698:tid 3702] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:49.756029 2026] [proxy_fcgi:error] [pid 3698:tid 3722] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:50.069920 2026] [proxy_fcgi:error] [pid 3698:tid 3707] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:50.382742 2026] [proxy_fcgi:error] [pid 3698:tid 3709] [client 20.226.80.139:9107] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:54:50.882116 2026] [:error] [pid 3698:tid 3721] [client 20.226.80.139:9107] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ahQqegtZBEwA4fyFLKPhLQAAARU"]
[Mon May 25 18:54:53.858581 2026] [:error] [pid 62515:tid 62536] [client 20.226.80.139:9179] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ahQqfRig0_XsOwmnrv8dMgAAANM"]
[Mon May 25 18:54:55.525760 2026] [:error] [pid 3698:tid 3719] [client 20.226.80.139:9028] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ahQqfwtZBEwA4fyFLKPhMwAAARM"]
[Mon May 25 18:54:57.305111 2026] [:error] [pid 62427:tid 62472] [client 20.226.80.139:9149] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/acp.php"] [unique_id "ahQqgfMUa83fc4GDyBxxEgAAAU8"]
[Mon May 25 18:55:00.808432 2026] [:error] [pid 62722:tid 62746] [client 20.226.80.139:9129] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "ahQqhKM6ssnLWYf6CVA87QAAAFY"]
[Mon May 25 18:55:03.094067 2026] [:error] [pid 62428:tid 62502] [client 20.226.80.139:9054] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "ahQqh5NosGBa7mui3VQ0NgAAAJI"]
[Mon May 25 18:55:04.111590 2026] [:error] [pid 53791:tid 53795] [client 20.226.80.139:9033] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "ahQqiCCRhhNTD40Nf1UIUwAAAYI"]
[Mon May 25 18:55:06.504419 2026] [:error] [pid 62428:tid 62495] [client 20.226.80.139:9213] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wps.php"] [unique_id "ahQqipNosGBa7mui3VQ0OwAAAIs"]
[Mon May 25 18:55:09.835569 2026] [:error] [pid 62515:tid 62535] [client 20.226.80.139:9041] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ahQqjRig0_XsOwmnrv8dTQAAANI"]
[Mon May 25 18:55:11.923094 2026] [:error] [pid 53791:tid 53805] [client 20.226.80.139:9161] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ahQqjyCRhhNTD40Nf1UIWAAAAYw"]
[Mon May 25 18:55:13.712027 2026] [:error] [pid 3698:tid 3711] [client 20.226.80.139:9170] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ahQqkQtZBEwA4fyFLKPhQwAAAQs"]
[Mon May 25 18:55:15.515139 2026] [:error] [pid 3698:tid 3713] [client 20.226.80.139:9175] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/alpha.php"] [unique_id "ahQqkwtZBEwA4fyFLKPhRwAAAQ0"]
[Mon May 25 18:55:17.013246 2026] [:error] [pid 3698:tid 3716] [client 20.226.80.139:9037] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bob.php"] [unique_id "ahQqlQtZBEwA4fyFLKPhSwAAARA"]
[Mon May 25 18:55:18.059875 2026] [:error] [pid 3698:tid 3710] [client 20.226.80.139:9130] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bob.php"] [unique_id "ahQqlgtZBEwA4fyFLKPhTgAAAQo"]
[Mon May 25 18:55:19.464412 2026] [:error] [pid 62428:tid 62495] [client 20.226.80.139:9197] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bob.php"] [unique_id "ahQql5NosGBa7mui3VQ0RgAAAIs"]
[Mon May 25 18:55:20.398586 2026] [:error] [pid 62722:tid 62743] [client 20.226.80.139:9126] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bob.php"] [unique_id "ahQqmKM6ssnLWYf6CVA8-QAAAFM"]
[Mon May 25 18:55:21.741488 2026] [:error] [pid 62427:tid 62478] [client 20.226.80.139:9100] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ahQqmfMUa83fc4GDyBxxIgAAAVU"]
[Mon May 25 18:55:22.909565 2026] [:error] [pid 62428:tid 62491] [client 20.226.80.139:9042] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ahQqmpNosGBa7mui3VQ0TgAAAIc"]
[Mon May 25 18:55:23.972105 2026] [:error] [pid 62515:tid 62538] [client 20.226.80.139:9202] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ahQqmxig0_XsOwmnrv8dXAAAANU"]
[Mon May 25 18:55:25.764728 2026] [:error] [pid 53791:tid 53810] [client 20.226.80.139:9035] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/yuzuru1.php"] [unique_id "ahQqnSCRhhNTD40Nf1UIXwAAAZE"]
[Mon May 25 18:55:26.648852 2026] [:error] [pid 62428:tid 62490] [client 20.226.80.139:9201] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahQqnpNosGBa7mui3VQ0VgAAAIY"]
[Mon May 25 18:55:27.528158 2026] [:error] [pid 62427:tid 62466] [client 20.226.80.139:9165] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahQqn_MUa83fc4GDyBxxJwAAAUk"]
[Mon May 25 18:55:28.408761 2026] [:error] [pid 62427:tid 62469] [client 20.226.80.139:9066] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahQqoPMUa83fc4GDyBxxKQAAAUw"]
[Mon May 25 18:55:29.678021 2026] [:error] [pid 62427:tid 62475] [client 20.226.80.139:9027] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/insta.php"] [unique_id "ahQqofMUa83fc4GDyBxxLgAAAVI"]
[Mon May 25 18:55:30.616565 2026] [:error] [pid 62427:tid 62478] [client 20.226.80.139:9191] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ahQqovMUa83fc4GDyBxxMAAAAVU"]
[Mon May 25 18:55:31.617976 2026] [:error] [pid 62427:tid 62471] [client 20.226.80.139:9198] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ahQqo_MUa83fc4GDyBxxOQAAAU4"]
[Mon May 25 18:55:32.603410 2026] [:error] [pid 53791:tid 53802] [client 20.226.80.139:9106] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ahQqpCCRhhNTD40Nf1UIagAAAYk"]
[Mon May 25 18:55:33.633645 2026] [:error] [pid 3698:tid 3712] [client 20.226.80.139:9124] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-kz.php"] [unique_id "ahQqpQtZBEwA4fyFLKPhVQAAAQw"]
[Mon May 25 18:55:34.501837 2026] [:error] [pid 53791:tid 53811] [client 20.226.80.139:9040] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ahQqpiCRhhNTD40Nf1UIbgAAAZI"]
[Mon May 25 18:55:35.507463 2026] [:error] [pid 62428:tid 62500] [client 20.226.80.139:9047] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ahQqp5NosGBa7mui3VQ0WAAAAJA"]
[Mon May 25 18:55:37.499098 2026] [:error] [pid 62428:tid 62490] [client 20.226.80.139:9090] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ahQqqZNosGBa7mui3VQ0XAAAAIY"]
[Mon May 25 18:55:38.522152 2026] [:error] [pid 62427:tid 62459] [client 20.226.80.139:9108] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xs.php"] [unique_id "ahQqqvMUa83fc4GDyBxxPQAAAUI"]
[Mon May 25 18:55:39.396114 2026] [:error] [pid 62426:tid 62453] [client 20.226.80.139:9101] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "ahQqq0j3D3Mo8ANpTRDpIwAAABc"]
[Mon May 25 18:55:40.651448 2026] [:error] [pid 62722:tid 62747] [client 20.226.80.139:9176] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "ahQqrKM6ssnLWYf6CVA9CQAAAFc"]
[Mon May 25 18:55:41.987182 2026] [:error] [pid 62515:tid 62528] [client 20.226.80.139:9028] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "ahQqrRig0_XsOwmnrv8dYwAAAMs"]
[Mon May 25 18:55:42.854529 2026] [:error] [pid 3698:tid 3700] [client 20.226.80.139:8974] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/2026w.php"] [unique_id "ahQqrgtZBEwA4fyFLKPhYgAAAQA"]
[Mon May 25 18:55:44.034602 2026] [:error] [pid 3698:tid 3719] [client 20.226.80.139:9189] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ahQqsAtZBEwA4fyFLKPhZAAAARM"]
[Mon May 25 18:55:45.383534 2026] [:error] [pid 62428:tid 62495] [client 20.226.80.139:9098] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ahQqsZNosGBa7mui3VQ0ZAAAAIs"]
[Mon May 25 18:55:46.522583 2026] [:error] [pid 62722:tid 62734] [client 20.226.80.139:9135] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ahQqsqM6ssnLWYf6CVA9EgAAAEo"]
[Mon May 25 18:55:47.290829 2026] [:error] [pid 62722:tid 62726] [client 20.226.80.139:9181] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/f35.php"] [unique_id "ahQqs6M6ssnLWYf6CVA9EwAAAEI"]
[Mon May 25 18:55:48.382699 2026] [:error] [pid 62515:tid 62522] [client 20.226.80.139:9155] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ahQqtBig0_XsOwmnrv8dZgAAAMU"]
[Mon May 25 18:55:49.745450 2026] [:error] [pid 3698:tid 3712] [client 20.226.80.139:9190] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xwx1.php"] [unique_id "ahQqtQtZBEwA4fyFLKPhagAAAQw"]
[Mon May 25 18:55:50.569696 2026] [proxy_fcgi:error] [pid 62426:tid 62432] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:50.883248 2026] [proxy_fcgi:error] [pid 62426:tid 62447] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:51.196883 2026] [proxy_fcgi:error] [pid 62426:tid 62446] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:51.523989 2026] [proxy_fcgi:error] [pid 62426:tid 62435] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:51.854793 2026] [proxy_fcgi:error] [pid 62426:tid 62436] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:52.166249 2026] [proxy_fcgi:error] [pid 62426:tid 62433] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:52.478713 2026] [proxy_fcgi:error] [pid 62426:tid 62442] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:52.792746 2026] [proxy_fcgi:error] [pid 62426:tid 62445] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:53.128733 2026] [proxy_fcgi:error] [pid 62426:tid 62441] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:53.441676 2026] [proxy_fcgi:error] [pid 62426:tid 62443] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:53.802281 2026] [proxy_fcgi:error] [pid 62426:tid 62440] [client 20.226.80.139:9082] AH01071: Got error 'Primary script unknown'
[Mon May 25 18:55:54.111020 2026] [:error] [pid 62426:tid 62447] [client 20.226.80.139:9082] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3369.php"] [unique_id "ahQqukj3D3Mo8ANpTRDpQAAAABE"]
[Mon May 25 18:55:55.337905 2026] [:error] [pid 62428:tid 62489] [client 20.226.80.139:9105] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3369.php"] [unique_id "ahQqu5NosGBa7mui3VQ0ewAAAIU"]
[Mon May 25 18:55:56.642535 2026] [:error] [pid 62428:tid 62493] [client 20.226.80.139:9157] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3369.php"] [unique_id "ahQqvJNosGBa7mui3VQ0hAAAAIk"]
[Mon May 25 18:55:57.770777 2026] [:error] [pid 62722:tid 62731] [client 20.226.80.139:8986] [client 20.226.80.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/3369.php"] [unique_id "ahQqvaM6ssnLWYf6CVA9FwAAAEc"]
[Mon May 25 20:21:12.928349 2026] [proxy_fcgi:error] [pid 62722:tid 62724] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:13.212060 2026] [proxy_fcgi:error] [pid 62722:tid 62734] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:13.474428 2026] [proxy_fcgi:error] [pid 62722:tid 62739] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:13.770170 2026] [proxy_fcgi:error] [pid 62722:tid 62743] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:14.026646 2026] [:error] [pid 62722:tid 62735] [client 20.151.218.248:58504] [client 20.151.218.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.218.248, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ahQ-uqM6ssnLWYf6CVBJAQAAAEs"]
[Mon May 25 20:21:14.335954 2026] [proxy_fcgi:error] [pid 62722:tid 62742] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:14.600461 2026] [proxy_fcgi:error] [pid 62722:tid 62726] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:14.862368 2026] [proxy_fcgi:error] [pid 62722:tid 62748] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:15.127128 2026] [:error] [pid 62722:tid 62729] [client 20.151.218.248:58504] [client 20.151.218.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.218.248, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "ahQ-u6M6ssnLWYf6CVBJBQAAAEU"]
[Mon May 25 20:21:15.131524 2026] [proxy_fcgi:error] [pid 62722:tid 62729] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:15.417033 2026] [proxy_fcgi:error] [pid 62722:tid 62727] [client 20.151.218.248:58504] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:21:15.676851 2026] [:error] [pid 62722:tid 62730] [client 20.151.218.248:58504] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ-u6M6ssnLWYf6CVBJBwAAAEY"]
[Mon May 25 20:21:16.391335 2026] [:error] [pid 62722:tid 62736] [client 20.151.218.248:58570] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ-vKM6ssnLWYf6CVBJCAAAAEw"]
[Mon May 25 20:21:17.087026 2026] [:error] [pid 62515:tid 62532] [client 20.151.218.248:58594] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ-vRig0_XsOwmnrv82nwAAAM8"]
[Mon May 25 20:21:17.728799 2026] [:error] [pid 62428:tid 62505] [client 20.151.218.248:58604] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ-vZNosGBa7mui3VRScQAAAJU"]
[Mon May 25 20:21:18.902676 2026] [:error] [pid 3698:tid 3703] [client 20.151.218.248:58620] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ-vgtZBEwA4fyFLKPvOQAAAQM"]
[Mon May 25 20:21:19.340777 2026] [:error] [pid 53791:tid 53814] [client 20.151.218.248:58621] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ-vyCRhhNTD40Nf1UX4gAAAZU"]
[Mon May 25 20:21:19.929493 2026] [:error] [pid 62515:tid 62520] [client 20.151.218.248:58623] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ-vxig0_XsOwmnrv82ogAAAMM"]
[Mon May 25 20:21:20.414979 2026] [:error] [pid 62426:tid 62449] [client 20.151.218.248:58563] [client 20.151.218.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ-wEj3D3Mo8ANpTRD8gQAAABM"]
[Mon May 25 20:23:43.203013 2026] [proxy_fcgi:error] [pid 53791:tid 53797] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:43.469989 2026] [proxy_fcgi:error] [pid 53791:tid 53804] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:43.750426 2026] [proxy_fcgi:error] [pid 53791:tid 53793] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:43.988103 2026] [proxy_fcgi:error] [pid 53791:tid 53803] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:44.417030 2026] [:error] [pid 53791:tid 53806] [client 20.12.182.70:11138] [client 20.12.182.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.12.182.70, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ahQ_UCCRhhNTD40Nf1UYUwAAAY0"]
[Mon May 25 20:23:44.718146 2026] [proxy_fcgi:error] [pid 53791:tid 53798] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:44.959152 2026] [proxy_fcgi:error] [pid 53791:tid 53816] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:45.299006 2026] [proxy_fcgi:error] [pid 53791:tid 53808] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:45.604868 2026] [:error] [pid 53791:tid 53800] [client 20.12.182.70:11138] [client 20.12.182.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.12.182.70, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-login.php"] [unique_id "ahQ_USCRhhNTD40Nf1UYWAAAAYc"]
[Mon May 25 20:23:45.609490 2026] [proxy_fcgi:error] [pid 53791:tid 53800] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:45.845938 2026] [proxy_fcgi:error] [pid 53791:tid 53799] [client 20.12.182.70:11138] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:23:46.078849 2026] [:error] [pid 53791:tid 53810] [client 20.12.182.70:11138] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ_UiCRhhNTD40Nf1UYWgAAAZE"]
[Mon May 25 20:23:46.602369 2026] [:error] [pid 62426:tid 62438] [client 20.12.182.70:11143] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ_Ukj3D3Mo8ANpTRD9AQAAAAg"]
[Mon May 25 20:23:47.208955 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11148] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ_Uxig0_XsOwmnrv83JwAAANU"]
[Mon May 25 20:23:47.793279 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11206] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahQ_UwtZBEwA4fyFLKPvawAAAQ8"]
[Mon May 25 20:23:48.246310 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:11221] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ_VBig0_XsOwmnrv83KgAAAM8"]
[Mon May 25 20:23:48.819764 2026] [:error] [pid 62426:tid 62436] [client 20.12.182.70:11205] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ_VEj3D3Mo8ANpTRD9BQAAAAY"]
[Mon May 25 20:23:49.594340 2026] [:error] [pid 62515:tid 62537] [client 20.12.182.70:11137] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ_VRig0_XsOwmnrv83LAAAANQ"]
[Mon May 25 20:23:50.304484 2026] [:error] [pid 62426:tid 62439] [client 20.12.182.70:11149] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2025/"] [unique_id "ahQ_Vkj3D3Mo8ANpTRD9BgAAAAk"]
[Mon May 25 20:23:50.884174 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:11233] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ahQ_VpNosGBa7mui3VRTWAAAAIs"]
[Mon May 25 20:23:51.329774 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11147] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ahQ_V5NosGBa7mui3VRTWQAAAJM"]
[Mon May 25 20:23:51.792432 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:11250] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ahQ_V0j3D3Mo8ANpTRD9CwAAAAo"]
[Mon May 25 20:23:52.331170 2026] [:error] [pid 3698:tid 3704] [client 20.12.182.70:11230] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.php"] [unique_id "ahQ_WAtZBEwA4fyFLKPvbgAAAQQ"]
[Mon May 25 20:23:52.783108 2026] [:error] [pid 62722:tid 62734] [client 20.12.182.70:11196] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahQ_WKM6ssnLWYf6CVBJZQAAAEo"]
[Mon May 25 20:23:53.231765 2026] [:error] [pid 62515:tid 62525] [client 20.12.182.70:11249] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahQ_WRig0_XsOwmnrv83MgAAAMg"]
[Mon May 25 20:23:53.892969 2026] [:error] [pid 62722:tid 62727] [client 20.12.182.70:11245] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahQ_WaM6ssnLWYf6CVBJaAAAAEM"]
[Mon May 25 20:23:54.472960 2026] [:error] [pid 62515:tid 62535] [client 20.12.182.70:11073] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.php"] [unique_id "ahQ_Whig0_XsOwmnrv83NQAAANI"]
[Mon May 25 20:23:54.935443 2026] [:error] [pid 3698:tid 3711] [client 20.12.182.70:11229] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/login.php"] [unique_id "ahQ_WgtZBEwA4fyFLKPvdQAAAQs"]
[Mon May 25 20:23:55.535813 2026] [:error] [pid 62426:tid 62443] [client 20.12.182.70:11241] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/login.php"] [unique_id "ahQ_W0j3D3Mo8ANpTRD9DQAAAA0"]
[Mon May 25 20:23:55.993618 2026] [:error] [pid 62426:tid 62451] [client 20.12.182.70:11228] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/login.php"] [unique_id "ahQ_W0j3D3Mo8ANpTRD9FAAAABU"]
[Mon May 25 20:23:56.479553 2026] [:error] [pid 62515:tid 62536] [client 20.12.182.70:11154] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/upload/login.php"] [unique_id "ahQ_XBig0_XsOwmnrv83QwAAANM"]
[Mon May 25 20:23:56.917665 2026] [:error] [pid 62515:tid 62524] [client 20.12.182.70:11244] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ahQ_XBig0_XsOwmnrv83RAAAAMc"]
[Mon May 25 20:23:57.409922 2026] [:error] [pid 62426:tid 62431] [client 20.12.182.70:11142] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ahQ_XUj3D3Mo8ANpTRD9FwAAAAE"]
[Mon May 25 20:23:57.941953 2026] [:error] [pid 3698:tid 3720] [client 20.12.182.70:11235] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ahQ_XQtZBEwA4fyFLKPvdwAAARQ"]
[Mon May 25 20:23:58.401451 2026] [:error] [pid 62427:tid 62470] [client 20.12.182.70:11209] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/adminfuns.php"] [unique_id "ahQ_XvMUa83fc4GDyBx7BwAAAU0"]
[Mon May 25 20:23:58.986535 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:11226] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/index.php"] [unique_id "ahQ_XpNosGBa7mui3VRTYQAAAIY"]
[Mon May 25 20:23:59.469151 2026] [:error] [pid 62722:tid 62746] [client 20.12.182.70:11180] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ahQ_X6M6ssnLWYf6CVBJaQAAAFY"]
[Mon May 25 20:23:59.993832 2026] [:error] [pid 62428:tid 62505] [client 20.12.182.70:11218] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ahQ_X5NosGBa7mui3VRTZQAAAJU"]
[Mon May 25 20:24:00.576584 2026] [:error] [pid 53791:tid 53815] [client 20.12.182.70:11160] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ahQ_YCCRhhNTD40Nf1UYYgAAAZY"]
[Mon May 25 20:24:01.372788 2026] [:error] [pid 3698:tid 3704] [client 20.12.182.70:11260] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/index.php"] [unique_id "ahQ_YQtZBEwA4fyFLKPvfAAAAQQ"]
[Mon May 25 20:24:01.990531 2026] [:error] [pid 3698:tid 3710] [client 20.12.182.70:11170] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ahQ_YQtZBEwA4fyFLKPvfgAAAQo"]
[Mon May 25 20:24:02.565994 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11251] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ahQ_YpNosGBa7mui3VRTagAAAI8"]
[Mon May 25 20:24:03.013845 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:11151] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ahQ_YyCRhhNTD40Nf1UYZwAAAYQ"]
[Mon May 25 20:24:03.491858 2026] [:error] [pid 53791:tid 53793] [client 20.12.182.70:11240] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about.php"] [unique_id "ahQ_YyCRhhNTD40Nf1UYaQAAAYA"]
[Mon May 25 20:24:04.298888 2026] [:error] [pid 53791:tid 53812] [client 20.12.182.70:11141] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/"] [unique_id "ahQ_ZCCRhhNTD40Nf1UYbAAAAZM"]
[Mon May 25 20:24:04.903524 2026] [:error] [pid 62428:tid 62504] [client 20.12.182.70:11231] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/"] [unique_id "ahQ_ZJNosGBa7mui3VRTbQAAAJQ"]
[Mon May 25 20:24:05.495907 2026] [:error] [pid 62428:tid 62498] [client 20.12.182.70:11195] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/"] [unique_id "ahQ_ZZNosGBa7mui3VRTbwAAAI4"]
[Mon May 25 20:24:06.225743 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11191] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/"] [unique_id "ahQ_ZpNosGBa7mui3VRTcgAAAJA"]
[Mon May 25 20:24:06.834693 2026] [:error] [pid 53791:tid 53808] [client 20.12.182.70:11243] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ahQ_ZiCRhhNTD40Nf1UYbwAAAY8"]
[Mon May 25 20:24:07.282084 2026] [:error] [pid 62428:tid 62508] [client 20.12.182.70:11176] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ahQ_Z5NosGBa7mui3VRTdQAAAJg"]
[Mon May 25 20:24:08.058832 2026] [:error] [pid 62427:tid 62476] [client 20.12.182.70:11095] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ahQ_aPMUa83fc4GDyBx7CwAAAVM"]
[Mon May 25 20:24:08.502690 2026] [:error] [pid 53791:tid 53814] [client 20.12.182.70:11200] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ahQ_aCCRhhNTD40Nf1UYcAAAAZU"]
[Mon May 25 20:24:08.941048 2026] [:error] [pid 53791:tid 53817] [client 20.12.182.70:11155] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ahQ_aCCRhhNTD40Nf1UYcQAAAZg"]
[Mon May 25 20:24:09.443931 2026] [:error] [pid 62427:tid 62480] [client 20.12.182.70:11113] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ahQ_afMUa83fc4GDyBx7DAAAAVc"]
[Mon May 25 20:24:09.862198 2026] [:error] [pid 62426:tid 62448] [client 20.12.182.70:11220] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ahQ_aUj3D3Mo8ANpTRD9IgAAABI"]
[Mon May 25 20:24:10.463463 2026] [:error] [pid 62426:tid 62438] [client 20.12.182.70:11246] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "ahQ_akj3D3Mo8ANpTRD9JAAAAAg"]
[Mon May 25 20:24:10.969818 2026] [:error] [pid 62426:tid 62447] [client 20.12.182.70:11162] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ahQ_akj3D3Mo8ANpTRD9KQAAABE"]
[Mon May 25 20:24:11.631361 2026] [:error] [pid 62722:tid 62741] [client 20.12.182.70:11224] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ahQ_a6M6ssnLWYf6CVBJbgAAAFE"]
[Mon May 25 20:24:12.307135 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:11254] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ahQ_bAtZBEwA4fyFLKPvhgAAAQg"]
[Mon May 25 20:24:13.118628 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11136] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/themes.php"] [unique_id "ahQ_bRig0_XsOwmnrv83TgAAAMA"]
[Mon May 25 20:24:13.854937 2026] [:error] [pid 62426:tid 62451] [client 20.12.182.70:11175] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xml.php"] [unique_id "ahQ_bUj3D3Mo8ANpTRD9LQAAABU"]
[Mon May 25 20:24:14.434873 2026] [:error] [pid 62428:tid 62485] [client 20.12.182.70:11172] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xml.php"] [unique_id "ahQ_bpNosGBa7mui3VRTegAAAIE"]
[Mon May 25 20:24:15.206453 2026] [:error] [pid 3698:tid 3721] [client 20.12.182.70:11216] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xml.php"] [unique_id "ahQ_bwtZBEwA4fyFLKPviAAAARU"]
[Mon May 25 20:24:16.037129 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11194] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/xml.php"] [unique_id "ahQ_cJNosGBa7mui3VRTfQAAAJM"]
[Mon May 25 20:24:17.105603 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11198] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/about.php"] [unique_id "ahQ_cZNosGBa7mui3VRTgwAAAIA"]
[Mon May 25 20:24:18.394333 2026] [:error] [pid 62515:tid 62523] [client 20.12.182.70:11217] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "ahQ_chig0_XsOwmnrv83WAAAAMY"]
[Mon May 25 20:24:21.107962 2026] [:error] [pid 62426:tid 62454] [client 20.12.182.70:11238] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ahQ_dUj3D3Mo8ANpTRD9OQAAABg"]
[Mon May 25 20:24:22.196795 2026] [:error] [pid 62427:tid 62463] [client 20.12.182.70:11018] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ahQ_dvMUa83fc4GDyBx7EQAAAUY"]
[Mon May 25 20:24:23.436045 2026] [:error] [pid 62427:tid 62475] [client 20.12.182.70:11159] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ahQ_d_MUa83fc4GDyBx7EgAAAVI"]
[Mon May 25 20:24:24.755184 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11237] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hplfuns.php"] [unique_id "ahQ_eJNosGBa7mui3VRTnwAAAI8"]
[Mon May 25 20:24:25.441968 2026] [:error] [pid 53791:tid 53796] [client 20.12.182.70:11247] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ahQ_eSCRhhNTD40Nf1UYewAAAYM"]
[Mon May 25 20:24:26.036573 2026] [:error] [pid 62426:tid 62451] [client 20.12.182.70:11262] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ahQ_ekj3D3Mo8ANpTRD9QQAAABU"]
[Mon May 25 20:24:26.616478 2026] [:error] [pid 62427:tid 62468] [client 20.12.182.70:11257] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ahQ_evMUa83fc4GDyBx7HQAAAUs"]
[Mon May 25 20:24:27.263677 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:11248] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp.php"] [unique_id "ahQ_eyCRhhNTD40Nf1UYfgAAAYQ"]
[Mon May 25 20:24:27.849363 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11178] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admiin.php"] [unique_id "ahQ_e5NosGBa7mui3VRTpwAAAJA"]
[Mon May 25 20:24:28.302974 2026] [:error] [pid 62722:tid 62746] [client 20.12.182.70:11087] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "ahQ_fKM6ssnLWYf6CVBJdAAAAFY"]
[Mon May 25 20:24:28.781646 2026] [:error] [pid 53791:tid 53807] [client 20.12.182.70:11017] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "ahQ_fCCRhhNTD40Nf1UYfwAAAY4"]
[Mon May 25 20:24:29.257678 2026] [:error] [pid 53791:tid 53801] [client 20.12.182.70:11091] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "ahQ_fSCRhhNTD40Nf1UYgAAAAYg"]
[Mon May 25 20:24:29.821851 2026] [:error] [pid 53791:tid 53804] [client 20.12.182.70:11207] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "ahQ_fSCRhhNTD40Nf1UYgQAAAYs"]
[Mon May 25 20:24:30.518789 2026] [:error] [pid 62427:tid 62465] [client 20.12.182.70:11204] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahQ_fvMUa83fc4GDyBx7IwAAAUg"]
[Mon May 25 20:24:31.133551 2026] [:error] [pid 62515:tid 62540] [client 20.12.182.70:11210] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahQ_fxig0_XsOwmnrv83cAAAANc"]
[Mon May 25 20:24:31.655777 2026] [:error] [pid 62722:tid 62731] [client 20.12.182.70:11263] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahQ_f6M6ssnLWYf6CVBJeAAAAEc"]
[Mon May 25 20:24:32.320957 2026] [:error] [pid 62722:tid 62735] [client 20.12.182.70:11166] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file.php"] [unique_id "ahQ_gKM6ssnLWYf6CVBJegAAAEs"]
[Mon May 25 20:24:32.844052 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11227] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "ahQ_gBig0_XsOwmnrv83cgAAAMA"]
[Mon May 25 20:24:33.301859 2026] [:error] [pid 62427:tid 62464] [client 20.12.182.70:11234] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "ahQ_gfMUa83fc4GDyBx7JQAAAUc"]
[Mon May 25 20:24:33.811158 2026] [:error] [pid 62515:tid 62519] [client 20.12.182.70:11211] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "ahQ_gRig0_XsOwmnrv83dQAAAMI"]
[Mon May 25 20:24:34.777089 2026] [:error] [pid 62428:tid 62498] [client 20.12.182.70:11258] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/codemirror/"] [unique_id "ahQ_gpNosGBa7mui3VRTqwAAAI4"]
[Mon May 25 20:24:35.266270 2026] [:error] [pid 62515:tid 62541] [client 20.12.182.70:11177] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ahQ_gxig0_XsOwmnrv83dwAAANg"]
[Mon May 25 20:24:35.705892 2026] [:error] [pid 62515:tid 62535] [client 20.12.182.70:11083] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ahQ_gxig0_XsOwmnrv83eAAAANI"]
[Mon May 25 20:24:36.311446 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11236] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ahQ_hJNosGBa7mui3VRTrgAAAIA"]
[Mon May 25 20:24:36.740586 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:11202] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/shell.php"] [unique_id "ahQ_hJNosGBa7mui3VRTsQAAAJY"]
[Mon May 25 20:24:37.348217 2026] [:error] [pid 62428:tid 62491] [client 20.12.182.70:11114] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "ahQ_hZNosGBa7mui3VRTsgAAAIc"]
[Mon May 25 20:24:37.865394 2026] [:error] [pid 62428:tid 62493] [client 20.12.182.70:11128] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "ahQ_hZNosGBa7mui3VRTtAAAAIk"]
[Mon May 25 20:24:38.410190 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:11225] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "ahQ_hpNosGBa7mui3VRTtwAAAIU"]
[Mon May 25 20:24:39.090174 2026] [:error] [pid 62428:tid 62487] [client 20.12.182.70:11163] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/css/index.php"] [unique_id "ahQ_h5NosGBa7mui3VRTuwAAAIM"]
[Mon May 25 20:24:39.835017 2026] [:error] [pid 62428:tid 62485] [client 20.12.182.70:11081] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "ahQ_h5NosGBa7mui3VRTvgAAAIE"]
[Mon May 25 20:24:40.707376 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:11094] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "ahQ_iJNosGBa7mui3VRTwgAAAJc"]
[Mon May 25 20:24:41.350882 2026] [:error] [pid 3698:tid 3724] [client 20.12.182.70:11072] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "ahQ_iQtZBEwA4fyFLKPvmQAAARg"]
[Mon May 25 20:24:41.935033 2026] [:error] [pid 62515:tid 62518] [client 20.12.182.70:11058] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/dropdown.php"] [unique_id "ahQ_iRig0_XsOwmnrv83egAAAME"]
[Mon May 25 20:24:42.423995 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11153] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/themes.php"] [unique_id "ahQ_igtZBEwA4fyFLKPvnAAAAQ8"]
[Mon May 25 20:24:42.875818 2026] [:error] [pid 62428:tid 62487] [client 20.12.182.70:11239] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/themes.php"] [unique_id "ahQ_ipNosGBa7mui3VRTwwAAAIM"]
[Mon May 25 20:24:43.464157 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:11259] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/themes.php"] [unique_id "ahQ_i5NosGBa7mui3VRTxAAAAJY"]
[Mon May 25 20:24:44.034548 2026] [:error] [pid 53791:tid 53798] [client 20.12.182.70:11144] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/themes.php"] [unique_id "ahQ_jCCRhhNTD40Nf1UYjQAAAYU"]
[Mon May 25 20:24:44.624671 2026] [:error] [pid 3698:tid 3705] [client 20.12.182.70:11140] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/08/"] [unique_id "ahQ_jAtZBEwA4fyFLKPvoAAAAQU"]
[Mon May 25 20:24:46.332758 2026] [:error] [pid 53791:tid 53795] [client 20.12.182.70:11214] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/index.php"] [unique_id "ahQ_jiCRhhNTD40Nf1UYmAAAAYI"]
[Mon May 25 20:24:46.893332 2026] [proxy_fcgi:error] [pid 3698:tid 3716] [client 20.12.182.70:11123] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:24:48.460633 2026] [proxy_fcgi:error] [pid 3698:tid 3721] [client 20.12.182.70:11123] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:24:48.853974 2026] [:error] [pid 3698:tid 3705] [client 20.12.182.70:11123] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "ahQ_kAtZBEwA4fyFLKPvrQAAAQU"]
[Mon May 25 20:24:49.774567 2026] [:error] [pid 62427:tid 62481] [client 20.12.182.70:11167] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "ahQ_kfMUa83fc4GDyBx7KgAAAVg"]
[Mon May 25 20:24:50.444940 2026] [:error] [pid 62427:tid 62458] [client 20.12.182.70:11181] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "ahQ_kvMUa83fc4GDyBx7LQAAAUE"]
[Mon May 25 20:24:51.100387 2026] [:error] [pid 62427:tid 62464] [client 20.12.182.70:11204] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/content.php"] [unique_id "ahQ_k_MUa83fc4GDyBx7MQAAAUc"]
[Mon May 25 20:24:51.518339 2026] [:error] [pid 62427:tid 62463] [client 20.12.182.70:11173] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "ahQ_k_MUa83fc4GDyBx7MwAAAUY"]
[Mon May 25 20:24:51.964723 2026] [:error] [pid 62427:tid 62457] [client 20.12.182.70:11189] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "ahQ_k_MUa83fc4GDyBx7NwAAAUA"]
[Mon May 25 20:24:52.360820 2026] [:error] [pid 62428:tid 62505] [client 20.12.182.70:11121] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "ahQ_lJNosGBa7mui3VRTyQAAAJU"]
[Mon May 25 20:24:52.873333 2026] [:error] [pid 62427:tid 62470] [client 20.12.182.70:11201] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-bindings/"] [unique_id "ahQ_lPMUa83fc4GDyBx7OQAAAU0"]
[Mon May 25 20:24:53.368053 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:11100] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "ahQ_lRig0_XsOwmnrv83fQAAAM8"]
[Mon May 25 20:24:53.860515 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:11222] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "ahQ_lZNosGBa7mui3VRTygAAAIU"]
[Mon May 25 20:24:54.302120 2026] [:error] [pid 62722:tid 62728] [client 20.12.182.70:11038] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "ahQ_lqM6ssnLWYf6CVBJigAAAEQ"]
[Mon May 25 20:24:54.859401 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11097] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/"] [unique_id "ahQ_lgtZBEwA4fyFLKPvrwAAAQ8"]
[Mon May 25 20:24:55.661201 2026] [:error] [pid 62427:tid 62473] [client 20.12.182.70:11016] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/index.php"] [unique_id "ahQ_l_MUa83fc4GDyBx7OgAAAVA"]
[Mon May 25 20:24:56.307712 2026] [:error] [pid 62427:tid 62457] [client 20.12.182.70:11232] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "ahQ_mPMUa83fc4GDyBx7OwAAAUA"]
[Mon May 25 20:24:57.040173 2026] [:error] [pid 3698:tid 3722] [client 20.12.182.70:11253] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "ahQ_mQtZBEwA4fyFLKPvsAAAARY"]
[Mon May 25 20:24:57.984168 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11168] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "ahQ_mZNosGBa7mui3VRTzwAAAIA"]
[Mon May 25 20:24:58.797605 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:11199] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/function.php"] [unique_id "ahQ_mpNosGBa7mui3VRT0QAAAIs"]
[Mon May 25 20:24:59.478150 2026] [:error] [pid 62515:tid 62520] [client 20.12.182.70:11106] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/index.php"] [unique_id "ahQ_mxig0_XsOwmnrv83gQAAAMM"]
[Mon May 25 20:25:00.970282 2026] [:error] [pid 62722:tid 62725] [client 20.12.182.70:11085] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/index.php"] [unique_id "ahQ_nKM6ssnLWYf6CVBJjwAAAEE"]
[Mon May 25 20:25:01.458682 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:11169] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/index.php"] [unique_id "ahQ_nZNosGBa7mui3VRT1QAAAI0"]
[Mon May 25 20:25:02.101102 2026] [:error] [pid 62428:tid 62492] [client 20.12.182.70:11261] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/index.php"] [unique_id "ahQ_npNosGBa7mui3VRT1gAAAIg"]
[Mon May 25 20:25:02.695217 2026] [:error] [pid 62515:tid 62518] [client 20.12.182.70:11157] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "ahQ_nhig0_XsOwmnrv83hAAAAME"]
[Mon May 25 20:25:03.505510 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:11219] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "ahQ_n6M6ssnLWYf6CVBJkgAAAEw"]
[Mon May 25 20:25:04.170338 2026] [:error] [pid 3698:tid 3705] [client 20.12.182.70:11223] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "ahQ_oAtZBEwA4fyFLKPvtAAAAQU"]
[Mon May 25 20:25:05.293410 2026] [:error] [pid 3698:tid 3712] [client 20.12.182.70:11080] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/new4.php"] [unique_id "ahQ_oQtZBEwA4fyFLKPvtQAAAQw"]
[Mon May 25 20:25:05.924004 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:11117] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/images/about.php"] [unique_id "ahQ_oRig0_XsOwmnrv83iQAAAMw"]
[Mon May 25 20:25:07.168501 2026] [:error] [pid 62426:tid 62441] [client 20.12.182.70:11179] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/images/about.php"] [unique_id "ahQ_o0j3D3Mo8ANpTRD9RgAAAAs"]
[Mon May 25 20:25:07.787951 2026] [:error] [pid 62426:tid 62434] [client 20.12.182.70:11190] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/images/about.php"] [unique_id "ahQ_o0j3D3Mo8ANpTRD9SAAAAAQ"]
[Mon May 25 20:25:09.002443 2026] [:error] [pid 62722:tid 62732] [client 20.12.182.70:11132] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/images/about.php"] [unique_id "ahQ_paM6ssnLWYf6CVBJlQAAAEg"]
[Mon May 25 20:25:09.630665 2026] [:error] [pid 53791:tid 53800] [client 20.12.182.70:11110] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "ahQ_pSCRhhNTD40Nf1UYowAAAYc"]
[Mon May 25 20:25:10.415515 2026] [:error] [pid 62426:tid 62446] [client 20.12.182.70:11161] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "ahQ_pkj3D3Mo8ANpTRD9SwAAABA"]
[Mon May 25 20:25:11.061337 2026] [:error] [pid 53791:tid 53813] [client 20.12.182.70:11088] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "ahQ_pyCRhhNTD40Nf1UYpQAAAZQ"]
[Mon May 25 20:25:11.790115 2026] [:error] [pid 53791:tid 53809] [client 20.12.182.70:11145] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/defaults.php"] [unique_id "ahQ_pyCRhhNTD40Nf1UYpwAAAZA"]
[Mon May 25 20:25:12.861518 2026] [:error] [pid 62722:tid 62734] [client 20.12.182.70:11077] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-file.php"] [unique_id "ahQ_qKM6ssnLWYf6CVBJlwAAAEo"]
[Mon May 25 20:25:13.533725 2026] [:error] [pid 53791:tid 53801] [client 20.12.182.70:11079] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-file.php"] [unique_id "ahQ_qSCRhhNTD40Nf1UYqAAAAYg"]
[Mon May 25 20:25:14.260501 2026] [:error] [pid 3698:tid 3707] [client 20.12.182.70:11192] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-file.php"] [unique_id "ahQ_qgtZBEwA4fyFLKPvvgAAAQc"]
[Mon May 25 20:25:14.742499 2026] [:error] [pid 62722:tid 62739] [client 20.12.182.70:11150] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-file.php"] [unique_id "ahQ_qqM6ssnLWYf6CVBJmQAAAE8"]
[Mon May 25 20:25:15.368371 2026] [:error] [pid 53791:tid 53806] [client 20.12.182.70:11109] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "ahQ_qyCRhhNTD40Nf1UYqgAAAY0"]
[Mon May 25 20:25:15.794303 2026] [:error] [pid 53791:tid 53810] [client 20.12.182.70:11084] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "ahQ_qyCRhhNTD40Nf1UYrAAAAZE"]
[Mon May 25 20:25:16.205927 2026] [:error] [pid 62722:tid 62725] [client 20.12.182.70:11212] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "ahQ_rKM6ssnLWYf6CVBJmgAAAEE"]
[Mon May 25 20:25:16.673896 2026] [:error] [pid 53791:tid 53816] [client 20.12.182.70:11187] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/upgrade/index.php"] [unique_id "ahQ_rCCRhhNTD40Nf1UYrQAAAZc"]
[Mon May 25 20:25:17.160532 2026] [:error] [pid 3698:tid 3716] [client 20.12.182.70:11171] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "ahQ_rQtZBEwA4fyFLKPvwgAAARA"]
[Mon May 25 20:25:18.032660 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:11030] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "ahQ_rpNosGBa7mui3VRT2wAAAIU"]
[Mon May 25 20:25:19.905471 2026] [:error] [pid 53791:tid 53793] [client 20.12.182.70:11174] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "ahQ_ryCRhhNTD40Nf1UYtAAAAYA"]
[Mon May 25 20:25:20.457542 2026] [:error] [pid 53791:tid 53803] [client 20.12.182.70:11129] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/403.php"] [unique_id "ahQ_sCCRhhNTD40Nf1UYuAAAAYo"]
[Mon May 25 20:25:21.198661 2026] [:error] [pid 62722:tid 62732] [client 20.12.182.70:11108] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "ahQ_saM6ssnLWYf6CVBJowAAAEg"]
[Mon May 25 20:25:21.627467 2026] [:error] [pid 62722:tid 62738] [client 20.12.182.70:11066] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "ahQ_saM6ssnLWYf6CVBJpAAAAE4"]
[Mon May 25 20:25:22.022874 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11075] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "ahQ_shig0_XsOwmnrv83kwAAANU"]
[Mon May 25 20:25:22.603532 2026] [:error] [pid 3698:tid 3711] [client 20.12.182.70:11041] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "ahQ_sgtZBEwA4fyFLKPvxQAAAQs"]
[Mon May 25 20:25:23.149990 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11131] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ahQ_s5NosGBa7mui3VRT4AAAAI8"]
[Mon May 25 20:25:23.536783 2026] [:error] [pid 3698:tid 3718] [client 20.12.182.70:11086] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ahQ_swtZBEwA4fyFLKPvxwAAARI"]
[Mon May 25 20:25:24.262030 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:11185] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ahQ_tJNosGBa7mui3VRT4QAAAIs"]
[Mon May 25 20:25:24.830702 2026] [:error] [pid 53791:tid 53813] [client 20.12.182.70:11076] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aa.php"] [unique_id "ahQ_tCCRhhNTD40Nf1UYwQAAAZQ"]
[Mon May 25 20:25:25.495515 2026] [:error] [pid 62722:tid 62741] [client 20.12.182.70:11213] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/admin.php"] [unique_id "ahQ_taM6ssnLWYf6CVBJpgAAAFE"]
[Mon May 25 20:25:25.912807 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:11119] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/admin.php"] [unique_id "ahQ_tQtZBEwA4fyFLKPvzgAAAQg"]
[Mon May 25 20:25:26.373327 2026] [:error] [pid 62515:tid 62523] [client 20.12.182.70:11074] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/admin.php"] [unique_id "ahQ_thig0_XsOwmnrv83lgAAAMY"]
[Mon May 25 20:25:26.802708 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:11033] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/admin.php"] [unique_id "ahQ_thig0_XsOwmnrv83lwAAAMw"]
[Mon May 25 20:25:27.329262 2026] [:error] [pid 62426:tid 62445] [client 20.12.182.70:11057] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/block/"] [unique_id "ahQ_t0j3D3Mo8ANpTRD9UwAAAA8"]
[Mon May 25 20:25:27.767038 2026] [:error] [pid 3698:tid 3700] [client 20.12.182.70:11139] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/block/"] [unique_id "ahQ_twtZBEwA4fyFLKPv2AAAAQA"]
[Mon May 25 20:25:28.520371 2026] [:error] [pid 62426:tid 62443] [client 20.12.182.70:11146] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/block/"] [unique_id "ahQ_uEj3D3Mo8ANpTRD9VQAAAA0"]
[Mon May 25 20:25:28.993101 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:11188] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/block/"] [unique_id "ahQ_uJNosGBa7mui3VRT5QAAAI0"]
[Mon May 25 20:25:29.399717 2026] [:error] [pid 62515:tid 62521] [client 20.12.182.70:10992] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "ahQ_uRig0_XsOwmnrv83mAAAAMQ"]
[Mon May 25 20:25:29.778912 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11010] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "ahQ_uQtZBEwA4fyFLKPv3wAAAQ8"]
[Mon May 25 20:25:30.352940 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:11134] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "ahQ_ugtZBEwA4fyFLKPv4QAAAQg"]
[Mon May 25 20:25:30.755912 2026] [:error] [pid 62426:tid 62437] [client 20.12.182.70:11255] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/404.php"] [unique_id "ahQ_ukj3D3Mo8ANpTRD9VgAAAAc"]
[Mon May 25 20:25:31.158833 2026] [:error] [pid 53791:tid 53795] [client 20.12.182.70:11056] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "ahQ_uyCRhhNTD40Nf1UYxgAAAYI"]
[Mon May 25 20:25:31.664502 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:11067] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "ahQ_u5NosGBa7mui3VRT5gAAAIU"]
[Mon May 25 20:25:32.127038 2026] [:error] [pid 62515:tid 62534] [client 20.12.182.70:10952] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "ahQ_vBig0_XsOwmnrv83mwAAANE"]
[Mon May 25 20:25:32.519932 2026] [:error] [pid 3698:tid 3704] [client 20.12.182.70:11197] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-2019.php"] [unique_id "ahQ_vAtZBEwA4fyFLKPv5QAAAQQ"]
[Mon May 25 20:25:33.044929 2026] [:error] [pid 3698:tid 3714] [client 20.12.182.70:11107] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit.php"] [unique_id "ahQ_vQtZBEwA4fyFLKPv5gAAAQ4"]
[Mon May 25 20:25:33.547655 2026] [:error] [pid 3698:tid 3706] [client 20.12.182.70:11044] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit.php"] [unique_id "ahQ_vQtZBEwA4fyFLKPv5wAAAQY"]
[Mon May 25 20:25:34.036634 2026] [:error] [pid 3698:tid 3716] [client 20.12.182.70:11092] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit.php"] [unique_id "ahQ_vgtZBEwA4fyFLKPv6QAAARA"]
[Mon May 25 20:25:34.579499 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:11203] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/edit.php"] [unique_id "ahQ_vgtZBEwA4fyFLKPv6gAAAQg"]
[Mon May 25 20:25:35.076842 2026] [:error] [pid 3698:tid 3720] [client 20.12.182.70:11116] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "ahQ_vwtZBEwA4fyFLKPv7AAAARQ"]
[Mon May 25 20:25:35.487343 2026] [:error] [pid 3698:tid 3722] [client 20.12.182.70:11082] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "ahQ_vwtZBEwA4fyFLKPv7gAAARY"]
[Mon May 25 20:25:36.495818 2026] [:error] [pid 3698:tid 3705] [client 20.12.182.70:11037] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "ahQ_wAtZBEwA4fyFLKPv8QAAAQU"]
[Mon May 25 20:25:37.072722 2026] [:error] [pid 3698:tid 3707] [client 20.12.182.70:11019] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/install.php"] [unique_id "ahQ_wQtZBEwA4fyFLKPv9QAAAQc"]
[Mon May 25 20:25:37.465270 2026] [:error] [pid 62515:tid 62519] [client 20.12.182.70:11093] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ahQ_wRig0_XsOwmnrv83nwAAAMI"]
[Mon May 25 20:25:38.075288 2026] [:error] [pid 62515:tid 62536] [client 20.12.182.70:11023] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ahQ_whig0_XsOwmnrv83oAAAANM"]
[Mon May 25 20:25:38.624614 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:11011] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ahQ_wpNosGBa7mui3VRT9QAAAIY"]
[Mon May 25 20:25:39.629250 2026] [:error] [pid 62427:tid 62463] [client 20.12.182.70:11062] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ahQ_w_MUa83fc4GDyBx7RAAAAUY"]
[Mon May 25 20:25:40.710509 2026] [:error] [pid 62427:tid 62466] [client 20.12.182.70:11034] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahQ_xPMUa83fc4GDyBx7RwAAAUk"]
[Mon May 25 20:25:42.063558 2026] [:error] [pid 62515:tid 62537] [client 20.12.182.70:11164] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahQ_xhig0_XsOwmnrv83pQAAANQ"]
[Mon May 25 20:25:42.797517 2026] [:error] [pid 53791:tid 53812] [client 20.12.182.70:10905] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahQ_xiCRhhNTD40Nf1UYzwAAAZM"]
[Mon May 25 20:25:43.387984 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:10953] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/as.php"] [unique_id "ahQ_xwtZBEwA4fyFLKPwCAAAAQI"]
[Mon May 25 20:25:44.043214 2026] [:error] [pid 62426:tid 62434] [client 20.12.182.70:11099] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ab.php"] [unique_id "ahQ_yEj3D3Mo8ANpTRD9XAAAAAQ"]
[Mon May 25 20:25:44.811344 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:11089] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ab.php"] [unique_id "ahQ_yJNosGBa7mui3VRT-QAAAIs"]
[Mon May 25 20:25:45.467704 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11096] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ab.php"] [unique_id "ahQ_yRig0_XsOwmnrv83pwAAAMA"]
[Mon May 25 20:25:46.262993 2026] [:error] [pid 62426:tid 62448] [client 20.12.182.70:11152] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ab.php"] [unique_id "ahQ_ykj3D3Mo8ANpTRD9XwAAABI"]
[Mon May 25 20:25:46.910638 2026] [:error] [pid 62515:tid 62523] [client 20.12.182.70:10956] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "ahQ_yhig0_XsOwmnrv83sQAAAMY"]
[Mon May 25 20:25:47.946270 2026] [:error] [pid 62515:tid 62534] [client 20.12.182.70:11048] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/index.php"] [unique_id "ahQ_yxig0_XsOwmnrv83sgAAANE"]
[Mon May 25 20:25:48.766988 2026] [:error] [pid 3698:tid 3717] [client 20.12.182.70:11125] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "ahQ_zAtZBEwA4fyFLKPwDAAAARE"]
[Mon May 25 20:25:49.317016 2026] [proxy_fcgi:error] [pid 53791:tid 53809] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:49.555807 2026] [proxy_fcgi:error] [pid 53791:tid 53800] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:49.996162 2026] [proxy_fcgi:error] [pid 53791:tid 53803] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:50.390903 2026] [proxy_fcgi:error] [pid 53791:tid 53804] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:50.663647 2026] [proxy_fcgi:error] [pid 53791:tid 53802] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:50.932846 2026] [proxy_fcgi:error] [pid 53791:tid 53812] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:51.238374 2026] [proxy_fcgi:error] [pid 53791:tid 53806] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:51.871516 2026] [proxy_fcgi:error] [pid 53791:tid 53808] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:52.106873 2026] [proxy_fcgi:error] [pid 53791:tid 53805] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:25:52.360815 2026] [:error] [pid 53791:tid 53810] [client 20.12.182.70:11242] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/admin.php"] [unique_id "ahQ_0CCRhhNTD40Nf1UY5gAAAZE"]
[Mon May 25 20:25:52.815034 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:11047] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "ahQ_0KM6ssnLWYf6CVBJvgAAAEw"]
[Mon May 25 20:25:53.223246 2026] [:error] [pid 62428:tid 62486] [client 20.12.182.70:11060] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "ahQ_0ZNosGBa7mui3VRT_QAAAII"]
[Mon May 25 20:25:53.653209 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:11029] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "ahQ_0Uj3D3Mo8ANpTRD9YgAAABM"]
[Mon May 25 20:25:54.079485 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:11005] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/item.php"] [unique_id "ahQ_0gtZBEwA4fyFLKPwDwAAAQI"]
[Mon May 25 20:25:54.458498 2026] [:error] [pid 62428:tid 62505] [client 20.12.182.70:10962] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "ahQ_0pNosGBa7mui3VRT_wAAAJU"]
[Mon May 25 20:25:54.965089 2026] [:error] [pid 62428:tid 62493] [client 20.12.182.70:11102] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "ahQ_0pNosGBa7mui3VRUAAAAAIk"]
[Mon May 25 20:25:55.475284 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11013] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "ahQ_05NosGBa7mui3VRUAgAAAIA"]
[Mon May 25 20:25:55.924709 2026] [:error] [pid 53791:tid 53813] [client 20.12.182.70:11012] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2024/"] [unique_id "ahQ_0yCRhhNTD40Nf1UY5wAAAZQ"]
[Mon May 25 20:25:56.397884 2026] [:error] [pid 53791:tid 53794] [client 20.12.182.70:10978] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "ahQ_1CCRhhNTD40Nf1UY6AAAAYE"]
[Mon May 25 20:25:56.866364 2026] [:error] [pid 62427:tid 62481] [client 20.12.182.70:11252] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "ahQ_1PMUa83fc4GDyBx7XgAAAVg"]
[Mon May 25 20:25:57.273842 2026] [:error] [pid 62722:tid 62748] [client 20.12.182.70:10976] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "ahQ_1aM6ssnLWYf6CVBJwAAAAFg"]
[Mon May 25 20:25:57.729843 2026] [:error] [pid 62515:tid 62527] [client 20.12.182.70:11069] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/style.php"] [unique_id "ahQ_1Rig0_XsOwmnrv83vAAAAMo"]
[Mon May 25 20:25:58.236939 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:11184] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "ahQ_1iCRhhNTD40Nf1UY7AAAAYQ"]
[Mon May 25 20:25:58.836852 2026] [:error] [pid 62428:tid 62488] [client 20.12.182.70:11186] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "ahQ_1pNosGBa7mui3VRUBQAAAIQ"]
[Mon May 25 20:25:59.451363 2026] [:error] [pid 62426:tid 62436] [client 20.12.182.70:11098] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "ahQ_10j3D3Mo8ANpTRD9ZgAAAAY"]
[Mon May 25 20:25:59.924324 2026] [:error] [pid 62515:tid 62526] [client 20.12.182.70:11122] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/"] [unique_id "ahQ_1xig0_XsOwmnrv83vgAAAMk"]
[Mon May 25 20:26:00.351727 2026] [:error] [pid 62427:tid 62474] [client 20.12.182.70:11040] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "ahQ_2PMUa83fc4GDyBx7XwAAAVE"]
[Mon May 25 20:26:00.787002 2026] [:error] [pid 62722:tid 62738] [client 20.12.182.70:11133] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "ahQ_2KM6ssnLWYf6CVBJwgAAAE4"]
[Mon May 25 20:26:01.282260 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:11105] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "ahQ_2Rig0_XsOwmnrv83wwAAAMw"]
[Mon May 25 20:26:01.833030 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:11112] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/error.php"] [unique_id "ahQ_2ZNosGBa7mui3VRUCwAAAIY"]
[Mon May 25 20:26:02.258294 2026] [:error] [pid 62426:tid 62430] [client 20.12.182.70:10966] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/function/function.php"] [unique_id "ahQ_2kj3D3Mo8ANpTRD9aAAAAAA"]
[Mon May 25 20:26:02.704907 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:11090] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/function/function.php"] [unique_id "ahQ_2pNosGBa7mui3VRUDAAAAIU"]
[Mon May 25 20:26:03.188048 2026] [:error] [pid 62427:tid 62466] [client 20.12.182.70:10955] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/function/function.php"] [unique_id "ahQ_2_MUa83fc4GDyBx7YgAAAUk"]
[Mon May 25 20:26:03.610192 2026] [:error] [pid 62428:tid 62508] [client 20.12.182.70:11111] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/function/function.php"] [unique_id "ahQ_25NosGBa7mui3VRUDgAAAJg"]
[Mon May 25 20:26:04.081440 2026] [:error] [pid 62426:tid 62451] [client 20.12.182.70:11042] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "ahQ_3Ej3D3Mo8ANpTRD9bQAAABU"]
[Mon May 25 20:26:04.461547 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11009] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/about.php"] [unique_id "ahQ_3JNosGBa7mui3VRUEQAAAJA"]
[Mon May 25 20:26:05.017881 2026] [:error] [pid 3698:tid 3710] [client 20.12.182.70:11020] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/about.php"] [unique_id "ahQ_3QtZBEwA4fyFLKPwEQAAAQo"]
[Mon May 25 20:26:05.648399 2026] [:error] [pid 62426:tid 62454] [client 20.12.182.70:10979] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/about.php"] [unique_id "ahQ_3Uj3D3Mo8ANpTRD9bwAAABg"]
[Mon May 25 20:26:06.142157 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:10901] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahQ_3pNosGBa7mui3VRUFAAAAJM"]
[Mon May 25 20:26:06.523812 2026] [:error] [pid 62428:tid 62492] [client 20.12.182.70:11054] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahQ_3pNosGBa7mui3VRUFQAAAIg"]
[Mon May 25 20:26:06.926322 2026] [:error] [pid 3698:tid 3714] [client 20.12.182.70:11135] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahQ_3gtZBEwA4fyFLKPwEwAAAQ4"]
[Mon May 25 20:26:07.527628 2026] [:error] [pid 62427:tid 62470] [client 20.12.182.70:11070] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/classwithtostring.php"] [unique_id "ahQ_3_MUa83fc4GDyBx7ZAAAAU0"]
[Mon May 25 20:26:07.981569 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:11026] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "ahQ_3xig0_XsOwmnrv83xgAAAM8"]
[Mon May 25 20:26:08.734192 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:11025] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "ahQ_4Big0_XsOwmnrv83yAAAAMw"]
[Mon May 25 20:26:09.513098 2026] [:error] [pid 62515:tid 62540] [client 20.12.182.70:11006] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "ahQ_4Rig0_XsOwmnrv83yQAAANc"]
[Mon May 25 20:26:10.348432 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:11120] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "ahQ_4kj3D3Mo8ANpTRD9dAAAABM"]
[Mon May 25 20:26:11.539304 2026] [:error] [pid 62426:tid 62450] [client 20.12.182.70:11039] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "ahQ_40j3D3Mo8ANpTRD9dgAAABQ"]
[Mon May 25 20:26:12.977550 2026] [:error] [pid 53791:tid 53815] [client 20.12.182.70:11065] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "ahQ_5CCRhhNTD40Nf1UY9AAAAZY"]
[Mon May 25 20:26:13.615005 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:11130] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "ahQ_5SCRhhNTD40Nf1UY9gAAAYQ"]
[Mon May 25 20:26:14.723423 2026] [:error] [pid 62427:tid 62468] [client 20.12.182.70:11101] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "ahQ_5vMUa83fc4GDyBx7ZQAAAUs"]
[Mon May 25 20:26:15.461350 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11165] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "ahQ_5xig0_XsOwmnrv83zgAAANU"]
[Mon May 25 20:26:15.888251 2026] [:error] [pid 62428:tid 62502] [client 20.12.182.70:11052] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "ahQ_55NosGBa7mui3VRUGQAAAJI"]
[Mon May 25 20:26:16.380460 2026] [:error] [pid 53791:tid 53812] [client 20.12.182.70:10975] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "ahQ_6CCRhhNTD40Nf1UY-wAAAZM"]
[Mon May 25 20:26:16.854407 2026] [:error] [pid 53791:tid 53799] [client 20.12.182.70:11127] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "ahQ_6CCRhhNTD40Nf1UY_AAAAYY"]
[Mon May 25 20:26:17.675045 2026] [:error] [pid 53791:tid 53814] [client 20.12.182.70:11049] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQ_6SCRhhNTD40Nf1UY_gAAAZU"]
[Mon May 25 20:26:18.258174 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11055] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQ_6pNosGBa7mui3VRUHQAAAJM"]
[Mon May 25 20:26:18.682913 2026] [:error] [pid 53791:tid 53796] [client 20.12.182.70:11045] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQ_6iCRhhNTD40Nf1UZAAAAAYM"]
[Mon May 25 20:26:19.163446 2026] [:error] [pid 62515:tid 62537] [client 20.12.182.70:11208] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/aaa.php"] [unique_id "ahQ_6xig0_XsOwmnrv830QAAANQ"]
[Mon May 25 20:26:19.594106 2026] [:error] [pid 3698:tid 3705] [client 20.12.182.70:11193] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/"] [unique_id "ahQ_6wtZBEwA4fyFLKPwGwAAAQU"]
[Mon May 25 20:26:20.112939 2026] [:error] [pid 62515:tid 62523] [client 20.12.182.70:10954] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/"] [unique_id "ahQ_7Big0_XsOwmnrv830gAAAMY"]
[Mon May 25 20:26:20.791587 2026] [:error] [pid 62427:tid 62477] [client 20.12.182.70:10959] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/"] [unique_id "ahQ_7PMUa83fc4GDyBx7ZwAAAVQ"]
[Mon May 25 20:26:21.457068 2026] [:error] [pid 62515:tid 62535] [client 20.12.182.70:10921] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/"] [unique_id "ahQ_7Rig0_XsOwmnrv831QAAANI"]
[Mon May 25 20:26:21.956805 2026] [:error] [pid 62427:tid 62480] [client 20.12.182.70:11182] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/"] [unique_id "ahQ_7fMUa83fc4GDyBx7aQAAAVc"]
[Mon May 25 20:26:22.489488 2026] [:error] [pid 62515:tid 62520] [client 20.12.182.70:11256] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/"] [unique_id "ahQ_7hig0_XsOwmnrv831wAAAMM"]
[Mon May 25 20:26:22.869646 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11156] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/"] [unique_id "ahQ_7pNosGBa7mui3VRUKAAAAI8"]
[Mon May 25 20:26:23.319868 2026] [:error] [pid 62515:tid 62521] [client 20.12.182.70:11032] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/"] [unique_id "ahQ_7xig0_XsOwmnrv832QAAAMQ"]
[Mon May 25 20:26:23.848725 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11015] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "ahQ_75NosGBa7mui3VRUKwAAAJM"]
[Mon May 25 20:26:24.600419 2026] [:error] [pid 62428:tid 62486] [client 20.12.182.70:11036] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "ahQ_8JNosGBa7mui3VRULQAAAII"]
[Mon May 25 20:26:25.129613 2026] [:error] [pid 62428:tid 62494] [client 20.12.182.70:10987] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "ahQ_8ZNosGBa7mui3VRULgAAAIo"]
[Mon May 25 20:26:25.622678 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:10965] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "ahQ_8ZNosGBa7mui3VRUMQAAAIw"]
[Mon May 25 20:26:26.024633 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:10945] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin.php"] [unique_id "ahQ_8pNosGBa7mui3VRUMgAAAIs"]
[Mon May 25 20:26:26.756796 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:10964] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "ahQ_8pNosGBa7mui3VRUNgAAAI8"]
[Mon May 25 20:26:27.438949 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:11115] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "ahQ_85NosGBa7mui3VRUOQAAAI0"]
[Mon May 25 20:26:27.811745 2026] [:error] [pid 62428:tid 62501] [client 20.12.182.70:11043] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "ahQ_85NosGBa7mui3VRUOgAAAJE"]
[Mon May 25 20:26:28.229750 2026] [:error] [pid 62428:tid 62486] [client 20.12.182.70:11029] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/index.php"] [unique_id "ahQ_9JNosGBa7mui3VRUPAAAAII"]
[Mon May 25 20:26:28.607994 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:10888] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "ahQ_9JNosGBa7mui3VRUPQAAAIw"]
[Mon May 25 20:26:29.001605 2026] [:error] [pid 62426:tid 62452] [client 20.12.182.70:10991] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "ahQ_9Uj3D3Mo8ANpTRD9eQAAABY"]
[Mon May 25 20:26:29.536099 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:10970] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "ahQ_9aM6ssnLWYf6CVBJxgAAAEw"]
[Mon May 25 20:26:30.073871 2026] [:error] [pid 62428:tid 62488] [client 20.12.182.70:11118] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/admin/admin.php"] [unique_id "ahQ_9pNosGBa7mui3VRUQAAAAIQ"]
[Mon May 25 20:26:30.568333 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11068] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "ahQ_9pNosGBa7mui3VRUQQAAAJM"]
[Mon May 25 20:26:31.107560 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:11021] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "ahQ_90j3D3Mo8ANpTRD9ewAAAAo"]
[Mon May 25 20:26:31.716317 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11124] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "ahQ_95NosGBa7mui3VRURQAAAJA"]
[Mon May 25 20:26:32.155352 2026] [:error] [pid 62722:tid 62748] [client 20.12.182.70:10983] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/"] [unique_id "ahQ_-KM6ssnLWYf6CVBJygAAAFg"]
[Mon May 25 20:26:32.615627 2026] [:error] [pid 62426:tid 62453] [client 20.12.182.70:10973] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "ahQ_-Ej3D3Mo8ANpTRD9fAAAABc"]
[Mon May 25 20:26:33.115054 2026] [:error] [pid 62722:tid 62727] [client 20.12.182.70:10947] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/file.php"] [unique_id "ahQ_-aM6ssnLWYf6CVBJzAAAAEM"]
[Mon May 25 20:26:33.549340 2026] [:error] [pid 62722:tid 62735] [client 20.12.182.70:11000] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/file.php"] [unique_id "ahQ_-aM6ssnLWYf6CVBJzQAAAEs"]
[Mon May 25 20:26:33.981900 2026] [:error] [pid 62427:tid 62475] [client 20.12.182.70:10946] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/file.php"] [unique_id "ahQ_-fMUa83fc4GDyBx7bAAAAVI"]
[Mon May 25 20:26:34.498370 2026] [:error] [pid 62722:tid 62738] [client 20.12.182.70:11022] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/file.php"] [unique_id "ahQ_-qM6ssnLWYf6CVBJ0QAAAE4"]
[Mon May 25 20:26:35.187430 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11061] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/"] [unique_id "ahQ_-5NosGBa7mui3VRUSQAAAJM"]
[Mon May 25 20:26:36.331034 2026] [:error] [pid 53791:tid 53810] [client 20.12.182.70:11059] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/"] [unique_id "ahQ__CCRhhNTD40Nf1UZBAAAAZE"]
[Mon May 25 20:26:37.173679 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:10944] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/"] [unique_id "ahQ__ZNosGBa7mui3VRUSwAAAJA"]
[Mon May 25 20:26:38.372465 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11035] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/theme-compat/"] [unique_id "ahQ__pNosGBa7mui3VRUTwAAAIw"]
[Mon May 25 20:26:38.992126 2026] [:error] [pid 3698:tid 3712] [client 20.12.182.70:11027] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "ahQ__gtZBEwA4fyFLKPwHQAAAQw"]
[Mon May 25 20:26:39.758768 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:10882] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "ahQ__xig0_XsOwmnrv835AAAAMw"]
[Mon May 25 20:26:40.344685 2026] [:error] [pid 53791:tid 53809] [client 20.12.182.70:10885] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "ahRAACCRhhNTD40Nf1UZCwAAAZA"]
[Mon May 25 20:26:40.734535 2026] [:error] [pid 62428:tid 62487] [client 20.12.182.70:11050] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "ahRAAJNosGBa7mui3VRUUgAAAIM"]
[Mon May 25 20:26:41.266464 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11028] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/fonts/"] [unique_id "ahRAAZNosGBa7mui3VRUVAAAAJM"]
[Mon May 25 20:26:42.234441 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:10985] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "ahRAAhig0_XsOwmnrv835wAAAM8"]
[Mon May 25 20:26:42.769380 2026] [:error] [pid 62426:tid 62441] [client 20.12.182.70:11024] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "ahRAAkj3D3Mo8ANpTRD9gwAAAAs"]
[Mon May 25 20:26:43.414269 2026] [:error] [pid 62515:tid 62521] [client 20.12.182.70:11104] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "ahRAAxig0_XsOwmnrv836QAAAMQ"]
[Mon May 25 20:26:43.948781 2026] [:error] [pid 62515:tid 62539] [client 20.12.182.70:11158] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/akc.php"] [unique_id "ahRAAxig0_XsOwmnrv836wAAANY"]
[Mon May 25 20:26:44.342634 2026] [:error] [pid 62426:tid 62443] [client 20.12.182.70:11014] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "ahRABEj3D3Mo8ANpTRD9hgAAAA0"]
[Mon May 25 20:26:44.888157 2026] [:error] [pid 62426:tid 62453] [client 20.12.182.70:10849] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "ahRABEj3D3Mo8ANpTRD9iAAAABc"]
[Mon May 25 20:26:45.370600 2026] [:error] [pid 62722:tid 62732] [client 20.12.182.70:11031] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "ahRABaM6ssnLWYf6CVBJ1wAAAEg"]
[Mon May 25 20:26:45.958702 2026] [:error] [pid 62426:tid 62433] [client 20.12.182.70:10967] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "ahRABUj3D3Mo8ANpTRD9iwAAAAM"]
[Mon May 25 20:26:46.519065 2026] [:error] [pid 62426:tid 62448] [client 20.12.182.70:10984] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ahRABkj3D3Mo8ANpTRD9jAAAABI"]
[Mon May 25 20:26:47.162716 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:10906] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "ahRAB5NosGBa7mui3VRUVQAAAIY"]
[Mon May 25 20:26:47.659721 2026] [:error] [pid 62722:tid 62726] [client 20.12.182.70:10911] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "ahRAB6M6ssnLWYf6CVBJ3AAAAEI"]
[Mon May 25 20:26:48.251974 2026] [:error] [pid 62515:tid 62525] [client 20.12.182.70:10980] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/asasx.php"] [unique_id "ahRACBig0_XsOwmnrv837gAAAMg"]
[Mon May 25 20:26:48.779905 2026] [:error] [pid 53791:tid 53811] [client 20.12.182.70:11215] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "ahRACCCRhhNTD40Nf1UZEgAAAZI"]
[Mon May 25 20:26:49.330888 2026] [:error] [pid 62426:tid 62450] [client 20.12.182.70:10897] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "ahRACUj3D3Mo8ANpTRD9jQAAABQ"]
[Mon May 25 20:26:49.732292 2026] [:error] [pid 53791:tid 53796] [client 20.12.182.70:10884] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "ahRACSCRhhNTD40Nf1UZFAAAAYM"]
[Mon May 25 20:26:50.319125 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:10999] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "ahRACiCRhhNTD40Nf1UZFgAAAYQ"]
[Mon May 25 20:26:50.960758 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:10981] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "ahRACqM6ssnLWYf6CVBJ4QAAAEw"]
[Mon May 25 20:26:51.721650 2026] [:error] [pid 62515:tid 62519] [client 20.12.182.70:10934] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/makeasmtp.php"] [unique_id "ahRACxig0_XsOwmnrv838AAAAMI"]
[Mon May 25 20:26:52.872891 2026] [proxy_fcgi:error] [pid 62515:tid 62521] [client 20.12.182.70:10961] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:26:53.288280 2026] [proxy_fcgi:error] [pid 62515:tid 62531] [client 20.12.182.70:10961] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:26:53.491436 2026] [proxy_fcgi:error] [pid 62515:tid 62540] [client 20.12.182.70:10961] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:26:54.020056 2026] [proxy_fcgi:error] [pid 62515:tid 62518] [client 20.12.182.70:10961] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:26:54.237990 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:10961] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ahRADhig0_XsOwmnrv83-QAAANU"]
[Mon May 25 20:26:56.126896 2026] [proxy_fcgi:error] [pid 62426:tid 62443] [client 20.12.182.70:10941] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:26:56.334473 2026] [:error] [pid 62426:tid 62452] [client 20.12.182.70:10941] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/lv.php"] [unique_id "ahRAEEj3D3Mo8ANpTRD9kQAAABY"]
[Mon May 25 20:26:59.415198 2026] [proxy_fcgi:error] [pid 62515:tid 62541] [client 20.12.182.70:10910] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:26:59.974356 2026] [proxy_fcgi:error] [pid 62515:tid 62530] [client 20.12.182.70:10910] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:27:00.213700 2026] [proxy_fcgi:error] [pid 62515:tid 62539] [client 20.12.182.70:10910] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:27:00.448941 2026] [proxy_fcgi:error] [pid 62515:tid 62523] [client 20.12.182.70:10910] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:27:00.680714 2026] [:error] [pid 62515:tid 62526] [client 20.12.182.70:10910] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/class-config.php"] [unique_id "ahRAFBig0_XsOwmnrv84BgAAAMk"]
[Mon May 25 20:27:01.934564 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:10890] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/class-config.php"] [unique_id "ahRAFZNosGBa7mui3VRUVgAAAI8"]
[Mon May 25 20:27:02.762348 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:10891] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/class-config.php"] [unique_id "ahRAFpNosGBa7mui3VRUWAAAAIs"]
[Mon May 25 20:27:03.319576 2026] [:error] [pid 3698:tid 3712] [client 20.12.182.70:10916] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/class-config.php"] [unique_id "ahRAFwtZBEwA4fyFLKPwJwAAAQw"]
[Mon May 25 20:27:03.886312 2026] [:error] [pid 62427:tid 62481] [client 20.12.182.70:10949] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/file.php"] [unique_id "ahRAF_MUa83fc4GDyBx7dQAAAVg"]
[Mon May 25 20:27:03.888879 2026] [:error] [pid 62428:tid 62502] [client 20.12.182.70:65187] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahRAF5NosGBa7mui3VRUWwAAAJI"]
[Mon May 25 20:27:04.471696 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:10997] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/file.php"] [unique_id "ahRAGJNosGBa7mui3VRUXwAAAJY"]
[Mon May 25 20:27:04.777449 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:65101] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahRAGJNosGBa7mui3VRUYAAAAI0"]
[Mon May 25 20:27:05.223354 2026] [:error] [pid 62428:tid 62491] [client 20.12.182.70:10977] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/file.php"] [unique_id "ahRAGZNosGBa7mui3VRUYgAAAIc"]
[Mon May 25 20:27:05.622081 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11103] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/file.php"] [unique_id "ahRAGQtZBEwA4fyFLKPwKgAAAQ8"]
[Mon May 25 20:27:05.711625 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:65198] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahRAGQtZBEwA4fyFLKPwKwAAAQg"]
[Mon May 25 20:27:06.279645 2026] [:error] [pid 62428:tid 62494] [client 20.12.182.70:10986] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "ahRAGpNosGBa7mui3VRUZwAAAIo"]
[Mon May 25 20:27:06.628430 2026] [:error] [pid 62426:tid 62442] [client 20.12.182.70:65197] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahRAGkj3D3Mo8ANpTRD9lQAAAAw"]
[Mon May 25 20:27:06.788538 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11003] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "ahRAGpNosGBa7mui3VRUaQAAAIw"]
[Mon May 25 20:27:07.280944 2026] [:error] [pid 62428:tid 62498] [client 20.12.182.70:10843] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "ahRAG5NosGBa7mui3VRUawAAAI4"]
[Mon May 25 20:27:07.657338 2026] [:error] [pid 53791:tid 53816] [client 20.12.182.70:10899] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "ahRAGyCRhhNTD40Nf1UZLgAAAZc"]
[Mon May 25 20:27:08.052550 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11126] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/404.php"] [unique_id "ahRAHJNosGBa7mui3VRUbQAAAI8"]
[Mon May 25 20:27:08.539943 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:10883] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/404.php"] [unique_id "ahRAHJNosGBa7mui3VRUbgAAAJc"]
[Mon May 25 20:27:08.943417 2026] [:error] [pid 62722:tid 62727] [client 20.12.182.70:11078] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/404.php"] [unique_id "ahRAHKM6ssnLWYf6CVBJ5wAAAEM"]
[Mon May 25 20:27:09.366770 2026] [:error] [pid 3698:tid 3710] [client 20.12.182.70:10951] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/404.php"] [unique_id "ahRAHQtZBEwA4fyFLKPwLwAAAQo"]
[Mon May 25 20:27:09.806915 2026] [:error] [pid 62428:tid 62504] [client 20.12.182.70:10880] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ahRAHZNosGBa7mui3VRUcQAAAJQ"]
[Mon May 25 20:27:10.215055 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:10904] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ahRAHpNosGBa7mui3VRUdQAAAIY"]
[Mon May 25 20:27:10.616271 2026] [:error] [pid 62722:tid 62730] [client 20.12.182.70:10950] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ahRAHqM6ssnLWYf6CVBJ6AAAAEY"]
[Mon May 25 20:27:11.034515 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:10892] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ahRAH5NosGBa7mui3VRUeAAAAJM"]
[Mon May 25 20:27:11.560468 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:10895] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ahRAH5NosGBa7mui3VRUegAAAIU"]
[Mon May 25 20:27:12.064094 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:10887] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ahRAIJNosGBa7mui3VRUfQAAAJc"]
[Mon May 25 20:27:12.488800 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11064] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ahRAIJNosGBa7mui3VRUfgAAAIw"]
[Mon May 25 20:27:12.882748 2026] [:error] [pid 53791:tid 53803] [client 20.12.182.70:10995] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ini.php"] [unique_id "ahRAICCRhhNTD40Nf1UZMwAAAYo"]
[Mon May 25 20:27:13.255026 2026] [:error] [pid 53791:tid 53804] [client 20.12.182.70:10935] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "ahRAISCRhhNTD40Nf1UZNQAAAYs"]
[Mon May 25 20:27:13.717330 2026] [:error] [pid 62428:tid 62491] [client 20.12.182.70:10914] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "ahRAIZNosGBa7mui3VRUggAAAIc"]
[Mon May 25 20:27:14.164548 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11008] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "ahRAIpNosGBa7mui3VRUhAAAAJM"]
[Mon May 25 20:27:14.801467 2026] [:error] [pid 53791:tid 53812] [client 20.12.182.70:10936] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/"] [unique_id "ahRAIiCRhhNTD40Nf1UZOAAAAZM"]
[Mon May 25 20:27:15.218523 2026] [:error] [pid 62428:tid 62504] [client 20.12.182.70:10960] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "ahRAI5NosGBa7mui3VRUhwAAAJQ"]
[Mon May 25 20:27:15.710586 2026] [:error] [pid 53791:tid 53805] [client 20.12.182.70:10982] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "ahRAIyCRhhNTD40Nf1UZOgAAAYw"]
[Mon May 25 20:27:16.551513 2026] [:error] [pid 62722:tid 62729] [client 20.12.182.70:10873] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "ahRAJKM6ssnLWYf6CVBJ6QAAAEU"]
[Mon May 25 20:27:16.987911 2026] [:error] [pid 62428:tid 62502] [client 20.12.182.70:11051] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/index.php"] [unique_id "ahRAJJNosGBa7mui3VRUigAAAJI"]
[Mon May 25 20:27:17.393986 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:10861] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "ahRAJSCRhhNTD40Nf1UZQgAAAYQ"]
[Mon May 25 20:27:17.879998 2026] [:error] [pid 3698:tid 3721] [client 20.12.182.70:10994] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "ahRAJQtZBEwA4fyFLKPwMwAAARU"]
[Mon May 25 20:27:18.382109 2026] [:error] [pid 62428:tid 62505] [client 20.12.182.70:10922] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "ahRAJpNosGBa7mui3VRUjgAAAJU"]
[Mon May 25 20:27:18.830270 2026] [:error] [pid 3698:tid 3703] [client 20.12.182.70:10833] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/about/function.php"] [unique_id "ahRAJgtZBEwA4fyFLKPwNAAAAQM"]
[Mon May 25 20:27:19.463823 2026] [:error] [pid 62427:tid 62470] [client 20.12.182.70:10937] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehehehe.php"] [unique_id "ahRAJ_MUa83fc4GDyBx7eQAAAU0"]
[Mon May 25 20:27:19.853791 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:10968] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehehehe.php"] [unique_id "ahRAJ5NosGBa7mui3VRUkgAAAJA"]
[Mon May 25 20:27:21.319624 2026] [:error] [pid 53791:tid 53804] [client 20.12.182.70:11053] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehehehe.php"] [unique_id "ahRAKSCRhhNTD40Nf1UZRgAAAYs"]
[Mon May 25 20:27:25.901735 2026] [:error] [pid 62427:tid 62477] [client 20.12.182.70:11001] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/hehehehe.php"] [unique_id "ahRALfMUa83fc4GDyBx7ewAAAVQ"]
[Mon May 25 20:27:30.418710 2026] [:error] [pid 62426:tid 62431] [client 20.12.182.70:11007] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "ahRAMkj3D3Mo8ANpTRD9mAAAAAE"]
[Mon May 25 20:27:32.268424 2026] [:error] [pid 62722:tid 62725] [client 20.12.182.70:10958] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "ahRANKM6ssnLWYf6CVBJ7gAAAEE"]
[Mon May 25 20:27:33.021658 2026] [:error] [pid 62426:tid 62452] [client 20.12.182.70:10943] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "ahRANUj3D3Mo8ANpTRD9mQAAABY"]
[Mon May 25 20:27:33.482769 2026] [:error] [pid 3698:tid 3722] [client 20.12.182.70:10988] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "ahRANQtZBEwA4fyFLKPwQAAAARY"]
[Mon May 25 20:27:33.895915 2026] [:error] [pid 62426:tid 62446] [client 20.12.182.70:11009] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/index.php"] [unique_id "ahRANUj3D3Mo8ANpTRD9mgAAABA"]
[Mon May 25 20:27:34.358805 2026] [:error] [pid 62427:tid 62458] [client 20.12.182.70:11002] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/index.php"] [unique_id "ahRANvMUa83fc4GDyBx7fgAAAUE"]
[Mon May 25 20:27:34.839491 2026] [:error] [pid 62426:tid 62453] [client 20.12.182.70:11104] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/index.php"] [unique_id "ahRANkj3D3Mo8ANpTRD9mwAAABc"]
[Mon May 25 20:27:35.264404 2026] [:error] [pid 62426:tid 62445] [client 20.12.182.70:10913] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/images/index.php"] [unique_id "ahRAN0j3D3Mo8ANpTRD9nAAAAA8"]
[Mon May 25 20:27:35.678584 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:10969] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "ahRAN0j3D3Mo8ANpTRD9nQAAAAo"]
[Mon May 25 20:27:36.066967 2026] [:error] [pid 3698:tid 3709] [client 20.12.182.70:11046] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "ahRAOAtZBEwA4fyFLKPwRQAAAQk"]
[Mon May 25 20:27:36.639988 2026] [:error] [pid 53791:tid 53813] [client 20.12.182.70:10927] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "ahRAOCCRhhNTD40Nf1UZUgAAAZQ"]
[Mon May 25 20:27:37.077118 2026] [:error] [pid 3698:tid 3716] [client 20.12.182.70:10957] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/"] [unique_id "ahRAOQtZBEwA4fyFLKPwRgAAARA"]
[Mon May 25 20:27:37.557674 2026] [:error] [pid 53791:tid 53802] [client 20.12.182.70:10926] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/index.php"] [unique_id "ahRAOSCRhhNTD40Nf1UZVAAAAYk"]
[Mon May 25 20:27:38.058370 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:10915] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "ahRAOgtZBEwA4fyFLKPwSQAAAQ8"]
[Mon May 25 20:27:38.576795 2026] [:error] [pid 62515:tid 62539] [client 20.12.182.70:10920] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "ahRAOhig0_XsOwmnrv84CAAAANY"]
[Mon May 25 20:27:39.012143 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:10817] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/network/admin.php"] [unique_id "ahRAOxig0_XsOwmnrv84CQAAAMw"]
[Mon May 25 20:27:39.678509 2026] [:error] [pid 62426:tid 62442] [client 20.12.182.70:10853] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "ahRAO0j3D3Mo8ANpTRD9ogAAAAw"]
[Mon May 25 20:27:40.688903 2026] [:error] [pid 3698:tid 3712] [client 20.12.182.70:10942] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "ahRAPAtZBEwA4fyFLKPwTQAAAQw"]
[Mon May 25 20:27:41.211988 2026] [:error] [pid 62515:tid 62523] [client 20.12.182.70:10998] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "ahRAPRig0_XsOwmnrv84CwAAAMY"]
[Mon May 25 20:27:41.863148 2026] [:error] [pid 62722:tid 62732] [client 20.12.182.70:11075] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-configs.php"] [unique_id "ahRAPaM6ssnLWYf6CVBJ8gAAAEg"]
[Mon May 25 20:27:43.387625 2026] [:error] [pid 62722:tid 62740] [client 20.12.182.70:10889] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files/index.php"] [unique_id "ahRAP6M6ssnLWYf6CVBJ9QAAAFA"]
[Mon May 25 20:27:44.343264 2026] [:error] [pid 53791:tid 53800] [client 20.12.182.70:10902] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files/index.php"] [unique_id "ahRAQCCRhhNTD40Nf1UZXQAAAYc"]
[Mon May 25 20:27:45.546691 2026] [:error] [pid 62428:tid 62505] [client 20.12.182.70:10929] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files/index.php"] [unique_id "ahRAQZNosGBa7mui3VRUqAAAAJU"]
[Mon May 25 20:27:46.878435 2026] [:error] [pid 62426:tid 62443] [client 20.12.182.70:10862] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/files/index.php"] [unique_id "ahRAQkj3D3Mo8ANpTRD9pAAAAA0"]
[Mon May 25 20:27:52.154295 2026] [:error] [pid 62428:tid 62498] [client 20.12.182.70:10824] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "ahRASJNosGBa7mui3VRUuQAAAI4"]
[Mon May 25 20:27:56.036589 2026] [:error] [pid 62426:tid 62450] [client 20.12.182.70:10971] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "ahRATEj3D3Mo8ANpTRD9rAAAABQ"]
[Mon May 25 20:27:57.692425 2026] [:error] [pid 62722:tid 62740] [client 20.12.182.70:10894] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "ahRATaM6ssnLWYf6CVBKEAAAAFA"]
[Mon May 25 20:27:58.513547 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:10886] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "ahRATqM6ssnLWYf6CVBKEQAAAEw"]
[Mon May 25 20:27:59.678697 2026] [:error] [pid 62515:tid 62539] [client 20.12.182.70:10939] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "ahRATxig0_XsOwmnrv84HgAAANY"]
[Mon May 25 20:28:00.792948 2026] [proxy_fcgi:error] [pid 62426:tid 62446] [client 20.12.182.70:10831] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:01.249842 2026] [proxy_fcgi:error] [pid 62426:tid 62433] [client 20.12.182.70:10831] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:01.441637 2026] [proxy_fcgi:error] [pid 62426:tid 62448] [client 20.12.182.70:10831] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:01.643284 2026] [:error] [pid 62426:tid 62430] [client 20.12.182.70:10831] [client 20.12.182.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.12.182.70, incrementing brute counter"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "ahRAUUj3D3Mo8ANpTRD9uQAAAAA"]
[Mon May 25 20:28:01.892002 2026] [proxy_fcgi:error] [pid 62426:tid 62435] [client 20.12.182.70:10831] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:02.139613 2026] [proxy_fcgi:error] [pid 62426:tid 62447] [client 20.12.182.70:10831] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:02.617952 2026] [proxy_fcgi:error] [pid 62426:tid 62442] [client 20.12.182.70:10831] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:02.836790 2026] [:error] [pid 62426:tid 62451] [client 20.12.182.70:10831] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/index.php"] [unique_id "ahRAUkj3D3Mo8ANpTRD9vwAAABU"]
[Mon May 25 20:28:03.385497 2026] [proxy_fcgi:error] [pid 62515:tid 62517] [client 20.12.182.70:11229] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:28:03.580752 2026] [:error] [pid 62515:tid 62522] [client 20.12.182.70:11229] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/"] [unique_id "ahRAUxig0_XsOwmnrv84IgAAAMU"]
[Mon May 25 20:28:03.994192 2026] [:error] [pid 62722:tid 62730] [client 20.12.182.70:10938] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/"] [unique_id "ahRAU6M6ssnLWYf6CVBKGQAAAEY"]
[Mon May 25 20:28:04.515685 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:11180] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/"] [unique_id "ahRAVJNosGBa7mui3VRUwgAAAJc"]
[Mon May 25 20:28:05.348658 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:10758] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/uploads/2023/"] [unique_id "ahRAVUj3D3Mo8ANpTRD9wQAAAAo"]
[Mon May 25 20:28:07.113548 2026] [:error] [pid 62428:tid 62485] [client 20.12.182.70:10948] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ahRAV5NosGBa7mui3VRUyAAAAIE"]
[Mon May 25 20:28:08.313725 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:10963] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ahRAWJNosGBa7mui3VRUzAAAAJY"]
[Mon May 25 20:28:10.614583 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:10919] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ahRAWpNosGBa7mui3VRU0gAAAI8"]
[Mon May 25 20:28:11.908551 2026] [:error] [pid 62515:tid 62540] [client 20.12.182.70:10828] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/admin.php"] [unique_id "ahRAWxig0_XsOwmnrv84KwAAANc"]
[Mon May 25 20:28:12.616119 2026] [:error] [pid 62428:tid 62504] [client 20.12.182.70:10879] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ahRAXJNosGBa7mui3VRU1QAAAJQ"]
[Mon May 25 20:28:13.442391 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11151] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ahRAXZNosGBa7mui3VRU1wAAAJA"]
[Mon May 25 20:28:14.839030 2026] [:error] [pid 62515:tid 62520] [client 20.12.182.70:10996] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ahRAXhig0_XsOwmnrv84LgAAAMM"]
[Mon May 25 20:28:15.824372 2026] [:error] [pid 62427:tid 62465] [client 20.12.182.70:11195] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ahRAX_MUa83fc4GDyBx7hwAAAUg"]
[Mon May 25 20:28:16.492626 2026] [:error] [pid 62426:tid 62448] [client 20.12.182.70:11148] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "ahRAYEj3D3Mo8ANpTRD9xwAAABI"]
[Mon May 25 20:28:16.942052 2026] [:error] [pid 62426:tid 62430] [client 20.12.182.70:11230] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "ahRAYEj3D3Mo8ANpTRD9ygAAAAA"]
[Mon May 25 20:28:17.447515 2026] [:error] [pid 62426:tid 62447] [client 20.12.182.70:11137] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "ahRAYUj3D3Mo8ANpTRD9ywAAABE"]
[Mon May 25 20:28:18.499621 2026] [:error] [pid 62427:tid 62466] [client 20.12.182.70:10818] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/radio.php"] [unique_id "ahRAYvMUa83fc4GDyBx7jAAAAUk"]
[Mon May 25 20:28:19.006587 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11245] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "ahRAYxig0_XsOwmnrv84NAAAANU"]
[Mon May 25 20:28:19.589118 2026] [:error] [pid 62426:tid 62438] [client 20.12.182.70:10821] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "ahRAY0j3D3Mo8ANpTRD90QAAAAg"]
[Mon May 25 20:28:20.157378 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11155] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "ahRAZBig0_XsOwmnrv84NQAAAMA"]
[Mon May 25 20:28:20.783890 2026] [:error] [pid 62428:tid 62487] [client 20.12.182.70:11020] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/moon.php"] [unique_id "ahRAZJNosGBa7mui3VRU2wAAAIM"]
[Mon May 25 20:28:21.231810 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:11241] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "ahRAZZNosGBa7mui3VRU3QAAAJc"]
[Mon May 25 20:28:21.737115 2026] [:error] [pid 62426:tid 62443] [client 20.12.182.70:11172] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "ahRAZUj3D3Mo8ANpTRD91gAAAA0"]
[Mon May 25 20:28:22.243035 2026] [:error] [pid 62515:tid 62530] [client 20.12.182.70:11175] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "ahRAZhig0_XsOwmnrv84NwAAAM0"]
[Mon May 25 20:28:22.788792 2026] [:error] [pid 62428:tid 62494] [client 20.12.182.70:10855] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/filemanager/dialog.php"] [unique_id "ahRAZpNosGBa7mui3VRU4AAAAIo"]
[Mon May 25 20:28:23.415785 2026] [:error] [pid 62428:tid 62502] [client 20.12.182.70:10838] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "ahRAZ5NosGBa7mui3VRU4wAAAJI"]
[Mon May 25 20:28:24.090065 2026] [:error] [pid 62426:tid 62450] [client 20.12.182.70:11231] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "ahRAaEj3D3Mo8ANpTRD93AAAABQ"]
[Mon May 25 20:28:24.554004 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:10907] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "ahRAaBig0_XsOwmnrv84OQAAAM8"]
[Mon May 25 20:28:25.362657 2026] [:error] [pid 62426:tid 62437] [client 20.12.182.70:10898] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "ahRAaUj3D3Mo8ANpTRD93wAAAAc"]
[Mon May 25 20:28:25.961796 2026] [:error] [pid 62426:tid 62454] [client 20.12.182.70:11142] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "ahRAaUj3D3Mo8ANpTRD94wAAABg"]
[Mon May 25 20:28:26.478284 2026] [:error] [pid 62426:tid 62435] [client 20.12.182.70:10903] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahRAakj3D3Mo8ANpTRD95gAAAAU"]
[Mon May 25 20:28:27.055732 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:11243] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahRAa5NosGBa7mui3VRU5QAAAJY"]
[Mon May 25 20:28:27.742349 2026] [:error] [pid 62427:tid 62473] [client 20.12.182.70:11183] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahRAa_MUa83fc4GDyBx7jwAAAVA"]
[Mon May 25 20:28:29.174269 2026] [:error] [pid 62426:tid 62444] [client 20.12.182.70:11216] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/atomlib.php"] [unique_id "ahRAbUj3D3Mo8ANpTRD97wAAAA4"]
[Mon May 25 20:28:30.822850 2026] [:error] [pid 62426:tid 62450] [client 20.12.182.70:10928] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "ahRAbkj3D3Mo8ANpTRD99gAAABQ"]
[Mon May 25 20:28:31.448311 2026] [:error] [pid 62426:tid 62434] [client 20.12.182.70:11149] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "ahRAb0j3D3Mo8ANpTRD9-gAAAAQ"]
[Mon May 25 20:28:32.308437 2026] [:error] [pid 62426:tid 62454] [client 20.12.182.70:11238] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "ahRAcEj3D3Mo8ANpTRD9_gAAABg"]
[Mon May 25 20:28:32.833393 2026] [:error] [pid 3698:tid 3703] [client 20.12.182.70:10989] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-signup.php"] [unique_id "ahRAcAtZBEwA4fyFLKPwXQAAAQM"]
[Mon May 25 20:28:33.400161 2026] [:error] [pid 53791:tid 53806] [client 20.12.182.70:11233] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "ahRAcSCRhhNTD40Nf1UZYAAAAY0"]
[Mon May 25 20:28:34.058336 2026] [:error] [pid 62427:tid 62457] [client 20.12.182.70:10875] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "ahRAcvMUa83fc4GDyBx7kQAAAUA"]
[Mon May 25 20:28:34.712111 2026] [:error] [pid 53791:tid 53801] [client 20.12.182.70:10923] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "ahRAciCRhhNTD40Nf1UZYwAAAYg"]
[Mon May 25 20:28:35.290009 2026] [:error] [pid 62426:tid 62439] [client 20.12.182.70:11091] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/main.php"] [unique_id "ahRAc0j3D3Mo8ANpTRD-BQAAAAk"]
[Mon May 25 20:28:35.845588 2026] [:error] [pid 62515:tid 62541] [client 20.12.182.70:11224] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "ahRAcxig0_XsOwmnrv84PQAAANg"]
[Mon May 25 20:28:37.449134 2026] [:error] [pid 62427:tid 62470] [client 20.12.182.70:11073] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "ahRAdfMUa83fc4GDyBx7kwAAAU0"]
[Mon May 25 20:28:39.280265 2026] [:error] [pid 62722:tid 62738] [client 20.12.182.70:11246] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "ahRAd6M6ssnLWYf6CVBKGwAAAE4"]
[Mon May 25 20:28:40.271907 2026] [:error] [pid 3698:tid 3706] [client 20.12.182.70:11141] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-conflg.php"] [unique_id "ahRAeAtZBEwA4fyFLKPwZQAAAQY"]
[Mon May 25 20:28:41.175470 2026] [:error] [pid 62426:tid 62443] [client 20.12.182.70:11071] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/assets/index.php"] [unique_id "ahRAeUj3D3Mo8ANpTRD-DwAAAA0"]
[Mon May 25 20:28:41.972865 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:10816] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "ahRAeRig0_XsOwmnrv84QgAAAM8"]
[Mon May 25 20:28:42.708718 2026] [:error] [pid 62427:tid 62468] [client 20.12.182.70:11217] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "ahRAevMUa83fc4GDyBx7lgAAAUs"]
[Mon May 25 20:28:43.266597 2026] [:error] [pid 62427:tid 62467] [client 20.12.182.70:10841] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "ahRAe_MUa83fc4GDyBx7mAAAAUo"]
[Mon May 25 20:28:43.752256 2026] [:error] [pid 62722:tid 62742] [client 20.12.182.70:10974] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "ahRAe6M6ssnLWYf6CVBKHAAAAFI"]
[Mon May 25 20:28:44.237033 2026] [:error] [pid 62515:tid 62536] [client 20.12.182.70:10918] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/.well-known/pki-validation/index.php"] [unique_id "ahRAfBig0_XsOwmnrv84RgAAANM"]
[Mon May 25 20:28:44.758646 2026] [:error] [pid 3698:tid 3721] [client 20.12.182.70:11154] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "ahRAfAtZBEwA4fyFLKPwagAAARU"]
[Mon May 25 20:28:45.301011 2026] [:error] [pid 3698:tid 3707] [client 20.12.182.70:10772] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "ahRAfQtZBEwA4fyFLKPwbAAAAQc"]
[Mon May 25 20:28:45.844740 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11225] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "ahRAfZNosGBa7mui3VRU8AAAAIA"]
[Mon May 25 20:28:46.423716 2026] [:error] [pid 3698:tid 3720] [client 20.12.182.70:11163] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/user/index.php"] [unique_id "ahRAfgtZBEwA4fyFLKPwbwAAARQ"]
[Mon May 25 20:28:46.972277 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:11235] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "ahRAfgtZBEwA4fyFLKPwcQAAAQI"]
[Mon May 25 20:28:47.584555 2026] [:error] [pid 62515:tid 62522] [client 20.12.182.70:11218] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "ahRAfxig0_XsOwmnrv84SAAAAMU"]
[Mon May 25 20:28:48.378091 2026] [:error] [pid 62515:tid 62519] [client 20.12.182.70:10837] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "ahRAgBig0_XsOwmnrv84SwAAAMI"]
[Mon May 25 20:28:48.885523 2026] [:error] [pid 62722:tid 62724] [client 20.12.182.70:11138] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links-opml.php"] [unique_id "ahRAgKM6ssnLWYf6CVBKHQAAAEA"]
[Mon May 25 20:28:49.427013 2026] [:error] [pid 53791:tid 53814] [client 20.12.182.70:11200] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "ahRAgSCRhhNTD40Nf1UZcwAAAZU"]
[Mon May 25 20:28:49.886291 2026] [:error] [pid 53791:tid 53812] [client 20.12.182.70:11083] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "ahRAgSCRhhNTD40Nf1UZdgAAAZM"]
[Mon May 25 20:28:50.571169 2026] [:error] [pid 53791:tid 53815] [client 20.12.182.70:10834] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "ahRAgiCRhhNTD40Nf1UZeQAAAZY"]
[Mon May 25 20:28:51.238424 2026] [:error] [pid 3698:tid 3722] [client 20.12.182.70:11247] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/"] [unique_id "ahRAgwtZBEwA4fyFLKPwdgAAARY"]
[Mon May 25 20:28:51.861121 2026] [:error] [pid 62427:tid 62481] [client 20.12.182.70:11228] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "ahRAg_MUa83fc4GDyBx7mgAAAVg"]
[Mon May 25 20:28:52.260403 2026] [:error] [pid 62427:tid 62458] [client 20.12.182.70:11143] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "ahRAhPMUa83fc4GDyBx7mwAAAUE"]
[Mon May 25 20:28:52.776539 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:11257] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "ahRAhEj3D3Mo8ANpTRD-FgAAABM"]
[Mon May 25 20:28:53.337993 2026] [:error] [pid 62426:tid 62432] [client 20.12.182.70:11191] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/system.php"] [unique_id "ahRAhUj3D3Mo8ANpTRD-GQAAAAI"]
[Mon May 25 20:28:53.876520 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11194] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "ahRAhRig0_XsOwmnrv84UwAAANU"]
[Mon May 25 20:28:54.463811 2026] [:error] [pid 62426:tid 62439] [client 20.12.182.70:10840] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "ahRAhkj3D3Mo8ANpTRD-HQAAAAk"]
[Mon May 25 20:28:55.139875 2026] [:error] [pid 53791:tid 53801] [client 20.12.182.70:11063] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "ahRAhyCRhhNTD40Nf1UZfgAAAYg"]
[Mon May 25 20:28:55.829338 2026] [:error] [pid 53791:tid 53813] [client 20.12.182.70:11248] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/special.php"] [unique_id "ahRAhyCRhhNTD40Nf1UZgAAAAZQ"]
[Mon May 25 20:28:56.467973 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:10847] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/"] [unique_id "ahRAiAtZBEwA4fyFLKPweQAAAQg"]
[Mon May 25 20:28:56.959668 2026] [:error] [pid 62426:tid 62438] [client 20.12.182.70:10825] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/"] [unique_id "ahRAiEj3D3Mo8ANpTRD-IAAAAAg"]
[Mon May 25 20:28:57.419553 2026] [:error] [pid 53791:tid 53812] [client 20.12.182.70:11177] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/"] [unique_id "ahRAiSCRhhNTD40Nf1UZggAAAZM"]
[Mon May 25 20:28:58.556452 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:10852] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/media/"] [unique_id "ahRAikj3D3Mo8ANpTRD-IwAAABM"]
[Mon May 25 20:28:59.451091 2026] [:error] [pid 62722:tid 62744] [client 20.12.182.70:11058] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ahRAi6M6ssnLWYf6CVBKIgAAAFQ"]
[Mon May 25 20:29:00.160138 2026] [:error] [pid 62427:tid 62477] [client 20.12.182.70:11140] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ahRAjPMUa83fc4GDyBx7pwAAAVQ"]
[Mon May 25 20:29:00.922275 2026] [:error] [pid 62427:tid 62479] [client 20.12.182.70:11202] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "ahRAjPMUa83fc4GDyBx7qgAAAVY"]
[Mon May 25 20:29:02.177363 2026] [:error] [pid 62722:tid 62743] [client 20.12.182.70:10993] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/wp-signup.php"] [unique_id "ahRAjqM6ssnLWYf6CVBKIwAAAFM"]
[Mon May 25 20:29:04.589144 2026] [proxy_fcgi:error] [pid 62427:tid 62466] [client 20.12.182.70:10924] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:29:07.041972 2026] [proxy_fcgi:error] [pid 62427:tid 62477] [client 20.12.182.70:10924] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:29:07.523551 2026] [:error] [pid 62427:tid 62479] [client 20.12.182.70:10924] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "ahRAk_MUa83fc4GDyBx7tgAAAVY"]
[Mon May 25 20:29:10.229561 2026] [proxy_fcgi:error] [pid 62428:tid 62505] [client 20.12.182.70:11258] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:29:10.922045 2026] [proxy_fcgi:error] [pid 62428:tid 62493] [client 20.12.182.70:11258] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:29:11.777186 2026] [:error] [pid 62428:tid 62489] [client 20.12.182.70:11258] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/profile.php"] [unique_id "ahRAl5NosGBa7mui3VRVFAAAAIU"]
[Mon May 25 20:29:12.574687 2026] [:error] [pid 62426:tid 62434] [client 20.12.182.70:11221] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/profile.php"] [unique_id "ahRAmEj3D3Mo8ANpTRD-LgAAAAQ"]
[Mon May 25 20:29:13.095714 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:10845] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/profile.php"] [unique_id "ahRAmUj3D3Mo8ANpTRD-MQAAABM"]
[Mon May 25 20:29:13.690190 2026] [:error] [pid 62426:tid 62441] [client 20.12.182.70:11253] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/images/profile.php"] [unique_id "ahRAmUj3D3Mo8ANpTRD-MgAAAAs"]
[Mon May 25 20:29:14.312600 2026] [:error] [pid 62515:tid 62522] [client 20.12.182.70:11250] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/php-compat/index.php"] [unique_id "ahRAmhig0_XsOwmnrv84eQAAAMU"]
[Mon May 25 20:29:15.019330 2026] [:error] [pid 3698:tid 3708] [client 20.12.182.70:11222] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell20211028.php"] [unique_id "ahRAmwtZBEwA4fyFLKPwhQAAAQg"]
[Mon May 25 20:29:15.844147 2026] [:error] [pid 62428:tid 62502] [client 20.12.182.70:11219] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell20211028.php"] [unique_id "ahRAm5NosGBa7mui3VRVGQAAAJI"]
[Mon May 25 20:29:16.604942 2026] [:error] [pid 62427:tid 62464] [client 20.12.182.70:11147] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell20211028.php"] [unique_id "ahRAnPMUa83fc4GDyBx7uAAAAUc"]
[Mon May 25 20:29:17.208392 2026] [:error] [pid 62427:tid 62457] [client 20.12.182.70:11168] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/shell20211028.php"] [unique_id "ahRAnfMUa83fc4GDyBx7ugAAAUA"]
[Mon May 25 20:29:17.651214 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:11263] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahRAnaM6ssnLWYf6CVBKKQAAAEw"]
[Mon May 25 20:29:18.028904 2026] [:error] [pid 62722:tid 62728] [client 20.12.182.70:10830] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahRAnqM6ssnLWYf6CVBKKgAAAEQ"]
[Mon May 25 20:29:18.584467 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:11087] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahRAnpNosGBa7mui3VRVIgAAAJc"]
[Mon May 25 20:29:19.217387 2026] [:error] [pid 53791:tid 53795] [client 20.12.182.70:11198] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/bolt.php"] [unique_id "ahRAnyCRhhNTD40Nf1UZmgAAAYI"]
[Mon May 25 20:29:19.918088 2026] [:error] [pid 62426:tid 62453] [client 20.12.182.70:11018] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "ahRAn0j3D3Mo8ANpTRD-QgAAABc"]
[Mon May 25 20:29:20.636685 2026] [:error] [pid 62515:tid 62520] [client 20.12.182.70:11259] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "ahRAoBig0_XsOwmnrv84fQAAAMM"]
[Mon May 25 20:29:21.211214 2026] [:error] [pid 62427:tid 62469] [client 20.12.182.70:11234] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "ahRAofMUa83fc4GDyBx7vQAAAUw"]
[Mon May 25 20:29:21.932571 2026] [:error] [pid 62427:tid 62477] [client 20.12.182.70:11261] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/ai1wm-backups/"] [unique_id "ahRAofMUa83fc4GDyBx7vwAAAVQ"]
[Mon May 25 20:29:22.557531 2026] [:error] [pid 53791:tid 53807] [client 20.12.182.70:11260] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "ahRAoiCRhhNTD40Nf1UZnwAAAY4"]
[Mon May 25 20:29:23.042130 2026] [:error] [pid 53791:tid 53796] [client 20.12.182.70:10990] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "ahRAoyCRhhNTD40Nf1UZoQAAAYM"]
[Mon May 25 20:29:23.612952 2026] [:error] [pid 53791:tid 53800] [client 20.12.182.70:10801] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "ahRAoyCRhhNTD40Nf1UZowAAAYc"]
[Mon May 25 20:29:25.501573 2026] [:error] [pid 3698:tid 3716] [client 20.12.182.70:11223] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ava.php"] [unique_id "ahRApQtZBEwA4fyFLKPwjwAAARA"]
[Mon May 25 20:29:27.453626 2026] [:error] [pid 62428:tid 62507] [client 20.12.182.70:11181] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "ahRAp5NosGBa7mui3VRVQAAAAJc"]
[Mon May 25 20:29:29.393356 2026] [:error] [pid 62428:tid 62495] [client 20.12.182.70:11227] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ahRAqZNosGBa7mui3VRVQgAAAIs"]
[Mon May 25 20:29:36.622593 2026] [:error] [pid 62515:tid 62518] [client 20.12.182.70:11220] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "ahRAsBig0_XsOwmnrv84mwAAAME"]
[Mon May 25 20:29:37.189898 2026] [:error] [pid 62515:tid 62527] [client 20.12.182.70:11249] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "ahRAsRig0_XsOwmnrv84nAAAAMo"]
[Mon May 25 20:29:38.493149 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11095] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "ahRAspNosGBa7mui3VRVTQAAAI8"]
[Mon May 25 20:29:39.504582 2026] [:error] [pid 62427:tid 62465] [client 20.12.182.70:11121] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "ahRAs_MUa83fc4GDyBx70wAAAUg"]
[Mon May 25 20:29:41.202473 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:11203] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/app.php"] [unique_id "ahRAtZNosGBa7mui3VRVUAAAAIY"]
[Mon May 25 20:29:42.452084 2026] [:error] [pid 3698:tid 3722] [client 20.12.182.70:11174] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ahRAtgtZBEwA4fyFLKPwnAAAARY"]
[Mon May 25 20:29:43.496160 2026] [:error] [pid 62515:tid 62534] [client 20.12.182.70:11199] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ahRAtxig0_XsOwmnrv84nwAAANE"]
[Mon May 25 20:29:44.274902 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11196] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ahRAuBig0_XsOwmnrv84oAAAAMA"]
[Mon May 25 20:29:45.295603 2026] [:error] [pid 62515:tid 62527] [client 20.12.182.70:11131] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/file2.php"] [unique_id "ahRAuRig0_XsOwmnrv84pQAAAMo"]
[Mon May 25 20:29:46.022993 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:10856] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/radio.php"] [unique_id "ahRAukj3D3Mo8ANpTRD-TgAAAAo"]
[Mon May 25 20:29:46.506583 2026] [:error] [pid 62722:tid 62731] [client 20.12.182.70:11209] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/radio.php"] [unique_id "ahRAuqM6ssnLWYf6CVBKOwAAAEc"]
[Mon May 25 20:29:46.998469 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:11108] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/radio.php"] [unique_id "ahRAuhig0_XsOwmnrv84qQAAAM8"]
[Mon May 25 20:29:47.936120 2026] [:error] [pid 53791:tid 53817] [client 20.12.182.70:11139] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/cgi-bin/radio.php"] [unique_id "ahRAuyCRhhNTD40Nf1UZrQAAAZg"]
[Mon May 25 20:29:48.395206 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11237] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "ahRAvJNosGBa7mui3VRVVgAAAIw"]
[Mon May 25 20:29:48.815183 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:11167] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api.php"] [unique_id "ahRAvJNosGBa7mui3VRVVwAAAJY"]
[Mon May 25 20:29:49.441524 2026] [:error] [pid 62722:tid 62739] [client 20.12.182.70:10764] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api.php"] [unique_id "ahRAvaM6ssnLWYf6CVBKPgAAAE8"]
[Mon May 25 20:29:50.013643 2026] [:error] [pid 62428:tid 62486] [client 20.12.182.70:11114] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api.php"] [unique_id "ahRAvpNosGBa7mui3VRVWQAAAII"]
[Mon May 25 20:29:50.565058 2026] [:error] [pid 62426:tid 62434] [client 20.12.182.70:10900] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/api.php"] [unique_id "ahRAvkj3D3Mo8ANpTRD-UQAAAAQ"]
[Mon May 25 20:29:51.045092 2026] [:error] [pid 62722:tid 62727] [client 20.12.182.70:11170] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/"] [unique_id "ahRAv6M6ssnLWYf6CVBKQQAAAEM"]
[Mon May 25 20:29:51.591671 2026] [:error] [pid 62515:tid 62526] [client 20.12.182.70:11178] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/"] [unique_id "ahRAvxig0_XsOwmnrv84rgAAAMk"]
[Mon May 25 20:29:52.098604 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11145] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/"] [unique_id "ahRAwJNosGBa7mui3VRVXwAAAIA"]
[Mon May 25 20:29:52.760581 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11211] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Requests/library/"] [unique_id "ahRAwJNosGBa7mui3VRVYwAAAIw"]
[Mon May 25 20:29:53.386194 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:11100] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/"] [unique_id "ahRAwZNosGBa7mui3VRVZQAAAJY"]
[Mon May 25 20:29:53.974445 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:11162] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/"] [unique_id "ahRAwZNosGBa7mui3VRVaAAAAI0"]
[Mon May 25 20:29:54.429391 2026] [:error] [pid 62426:tid 62454] [client 20.12.182.70:11212] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/"] [unique_id "ahRAwkj3D3Mo8ANpTRD-VAAAABg"]
[Mon May 25 20:29:54.919799 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11189] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/images/"] [unique_id "ahRAwpNosGBa7mui3VRVbgAAAJA"]
[Mon May 25 20:29:55.380565 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11159] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "ahRAw5NosGBa7mui3VRVcAAAAIw"]
[Mon May 25 20:29:55.824818 2026] [:error] [pid 53791:tid 53799] [client 20.12.182.70:11179] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "ahRAwyCRhhNTD40Nf1UZsAAAAYY"]
[Mon May 25 20:29:56.323715 2026] [:error] [pid 53791:tid 53813] [client 20.12.182.70:11232] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "ahRAxCCRhhNTD40Nf1UZsQAAAZQ"]
[Mon May 25 20:29:56.739547 2026] [:error] [pid 62722:tid 62736] [client 20.12.182.70:11106] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/x.php"] [unique_id "ahRAxKM6ssnLWYf6CVBKQwAAAEw"]
[Mon May 25 20:29:57.150625 2026] [:error] [pid 62515:tid 62522] [client 20.12.182.70:11240] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahRAxRig0_XsOwmnrv84sAAAAMU"]
[Mon May 25 20:29:57.625403 2026] [:error] [pid 53791:tid 53806] [client 20.12.182.70:10792] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahRAxSCRhhNTD40Nf1UZtwAAAY0"]
[Mon May 25 20:29:58.155284 2026] [:error] [pid 53791:tid 53805] [client 20.12.182.70:11060] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahRAxiCRhhNTD40Nf1UZuQAAAYw"]
[Mon May 25 20:29:58.874618 2026] [:error] [pid 3698:tid 3719] [client 20.12.182.70:11160] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/admin.php"] [unique_id "ahRAxgtZBEwA4fyFLKPwoQAAARM"]
[Mon May 25 20:29:59.883136 2026] [:error] [pid 62427:tid 62476] [client 20.12.182.70:11082] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "ahRAx_MUa83fc4GDyBx71wAAAVM"]
[Mon May 25 20:30:01.065987 2026] [:error] [pid 62427:tid 62470] [client 20.12.182.70:11146] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "ahRAyfMUa83fc4GDyBx72gAAAU0"]
[Mon May 25 20:30:02.108732 2026] [:error] [pid 62515:tid 62519] [client 20.12.182.70:11251] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "ahRAyhig0_XsOwmnrv84swAAAMI"]
[Mon May 25 20:30:02.679201 2026] [:error] [pid 62427:tid 62460] [client 20.12.182.70:11128] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/js/widgets/"] [unique_id "ahRAyvMUa83fc4GDyBx72wAAAUM"]
[Mon May 25 20:30:03.476350 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:11262] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css.php"] [unique_id "ahRAyxig0_XsOwmnrv84twAAAM8"]
[Mon May 25 20:30:04.111470 2026] [:error] [pid 62515:tid 62524] [client 20.12.182.70:11187] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "ahRAzBig0_XsOwmnrv84ugAAAMc"]
[Mon May 25 20:30:04.656920 2026] [:error] [pid 62515:tid 62521] [client 20.12.182.70:11236] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "ahRAzBig0_XsOwmnrv84uwAAAMQ"]
[Mon May 25 20:30:05.087597 2026] [:error] [pid 62426:tid 62438] [client 20.12.182.70:11190] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/gecko.php"] [unique_id "ahRAzUj3D3Mo8ANpTRD-XQAAAAg"]
[Mon May 25 20:30:05.704036 2026] [:error] [pid 62515:tid 62539] [client 20.12.182.70:11132] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "ahRAzRig0_XsOwmnrv84vQAAANY"]
[Mon May 25 20:30:06.264064 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:11206] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "ahRAzgtZBEwA4fyFLKPwpwAAAQI"]
[Mon May 25 20:30:06.821966 2026] [:error] [pid 62515:tid 62522] [client 20.12.182.70:11134] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "ahRAzhig0_XsOwmnrv84vgAAAMU"]
[Mon May 25 20:30:07.611131 2026] [:error] [pid 62722:tid 62743] [client 20.12.182.70:11112] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "ahRAz6M6ssnLWYf6CVBKRQAAAFM"]
[Mon May 25 20:30:08.329825 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11150] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/"] [unique_id "ahRA0Big0_XsOwmnrv84wQAAAMA"]
[Mon May 25 20:30:09.355633 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:10785] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/pomo/"] [unique_id "ahRA0QtZBEwA4fyFLKPwqgAAAQ8"]
[Mon May 25 20:30:12.566527 2026] [:error] [pid 62427:tid 62461] [client 20.12.182.70:11186] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ahRA1PMUa83fc4GDyBx74gAAAUQ"]
[Mon May 25 20:30:14.184041 2026] [proxy_fcgi:error] [pid 62426:tid 62430] [client 20.12.182.70:11166] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:30:14.494662 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:11166] [client 20.12.182.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourbrand.com"] [uri "/wp-includes/customize/about.php"] [unique_id "ahRA1kj3D3Mo8ANpTRD-agAAABM"]
[Mon May 25 20:30:16.905561 2026] [proxy_fcgi:error] [pid 3698:tid 3708] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:30:18.047410 2026] [proxy_fcgi:error] [pid 3698:tid 3703] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:30:18.283671 2026] [proxy_fcgi:error] [pid 3698:tid 3704] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:30:18.569997 2026] [proxy_fcgi:error] [pid 3698:tid 3723] [client 20.12.182.70:11242] AH01071: Got error 'Primary script unknown'
[Mon May 25 20:30:19.280509 2026] [:error] [pid 3698:tid 3713] [client 20.12.182.70:11242] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahRA2wtZBEwA4fyFLKPwvwAAAQ0"]
[Mon May 25 20:30:20.533481 2026] [:error] [pid 62428:tid 62504] [client 20.12.182.70:11161] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahRA3JNosGBa7mui3VRVgAAAAJQ"]
[Mon May 25 20:30:21.298696 2026] [:error] [pid 62426:tid 62436] [client 20.12.182.70:11173] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahRA3Uj3D3Mo8ANpTRD-cwAAAAY"]
[Mon May 25 20:30:21.985034 2026] [:error] [pid 62426:tid 62452] [client 20.12.182.70:11157] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/inputs.php"] [unique_id "ahRA3Uj3D3Mo8ANpTRD-dQAAABY"]
[Mon May 25 20:30:22.792137 2026] [:error] [pid 62428:tid 62484] [client 20.12.182.70:11153] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahRA3pNosGBa7mui3VRVhAAAAIA"]
[Mon May 25 20:30:23.690992 2026] [:error] [pid 62428:tid 62499] [client 20.12.182.70:11088] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahRA35NosGBa7mui3VRVhgAAAI8"]
[Mon May 25 20:30:24.402644 2026] [:error] [pid 3698:tid 3717] [client 20.12.182.70:11210] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahRA4AtZBEwA4fyFLKPwzQAAARE"]
[Mon May 25 20:30:25.202596 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:11239] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "ahRA4QtZBEwA4fyFLKPwzgAAAQI"]
[Mon May 25 20:30:25.674649 2026] [:error] [pid 53791:tid 53803] [client 20.12.182.70:11074] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "ahRA4SCRhhNTD40Nf1UZwAAAAYo"]
[Mon May 25 20:30:26.618914 2026] [:error] [pid 62426:tid 62433] [client 20.12.182.70:11252] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "ahRA4kj3D3Mo8ANpTRD-eAAAAAM"]
[Mon May 25 20:30:27.456750 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:11255] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "ahRA40j3D3Mo8ANpTRD-egAAABM"]
[Mon May 25 20:30:28.136470 2026] [:error] [pid 62722:tid 62731] [client 20.12.182.70:10912] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/index.php"] [unique_id "ahRA5KM6ssnLWYf6CVBKWQAAAEc"]
[Mon May 25 20:30:28.890707 2026] [:error] [pid 62722:tid 62733] [client 20.12.182.70:11176] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "ahRA5KM6ssnLWYf6CVBKWgAAAEk"]
[Mon May 25 20:30:29.375933 2026] [:error] [pid 62426:tid 62447] [client 20.12.182.70:11144] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "ahRA5Uj3D3Mo8ANpTRD-gAAAABE"]
[Mon May 25 20:30:29.759195 2026] [:error] [pid 62426:tid 62436] [client 20.12.182.70:11041] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "ahRA5Uj3D3Mo8ANpTRD-gQAAAAY"]
[Mon May 25 20:30:30.236475 2026] [:error] [pid 62426:tid 62446] [client 20.12.182.70:11207] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "ahRA5kj3D3Mo8ANpTRD-hAAAABA"]
[Mon May 25 20:30:30.703814 2026] [:error] [pid 3698:tid 3700] [client 20.12.182.70:10905] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/admin.php"] [unique_id "ahRA5gtZBEwA4fyFLKPw0gAAAQA"]
[Mon May 25 20:30:31.277371 2026] [:error] [pid 62428:tid 62493] [client 20.12.182.70:11017] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/admin.php"] [unique_id "ahRA55NosGBa7mui3VRVlQAAAIk"]
[Mon May 25 20:30:31.703901 2026] [:error] [pid 62515:tid 62536] [client 20.12.182.70:11072] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/admin.php"] [unique_id "ahRA5xig0_XsOwmnrv84yQAAANM"]
[Mon May 25 20:30:32.183190 2026] [:error] [pid 62428:tid 62491] [client 20.12.182.70:10953] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/css/admin.php"] [unique_id "ahRA6JNosGBa7mui3VRVmAAAAIc"]
[Mon May 25 20:30:32.842143 2026] [:error] [pid 62426:tid 62430] [client 20.12.182.70:11184] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "ahRA6Ej3D3Mo8ANpTRD-kAAAAAA"]
[Mon May 25 20:30:33.275074 2026] [:error] [pid 62428:tid 62503] [client 20.12.182.70:11182] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "ahRA6ZNosGBa7mui3VRVnAAAAJM"]
[Mon May 25 20:30:33.914061 2026] [:error] [pid 62428:tid 62487] [client 20.12.182.70:11048] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "ahRA6ZNosGBa7mui3VRVngAAAIM"]
[Mon May 25 20:30:34.371971 2026] [:error] [pid 62428:tid 62506] [client 20.12.182.70:11092] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wso.php"] [unique_id "ahRA6pNosGBa7mui3VRVoAAAAJY"]
[Mon May 25 20:30:35.119280 2026] [:error] [pid 62426:tid 62448] [client 20.12.182.70:11090] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/FII.php"] [unique_id "ahRA60j3D3Mo8ANpTRD-mAAAABI"]
[Mon May 25 20:30:35.769233 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11043] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/FII.php"] [unique_id "ahRA65NosGBa7mui3VRVpAAAAJA"]
[Mon May 25 20:30:36.295611 2026] [:error] [pid 62426:tid 62431] [client 20.12.182.70:11213] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/FII.php"] [unique_id "ahRA7Ej3D3Mo8ANpTRD-nQAAAAE"]
[Mon May 25 20:30:37.301051 2026] [:error] [pid 62428:tid 62492] [client 20.12.182.70:11049] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/FII.php"] [unique_id "ahRA7ZNosGBa7mui3VRVpwAAAIg"]
[Mon May 25 20:30:37.769685 2026] [:error] [pid 3698:tid 3714] [client 20.12.182.70:11244] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kyami.php"] [unique_id "ahRA7QtZBEwA4fyFLKPw0wAAAQ4"]
[Mon May 25 20:30:38.364848 2026] [:error] [pid 62722:tid 62725] [client 20.12.182.70:11109] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kyami.php"] [unique_id "ahRA7qM6ssnLWYf6CVBKYQAAAEE"]
[Mon May 25 20:30:39.054169 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:11089] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kyami.php"] [unique_id "ahRA7wtZBEwA4fyFLKPw1AAAAQI"]
[Mon May 25 20:30:39.621280 2026] [:error] [pid 3698:tid 3712] [client 20.12.182.70:11096] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/kyami.php"] [unique_id "ahRA7wtZBEwA4fyFLKPw1wAAAQw"]
[Mon May 25 20:30:40.448486 2026] [:error] [pid 62722:tid 62748] [client 20.12.182.70:11117] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "ahRA8KM6ssnLWYf6CVBKZgAAAFg"]
[Mon May 25 20:30:41.171273 2026] [:error] [pid 62515:tid 62531] [client 20.12.182.70:11205] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "ahRA8Rig0_XsOwmnrv84zQAAAM4"]
[Mon May 25 20:30:41.910291 2026] [:error] [pid 62515:tid 62517] [client 20.12.182.70:11124] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "ahRA8Rig0_XsOwmnrv84zwAAAMA"]
[Mon May 25 20:30:42.602603 2026] [:error] [pid 62515:tid 62527] [client 20.12.182.70:11085] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/default.php"] [unique_id "ahRA8hig0_XsOwmnrv840AAAAMo"]
[Mon May 25 20:30:43.585499 2026] [:error] [pid 62428:tid 62485] [client 20.12.182.70:11110] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "ahRA85NosGBa7mui3VRVrAAAAIE"]
[Mon May 25 20:30:44.014148 2026] [:error] [pid 62428:tid 62501] [client 20.12.182.70:11015] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "ahRA9JNosGBa7mui3VRVrQAAAJE"]
[Mon May 25 20:30:44.432948 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11066] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "ahRA9Big0_XsOwmnrv841wAAANU"]
[Mon May 25 20:30:44.859629 2026] [:error] [pid 62515:tid 62521] [client 20.12.182.70:11164] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "ahRA9Big0_XsOwmnrv842gAAAMQ"]
[Mon May 25 20:30:45.574855 2026] [:error] [pid 62722:tid 62732] [client 20.12.182.70:11042] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ahRA9aM6ssnLWYf6CVBKaQAAAEg"]
[Mon May 25 20:30:46.006560 2026] [:error] [pid 62515:tid 62537] [client 20.12.182.70:11192] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ahRA9hig0_XsOwmnrv843AAAANQ"]
[Mon May 25 20:30:46.986092 2026] [:error] [pid 62515:tid 62534] [client 20.12.182.70:11185] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ahRA9hig0_XsOwmnrv844QAAANE"]
[Mon May 25 20:30:47.809658 2026] [:error] [pid 62428:tid 62496] [client 20.12.182.70:11105] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/includes/index.php"] [unique_id "ahRA95NosGBa7mui3VRVrgAAAIw"]
[Mon May 25 20:30:48.605988 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:11113] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file.php"] [unique_id "ahRA-JNosGBa7mui3VRVsAAAAIY"]
[Mon May 25 20:30:49.252772 2026] [:error] [pid 62515:tid 62538] [client 20.12.182.70:11123] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file.php"] [unique_id "ahRA-Rig0_XsOwmnrv845AAAANU"]
[Mon May 25 20:30:49.953135 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:11256] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file.php"] [unique_id "ahRA-ZNosGBa7mui3VRVswAAAI0"]
[Mon May 25 20:30:50.511563 2026] [:error] [pid 3698:tid 3702] [client 20.12.182.70:10886] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/file.php"] [unique_id "ahRA-gtZBEwA4fyFLKPw3gAAAQI"]
[Mon May 25 20:30:51.005904 2026] [:error] [pid 3698:tid 3717] [client 20.12.182.70:11171] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "ahRA-wtZBEwA4fyFLKPw4AAAARE"]
[Mon May 25 20:30:51.517481 2026] [:error] [pid 62426:tid 62442] [client 20.12.182.70:11152] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "ahRA-0j3D3Mo8ANpTRD-ygAAAAw"]
[Mon May 25 20:30:51.943275 2026] [:error] [pid 62428:tid 62491] [client 20.12.182.70:11086] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "ahRA-5NosGBa7mui3VRVuQAAAIc"]
[Mon May 25 20:30:52.627995 2026] [:error] [pid 62428:tid 62485] [client 20.12.182.70:11013] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/mar.php"] [unique_id "ahRA_JNosGBa7mui3VRVvAAAAIE"]
[Mon May 25 20:30:53.036808 2026] [:error] [pid 62427:tid 62472] [client 20.12.182.70:11084] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "ahRA_fMUa83fc4GDyBx75AAAAU8"]
[Mon May 25 20:30:53.739925 2026] [:error] [pid 62426:tid 62445] [client 20.12.182.70:11050] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "ahRA_Uj3D3Mo8ANpTRD-0QAAAA8"]
[Mon May 25 20:30:54.229697 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:11156] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "ahRA_kj3D3Mo8ANpTRD-1QAAAAo"]
[Mon May 25 20:30:54.832856 2026] [:error] [pid 62428:tid 62497] [client 20.12.182.70:11094] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-links.php"] [unique_id "ahRA_pNosGBa7mui3VRVwgAAAI0"]
[Mon May 25 20:30:55.472302 2026] [:error] [pid 62515:tid 62535] [client 20.12.182.70:11031] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/"] [unique_id "ahRA_xig0_XsOwmnrv845gAAANI"]
[Mon May 25 20:30:55.963741 2026] [:error] [pid 62428:tid 62485] [client 20.12.182.70:10959] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/"] [unique_id "ahRA_5NosGBa7mui3VRVxAAAAIE"]
[Mon May 25 20:30:56.603590 2026] [:error] [pid 62428:tid 62500] [client 20.12.182.70:11136] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/"] [unique_id "ahRBAJNosGBa7mui3VRVxgAAAJA"]
[Mon May 25 20:30:57.070327 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11037] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/"] [unique_id "ahRBAQtZBEwA4fyFLKPw5AAAAQ8"]
[Mon May 25 20:30:57.941489 2026] [:error] [pid 62426:tid 62430] [client 20.12.182.70:11027] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ahRBAUj3D3Mo8ANpTRD-5AAAAAA"]
[Mon May 25 20:30:58.562442 2026] [:error] [pid 62426:tid 62440] [client 20.12.182.70:10882] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ahRBAkj3D3Mo8ANpTRD-6AAAAAo"]
[Mon May 25 20:30:59.067100 2026] [:error] [pid 62722:tid 62748] [client 20.12.182.70:11204] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ahRBA6M6ssnLWYf6CVBKbwAAAFg"]
[Mon May 25 20:30:59.826750 2026] [:error] [pid 62426:tid 62432] [client 20.12.182.70:11033] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/maint/admin.php"] [unique_id "ahRBA0j3D3Mo8ANpTRD-8AAAAAI"]
[Mon May 25 20:31:00.331900 2026] [:error] [pid 62426:tid 62437] [client 20.12.182.70:11188] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "ahRBBEj3D3Mo8ANpTRD-8gAAAAc"]
[Mon May 25 20:31:00.762711 2026] [:error] [pid 62515:tid 62540] [client 20.12.182.70:10949] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "ahRBBBig0_XsOwmnrv846wAAANc"]
[Mon May 25 20:31:01.232037 2026] [:error] [pid 62428:tid 62490] [client 20.12.182.70:11133] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "ahRBBZNosGBa7mui3VRVzgAAAIY"]
[Mon May 25 20:31:01.745896 2026] [:error] [pid 62426:tid 62435] [client 20.12.182.70:11107] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-admin/about.php"] [unique_id "ahRBBUj3D3Mo8ANpTRD--AAAAAU"]
[Mon May 25 20:31:02.265495 2026] [:error] [pid 62426:tid 62433] [client 20.12.182.70:11016] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "ahRBBkj3D3Mo8ANpTRD--wAAAAM"]
[Mon May 25 20:31:02.742527 2026] [:error] [pid 62426:tid 62449] [client 20.12.182.70:11076] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "ahRBBkj3D3Mo8ANpTRD-_wAAABM"]
[Mon May 25 20:31:03.121988 2026] [:error] [pid 62426:tid 62442] [client 20.12.182.70:11056] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "ahRBB0j3D3Mo8ANpTRD_AwAAAAw"]
[Mon May 25 20:31:03.935536 2026] [:error] [pid 53791:tid 53797] [client 20.12.182.70:11111] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/themes/"] [unique_id "ahRBByCRhhNTD40Nf1UZzgAAAYQ"]
[Mon May 25 20:31:04.958082 2026] [:error] [pid 62428:tid 62494] [client 20.12.182.70:11059] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "ahRBCJNosGBa7mui3VRV1AAAAIo"]
[Mon May 25 20:31:05.351117 2026] [:error] [pid 62428:tid 62486] [client 20.12.182.70:11127] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "ahRBCZNosGBa7mui3VRV1gAAAII"]
[Mon May 25 20:31:05.895982 2026] [:error] [pid 53791:tid 53811] [client 20.12.182.70:11197] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "ahRBCSCRhhNTD40Nf1UZ0gAAAZI"]
[Mon May 25 20:31:06.318776 2026] [:error] [pid 62427:tid 62478] [client 20.12.182.70:11081] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "ahRBCvMUa83fc4GDyBx75QAAAVU"]
[Mon May 25 20:31:06.866154 2026] [:error] [pid 62515:tid 62532] [client 20.12.182.70:11024] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/theme.php"] [unique_id "ahRBChig0_XsOwmnrv847QAAAM8"]
[Mon May 25 20:31:07.482452 2026] [:error] [pid 62515:tid 62529] [client 20.12.182.70:10920] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/theme.php"] [unique_id "ahRBCxig0_XsOwmnrv847gAAAMw"]
[Mon May 25 20:31:07.873484 2026] [:error] [pid 62427:tid 62468] [client 20.12.182.70:11214] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/theme.php"] [unique_id "ahRBC_MUa83fc4GDyBx76AAAAUs"]
[Mon May 25 20:31:08.351962 2026] [:error] [pid 62426:tid 62436] [client 20.12.182.70:11032] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/theme.php"] [unique_id "ahRBDEj3D3Mo8ANpTRD_DgAAAAY"]
[Mon May 25 20:31:08.929907 2026] [:error] [pid 62426:tid 62452] [client 20.12.182.70:11080] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sim.php"] [unique_id "ahRBDEj3D3Mo8ANpTRD_DwAAABY"]
[Mon May 25 20:31:09.476044 2026] [:error] [pid 3698:tid 3715] [client 20.12.182.70:11077] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sim.php"] [unique_id "ahRBDQtZBEwA4fyFLKPw7wAAAQ8"]
[Mon May 25 20:31:10.168618 2026] [:error] [pid 62427:tid 62457] [client 20.12.182.70:11036] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sim.php"] [unique_id "ahRBDvMUa83fc4GDyBx76gAAAUA"]
[Mon May 25 20:31:10.983837 2026] [:error] [pid 3698:tid 3722] [client 20.12.182.70:11201] [client 20.12.182.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/sim.php"] [unique_id "ahRBDgtZBEwA4fyFLKPw8wAAARY"]
[Tue May 26 11:58:32.351173 2026] [:error] [pid 55988:tid 56013] [client 43.153.107.22:47394] [client 43.153.107.22] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourbrand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahUaaP3kVIz2sql52sfrfQAAARY"]
[Tue May 26 17:05:08.761365 2026] [:error] [pid 39336:tid 39362] [client 34.11.17.55:58324] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/"] [unique_id "ahViRNwmp9MmyaRNgiBzhAAAAVc"]
[Tue May 26 17:05:09.211692 2026] [:error] [pid 55988:tid 55993] [client 34.11.17.55:59565] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRf3kVIz2sql52sdiCwAAAQI"]
[Tue May 26 17:05:09.639974 2026] [:error] [pid 55988:tid 56015] [client 34.11.17.55:59343] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourbrand.com"] [uri "/feed/"] [unique_id "ahViRf3kVIz2sql52sdiIgAAARg"]
[Tue May 26 17:32:33.159717 2026] [:error] [pid 36497:tid 36527] [client 88.176.24.19:31640] [client 88.176.24.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.176.24.19, incrementing ddos counter"] [hostname "measureyourbrand.com"] [uri "/xmlrpc.php"] [unique_id "ahVosbjKQWM1gBmBY4h-_gAAANE"]
[Tue May 26 17:32:33.170009 2026] [proxy_fcgi:error] [pid 36497:tid 36527] [client 88.176.24.19:31640] AH01071: Got error 'Primary script unknown'
[Tue May 26 18:28:45.342897 2026] [autoindex:error] [pid 36497:tid 36534] [client 89.110.109.74:33956] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourbrand.com/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive